November 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2020:1864-1: moderate: Recommended update for bcache-tools
by maintenance＠opensuse.org 07 Nov '20

07 Nov '20

openSUSE Recommended Update: Recommended update for bcache-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1864-1 Rating: moderate References: #1174075 #1176244 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for bcache-tools fixes the following issues: - Remove dependency of 'smartcols' as bcache-tools code doesn't need it anymore. (jsc#SLE-9807) - Implement 'bcache-status'. (jsc#SLE-9807) - Remove the dependency on libsmartcols. (jsc#SLE-9807) - Fix for potential coredump issues. (jsc#SLE-9807) - Add more swap bitwise for different CPU endians. (jsc#SLE-9807) - Fixed an issue when an rpm macro '%{_libexecdir}' results braking packages. (bsc#1174075) - Fixed an issue when 'bcache' causing system crashing by using a legacy path. (bsc#1176244) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1864=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): bcache-tools-1.1-lp152.2.3.1 bcache-tools-debuginfo-1.1-lp152.2.3.1 bcache-tools-debugsource-1.1-lp152.2.3.1 References: https://bugzilla.suse.com/1174075 https://bugzilla.suse.com/1176244

1 0

openSUSE-RU-2020:1863-1: moderate: Recommended update for yast2-registration
by maintenance＠opensuse.org 07 Nov '20

07 Nov '20

openSUSE Recommended Update: Recommended update for yast2-registration ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1863-1 Rating: moderate References: #1176563 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-registration fixes the following issues: - Fixed upgrade using the Full medium with the "media_upgrade=1" boot option. (bsc#1176563) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1863=1 Package List: - openSUSE Leap 15.2 (noarch): yast2-registration-4.2.43-lp152.2.6.1 References: https://bugzilla.suse.com/1176563

1 0

openSUSE-SU-2020:1859-1: moderate: Security update for python
by opensuse-security＠opensuse.org 07 Nov '20

07 Nov '20

openSUSE Security Update: Security update for python ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1859-1 Rating: moderate References: #1177211 Cross-References: CVE-2020-26116 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python fixes the following issues: - bsc#1177211 (CVE-2020-26116) no longer allowing special characters in the method parameter of HTTPConnection.putrequest in httplib, stopping injection of headers. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1859=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libpython2_7-1_0-2.7.17-lp151.10.25.1 libpython2_7-1_0-debuginfo-2.7.17-lp151.10.25.1 python-2.7.17-lp151.10.25.1 python-base-2.7.17-lp151.10.25.1 python-base-debuginfo-2.7.17-lp151.10.25.1 python-base-debugsource-2.7.17-lp151.10.25.1 python-curses-2.7.17-lp151.10.25.1 python-curses-debuginfo-2.7.17-lp151.10.25.1 python-debuginfo-2.7.17-lp151.10.25.1 python-debugsource-2.7.17-lp151.10.25.1 python-demo-2.7.17-lp151.10.25.1 python-devel-2.7.17-lp151.10.25.1 python-gdbm-2.7.17-lp151.10.25.1 python-gdbm-debuginfo-2.7.17-lp151.10.25.1 python-idle-2.7.17-lp151.10.25.1 python-tk-2.7.17-lp151.10.25.1 python-tk-debuginfo-2.7.17-lp151.10.25.1 python-xml-2.7.17-lp151.10.25.1 python-xml-debuginfo-2.7.17-lp151.10.25.1 - openSUSE Leap 15.1 (noarch): python-doc-2.7.17-lp151.10.25.1 python-doc-pdf-2.7.17-lp151.10.25.1 - openSUSE Leap 15.1 (x86_64): libpython2_7-1_0-32bit-2.7.17-lp151.10.25.1 libpython2_7-1_0-32bit-debuginfo-2.7.17-lp151.10.25.1 python-32bit-2.7.17-lp151.10.25.1 python-32bit-debuginfo-2.7.17-lp151.10.25.1 python-base-32bit-2.7.17-lp151.10.25.1 python-base-32bit-debuginfo-2.7.17-lp151.10.25.1 References: https://www.suse.com/security/cve/CVE-2020-26116.html https://bugzilla.suse.com/1177211

