November 2020 - openSUSE Updates - openSUSE Mailing Lists

[opensuse-updates] openSUSE-RU-2020:1925-1: moderate: Recommended update for findutils
by maintenance＠opensuse.org 14 Nov '20

14 Nov '20

openSUSE Recommended Update: Recommended update for findutils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1925-1 Rating: moderate References: #1174232 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for findutils fixes the following issues: - Do not unconditionally use leaf optimization for NFS. (bsc#1174232) NFS st_nlink are not accurate on all implementations, leading to aborts() if that assumption is made. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1925=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): findutils-4.6.0-lp151.4.3.1 findutils-debuginfo-4.6.0-lp151.4.3.1 findutils-debugsource-4.6.0-lp151.4.3.1 - openSUSE Leap 15.1 (noarch): findutils-lang-4.6.0-lp151.4.3.1 References: https://bugzilla.suse.com/1174232

1 0

[opensuse-updates] openSUSE-RU-2020:1926-1: moderate: Recommended update for grub2
by maintenance＠opensuse.org 14 Nov '20

14 Nov '20

openSUSE Recommended Update: Recommended update for grub2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1926-1 Rating: moderate References: #1172952 #1176062 #1177957 #1178278 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for grub2 fixes the following issues: - Fixed an issue, where the https boot was interrupted by an unrecognized network address error message (bsc#1172952) - Improve the error handling when grub2-install fails with short mbr gap (bsc#1176062) - Fixed an error in grub2-install where it exited with "failed to get canonical path of `/boot/grub2/i386-pc'." (bsc#1177957) - Fixed a boot failure issue on blocklist installations (bsc#1178278) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1926=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): grub2-2.02-lp151.21.30.1 grub2-branding-upstream-2.02-lp151.21.30.1 grub2-debuginfo-2.02-lp151.21.30.1 grub2-debugsource-2.02-lp151.21.30.1 - openSUSE Leap 15.1 (noarch): grub2-i386-efi-2.02-lp151.21.30.1 grub2-i386-pc-2.02-lp151.21.30.1 grub2-i386-xen-2.02-lp151.21.30.1 grub2-snapper-plugin-2.02-lp151.21.30.1 grub2-systemd-sleep-plugin-2.02-lp151.21.30.1 grub2-x86_64-efi-2.02-lp151.21.30.1 grub2-x86_64-xen-2.02-lp151.21.30.1 References: https://bugzilla.suse.com/1172952 https://bugzilla.suse.com/1176062 https://bugzilla.suse.com/1177957 https://bugzilla.suse.com/1178278

1 0

[opensuse-updates] openSUSE-RU-2020:1924-1: moderate: Recommended update for raspberrypi-firmware, u-boot
by maintenance＠opensuse.org 14 Nov '20

14 Nov '20

openSUSE Recommended Update: Recommended update for raspberrypi-firmware, u-boot ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1924-1 Rating: moderate References: #1088356 #1157822 #1160566 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for raspberrypi-firmware, u-boot fixes the following issues: The raspberrypi-firmware was updated to 6e4a7232c (2019-11-19): - Added support for CM3+ (bsc#1157822) - Allow user defined config options (bsc#1088356) - Move HDMI workaround to rpi3 section (fixes RPi2 HDMI output) The u-boot bootloader was updated: - Fixed the USB keyboard in grub on the RasperryPi (bsc#1160566): - Added support for Raspberry Pi Compute Module 3+ (bsc#1157822) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1924=1 Package List: - openSUSE Leap 15.1 (x86_64): u-boot-tools-2019.01-lp151.6.9.1 u-boot-tools-debuginfo-2019.01-lp151.6.9.1 - openSUSE Leap 15.1 (noarch): raspberrypi-firmware-2019.11.19-lp151.4.6.1 raspberrypi-firmware-config-2019.11.19-lp151.4.6.1 raspberrypi-firmware-extra-2019.11.19-lp151.4.6.1 References: https://bugzilla.suse.com/1088356 https://bugzilla.suse.com/1157822 https://bugzilla.suse.com/1160566

1 0

[opensuse-updates] openSUSE-SU-2020:1922-1: moderate: Security update for python-waitress
by opensuse-security＠opensuse.org 14 Nov '20

14 Nov '20

openSUSE Security Update: Security update for python-waitress ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1922-1 Rating: moderate References: #1160790 #1161088 #1161089 #1161670 Cross-References: CVE-2019-16785 CVE-2019-16786 CVE-2019-16789 CVE-2019-16792 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for python-waitress to 1.4.3 fixes the following security issues: - CVE-2019-16785: HTTP request smuggling through LF vs CRLF handling (bsc#1161088). - CVE-2019-16786: HTTP request smuggling through invalid Transfer-Encoding (bsc#1161089). - CVE-2019-16789: HTTP request smuggling through invalid whitespace characters (bsc#1160790). - CVE-2019-16792: HTTP request smuggling by sending the Content-Length header twice (bsc#1161670). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1922=1 Package List: - openSUSE Leap 15.1 (noarch): python2-waitress-1.4.3-lp151.3.3.1 python3-waitress-1.4.3-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2019-16785.html https://www.suse.com/security/cve/CVE-2019-16786.html https://www.suse.com/security/cve/CVE-2019-16789.html https://www.suse.com/security/cve/CVE-2019-16792.html https://bugzilla.suse.com/1160790 https://bugzilla.suse.com/1161088 https://bugzilla.suse.com/1161089 https://bugzilla.suse.com/1161670

1 0

[opensuse-updates] openSUSE-RU-2020:1921-1: moderate: Recommended update for bind
by maintenance＠opensuse.org 14 Nov '20

14 Nov '20

openSUSE Recommended Update: Recommended update for bind ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1921-1 Rating: moderate References: #1175894 #1177603 #1177790 #1177913 #1177915 #1178078 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 6 recommended fixes can now be installed. Description: This update for bind fixes the following issues: - Add '/usr/lib64/named' to the files and directories in bind config to include external plugins for chroot. (bsc#1178078) - Replaced named's dependency on time-sync with a dependency on time-set in 'named.service' to avoid a dependency-loop. (bsc#1177790) - Removed "dnssec-enable" from named.conf as it has been obsoleted and may break. (bsc#1177915) - Added a comment for reference which should be removed in the future. (bsc#1177603) - Added a comment to the "dnssec-validation" in named.conf with a reference to forwarders which do not return signed responses. (bsc#1175894) - Replaced an INSIST macro which calls abort with a test and a diagnostic output. (bsc#1177913) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1921=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): bind-9.16.6-lp151.11.12.1 bind-chrootenv-9.16.6-lp151.11.12.1 bind-debuginfo-9.16.6-lp151.11.12.1 bind-debugsource-9.16.6-lp151.11.12.1 bind-devel-9.16.6-lp151.11.12.1 bind-utils-9.16.6-lp151.11.12.1 bind-utils-debuginfo-9.16.6-lp151.11.12.1 libbind9-1600-9.16.6-lp151.11.12.1 libbind9-1600-debuginfo-9.16.6-lp151.11.12.1 libdns1605-9.16.6-lp151.11.12.1 libdns1605-debuginfo-9.16.6-lp151.11.12.1 libirs-devel-9.16.6-lp151.11.12.1 libirs1601-9.16.6-lp151.11.12.1 libirs1601-debuginfo-9.16.6-lp151.11.12.1 libisc1606-9.16.6-lp151.11.12.1 libisc1606-debuginfo-9.16.6-lp151.11.12.1 libisccc1600-9.16.6-lp151.11.12.1 libisccc1600-debuginfo-9.16.6-lp151.11.12.1 libisccfg1600-9.16.6-lp151.11.12.1 libisccfg1600-debuginfo-9.16.6-lp151.11.12.1 libns1604-9.16.6-lp151.11.12.1 libns1604-debuginfo-9.16.6-lp151.11.12.1 - openSUSE Leap 15.1 (x86_64): bind-devel-32bit-9.16.6-lp151.11.12.1 libbind9-1600-32bit-9.16.6-lp151.11.12.1 libbind9-1600-32bit-debuginfo-9.16.6-lp151.11.12.1 libdns1605-32bit-9.16.6-lp151.11.12.1 libdns1605-32bit-debuginfo-9.16.6-lp151.11.12.1 libirs1601-32bit-9.16.6-lp151.11.12.1 libirs1601-32bit-debuginfo-9.16.6-lp151.11.12.1 libisc1606-32bit-9.16.6-lp151.11.12.1 libisc1606-32bit-debuginfo-9.16.6-lp151.11.12.1 libisccc1600-32bit-9.16.6-lp151.11.12.1 libisccc1600-32bit-debuginfo-9.16.6-lp151.11.12.1 libisccfg1600-32bit-9.16.6-lp151.11.12.1 libisccfg1600-32bit-debuginfo-9.16.6-lp151.11.12.1 libns1604-32bit-9.16.6-lp151.11.12.1 libns1604-32bit-debuginfo-9.16.6-lp151.11.12.1 - openSUSE Leap 15.1 (noarch): bind-doc-9.16.6-lp151.11.12.1 python3-bind-9.16.6-lp151.11.12.1 References: https://bugzilla.suse.com/1175894 https://bugzilla.suse.com/1177603 https://bugzilla.suse.com/1177790 https://bugzilla.suse.com/1177913 https://bugzilla.suse.com/1177915 https://bugzilla.suse.com/1178078

1 0

[opensuse-updates] openSUSE-SU-2020:1918-1: important: Security update for openldap2
by opensuse-security＠opensuse.org 14 Nov '20

14 Nov '20

openSUSE Security Update: Security update for openldap2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1918-1 Rating: important References: #1178387 Cross-References: CVE-2020-25692 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for openldap2 fixes the following issues: - CVE-2020-25692: Fixed an unauthenticated remote denial of service due to incorrect validation of modrdn equality rules (bsc#1178387). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1918=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libldap-2_4-2-2.4.46-lp152.14.12.1 libldap-2_4-2-debuginfo-2.4.46-lp152.14.12.1 openldap2-2.4.46-lp152.14.12.1 openldap2-back-meta-2.4.46-lp152.14.12.1 openldap2-back-meta-debuginfo-2.4.46-lp152.14.12.1 openldap2-back-perl-2.4.46-lp152.14.12.1 openldap2-back-perl-debuginfo-2.4.46-lp152.14.12.1 openldap2-back-sock-2.4.46-lp152.14.12.1 openldap2-back-sock-debuginfo-2.4.46-lp152.14.12.1 openldap2-back-sql-2.4.46-lp152.14.12.1 openldap2-back-sql-debuginfo-2.4.46-lp152.14.12.1 openldap2-client-2.4.46-lp152.14.12.1 openldap2-client-debuginfo-2.4.46-lp152.14.12.1 openldap2-contrib-2.4.46-lp152.14.12.1 openldap2-contrib-debuginfo-2.4.46-lp152.14.12.1 openldap2-debuginfo-2.4.46-lp152.14.12.1 openldap2-debugsource-2.4.46-lp152.14.12.1 openldap2-devel-2.4.46-lp152.14.12.1 openldap2-devel-static-2.4.46-lp152.14.12.1 openldap2-ppolicy-check-password-1.2-lp152.14.12.1 openldap2-ppolicy-check-password-debuginfo-1.2-lp152.14.12.1 - openSUSE Leap 15.2 (noarch): libldap-data-2.4.46-lp152.14.12.1 openldap2-doc-2.4.46-lp152.14.12.1 - openSUSE Leap 15.2 (x86_64): libldap-2_4-2-32bit-2.4.46-lp152.14.12.1 libldap-2_4-2-32bit-debuginfo-2.4.46-lp152.14.12.1 openldap2-devel-32bit-2.4.46-lp152.14.12.1 References: https://www.suse.com/security/cve/CVE-2020-25692.html https://bugzilla.suse.com/1178387

1 0

[opensuse-updates] openSUSE-SU-2020:1919-1: important: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 14 Nov '20

14 Nov '20

openSUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1919-1 Rating: important References: #1178588 Cross-References: CVE-2020-26950 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 78.4.1 ESR * Fixed: Security fix MFSA 2020-49 (bsc#1178588) * CVE-2020-26950 (bmo#1675905) Write side effects in MCallGetProperty opcode not accounted for This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1919=1 Package List: - openSUSE Leap 15.2 (x86_64): MozillaFirefox-78.4.1-lp152.2.27.1 MozillaFirefox-branding-upstream-78.4.1-lp152.2.27.1 MozillaFirefox-buildsymbols-78.4.1-lp152.2.27.1 MozillaFirefox-debuginfo-78.4.1-lp152.2.27.1 MozillaFirefox-debugsource-78.4.1-lp152.2.27.1 MozillaFirefox-devel-78.4.1-lp152.2.27.1 MozillaFirefox-translations-common-78.4.1-lp152.2.27.1 MozillaFirefox-translations-other-78.4.1-lp152.2.27.1 References: https://www.suse.com/security/cve/CVE-2020-26950.html https://bugzilla.suse.com/1178588

1 0

[opensuse-updates] openSUSE-SU-2020:1920-1: important: Security update for openldap2
by opensuse-security＠opensuse.org 14 Nov '20

14 Nov '20

openSUSE Security Update: Security update for openldap2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1920-1 Rating: important References: #1178387 Cross-References: CVE-2020-25692 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for openldap2 fixes the following issues: - CVE-2020-25692: Fixed an unauthenticated remote denial of service due to incorrect validation of modrdn equality rules (bsc#1178387). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1920=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libldap-2_4-2-2.4.46-lp151.10.21.1 libldap-2_4-2-debuginfo-2.4.46-lp151.10.21.1 openldap2-2.4.46-lp151.10.21.1 openldap2-back-meta-2.4.46-lp151.10.21.1 openldap2-back-meta-debuginfo-2.4.46-lp151.10.21.1 openldap2-back-perl-2.4.46-lp151.10.21.1 openldap2-back-perl-debuginfo-2.4.46-lp151.10.21.1 openldap2-back-sock-2.4.46-lp151.10.21.1 openldap2-back-sock-debuginfo-2.4.46-lp151.10.21.1 openldap2-back-sql-2.4.46-lp151.10.21.1 openldap2-back-sql-debuginfo-2.4.46-lp151.10.21.1 openldap2-client-2.4.46-lp151.10.21.1 openldap2-client-debuginfo-2.4.46-lp151.10.21.1 openldap2-contrib-2.4.46-lp151.10.21.1 openldap2-contrib-debuginfo-2.4.46-lp151.10.21.1 openldap2-debuginfo-2.4.46-lp151.10.21.1 openldap2-debugsource-2.4.46-lp151.10.21.1 openldap2-devel-2.4.46-lp151.10.21.1 openldap2-devel-static-2.4.46-lp151.10.21.1 openldap2-ppolicy-check-password-1.2-lp151.10.21.1 openldap2-ppolicy-check-password-debuginfo-1.2-lp151.10.21.1 - openSUSE Leap 15.1 (x86_64): libldap-2_4-2-32bit-2.4.46-lp151.10.21.1 libldap-2_4-2-32bit-debuginfo-2.4.46-lp151.10.21.1 openldap2-devel-32bit-2.4.46-lp151.10.21.1 - openSUSE Leap 15.1 (noarch): libldap-data-2.4.46-lp151.10.21.1 openldap2-doc-2.4.46-lp151.10.21.1 References: https://www.suse.com/security/cve/CVE-2020-25692.html https://bugzilla.suse.com/1178387

1 0

[opensuse-updates] openSUSE-RU-2020:1917-1: moderate: Recommended update for dehydrated
by maintenance＠opensuse.org 14 Nov '20

14 Nov '20

openSUSE Recommended Update: Recommended update for dehydrated ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1917-1 Rating: moderate References: #1091216 #1110697 #1139408 #1154167 #1169834 SLE-11727 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 5 recommended fixes and contains one feature can now be installed. Description: This update for dehydrated fixes the following issues: Update to dehydrated 0.6.5: * Fixed broken APIv1 compatibility from last update Update to dehydrated 0.6.4: * Fetch account ID from Location header instead of account json (boo#1139408) Update to dehydrated 0.6.3: * OCSP refresh interval is now configurable * Implemented POST-as-GET * Call exit_hook on errors (with error-message as first parameter) * Initial support for tls-alpn-01 validation * New hook: sync_cert (for syncing certificate files to disk, see example hook description) * Fetch account information after registration to avoid missing account id - Remove RandomizedDelaySec attribute for distros with older systemd (boo#1110697) Update to dehydrated 0.6.2: Added * New deploy_ocsp hook * Allow account registration with custom key Changed * Don't walk certificate chain for ACMEv2 (certificate contains chain by default) * Improved documentation on wildcards Fixes * Added workaround for compatibility with filesystem ACLs * Close unwanted external file-descriptors * Fixed JSON parsing on force-renewal (boo#1091216) * Fixed cleanup of challenge files/dns-entries on validation errors * A few more minor fixes - Reenable nginx subpackage for factory - Update maintainer file and package description, remove features that are better described in the (upstream maintained) man page. - Remove potentially harmful scriptlet (boo#1154167). Documented transition case in the maintainer README. Unlikely enough. The versions that have not transitioned yet would be broken for more than two years now. - Removed lighttpd 1.x integration package. If you still would like to use lighttpd with dehydrated, follow the instructions in the README.maintainers file. - Fix lighttpd config file (boo#1169834) - Behavioral change: Use cron only for older RHEL/CentOS versions (along with SLE < 12.0). Everything else now uses systemd. Please adopt accordingly! Refer to README.md for Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2020-1917=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): dehydrated-0.6.5-5.1 dehydrated-apache2-0.6.5-5.1 References: https://bugzilla.suse.com/1091216 https://bugzilla.suse.com/1110697 https://bugzilla.suse.com/1139408 https://bugzilla.suse.com/1154167 https://bugzilla.suse.com/1169834

1 0

[opensuse-updates] openSUSE-SU-2020:1916-1: moderate: Security update for SDL
by opensuse-security＠opensuse.org 14 Nov '20

14 Nov '20

openSUSE Security Update: Security update for SDL ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1916-1 Rating: moderate References: #1141844 Cross-References: CVE-2019-13616 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for SDL fixes the following issues: Security issue fixed: - CVE-2019-13616: Fixed heap-based buffer over-read in BlitNtoN in video/SDL_blit_N.c when called from SDL_SoftBlit (bsc#1141844). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1916=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): SDL-debugsource-1.2.15-lp152.5.3.1 libSDL-1_2-0-1.2.15-lp152.5.3.1 libSDL-1_2-0-debuginfo-1.2.15-lp152.5.3.1 libSDL-devel-1.2.15-lp152.5.3.1 - openSUSE Leap 15.2 (x86_64): libSDL-1_2-0-32bit-1.2.15-lp152.5.3.1 libSDL-1_2-0-32bit-debuginfo-1.2.15-lp152.5.3.1 libSDL-devel-32bit-1.2.15-lp152.5.3.1 References: https://www.suse.com/security/cve/CVE-2019-13616.html https://bugzilla.suse.com/1141844

1 0

[opensuse-updates] openSUSE-SU-2020:1915-1: moderate: Security update for ucode-intel
by opensuse-security＠opensuse.org 14 Nov '20

14 Nov '20

openSUSE Security Update: Security update for ucode-intel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1915-1 Rating: moderate References: #1170446 #1173594 Cross-References: CVE-2020-8695 CVE-2020-8698 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for ucode-intel fixes the following issues: - Intel CPU Microcode updated to 20201027 prerelease - CVE-2020-8695: Fixed Intel RAPL sidechannel attack (SGX) (bsc#1170446) - CVE-2020-8698: Fixed Fast Store Forward Predictor INTEL-SA-00381 (bsc#1173594) # New Platforms: | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | TGL | B1 | 06-8c-01/80 | | 00000068 | Core Gen11 Mobile | CPX-SP | A1 | 06-55-0b/bf | | 0700001e | Xeon Scalable Gen3 | CML-H | R1 | 06-a5-02/20 | | 000000e0 | Core Gen10 Mobile | CML-S62 | G1 | 06-a5-03/22 | | 000000e0 | Core Gen10 | CML-S102 | Q0 | 06-a5-05/22 | | 000000e0 | Core Gen10 | CML-U62 V2 | K0 | 06-a6-01/80 | | 000000e0 | Core Gen10 Mobile # Updated Platforms: | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | GKL-R | R0 | 06-7a-08/01 | 00000016 | 00000018 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120 | SKL-U/Y | D0 | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile | SKL-U23e | K1 | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile | APL | D0 | 06-5c-09/03 | 00000038 | 00000040 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx | APL | E0 | 06-5c-0a/03 | 00000016 | 0000001e | Atom x5-E39xx | SKL-H/S | R0/N0 | 06-5e-03/36 | 000000d6 | 000000e2 | Core Gen6; Xeon E3 v5 | HSX-E/EP | Cx/M1 | 06-3f-02/6f | 00000043 | 00000044 | Core Gen4 X series; Xeon E5 v3 | SKX-SP | B1 | 06-55-03/97 | 01000157 | 01000159 | Xeon Scalable | SKX-SP | H0/M0/U0 | 06-55-04/b7 | 02006906 | 02006a08 | Xeon Scalable | SKX-D | M1 | 06-55-04/b7 | 02006906 | 02006a08 | Xeon D-21xx | CLX-SP | B0 | 06-55-06/bf | 04002f01 | 04003003 | Xeon Scalable Gen2 | CLX-SP | B1 | 06-55-07/bf | 05002f01 | 05003003 | Xeon Scalable Gen2 | ICL-U/Y | D1 | 06-7e-05/80 | 00000078 | 000000a0 | Core Gen10 Mobile | AML-Y22 | H0 | 06-8e-09/10 | 000000d6 | 000000de | Core Gen8 Mobile | KBL-U/Y | H0 | 06-8e-09/c0 | 000000d6 | 000000de | Core Gen7 Mobile | CFL-U43e | D0 | 06-8e-0a/c0 | 000000d6 | 000000e0 | Core Gen8 Mobile | WHL-U | W0 | 06-8e-0b/d0 | 000000d6 | 000000de | Core Gen8 Mobile | AML-Y42 | V0 | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile | CML-Y42 | V0 | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile | WHL-U | V0 | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen8 Mobile | KBL-G/H/S/E3 | B0 | 06-9e-09/2a | 000000d6 | 000000de | Core Gen7; Xeon E3 v6 | CFL-H/S/E3 | U0 | 06-9e-0a/22 | 000000d6 | 000000de | Core Gen8 Desktop, Mobile, Xeon E | CFL-S | B0 | 06-9e-0b/02 | 000000d6 | 000000de | Core Gen8 | CFL-H/S | P0 | 06-9e-0c/22 | 000000d6 | 000000de | Core Gen9 | CFL-H | R0 | 06-9e-0d/22 | 000000d6 | 000000de | Core Gen9 Mobile | CML-U62 | A0 | 06-a6-00/80 | 000000ca | 000000e0 | Core Gen10 Mobile This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1915=1 Package List: - openSUSE Leap 15.1 (x86_64): ucode-intel-20201027-lp151.2.30.1 References: https://www.suse.com/security/cve/CVE-2020-8695.html https://www.suse.com/security/cve/CVE-2020-8698.html https://bugzilla.suse.com/1170446 https://bugzilla.suse.com/1173594

1 0

[opensuse-updates] openSUSE-RU-2020:1913-1: moderate: Recommended update for bind
by maintenance＠opensuse.org 14 Nov '20

14 Nov '20

openSUSE Recommended Update: Recommended update for bind ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1913-1 Rating: moderate References: #1175894 #1177603 #1177790 #1177913 #1177915 #1178078 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 6 recommended fixes can now be installed. Description: This update for bind fixes the following issues: - Add '/usr/lib64/named' to the files and directories in bind config to include external plugins for chroot. (bsc#1178078) - Replaced named's dependency on time-sync with a dependency on time-set in 'named.service' to avoid a dependency-loop. (bsc#1177790) - Removed "dnssec-enable" from named.conf as it has been obsoleted and may break. (bsc#1177915) - Added a comment for reference which should be removed in the future. (bsc#1177603) - Added a comment to the "dnssec-validation" in named.conf with a reference to forwarders which do not return signed responses. (bsc#1175894) - Replaced an INSIST macro which calls abort with a test and a diagnostic output. (bsc#1177913) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1913=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): bind-9.16.6-lp152.14.6.1 bind-chrootenv-9.16.6-lp152.14.6.1 bind-debuginfo-9.16.6-lp152.14.6.1 bind-debugsource-9.16.6-lp152.14.6.1 bind-devel-9.16.6-lp152.14.6.1 bind-utils-9.16.6-lp152.14.6.1 bind-utils-debuginfo-9.16.6-lp152.14.6.1 libbind9-1600-9.16.6-lp152.14.6.1 libbind9-1600-debuginfo-9.16.6-lp152.14.6.1 libdns1605-9.16.6-lp152.14.6.1 libdns1605-debuginfo-9.16.6-lp152.14.6.1 libirs-devel-9.16.6-lp152.14.6.1 libirs1601-9.16.6-lp152.14.6.1 libirs1601-debuginfo-9.16.6-lp152.14.6.1 libisc1606-9.16.6-lp152.14.6.1 libisc1606-debuginfo-9.16.6-lp152.14.6.1 libisccc1600-9.16.6-lp152.14.6.1 libisccc1600-debuginfo-9.16.6-lp152.14.6.1 libisccfg1600-9.16.6-lp152.14.6.1 libisccfg1600-debuginfo-9.16.6-lp152.14.6.1 libns1604-9.16.6-lp152.14.6.1 libns1604-debuginfo-9.16.6-lp152.14.6.1 - openSUSE Leap 15.2 (x86_64): bind-devel-32bit-9.16.6-lp152.14.6.1 libbind9-1600-32bit-9.16.6-lp152.14.6.1 libbind9-1600-32bit-debuginfo-9.16.6-lp152.14.6.1 libdns1605-32bit-9.16.6-lp152.14.6.1 libdns1605-32bit-debuginfo-9.16.6-lp152.14.6.1 libirs1601-32bit-9.16.6-lp152.14.6.1 libirs1601-32bit-debuginfo-9.16.6-lp152.14.6.1 libisc1606-32bit-9.16.6-lp152.14.6.1 libisc1606-32bit-debuginfo-9.16.6-lp152.14.6.1 libisccc1600-32bit-9.16.6-lp152.14.6.1 libisccc1600-32bit-debuginfo-9.16.6-lp152.14.6.1 libisccfg1600-32bit-9.16.6-lp152.14.6.1 libisccfg1600-32bit-debuginfo-9.16.6-lp152.14.6.1 libns1604-32bit-9.16.6-lp152.14.6.1 libns1604-32bit-debuginfo-9.16.6-lp152.14.6.1 - openSUSE Leap 15.2 (noarch): bind-doc-9.16.6-lp152.14.6.1 python3-bind-9.16.6-lp152.14.6.1 References: https://bugzilla.suse.com/1175894 https://bugzilla.suse.com/1177603 https://bugzilla.suse.com/1177790 https://bugzilla.suse.com/1177913 https://bugzilla.suse.com/1177915 https://bugzilla.suse.com/1178078

1 0

[opensuse-updates] openSUSE-SU-2020:1910-1: moderate: Security update for zeromq
by opensuse-security＠opensuse.org 14 Nov '20

14 Nov '20

openSUSE Security Update: Security update for zeromq ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1910-1 Rating: moderate References: #1176116 #1176256 #1176257 #1176258 #1176259 Cross-References: CVE-2020-15166 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves one vulnerability and has four fixes is now available. Description: This update for zeromq fixes the following issues: - CVE-2020-15166: Fixed the possibility of unauthenticated clients causing a denial-of-service (bsc#1176116). - Fixed a heap overflow when receiving malformed ZMTP v1 packets (bsc#1176256) - Fixed a memory leak in client induced by malicious server(s) without CURVE/ZAP (bsc#1176257) - Fixed memory leak when processing PUB messages with metadata (bsc#1176259) - Fixed a stack overflow in PUB/XPUB subscription store (bsc#1176258) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1910=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libunwind-1.2.1-lp152.5.3.1 libunwind-debuginfo-1.2.1-lp152.5.3.1 libunwind-debugsource-1.2.1-lp152.5.3.1 libunwind-devel-1.2.1-lp152.5.3.1 - openSUSE Leap 15.2 (x86_64): libunwind-32bit-1.2.1-lp152.5.3.1 libunwind-32bit-debuginfo-1.2.1-lp152.5.3.1 libzmq5-4.2.3-lp152.7.3.1 libzmq5-debuginfo-4.2.3-lp152.7.3.1 zeromq-debugsource-4.2.3-lp152.7.3.1 zeromq-devel-4.2.3-lp152.7.3.1 zeromq-tools-4.2.3-lp152.7.3.1 zeromq-tools-debuginfo-4.2.3-lp152.7.3.1 References: https://www.suse.com/security/cve/CVE-2020-15166.html https://bugzilla.suse.com/1176116 https://bugzilla.suse.com/1176256 https://bugzilla.suse.com/1176257 https://bugzilla.suse.com/1176258 https://bugzilla.suse.com/1176259

1 0

[opensuse-updates] openSUSE-RU-2020:1912-1: Recommended update for yast2-mail
by maintenance＠opensuse.org 14 Nov '20

