November 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2020:1891-1: moderate: Recommended update for SUSEConnect
by maintenance＠opensuse.org 10 Nov '20

10 Nov '20

openSUSE Recommended Update: Recommended update for SUSEConnect ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1891-1 Rating: moderate References: #1155027 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for SUSEConnect fixes the following issues: - Recognize more formats when parsing the '.curlrc' for proxy credentials. (bsc#1155027) - Add 'rpmlintrc' to filter false-positive warning about patch not applied - Extend the YaST API in order to access to the package search functionality. (jsc#SLE-9109) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1891=1 Package List: - openSUSE Leap 15.2 (x86_64): SUSEConnect-0.3.28-lp152.2.3.1 References: https://bugzilla.suse.com/1155027

1 0

openSUSE-RU-2020:1890-1: moderate: Recommended update for torbrowser-launcher
by maintenance＠opensuse.org 10 Nov '20

10 Nov '20

openSUSE Recommended Update: Recommended update for torbrowser-launcher ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1890-1 Rating: moderate References: #1178299 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for torbrowser-launcher fixes the following issues: - Add new non-expired signing key: tor-browser-developers.asc - Add torbrowser-launcher-version-check.patch to fix version checking so that torbrowser version 10.0 is not treated as older than version 9.x [boo#1178299]. This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1890=1 Package List: - openSUSE Backports SLE-15-SP1 (noarch): torbrowser-apparmor-profile-0.3.1-bp151.4.3.1 torbrowser-launcher-0.3.1-bp151.4.3.1 torbrowser-launcher-lang-0.3.1-bp151.4.3.1 References: https://bugzilla.suse.com/1178299

1 0

openSUSE-RU-2020:1889-1: moderate: Recommended update for ca-certificates-mozilla
by maintenance＠opensuse.org 10 Nov '20

10 Nov '20

openSUSE Recommended Update: Recommended update for ca-certificates-mozilla ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1889-1 Rating: moderate References: #1177864 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ca-certificates-mozilla fixes the following issues: The SSL Root CA store was updated to the 2.44 state of the Mozilla NSS Certificate store (bsc#1177864) - Removed CAs: - EE Certification Centre Root CA - Taiwan GRCA - Added CAs: - Trustwave Global Certification Authority - Trustwave Global ECC P256 Certification Authority - Trustwave Global ECC P384 Certification Authority This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1889=1 Package List: - openSUSE Leap 15.1 (noarch): ca-certificates-mozilla-2.44-lp151.2.12.1 References: https://bugzilla.suse.com/1177864

1 0

openSUSE-RU-2020:1887-1: moderate: Recommended update for adcli and sssd
by maintenance＠opensuse.org 09 Nov '20