1 0

openSUSE-RU-2020:1855-1: moderate: Recommended update for python-typing_extensions
by maintenance＠opensuse.org 06 Nov '20

06 Nov '20

openSUSE Recommended Update: Recommended update for python-typing_extensions ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1855-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for python-typing_extensions fixes the following issues: Update to version 3.7.4.2 * official support for Python 3.8 and 3.9 Update to version 3.7.4.1: + Fix isinstance() with generic protocol subclasses after subscripting + Fix tests for non-default interpreters + Use environment marker to specify typing dependency + Fix unions of protocols on Python 2 This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1855=1 Package List: - openSUSE Backports SLE-15-SP2 (noarch): python2-typing_extensions-3.7.4.2-bp152.4.3.1 python3-typing_extensions-3.7.4.2-bp152.4.3.1 References:

1 0

openSUSE-SU-2020:1856-1: moderate: Security update for virt-bootstrap
by opensuse-security＠opensuse.org 06 Nov '20

06 Nov '20

openSUSE Security Update: Security update for virt-bootstrap ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1856-1 Rating: moderate References: #1140750 Cross-References: CVE-2019-13314 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for virt-bootstrap fixes the following issues: Security issue fixed: - CVE-2019-13314: Allow providing the container's root password using a file (bsc#1140750). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1856=1 Package List: - openSUSE Leap 15.1 (noarch): python2-virt-bootstrap-1.0.0-lp151.4.3.1 python3-virt-bootstrap-1.0.0-lp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2019-13314.html https://bugzilla.suse.com/1140750

1 0

openSUSE-RU-2020:1858-1: moderate: Recommended update for mdadm
by maintenance＠opensuse.org 06 Nov '20

06 Nov '20

openSUSE Recommended Update: Recommended update for mdadm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1858-1 Rating: moderate References: Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for mdadm fixes the following issues: - Implement support for the latest Intel IMSM raid. - imsm: Correct minimal device size (jsc#SLE-13700) - Fix for showing the correct bitmap info for cluster raid device. (jsc#SLE-13700) - imsm: support the Array Creation Time field in metadata. (jsc#SLE-13700) - imsm: show Subarray and Volume ID in --examine output. (jsc#SLE-13700) - udev: Ignore change event for 'imsm'. (jsc#SLE-13700) - imsm: Write metadata before add. (jsc#SLE-13700) - Print error message if mdadm fails assembling with '--uuid' option. (jsc#SLE-13700) - Fix for spliting 'uuid' stuff from 'util.c'. (jsc#SLE-13700) - restripe: fix ignoring return value of read and lseek. (jsc#SLE-13700) - Block overwriting existing links during manual assembly. (jsc#SLE-13700) - Detect too-small device and show an error message instead of crashing. (jsc#SLE-13700) - mdadm/Grow: prevent md's fd from being occupied during delayed time. (jsc#SLE-13700) - Specify nodes number when updating cluster nodes. (jsc#SLE-13700) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1858=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): mdadm-4.1-lp151.4.18.1 mdadm-debuginfo-4.1-lp151.4.18.1 mdadm-debugsource-4.1-lp151.4.18.1 References:

1 0

openSUSE-RU-2020:1857-1: moderate: Recommended update for systemd
by maintenance＠opensuse.org 06 Nov '20