14 Nov '20

openSUSE Recommended Update: Recommended update for yast2-mail ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1912-1 Rating: low References: #1176645 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-mail fixes the following issues: - Fixes an issue when YaST2 Mail puts excess brackets in postfix configuration file. (bsc#1176645) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1912=1 Package List: - openSUSE Leap 15.2 (noarch): yast2-mail-4.2.3-lp152.2.3.1 References: https://bugzilla.suse.com/1176645

1 0

[opensuse-updates] openSUSE-SU-2020:1911-1: moderate: Security update for python-waitress
by opensuse-security＠opensuse.org 14 Nov '20

14 Nov '20

openSUSE Security Update: Security update for python-waitress ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1911-1 Rating: moderate References: #1160790 #1161088 #1161089 #1161670 Cross-References: CVE-2019-16785 CVE-2019-16786 CVE-2019-16789 CVE-2019-16792 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for python-waitress to 1.4.3 fixes the following security issues: - CVE-2019-16785: HTTP request smuggling through LF vs CRLF handling (bsc#1161088). - CVE-2019-16786: HTTP request smuggling through invalid Transfer-Encoding (bsc#1161089). - CVE-2019-16789: HTTP request smuggling through invalid whitespace characters (bsc#1160790). - CVE-2019-16792: HTTP request smuggling by sending the Content-Length header twice (bsc#1161670). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1911=1 Package List: - openSUSE Leap 15.2 (noarch): python2-waitress-1.4.3-lp152.4.3.1 python3-waitress-1.4.3-lp152.4.3.1 References: https://www.suse.com/security/cve/CVE-2019-16785.html https://www.suse.com/security/cve/CVE-2019-16786.html https://www.suse.com/security/cve/CVE-2019-16789.html https://www.suse.com/security/cve/CVE-2019-16792.html https://bugzilla.suse.com/1160790 https://bugzilla.suse.com/1161088 https://bugzilla.suse.com/1161089 https://bugzilla.suse.com/1161670

1 0

[opensuse-updates] openSUSE-RU-2020:1914-1: moderate: Recommended update for nvme-cli
by maintenance＠opensuse.org 14 Nov '20

14 Nov '20

openSUSE Recommended Update: Recommended update for nvme-cli ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1914-1 Rating: moderate References: #1172111 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for nvme-cli fixes the following issues: - Fix for nvme-client-connect to write 'reconnect_delay' to fabrics device on connect. (bsc#1172111) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1914=1 Package List: - openSUSE Leap 15.2 (x86_64): nvme-cli-1.10-lp152.2.3.1 nvme-cli-debuginfo-1.10-lp152.2.3.1 nvme-cli-debugsource-1.10-lp152.2.3.1 nvme-cli-regress-script-1.10-lp152.2.3.1 References: https://bugzilla.suse.com/1172111

1 0

[opensuse-updates] openSUSE-SU-2020:1909-1: important: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 14 Nov '20

14 Nov '20

openSUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1909-1 Rating: important References: #1178588 Cross-References: CVE-2020-26950 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 78.4.1 ESR * Fixed: Security fix MFSA 2020-49 (bsc#1178588) * CVE-2020-26950 (bmo#1675905) Write side effects in MCallGetProperty opcode not accounted for This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1909=1 Package List: - openSUSE Leap 15.1 (x86_64): MozillaFirefox-78.4.1-lp151.2.76.1 MozillaFirefox-branding-upstream-78.4.1-lp151.2.76.1 MozillaFirefox-buildsymbols-78.4.1-lp151.2.76.1 MozillaFirefox-debuginfo-78.4.1-lp151.2.76.1 MozillaFirefox-debugsource-78.4.1-lp151.2.76.1 MozillaFirefox-devel-78.4.1-lp151.2.76.1 MozillaFirefox-translations-common-78.4.1-lp151.2.76.1 MozillaFirefox-translations-other-78.4.1-lp151.2.76.1 References: https://www.suse.com/security/cve/CVE-2020-26950.html https://bugzilla.suse.com/1178588

1 0

[opensuse-updates] openSUSE-RU-2020:1908-1: moderate: Recommended update for ibus-rime
by maintenance＠opensuse.org 14 Nov '20

14 Nov '20

openSUSE Recommended Update: Recommended update for ibus-rime ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1908-1 Rating: moderate References: #1178582 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ibus-rime fixes the following issues: - Set Requires tag for brise, ibus-rime need it. (boo#1178582) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1908=1 Package List: - openSUSE Leap 15.2 (x86_64): ibus-rime-1.4.1~git20190223.c80c02f-lp152.2.3.1 ibus-rime-debuginfo-1.4.1~git20190223.c80c02f-lp152.2.3.1 References: https://bugzilla.suse.com/1178582

1 0

[opensuse-updates] openSUSE-SU-2020:1907-1: moderate: Security update for zeromq
by opensuse-security＠opensuse.org 13 Nov '20

13 Nov '20

openSUSE Security Update: Security update for zeromq ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1907-1 Rating: moderate References: #1176116 #1176256 #1176257 #1176258 #1176259 Cross-References: CVE-2020-15166 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves one vulnerability and has four fixes is now available. Description: This update for zeromq fixes the following issues: - CVE-2020-15166: Fixed the possibility of unauthenticated clients causing a denial-of-service (bsc#1176116). - Fixed a heap overflow when receiving malformed ZMTP v1 packets (bsc#1176256) - Fixed a memory leak in client induced by malicious server(s) without CURVE/ZAP (bsc#1176257) - Fixed memory leak when processing PUB messages with metadata (bsc#1176259) - Fixed a stack overflow in PUB/XPUB subscription store (bsc#1176258) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1907=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libunwind-1.2.1-lp151.4.3.1 libunwind-debuginfo-1.2.1-lp151.4.3.1 libunwind-debugsource-1.2.1-lp151.4.3.1 libunwind-devel-1.2.1-lp151.4.3.1 - openSUSE Leap 15.1 (x86_64): libunwind-32bit-1.2.1-lp151.4.3.1 libunwind-32bit-debuginfo-1.2.1-lp151.4.3.1 libzmq5-4.2.3-lp151.5.6.1 libzmq5-debuginfo-4.2.3-lp151.5.6.1 zeromq-debugsource-4.2.3-lp151.5.6.1 zeromq-devel-4.2.3-lp151.5.6.1 zeromq-tools-4.2.3-lp151.5.6.1 zeromq-tools-debuginfo-4.2.3-lp151.5.6.1 References: https://www.suse.com/security/cve/CVE-2020-15166.html https://bugzilla.suse.com/1176116 https://bugzilla.suse.com/1176256 https://bugzilla.suse.com/1176257 https://bugzilla.suse.com/1176258 https://bugzilla.suse.com/1176259

1 0

[opensuse-updates] openSUSE-SU-2020:1906-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 13 Nov '20