09 Nov '20

openSUSE Recommended Update: Recommended update for adcli and sssd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1887-1 Rating: moderate References: Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for adcli and ssd fixes the following issues: - Update samba secrets database after changing the machine password. (jsc#ECO-2613) Only for adcli: - Implement support for 'testjoin' command. (jsc#SLE-11503) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1887=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): adcli-0.8.2-lp151.2.9.1 adcli-debuginfo-0.8.2-lp151.2.9.1 adcli-debugsource-0.8.2-lp151.2.9.1 adcli-doc-0.8.2-lp151.2.9.1 libipa_hbac-devel-1.16.1-lp151.7.19.1 libipa_hbac0-1.16.1-lp151.7.19.1 libipa_hbac0-debuginfo-1.16.1-lp151.7.19.1 libnfsidmap-sss-1.16.1-lp151.7.19.1 libnfsidmap-sss-debuginfo-1.16.1-lp151.7.19.1 libsss_certmap-devel-1.16.1-lp151.7.19.1 libsss_certmap0-1.16.1-lp151.7.19.1 libsss_certmap0-debuginfo-1.16.1-lp151.7.19.1 libsss_idmap-devel-1.16.1-lp151.7.19.1 libsss_idmap0-1.16.1-lp151.7.19.1 libsss_idmap0-debuginfo-1.16.1-lp151.7.19.1 libsss_nss_idmap-devel-1.16.1-lp151.7.19.1 libsss_nss_idmap0-1.16.1-lp151.7.19.1 libsss_nss_idmap0-debuginfo-1.16.1-lp151.7.19.1 libsss_simpleifp-devel-1.16.1-lp151.7.19.1 libsss_simpleifp0-1.16.1-lp151.7.19.1 libsss_simpleifp0-debuginfo-1.16.1-lp151.7.19.1 python3-ipa_hbac-1.16.1-lp151.7.19.1 python3-ipa_hbac-debuginfo-1.16.1-lp151.7.19.1 python3-sss-murmur-1.16.1-lp151.7.19.1 python3-sss-murmur-debuginfo-1.16.1-lp151.7.19.1 python3-sss_nss_idmap-1.16.1-lp151.7.19.1 python3-sss_nss_idmap-debuginfo-1.16.1-lp151.7.19.1 python3-sssd-config-1.16.1-lp151.7.19.1 python3-sssd-config-debuginfo-1.16.1-lp151.7.19.1 sssd-1.16.1-lp151.7.19.1 sssd-ad-1.16.1-lp151.7.19.1 sssd-ad-debuginfo-1.16.1-lp151.7.19.1 sssd-dbus-1.16.1-lp151.7.19.1 sssd-dbus-debuginfo-1.16.1-lp151.7.19.1 sssd-debuginfo-1.16.1-lp151.7.19.1 sssd-debugsource-1.16.1-lp151.7.19.1 sssd-ipa-1.16.1-lp151.7.19.1 sssd-ipa-debuginfo-1.16.1-lp151.7.19.1 sssd-krb5-1.16.1-lp151.7.19.1 sssd-krb5-common-1.16.1-lp151.7.19.1 sssd-krb5-common-debuginfo-1.16.1-lp151.7.19.1 sssd-krb5-debuginfo-1.16.1-lp151.7.19.1 sssd-ldap-1.16.1-lp151.7.19.1 sssd-ldap-debuginfo-1.16.1-lp151.7.19.1 sssd-proxy-1.16.1-lp151.7.19.1 sssd-proxy-debuginfo-1.16.1-lp151.7.19.1 sssd-tools-1.16.1-lp151.7.19.1 sssd-tools-debuginfo-1.16.1-lp151.7.19.1 sssd-wbclient-1.16.1-lp151.7.19.1 sssd-wbclient-debuginfo-1.16.1-lp151.7.19.1 sssd-wbclient-devel-1.16.1-lp151.7.19.1 sssd-winbind-idmap-1.16.1-lp151.7.19.1 sssd-winbind-idmap-debuginfo-1.16.1-lp151.7.19.1 - openSUSE Leap 15.1 (x86_64): sssd-32bit-1.16.1-lp151.7.19.1 sssd-32bit-debuginfo-1.16.1-lp151.7.19.1 References:

1 0

openSUSE-SU-2020:1888-1: moderate: Security update for otrs
by opensuse-security＠opensuse.org 09 Nov '20

09 Nov '20

openSUSE Security Update: Security update for otrs ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1888-1 Rating: moderate References: #1178434 Cross-References: CVE-2020-11022 CVE-2020-11023 Affected Products: openSUSE Leap 15.2 openSUSE Leap 15.1 openSUSE Backports SLE-15-SP2 openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for otrs fixes the following issues: - otrs was updated to 6.0.30 (OSA-2020-14 boo#1178434) - CVE-2020-11022, CVE-2020-11023: Vulnerability in third-party library - jquery OTRS uses jquery version 3.4.1, which is vulnerable to cross-site scripting (XSS). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1888=1 - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1888=1 - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1888=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1888=1 Package List: - openSUSE Leap 15.2 (noarch): otrs-6.0.30-lp152.2.6.1 otrs-doc-6.0.30-lp152.2.6.1 otrs-itsm-6.0.30-lp152.2.6.1 - openSUSE Leap 15.1 (noarch): otrs-6.0.30-lp151.2.9.1 otrs-doc-6.0.30-lp151.2.9.1 otrs-itsm-6.0.30-lp151.2.9.1 - openSUSE Backports SLE-15-SP2 (noarch): otrs-6.0.30-bp152.2.11.1 otrs-doc-6.0.30-bp152.2.11.1 otrs-itsm-6.0.30-bp152.2.11.1 - openSUSE Backports SLE-15-SP1 (noarch): otrs-6.0.30-bp151.3.9.1 otrs-doc-6.0.30-bp151.3.9.1 otrs-itsm-6.0.30-bp151.3.9.1 References: https://www.suse.com/security/cve/CVE-2020-11022.html https://www.suse.com/security/cve/CVE-2020-11023.html https://bugzilla.suse.com/1178434