06 Nov '20

openSUSE Recommended Update: Recommended update for systemd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1857-1 Rating: moderate References: #1104902 #1154935 #1165502 #1167471 #1173422 #1176513 #1176800 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 7 recommended fixes can now be installed. Description: This update for systemd fixes the following issues: - seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422) - test-seccomp: log function names - test-seccomp: add log messages when skipping tests - basic/virt: Detect PowerVM hypervisor (bsc#1176800) - fs-util: suppress world-writable warnings if we read /dev/null - udevadm: rename option '--log-priority' into '--log-level' - udev: rename kernel option 'log_priority' into 'log_level' - fstab-generator: add 'nofail' when NFS 'bg' option is used (bsc#1176513) - Fix memory protection default (bsc#1167471) - cgroup: Support 0-value for memory protection directives and accepts MemorySwapMax=0 (bsc#1154935) - Improve latency and reliability when users log in/out (bsc#1104902, bsc#1165502) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1857=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libsystemd0-234-lp151.26.28.1 libsystemd0-debuginfo-234-lp151.26.28.1 libsystemd0-mini-234-lp151.26.28.1 libsystemd0-mini-debuginfo-234-lp151.26.28.1 libudev-devel-234-lp151.26.28.1 libudev-mini-devel-234-lp151.26.28.1 libudev-mini1-234-lp151.26.28.1 libudev-mini1-debuginfo-234-lp151.26.28.1 libudev1-234-lp151.26.28.1 libudev1-debuginfo-234-lp151.26.28.1 nss-myhostname-234-lp151.26.28.1 nss-myhostname-debuginfo-234-lp151.26.28.1 nss-mymachines-234-lp151.26.28.1 nss-mymachines-debuginfo-234-lp151.26.28.1 nss-systemd-234-lp151.26.28.1 nss-systemd-debuginfo-234-lp151.26.28.1 systemd-234-lp151.26.28.1 systemd-container-234-lp151.26.28.1 systemd-container-debuginfo-234-lp151.26.28.1 systemd-coredump-234-lp151.26.28.1 systemd-coredump-debuginfo-234-lp151.26.28.1 systemd-debuginfo-234-lp151.26.28.1 systemd-debugsource-234-lp151.26.28.1 systemd-devel-234-lp151.26.28.1 systemd-journal-remote-234-lp151.26.28.1 systemd-journal-remote-debuginfo-234-lp151.26.28.1 systemd-logger-234-lp151.26.28.1 systemd-mini-234-lp151.26.28.1 systemd-mini-container-mini-234-lp151.26.28.1 systemd-mini-container-mini-debuginfo-234-lp151.26.28.1 systemd-mini-coredump-mini-234-lp151.26.28.1 systemd-mini-coredump-mini-debuginfo-234-lp151.26.28.1 systemd-mini-debuginfo-234-lp151.26.28.1 systemd-mini-debugsource-234-lp151.26.28.1 systemd-mini-devel-234-lp151.26.28.1 systemd-mini-sysvinit-234-lp151.26.28.1 systemd-network-234-lp151.26.28.1 systemd-network-debuginfo-234-lp151.26.28.1 systemd-sysvinit-234-lp151.26.28.1 udev-234-lp151.26.28.1 udev-debuginfo-234-lp151.26.28.1 udev-mini-234-lp151.26.28.1 udev-mini-debuginfo-234-lp151.26.28.1 - openSUSE Leap 15.1 (noarch): systemd-bash-completion-234-lp151.26.28.1 systemd-mini-bash-completion-234-lp151.26.28.1 - openSUSE Leap 15.1 (x86_64): libsystemd0-32bit-234-lp151.26.28.1 libsystemd0-32bit-debuginfo-234-lp151.26.28.1 libudev-devel-32bit-234-lp151.26.28.1 libudev1-32bit-234-lp151.26.28.1 libudev1-32bit-debuginfo-234-lp151.26.28.1 nss-myhostname-32bit-234-lp151.26.28.1 nss-myhostname-32bit-debuginfo-234-lp151.26.28.1 nss-mymachines-32bit-234-lp151.26.28.1 nss-mymachines-32bit-debuginfo-234-lp151.26.28.1 systemd-32bit-234-lp151.26.28.1 systemd-32bit-debuginfo-234-lp151.26.28.1 References: https://bugzilla.suse.com/1104902 https://bugzilla.suse.com/1154935 https://bugzilla.suse.com/1165502 https://bugzilla.suse.com/1167471 https://bugzilla.suse.com/1173422 https://bugzilla.suse.com/1176513 https://bugzilla.suse.com/1176800

1 0

openSUSE-RU-2020:1854-1: moderate: Recommended update for torbrowser-launcher
by maintenance＠opensuse.org 06 Nov '20