13 Nov '20

openSUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1906-1 Rating: important References: #1055014 #1055186 #1061843 #1065600 #1065729 #1066382 #1077428 #1129923 #1134760 #1149032 #1152489 #1163592 #1164648 #1166146 #1166166 #1167030 #1170415 #1174748 #1174969 #1175052 #1175306 #1175749 #1175898 #1176354 #1176485 #1176713 #1177086 #1177281 #1177353 #1177410 #1177411 #1177470 #1177739 #1177749 #1177750 #1177754 #1177755 #1177765 #1177766 #1177799 #1177801 #1177814 #1177817 #1177854 #1177855 #1177856 #1177861 #1178002 #1178079 #1178123 #1178166 #1178173 #1178175 #1178176 #1178177 #1178183 #1178184 #1178185 #1178186 #1178190 #1178191 #1178246 #1178255 #1178307 #1178330 #1178393 #1178395 #1178461 #1178579 #1178581 #1178584 #1178585 Cross-References: CVE-2020-14351 CVE-2020-16120 CVE-2020-25285 CVE-2020-25656 CVE-2020-25668 CVE-2020-25704 CVE-2020-8694 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves 7 vulnerabilities and has 65 fixes is now available. Description: The openSUSE Leap 15.2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-25704: Fixed a memory leak in perf_event_parse_addr_filter() (bsc#1178393). - CVE-2020-25668: Make FONTX ioctl use the tty pointer they were actually passed (bsc#1178123). - CVE-2020-25656: Extend func_buf_lock to readers (bnc#1177766). - CVE-2020-25285: Fixed a race condition between hugetlb sysctl handlers in mm/hugetlb.c in the Linux kernel could be used by local attackers to corrupt memory, cause a NULL pointer dereference, or possibly have unspecified other impact, aka CID-17743798d812 (bnc#1176485). - CVE-2020-14351: Fixed race in the perf_mmap_close() function (bsc#1177086). - CVE-2020-8694: Restrict energy meter to root access (bsc#1170415). - CVE-2020-16120: Check permission to open real file in overlayfs (bsc#1177470). The following non-security bugs were fixed: - ACPI: Always build evged in (git-fixes). - ACPI: button: fix handling lid state changes when input device closed (git-fixes). - ACPI: configfs: Add missing config_item_put() to fix refcount leak (git-fixes). - acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (git-fixes). - ACPI: debug: do not allow debugging when ACPI is disabled (git-fixes). - ACPI / extlog: Check for RDMSR failure (git-fixes). - ACPI: video: use ACPI backlight for HP 635 Notebook (git-fixes). - act_ife: load meta modules before tcf_idr_check_alloc() (networking-stable-20_09_24). - Add CONFIG_CHECK_CODESIGN_EKU - ALSA: ac97: (cosmetic) align argument names (git-fixes). - ALSA: aoa: i2sbus: use DECLARE_COMPLETION_ONSTACK() macro (git-fixes). - ALSA: asihpi: fix spellint typo in comments (git-fixes). - ALSA: atmel: ac97: clarify operator precedence (git-fixes). - ALSA: bebob: potential info leak in hwdep_read() (git-fixes). - ALSA: compress_offload: remove redundant initialization (git-fixes). - ALSA: core: init: use DECLARE_COMPLETION_ONSTACK() macro (git-fixes). - ALSA: core: pcm: simplify locking for timers (git-fixes). - ALSA: core: timer: clarify operator precedence (git-fixes). - ALSA: core: timer: remove redundant assignment (git-fixes). - ALSA: ctl: Workaround for lockdep warning wrt card->ctl_files_rwlock (git-fixes). - ALSA: fireworks: use semicolons rather than commas to separate statements (git-fixes). - ALSA: fix kernel-doc markups (git-fixes). - ALSA: hda: auto_parser: remove shadowed variable declaration (git-fixes). - ALSA: hda: (cosmetic) align function parameters (git-fixes). - ALSA: hda - Do not register a cb func if it is registered already (git-fixes). - ALSA: hda - Fix the return value if cb func is already registered (git-fixes). - ALSA: hda/hdmi: fix incorrect locking in hdmi_pcm_close (git-fixes). - ALSA: hda: prevent undefined shift in snd_hdac_ext_bus_get_link() (git-fixes). - ALSA: hda/realtek - Add mute Led support for HP Elitebook 845 G7 (git-fixes). - ALSA: hda/realtek: Enable audio jacks of ASUS D700SA with ALC887 (git-fixes). - ALSA: hda/realtek - Enable headphone for ASUS TM420 (git-fixes). - ALSA: hda/realtek - Fixed HP headset Mic can't be detected (git-fixes). - ALSA: hda/realtek - set mic to auto detect on a HP AIO machine (git-fixes). - ALSA: hda/realtek - The front Mic on a HP machine does not work (git-fixes). - ALSA: hda: use semicolons rather than commas to separate statements (git-fixes). - ALSA: hdspm: Fix typo arbitary (git-fixes). - ALSA: mixart: Correct comment wrt obsoleted tasklet usage (git-fixes). - ALSA: portman2x4: fix repeated word 'if' (git-fixes). - ALSA: rawmidi: (cosmetic) align function parameters (git-fixes). - ALSA: seq: oss: Avoid mutex lock for a long-time ioctl (git-fixes). - ALSA: sparc: dbri: fix repeated word 'the' (git-fixes). - ALSA: usb-audio: Add implicit feedback quirk for MODX (git-fixes). - ALSA: usb-audio: Add implicit feedback quirk for Qu-16 (git-fixes). - ALSA: usb-audio: Add implicit feedback quirk for Zoom UAC-2 (git-fixes). - ALSA: usb-audio: Add mixer support for Pioneer DJ DJM-250MK2 (git-fixes). - ALSA: usb-audio: add usb vendor id as DSD-capable for Khadas devices (git-fixes). - ALSA: usb-audio: endpoint.c: fix repeated word 'there' (git-fixes). - ALSA: usb-audio: fix spelling mistake "Frequence" -> "Frequency" (git-fixes). - ALSA: usb-audio: Line6 Pod Go interface requires static clock rate quirk (git-fixes). - ALSA: usb: scarless_gen2: fix endianness issue (git-fixes). - ALSA: vx: vx_core: clarify operator precedence (git-fixes). - ALSA: vx: vx_pcm: remove redundant assignment (git-fixes). - ASoC: codecs: wcd9335: Set digital gain range correctly (git-fixes). - ASoC: cs42l51: manage mclk shutdown delay (git-fixes). - ASoC: fsl: imx-es8328: add missing put_device() call in imx_es8328_probe() (git-fixes). - ASoC: fsl_sai: Instantiate snd_soc_dai_driver (git-fixes). - ASoC: Intel: kbl_rt5663_max98927: Fix kabylake_ssp_fixup function (git-fixes). - ASoC: qcom: lpass-cpu: fix concurrency issue (git-fixes). - ASoC: qcom: lpass-platform: fix memory leak (git-fixes). - ASoC: qcom: sdm845: set driver name correctly (git-fixes). - ASoC: sun50i-codec-analog: Fix duplicate use of ADC enable bits (git-fixes). - ASoC: tlv320aic32x4: Fix bdiv clock rate derivation (git-fixes). - ata: sata_rcar: Fix DMA boundary mask (git-fixes). - ath10k: check idx validity in __ath10k_htt_rx_ring_fill_n() (git-fixes). - ath10k: Fix the size used in a 'dma_free_coherent()' call in an error handling path (git-fixes). - ath10k: fix VHT NSS calculation when STBC is enabled (git-fixes). - ath10k: provide survey info as accumulated data (git-fixes). - ath10k: start recovery process when payload length exceeds max htc length for sdio (git-fixes). - ath6kl: prevent potential array overflow in ath6kl_add_new_sta() (git-fixes). - ath6kl: wmi: prevent a shift wrapping bug in ath6kl_wmi_delete_pstream_cmd() (git-fixes). - ath9k: Fix potential out of bounds in ath9k_htc_txcompletion_cb() (git-fixes). - ath9k: hif_usb: fix race condition between usb_get_urb() and usb_kill_anchored_urbs() (git-fixes). - ath9k_htc: Use appropriate rs_datalen type (git-fixes). - backlight: sky81452-backlight: Fix refcount imbalance on error (git-fixes). - blk-mq: order adding requests to hctx->dispatch and checking SCHED_RESTART (bsc#1177750). - block: ensure bdi->io_pages is always initialized (bsc#1177749). - block: Fix page_is_mergeable() for compound pages (bsc#1177814). - block: Set same_page to false in __bio_try_merge_page if ret is false (git-fixes). - Bluetooth: btusb: Fix memleak in btusb_mtk_submit_wmt_recv_urb (git-fixes). - Bluetooth: hci_uart: Cancel init work before unregistering (git-fixes). - Bluetooth: MGMT: Fix not checking if BT_HS is enabled (git-fixes). - Bluetooth: Only mark socket zapped after unlocking (git-fixes). - bnxt_en: Protect bnxt_set_eee() and bnxt_set_pauseparam() with mutex (git-fixes). - bonding: show saner speed for broadcast mode (networking-stable-20_08_24). - brcm80211: fix possible memleak in brcmf_proto_msgbuf_attach (git-fixes). - brcmfmac: check ndev pointer (git-fixes). - brcmsmac: fix memory leak in wlc_phy_attach_lcnphy (git-fixes). - btrfs: Account for merged patches upstream Move below patches to sorted section. - btrfs: add owner and fs_info to alloc_state io_tree (bsc#1177854). - btrfs: allocate scrub workqueues outside of locks (bsc#1178183). - btrfs: cleanup cow block on error (bsc#1178584). - btrfs: do not force read-only after error in drop snapshot (bsc#1176354). - btrfs: drop path before adding new uuid tree entry (bsc#1178176). - btrfs: fix filesystem corruption after a device replace (bsc#1178395). - btrfs: fix NULL pointer dereference after failure to create snapshot (bsc#1178190). - btrfs: fix overflow when copying corrupt csums for a message (bsc#1178191). - btrfs: fix space cache memory leak after transaction abort (bsc#1178173). - btrfs: move btrfs_rm_dev_replace_free_srcdev outside of all locks (bsc#1178395). - btrfs: move btrfs_scratch_superblocks into btrfs_dev_replace_finishing (bsc#1178395). - btrfs: qgroup: fix qgroup meta rsv leak for subvolume operations (bsc#1177856). - btrfs: qgroup: fix wrong qgroup metadata reserve for delayed inode (bsc#1177855). - btrfs: reschedule if necessary when logging directory items (bsc#1178585). - btrfs: send, orphanize first all conflicting inodes when processing references (bsc#1178579). - btrfs: send, recompute reference path after orphanization of a directory (bsc#1178581). - btrfs: set the correct lockdep class for new nodes (bsc#1178184). - btrfs: set the lockdep class for log tree extent buffers (bsc#1178186). - btrfs: tree-checker: fix false alert caused by legacy btrfs root item (bsc#1177861). - can: can_create_echo_skb(): fix echo skb generation: always use skb_clone() (git-fixes). - can: c_can: reg_map_{c,d}_can: mark as __maybe_unused (git-fixes). - can: dev: __can_get_echo_skb(): fix real payload length return value for RTR frames (git-fixes). - can: dev: can_get_echo_skb(): prevent call to kfree_skb() in hard IRQ context (git-fixes). - can: flexcan: flexcan_chip_stop(): add error handling and propagate error value (git-fixes). - can: flexcan: flexcan_remove(): disable wakeup completely (git-fixes). - can: flexcan: remove ack_grp and ack_bit handling from driver (git-fixes). - can: flexcan: remove FLEXCAN_QUIRK_DISABLE_MECR quirk for LS1021A (git-fixes). - can: peak_canfd: pucan_handle_can_rx(): fix echo management when loopback is on (git-fixes). - can: peak_usb: add range checking in decode operations (git-fixes). - can: peak_usb: peak_usb_get_ts_time(): fix timestamp wrapping (git-fixes). - can: rx-offload: do not call kfree_skb() from IRQ context (git-fixes). - can: softing: softing_card_shutdown(): add braces around empty body in an 'if' statement (git-fixes). - ceph: promote to unsigned long long before shifting (bsc#1178175). - clk: at91: clk-main: update key before writing AT91_CKGR_MOR (git-fixes). - clk: at91: remove the checking of parent_name (git-fixes). - clk: bcm2835: add missing release if devm_clk_hw_register fails (git-fixes). - clk: imx8mq: Fix usdhc parents order (git-fixes). - clk: keystone: sci-clk: fix parsing assigned-clock data during probe (git-fixes). - clk: meson: g12a: mark fclk_div2 as critical (git-fixes). - clk: qcom: gcc-sdm660: Fix wrong parent_map (git-fixes). - crypto: ccp - fix error handling (git-fixes). - cxgb4: fix memory leak during module unload (networking-stable-20_09_24). - cxgb4: Fix offset when clearing filter byte counters (networking-stable-20_09_24). - cxl: Rework error message for incompatible slots (bsc#1055014 git-fixes). - dax: Fix compilation for CONFIG_DAX && !CONFIG_FS_DAX (bsc#1177817). - Disable module compression on SLE15 SP2 (bsc#1178307) - dma-direct: add missing set_memory_decrypted() for coherent mapping (bsc#1175898, ECO-2743). - dma-direct: always align allocation size in dma_direct_alloc_pages() (bsc#1175898, ECO-2743). - dma-direct: atomic allocations must come from atomic coherent pools (bsc#1175898, ECO-2743). - dma-direct: check return value when encrypting or decrypting memory (bsc#1175898, ECO-2743). - dma-direct: consolidate the error handling in dma_direct_alloc_pages (bsc#1175898, ECO-2743). - dma-direct: make uncached_kernel_address more general (bsc#1175898, ECO-2743). - dma-direct: provide function to check physical memory area validity (bsc#1175898, ECO-2743). - dma-direct: provide mmap and get_sgtable method overrides (bsc#1175898, ECO-2743). - dma-direct: re-encrypt memory if dma_direct_alloc_pages() fails (bsc#1175898, ECO-2743). - dma-direct: remove __dma_direct_free_pages (bsc#1175898, ECO-2743). - dma-direct: remove the dma_handle argument to __dma_direct_alloc_pages (bsc#1175898, ECO-2743). - dmaengine: dma-jz4780: Fix race in jz4780_dma_tx_status (git-fixes). - dmaengine: dmatest: Check list for emptiness before access its last entry (git-fixes). - dmaengine: dw: Activate FIFO-mode for memory peripherals only (git-fixes). - dma-mapping: add a dma_can_mmap helper (bsc#1175898, ECO-2743). - dma-mapping: always use VM_DMA_COHERENT for generic DMA remap (bsc#1175898, ECO-2743). - dma-mapping: DMA_COHERENT_POOL should select GENERIC_ALLOCATOR (bsc#1175898, ECO-2743). - dma-mapping: make dma_atomic_pool_init self-contained (bsc#1175898, ECO-2743). - dma-mapping: merge the generic remapping helpers into dma-direct (bsc#1175898, ECO-2743). - dma-mapping: remove arch_dma_mmap_pgprot (bsc#1175898, ECO-2743). - dma-mapping: warn when coherent pool is depleted (bsc#1175898, ECO-2743). - dma-pool: add additional coherent pools to map to gfp mask (bsc#1175898, ECO-2743). - dma-pool: add pool sizes to debugfs (bsc#1175898, ECO-2743). - dma-pool: decouple DMA_REMAP from DMA_COHERENT_POOL (bsc#1175898, ECO-2743). - dma-pool: do not allocate pool memory from CMA (bsc#1175898, ECO-2743). - dma-pool: dynamically expanding atomic pools (bsc#1175898, ECO-2743). - dma-pool: Fix an uninitialized variable bug in atomic_pool_expand() (bsc#1175898, ECO-2743). - dma-pool: fix coherent pool allocations for IOMMU mappings (bsc#1175898, ECO-2743). - dma-pool: fix too large DMA pools on medium memory size systems (bsc#1175898, ECO-2743). - dma-pool: get rid of dma_in_atomic_pool() (bsc#1175898, ECO-2743). - dma-pool: introduce dma_guess_pool() (bsc#1175898, ECO-2743). - dma-pool: make sure atomic pool suits device (bsc#1175898, ECO-2743). - dma-pool: Only allocate from CMA when in same memory zone (bsc#1175898, ECO-2743). - dma-pool: scale the default DMA coherent pool size with memory capacity (bsc#1175898, ECO-2743). - dma-remap: separate DMA atomic pools from direct remap code (bsc#1175898, ECO-2743). - dm: Call proper helper to determine dax support (bsc#1177817). - dm/dax: Fix table reference counts (bsc#1178246). - docs: driver-api: remove a duplicated index entry (git-fixes). - drivers: watchdog: rdc321x_wdt: Fix race condition bugs (git-fixes). - EDAC/i5100: Fix error handling order in i5100_init_one() (bsc#1152489). - eeprom: at25: set minimum read/write access stride to 1 (git-fixes). - exfat: fix name_hash computation on big endian systems (git-fixes). - exfat: fix overflow issue in exfat_cluster_to_sector() (git-fixes). - exfat: fix possible memory leak in exfat_find() (git-fixes). - exfat: fix use of uninitialized spinlock on error path (git-fixes). - exfat: fix wrong hint_stat initialization in exfat_find_dir_entry() (git-fixes). - exfat: fix wrong size update of stream entry by typo (git-fixes). - extcon: ptn5150: Fix usage of atomic GPIO with sleeping GPIO chips (git-fixes). - futex: Adjust absolute futex timeouts with per time namespace offset (bsc#1164648). - futex: Consistently use fshared as boolean (bsc#1149032). - futex: Fix incorrect should_fail_futex() handling (bsc#1149032). - futex: Remove put_futex_key() (bsc#1149032). - futex: Remove unused or redundant includes (bsc#1149032). - gre6: Fix reception with IP6_TNL_F_RCV_DSCP_COPY (networking-stable-20_08_24). - gtp: add GTPA_LINK info to msg sent to userspace (networking-stable-20_09_11). - HID: hid-input: fix stylus battery reporting (git-fixes). - HID: ite: Add USB id match for Acer One S1003 keyboard dock (git-fixes). - HID: roccat: add bounds checking in kone_sysfs_write_settings() (git-fixes). - HID: wacom: Avoid entering wacom_wac_pen_report for pad / battery (git-fixes). - hyperv_fb: Update screen_info after removing old framebuffer (bsc#1175306). - i2c: core: Restore acpi_walk_dep_device_list() getting called after registering the ACPI i2c devs (git-fixes). - i2c: imx: Fix external abort on interrupt in exit paths (git-fixes). - i2c: rcar: Auto select RESET_CONTROLLER (git-fixes). - i3c: master add i3c_master_attach_boardinfo to preserve boardinfo (git-fixes). - i3c: master: Fix error return in cdns_i3c_master_probe() (git-fixes). - ibmveth: Identify ingress large send packets (bsc#1178185 ltc#188897). - ibmveth: Switch order of ibmveth_helper calls (bsc#1061843 git-fixes). - ibmvnic: fix ibmvnic_set_mac (bsc#1066382 ltc#160943 git-fixes). - ibmvnic: save changed mac address to adapter->mac_addr (bsc#1134760 ltc#177449 git-fixes). - ibmvnic: set up 200GBPS speed (bsc#1129923 git-fixes). - icmp: randomize the global rate limiter (git-fixes). - ida: Free allocated bitmap in error path (git-fixes). - iio:accel:bma180: Fix use of true when should be iio_shared_by enum (git-fixes). - iio: adc: gyroadc: fix leak of device node iterator (git-fixes). - iio: adc: stm32-adc: fix runtime autosuspend delay when slow polling (git-fixes). - iio:adc:ti-adc0832 Fix alignment issue with timestamp (git-fixes). - iio:adc:ti-adc12138 Fix alignment issue with timestamp (git-fixes). - iio:dac:ad5592r: Fix use of true for IIO_SHARED_BY_TYPE (git-fixes). - iio:gyro:itg3200: Fix timestamp alignment and prevent data leak (git-fixes). - iio:light:si1145: Fix timestamp alignment and prevent data leak (git-fixes). - iio:magn:hmc5843: Fix passing true where iio_shared_by enum required (git-fixes). - ima: Do not ignore errors from crypto_shash_update() (git-fixes). - ima: Remove semicolon at the end of ima_get_binary_runtime_size() (git-fixes). - Input: ati_remote2 - add missing newlines when printing module parameters (git-fixes). - Input: ep93xx_keypad - fix handling of platform_get_irq() error (git-fixes). - Input: imx6ul_tsc - clean up some errors in imx6ul_tsc_resume() (git-fixes). - Input: omap4-keypad - fix handling of platform_get_irq() error (git-fixes). - Input: stmfts - fix a & vs && typo (git-fixes). - Input: sun4i-ps2 - fix handling of platform_get_irq() error (git-fixes). - Input: twl4030_keypad - fix handling of platform_get_irq() error (git-fixes). - iomap: Make sure iomap_end is called after iomap_begin (bsc#1177754). - iommu/vt-d: Gracefully handle DMAR units with no supported address widths (bsc#1177739). - ip: fix tos reflection in ack and reset packets (networking-stable-20_09_24). - ipmi_si: Fix wrong return value in try_smi_init() (git-fixes). - ipv4: Initialize flowi4_multipath_hash in data path (networking-stable-20_09_24). - ipv4: Restore flowi4_oif update before call to xfrm_lookup_route (git-fixes). - ipv4: Update exception handling for multipath routes via same device (networking-stable-20_09_24). - ipv6: avoid lockdep issue in fib6_del() (networking-stable-20_09_24). - ipv6: Fix sysctl max for fib_multipath_hash_policy (networking-stable-20_09_11). - ipvlan: fix device features (networking-stable-20_08_24). - iwlwifi: mvm: split a print to avoid a WARNING in ROC (git-fixes). - kABI: Fix kABI after add CodeSigning extended key usage (bsc#1177353). - kallsyms: Refactor kallsyms_show_value() to take cred (git-fixes). - kbuild: enforce -Werror=return-type (bsc#1177281). - KVM: x86/mmu: Commit zap of remaining invalid pages when recovering lpages (git-fixes). - leds: bcm6328, bcm6358: use devres LED registering function (git-fixes). - leds: mt6323: move period calculation (git-fixes). - libceph: clear con->out_msg on Policy::stateful_server faults (bsc#1178177). - lib/crc32.c: fix trivial typo in preprocessor condition (git-fixes). - mac80211: handle lack of sband->bitrates in rates (git-fixes). - mailbox: avoid timer start from callback (git-fixes). - media: ati_remote: sanity check for both endpoints (git-fixes). - media: bdisp: Fix runtime PM imbalance on error (git-fixes). - media: exynos4-is: Fix a reference count leak due to pm_runtime_get_sync (git-fixes). - media: exynos4-is: Fix a reference count leak (git-fixes). - media: exynos4-is: Fix several reference count leaks due to pm_runtime_get_sync (git-fixes). - media: firewire: fix memory leak (git-fixes). - media: i2c: ov5640: Enable data pins on poweron for DVP mode (git-fixes). - media: i2c: ov5640: Remain in power down for DVP mode unless streaming (git-fixes). - media: i2c: ov5640: Separate out mipi configuration from s_power (git-fixes). - media: imx274: fix frame interval handling (git-fixes). - media: media/pci: prevent memory leak in bttv_probe (git-fixes). - media: platform: Improve queue set up flow for bug fixing (git-fixes). - media: platform: s3c-camif: Fix runtime PM imbalance on error (git-fixes). - media: platform: sti: hva: Fix runtime PM imbalance on error (git-fixes). - media: rcar_drif: Allocate v4l2_async_subdev dynamically (git-fixes). - media: rcar_drif: Fix fwnode reference leak when parsing DT (git-fixes). - media: saa7134: avoid a shift overflow (git-fixes). - media: st-delta: Fix reference count leak in delta_run_work (git-fixes). - media: sti: Fix reference count leaks (git-fixes). - media: tw5864: check status of tw5864_frameinterval_get (git-fixes). - media: uvcvideo: Ensure all probed info is returned to v4l2 (git-fixes). - media: uvcvideo: Fix dereference of out-of-bound list iterator (git-fixes). - media: uvcvideo: Fix uvc_ctrl_fixup_xu_info() not having any effect (git-fixes). - media: venus: core: Fix runtime PM imbalance in venus_probe (git-fixes). - media: vsp1: Fix runtime PM imbalance on error (git-fixes). - memory: fsl-corenet-cf: Fix handling of platform_get_irq() error (git-fixes). - memory: omap-gpmc: Fix a couple off by ones (git-fixes). - memory: omap-gpmc: Fix build error without CONFIG_OF (git-fixes). - mfd: sm501: Fix leaks in probe() (git-fixes). - mic: vop: copy data to kernel space then write to io memory (git-fixes). - misc: mic: scif: Fix error handling path (git-fixes). - misc: rtsx: Fix memory leak in rtsx_pci_probe (git-fixes). - misc: vop: add round_up(x,4) for vring_size to avoid kernel panic (git-fixes). - mmc: sdio: Check for CISTPL_VERS_1 buffer size (git-fixes). - mm: do not panic when links can't be created in sysfs (bsc#1178002). - mm: do not rely on system state to detect hot-plug operations (bsc#1178002). - mm: fix a race during THP splitting (bsc#1178255). - mm/huge_memory.c: use head to check huge zero page (git-fixes (mm/thp)). - mm: madvise: fix vma user-after-free (git-fixes). - mm/mempolicy.c: fix out of bounds write in mpol_parse_str() (git-fixes (mm/mempolicy)). - mm/page-writeback.c: avoid potential division by zero in wb_min_max_ratio() (git-fixes (mm/writeback)). - mm/page-writeback.c: improve arithmetic divisions (git-fixes (mm/writeback)). - mm: replace memmap_context by meminit_context (bsc#1178002). - mm/rmap: fixup copying of soft dirty and uffd ptes (git-fixes (mm/rmap)). - mm/swapfile.c: fix potential memory leak in sys_swapon (git-fixes). - mm/zsmalloc.c: fix the migrated zspage statistics (git-fixes (mm/zsmalloc)). - module: Correctly truncate sysfs sections output (git-fixes). - module: Do not expose section addresses to non-CAP_SYSLOG (git-fixes). - module: Refactor section attr into bin attribute (git-fixes). - module: statically initialize init section freeing data (git-fixes). - Move upstreamed BT patch into sorted section - mtd: lpddr: Fix bad logic in print_drs_error (git-fixes). - mtd: lpddr: fix excessive stack usage with clang (git-fixes). - mtd: mtdoops: Do not write panic data twice (git-fixes). - mtd: rawnand: stm32_fmc2: fix a buffer overflow (git-fixes). - mtd: rawnand: vf610: disable clk on error handling path in probe (git-fixes). - mtd: spinand: gigadevice: Add QE Bit (git-fixes). - mtd: spinand: gigadevice: Only one dummy byte in QUADIO (git-fixes). - mwifiex: do not call del_timer_sync() on uninitialized timer (git-fixes). - mwifiex: Do not use GFP_KERNEL in atomic context (git-fixes). - mwifiex: fix double free (git-fixes). - mwifiex: remove function pointer check (git-fixes). - mwifiex: Remove unnecessary braces from HostCmd_SET_SEQ_NO_BSS_INFO (git-fixes). - net: bridge: br_vlan_get_pvid_rcu() should dereference the VLAN group under RCU (networking-stable-20_09_24). - net/core: check length before updating Ethertype in skb_mpls_{push,pop} (git-fixes). - net: DCB: Validate DCB_ATTR_DCB_BUFFER argument (networking-stable-20_09_24). - net: disable netpoll on fresh napis (networking-stable-20_09_11). - net: dsa: b53: check for timeout (networking-stable-20_08_24). - net: dsa: rtl8366: Properly clear member config (networking-stable-20_09_24). - net: fec: correct the error path for regulator disable in probe (networking-stable-20_08_24). - net: Fix bridge enslavement failure (networking-stable-20_09_24). - net: Fix potential wrong skb->protocol in skb_vlan_untag() (networking-stable-20_08_24). - net: hns: Fix memleak in hns_nic_dev_probe (networking-stable-20_09_11). - net: ipv6: fix kconfig dependency warning for IPV6_SEG6_HMAC (networking-stable-20_09_24). - netlabel: fix problems with mapping removal (networking-stable-20_09_11). - net: lantiq: Disable IRQs only if NAPI gets scheduled (networking-stable-20_09_24). - net: lantiq: Use napi_complete_done() (networking-stable-20_09_24). - net: lantiq: use netif_tx_napi_add() for TX NAPI (networking-stable-20_09_24). - net: lantiq: Wake TX queue again (networking-stable-20_09_24). - net/mlx5e: Enable adding peer miss rules only if merged eswitch is supported (networking-stable-20_09_24). - net/mlx5e: TLS, Do not expose FPGA TLS counter if not supported (networking-stable-20_09_24). - net/mlx5: Fix FTE cleanup (networking-stable-20_09_24). - net: mscc: ocelot: fix race condition with TX timestamping (bsc#1178461). - net: phy: Avoid NPD upon phy_detach() when driver is unbound (networking-stable-20_09_24). - net: phy: Do not warn in phy_stop() on PHY_DOWN (networking-stable-20_09_24). - net: qrtr: fix usage of idr in port assignment to socket (networking-stable-20_08_24). - net/sched: act_ct: Fix skb double-free in tcf_ct_handle_fragments() error flow (networking-stable-20_08_24). - net: sctp: Fix IPv6 ancestor_size calc in sctp_copy_descendant (networking-stable-20_09_24). - net: sctp: Fix negotiation of the number of data streams (networking-stable-20_08_24). - net/smc: Prevent kernel-infoleak in __smc_diag_dump() (networking-stable-20_08_24). - net: systemport: Fix memleak in bcm_sysport_probe (networking-stable-20_09_11). - net: usb: dm9601: Add USB ID of Keenetic Plus DSL (networking-stable-20_09_11). - net: usb: qmi_wwan: add Cellient MPL200 card (git-fixes). - net: usb: rtl8150: set random MAC address when set_ethernet_addr() fails (git-fixes). - net: wireless: nl80211: fix out-of-bounds access in nl80211_del_key() (git-fixes). - nfc: Ensure presence of NFC_ATTR_FIRMWARE_NAME attribute in nfc_genl_fw_download() (git-fixes). - nfp: use correct define to return NONE fec (networking-stable-20_09_24). - nl80211: fix non-split wiphy information (git-fixes). - NTB: hw: amd: fix an issue about leak system resources (git-fixes). - ntb: intel: Fix memleak in intel_ntb_pci_probe (git-fixes). - nvme-rdma: fix crash due to incorrect cqe (bsc#1174748). - nvme-rdma: fix crash when connect rejected (bsc#1174748). - overflow: Include header file with SIZE_MAX declaration (git-fixes). - p54: avoid accessing the data mapped to streaming DMA (git-fixes). - PCI: aardvark: Check for errors from pci_bridge_emul_init() call (git-fixes). - PCI/ACPI: Whitelist hotplug ports for D3 if power managed by ACPI (git-fixes). - percpu: fix first chunk size calculation for populated bitmap (git-fixes (mm/percpu)). - perf/x86/amd: Fix sampling Large Increment per Cycle events (bsc#1152489). - perf/x86: Fix n_pair for cancelled txn (bsc#1152489). - pinctrl: mcp23s08: Fix mcp23x17 precious range (git-fixes). - pinctrl: mcp23s08: Fix mcp23x17_regmap initialiser (git-fixes). - PKCS#7: Check codeSigning EKU for kernel module and kexec pe verification. - PKCS#7: Check codeSigning EKU for kernel module and kexec pe verification (bsc#1177353). - platform/x86: mlx-platform: Remove PSU EEPROM configuration (git-fixes). - PM: hibernate: Batch hibernate and resume IO requests (bsc#1178079). - PM: hibernate: remove the bogus call to get_gendisk() in software_resume() (git-fixes). - PM: runtime: Drop runtime PM references to supplier on link removal (git-fixes). - powerpc/book3s64/radix: Make radix_mem_block_size 64bit (bsc#1055186 ltc#153436 git-fixes). - powerpc: Fix undetected data corruption with P9N DD2.1 VSX CI load emulation (bsc#1065729). - powerpc/hwirq: Remove stale forward irq_chip declaration (bsc#1065729). - powerpc/icp-hv: Fix missing of_node_put() in success path (bsc#1065729). - powerpc/irq: Drop forward declaration of struct irqaction (bsc#1065729). - powerpc/papr_scm: Fix warning triggered by perf_stats_show() (bsc#1175052 jsc#SLE-13823 bsc#1174969 jsc#SLE-12769 git-fixes). - powerpc/perf/hv-gpci: Fix starting index value (bsc#1065729). - powerpc/powernv/dump: Fix race while processing OPAL dump (bsc#1065729). - powerpc/powernv/elog: Fix race while processing OPAL error log event (bsc#1065729). - powerpc/pseries: Avoid using addr_to_pfn in real mode (jsc#SLE-9246 git-fixes). - powerpc/pseries: explicitly reschedule during drmem_lmb list traversal (bsc#1077428 ltc#163882 git-fixes). - powerpc/pseries: Fix missing of_node_put() in rng_init() (bsc#1065729). - power: supply: bq27xxx: report "not charging" on all types (git-fixes). - power: supply: test_power: add missing newlines when printing parameters by sysfs (git-fixes). - pwm: img: Fix null pointer access in probe (git-fixes). - pwm: lpss: Add range limit check for the base_unit register value (git-fixes). - pwm: lpss: Fix off by one error in base_unit math in pwm_lpss_prepare() (git-fixes). - qtnfmac: fix resource leaks on unsupported iftype error return path (git-fixes). - r8169: fix issue with forced threading in combination with shared interrupts (git-fixes). - r8169: fix operation under forced interrupt threading (git-fixes). - rapidio: fix the missed put_device() for rio_mport_add_riodev (git-fixes). - regulator: defer probe when trying to get voltage from unresolved supply (git-fixes). - reset: sti: reset-syscfg: fix struct description warnings (git-fixes). - ring-buffer: Return 0 on success from ring_buffer_resize() (git-fixes). - rpm/kernel-module-subpackage: make Group tag optional (bsc#1163592) - rtc: rx8010: do not modify the global rtc ops (git-fixes). - rtl8xxxu: prevent potential memory leak (git-fixes). - rtw88: increse the size of rx buffer size (git-fixes). - s390/cio: add cond_resched() in the slow_eval_known_fn() loop (bsc#1177799 LTC#188733). - s390/dasd: Fix zero write for FBA devices (bsc#1177801 LTC#188735). - scsi: ibmvfc: Fix error return in ibmvfc_probe() (bsc#1065729). - scsi: ibmvscsi: Fix potential race after loss of transport (bsc#1178166 ltc#188226). - scsi: mptfusion: Do not use GFP_ATOMIC for larger DMA allocations (bsc#1175898, ECO-2743). - sctp: not disable bh in the whole sctp_get_port_local() (networking-stable-20_09_11). - selftests/timers: Turn off timeout setting (git-fixes). - serial: 8250_mtk: Fix uart_get_baud_rate warning (git-fixes). - serial: txx9: add missing platform_driver_unregister() on error in serial_txx9_init (git-fixes). - slimbus: core: check get_addr before removing laddr ida (git-fixes). - slimbus: core: do not enter to clock pause mode in core (git-fixes). - slimbus: qcom-ngd-ctrl: disable ngd in qmi server down callback (git-fixes). - soc: fsl: qbman: Fix return value on success (git-fixes). - spi: spi-s3c64xx: Check return values (git-fixes). - spi: spi-s3c64xx: swap s3c64xx_spi_set_cs() and s3c64xx_enable_datapath() (git-fixes). - staging: comedi: cb_pcidas: Allow 2-channel commands for AO subdevice (git-fixes). - staging: comedi: check validity of wMaxPacketSize of usb endpoints found (git-fixes). - staging: octeon: Drop on uncorrectable alignment or FCS error (git-fixes). - staging: octeon: repair "fixed-link" support (git-fixes). - staging: rtl8192u: Do not use GFP_KERNEL in atomic context (git-fixes). - taprio: Fix allowing too small intervals (networking-stable-20_09_24). - time: Prevent undefined behaviour in timespec64_to_ns() (bsc#1164648). - tipc: fix memory leak caused by tipc_buf_append() (git-fixes). - tipc: Fix memory leak in tipc_group_create_member() (networking-stable-20_09_24). - tipc: fix shutdown() of connectionless socket (networking-stable-20_09_11). - tipc: fix shutdown() of connection oriented socket (networking-stable-20_09_24). - tipc: fix the skb_unshare() in tipc_buf_append() (git-fixes). - tipc: fix uninit skb->data in tipc_nl_compat_dumpit() (networking-stable-20_08_24). - tipc: use skb_unshare() instead in tipc_buf_append() (networking-stable-20_09_24). - tracing: Check return value of __create_val_fields() before using its result (git-fixes). - tracing: Save normal string variables (git-fixes). - tty: ipwireless: fix error handling (git-fixes). - tty: serial: fsl_lpuart: fix lpuart32_poll_get_char (git-fixes). - uio: free uio id after uio file node is freed (git-fixes). - USB: adutux: fix debugging (git-fixes). - usb: cdc-acm: add quirk to blacklist ETAS ES58X devices (git-fixes). - usb: cdc-acm: fix cooldown mechanism (git-fixes). - USB: cdc-acm: handle broken union descriptors (git-fixes). - USB: cdc-wdm: Make wdm_flush() interruptible and add wdm_fsync() (git-fixes). - usb: core: Solve race condition in anchor cleanup functions (git-fixes). - usb: dwc2: Fix INTR OUT transfers in DDMA mode (git-fixes). - usb: dwc2: Fix parameter type in function pointer prototype (git-fixes). - usb: dwc3: core: add phy cleanup for probe error handling (git-fixes). - usb: dwc3: core: do not trigger runtime pm when remove driver (git-fixes). - usb: dwc3: ep0: Fix ZLP for OUT ep0 requests (git-fixes). - usb: dwc3: gadget: Resume pending requests after CLEAR_STALL (git-fixes). - usb: dwc3: pci: Allow Elkhart Lake to utilize DSM method for PM functionality (git-fixes). - usb: dwc3: simple: add support for Hikey 970 (git-fixes). - usb: gadget: f_ncm: allow using NCM in SuperSpeed Plus gadgets (git-fixes). - usb: gadget: f_ncm: fix ncm_bitrate for SuperSpeed and above (git-fixes). - usb: gadget: function: printer: fix use-after-free in __lock_acquire (git-fixes). - usb: gadget: u_ether: enable qmult on SuperSpeed Plus as well (git-fixes). - usblp: fix race between disconnect() and read() (git-fixes). - usb: mtu3: fix panic in mtu3_gadget_stop() (git-fixes). - usb: ohci: Default to per-port over-current protection (git-fixes). - USB: serial: cyberjack: fix write-URB completion race (git-fixes). - USB: serial: ftdi_sio: add support for FreeCalypso JTAG+UART adapters (git-fixes). - USB: serial: option: add Cellient MPL200 card (git-fixes). - USB: serial: option: Add Telit FT980-KS composition (git-fixes). - USB: serial: pl2303: add device-id for HP GC device (git-fixes). - USB: serial: qcserial: fix altsetting probing (git-fixes). - usb: typec: tcpm: During PR_SWAP, source caps should be sent only after tSwapSourceStart (git-fixes). - usb: xhci-mtk: Fix typo (git-fixes). - usb: xhci: omit duplicate actions when suspending a runtime suspended host (git-fixes). - video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (bsc#1175306). - video: hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (bsc#1175306). - video: hyperv: hyperv_fb: Use physical memory for fb on HyperV Gen 1 VMs (bsc#1175306). - VMCI: check return value of get_user_pages_fast() for errors (git-fixes). - w1: mxc_w1: Fix timeout resolution problem leading to bus error (git-fixes). - watchdog: Fix memleak in watchdog_cdev_register (git-fixes). - watchdog: sp5100: Fix definition of EFCH_PM_DECODEEN3 (git-fixes). - watchdog: Use put_device on error (git-fixes). - wcn36xx: Fix reported 802.11n rx_highest rate wcn3660/wcn3680 (git-fixes). - writeback: Avoid skipping inode writeback (bsc#1177755). - writeback: Fix sync livelock due to b_dirty_time processing (bsc#1177755). - writeback: Protect inode->i_io_list with inode->i_lock (bsc#1177755). - X.509: Add CodeSigning extended key usage parsing (bsc#1177353). - x86/alternative: Do not call text_poke() in lazy TLB mode (bsc#1175749). - x86/fpu: Allow multiple bits in clearcpuid= parameter (bsc#1152489). - x86/ioapic: Unbreak check_timer() (bsc#1152489). - x86/kexec: Use up-to-dated screen_info copy to fill boot params (bsc#1175306). - x86/{mce,mm}: Unmap the entire page if the whole page is affected and poisoned (bsc#1177765). - x86/mm: unencrypted non-blocking DMA allocations use coherent pools (bsc#1175898, ECO-2743). - x86/xen: disable Firmware First mode for correctable memory errors (bsc#1176713). - xen/blkback: use lateeoi irq binding (XSA-332 bsc#1177411). - xen/events: add a new "late EOI" evtchn framework (XSA-332 bsc#1177411). - xen/events: add a proper barrier to 2-level uevent unmasking (XSA-332 bsc#1177411). - xen/events: avoid removing an event channel while handling it (XSA-331 bsc#1177410). - xen/events: block rogue events for some time (XSA-332 bsc#1177411). - xen/events: defer eoi in case of excessive number of events (XSA-332 bsc#1177411). - xen/events: fix race in evtchn_fifo_unmask() (XSA-332 bsc#1177411). - xen/events: switch user event channels to lateeoi model (XSA-332 bsc#1177411). - xen/events: use a common cpu hotplug hook for event channels (XSA-332 bsc#1177411). - xen/gntdev.c: Mark pages as dirty (bsc#1065600). - xen/netback: use lateeoi irq binding (XSA-332 bsc#1177411). - xen/pciback: use lateeoi irq binding (XSA-332 bsc#1177411). - xen/pvcallsback: use lateeoi irq binding (XSA-332 bsc#1177411). - xen/scsiback: use lateeoi irq binding (XSA-332 bsc#1177411). - xfs: complain if anyone tries to create a too-large buffer log item (bsc#1166146). - xfs: do not update mtime on COW faults (bsc#1167030). - xfs: fix high key handling in the rt allocator's query_range function (git-fixes). - xfs: fix scrub flagging rtinherit even if there is no rt device (git-fixes). - xfs: fix xfs_bmap_validate_extent_raw when checking attr fork of rt files (git-fixes). - xfs: flush new eof page on truncate to avoid post-eof corruption (git-fixes). - xfs: force the log after remapping a synchronous-writes file (git-fixes). - xfs: introduce XFS_MAX_FILEOFF (bsc#1166166). - xfs: limit entries returned when counting fsmap records (git-fixes). - xfs: remove unused variable 'done' (bsc#1166166). - xfs: set xefi_discard when creating a deferred agfl free log intent item (git-fixes). - xfs: truncate should remove all blocks, not just to the end of the page cache (bsc#1166166). - xhci: do not create endpoint debugfs entry before ring buffer is set (git-fixes). Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1906=1 Package List: - openSUSE Leap 15.2 (x86_64): kernel-debug-5.3.18-lp152.50.1 kernel-debug-debuginfo-5.3.18-lp152.50.1 kernel-debug-debugsource-5.3.18-lp152.50.1 kernel-debug-devel-5.3.18-lp152.50.1 kernel-debug-devel-debuginfo-5.3.18-lp152.50.1 kernel-default-5.3.18-lp152.50.1 kernel-default-debuginfo-5.3.18-lp152.50.1 kernel-default-debugsource-5.3.18-lp152.50.1 kernel-default-devel-5.3.18-lp152.50.1 kernel-default-devel-debuginfo-5.3.18-lp152.50.1 kernel-kvmsmall-5.3.18-lp152.50.1 kernel-kvmsmall-debuginfo-5.3.18-lp152.50.1 kernel-kvmsmall-debugsource-5.3.18-lp152.50.1 kernel-kvmsmall-devel-5.3.18-lp152.50.1 kernel-kvmsmall-devel-debuginfo-5.3.18-lp152.50.1 kernel-obs-build-5.3.18-lp152.50.1 kernel-obs-build-debugsource-5.3.18-lp152.50.1 kernel-obs-qa-5.3.18-lp152.50.1 kernel-preempt-5.3.18-lp152.50.1 kernel-preempt-debuginfo-5.3.18-lp152.50.1 kernel-preempt-debugsource-5.3.18-lp152.50.1 kernel-preempt-devel-5.3.18-lp152.50.1 kernel-preempt-devel-debuginfo-5.3.18-lp152.50.1 kernel-syms-5.3.18-lp152.50.1 - openSUSE Leap 15.2 (noarch): kernel-devel-5.3.18-lp152.50.1 kernel-docs-5.3.18-lp152.50.1 kernel-docs-html-5.3.18-lp152.50.1 kernel-macros-5.3.18-lp152.50.1 kernel-source-5.3.18-lp152.50.1 kernel-source-vanilla-5.3.18-lp152.50.1 References: https://www.suse.com/security/cve/CVE-2020-14351.html https://www.suse.com/security/cve/CVE-2020-16120.html https://www.suse.com/security/cve/CVE-2020-25285.html https://www.suse.com/security/cve/CVE-2020-25656.html https://www.suse.com/security/cve/CVE-2020-25668.html https://www.suse.com/security/cve/CVE-2020-25704.html https://www.suse.com/security/cve/CVE-2020-8694.html https://bugzilla.suse.com/1055014 https://bugzilla.suse.com/1055186 https://bugzilla.suse.com/1061843 https://bugzilla.suse.com/1065600 https://bugzilla.suse.com/1065729 https://bugzilla.suse.com/1066382 https://bugzilla.suse.com/1077428 https://bugzilla.suse.com/1129923 https://bugzilla.suse.com/1134760 https://bugzilla.suse.com/1149032 https://bugzilla.suse.com/1152489 https://bugzilla.suse.com/1163592 https://bugzilla.suse.com/1164648 https://bugzilla.suse.com/1166146 https://bugzilla.suse.com/1166166 https://bugzilla.suse.com/1167030 https://bugzilla.suse.com/1170415 https://bugzilla.suse.com/1174748 https://bugzilla.suse.com/1174969 https://bugzilla.suse.com/1175052 https://bugzilla.suse.com/1175306 https://bugzilla.suse.com/1175749 https://bugzilla.suse.com/1175898 https://bugzilla.suse.com/1176354 https://bugzilla.suse.com/1176485 https://bugzilla.suse.com/1176713 https://bugzilla.suse.com/1177086 https://bugzilla.suse.com/1177281 https://bugzilla.suse.com/1177353 https://bugzilla.suse.com/1177410 https://bugzilla.suse.com/1177411 https://bugzilla.suse.com/1177470 https://bugzilla.suse.com/1177739 https://bugzilla.suse.com/1177749 https://bugzilla.suse.com/1177750 https://bugzilla.suse.com/1177754 https://bugzilla.suse.com/1177755 https://bugzilla.suse.com/1177765 https://bugzilla.suse.com/1177766 https://bugzilla.suse.com/1177799 https://bugzilla.suse.com/1177801 https://bugzilla.suse.com/1177814 https://bugzilla.suse.com/1177817 https://bugzilla.suse.com/1177854 https://bugzilla.suse.com/1177855 https://bugzilla.suse.com/1177856 https://bugzilla.suse.com/1177861 https://bugzilla.suse.com/1178002 https://bugzilla.suse.com/1178079 https://bugzilla.suse.com/1178123 https://bugzilla.suse.com/1178166 https://bugzilla.suse.com/1178173 https://bugzilla.suse.com/1178175 https://bugzilla.suse.com/1178176 https://bugzilla.suse.com/1178177 https://bugzilla.suse.com/1178183 https://bugzilla.suse.com/1178184 https://bugzilla.suse.com/1178185 https://bugzilla.suse.com/1178186 https://bugzilla.suse.com/1178190 https://bugzilla.suse.com/1178191 https://bugzilla.suse.com/1178246 https://bugzilla.suse.com/1178255 https://bugzilla.suse.com/1178307 https://bugzilla.suse.com/1178330 https://bugzilla.suse.com/1178393 https://bugzilla.suse.com/1178395 https://bugzilla.suse.com/1178461 https://bugzilla.suse.com/1178579 https://bugzilla.suse.com/1178581 https://bugzilla.suse.com/1178584 https://bugzilla.suse.com/1178585

1 0

[opensuse-updates] openSUSE-RU-2020:1905-1: moderate: Recommended update for mozilla-nss
by maintenance＠opensuse.org 13 Nov '20

13 Nov '20

openSUSE Recommended Update: Recommended update for mozilla-nss ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1905-1 Rating: moderate References: #1174697 #1176173 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for mozilla-nss fixes the following issues: - Fixes an issue for Mozilla Firefox which has failed in fips mode (bsc#1174697) - FIPS: Adjust the Diffie-Hellman and Elliptic Curve Diffie-Hellman algorithms to be NIST SP800-56Arev3 compliant (bsc#1176173). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1905=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libfreebl3-3.53.1-lp152.2.7.1 libfreebl3-debuginfo-3.53.1-lp152.2.7.1 libfreebl3-hmac-3.53.1-lp152.2.7.1 libsoftokn3-3.53.1-lp152.2.7.1 libsoftokn3-debuginfo-3.53.1-lp152.2.7.1 libsoftokn3-hmac-3.53.1-lp152.2.7.1 mozilla-nss-3.53.1-lp152.2.7.1 mozilla-nss-certs-3.53.1-lp152.2.7.1 mozilla-nss-certs-debuginfo-3.53.1-lp152.2.7.1 mozilla-nss-debuginfo-3.53.1-lp152.2.7.1 mozilla-nss-debugsource-3.53.1-lp152.2.7.1 mozilla-nss-devel-3.53.1-lp152.2.7.1 mozilla-nss-sysinit-3.53.1-lp152.2.7.1 mozilla-nss-sysinit-debuginfo-3.53.1-lp152.2.7.1 mozilla-nss-tools-3.53.1-lp152.2.7.1 mozilla-nss-tools-debuginfo-3.53.1-lp152.2.7.1 - openSUSE Leap 15.2 (x86_64): libfreebl3-32bit-3.53.1-lp152.2.7.1 libfreebl3-32bit-debuginfo-3.53.1-lp152.2.7.1 libfreebl3-hmac-32bit-3.53.1-lp152.2.7.1 libsoftokn3-32bit-3.53.1-lp152.2.7.1 libsoftokn3-32bit-debuginfo-3.53.1-lp152.2.7.1 libsoftokn3-hmac-32bit-3.53.1-lp152.2.7.1 mozilla-nss-32bit-3.53.1-lp152.2.7.1 mozilla-nss-32bit-debuginfo-3.53.1-lp152.2.7.1 mozilla-nss-certs-32bit-3.53.1-lp152.2.7.1 mozilla-nss-certs-32bit-debuginfo-3.53.1-lp152.2.7.1 mozilla-nss-sysinit-32bit-3.53.1-lp152.2.7.1 mozilla-nss-sysinit-32bit-debuginfo-3.53.1-lp152.2.7.1 References: https://bugzilla.suse.com/1174697 https://bugzilla.suse.com/1176173

1 0

[opensuse-updates] openSUSE-RU-2020:1904-1: moderate: Recommended update for ndctl
by maintenance＠opensuse.org 13 Nov '20