1 0

openSUSE-RU-2020:1886-1: moderate: Recommended update for SUSEConnect
by maintenance＠opensuse.org 09 Nov '20

09 Nov '20

openSUSE Recommended Update: Recommended update for SUSEConnect ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1886-1 Rating: moderate References: #1155027 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for SUSEConnect fixes the following issues: - Recognize more formats when parsing the '.curlrc' for proxy credentials. (bsc#1155027) - Add 'rpmlintrc' to filter false-positive warning about patch not applied - Extend the YaST API in order to access to the package search functionality. (jsc#SLE-9109) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1886=1 Package List: - openSUSE Leap 15.1 (x86_64): SUSEConnect-0.3.28-lp151.2.15.1 References: https://bugzilla.suse.com/1155027

1 0

openSUSE-RU-2020:1885-1: moderate: Recommended update for ca-certificates-mozilla
by maintenance＠opensuse.org 09 Nov '20

09 Nov '20

openSUSE Recommended Update: Recommended update for ca-certificates-mozilla ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1885-1 Rating: moderate References: #1177864 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ca-certificates-mozilla fixes the following issues: The SSL Root CA store was updated to the 2.44 state of the Mozilla NSS Certificate store (bsc#1177864) - Removed CAs: - EE Certification Centre Root CA - Taiwan GRCA - Added CAs: - Trustwave Global Certification Authority - Trustwave Global ECC P256 Certification Authority - Trustwave Global ECC P384 Certification Authority Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1885=1 Package List: - openSUSE Leap 15.2 (noarch): ca-certificates-mozilla-2.44-lp152.2.7.1 References: https://bugzilla.suse.com/1177864

1 0

openSUSE-SU-2020:1882-1: moderate: Security update for wireshark
by opensuse-security＠opensuse.org 09 Nov '20

09 Nov '20

openSUSE Security Update: Security update for wireshark ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1882-1 Rating: moderate References: #1175204 #1176908 #1176909 #1176910 Cross-References: CVE-2020-17498 CVE-2020-25862 CVE-2020-25863 CVE-2020-25866 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for wireshark fixes the following issues: - Update to wireshark 3.2.7: * CVE-2020-25863: MIME Multipart dissector crash (bsc#1176908) * CVE-2020-25862: TCP dissector crash (bsc#1176909) * CVE-2020-25866: BLIP dissector crash (bsc#1176910) * CVE-2020-17498: Kafka dissector crash (bsc#1175204) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1882=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libwireshark13-3.2.7-lp152.2.6.1 libwireshark13-debuginfo-3.2.7-lp152.2.6.1 libwiretap10-3.2.7-lp152.2.6.1 libwiretap10-debuginfo-3.2.7-lp152.2.6.1 libwsutil11-3.2.7-lp152.2.6.1 libwsutil11-debuginfo-3.2.7-lp152.2.6.1 wireshark-3.2.7-lp152.2.6.1 wireshark-debuginfo-3.2.7-lp152.2.6.1 wireshark-debugsource-3.2.7-lp152.2.6.1 wireshark-devel-3.2.7-lp152.2.6.1 wireshark-ui-qt-3.2.7-lp152.2.6.1 wireshark-ui-qt-debuginfo-3.2.7-lp152.2.6.1 References: https://www.suse.com/security/cve/CVE-2020-17498.html https://www.suse.com/security/cve/CVE-2020-25862.html https://www.suse.com/security/cve/CVE-2020-25863.html https://www.suse.com/security/cve/CVE-2020-25866.html https://bugzilla.suse.com/1175204 https://bugzilla.suse.com/1176908 https://bugzilla.suse.com/1176909 https://bugzilla.suse.com/1176910

1 0

openSUSE-SU-2020:1884-1: moderate: Security update for ImageMagick
by opensuse-security＠opensuse.org 09 Nov '20