06 Nov '20

openSUSE Recommended Update: Recommended update for torbrowser-launcher ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1854-1 Rating: moderate References: #1178299 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for torbrowser-launcher fixes the following issues: - Add new non-expired signing key: tor-browser-developers.asc - Add torbrowser-launcher-version-check.patch to fix version checking so that torbrowser version 10.0 is not treated as older than version 9.x [boo#1178299]. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1854=1 Package List: - openSUSE Leap 15.1 (noarch): torbrowser-apparmor-profile-0.3.1-lp151.3.5.1 torbrowser-launcher-0.3.1-lp151.3.5.1 torbrowser-launcher-lang-0.3.1-lp151.3.5.1 References: https://bugzilla.suse.com/1178299

1 0

openSUSE-RU-2020:1853-1: moderate: Recommended update for mksusecd
by maintenance＠opensuse.org 06 Nov '20

06 Nov '20

openSUSE Recommended Update: Recommended update for mksusecd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1853-1 Rating: moderate References: #1173263 #1176176 #1176379 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for mksusecd fixes the following issues: Update from version 1.71 to version 1.77 - fix add_on_products.xml handling (bsc#1176379) - look only at top-level products file (bsc#1176176) - ensure modified files really end up on the media (bsc#1176176) - adjust product handling if products are spread over several media - include complete product directories - fix product handling with new SLE full media layout - added "--sign-pass-file" - added option for recreating and signing the repo - remove "all done" message - additional passphrase options are not necessary at key creation - set additional options only when a existing sign key is specified - print message if --sign-pass-file and missing sign-key - removed sign_passwd_option on import - add --sign-key-id option to allow specifying a gpg signing key by id - do not include excluded products (bsc#1173263) - recreate products file, including its checksum update - Fix broken link to kiwi documentation This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1853=1 Package List: - openSUSE Leap 15.1 (x86_64): mksusecd-1.77-lp151.2.9.1 mksusecd-debuginfo-1.77-lp151.2.9.1 mksusecd-debugsource-1.77-lp151.2.9.1 References: https://bugzilla.suse.com/1173263 https://bugzilla.suse.com/1176176 https://bugzilla.suse.com/1176379

1 0

openSUSE-RU-2020:1851-1: moderate: Recommended update for subversion
by maintenance＠opensuse.org 06 Nov '20

06 Nov '20

openSUSE Recommended Update: Recommended update for subversion ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1851-1 Rating: moderate References: Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for subversion fixes the following issues: - Add patch to remove dependency on 'kdelibs4support' just to run kf5-config pointing the headers and libraries. (jsc#SLE-11901): This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1851=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libsvn_auth_gnome_keyring-1-0-1.10.6-lp151.4.6.1 libsvn_auth_gnome_keyring-1-0-debuginfo-1.10.6-lp151.4.6.1 libsvn_auth_kwallet-1-0-1.10.6-lp151.4.6.1 libsvn_auth_kwallet-1-0-debuginfo-1.10.6-lp151.4.6.1 subversion-1.10.6-lp151.4.6.1 subversion-debuginfo-1.10.6-lp151.4.6.1 subversion-debugsource-1.10.6-lp151.4.6.1 subversion-devel-1.10.6-lp151.4.6.1 subversion-perl-1.10.6-lp151.4.6.1 subversion-perl-debuginfo-1.10.6-lp151.4.6.1 subversion-python-1.10.6-lp151.4.6.1 subversion-python-ctypes-1.10.6-lp151.4.6.1 subversion-python-debuginfo-1.10.6-lp151.4.6.1 subversion-ruby-1.10.6-lp151.4.6.1 subversion-ruby-debuginfo-1.10.6-lp151.4.6.1 subversion-server-1.10.6-lp151.4.6.1 subversion-server-debuginfo-1.10.6-lp151.4.6.1 subversion-tools-1.10.6-lp151.4.6.1 subversion-tools-debuginfo-1.10.6-lp151.4.6.1 - openSUSE Leap 15.1 (noarch): subversion-bash-completion-1.10.6-lp151.4.6.1 References:

1 0