13 Nov '20

openSUSE Recommended Update: Recommended update for ndctl ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1904-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for ndctl fixes the following issues: - Adds firmware activation support. (jsc#SLE-13338) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1904=1 Package List: - openSUSE Leap 15.2 (x86_64): libndctl-devel-70.1-lp152.7.12.1 libndctl6-70.1-lp152.7.12.1 libndctl6-debuginfo-70.1-lp152.7.12.1 ndctl-70.1-lp152.7.12.1 ndctl-debuginfo-70.1-lp152.7.12.1 ndctl-debugsource-70.1-lp152.7.12.1 References:

1 0

[opensuse-updates] openSUSE-RU-2020:1902-1: moderate: Recommended update for mozilla-nss
by maintenance＠opensuse.org 12 Nov '20

12 Nov '20

openSUSE Recommended Update: Recommended update for mozilla-nss ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1902-1 Rating: moderate References: #1174697 #1176173 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for mozilla-nss fixes the following issues: - Fixes an issue for Mozilla Firefox which has failed in fips mode (bsc#1174697) - FIPS: Adjust the Diffie-Hellman and Elliptic Curve Diffie-Hellman algorithms to be NIST SP800-56Arev3 compliant (bsc#1176173). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1902=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libfreebl3-3.53.1-lp151.2.29.1 libfreebl3-debuginfo-3.53.1-lp151.2.29.1 libfreebl3-hmac-3.53.1-lp151.2.29.1 libsoftokn3-3.53.1-lp151.2.29.1 libsoftokn3-debuginfo-3.53.1-lp151.2.29.1 libsoftokn3-hmac-3.53.1-lp151.2.29.1 mozilla-nss-3.53.1-lp151.2.29.1 mozilla-nss-certs-3.53.1-lp151.2.29.1 mozilla-nss-certs-debuginfo-3.53.1-lp151.2.29.1 mozilla-nss-debuginfo-3.53.1-lp151.2.29.1 mozilla-nss-debugsource-3.53.1-lp151.2.29.1 mozilla-nss-devel-3.53.1-lp151.2.29.1 mozilla-nss-sysinit-3.53.1-lp151.2.29.1 mozilla-nss-sysinit-debuginfo-3.53.1-lp151.2.29.1 mozilla-nss-tools-3.53.1-lp151.2.29.1 mozilla-nss-tools-debuginfo-3.53.1-lp151.2.29.1 - openSUSE Leap 15.1 (x86_64): libfreebl3-32bit-3.53.1-lp151.2.29.1 libfreebl3-32bit-debuginfo-3.53.1-lp151.2.29.1 libfreebl3-hmac-32bit-3.53.1-lp151.2.29.1 libsoftokn3-32bit-3.53.1-lp151.2.29.1 libsoftokn3-32bit-debuginfo-3.53.1-lp151.2.29.1 libsoftokn3-hmac-32bit-3.53.1-lp151.2.29.1 mozilla-nss-32bit-3.53.1-lp151.2.29.1 mozilla-nss-32bit-debuginfo-3.53.1-lp151.2.29.1 mozilla-nss-certs-32bit-3.53.1-lp151.2.29.1 mozilla-nss-certs-32bit-debuginfo-3.53.1-lp151.2.29.1 mozilla-nss-sysinit-32bit-3.53.1-lp151.2.29.1 mozilla-nss-sysinit-32bit-debuginfo-3.53.1-lp151.2.29.1 References: https://bugzilla.suse.com/1174697 https://bugzilla.suse.com/1176173

1 0

[opensuse-updates] openSUSE-SU-2020:1901-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 12 Nov '20

12 Nov '20

openSUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1901-1 Rating: important References: #1055014 #1058115 #1061843 #1065600 #1065729 #1066382 #1077428 #1112178 #1131277 #1134760 #1163592 #1167030 #1170415 #1171558 #1173432 #1174748 #1176354 #1176485 #1176560 #1176713 #1176723 #1176907 #1177086 #1177101 #1177271 #1177281 #1177410 #1177411 #1177470 #1177687 #1177719 #1177740 #1177749 #1177750 #1177753 #1177754 #1177755 #1177766 #1177855 #1177856 #1177861 #1178027 #1178123 #1178166 #1178185 #1178187 #1178188 #1178202 #1178234 #1178330 #936888 Cross-References: CVE-2020-0430 CVE-2020-14351 CVE-2020-16120 CVE-2020-25285 CVE-2020-25656 CVE-2020-25668 CVE-2020-8694 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves 7 vulnerabilities and has 44 fixes is now available. Description: The openSUSE Leap 15.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-25668: Fixed concurrency use-after-free in con_font_op (bnc#1178123). - CVE-2020-25656: Fixed race condition in kbd code (bnc#1177766). - CVE-2020-25285: A race condition between hugetlb sysctl handlers in mm/hugetlb.c kernel could be used by local attackers to corrupt memory, cause a NULL pointer dereference, or possibly have unspecified other impact, aka CID-17743798d812 (bnc#1176485). - CVE-2020-0430: In skb_headlen of /include/linux/skbuff.h, there is a possible out of bounds read due to memory corruption. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation (bnc#1176723). - CVE-2020-14351: Fixed race in the perf_mmap_close() function (bsc#1177086). - CVE-2020-16120: Fixed verify permissions in ovl_path_open() (bsc#1177470). - CVE-2020-8694: Restrict energy meter to root access to avoid side channel attack (bsc#1170415). The following non-security bugs were fixed: - 9P: Cast to loff_t before multiplying (git-fixes). - ACPI / extlog: Check for RDMSR failure (git-fixes). - ACPI: debug: do not allow debugging when ACPI is disabled (git-fixes). - ACPI: dock: fix enum-conversion warning (git-fixes). - ACPI: video: use ACPI backlight for HP 635 Notebook (git-fixes). - ALSA: bebob: potential info leak in hwdep_read() (git-fixes). - ALSA: compress_offload: remove redundant initialization (git-fixes). - ALSA: core: init: use DECLARE_COMPLETION_ONSTACK() macro (git-fixes). - ALSA: core: pcm: simplify locking for timers (git-fixes). - ALSA: core: timer: clarify operator precedence (git-fixes). - ALSA: core: timer: remove redundant assignment (git-fixes). - ALSA: ctl: Workaround for lockdep warning wrt card->ctl_files_rwlock (git-fixes). - ALSA: hda - Do not register a cb func if it is registered already (git-fixes). - ALSA: hda - Fix the return value if cb func is already registered (git-fixes). - ALSA: hda/realtek - Add mute Led support for HP Elitebook 845 G7 (git-fixes). - ALSA: hda/realtek - The front Mic on a HP machine does not work (git-fixes). - ALSA: hda/realtek: Enable audio jacks of ASUS D700SA with ALC887 (git-fixes). - ALSA: hda: auto_parser: remove shadowed variable declaration (git-fixes). - ALSA: hda: prevent undefined shift in snd_hdac_ext_bus_get_link() (git-fixes). - ALSA: hda: use semicolons rather than commas to separate statements (git-fixes). - ALSA: mixart: Correct comment wrt obsoleted tasklet usage (git-fixes). - ALSA: rawmidi: (cosmetic) align function parameters (git-fixes). - ALSA: seq: oss: Avoid mutex lock for a long-time ioctl (git-fixes). - ALSA: usb-audio: Add mixer support for Pioneer DJ DJM-250MK2 (git-fixes). - ALSA: usb-audio: endpoint.c: fix repeated word 'there' (git-fixes). - ALSA: usb-audio: fix spelling mistake "Frequence" -> "Frequency" (git-fixes). - ASoC: qcom: lpass-cpu: fix concurrency issue (git-fixes). - ASoC: qcom: lpass-platform: fix memory leak (git-fixes). - Add cherry-picked ids for already backported DRM radeon patches - Bluetooth: MGMT: Fix not checking if BT_HS is enabled (git-fixes). - Bluetooth: Only mark socket zapped after unlocking (git-fixes). - EDAC/i5100: Fix error handling order in i5100_init_one() (bsc#1112178). - Fix use after free in get_capset_info callback (git-fixes). - HID: roccat: add bounds checking in kone_sysfs_write_settings() (git-fixes). - HID: wacom: Avoid entering wacom_wac_pen_report for pad / battery (git-fixes). - Input: ep93xx_keypad - fix handling of platform_get_irq() error (git-fixes). - Input: i8042 - add nopnp quirk for Acer Aspire 5 A515 (git-fixes). - Input: imx6ul_tsc - clean up some errors in imx6ul_tsc_resume() (git-fixes). - Input: omap4-keypad - fix handling of platform_get_irq() error (git-fixes). - Input: sun4i-ps2 - fix handling of platform_get_irq() error (git-fixes). - Input: twl4030_keypad - fix handling of platform_get_irq() error (git-fixes). - NTB: hw: amd: fix an issue about leak system resources (git-fixes). - USB: adutux: fix debugging (git-fixes). - USB: cdc-acm: handle broken union descriptors (git-fixes). - USB: cdc-wdm: Make wdm_flush() interruptible and add wdm_fsync() (git-fixes). - USB: serial: qcserial: fix altsetting probing (git-fixes). - VMCI: check return value of get_user_pages_fast() for errors (git-fixes). - XEN uses irqdesc::irq_data_common::handler_data to store a per interrupt XEN data pointer which contains XEN specific information (XSA-332 bsc#1065600). - acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (git-fixes). - ata: sata_rcar: Fix DMA boundary mask (git-fixes). - ath10k: Fix the size used in a 'dma_free_coherent()' call in an error handling path (git-fixes). - ath10k: check idx validity in __ath10k_htt_rx_ring_fill_n() (git-fixes). - ath10k: fix VHT NSS calculation when STBC is enabled (git-fixes). - ath10k: provide survey info as accumulated data (git-fixes). - ath10k: start recovery process when payload length exceeds max htc length for sdio (git-fixes). - ath6kl: prevent potential array overflow in ath6kl_add_new_sta() (git-fixes). - ath6kl: wmi: prevent a shift wrapping bug in ath6kl_wmi_delete_pstream_cmd() (git-fixes). - ath9k: Fix potential out of bounds in ath9k_htc_txcompletion_cb() (git-fixes). - ath9k: hif_usb: fix race condition between usb_get_urb() and usb_kill_anchored_urbs() (git-fixes). - backlight: sky81452-backlight: Fix refcount imbalance on error (git-fixes). - blk-mq: order adding requests to hctx->dispatch and checking SCHED_RESTART (bsc#1177750). - block: ensure bdi->io_pages is always initialized (bsc#1177749). - bnxt: do not enable NAPI until rings are ready (networking-stable-20_09_11). - bnxt_en: Check for zero dir entries in NVRAM (networking-stable-20_09_11). - brcm80211: fix possible memleak in brcmf_proto_msgbuf_attach (git-fixes). - brcmfmac: check ndev pointer (git-fixes). - brcmsmac: fix memory leak in wlc_phy_attach_lcnphy (git-fixes). - btrfs: check the right error variable in btrfs_del_dir_entries_in_log (bsc#1177687). - btrfs: do not force read-only after error in drop snapshot (bsc#1176354). - btrfs: do not set the full sync flag on the inode during page release (bsc#1177687). - btrfs: fix incorrect updating of log root tree (bsc#1177687). - btrfs: fix race between page release and a fast fsync (bsc#1177687). - btrfs: only commit delayed items at fsync if we are logging a directory (bsc#1177687). - btrfs: only commit the delayed inode when doing a full fsync (bsc#1177687). - btrfs: qgroup: fix qgroup meta rsv leak for subvolume operations (bsc#1177856). - btrfs: qgroup: fix wrong qgroup metadata reserve for delayed inode (bsc#1177855). - btrfs: reduce contention on log trees when logging checksums (bsc#1177687). - btrfs: release old extent maps during page release (bsc#1177687). - btrfs: remove no longer needed use of log_writers for the log root tree (bsc#1177687). - btrfs: remove root usage from can_overcommit (bsc#1131277). - btrfs: stop incremening log_batch for the log root tree when syncing log (bsc#1177687). - btrfs: take overcommit into account in inc_block_group_ro (bsc#1176560). - btrfs: tree-checker: fix false alert caused by legacy btrfs root item (bsc#1177861). - bus/fsl_mc: Do not rely on caller to provide non NULL mc_io (git-fixes). - can: c_can: reg_map_{c,d}_can: mark as __maybe_unused (git-fixes). - can: can_create_echo_skb(): fix echo skb generation: always use skb_clone() (git-fixes). - can: dev: __can_get_echo_skb(): fix real payload length return value for RTR frames (git-fixes). - can: dev: can_get_echo_skb(): prevent call to kfree_skb() in hard IRQ context (git-fixes). - can: flexcan: flexcan_chip_stop(): add error handling and propagate error value (git-fixes). - can: peak_canfd: pucan_handle_can_rx(): fix echo management when loopback is on (git-fixes). - can: peak_usb: add range checking in decode operations (git-fixes). - can: peak_usb: peak_usb_get_ts_time(): fix timestamp wrapping (git-fixes). - can: rx-offload: do not call kfree_skb() from IRQ context (git-fixes). - can: softing: softing_card_shutdown(): add braces around empty body in an 'if' statement (git-fixes). - ceph: fix memory leak in ceph_cleanup_snapid_map() (bsc#1178234). - ceph: map snapid to anonymous bdev ID (bsc#1178234). - ceph: promote to unsigned long long before shifting (bsc#1178187). - clk: at91: clk-main: update key before writing AT91_CKGR_MOR (git-fixes). - clk: at91: remove the checking of parent_name (git-fixes). - clk: bcm2835: add missing release if devm_clk_hw_register fails (git-fixes). - clk: imx8mq: Fix usdhc parents order (git-fixes). - clk: ti: clockdomain: fix static checker warning (git-fixes). - coredump: fix crash when umh is disabled (bsc#1177753). - crypto: algif_skcipher - EBUSY on aio should be an error (git-fixes). - crypto: bcm - Verify GCM/CCM key length in setkey (git-fixes). - crypto: ccp - fix error handling (git-fixes). - crypto: ixp4xx - Fix the size used in a 'dma_free_coherent()' call (git-fixes). - crypto: mediatek - Fix wrong return value in mtk_desc_ring_alloc() (git-fixes). - crypto: omap-sham - fix digcnt register handling with export/import (git-fixes). - cxl: Rework error message for incompatible slots (bsc#1055014 git-fixes). - cypto: mediatek - fix leaks in mtk_desc_ring_alloc (git-fixes). - device property: Do not clear secondary pointer for shared primary firmware node (git-fixes). - device property: Keep secondary firmware node secondary by type (git-fixes). - dmaengine: dma-jz4780: Fix race in jz4780_dma_tx_status (git-fixes). - drm/amd/display: Do not invoke kgdb_breakpoint() unconditionally (git-fixes). - drm/amd/display: HDMI remote sink need mode validation for Linux (git-fixes). - drm/amdgpu: do not map BO in reserved region (git-fixes). - drm/amdgpu: prevent double kfree ttm->sg (git-fixes). - drm/bridge/synopsys: dsi: add support for non-continuous HS clock (git-fixes). - drm/brige/megachips: Add checking if ge_b850v3_lvds_init() is working correctly (git-fixes). - drm/gma500: fix error check (git-fixes). - drm/i915: Force VT'd workarounds when running as a guest OS (git-fixes). - drm/imx: tve remove extraneous type qualifier (git-fixes). - drm/msm: Drop debug print in _dpu_crtc_setup_lm_bounds() (git-fixes). - drm/nouveau/mem: guard against NULL pointer access in mem_del (git-fixes). - drm/ttm: fix eviction valuable range check (git-fixes). - eeprom: at25: set minimum read/write access stride to 1 (git-fixes). - efivarfs: Replace invalid slashes with exclamation marks in dentries (git-fixes). - gre6: Fix reception with IP6_TNL_F_RCV_DSCP_COPY (networking-stable-20_08_24). - gtp: add GTPA_LINK info to msg sent to userspace (networking-stable-20_09_11). - i2c: imx: Fix external abort on interrupt in exit paths (git-fixes). - ibmveth: Identify ingress large send packets (bsc#1178185 ltc#188897). - ibmveth: Switch order of ibmveth_helper calls (bsc#1061843 git-fixes). - ibmvnic: fix ibmvnic_set_mac (bsc#1066382 ltc#160943 git-fixes). - ibmvnic: save changed mac address to adapter->mac_addr (bsc#1134760 ltc#177449 git-fixes). - icmp: randomize the global rate limiter (git-fixes). - iio:accel:bma180: Fix use of true when should be iio_shared_by enum (git-fixes). - iio:adc:max1118 Fix alignment of timestamp and data leak issues (git-fixes). - iio:adc:ti-adc0832 Fix alignment issue with timestamp (git-fixes). - iio:adc:ti-adc12138 Fix alignment issue with timestamp (git-fixes). - iio:dac:ad5592r: Fix use of true for IIO_SHARED_BY_TYPE (git-fixes). - iio:gyro:itg3200: Fix timestamp alignment and prevent data leak (git-fixes). - iio:light:si1145: Fix timestamp alignment and prevent data leak (git-fixes). - iio:magn:hmc5843: Fix passing true where iio_shared_by enum required (git-fixes). - ima: Remove semicolon at the end of ima_get_binary_runtime_size() (git-fixes). - include/linux/swapops.h: correct guards for non_swap_entry() (git-fixes (mm/swap)). - iomap: Make sure iomap_end is called after iomap_begin (bsc#1177754). - ip: fix tos reflection in ack and reset packets (networking-stable-20_09_24). - ipv4: Restore flowi4_oif update before call to xfrm_lookup_route (git-fixes). - ipv4: Update exception handling for multipath routes via same device (networking-stable-20_09_24). - iwlwifi: mvm: split a print to avoid a WARNING in ROC (git-fixes). - kbuild: enforce -Werror=return-type (bsc#1177281). - leds: bcm6328, bcm6358: use devres LED registering function (git-fixes). - leds: mt6323: move period calculation (git-fixes). - lib/crc32.c: fix trivial typo in preprocessor condition (git-fixes). - libceph: clear con->out_msg on Policy::stateful_server faults (bsc#1178188). - mac80211: handle lack of sband->bitrates in rates (git-fixes). - mailbox: avoid timer start from callback (git-fixes). - media: Revert "media: exynos4-is: Add missed check for pinctrl_lookup_state()" (git-fixes). - media: ati_remote: sanity check for both endpoints (git-fixes). - media: bdisp: Fix runtime PM imbalance on error (git-fixes). - media: exynos4-is: Fix a reference count leak (git-fixes). - media: exynos4-is: Fix a reference count leak due to pm_runtime_get_sync (git-fixes). - media: exynos4-is: Fix several reference count leaks due to pm_runtime_get_sync (git-fixes). - media: firewire: fix memory leak (git-fixes). - media: m5mols: Check function pointer in m5mols_sensor_power (git-fixes). - media: media/pci: prevent memory leak in bttv_probe (git-fixes). - media: omap3isp: Fix memleak in isp_probe (git-fixes). - media: platform: Improve queue set up flow for bug fixing (git-fixes). - media: platform: fcp: Fix a reference count leak (git-fixes). - media: platform: s3c-camif: Fix runtime PM imbalance on error (git-fixes). - media: platform: sti: hva: Fix runtime PM imbalance on error (git-fixes). - media: s5p-mfc: Fix a reference count leak (git-fixes). - media: saa7134: avoid a shift overflow (git-fixes). - media: st-delta: Fix reference count leak in delta_run_work (git-fixes). - media: sti: Fix reference count leaks (git-fixes). - media: tc358743: initialize variable (git-fixes). - media: ti-vpe: Fix a missing check and reference count leak (git-fixes). - media: tuner-simple: fix regression in simple_set_radio_freq (git-fixes). - media: tw5864: check status of tw5864_frameinterval_get (git-fixes). - media: usbtv: Fix refcounting mixup (git-fixes). - media: uvcvideo: Ensure all probed info is returned to v4l2 (git-fixes). - media: vsp1: Fix runtime PM imbalance on error (git-fixes). - memory: fsl-corenet-cf: Fix handling of platform_get_irq() error (git-fixes). - memory: omap-gpmc: Fix a couple off by ones (git-fixes). - mfd: sm501: Fix leaks in probe() (git-fixes). - mic: vop: copy data to kernel space then write to io memory (git-fixes). - misc: mic: scif: Fix error handling path (git-fixes). - misc: rtsx: Fix memory leak in rtsx_pci_probe (git-fixes). - misc: vop: add round_up(x,4) for vring_size to avoid kernel panic (git-fixes). - mlx5 PPC ringsize workaround (bsc#1173432). - mlx5: remove support for ib_get_vector_affinity (bsc#1174748). - mm, numa: fix bad pmd by atomically check for pmd_trans_huge when marking page tables prot_numa (git-fixes (mm/numa)). - mm/huge_memory.c: use head to check huge zero page (git-fixes (mm/thp)). - mm/ksm.c: do not WARN if page is still mapped in remove_stable_node() (git-fixes (mm/hugetlb)). - mm/mempolicy.c: fix out of bounds write in mpol_parse_str() (git-fixes (mm/mempolicy)). - mm/mempolicy.c: use match_string() helper to simplify the code (git-fixes (mm/mempolicy)). - mm/page-writeback.c: avoid potential division by zero in wb_min_max_ratio() (git-fixes (mm/writeback)). - mm/page-writeback.c: improve arithmetic divisions (git-fixes (mm/writeback)). - mm/page-writeback.c: use div64_ul() for u64-by-unsigned-long divide (git-fixes (mm/writeback)). - mm/page_owner.c: remove drain_all_pages from init_early_allocated_pages (git-fixes (mm/debug)). - mm/rmap: fixup copying of soft dirty and uffd ptes (git-fixes (mm/rmap)). - mm/zsmalloc.c: fix build when CONFIG_COMPACTION=n (git-fixes (mm/zsmalloc)). - mm/zsmalloc.c: fix race condition in zs_destroy_pool (git-fixes (mm/zsmalloc)). - mm/zsmalloc.c: fix the migrated zspage statistics (git-fixes (mm/zsmalloc)). - mm/zsmalloc.c: migration can leave pages in ZS_EMPTY indefinitely (git-fixes (mm/zsmalloc)). - mm: hugetlb: switch to css_tryget() in hugetlb_cgroup_charge_cgroup() (git-fixes (mm/hugetlb)). - mmc: sdhci-of-esdhc: set timeout to max before tuning (git-fixes). - mmc: sdio: Check for CISTPL_VERS_1 buffer size (git-fixes). - mtd: lpddr: Fix bad logic in print_drs_error (git-fixes). - mtd: lpddr: fix excessive stack usage with clang (git-fixes). - mtd: mtdoops: Do not write panic data twice (git-fixes). - mwifiex: Do not use GFP_KERNEL in atomic context (git-fixes). - mwifiex: Remove unnecessary braces from HostCmd_SET_SEQ_NO_BSS_INFO (git-fixes). - mwifiex: do not call del_timer_sync() on uninitialized timer (git-fixes). - mwifiex: fix double free (git-fixes). - mwifiex: remove function pointer check (git-fixes). - net/mlx5e: Take common TIR context settings into a function (bsc#1177740). - net/mlx5e: Turn on HW tunnel offload in all TIRs (bsc#1177740). - net: Fix potential wrong skb->protocol in skb_vlan_untag() (networking-stable-20_08_24). - net: disable netpoll on fresh napis (networking-stable-20_09_11). - net: fec: Fix PHY init after phy_reset_after_clk_enable() (git-fixes). - net: fec: Fix phy_device lookup for phy_reset_after_clk_enable() (git-fixes). - net: hns: Fix memleak in hns_nic_dev_probe (networking-stable-20_09_11). - net: ipv6: fix kconfig dependency warning for IPV6_SEG6_HMAC (networking-stable-20_09_24). - net: phy: Avoid NPD upon phy_detach() when driver is unbound (networking-stable-20_09_24). - net: qrtr: fix usage of idr in port assignment to socket (networking-stable-20_08_24). - net: systemport: Fix memleak in bcm_sysport_probe (networking-stable-20_09_11). - net: usb: dm9601: Add USB ID of Keenetic Plus DSL (networking-stable-20_09_11). - net: usb: qmi_wwan: add Cellient MPL200 card (git-fixes). - net: usb: rtl8150: set random MAC address when set_ethernet_addr() fails (git-fixes). - net: wireless: nl80211: fix out-of-bounds access in nl80211_del_key() (git-fixes). - netlabel: fix problems with mapping removal (networking-stable-20_09_11). - nfc: Ensure presence of NFC_ATTR_FIRMWARE_NAME attribute in nfc_genl_fw_download() (git-fixes). - nl80211: fix non-split wiphy information (git-fixes). - nvme-rdma: fix crash due to incorrect cqe (bsc#1174748). - nvme-rdma: fix crash when connect rejected (bsc#1174748). - nvme: do not update disk info for multipathed device (bsc#1171558). - p54: avoid accessing the data mapped to streaming DMA (git-fixes). - platform/x86: mlx-platform: Remove PSU EEPROM configuration (git-fixes). - power: supply: test_power: add missing newlines when printing parameters by sysfs (git-fixes). - powerpc/hwirq: Remove stale forward irq_chip declaration (bsc#1065729). - powerpc/icp-hv: Fix missing of_node_put() in success path (bsc#1065729). - powerpc/irq: Drop forward declaration of struct irqaction (bsc#1065729). - powerpc/perf/hv-gpci: Fix starting index value (bsc#1065729). - powerpc/powernv/dump: Fix race while processing OPAL dump (bsc#1065729). - powerpc/powernv/elog: Fix race while processing OPAL error log event (bsc#1065729). - powerpc/pseries: Fix missing of_node_put() in rng_init() (bsc#1065729). - powerpc/pseries: explicitly reschedule during drmem_lmb list traversal (bsc#1077428 ltc#163882 git-fixes). - powerpc: Fix undetected data corruption with P9N DD2.1 VSX CI load emulation (bsc#1065729). - pty: do tty_flip_buffer_push without port->lock in pty_write (git-fixes). - pwm: lpss: Add range limit check for the base_unit register value (git-fixes). - pwm: lpss: Fix off by one error in base_unit math in pwm_lpss_prepare() (git-fixes). - regulator: defer probe when trying to get voltage from unresolved supply (git-fixes). - regulator: resolve supply after creating regulator (git-fixes). - ring-buffer: Return 0 on success from ring_buffer_resize() (git-fixes). - rpm/kernel-module-subpackage: make Group tag optional (bsc#1163592) - rtl8xxxu: prevent potential memory leak (git-fixes). - scsi: ibmvfc: Fix error return in ibmvfc_probe() (bsc#1065729). - scsi: ibmvscsi: Fix potential race after loss of transport (bsc#1178166 ltc#188226). - sctp: not disable bh in the whole sctp_get_port_local() (networking-stable-20_09_11). - spi: fsl-espi: Only process interrupts for expected events (git-fixes). - staging: comedi: cb_pcidas: Allow 2-channel commands for AO subdevice (git-fixes). - staging: octeon: Drop on uncorrectable alignment or FCS error (git-fixes). - staging: octeon: repair "fixed-link" support (git-fixes). - target-rbd-fix-unmap-discard-block-size-conversion.patch: (bsc#1177271). - target-use-scsi_set_sense_information-helper-on-misc.patch: (bsc#1177719). - tg3: Fix soft lockup when tg3_reset_task() fails (networking-stable-20_09_11). - tipc: fix memory leak caused by tipc_buf_append() (git-fixes). - tipc: fix shutdown() of connection oriented socket (networking-stable-20_09_24). - tipc: fix shutdown() of connectionless socket (networking-stable-20_09_11). - tipc: fix the skb_unshare() in tipc_buf_append() (git-fixes). - tipc: fix uninit skb->data in tipc_nl_compat_dumpit() (networking-stable-20_08_24). - tipc: use skb_unshare() instead in tipc_buf_append() (networking-stable-20_09_24). - tty: ipwireless: fix error handling (git-fixes). - tty: serial: earlycon dependency (git-fixes). - tty: serial: fsl_lpuart: fix lpuart32_poll_get_char (git-fixes). - usb: cdc-acm: add quirk to blacklist ETAS ES58X devices (git-fixes). - usb: cdc-acm: fix cooldown mechanism (git-fixes). - usb: core: Solve race condition in anchor cleanup functions (git-fixes). - usb: dwc2: Fix INTR OUT transfers in DDMA mode (git-fixes). - usb: dwc2: Fix parameter type in function pointer prototype (git-fixes). - usb: dwc3: core: add phy cleanup for probe error handling (git-fixes). - usb: dwc3: core: do not trigger runtime pm when remove driver (git-fixes). - usb: dwc3: ep0: Fix ZLP for OUT ep0 requests (git-fixes). - usb: gadget: f_ncm: allow using NCM in SuperSpeed Plus gadgets (git-fixes). - usb: gadget: f_ncm: fix ncm_bitrate for SuperSpeed and above (git-fixes). - usb: gadget: function: printer: fix use-after-free in __lock_acquire (git-fixes). - usb: gadget: u_ether: enable qmult on SuperSpeed Plus as well (git-fixes). - usb: host: fsl-mph-dr-of: check return of dma_set_mask() (git-fixes). - usb: mtu3: fix panic in mtu3_gadget_stop() (git-fixes). - usb: ohci: Default to per-port over-current protection (git-fixes). - usb: typec: tcpm: During PR_SWAP, source caps should be sent only after tSwapSourceStart (git-fixes). - usb: typec: tcpm: reset hard_reset_count for any disconnect (git-fixes). - vfs: fix FIGETBSZ ioctl on an overlayfs file (bsc#1178202). - video: fbdev: pvr2fb: initialize variables (git-fixes). - video: fbdev: sis: fix null ptr dereference (git-fixes). - video: fbdev: vga16fb: fix setting of pixclock because a pass-by-value error (git-fixes). - w1: mxc_w1: Fix timeout resolution problem leading to bus error (git-fixes). - watchdog: iTCO_wdt: Export vendorsupport (bsc#1177101). - watchdog: iTCO_wdt: Make ICH_RES_IO_SMI optional (bsc#1177101). - wcn36xx: Fix reported 802.11n rx_highest rate wcn3660/wcn3680 (git-fixes). - writeback: Avoid skipping inode writeback (bsc#1177755). - writeback: Fix sync livelock due to b_dirty_time processing (bsc#1177755). - writeback: Protect inode->i_io_list with inode->i_lock (bsc#1177755). - x86, fakenuma: Fix invalid starting node ID (git-fixes (mm/x86/fakenuma)). - x86/apic: Unify duplicated local apic timer clockevent initialization (bsc#1112178). - x86/fpu: Allow multiple bits in clearcpuid= parameter (bsc#1112178). - x86/unwind/orc: Fix inactive tasks with stack pointer in %sp on GCC 10 compiled kernels (bsc#1058115 bsc#1176907). - x86/xen: disable Firmware First mode for correctable memory errors (bsc#1176713). - xen/blkback: use lateeoi irq binding (XSA-332 bsc#1177411). - xen/events: add a new "late EOI" evtchn framework (XSA-332 bsc#1177411). - xen/events: add a proper barrier to 2-level uevent unmasking (XSA-332 bsc#1177411). - xen/events: avoid removing an event channel while handling it (XSA-331 bsc#1177410). - xen/events: block rogue events for some time (XSA-332 bsc#1177411). - xen/events: defer eoi in case of excessive number of events (XSA-332 bsc#1177411). - xen/events: do not use chip_data for legacy IRQs (XSA-332 bsc#1065600). - xen/events: fix race in evtchn_fifo_unmask() (XSA-332 bsc#1177411). - xen/events: switch user event channels to lateeoi model (XSA-332 bsc#1177411). - xen/events: use a common cpu hotplug hook for event channels (XSA-332 bsc#1177411). - xen/gntdev.c: Mark pages as dirty (bsc#1065600). - xen/netback: use lateeoi irq binding (XSA-332 bsc#1177411). - xen/pciback: use lateeoi irq binding (XSA-332 bsc#1177411). - xen/scsiback: use lateeoi irq binding (XSA-332 bsc#1177411). - xfs: avoid infinite loop when cancelling CoW blocks after writeback failure (bsc#1178027). - xfs: do not update mtime on COW faults (bsc#1167030). - xfs: flush new eof page on truncate to avoid post-eof corruption (git-fixes). - xfs: limit entries returned when counting fsmap records (git-fixes). Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1901=1 Package List: - openSUSE Leap 15.1 (x86_64): kernel-debug-4.12.14-lp151.28.79.1 kernel-debug-base-4.12.14-lp151.28.79.1 kernel-debug-base-debuginfo-4.12.14-lp151.28.79.1 kernel-debug-debuginfo-4.12.14-lp151.28.79.1 kernel-debug-debugsource-4.12.14-lp151.28.79.1 kernel-debug-devel-4.12.14-lp151.28.79.1 kernel-debug-devel-debuginfo-4.12.14-lp151.28.79.1 kernel-default-4.12.14-lp151.28.79.1 kernel-default-base-4.12.14-lp151.28.79.1 kernel-default-base-debuginfo-4.12.14-lp151.28.79.1 kernel-default-debuginfo-4.12.14-lp151.28.79.1 kernel-default-debugsource-4.12.14-lp151.28.79.1 kernel-default-devel-4.12.14-lp151.28.79.1 kernel-default-devel-debuginfo-4.12.14-lp151.28.79.1 kernel-kvmsmall-4.12.14-lp151.28.79.1 kernel-kvmsmall-base-4.12.14-lp151.28.79.1 kernel-kvmsmall-base-debuginfo-4.12.14-lp151.28.79.1 kernel-kvmsmall-debuginfo-4.12.14-lp151.28.79.1 kernel-kvmsmall-debugsource-4.12.14-lp151.28.79.1 kernel-kvmsmall-devel-4.12.14-lp151.28.79.1 kernel-kvmsmall-devel-debuginfo-4.12.14-lp151.28.79.1 kernel-obs-build-4.12.14-lp151.28.79.1 kernel-obs-build-debugsource-4.12.14-lp151.28.79.1 kernel-obs-qa-4.12.14-lp151.28.79.1 kernel-syms-4.12.14-lp151.28.79.1 kernel-vanilla-4.12.14-lp151.28.79.1 kernel-vanilla-base-4.12.14-lp151.28.79.1 kernel-vanilla-base-debuginfo-4.12.14-lp151.28.79.1 kernel-vanilla-debuginfo-4.12.14-lp151.28.79.1 kernel-vanilla-debugsource-4.12.14-lp151.28.79.1 kernel-vanilla-devel-4.12.14-lp151.28.79.1 kernel-vanilla-devel-debuginfo-4.12.14-lp151.28.79.1 - openSUSE Leap 15.1 (noarch): kernel-devel-4.12.14-lp151.28.79.1 kernel-docs-4.12.14-lp151.28.79.2 kernel-docs-html-4.12.14-lp151.28.79.2 kernel-macros-4.12.14-lp151.28.79.1 kernel-source-4.12.14-lp151.28.79.1 kernel-source-vanilla-4.12.14-lp151.28.79.1 References: https://www.suse.com/security/cve/CVE-2020-0430.html https://www.suse.com/security/cve/CVE-2020-14351.html https://www.suse.com/security/cve/CVE-2020-16120.html https://www.suse.com/security/cve/CVE-2020-25285.html https://www.suse.com/security/cve/CVE-2020-25656.html https://www.suse.com/security/cve/CVE-2020-25668.html https://www.suse.com/security/cve/CVE-2020-8694.html https://bugzilla.suse.com/1055014 https://bugzilla.suse.com/1058115 https://bugzilla.suse.com/1061843 https://bugzilla.suse.com/1065600 https://bugzilla.suse.com/1065729 https://bugzilla.suse.com/1066382 https://bugzilla.suse.com/1077428 https://bugzilla.suse.com/1112178 https://bugzilla.suse.com/1131277 https://bugzilla.suse.com/1134760 https://bugzilla.suse.com/1163592 https://bugzilla.suse.com/1167030 https://bugzilla.suse.com/1170415 https://bugzilla.suse.com/1171558 https://bugzilla.suse.com/1173432 https://bugzilla.suse.com/1174748 https://bugzilla.suse.com/1176354 https://bugzilla.suse.com/1176485 https://bugzilla.suse.com/1176560 https://bugzilla.suse.com/1176713 https://bugzilla.suse.com/1176723 https://bugzilla.suse.com/1176907 https://bugzilla.suse.com/1177086 https://bugzilla.suse.com/1177101 https://bugzilla.suse.com/1177271 https://bugzilla.suse.com/1177281 https://bugzilla.suse.com/1177410 https://bugzilla.suse.com/1177411 https://bugzilla.suse.com/1177470 https://bugzilla.suse.com/1177687 https://bugzilla.suse.com/1177719 https://bugzilla.suse.com/1177740 https://bugzilla.suse.com/1177749 https://bugzilla.suse.com/1177750 https://bugzilla.suse.com/1177753 https://bugzilla.suse.com/1177754 https://bugzilla.suse.com/1177755 https://bugzilla.suse.com/1177766 https://bugzilla.suse.com/1177855 https://bugzilla.suse.com/1177856 https://bugzilla.suse.com/1177861 https://bugzilla.suse.com/1178027 https://bugzilla.suse.com/1178123 https://bugzilla.suse.com/1178166 https://bugzilla.suse.com/1178185 https://bugzilla.suse.com/1178187 https://bugzilla.suse.com/1178188 https://bugzilla.suse.com/1178202 https://bugzilla.suse.com/1178234 https://bugzilla.suse.com/1178330 https://bugzilla.suse.com/936888