09 Nov '20

openSUSE Security Update: Security update for ImageMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1884-1 Rating: moderate References: #1178067 Cross-References: CVE-2020-27560 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for ImageMagick fixes the following issues: - CVE-2020-27560: Fixed potential denial of service in OptimizeLayerFrames function in MagickCore/layer.c (bsc#1178067). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1884=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): ImageMagick-7.0.7.34-lp152.12.6.1 ImageMagick-config-7-SUSE-7.0.7.34-lp152.12.6.1 ImageMagick-config-7-upstream-7.0.7.34-lp152.12.6.1 ImageMagick-debuginfo-7.0.7.34-lp152.12.6.1 ImageMagick-debugsource-7.0.7.34-lp152.12.6.1 ImageMagick-devel-7.0.7.34-lp152.12.6.1 ImageMagick-extra-7.0.7.34-lp152.12.6.1 ImageMagick-extra-debuginfo-7.0.7.34-lp152.12.6.1 libMagick++-7_Q16HDRI4-7.0.7.34-lp152.12.6.1 libMagick++-7_Q16HDRI4-debuginfo-7.0.7.34-lp152.12.6.1 libMagick++-devel-7.0.7.34-lp152.12.6.1 libMagickCore-7_Q16HDRI6-7.0.7.34-lp152.12.6.1 libMagickCore-7_Q16HDRI6-debuginfo-7.0.7.34-lp152.12.6.1 libMagickWand-7_Q16HDRI6-7.0.7.34-lp152.12.6.1 libMagickWand-7_Q16HDRI6-debuginfo-7.0.7.34-lp152.12.6.1 perl-PerlMagick-7.0.7.34-lp152.12.6.1 perl-PerlMagick-debuginfo-7.0.7.34-lp152.12.6.1 - openSUSE Leap 15.2 (x86_64): ImageMagick-devel-32bit-7.0.7.34-lp152.12.6.1 libMagick++-7_Q16HDRI4-32bit-7.0.7.34-lp152.12.6.1 libMagick++-7_Q16HDRI4-32bit-debuginfo-7.0.7.34-lp152.12.6.1 libMagick++-devel-32bit-7.0.7.34-lp152.12.6.1 libMagickCore-7_Q16HDRI6-32bit-7.0.7.34-lp152.12.6.1 libMagickCore-7_Q16HDRI6-32bit-debuginfo-7.0.7.34-lp152.12.6.1 libMagickWand-7_Q16HDRI6-32bit-7.0.7.34-lp152.12.6.1 libMagickWand-7_Q16HDRI6-32bit-debuginfo-7.0.7.34-lp152.12.6.1 - openSUSE Leap 15.2 (noarch): ImageMagick-doc-7.0.7.34-lp152.12.6.1 References: https://www.suse.com/security/cve/CVE-2020-27560.html https://bugzilla.suse.com/1178067

1 0

openSUSE-RU-2020:1881-1: moderate: Recommended update for crmsh
by maintenance＠opensuse.org 09 Nov '20

09 Nov '20

openSUSE Recommended Update: Recommended update for crmsh ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1881-1 Rating: moderate References: #1122391 #1148874 #1165644 #1175708 #1177980 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: This update for crmsh fixes the following issues: - Converting deprecated 'score' in rsc_order to 'kind' (bsc#1122391) - Fixed a bug where crmsh exited with an error, even if the 'error' is actually a warning (bsc#1122391) - Fixed an issue where 'crm cluster remove node' didn't stop nor disable the hawk service on that node (bsc#1175708) - Checks now whether pacemaker.service and corosync.service are already running/stopped (bsc#1177980) - Fixed a bug where the node address was not removed from the corosync.conf file on node removal (bsc#1165644) - Collecting corosync.log in hb_report if it is defined in config file (bsc#1148874) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1881=1 Package List: - openSUSE Leap 15.2 (noarch): crmsh-4.2.0+git.1604052559.2a348644-lp152.4.31.1 crmsh-scripts-4.2.0+git.1604052559.2a348644-lp152.4.31.1 crmsh-test-4.2.0+git.1604052559.2a348644-lp152.4.31.1 References: https://bugzilla.suse.com/1122391 https://bugzilla.suse.com/1148874 https://bugzilla.suse.com/1165644 https://bugzilla.suse.com/1175708 https://bugzilla.suse.com/1177980

1 0