1 0

[opensuse-updates] openSUSE-RU-2020:1903-1: moderate: Recommended update for ndctl
by maintenance＠opensuse.org 12 Nov '20

12 Nov '20

openSUSE Recommended Update: Recommended update for ndctl ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1903-1 Rating: moderate References: Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for ndctl fixes the following issues: - Adds firmware activation support. (jsc#SLE-13338) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1903=1 Package List: - openSUSE Leap 15.1 (x86_64): libndctl-devel-70.1-lp151.2.28.1 libndctl6-70.1-lp151.2.28.1 libndctl6-debuginfo-70.1-lp151.2.28.1 ndctl-70.1-lp151.2.28.1 ndctl-debuginfo-70.1-lp151.2.28.1 ndctl-debugsource-70.1-lp151.2.28.1 References:

1 0

[opensuse-updates] openSUSE-RU-2020:1900-1: moderate: Recommended update for ImageMagick
by maintenance＠opensuse.org 11 Nov '20

11 Nov '20

openSUSE Recommended Update: Recommended update for ImageMagick ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1900-1 Rating: moderate References: #1106272 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ImageMagick fixes the following issue: - Set the correct colorspace. (bsc#1106272) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1900=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): ImageMagick-7.0.7.34-lp151.7.18.1 ImageMagick-config-7-SUSE-7.0.7.34-lp151.7.18.1 ImageMagick-config-7-upstream-7.0.7.34-lp151.7.18.1 ImageMagick-debuginfo-7.0.7.34-lp151.7.18.1 ImageMagick-debugsource-7.0.7.34-lp151.7.18.1 ImageMagick-devel-7.0.7.34-lp151.7.18.1 ImageMagick-extra-7.0.7.34-lp151.7.18.1 ImageMagick-extra-debuginfo-7.0.7.34-lp151.7.18.1 libMagick++-7_Q16HDRI4-7.0.7.34-lp151.7.18.1 libMagick++-7_Q16HDRI4-debuginfo-7.0.7.34-lp151.7.18.1 libMagick++-devel-7.0.7.34-lp151.7.18.1 libMagickCore-7_Q16HDRI6-7.0.7.34-lp151.7.18.1 libMagickCore-7_Q16HDRI6-debuginfo-7.0.7.34-lp151.7.18.1 libMagickWand-7_Q16HDRI6-7.0.7.34-lp151.7.18.1 libMagickWand-7_Q16HDRI6-debuginfo-7.0.7.34-lp151.7.18.1 perl-PerlMagick-7.0.7.34-lp151.7.18.1 perl-PerlMagick-debuginfo-7.0.7.34-lp151.7.18.1 - openSUSE Leap 15.1 (noarch): ImageMagick-doc-7.0.7.34-lp151.7.18.1 - openSUSE Leap 15.1 (x86_64): ImageMagick-devel-32bit-7.0.7.34-lp151.7.18.1 libMagick++-7_Q16HDRI4-32bit-7.0.7.34-lp151.7.18.1 libMagick++-7_Q16HDRI4-32bit-debuginfo-7.0.7.34-lp151.7.18.1 libMagick++-devel-32bit-7.0.7.34-lp151.7.18.1 libMagickCore-7_Q16HDRI6-32bit-7.0.7.34-lp151.7.18.1 libMagickCore-7_Q16HDRI6-32bit-debuginfo-7.0.7.34-lp151.7.18.1 libMagickWand-7_Q16HDRI6-32bit-7.0.7.34-lp151.7.18.1 libMagickWand-7_Q16HDRI6-32bit-debuginfo-7.0.7.34-lp151.7.18.1 References: https://bugzilla.suse.com/1106272

1 0

[opensuse-updates] openSUSE-SU-2020:1899-1: moderate: Security update for sddm
by opensuse-security＠opensuse.org 11 Nov '20

11 Nov '20

openSUSE Security Update: Security update for sddm ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1899-1 Rating: moderate References: #1177201 Cross-References: CVE-2020-28049 Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for sddm fixes the following issue: - Fix X not having access control on startup (boo#1177201, CVE-2020-28049). This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1899=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): sddm-0.18.0-bp152.5.3.1 sddm-branding-SLE-0.18.0-bp152.5.3.1 sddm-branding-openSUSE-0.18.0-bp152.5.3.1 sddm-branding-upstream-0.18.0-bp152.5.3.1 References: https://www.suse.com/security/cve/CVE-2020-28049.html https://bugzilla.suse.com/1177201

1 0

openSUSE-RU-2020:1894-1: moderate: Recommended update for installation-images
by maintenance＠opensuse.org 10 Nov '20

10 Nov '20

openSUSE Recommended Update: Recommended update for installation-images ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1894-1 Rating: moderate References: #1169094 #1176982 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: installation-images was updated to fix: - Rasperry pi 3b+ Installer initrd lacks config files needed by brcmfmac Wifi driver (bsc#1169094) - common criteria: enable libgcrypt fips mode in the installer for CC (bsc#1176982) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1894=1 Package List: - openSUSE Leap 15.2 (noarch): tftpboot-installation-openSUSE-Leap-15.2-x86_64-14.477-lp152.2.9.1 - openSUSE Leap 15.2 (x86_64): install-initrd-openSUSE-14.477-lp152.2.9.1 installation-images-debuginfodeps-openSUSE-14.477-lp152.2.9.1 installation-images-openSUSE-14.477-lp152.2.9.1 skelcd-installer-net-openSUSE-14.477-lp152.2.9.1 skelcd-installer-openSUSE-14.477-lp152.2.9.1 References: https://bugzilla.suse.com/1169094 https://bugzilla.suse.com/1176982

1 0

openSUSE-SU-2020:1893-1: important: Security update for java-1_8_0-openj9
by opensuse-security＠opensuse.org 10 Nov '20

10 Nov '20

openSUSE Security Update: Security update for java-1_8_0-openj9 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1893-1 Rating: important References: #1174157 #1177943 Cross-References: CVE-2020-14556 CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581 CVE-2020-14583 CVE-2020-14593 CVE-2020-14621 CVE-2020-14779 CVE-2020-14781 CVE-2020-14782 CVE-2020-14792 CVE-2020-14796 CVE-2020-14797 CVE-2020-14798 CVE-2020-14803 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes 16 vulnerabilities is now available. Description: This update for java-1_8_0-openj9 fixes the following issues: -OpenJDK was updated to 8u2732 build 10 with OpenJ9 0.23.0 virtual machine -includes Oracle July 2020 (bsc#1174157) and October 2020 CPU (bsc#1177943) - CVE-2020-14556, CVE-2020-14577, CVE-2020-14578, CVE-2020-14579, CVE-2020-14581, CVE-2020-14583, CVE-2020-14593, CVE-2020-14621, CVE-2020-14779, CVE-2020-14781, CVE-2020-14782, CVE-2020-14792, CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and CVE-2020-14803 This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1893=1 Package List: - openSUSE Leap 15.2 (x86_64): java-1_8_0-openj9-1.8.0.272-lp152.3.3.1 java-1_8_0-openj9-accessibility-1.8.0.272-lp152.3.3.1 java-1_8_0-openj9-debuginfo-1.8.0.272-lp152.3.3.1 java-1_8_0-openj9-debugsource-1.8.0.272-lp152.3.3.1 java-1_8_0-openj9-demo-1.8.0.272-lp152.3.3.1 java-1_8_0-openj9-demo-debuginfo-1.8.0.272-lp152.3.3.1 java-1_8_0-openj9-devel-1.8.0.272-lp152.3.3.1 java-1_8_0-openj9-headless-1.8.0.272-lp152.3.3.1 java-1_8_0-openj9-src-1.8.0.272-lp152.3.3.1 - openSUSE Leap 15.2 (noarch): java-1_8_0-openj9-javadoc-1.8.0.272-lp152.3.3.1 References: https://www.suse.com/security/cve/CVE-2020-14556.html https://www.suse.com/security/cve/CVE-2020-14577.html https://www.suse.com/security/cve/CVE-2020-14578.html https://www.suse.com/security/cve/CVE-2020-14579.html https://www.suse.com/security/cve/CVE-2020-14581.html https://www.suse.com/security/cve/CVE-2020-14583.html https://www.suse.com/security/cve/CVE-2020-14593.html https://www.suse.com/security/cve/CVE-2020-14621.html https://www.suse.com/security/cve/CVE-2020-14779.html https://www.suse.com/security/cve/CVE-2020-14781.html https://www.suse.com/security/cve/CVE-2020-14782.html https://www.suse.com/security/cve/CVE-2020-14792.html https://www.suse.com/security/cve/CVE-2020-14796.html https://www.suse.com/security/cve/CVE-2020-14797.html https://www.suse.com/security/cve/CVE-2020-14798.html https://www.suse.com/security/cve/CVE-2020-14803.html https://bugzilla.suse.com/1174157 https://bugzilla.suse.com/1177943

1 0

openSUSE-RU-2020:1892-1: moderate: Recommended update for SUSE Manager Client Tools
by maintenance＠opensuse.org 10 Nov '20

10 Nov '20

openSUSE Recommended Update: Recommended update for SUSE Manager Client Tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1892-1 Rating: moderate References: #1167907 #1169664 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update fixes the following issues: dracut-saltboot: - Support autosign grains in saltboot intrd grafana: - Update to version 7.1.5: * Features / Enhancements - Stats: Stop counting the same user multiple times. - Field overrides: Filter by field name using regex. - AzureMonitor: map more units. - Explore: Don't run queries on datasource change. - Graph: Support setting field unit & override data source (automatic) unit. - Explore: Unification of logs/metrics/traces user interface - Table: JSON Cell should try to convert strings to JSON - Variables: enables cancel for slow query variables queries. - TimeZone: unify the time zone pickers to one that can rule them all. - Search: support URL query params. - Grafana-UI: Add FileUpload. - TablePanel: Sort numbers correctly. * Bug fixes - Alerting: remove LongToWide call in alerting. - AzureMonitor: fix panic introduced in 7.1.4 when unit was unspecified and alias was used. - Variables: Fixes issue with All variable not being resolved. - Templating: Fixes so texts show in picker not the values. - Templating: Templating: Fix undefined result when using raw interpolation format - TextPanel: Fix content overflowing panel boundaries. - StatPanel: Fix stat panel display name not showing when explicitly set. - Query history: Fix search filtering if null value. - Flux: Ensure connections to InfluxDB are closed. - Dashboard: Fix for viewer can enter panel edit mode by modifying url (but cannot not save anything). - Prometheus: Fix prom links in mixed mode. - Sign In Use correct url for the Sign In button. - StatPanel: Fixes issue with name showing for single series / field results - BarGauge: Fix space bug in single series mode. - Auth: Fix POST request failures with anonymous access - Templating: Fix recursive loop of template variable queries when changing ad-hoc-variable - Templating: Fixed recursive queries triggered when switching dashboard settings view - GraphPanel: Fix annotations overflowing panels. - Prometheus: Fix performance issue in processing of histogram labels. - Datasources: Handle URL parsing error. - Security: Use Header.Set and Header.Del for X-Grafana-User header. * Changes in spec file - Fix golang version = 1.14 to avoid dependency conflicts on some OBS projects grafana-ha-cluster-dashboards: - Add the package to the SUSE Manager Client Tools 12 channels. grafana-sap-hana-dashboards: - Add the package to the SUSE Manager Client Tools 12 channels. grafana-sap-netweaver-dashboards: - Add the package to the SUSE Manager Client Tools 12 channels. grafana-sap-providers: - Add the package to the SUSE Manager Client Tools 12 channels. mgr-daemon: - Update translation strings spacecmd: - Python3 fixes for errata in spacecmd (bsc#1169664) - Added support for i18n of user-facing strings - Python3 fix for sorted usage (bsc#1167907) spacewalk-client-tools: - Remove RH references in Python/Ruby localization and use the product name instead This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1892=1 Package List: - openSUSE Leap 15.2 (x86_64): grafana-7.1.5-lp152.2.7.1 grafana-debuginfo-7.1.5-lp152.2.7.1 - openSUSE Leap 15.2 (noarch): dracut-saltboot-0.1.1602150122.f08af0a-lp152.2.20.1 References: https://bugzilla.suse.com/1167907 https://bugzilla.suse.com/1169664

1 0

openSUSE-RU-2020:1891-1: moderate: Recommended update for SUSEConnect
by maintenance＠opensuse.org 10 Nov '20

10 Nov '20

openSUSE Recommended Update: Recommended update for SUSEConnect ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1891-1 Rating: moderate References: #1155027 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for SUSEConnect fixes the following issues: - Recognize more formats when parsing the '.curlrc' for proxy credentials. (bsc#1155027) - Add 'rpmlintrc' to filter false-positive warning about patch not applied - Extend the YaST API in order to access to the package search functionality. (jsc#SLE-9109) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1891=1 Package List: - openSUSE Leap 15.2 (x86_64): SUSEConnect-0.3.28-lp152.2.3.1 References: https://bugzilla.suse.com/1155027

1 0

openSUSE-RU-2020:1890-1: moderate: Recommended update for torbrowser-launcher
by maintenance＠opensuse.org 10 Nov '20

10 Nov '20

openSUSE Recommended Update: Recommended update for torbrowser-launcher ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1890-1 Rating: moderate References: #1178299 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for torbrowser-launcher fixes the following issues: - Add new non-expired signing key: tor-browser-developers.asc - Add torbrowser-launcher-version-check.patch to fix version checking so that torbrowser version 10.0 is not treated as older than version 9.x [boo#1178299]. This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1890=1 Package List: - openSUSE Backports SLE-15-SP1 (noarch): torbrowser-apparmor-profile-0.3.1-bp151.4.3.1 torbrowser-launcher-0.3.1-bp151.4.3.1 torbrowser-launcher-lang-0.3.1-bp151.4.3.1 References: https://bugzilla.suse.com/1178299

1 0

openSUSE-RU-2020:1889-1: moderate: Recommended update for ca-certificates-mozilla
by maintenance＠opensuse.org 10 Nov '20

10 Nov '20

openSUSE Recommended Update: Recommended update for ca-certificates-mozilla ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1889-1 Rating: moderate References: #1177864 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ca-certificates-mozilla fixes the following issues: The SSL Root CA store was updated to the 2.44 state of the Mozilla NSS Certificate store (bsc#1177864) - Removed CAs: - EE Certification Centre Root CA - Taiwan GRCA - Added CAs: - Trustwave Global Certification Authority - Trustwave Global ECC P256 Certification Authority - Trustwave Global ECC P384 Certification Authority This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1889=1 Package List: - openSUSE Leap 15.1 (noarch): ca-certificates-mozilla-2.44-lp151.2.12.1 References: https://bugzilla.suse.com/1177864

1 0

openSUSE-RU-2020:1887-1: moderate: Recommended update for adcli and sssd
by maintenance＠opensuse.org 09 Nov '20

09 Nov '20

openSUSE Recommended Update: Recommended update for adcli and sssd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1887-1 Rating: moderate References: Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for adcli and ssd fixes the following issues: - Update samba secrets database after changing the machine password. (jsc#ECO-2613) Only for adcli: - Implement support for 'testjoin' command. (jsc#SLE-11503) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1887=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): adcli-0.8.2-lp151.2.9.1 adcli-debuginfo-0.8.2-lp151.2.9.1 adcli-debugsource-0.8.2-lp151.2.9.1 adcli-doc-0.8.2-lp151.2.9.1 libipa_hbac-devel-1.16.1-lp151.7.19.1 libipa_hbac0-1.16.1-lp151.7.19.1 libipa_hbac0-debuginfo-1.16.1-lp151.7.19.1 libnfsidmap-sss-1.16.1-lp151.7.19.1 libnfsidmap-sss-debuginfo-1.16.1-lp151.7.19.1 libsss_certmap-devel-1.16.1-lp151.7.19.1 libsss_certmap0-1.16.1-lp151.7.19.1 libsss_certmap0-debuginfo-1.16.1-lp151.7.19.1 libsss_idmap-devel-1.16.1-lp151.7.19.1 libsss_idmap0-1.16.1-lp151.7.19.1 libsss_idmap0-debuginfo-1.16.1-lp151.7.19.1 libsss_nss_idmap-devel-1.16.1-lp151.7.19.1 libsss_nss_idmap0-1.16.1-lp151.7.19.1 libsss_nss_idmap0-debuginfo-1.16.1-lp151.7.19.1 libsss_simpleifp-devel-1.16.1-lp151.7.19.1 libsss_simpleifp0-1.16.1-lp151.7.19.1 libsss_simpleifp0-debuginfo-1.16.1-lp151.7.19.1 python3-ipa_hbac-1.16.1-lp151.7.19.1 python3-ipa_hbac-debuginfo-1.16.1-lp151.7.19.1 python3-sss-murmur-1.16.1-lp151.7.19.1 python3-sss-murmur-debuginfo-1.16.1-lp151.7.19.1 python3-sss_nss_idmap-1.16.1-lp151.7.19.1 python3-sss_nss_idmap-debuginfo-1.16.1-lp151.7.19.1 python3-sssd-config-1.16.1-lp151.7.19.1 python3-sssd-config-debuginfo-1.16.1-lp151.7.19.1 sssd-1.16.1-lp151.7.19.1 sssd-ad-1.16.1-lp151.7.19.1 sssd-ad-debuginfo-1.16.1-lp151.7.19.1 sssd-dbus-1.16.1-lp151.7.19.1 sssd-dbus-debuginfo-1.16.1-lp151.7.19.1 sssd-debuginfo-1.16.1-lp151.7.19.1 sssd-debugsource-1.16.1-lp151.7.19.1 sssd-ipa-1.16.1-lp151.7.19.1 sssd-ipa-debuginfo-1.16.1-lp151.7.19.1 sssd-krb5-1.16.1-lp151.7.19.1 sssd-krb5-common-1.16.1-lp151.7.19.1 sssd-krb5-common-debuginfo-1.16.1-lp151.7.19.1 sssd-krb5-debuginfo-1.16.1-lp151.7.19.1 sssd-ldap-1.16.1-lp151.7.19.1 sssd-ldap-debuginfo-1.16.1-lp151.7.19.1 sssd-proxy-1.16.1-lp151.7.19.1 sssd-proxy-debuginfo-1.16.1-lp151.7.19.1 sssd-tools-1.16.1-lp151.7.19.1 sssd-tools-debuginfo-1.16.1-lp151.7.19.1 sssd-wbclient-1.16.1-lp151.7.19.1 sssd-wbclient-debuginfo-1.16.1-lp151.7.19.1 sssd-wbclient-devel-1.16.1-lp151.7.19.1 sssd-winbind-idmap-1.16.1-lp151.7.19.1 sssd-winbind-idmap-debuginfo-1.16.1-lp151.7.19.1 - openSUSE Leap 15.1 (x86_64): sssd-32bit-1.16.1-lp151.7.19.1 sssd-32bit-debuginfo-1.16.1-lp151.7.19.1 References:

1 0

openSUSE-SU-2020:1888-1: moderate: Security update for otrs
by opensuse-security＠opensuse.org 09 Nov '20

09 Nov '20

openSUSE Security Update: Security update for otrs ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1888-1 Rating: moderate References: #1178434 Cross-References: CVE-2020-11022 CVE-2020-11023 Affected Products: openSUSE Leap 15.2 openSUSE Leap 15.1 openSUSE Backports SLE-15-SP2 openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for otrs fixes the following issues: - otrs was updated to 6.0.30 (OSA-2020-14 boo#1178434) - CVE-2020-11022, CVE-2020-11023: Vulnerability in third-party library - jquery OTRS uses jquery version 3.4.1, which is vulnerable to cross-site scripting (XSS). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1888=1 - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1888=1 - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1888=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1888=1 Package List: - openSUSE Leap 15.2 (noarch): otrs-6.0.30-lp152.2.6.1 otrs-doc-6.0.30-lp152.2.6.1 otrs-itsm-6.0.30-lp152.2.6.1 - openSUSE Leap 15.1 (noarch): otrs-6.0.30-lp151.2.9.1 otrs-doc-6.0.30-lp151.2.9.1 otrs-itsm-6.0.30-lp151.2.9.1 - openSUSE Backports SLE-15-SP2 (noarch): otrs-6.0.30-bp152.2.11.1 otrs-doc-6.0.30-bp152.2.11.1 otrs-itsm-6.0.30-bp152.2.11.1 - openSUSE Backports SLE-15-SP1 (noarch): otrs-6.0.30-bp151.3.9.1 otrs-doc-6.0.30-bp151.3.9.1 otrs-itsm-6.0.30-bp151.3.9.1 References: https://www.suse.com/security/cve/CVE-2020-11022.html https://www.suse.com/security/cve/CVE-2020-11023.html https://bugzilla.suse.com/1178434

1 0

openSUSE-RU-2020:1886-1: moderate: Recommended update for SUSEConnect
by maintenance＠opensuse.org 09 Nov '20

09 Nov '20

openSUSE Recommended Update: Recommended update for SUSEConnect ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1886-1 Rating: moderate References: #1155027 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for SUSEConnect fixes the following issues: - Recognize more formats when parsing the '.curlrc' for proxy credentials. (bsc#1155027) - Add 'rpmlintrc' to filter false-positive warning about patch not applied - Extend the YaST API in order to access to the package search functionality. (jsc#SLE-9109) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1886=1 Package List: - openSUSE Leap 15.1 (x86_64): SUSEConnect-0.3.28-lp151.2.15.1 References: https://bugzilla.suse.com/1155027

1 0

openSUSE-RU-2020:1885-1: moderate: Recommended update for ca-certificates-mozilla
by maintenance＠opensuse.org 09 Nov '20

09 Nov '20

openSUSE Recommended Update: Recommended update for ca-certificates-mozilla ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1885-1 Rating: moderate References: #1177864 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ca-certificates-mozilla fixes the following issues: The SSL Root CA store was updated to the 2.44 state of the Mozilla NSS Certificate store (bsc#1177864) - Removed CAs: - EE Certification Centre Root CA - Taiwan GRCA - Added CAs: - Trustwave Global Certification Authority - Trustwave Global ECC P256 Certification Authority - Trustwave Global ECC P384 Certification Authority Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1885=1 Package List: - openSUSE Leap 15.2 (noarch): ca-certificates-mozilla-2.44-lp152.2.7.1 References: https://bugzilla.suse.com/1177864

1 0

openSUSE-SU-2020:1882-1: moderate: Security update for wireshark
by opensuse-security＠opensuse.org 09 Nov '20

09 Nov '20

openSUSE Security Update: Security update for wireshark ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1882-1 Rating: moderate References: #1175204 #1176908 #1176909 #1176910 Cross-References: CVE-2020-17498 CVE-2020-25862 CVE-2020-25863 CVE-2020-25866 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for wireshark fixes the following issues: - Update to wireshark 3.2.7: * CVE-2020-25863: MIME Multipart dissector crash (bsc#1176908) * CVE-2020-25862: TCP dissector crash (bsc#1176909) * CVE-2020-25866: BLIP dissector crash (bsc#1176910) * CVE-2020-17498: Kafka dissector crash (bsc#1175204) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1882=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libwireshark13-3.2.7-lp152.2.6.1 libwireshark13-debuginfo-3.2.7-lp152.2.6.1 libwiretap10-3.2.7-lp152.2.6.1 libwiretap10-debuginfo-3.2.7-lp152.2.6.1 libwsutil11-3.2.7-lp152.2.6.1 libwsutil11-debuginfo-3.2.7-lp152.2.6.1 wireshark-3.2.7-lp152.2.6.1 wireshark-debuginfo-3.2.7-lp152.2.6.1 wireshark-debugsource-3.2.7-lp152.2.6.1 wireshark-devel-3.2.7-lp152.2.6.1 wireshark-ui-qt-3.2.7-lp152.2.6.1 wireshark-ui-qt-debuginfo-3.2.7-lp152.2.6.1 References: https://www.suse.com/security/cve/CVE-2020-17498.html https://www.suse.com/security/cve/CVE-2020-25862.html https://www.suse.com/security/cve/CVE-2020-25863.html https://www.suse.com/security/cve/CVE-2020-25866.html https://bugzilla.suse.com/1175204 https://bugzilla.suse.com/1176908 https://bugzilla.suse.com/1176909 https://bugzilla.suse.com/1176910

1 0

openSUSE-SU-2020:1884-1: moderate: Security update for ImageMagick
by opensuse-security＠opensuse.org 09 Nov '20

09 Nov '20

openSUSE Security Update: Security update for ImageMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1884-1 Rating: moderate References: #1178067 Cross-References: CVE-2020-27560 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for ImageMagick fixes the following issues: - CVE-2020-27560: Fixed potential denial of service in OptimizeLayerFrames function in MagickCore/layer.c (bsc#1178067). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1884=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): ImageMagick-7.0.7.34-lp152.12.6.1 ImageMagick-config-7-SUSE-7.0.7.34-lp152.12.6.1 ImageMagick-config-7-upstream-7.0.7.34-lp152.12.6.1 ImageMagick-debuginfo-7.0.7.34-lp152.12.6.1 ImageMagick-debugsource-7.0.7.34-lp152.12.6.1 ImageMagick-devel-7.0.7.34-lp152.12.6.1 ImageMagick-extra-7.0.7.34-lp152.12.6.1 ImageMagick-extra-debuginfo-7.0.7.34-lp152.12.6.1 libMagick++-7_Q16HDRI4-7.0.7.34-lp152.12.6.1 libMagick++-7_Q16HDRI4-debuginfo-7.0.7.34-lp152.12.6.1 libMagick++-devel-7.0.7.34-lp152.12.6.1 libMagickCore-7_Q16HDRI6-7.0.7.34-lp152.12.6.1 libMagickCore-7_Q16HDRI6-debuginfo-7.0.7.34-lp152.12.6.1 libMagickWand-7_Q16HDRI6-7.0.7.34-lp152.12.6.1 libMagickWand-7_Q16HDRI6-debuginfo-7.0.7.34-lp152.12.6.1 perl-PerlMagick-7.0.7.34-lp152.12.6.1 perl-PerlMagick-debuginfo-7.0.7.34-lp152.12.6.1 - openSUSE Leap 15.2 (x86_64): ImageMagick-devel-32bit-7.0.7.34-lp152.12.6.1 libMagick++-7_Q16HDRI4-32bit-7.0.7.34-lp152.12.6.1 libMagick++-7_Q16HDRI4-32bit-debuginfo-7.0.7.34-lp152.12.6.1 libMagick++-devel-32bit-7.0.7.34-lp152.12.6.1 libMagickCore-7_Q16HDRI6-32bit-7.0.7.34-lp152.12.6.1 libMagickCore-7_Q16HDRI6-32bit-debuginfo-7.0.7.34-lp152.12.6.1 libMagickWand-7_Q16HDRI6-32bit-7.0.7.34-lp152.12.6.1 libMagickWand-7_Q16HDRI6-32bit-debuginfo-7.0.7.34-lp152.12.6.1 - openSUSE Leap 15.2 (noarch): ImageMagick-doc-7.0.7.34-lp152.12.6.1 References: https://www.suse.com/security/cve/CVE-2020-27560.html https://bugzilla.suse.com/1178067

1 0

openSUSE-RU-2020:1881-1: moderate: Recommended update for crmsh
by maintenance＠opensuse.org 09 Nov '20

09 Nov '20

openSUSE Recommended Update: Recommended update for crmsh ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1881-1 Rating: moderate References: #1122391 #1148874 #1165644 #1175708 #1177980 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: This update for crmsh fixes the following issues: - Converting deprecated 'score' in rsc_order to 'kind' (bsc#1122391) - Fixed a bug where crmsh exited with an error, even if the 'error' is actually a warning (bsc#1122391) - Fixed an issue where 'crm cluster remove node' didn't stop nor disable the hawk service on that node (bsc#1175708) - Checks now whether pacemaker.service and corosync.service are already running/stopped (bsc#1177980) - Fixed a bug where the node address was not removed from the corosync.conf file on node removal (bsc#1165644) - Collecting corosync.log in hb_report if it is defined in config file (bsc#1148874) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1881=1 Package List: - openSUSE Leap 15.2 (noarch): crmsh-4.2.0+git.1604052559.2a348644-lp152.4.31.1 crmsh-scripts-4.2.0+git.1604052559.2a348644-lp152.4.31.1 crmsh-test-4.2.0+git.1604052559.2a348644-lp152.4.31.1 References: https://bugzilla.suse.com/1122391 https://bugzilla.suse.com/1148874 https://bugzilla.suse.com/1165644 https://bugzilla.suse.com/1175708 https://bugzilla.suse.com/1177980

1 0

openSUSE-RU-2020:1883-1: moderate: Recommended update for drbd-utils
by maintenance＠opensuse.org 09 Nov '20

09 Nov '20

openSUSE Recommended Update: Recommended update for drbd-utils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1883-1 Rating: moderate References: #1177531 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for drbd-utils fixes the following issue: - Move block-drbd back to /etc/xen/scripts (bsc#1177531) The change in xen.spec was reverted, but the revert was not applied to this pkg. This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1883=1 Package List: - openSUSE Leap 15.2 (x86_64): drbd-utils-9.13.0-lp152.2.6.1 drbd-utils-debuginfo-9.13.0-lp152.2.6.1 drbd-utils-debugsource-9.13.0-lp152.2.6.1 References: https://bugzilla.suse.com/1177531

1 0

openSUSE-SU-2020:1880-1: moderate: Security update for bluez
by opensuse-security＠opensuse.org 09 Nov '20

09 Nov '20

openSUSE Security Update: Security update for bluez ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1880-1 Rating: moderate References: #1177895 Cross-References: CVE-2020-27153 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for bluez fixes the following issues: - CVE-2020-27153: Fixed possible crash on disconnect (bsc#1177895). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1880=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): bluez-5.48-lp152.12.6.1 bluez-cups-5.48-lp152.12.6.1 bluez-cups-debuginfo-5.48-lp152.12.6.1 bluez-debuginfo-5.48-lp152.12.6.1 bluez-debugsource-5.48-lp152.12.6.1 bluez-devel-5.48-lp152.12.6.1 bluez-test-5.48-lp152.12.6.1 bluez-test-debuginfo-5.48-lp152.12.6.1 libbluetooth3-5.48-lp152.12.6.1 libbluetooth3-debuginfo-5.48-lp152.12.6.1 - openSUSE Leap 15.2 (x86_64): bluez-devel-32bit-5.48-lp152.12.6.1 libbluetooth3-32bit-5.48-lp152.12.6.1 libbluetooth3-32bit-debuginfo-5.48-lp152.12.6.1 - openSUSE Leap 15.2 (noarch): bluez-auto-enable-devices-5.48-lp152.12.6.1 References: https://www.suse.com/security/cve/CVE-2020-27153.html https://bugzilla.suse.com/1177895

1 0

openSUSE-RU-2020:1879-1: moderate: Recommended update for yast2-firstboot and yast2-country
by maintenance＠opensuse.org 09 Nov '20

09 Nov '20

openSUSE Recommended Update: Recommended update for yast2-firstboot and yast2-country ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1879-1 Rating: moderate References: #1174856 #1177797 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for yast2-firstboot and yast2-country fixes the following issues: - Fixes an issue with firstboot_keyboard in AutoYaST profiles (bsc#1174856) yast2-firstboot fixes only: - Fixed a crash in combination with ntp-client (bsc#1177797) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1879=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): yast2-country-4.2.20-lp152.2.3.1 yast2-country-data-4.2.20-lp152.2.3.1 - openSUSE Leap 15.2 (noarch): yast2-firstboot-4.2.18-lp152.2.6.1 References: https://bugzilla.suse.com/1174856 https://bugzilla.suse.com/1177797

1 0

openSUSE-SU-2020:1878-1: moderate: Security update for wireshark
by opensuse-security＠opensuse.org 08 Nov '20

08 Nov '20

openSUSE Security Update: Security update for wireshark ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1878-1 Rating: moderate References: #1175204 #1176908 #1176909 #1176910 Cross-References: CVE-2020-17498 CVE-2020-25862 CVE-2020-25863 CVE-2020-25866 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for wireshark fixes the following issues: - Update to wireshark 3.2.7: * CVE-2020-25863: MIME Multipart dissector crash (bsc#1176908) * CVE-2020-25862: TCP dissector crash (bsc#1176909) * CVE-2020-25866: BLIP dissector crash (bsc#1176910) * CVE-2020-17498: Kafka dissector crash (bsc#1175204) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1878=1 Package List: - openSUSE Leap 15.1 (x86_64): libwireshark13-3.2.7-lp151.2.15.1 libwireshark13-debuginfo-3.2.7-lp151.2.15.1 libwiretap10-3.2.7-lp151.2.15.1 libwiretap10-debuginfo-3.2.7-lp151.2.15.1 libwsutil11-3.2.7-lp151.2.15.1 libwsutil11-debuginfo-3.2.7-lp151.2.15.1 wireshark-3.2.7-lp151.2.15.1 wireshark-debuginfo-3.2.7-lp151.2.15.1 wireshark-debugsource-3.2.7-lp151.2.15.1 wireshark-devel-3.2.7-lp151.2.15.1 wireshark-ui-qt-3.2.7-lp151.2.15.1 wireshark-ui-qt-debuginfo-3.2.7-lp151.2.15.1 References: https://www.suse.com/security/cve/CVE-2020-17498.html https://www.suse.com/security/cve/CVE-2020-25862.html https://www.suse.com/security/cve/CVE-2020-25863.html https://www.suse.com/security/cve/CVE-2020-25866.html https://bugzilla.suse.com/1175204 https://bugzilla.suse.com/1176908 https://bugzilla.suse.com/1176909 https://bugzilla.suse.com/1176910

1 0

openSUSE-SU-2020:1876-1: moderate: Security update for bluez
by opensuse-security＠opensuse.org 08 Nov '20

08 Nov '20

openSUSE Security Update: Security update for bluez ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1876-1 Rating: moderate References: #1177895 Cross-References: CVE-2020-27153 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for bluez fixes the following issues: - CVE-2020-27153: Fixed possible crash on disconnect (bsc#1177895). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1876=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): bluez-5.48-lp151.8.15.1 bluez-cups-5.48-lp151.8.15.1 bluez-cups-debuginfo-5.48-lp151.8.15.1 bluez-debuginfo-5.48-lp151.8.15.1 bluez-debugsource-5.48-lp151.8.15.1 bluez-devel-5.48-lp151.8.15.1 bluez-test-5.48-lp151.8.15.1 bluez-test-debuginfo-5.48-lp151.8.15.1 libbluetooth3-5.48-lp151.8.15.1 libbluetooth3-debuginfo-5.48-lp151.8.15.1 - openSUSE Leap 15.1 (x86_64): bluez-devel-32bit-5.48-lp151.8.15.1 libbluetooth3-32bit-5.48-lp151.8.15.1 libbluetooth3-32bit-debuginfo-5.48-lp151.8.15.1 - openSUSE Leap 15.1 (noarch): bluez-auto-enable-devices-5.48-lp151.8.15.1 References: https://www.suse.com/security/cve/CVE-2020-27153.html https://bugzilla.suse.com/1177895

1 0

openSUSE-RU-2020:1877-1: moderate: Recommended update for crmsh
by maintenance＠opensuse.org 08 Nov '20

08 Nov '20

openSUSE Recommended Update: Recommended update for crmsh ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1877-1 Rating: moderate References: #1122391 #1148874 #1165644 #1175708 #1177980 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: This update for crmsh fixes the following issues: - Converting deprecated 'score' in rsc_order to 'kind' (bsc#1122391) - Fixed a bug where crmsh exited with an error, even if the 'error' is actually a warning (bsc#1122391) - Fixed an issue where 'crm cluster remove node' didn't stop nor disable the hawk service on that node (bsc#1175708) - Checks now whether pacemaker.service and corosync.service are already running/stopped (bsc#1177980) - Fixed a bug where the node address was not removed from the corosync.conf file on node removal (bsc#1165644) - Collecting corosync.log in hb_report if it is defined in config file (bsc#1148874) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1877=1 Package List: - openSUSE Leap 15.1 (noarch): crmsh-4.2.0+git.1604052559.2a348644-lp151.2.39.1 crmsh-scripts-4.2.0+git.1604052559.2a348644-lp151.2.39.1 crmsh-test-4.2.0+git.1604052559.2a348644-lp151.2.39.1 References: https://bugzilla.suse.com/1122391 https://bugzilla.suse.com/1148874 https://bugzilla.suse.com/1165644 https://bugzilla.suse.com/1175708 https://bugzilla.suse.com/1177980

1 0

openSUSE-RU-2020:1874-1: moderate: Recommended update for icewm
by maintenance＠opensuse.org 08 Nov '20

08 Nov '20

openSUSE Recommended Update: Recommended update for icewm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1874-1 Rating: moderate References: #1170420 #1173441 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for icewm fixes the following issues: - Fixes an issue where icewm updates could no longer be installed (bsc#1173441, bsc#1170420) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1874=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): icewm-1.4.2-lp152.12.6.1 icewm-debuginfo-1.4.2-lp152.12.6.1 icewm-debugsource-1.4.2-lp152.12.6.1 icewm-default-1.4.2-lp152.12.6.1 icewm-default-debuginfo-1.4.2-lp152.12.6.1 icewm-lite-1.4.2-lp152.12.6.1 icewm-lite-debuginfo-1.4.2-lp152.12.6.1 - openSUSE Leap 15.2 (noarch): icewm-config-upstream-1.4.2-lp152.12.6.1 icewm-lang-1.4.2-lp152.12.6.1 References: https://bugzilla.suse.com/1170420 https://bugzilla.suse.com/1173441

1 0

openSUSE-SU-2020:1875-1: important: Security update for apache-commons-httpclient
by opensuse-security＠opensuse.org 08 Nov '20

08 Nov '20

openSUSE Security Update: Security update for apache-commons-httpclient ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1875-1 Rating: important References: #1178171 #945190 Cross-References: CVE-2014-3577 CVE-2015-5262 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for apache-commons-httpclient fixes the following issues: - http/conn/ssl/SSLConnectionSocketFactory.java ignores the http.socket.timeout configuration setting during an SSL handshake, which allows remote attackers to cause a denial of service (HTTPS call hang) via unspecified vectors. [bsc#945190, CVE-2015-5262] - org.apache.http.conn.ssl.AbstractVerifier does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows MITM attackers to spoof SSL servers via a "CN=" string in a field in the distinguished name (DN) of a certificate. [bsc#1178171, CVE-2014-3577] This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1875=1 Package List: - openSUSE Leap 15.2 (noarch): apache-commons-httpclient-3.1-lp152.6.3.1 apache-commons-httpclient-demo-3.1-lp152.6.3.1 apache-commons-httpclient-javadoc-3.1-lp152.6.3.1 apache-commons-httpclient-manual-3.1-lp152.6.3.1 References: https://www.suse.com/security/cve/CVE-2014-3577.html https://www.suse.com/security/cve/CVE-2015-5262.html https://bugzilla.suse.com/1178171 https://bugzilla.suse.com/945190

1 0

openSUSE-RU-2020:1871-1: moderate: Recommended update for yast2-nis-client
by maintenance＠opensuse.org 07 Nov '20

07 Nov '20

openSUSE Recommended Update: Recommended update for yast2-nis-client ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1871-1 Rating: moderate References: #1174603 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-nis-client fixes the following issue: - Fixed the mechanism used to ensure the usage of "compat" for certain databases. (bsc#1174603) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1871=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): yast2-nis-client-4.2.4-lp152.2.3.1 yast2-nis-client-debuginfo-4.2.4-lp152.2.3.1 yast2-nis-client-debugsource-4.2.4-lp152.2.3.1 References: https://bugzilla.suse.com/1174603

1 0

openSUSE-RU-2020:1872-1: critical: Recommended update for salt
by maintenance＠opensuse.org 07 Nov '20

07 Nov '20

openSUSE Recommended Update: Recommended update for salt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1872-1 Rating: critical References: #1178485 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for salt fixes the following issue: - Avoid regression on "salt-master": set passphrase for salt-ssh keys to empty string (bsc#1178485) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1872=1 Package List: - openSUSE Leap 15.2 (noarch): salt-bash-completion-3000-lp152.3.18.1 salt-fish-completion-3000-lp152.3.18.1 salt-zsh-completion-3000-lp152.3.18.1 - openSUSE Leap 15.2 (x86_64): python2-salt-3000-lp152.3.18.1 python3-salt-3000-lp152.3.18.1 salt-3000-lp152.3.18.1 salt-api-3000-lp152.3.18.1 salt-cloud-3000-lp152.3.18.1 salt-doc-3000-lp152.3.18.1 salt-master-3000-lp152.3.18.1 salt-minion-3000-lp152.3.18.1 salt-proxy-3000-lp152.3.18.1 salt-ssh-3000-lp152.3.18.1 salt-standalone-formulas-configuration-3000-lp152.3.18.1 salt-syndic-3000-lp152.3.18.1 References: https://bugzilla.suse.com/1178485

1 0

openSUSE-SU-2020:1873-1: important: Security update for apache-commons-httpclient
by opensuse-security＠opensuse.org 07 Nov '20

07 Nov '20

openSUSE Security Update: Security update for apache-commons-httpclient ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1873-1 Rating: important References: #1178171 #945190 Cross-References: CVE-2014-3577 CVE-2015-5262 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for apache-commons-httpclient fixes the following issues: - http/conn/ssl/SSLConnectionSocketFactory.java ignores the http.socket.timeout configuration setting during an SSL handshake, which allows remote attackers to cause a denial of service (HTTPS call hang) via unspecified vectors. [bsc#945190, CVE-2015-5262] - org.apache.http.conn.ssl.AbstractVerifier does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows MITM attackers to spoof SSL servers via a "CN=" string in a field in the distinguished name (DN) of a certificate. [bsc#1178171, CVE-2014-3577] This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1873=1 Package List: - openSUSE Leap 15.1 (noarch): apache-commons-httpclient-3.1-lp151.4.3.1 apache-commons-httpclient-demo-3.1-lp151.4.3.1 apache-commons-httpclient-javadoc-3.1-lp151.4.3.1 apache-commons-httpclient-manual-3.1-lp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2014-3577.html https://www.suse.com/security/cve/CVE-2015-5262.html https://bugzilla.suse.com/1178171 https://bugzilla.suse.com/945190

1 0

openSUSE-SU-2020:1870-1: moderate: Security update for sddm
by opensuse-security＠opensuse.org 07 Nov '20

07 Nov '20

openSUSE Security Update: Security update for sddm ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1870-1 Rating: moderate References: #1177201 Cross-References: CVE-2020-28049 Affected Products: openSUSE Leap 15.2 openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for sddm fixes the following issue: - Fix X not having access control on startup (boo#1177201, CVE-2020-28049). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1870=1 - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1870=1 Package List: - openSUSE Leap 15.2 (x86_64): sddm-0.18.0-lp152.5.3.1 sddm-branding-openSUSE-0.18.0-lp152.5.3.1 sddm-branding-upstream-0.18.0-lp152.5.3.1 sddm-debuginfo-0.18.0-lp152.5.3.1 sddm-debugsource-0.18.0-lp152.5.3.1 - openSUSE Leap 15.1 (x86_64): sddm-0.18.0-lp151.3.6.1 sddm-branding-openSUSE-0.18.0-lp151.3.6.1 sddm-branding-upstream-0.18.0-lp151.3.6.1 sddm-debuginfo-0.18.0-lp151.3.6.1 sddm-debugsource-0.18.0-lp151.3.6.1 References: https://www.suse.com/security/cve/CVE-2020-28049.html https://bugzilla.suse.com/1177201

1 0

openSUSE-RU-2020:1865-1: important: Recommended update for timezone
by maintenance＠opensuse.org 07 Nov '20

07 Nov '20

openSUSE Recommended Update: Recommended update for timezone ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1865-1 Rating: important References: #1177460 #1178346 #1178350 #1178353 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for timezone fixes the following issues: - Generate "fat" timezone files (was default before 2020b). (bsc#1178346, bsc#1178350, bsc#1178353) - Palestine ends DST earlier than predicted, on 2020-10-24. (bsc#1177460) - Fiji starts DST later than usual, on 2020-12-20. (bsc#1177460) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1865=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): timezone-2020d-lp151.2.16.1 timezone-debuginfo-2020d-lp151.2.16.1 timezone-debugsource-2020d-lp151.2.16.1 - openSUSE Leap 15.1 (noarch): timezone-java-2020d-lp151.2.16.1 References: https://bugzilla.suse.com/1177460 https://bugzilla.suse.com/1178346 https://bugzilla.suse.com/1178350 https://bugzilla.suse.com/1178353

1 0

openSUSE-SU-2020:1869-1: important: Security update for u-boot
by opensuse-security＠opensuse.org 07 Nov '20

07 Nov '20

openSUSE Security Update: Security update for u-boot ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1869-1 Rating: important References: #1162198 #1167209 Cross-References: CVE-2020-10648 CVE-2020-8432 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for u-boot fixes the following issues: - CVE-2020-8432: Fixed a double free in the cmd/gpt.c do_rename_gpt_parts() function, which allowed an attacker to execute arbitrary code (bsc#1162198) - CVE-2020-10648: Fixed improper signature verification during verified boot (bsc#1167209). This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1869=1 Package List: - openSUSE Leap 15.2 (x86_64): u-boot-tools-2020.01-lp152.9.9.1 u-boot-tools-debuginfo-2020.01-lp152.9.9.1 References: https://www.suse.com/security/cve/CVE-2020-10648.html https://www.suse.com/security/cve/CVE-2020-8432.html https://bugzilla.suse.com/1162198 https://bugzilla.suse.com/1167209

1 0

openSUSE-RU-2020:1867-1: moderate: Recommended update for systemd
by maintenance＠opensuse.org 07 Nov '20

07 Nov '20

openSUSE Recommended Update: Recommended update for systemd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1867-1 Rating: moderate References: #1104902 #1154935 #1165502 #1167471 #1173422 #1176513 #1176800 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 7 recommended fixes can now be installed. Description: This update for systemd fixes the following issues: - seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422) - test-seccomp: log function names - test-seccomp: add log messages when skipping tests - basic/virt: Detect PowerVM hypervisor (bsc#1176800) - fs-util: suppress world-writable warnings if we read /dev/null - udevadm: rename option '--log-priority' into '--log-level' - udev: rename kernel option 'log_priority' into 'log_level' - fstab-generator: add 'nofail' when NFS 'bg' option is used (bsc#1176513) - Fix memory protection default (bsc#1167471) - cgroup: Support 0-value for memory protection directives and accepts MemorySwapMax=0 (bsc#1154935) - Improve latency and reliability when users log in/out (bsc#1104902, bsc#1165502) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1867=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libsystemd0-234-lp152.31.10.1 libsystemd0-debuginfo-234-lp152.31.10.1 libsystemd0-mini-234-lp152.31.10.1 libsystemd0-mini-debuginfo-234-lp152.31.10.1 libudev-devel-234-lp152.31.10.1 libudev-mini-devel-234-lp152.31.10.1 libudev-mini1-234-lp152.31.10.1 libudev-mini1-debuginfo-234-lp152.31.10.1 libudev1-234-lp152.31.10.1 libudev1-debuginfo-234-lp152.31.10.1 nss-myhostname-234-lp152.31.10.1 nss-myhostname-debuginfo-234-lp152.31.10.1 nss-mymachines-234-lp152.31.10.1 nss-mymachines-debuginfo-234-lp152.31.10.1 nss-systemd-234-lp152.31.10.1 nss-systemd-debuginfo-234-lp152.31.10.1 systemd-234-lp152.31.10.1 systemd-container-234-lp152.31.10.1 systemd-container-debuginfo-234-lp152.31.10.1 systemd-coredump-234-lp152.31.10.1 systemd-coredump-debuginfo-234-lp152.31.10.1 systemd-debuginfo-234-lp152.31.10.1 systemd-debugsource-234-lp152.31.10.1 systemd-devel-234-lp152.31.10.1 systemd-journal-remote-234-lp152.31.10.1 systemd-journal-remote-debuginfo-234-lp152.31.10.1 systemd-logger-234-lp152.31.10.1 systemd-mini-234-lp152.31.10.1 systemd-mini-container-mini-234-lp152.31.10.1 systemd-mini-container-mini-debuginfo-234-lp152.31.10.1 systemd-mini-coredump-mini-234-lp152.31.10.1 systemd-mini-coredump-mini-debuginfo-234-lp152.31.10.1 systemd-mini-debuginfo-234-lp152.31.10.1 systemd-mini-debugsource-234-lp152.31.10.1 systemd-mini-devel-234-lp152.31.10.1 systemd-mini-sysvinit-234-lp152.31.10.1 systemd-network-234-lp152.31.10.1 systemd-network-debuginfo-234-lp152.31.10.1 systemd-sysvinit-234-lp152.31.10.1 udev-234-lp152.31.10.1 udev-debuginfo-234-lp152.31.10.1 udev-mini-234-lp152.31.10.1 udev-mini-debuginfo-234-lp152.31.10.1 - openSUSE Leap 15.2 (x86_64): libsystemd0-32bit-234-lp152.31.10.1 libsystemd0-32bit-debuginfo-234-lp152.31.10.1 libudev-devel-32bit-234-lp152.31.10.1 libudev1-32bit-234-lp152.31.10.1 libudev1-32bit-debuginfo-234-lp152.31.10.1 nss-myhostname-32bit-234-lp152.31.10.1 nss-myhostname-32bit-debuginfo-234-lp152.31.10.1 nss-mymachines-32bit-234-lp152.31.10.1 nss-mymachines-32bit-debuginfo-234-lp152.31.10.1 systemd-32bit-234-lp152.31.10.1 systemd-32bit-debuginfo-234-lp152.31.10.1 - openSUSE Leap 15.2 (noarch): systemd-bash-completion-234-lp152.31.10.1 systemd-mini-bash-completion-234-lp152.31.10.1 References: https://bugzilla.suse.com/1104902 https://bugzilla.suse.com/1154935 https://bugzilla.suse.com/1165502 https://bugzilla.suse.com/1167471 https://bugzilla.suse.com/1173422 https://bugzilla.suse.com/1176513 https://bugzilla.suse.com/1176800

1 0

openSUSE-RU-2020:1866-1: moderate: Recommended update for sysconfig
by maintenance＠opensuse.org 07 Nov '20

07 Nov '20

openSUSE Recommended Update: Recommended update for sysconfig ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1866-1 Rating: moderate References: #1159566 #1173391 #1176285 #1176325 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for sysconfig fixes the following issues: - Fix for 'netconfig' to run with a new library including fallback to the previous location. (bsc#1176285) - Fix for changing content of such files like '/etc/resolv.conf' to avoid linked applications re-read them and unnecessarily re-initializes themselves accordingly. (bsc#1176325) - Fix for 'chrony helper' calling in background. (bsc#1173391) - Fix for configuration file by creating a symlink for it to prevent false ownership on the file. (bsc#1159566) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1866=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): sysconfig-0.85.6-lp151.2.9.1 sysconfig-debuginfo-0.85.6-lp151.2.9.1 sysconfig-debugsource-0.85.6-lp151.2.9.1 sysconfig-netconfig-0.85.6-lp151.2.9.1 References: https://bugzilla.suse.com/1159566 https://bugzilla.suse.com/1173391 https://bugzilla.suse.com/1176285 https://bugzilla.suse.com/1176325

1 0

openSUSE-SU-2020:1868-1: critical: Security update for salt
by opensuse-security＠opensuse.org 07 Nov '20

07 Nov '20

openSUSE Security Update: Security update for salt ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1868-1 Rating: critical References: #1159670 #1175987 #1176024 #1176294 #1176397 #1177867 #1178319 #1178361 #1178362 #1178485 Cross-References: CVE-2020-16846 CVE-2020-17490 CVE-2020-25592 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves three vulnerabilities and has 7 fixes is now available. Description: This update for salt fixes the following issues: - Avoid regression on "salt-master": set passphrase for salt-ssh keys to empty string (bsc#1178485) - Properly validate eauth credentials and tokens on SSH calls made by Salt API (bsc#1178319, bsc#1178362, bsc#1178361, CVE-2020-25592, CVE-2020-17490, CVE-2020-16846) - Fix disk.blkid to avoid unexpected keyword argument '__pub_user'. (bsc#1177867) - Ensure virt.update stop_on_reboot is updated with its default value. - Do not break package building for systemd OSes. - Drop wrong mock from chroot unit test. - Support systemd versions with dot. (bsc#1176294) - Fix for grains.test_core unit test. - Fix file/directory user and group ownership containing UTF-8 characters. (bsc#1176024) - Several changes to virtualization: * Fix virt update when cpu and memory are changed. * Memory Tuning GSoC. * Properly fix memory setting regression in virt.update. * Expose libvirt on_reboot in virt states. - Support transactional systems (MicroOS). - zypperpkg module ignores retcode 104 for search(). (bsc#1159670) - Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding file or block disk. (bsc#1175987) - Invalidate file list cache when cache file modified time is in the future. (bsc#1176397) - Prevent import errors when running test_btrfs unit tests This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1868=1 Package List: - openSUSE Leap 15.1 (noarch): salt-bash-completion-3000-lp151.5.30.1 salt-fish-completion-3000-lp151.5.30.1 salt-zsh-completion-3000-lp151.5.30.1 - openSUSE Leap 15.1 (x86_64): python2-salt-3000-lp151.5.30.1 python3-salt-3000-lp151.5.30.1 salt-3000-lp151.5.30.1 salt-api-3000-lp151.5.30.1 salt-cloud-3000-lp151.5.30.1 salt-doc-3000-lp151.5.30.1 salt-master-3000-lp151.5.30.1 salt-minion-3000-lp151.5.30.1 salt-proxy-3000-lp151.5.30.1 salt-ssh-3000-lp151.5.30.1 salt-standalone-formulas-configuration-3000-lp151.5.30.1 salt-syndic-3000-lp151.5.30.1 References: https://www.suse.com/security/cve/CVE-2020-16846.html https://www.suse.com/security/cve/CVE-2020-17490.html https://www.suse.com/security/cve/CVE-2020-25592.html https://bugzilla.suse.com/1159670 https://bugzilla.suse.com/1175987 https://bugzilla.suse.com/1176024 https://bugzilla.suse.com/1176294 https://bugzilla.suse.com/1176397 https://bugzilla.suse.com/1177867 https://bugzilla.suse.com/1178319 https://bugzilla.suse.com/1178361 https://bugzilla.suse.com/1178362 https://bugzilla.suse.com/1178485

1 0

openSUSE-RU-2020:1862-1: moderate: Recommended update for openvswitch
by maintenance＠opensuse.org 07 Nov '20

07 Nov '20

openSUSE Recommended Update: Recommended update for openvswitch ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1862-1 Rating: moderate References: #1176273 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for openvswitch fixes the following issues: - Fix wrong default directories for OVS python utilities. (bsc#1176273) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1862=1 Package List: - openSUSE Leap 15.2 (noarch): openvswitch-doc-2.13.1-lp152.3.6.1 ovn-doc-20.03.1-lp152.3.6.1 - openSUSE Leap 15.2 (x86_64): libopenvswitch-2_13-0-2.13.1-lp152.3.6.1 libopenvswitch-2_13-0-debuginfo-2.13.1-lp152.3.6.1 libovn-20_03-0-20.03.1-lp152.3.6.1 libovn-20_03-0-debuginfo-20.03.1-lp152.3.6.1 openvswitch-2.13.1-lp152.3.6.1 openvswitch-debuginfo-2.13.1-lp152.3.6.1 openvswitch-debugsource-2.13.1-lp152.3.6.1 openvswitch-devel-2.13.1-lp152.3.6.1 openvswitch-ipsec-2.13.1-lp152.3.6.1 openvswitch-pki-2.13.1-lp152.3.6.1 openvswitch-test-2.13.1-lp152.3.6.1 openvswitch-test-debuginfo-2.13.1-lp152.3.6.1 openvswitch-vtep-2.13.1-lp152.3.6.1 openvswitch-vtep-debuginfo-2.13.1-lp152.3.6.1 ovn-20.03.1-lp152.3.6.1 ovn-central-20.03.1-lp152.3.6.1 ovn-central-debuginfo-20.03.1-lp152.3.6.1 ovn-debuginfo-20.03.1-lp152.3.6.1 ovn-devel-20.03.1-lp152.3.6.1 ovn-docker-20.03.1-lp152.3.6.1 ovn-host-20.03.1-lp152.3.6.1 ovn-host-debuginfo-20.03.1-lp152.3.6.1 ovn-vtep-20.03.1-lp152.3.6.1 ovn-vtep-debuginfo-20.03.1-lp152.3.6.1 python3-ovs-2.13.1-lp152.3.6.1 References: https://bugzilla.suse.com/1176273

1 0

openSUSE-SU-2020:1861-1: moderate: Security update for gnome-settings-daemon, gnome-shell
by opensuse-security＠opensuse.org 07 Nov '20

07 Nov '20

openSUSE Security Update: Security update for gnome-settings-daemon, gnome-shell ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1861-1 Rating: moderate References: #1172760 #1175155 Cross-References: CVE-2020-17489 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for gnome-settings-daemon, gnome-shell fixes the following issues: gnome-settings-daemon: - Add support for recent UCM related changes in ALSA and PulseAudio. (jsc#SLE-16518) - Don't warn when a default source or sink is missing and the PulseAudio daemon is restarting. (jsc#SLE-16518) - Don't warn about starting/stopping services which don't exist. (bsc#1172760). gnome-shell: - Add support for recent UCM related changes in ALSA and PulseAudio. (jsc#SLE-16518) - CVE-2020-17489: reset auth prompt on vt switch before fade in in loginDialog (bsc#1175155). This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1861=1 Package List: - openSUSE Leap 15.2 (noarch): gnome-settings-daemon-lang-3.34.2+0-lp152.3.3.1 gnome-shell-lang-3.34.5-lp152.2.9.1 - openSUSE Leap 15.2 (x86_64): gnome-settings-daemon-3.34.2+0-lp152.3.3.1 gnome-settings-daemon-debuginfo-3.34.2+0-lp152.3.3.1 gnome-settings-daemon-debugsource-3.34.2+0-lp152.3.3.1 gnome-settings-daemon-devel-3.34.2+0-lp152.3.3.1 gnome-shell-3.34.5-lp152.2.9.1 gnome-shell-calendar-3.34.5-lp152.2.9.1 gnome-shell-calendar-debuginfo-3.34.5-lp152.2.9.1 gnome-shell-debuginfo-3.34.5-lp152.2.9.1 gnome-shell-debugsource-3.34.5-lp152.2.9.1 gnome-shell-devel-3.34.5-lp152.2.9.1 References: https://www.suse.com/security/cve/CVE-2020-17489.html https://bugzilla.suse.com/1172760 https://bugzilla.suse.com/1175155

1 0

openSUSE-RU-2020:1860-1: moderate: Recommended update for mdadm
by maintenance＠opensuse.org 07 Nov '20

07 Nov '20

openSUSE Recommended Update: Recommended update for mdadm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1860-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for mdadm fixes the following issues: - Implement support for the latest Intel IMSM raid. - imsm: Correct minimal device size (jsc#SLE-13700) - Fix for showing the correct bitmap info for cluster raid device. (jsc#SLE-13700) - imsm: support the Array Creation Time field in metadata. (jsc#SLE-13700) - imsm: show Subarray and Volume ID in --examine output. (jsc#SLE-13700) - udev: Ignore change event for 'imsm'. (jsc#SLE-13700) - imsm: Write metadata before add. (jsc#SLE-13700) - Print error message if mdadm fails assembling with '--uuid' option. (jsc#SLE-13700) - Fix for spliting 'uuid' stuff from 'util.c'. (jsc#SLE-13700) - restripe: fix ignoring return value of read and lseek. (jsc#SLE-13700) - Block overwriting existing links during manual assembly. (jsc#SLE-13700) - Detect too-small device and show an error message instead of crashing. (jsc#SLE-13700) - mdadm/Grow: prevent md's fd from being occupied during delayed time. (jsc#SLE-13700) - Specify nodes number when updating cluster nodes. (jsc#SLE-13700) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1860=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): mdadm-4.1-lp152.7.10.1 mdadm-debuginfo-4.1-lp152.7.10.1 mdadm-debugsource-4.1-lp152.7.10.1 References:

1 0

openSUSE-RU-2020:1864-1: moderate: Recommended update for bcache-tools
by maintenance＠opensuse.org 07 Nov '20

07 Nov '20

openSUSE Recommended Update: Recommended update for bcache-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1864-1 Rating: moderate References: #1174075 #1176244 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for bcache-tools fixes the following issues: - Remove dependency of 'smartcols' as bcache-tools code doesn't need it anymore. (jsc#SLE-9807) - Implement 'bcache-status'. (jsc#SLE-9807) - Remove the dependency on libsmartcols. (jsc#SLE-9807) - Fix for potential coredump issues. (jsc#SLE-9807) - Add more swap bitwise for different CPU endians. (jsc#SLE-9807) - Fixed an issue when an rpm macro '%{_libexecdir}' results braking packages. (bsc#1174075) - Fixed an issue when 'bcache' causing system crashing by using a legacy path. (bsc#1176244) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1864=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): bcache-tools-1.1-lp152.2.3.1 bcache-tools-debuginfo-1.1-lp152.2.3.1 bcache-tools-debugsource-1.1-lp152.2.3.1 References: https://bugzilla.suse.com/1174075 https://bugzilla.suse.com/1176244

1 0

openSUSE-RU-2020:1863-1: moderate: Recommended update for yast2-registration
by maintenance＠opensuse.org 07 Nov '20

07 Nov '20

openSUSE Recommended Update: Recommended update for yast2-registration ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1863-1 Rating: moderate References: #1176563 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-registration fixes the following issues: - Fixed upgrade using the Full medium with the "media_upgrade=1" boot option. (bsc#1176563) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1863=1 Package List: - openSUSE Leap 15.2 (noarch): yast2-registration-4.2.43-lp152.2.6.1 References: https://bugzilla.suse.com/1176563

1 0

openSUSE-SU-2020:1859-1: moderate: Security update for python
by opensuse-security＠opensuse.org 07 Nov '20

07 Nov '20

openSUSE Security Update: Security update for python ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1859-1 Rating: moderate References: #1177211 Cross-References: CVE-2020-26116 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python fixes the following issues: - bsc#1177211 (CVE-2020-26116) no longer allowing special characters in the method parameter of HTTPConnection.putrequest in httplib, stopping injection of headers. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1859=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libpython2_7-1_0-2.7.17-lp151.10.25.1 libpython2_7-1_0-debuginfo-2.7.17-lp151.10.25.1 python-2.7.17-lp151.10.25.1 python-base-2.7.17-lp151.10.25.1 python-base-debuginfo-2.7.17-lp151.10.25.1 python-base-debugsource-2.7.17-lp151.10.25.1 python-curses-2.7.17-lp151.10.25.1 python-curses-debuginfo-2.7.17-lp151.10.25.1 python-debuginfo-2.7.17-lp151.10.25.1 python-debugsource-2.7.17-lp151.10.25.1 python-demo-2.7.17-lp151.10.25.1 python-devel-2.7.17-lp151.10.25.1 python-gdbm-2.7.17-lp151.10.25.1 python-gdbm-debuginfo-2.7.17-lp151.10.25.1 python-idle-2.7.17-lp151.10.25.1 python-tk-2.7.17-lp151.10.25.1 python-tk-debuginfo-2.7.17-lp151.10.25.1 python-xml-2.7.17-lp151.10.25.1 python-xml-debuginfo-2.7.17-lp151.10.25.1 - openSUSE Leap 15.1 (noarch): python-doc-2.7.17-lp151.10.25.1 python-doc-pdf-2.7.17-lp151.10.25.1 - openSUSE Leap 15.1 (x86_64): libpython2_7-1_0-32bit-2.7.17-lp151.10.25.1 libpython2_7-1_0-32bit-debuginfo-2.7.17-lp151.10.25.1 python-32bit-2.7.17-lp151.10.25.1 python-32bit-debuginfo-2.7.17-lp151.10.25.1 python-base-32bit-2.7.17-lp151.10.25.1 python-base-32bit-debuginfo-2.7.17-lp151.10.25.1 References: https://www.suse.com/security/cve/CVE-2020-26116.html https://bugzilla.suse.com/1177211

1 0

openSUSE-RU-2020:1855-1: moderate: Recommended update for python-typing_extensions
by maintenance＠opensuse.org 06 Nov '20

06 Nov '20

openSUSE Recommended Update: Recommended update for python-typing_extensions ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1855-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for python-typing_extensions fixes the following issues: Update to version 3.7.4.2 * official support for Python 3.8 and 3.9 Update to version 3.7.4.1: + Fix isinstance() with generic protocol subclasses after subscripting + Fix tests for non-default interpreters + Use environment marker to specify typing dependency + Fix unions of protocols on Python 2 This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1855=1 Package List: - openSUSE Backports SLE-15-SP2 (noarch): python2-typing_extensions-3.7.4.2-bp152.4.3.1 python3-typing_extensions-3.7.4.2-bp152.4.3.1 References:

1 0

openSUSE-SU-2020:1856-1: moderate: Security update for virt-bootstrap
by opensuse-security＠opensuse.org 06 Nov '20

06 Nov '20

openSUSE Security Update: Security update for virt-bootstrap ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1856-1 Rating: moderate References: #1140750 Cross-References: CVE-2019-13314 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for virt-bootstrap fixes the following issues: Security issue fixed: - CVE-2019-13314: Allow providing the container's root password using a file (bsc#1140750). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1856=1 Package List: - openSUSE Leap 15.1 (noarch): python2-virt-bootstrap-1.0.0-lp151.4.3.1 python3-virt-bootstrap-1.0.0-lp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2019-13314.html https://bugzilla.suse.com/1140750

1 0

openSUSE-RU-2020:1858-1: moderate: Recommended update for mdadm
by maintenance＠opensuse.org 06 Nov '20

06 Nov '20

openSUSE Recommended Update: Recommended update for mdadm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1858-1 Rating: moderate References: Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for mdadm fixes the following issues: - Implement support for the latest Intel IMSM raid. - imsm: Correct minimal device size (jsc#SLE-13700) - Fix for showing the correct bitmap info for cluster raid device. (jsc#SLE-13700) - imsm: support the Array Creation Time field in metadata. (jsc#SLE-13700) - imsm: show Subarray and Volume ID in --examine output. (jsc#SLE-13700) - udev: Ignore change event for 'imsm'. (jsc#SLE-13700) - imsm: Write metadata before add. (jsc#SLE-13700) - Print error message if mdadm fails assembling with '--uuid' option. (jsc#SLE-13700) - Fix for spliting 'uuid' stuff from 'util.c'. (jsc#SLE-13700) - restripe: fix ignoring return value of read and lseek. (jsc#SLE-13700) - Block overwriting existing links during manual assembly. (jsc#SLE-13700) - Detect too-small device and show an error message instead of crashing. (jsc#SLE-13700) - mdadm/Grow: prevent md's fd from being occupied during delayed time. (jsc#SLE-13700) - Specify nodes number when updating cluster nodes. (jsc#SLE-13700) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1858=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): mdadm-4.1-lp151.4.18.1 mdadm-debuginfo-4.1-lp151.4.18.1 mdadm-debugsource-4.1-lp151.4.18.1 References:

1 0

openSUSE-RU-2020:1857-1: moderate: Recommended update for systemd
by maintenance＠opensuse.org 06 Nov '20

06 Nov '20

openSUSE Recommended Update: Recommended update for systemd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1857-1 Rating: moderate References: #1104902 #1154935 #1165502 #1167471 #1173422 #1176513 #1176800 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 7 recommended fixes can now be installed. Description: This update for systemd fixes the following issues: - seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422) - test-seccomp: log function names - test-seccomp: add log messages when skipping tests - basic/virt: Detect PowerVM hypervisor (bsc#1176800) - fs-util: suppress world-writable warnings if we read /dev/null - udevadm: rename option '--log-priority' into '--log-level' - udev: rename kernel option 'log_priority' into 'log_level' - fstab-generator: add 'nofail' when NFS 'bg' option is used (bsc#1176513) - Fix memory protection default (bsc#1167471) - cgroup: Support 0-value for memory protection directives and accepts MemorySwapMax=0 (bsc#1154935) - Improve latency and reliability when users log in/out (bsc#1104902, bsc#1165502) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1857=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libsystemd0-234-lp151.26.28.1 libsystemd0-debuginfo-234-lp151.26.28.1 libsystemd0-mini-234-lp151.26.28.1 libsystemd0-mini-debuginfo-234-lp151.26.28.1 libudev-devel-234-lp151.26.28.1 libudev-mini-devel-234-lp151.26.28.1 libudev-mini1-234-lp151.26.28.1 libudev-mini1-debuginfo-234-lp151.26.28.1 libudev1-234-lp151.26.28.1 libudev1-debuginfo-234-lp151.26.28.1 nss-myhostname-234-lp151.26.28.1 nss-myhostname-debuginfo-234-lp151.26.28.1 nss-mymachines-234-lp151.26.28.1 nss-mymachines-debuginfo-234-lp151.26.28.1 nss-systemd-234-lp151.26.28.1 nss-systemd-debuginfo-234-lp151.26.28.1 systemd-234-lp151.26.28.1 systemd-container-234-lp151.26.28.1 systemd-container-debuginfo-234-lp151.26.28.1 systemd-coredump-234-lp151.26.28.1 systemd-coredump-debuginfo-234-lp151.26.28.1 systemd-debuginfo-234-lp151.26.28.1 systemd-debugsource-234-lp151.26.28.1 systemd-devel-234-lp151.26.28.1 systemd-journal-remote-234-lp151.26.28.1 systemd-journal-remote-debuginfo-234-lp151.26.28.1 systemd-logger-234-lp151.26.28.1 systemd-mini-234-lp151.26.28.1 systemd-mini-container-mini-234-lp151.26.28.1 systemd-mini-container-mini-debuginfo-234-lp151.26.28.1 systemd-mini-coredump-mini-234-lp151.26.28.1 systemd-mini-coredump-mini-debuginfo-234-lp151.26.28.1 systemd-mini-debuginfo-234-lp151.26.28.1 systemd-mini-debugsource-234-lp151.26.28.1 systemd-mini-devel-234-lp151.26.28.1 systemd-mini-sysvinit-234-lp151.26.28.1 systemd-network-234-lp151.26.28.1 systemd-network-debuginfo-234-lp151.26.28.1 systemd-sysvinit-234-lp151.26.28.1 udev-234-lp151.26.28.1 udev-debuginfo-234-lp151.26.28.1 udev-mini-234-lp151.26.28.1 udev-mini-debuginfo-234-lp151.26.28.1 - openSUSE Leap 15.1 (noarch): systemd-bash-completion-234-lp151.26.28.1 systemd-mini-bash-completion-234-lp151.26.28.1 - openSUSE Leap 15.1 (x86_64): libsystemd0-32bit-234-lp151.26.28.1 libsystemd0-32bit-debuginfo-234-lp151.26.28.1 libudev-devel-32bit-234-lp151.26.28.1 libudev1-32bit-234-lp151.26.28.1 libudev1-32bit-debuginfo-234-lp151.26.28.1 nss-myhostname-32bit-234-lp151.26.28.1 nss-myhostname-32bit-debuginfo-234-lp151.26.28.1 nss-mymachines-32bit-234-lp151.26.28.1 nss-mymachines-32bit-debuginfo-234-lp151.26.28.1 systemd-32bit-234-lp151.26.28.1 systemd-32bit-debuginfo-234-lp151.26.28.1 References: https://bugzilla.suse.com/1104902 https://bugzilla.suse.com/1154935 https://bugzilla.suse.com/1165502 https://bugzilla.suse.com/1167471 https://bugzilla.suse.com/1173422 https://bugzilla.suse.com/1176513 https://bugzilla.suse.com/1176800

1 0

openSUSE-RU-2020:1854-1: moderate: Recommended update for torbrowser-launcher
by maintenance＠opensuse.org 06 Nov '20

06 Nov '20

openSUSE Recommended Update: Recommended update for torbrowser-launcher ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1854-1 Rating: moderate References: #1178299 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for torbrowser-launcher fixes the following issues: - Add new non-expired signing key: tor-browser-developers.asc - Add torbrowser-launcher-version-check.patch to fix version checking so that torbrowser version 10.0 is not treated as older than version 9.x [boo#1178299]. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1854=1 Package List: - openSUSE Leap 15.1 (noarch): torbrowser-apparmor-profile-0.3.1-lp151.3.5.1 torbrowser-launcher-0.3.1-lp151.3.5.1 torbrowser-launcher-lang-0.3.1-lp151.3.5.1 References: https://bugzilla.suse.com/1178299

1 0

openSUSE-RU-2020:1853-1: moderate: Recommended update for mksusecd
by maintenance＠opensuse.org 06 Nov '20

06 Nov '20

openSUSE Recommended Update: Recommended update for mksusecd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1853-1 Rating: moderate References: #1173263 #1176176 #1176379 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for mksusecd fixes the following issues: Update from version 1.71 to version 1.77 - fix add_on_products.xml handling (bsc#1176379) - look only at top-level products file (bsc#1176176) - ensure modified files really end up on the media (bsc#1176176) - adjust product handling if products are spread over several media - include complete product directories - fix product handling with new SLE full media layout - added "--sign-pass-file" - added option for recreating and signing the repo - remove "all done" message - additional passphrase options are not necessary at key creation - set additional options only when a existing sign key is specified - print message if --sign-pass-file and missing sign-key - removed sign_passwd_option on import - add --sign-key-id option to allow specifying a gpg signing key by id - do not include excluded products (bsc#1173263) - recreate products file, including its checksum update - Fix broken link to kiwi documentation This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1853=1 Package List: - openSUSE Leap 15.1 (x86_64): mksusecd-1.77-lp151.2.9.1 mksusecd-debuginfo-1.77-lp151.2.9.1 mksusecd-debugsource-1.77-lp151.2.9.1 References: https://bugzilla.suse.com/1173263 https://bugzilla.suse.com/1176176 https://bugzilla.suse.com/1176379

1 0

openSUSE-RU-2020:1851-1: moderate: Recommended update for subversion
by maintenance＠opensuse.org 06 Nov '20

06 Nov '20

openSUSE Recommended Update: Recommended update for subversion ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1851-1 Rating: moderate References: Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for subversion fixes the following issues: - Add patch to remove dependency on 'kdelibs4support' just to run kf5-config pointing the headers and libraries. (jsc#SLE-11901): This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1851=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libsvn_auth_gnome_keyring-1-0-1.10.6-lp151.4.6.1 libsvn_auth_gnome_keyring-1-0-debuginfo-1.10.6-lp151.4.6.1 libsvn_auth_kwallet-1-0-1.10.6-lp151.4.6.1 libsvn_auth_kwallet-1-0-debuginfo-1.10.6-lp151.4.6.1 subversion-1.10.6-lp151.4.6.1 subversion-debuginfo-1.10.6-lp151.4.6.1 subversion-debugsource-1.10.6-lp151.4.6.1 subversion-devel-1.10.6-lp151.4.6.1 subversion-perl-1.10.6-lp151.4.6.1 subversion-perl-debuginfo-1.10.6-lp151.4.6.1 subversion-python-1.10.6-lp151.4.6.1 subversion-python-ctypes-1.10.6-lp151.4.6.1 subversion-python-debuginfo-1.10.6-lp151.4.6.1 subversion-ruby-1.10.6-lp151.4.6.1 subversion-ruby-debuginfo-1.10.6-lp151.4.6.1 subversion-server-1.10.6-lp151.4.6.1 subversion-server-debuginfo-1.10.6-lp151.4.6.1 subversion-tools-1.10.6-lp151.4.6.1 subversion-tools-debuginfo-1.10.6-lp151.4.6.1 - openSUSE Leap 15.1 (noarch): subversion-bash-completion-1.10.6-lp151.4.6.1 References:

1 0

openSUSE-RU-2020:1852-1: moderate: Recommended update for python-SQLAlchemy
by maintenance＠opensuse.org 06 Nov '20

06 Nov '20

openSUSE Recommended Update: Recommended update for python-SQLAlchemy ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1852-1 Rating: moderate References: #1176953 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-SQLAlchemy fixes the following issue: - Maintain compiled_params/replacement_expressions within expanding IN parameter. (bsc#1176953) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1852=1 Package List: - openSUSE Leap 15.2 (x86_64): python-SQLAlchemy-debuginfo-1.2.14-lp152.4.3.1 python-SQLAlchemy-debugsource-1.2.14-lp152.4.3.1 python2-SQLAlchemy-1.2.14-lp152.4.3.1 python2-SQLAlchemy-debuginfo-1.2.14-lp152.4.3.1 python3-SQLAlchemy-1.2.14-lp152.4.3.1 python3-SQLAlchemy-debuginfo-1.2.14-lp152.4.3.1 - openSUSE Leap 15.2 (noarch): python-SQLAlchemy-doc-1.2.14-lp152.4.3.1 References: https://bugzilla.suse.com/1176953

1 0

openSUSE-RU-2020:1850-1: Recommended update for mutter
by maintenance＠opensuse.org 06 Nov '20

06 Nov '20

openSUSE Recommended Update: Recommended update for mutter ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1850-1 Rating: low References: #1175532 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for mutter fixes the following issue: - Fix copy and paste failing sometimes in wine applications. (bsc#1175532) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1850=1 Package List: - openSUSE Leap 15.2 (x86_64): libmutter-5-0-3.34.6-lp152.2.6.1 libmutter-5-0-debuginfo-3.34.6-lp152.2.6.1 mutter-3.34.6-lp152.2.6.1 mutter-data-3.34.6-lp152.2.6.1 mutter-debuginfo-3.34.6-lp152.2.6.1 mutter-debugsource-3.34.6-lp152.2.6.1 mutter-devel-3.34.6-lp152.2.6.1 - openSUSE Leap 15.2 (noarch): mutter-lang-3.34.6-lp152.2.6.1 References: https://bugzilla.suse.com/1175532

1 0

openSUSE-RU-2020:1848-1: moderate: Recommended update for dash
by maintenance＠opensuse.org 06 Nov '20

06 Nov '20

openSUSE Recommended Update: Recommended update for dash ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1848-1 Rating: moderate References: #1160260 #1177691 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for dash fixes the following issues: - Update to version 0.5.11.2 (bsc#1177691) * Add -fcommon to %optflags (bsc#1160260) * Fix a pathname expansion bug in dash (bsc#1177691) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1848=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): dash-0.5.11.2-lp152.4.3.1 dash-debuginfo-0.5.11.2-lp152.4.3.1 dash-debugsource-0.5.11.2-lp152.4.3.1 References: https://bugzilla.suse.com/1160260 https://bugzilla.suse.com/1177691

1 0

openSUSE-RU-2020:1849-1: moderate: Recommended update for cloud-init
by maintenance＠opensuse.org 06 Nov '20

06 Nov '20

openSUSE Recommended Update: Recommended update for cloud-init ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1849-1 Rating: moderate References: #1177526 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for cloud-init fixes the following issues: - Update cloud-init-write-routes.patch (bsc#1177526) + Avoid exception if no gateway information is present and warning is triggered for existing routing. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1849=1 Package List: - openSUSE Leap 15.2 (x86_64): cloud-init-20.2-lp152.5.9.1 cloud-init-config-suse-20.2-lp152.5.9.1 cloud-init-doc-20.2-lp152.5.9.1 References: https://bugzilla.suse.com/1177526

1 0

openSUSE-SU-2020:1844-1: important: Security update for xen
by opensuse-security＠opensuse.org 05 Nov '20

05 Nov '20

openSUSE Security Update: Security update for xen ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1844-1 Rating: important References: #1177409 #1177412 #1177413 #1177414 Cross-References: CVE-2020-27670 CVE-2020-27671 CVE-2020-27672 CVE-2020-27673 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for xen fixes the following issues: - bsc#1177409 - VUL-0: CVE-2020-27673: xen: x86 PV guest INVLPG-like flushes may leave stale TLB entries (XSA-286) - bsc#1177412 - VUL-0: CVE-2020-27672: xen: Race condition in Xen mapping code (XSA-345) - bsc#1177413 - VUL-0: CVE-2020-27671: xen: undue deferral of IOMMU TLB flushes (XSA-346) - bsc#1177414 - VUL-0: CVE-2020-27670: xen: unsafe AMD IOMMU page table updates (XSA-347) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1844=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): xen-debugsource-4.12.3_10-lp151.2.27.1 xen-devel-4.12.3_10-lp151.2.27.1 xen-libs-4.12.3_10-lp151.2.27.1 xen-libs-debuginfo-4.12.3_10-lp151.2.27.1 xen-tools-domU-4.12.3_10-lp151.2.27.1 xen-tools-domU-debuginfo-4.12.3_10-lp151.2.27.1 - openSUSE Leap 15.1 (x86_64): xen-4.12.3_10-lp151.2.27.1 xen-doc-html-4.12.3_10-lp151.2.27.1 xen-libs-32bit-4.12.3_10-lp151.2.27.1 xen-libs-32bit-debuginfo-4.12.3_10-lp151.2.27.1 xen-tools-4.12.3_10-lp151.2.27.1 xen-tools-debuginfo-4.12.3_10-lp151.2.27.1 References: https://www.suse.com/security/cve/CVE-2020-27670.html https://www.suse.com/security/cve/CVE-2020-27671.html https://www.suse.com/security/cve/CVE-2020-27672.html https://www.suse.com/security/cve/CVE-2020-27673.html https://bugzilla.suse.com/1177409 https://bugzilla.suse.com/1177412 https://bugzilla.suse.com/1177413 https://bugzilla.suse.com/1177414

1 0

openSUSE-RU-2020:1835-1: moderate: Recommended update for star
by maintenance＠opensuse.org 05 Nov '20

05 Nov '20

openSUSE Recommended Update: Recommended update for star ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1835-1 Rating: moderate References: #1170726 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for star fixes the following issues: - Support backreferences for spax. (bsc#1170726) The subst command for pax now supports the \1, \2, ... escapes for $...$ selections in the from pattern, like it is used by sed(1). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1835=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): spax-1.5.3-lp151.3.3.1 spax-debuginfo-1.5.3-lp151.3.3.1 star-1.5.3-lp151.3.3.1 star-debuginfo-1.5.3-lp151.3.3.1 star-debugsource-1.5.3-lp151.3.3.1 star-rmt-1.5.3-lp151.3.3.1 star-rmt-debuginfo-1.5.3-lp151.3.3.1 References: https://bugzilla.suse.com/1170726

1 0

openSUSE-SU-2020:1841-1: critical: Security update for tigervnc
by opensuse-security＠opensuse.org 05 Nov '20

05 Nov '20

openSUSE Security Update: Security update for tigervnc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1841-1 Rating: critical References: #1176733 Cross-References: CVE-2020-26117 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for tigervnc fixes the following issues: - CVE-2020-26117: Server certificates were stored as certiticate authorities, allowing malicious owners of these certificates to impersonate any server after a client had added an exception (bsc#1176733) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1841=1 Package List: - openSUSE Leap 15.1 (x86_64): libXvnc-devel-1.9.0-lp151.4.9.1 libXvnc1-1.9.0-lp151.4.9.1 libXvnc1-debuginfo-1.9.0-lp151.4.9.1 tigervnc-1.9.0-lp151.4.9.1 tigervnc-debuginfo-1.9.0-lp151.4.9.1 tigervnc-debugsource-1.9.0-lp151.4.9.1 xorg-x11-Xvnc-1.9.0-lp151.4.9.1 xorg-x11-Xvnc-debuginfo-1.9.0-lp151.4.9.1 xorg-x11-Xvnc-module-1.9.0-lp151.4.9.1 xorg-x11-Xvnc-module-debuginfo-1.9.0-lp151.4.9.1 - openSUSE Leap 15.1 (noarch): tigervnc-x11vnc-1.9.0-lp151.4.9.1 xorg-x11-Xvnc-java-1.9.0-lp151.4.9.1 xorg-x11-Xvnc-novnc-1.9.0-lp151.4.9.1 References: https://www.suse.com/security/cve/CVE-2020-26117.html https://bugzilla.suse.com/1176733

1 0

openSUSE-SU-2020:1840-1: moderate: Security update for tiff
by opensuse-security＠opensuse.org 05 Nov '20

05 Nov '20

openSUSE Security Update: Security update for tiff ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1840-1 Rating: moderate References: #1146608 Cross-References: CVE-2019-14973 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for tiff fixes the following issues: - CVE-2019-14973: Fixed an improper check which was depended on the compiler which could have led to integer overflow (bsc#1146608). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1840=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libtiff-devel-4.0.9-lp151.10.3.1 libtiff5-4.0.9-lp151.10.3.1 libtiff5-debuginfo-4.0.9-lp151.10.3.1 tiff-4.0.9-lp151.10.3.1 tiff-debuginfo-4.0.9-lp151.10.3.1 tiff-debugsource-4.0.9-lp151.10.3.1 - openSUSE Leap 15.1 (x86_64): libtiff-devel-32bit-4.0.9-lp151.10.3.1 libtiff5-32bit-4.0.9-lp151.10.3.1 libtiff5-32bit-debuginfo-4.0.9-lp151.10.3.1 References: https://www.suse.com/security/cve/CVE-2019-14973.html https://bugzilla.suse.com/1146608

1 0

openSUSE-SU-2020:1834-1: moderate: Security update for tmux
by opensuse-security＠opensuse.org 05 Nov '20

05 Nov '20

openSUSE Security Update: Security update for tmux ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1834-1 Rating: moderate References: #1037468 #1116887 #1120170 #1178263 Cross-References: CVE-2018-19387 CVE-2020-27347 Affected Products: openSUSE Leap 15.2 openSUSE Leap 15.1 openSUSE Backports SLE-15-SP2 openSUSE Backports SLE-15-SP1 SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that solves two vulnerabilities and has two fixes is now available. Description: This update for tmux fixes the following issues: - Update to version 3.1c * Fix a stack overflow on colon-separated CSI parsing. boo#1178263 CVE-2020-27347 - tmux 3.1b: * Fix crash when allow-rename ison and an empty name is set - tmux 3.1a: * Do not close stdout prematurely in control mode since it is needed to print exit messages. Prevents hanging when detaching with iTerm2 - includes changes between 3.1-rc1 and 3.1: * Only search the visible part of the history when marking (highlighting) search terms. This is much faster than searching the whole history and solves problems with large histories. The count of matches shown is now the visible matches rather than all matches * Search using regular expressions in copy mode. search-forward and search-backward use regular expressions by default; the incremental versions do not * Turn off mouse mode 1003 as well as the rest when exiting * Add selection_active format for when the selection is present but not moving with the cursor * Fix dragging with modifier keys, so binding keys such as C-MouseDrag1Pane and C-MouseDragEnd1Pane now work * Add -a to list-keys to also list keys without notes with -N * Do not jump to next word end if already on a word end when selecting a word; fixes select-word with single character words and vi(1) keys * Fix top and bottom pane calculation with pane border status enabled - Update to v3.1-rc * Please see the included CHANGES file - Fix tmux completion - Update to v3.0a * A lot of changes since v2.9a, please see the included CHANGES file. - Update to v2.9a - Fix bugs in select-pane and the main-horizontal and main-vertical layouts. - Add trailing newline to tmpfiles.d/tmux.conf. On newer systems (such as Leap 15.1), the lack of a trailing newline appears to cause the directory to not be created. This is only evident on setups where /run is an actual tmpfs (on btrfs-root installs, /run is a btrfs subvolume and thus /run/tmux is persistent across reboots). - Update to version 2.9 * Add format variables for the default formats in the various modes (tree_mode_format and so on) and add a -a flag to display-message to list variables with values. * Add a -v flag to display-message to show verbose messages as the format is parsed, this allows formats to be debugged * Add support for HPA (\033[`). * Add support for origin mode (\033[?6h). * No longer clear history on RIS. * Extend the #[] style syntax and use that together with previous format changes to allow the status line to be entirely configured with a single option. * Add E: and T: format modifiers to expand a format twice (useful to expand the value of an option). * The individual -fg, -bg and -attr options have been removed; they were superseded by -style options in tmux 1.9. * Add -b to display-panes like run-shell. * Handle UTF-8 in word-separators option. * New "terminal" colour allowing options to use the terminal default colour rather than inheriting the default from a parent option. * Do not move the cursor in copy mode when the mouse wheel is used. * Use the same working directory rules for jobs as new windows rather than always starting in the user's home. * Allow panes to be one line or column in size. * Go to last line when goto-line number is out of range in copy mode. * Yank previously cut text if any with C-y in the command prompt, only use the buffer if no text has been cut. * Add q: format modifier to quote shell special characters. * Add -Z to find-window. * Support for windows larger than the client. This adds two new options, window-size and default-size, and a new command, resize-window. The force-width and force-height options and the session_width and session_height formats have been removed. - update to 2.8 - move bash-completion to right place * Make display-panes block the client until a pane is chosen or it times out. * Clear history on RIS like most other terminals do. * Add an "Any" key to run a command if a key is pressed that is not bound in the current key table. * Expand formats in load-buffer and save-buffer. * Add a rectangle_toggle format. * Add set-hook -R to run a hook immediately. * Add pane focus hooks. * Allow any punctuation as separator for s/x/y not only /. * Improve resizing with the mouse (fix resizing the wrong pane in some layouts, and allow resizing multiple panes at the same time). * Allow , and } to be escaped in formats as #, and #}. * Add KRB5CCNAME to update-environment. * Change meaning of -c to display-message so the client is used if it matches the session given to -t. * Fixes to : form of SGR. * Add x and X to choose-tree to kill sessions, windows or panes. - Add bash completion for tmux - Update to 2.7 * Remove EVENT_* variables from environment on platforms where tmux uses them so they do not pass on to panes. * Fixed for hooks at server exit. * Remove SGR 10 (was equivalent to SGR 0 but no other terminal seems to do this). * Expand formats in window and session names. * Add -Z flag to choose-tree, choose-client, choose-buffer to automatically zoom the pane when the mode is entered and unzoom when it exits, assuming the pane is not already zoomed. This is now part of the default key bindings. * Add C-g to exit modes with emacs keys. * Add exit-empty option to exit server if no sessions (default = on) * Show if a filter is present in choose modes. * Add pipe-pane -I to to connect stdin of the child process. * Performance improvements for reflow. * Use RGB terminfo(5) capability to detect RGB colour terminals (the existing Tc extension remains unchanged). * Support for ISO colon-separated SGR sequences. * Add select-layout -E to spread panes out evenly (bound to E key). * Support wide characters properly when reflowing. * Pass PWD to new panes as a hint to shells, as well as calling chdir(). * Performance improvements for the various choose modes. * Only show first member of session groups in tree mode (-G flag to choose-tree to show all). * Support %else in config files to match %if * Fix "kind" terminfo(5) capability to be S-Down not S-Up. * Add a box around the preview label in tree mode. * Show exit status and time in the remain-on-exit pane text * Correctly use pane-base-index in tree mode. * Change the allow-rename option default to off. * Support for xterm(1) title stack escape sequences * Correctly remove padding cells to fix a UTF-8 display problem - build from release tarball instead of source (drops automake dep) - Bash completion is now removed and provided by - cleanup specfile directory with tmpfiles.d functionality in /run/tmux Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1834=1 - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1834=1 - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1834=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1834=1 - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2020-1834=1 Package List: - openSUSE Leap 15.2 (x86_64): tmux-3.1c-lp152.2.3.1 tmux-debuginfo-3.1c-lp152.2.3.1 tmux-debugsource-3.1c-lp152.2.3.1 - openSUSE Leap 15.1 (x86_64): tmux-3.1c-lp151.3.3.1 tmux-debuginfo-3.1c-lp151.3.3.1 tmux-debugsource-3.1c-lp151.3.3.1 - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): tmux-3.1c-bp152.2.3.1 tmux-debuginfo-3.1c-bp152.2.3.1 tmux-debugsource-3.1c-bp152.2.3.1 - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): tmux-3.1c-bp151.4.3.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): tmux-3.1c-18.1 References: https://www.suse.com/security/cve/CVE-2018-19387.html https://www.suse.com/security/cve/CVE-2020-27347.html https://bugzilla.suse.com/1037468 https://bugzilla.suse.com/1116887 https://bugzilla.suse.com/1120170 https://bugzilla.suse.com/1178263

1 0

openSUSE-SU-2020:1842-1: moderate: Security update for tomcat
by opensuse-security＠opensuse.org 05 Nov '20

05 Nov '20

openSUSE Security Update: Security update for tomcat ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1842-1 Rating: moderate References: #1177582 Cross-References: CVE-2020-13943 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for tomcat fixes the following issues: - CVE-2020-13943: Fixed HTTP/2 Request mix-up (bsc#1177582) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1842=1 Package List: - openSUSE Leap 15.1 (noarch): tomcat-9.0.36-lp151.3.33.1 tomcat-admin-webapps-9.0.36-lp151.3.33.1 tomcat-docs-webapp-9.0.36-lp151.3.33.1 tomcat-el-3_0-api-9.0.36-lp151.3.33.1 tomcat-embed-9.0.36-lp151.3.33.1 tomcat-javadoc-9.0.36-lp151.3.33.1 tomcat-jsp-2_3-api-9.0.36-lp151.3.33.1 tomcat-jsvc-9.0.36-lp151.3.33.1 tomcat-lib-9.0.36-lp151.3.33.1 tomcat-servlet-4_0-api-9.0.36-lp151.3.33.1 tomcat-webapps-9.0.36-lp151.3.33.1 References: https://www.suse.com/security/cve/CVE-2020-13943.html https://bugzilla.suse.com/1177582

1 0

openSUSE-RU-2020:1839-1: moderate: Recommended update for tboot
by maintenance＠opensuse.org 05 Nov '20

05 Nov '20

openSUSE Recommended Update: Recommended update for tboot ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1839-1 Rating: moderate References: #1176378 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for tboot fixes the following issues: - Fix for 'tboot' issues on platform coming with preloaded 'SINIT' modules with padding. (bsc#1176378) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1839=1 Package List: - openSUSE Leap 15.1 (x86_64): tboot-20170711_1.9.8-lp151.3.3.1 tboot-debuginfo-20170711_1.9.8-lp151.3.3.1 tboot-debugsource-20170711_1.9.8-lp151.3.3.1 References: https://bugzilla.suse.com/1176378

1 0

openSUSE-RU-2020:1837-1: moderate: Recommended update for sysstat
by maintenance＠opensuse.org 05 Nov '20

05 Nov '20

openSUSE Recommended Update: Recommended update for sysstat ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1837-1 Rating: moderate References: #1174227 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for sysstat fixes the following issues: - Fix for an issue when 'iowait' output of 'sar' can also decrement as a result of inaccurate tracking. (bsc#1174227) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1837=1 Package List: - openSUSE Leap 15.1 (x86_64): sysstat-12.0.2-lp151.3.18.1 sysstat-debuginfo-12.0.2-lp151.3.18.1 sysstat-debugsource-12.0.2-lp151.3.18.1 sysstat-isag-12.0.2-lp151.3.18.1 References: https://bugzilla.suse.com/1174227

1 0

openSUSE-RU-2020:1847-1: moderate: Recommended update for zlib
by maintenance＠opensuse.org 05 Nov '20

05 Nov '20

openSUSE Recommended Update: Recommended update for zlib ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1847-1 Rating: moderate References: #1175811 #1175830 #1175831 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for zlib fixes the following issues: - Fix compression level switching (bsc#1175811, bsc#1175830, bsc#1175831) - Enable hardware compression on s390/s390x (jsc#SLE-13776) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1847=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libminizip1-1.2.11-lp151.5.12.1 libminizip1-debuginfo-1.2.11-lp151.5.12.1 libz1-1.2.11-lp151.5.12.1 libz1-debuginfo-1.2.11-lp151.5.12.1 minizip-devel-1.2.11-lp151.5.12.1 zlib-debugsource-1.2.11-lp151.5.12.1 zlib-devel-1.2.11-lp151.5.12.1 zlib-devel-static-1.2.11-lp151.5.12.1 - openSUSE Leap 15.1 (x86_64): libminizip1-32bit-1.2.11-lp151.5.12.1 libminizip1-32bit-debuginfo-1.2.11-lp151.5.12.1 libz1-32bit-1.2.11-lp151.5.12.1 libz1-32bit-debuginfo-1.2.11-lp151.5.12.1 zlib-devel-32bit-1.2.11-lp151.5.12.1 zlib-devel-static-32bit-1.2.11-lp151.5.12.1 References: https://bugzilla.suse.com/1175811 https://bugzilla.suse.com/1175830 https://bugzilla.suse.com/1175831

1 0

openSUSE-RU-2020:1838-1: important: Recommended update for systemd-rpm-macros
by maintenance＠opensuse.org 05 Nov '20

05 Nov '20

openSUSE Recommended Update: Recommended update for systemd-rpm-macros ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1838-1 Rating: important References: #1176932 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for systemd-rpm-macros fixes the following issues: - Backport missing macros of directory paths from upstream + %_environmentdir + %_modulesloaddir + %_modprobedir - Make sure %_restart_on_update_never and %_stop_on_removal_never don't expand to the empty string. (bsc#1176932) Otherwise sequences like the following code: if [ ... ]; then %_restart_on_update_never fi would result in the following incorrect shell syntax: if [ ... ]; then fi This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1838=1 Package List: - openSUSE Leap 15.1 (noarch): systemd-rpm-macros-4.1-lp151.7.3.1 References: https://bugzilla.suse.com/1176932

1 0

openSUSE-SU-2020:1834-1: moderate: Security update for tmux
by opensuse-security＠opensuse.org 05 Nov '20

05 Nov '20

openSUSE Security Update: Security update for tmux ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1834-1 Rating: moderate References: #1037468 #1116887 #1120170 #1178263 Cross-References: CVE-2018-19387 CVE-2020-27347 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that solves two vulnerabilities and has two fixes is now available. Description: This update for tmux fixes the following issues: - Update to version 3.1c * Fix a stack overflow on colon-separated CSI parsing. boo#1178263 CVE-2020-27347 - tmux 3.1b: * Fix crash when allow-rename ison and an empty name is set - tmux 3.1a: * Do not close stdout prematurely in control mode since it is needed to print exit messages. Prevents hanging when detaching with iTerm2 - includes changes between 3.1-rc1 and 3.1: * Only search the visible part of the history when marking (highlighting) search terms. This is much faster than searching the whole history and solves problems with large histories. The count of matches shown is now the visible matches rather than all matches * Search using regular expressions in copy mode. search-forward and search-backward use regular expressions by default; the incremental versions do not * Turn off mouse mode 1003 as well as the rest when exiting * Add selection_active format for when the selection is present but not moving with the cursor * Fix dragging with modifier keys, so binding keys such as C-MouseDrag1Pane and C-MouseDragEnd1Pane now work * Add -a to list-keys to also list keys without notes with -N * Do not jump to next word end if already on a word end when selecting a word; fixes select-word with single character words and vi(1) keys * Fix top and bottom pane calculation with pane border status enabled - Update to v3.1-rc * Please see the included CHANGES file - Fix tmux completion - Update to v3.0a * A lot of changes since v2.9a, please see the included CHANGES file. - Update to v2.9a - Fix bugs in select-pane and the main-horizontal and main-vertical layouts. - Add trailing newline to tmpfiles.d/tmux.conf. On newer systems (such as Leap 15.1), the lack of a trailing newline appears to cause the directory to not be created. This is only evident on setups where /run is an actual tmpfs (on btrfs-root installs, /run is a btrfs subvolume and thus /run/tmux is persistent across reboots). - Update to version 2.9 * Add format variables for the default formats in the various modes (tree_mode_format and so on) and add a -a flag to display-message to list variables with values. * Add a -v flag to display-message to show verbose messages as the format is parsed, this allows formats to be debugged * Add support for HPA (\033[`). * Add support for origin mode (\033[?6h). * No longer clear history on RIS. * Extend the #[] style syntax and use that together with previous format changes to allow the status line to be entirely configured with a single option. * Add E: and T: format modifiers to expand a format twice (useful to expand the value of an option). * The individual -fg, -bg and -attr options have been removed; they were superseded by -style options in tmux 1.9. * Add -b to display-panes like run-shell. * Handle UTF-8 in word-separators option. * New "terminal" colour allowing options to use the terminal default colour rather than inheriting the default from a parent option. * Do not move the cursor in copy mode when the mouse wheel is used. * Use the same working directory rules for jobs as new windows rather than always starting in the user's home. * Allow panes to be one line or column in size. * Go to last line when goto-line number is out of range in copy mode. * Yank previously cut text if any with C-y in the command prompt, only use the buffer if no text has been cut. * Add q: format modifier to quote shell special characters. * Add -Z to find-window. * Support for windows larger than the client. This adds two new options, window-size and default-size, and a new command, resize-window. The force-width and force-height options and the session_width and session_height formats have been removed. - update to 2.8 - move bash-completion to right place * Make display-panes block the client until a pane is chosen or it times out. * Clear history on RIS like most other terminals do. * Add an "Any" key to run a command if a key is pressed that is not bound in the current key table. * Expand formats in load-buffer and save-buffer. * Add a rectangle_toggle format. * Add set-hook -R to run a hook immediately. * Add pane focus hooks. * Allow any punctuation as separator for s/x/y not only /. * Improve resizing with the mouse (fix resizing the wrong pane in some layouts, and allow resizing multiple panes at the same time). * Allow , and } to be escaped in formats as #, and #}. * Add KRB5CCNAME to update-environment. * Change meaning of -c to display-message so the client is used if it matches the session given to -t. * Fixes to : form of SGR. * Add x and X to choose-tree to kill sessions, windows or panes. - Add bash completion for tmux - Update to 2.7 * Remove EVENT_* variables from environment on platforms where tmux uses them so they do not pass on to panes. * Fixed for hooks at server exit. * Remove SGR 10 (was equivalent to SGR 0 but no other terminal seems to do this). * Expand formats in window and session names. * Add -Z flag to choose-tree, choose-client, choose-buffer to automatically zoom the pane when the mode is entered and unzoom when it exits, assuming the pane is not already zoomed. This is now part of the default key bindings. * Add C-g to exit modes with emacs keys. * Add exit-empty option to exit server if no sessions (default = on) * Show if a filter is present in choose modes. * Add pipe-pane -I to to connect stdin of the child process. * Performance improvements for reflow. * Use RGB terminfo(5) capability to detect RGB colour terminals (the existing Tc extension remains unchanged). * Support for ISO colon-separated SGR sequences. * Add select-layout -E to spread panes out evenly (bound to E key). * Support wide characters properly when reflowing. * Pass PWD to new panes as a hint to shells, as well as calling chdir(). * Performance improvements for the various choose modes. * Only show first member of session groups in tree mode (-G flag to choose-tree to show all). * Support %else in config files to match %if * Fix "kind" terminfo(5) capability to be S-Down not S-Up. * Add a box around the preview label in tree mode. * Show exit status and time in the remain-on-exit pane text * Correctly use pane-base-index in tree mode. * Change the allow-rename option default to off. * Support for xterm(1) title stack escape sequences * Correctly remove padding cells to fix a UTF-8 display problem - build from release tarball instead of source (drops automake dep) - Bash completion is now removed and provided by - cleanup specfile directory with tmpfiles.d functionality in /run/tmux Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2020-1834=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): tmux-3.1c-18.1 References: https://www.suse.com/security/cve/CVE-2018-19387.html https://www.suse.com/security/cve/CVE-2020-27347.html https://bugzilla.suse.com/1037468 https://bugzilla.suse.com/1116887 https://bugzilla.suse.com/1120170 https://bugzilla.suse.com/1178263

1 0

openSUSE-RU-2020:1846-1: moderate: Recommended update for xscreensaver
by maintenance＠opensuse.org 05 Nov '20

05 Nov '20

openSUSE Recommended Update: Recommended update for xscreensaver ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1846-1 Rating: moderate References: #1101393 #1165170 #890595 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for xscreensaver fixes the following issues: - update to 5.44 (ECO-2755): * New hacks, gibson, etruscanvenus and scooter * BSOD supports Tivo and Nintendo * New color options in romanboy, projectiveplane, hypertorus and klein * Performance tweaks for eruption, fireworkx, halftone, halo, moire2, rd-bomb * X11: Always use $HOME/.xscreensaver, not getpwuid's directory * New hacks GravityWell, DeepStars, handsy. * GLPlanet now supports the Mercator projection. * Bouncing Cow has mathematically ideal cows. * Foggy toasters. * Unknown Pleasures can now use an image file as a clip mask. * Updated webcollage for recent changes. * Added some sample unlock dialog color schemes to the .ad file. * On systemd systems, closing your laptop lid actually lock your screen now. (bsc#1101393) * Lock after completing fade (bsc#1101393). * sonar can ping without being setuid by using setcap. * The new font-loading fallback heuristics work again. * Fixed `noof' from displaying minimalistically. * Rewrote `unknownpleasures' to be faster, and a true waterfall graph. * If the xscreensaver daemon is setuid, the screen wont be unlocked. * Fix a BadWindow error. (bsc#1165170) * Suspend/Resumes don't show the desktop content before loading the lock screen. (bsc#1101393) * No longer require Xxf86misc extension, which is no longer supported and it has been removed from Xserver years ago. * New hacks filmleader vfeedback glitchpeg, razzledazzle, peepers, crumbler, maze3d and esper. * webcollagenow works with ImageMagick. * Improvements of GLPlanet, DymaxionMap, Tessellimage, XAnalogTV. * More heuristics for using RSS feeds as image sources. * Built-in image assets are now PNG instead of XPM or XBM. * Better font-loading fallback. * In case of too old versions, the message will advise to open a bugreport. (bsc#890595). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1846=1 Package List: - openSUSE Leap 15.1 (x86_64): xscreensaver-5.44-lp151.5.3.1 xscreensaver-data-5.44-lp151.5.3.1 xscreensaver-data-debuginfo-5.44-lp151.5.3.1 xscreensaver-data-extra-5.44-lp151.5.3.1 xscreensaver-data-extra-debuginfo-5.44-lp151.5.3.1 xscreensaver-debuginfo-5.44-lp151.5.3.1 xscreensaver-debugsource-5.44-lp151.5.3.1 - openSUSE Leap 15.1 (noarch): xscreensaver-lang-5.44-lp151.5.3.1 References: https://bugzilla.suse.com/1101393 https://bugzilla.suse.com/1165170 https://bugzilla.suse.com/890595

1 0

openSUSE-RU-2020:1845-1: moderate: Recommended update for xiterm
by maintenance＠opensuse.org 05 Nov '20

05 Nov '20

openSUSE Recommended Update: Recommended update for xiterm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1845-1 Rating: moderate References: #1158271 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for xiterm fixes the following issues: - Fix for not enabled application keypad mode. (bsc#1158271) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1845=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): fbiterm-0.5.20040304-lp151.4.3.1 fbiterm-debuginfo-0.5.20040304-lp151.4.3.1 gtkiterm-0.5.20040304-lp151.4.3.1 gtkiterm-debuginfo-0.5.20040304-lp151.4.3.1 libXiterm-devel-0.5.20040304-lp151.4.3.1 libXiterm1-0.5.20040304-lp151.4.3.1 libXiterm1-debuginfo-0.5.20040304-lp151.4.3.1 libiterm-devel-0.5.20040304-lp151.4.3.1 libiterm1-0.5.20040304-lp151.4.3.1 libiterm1-debuginfo-0.5.20040304-lp151.4.3.1 xiterm-0.5.20040304-lp151.4.3.1 xiterm-debuginfo-0.5.20040304-lp151.4.3.1 xiterm-debugsource-0.5.20040304-lp151.4.3.1 References: https://bugzilla.suse.com/1158271

1 0

openSUSE-RU-2020:1836-1: moderate: Recommended update for suse-build-key
by maintenance＠opensuse.org 05 Nov '20

05 Nov '20

openSUSE Recommended Update: Recommended update for suse-build-key ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1836-1 Rating: moderate References: #1170347 #1176759 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for suse-build-key fixes the following issues: - The SUSE Notary Container key is different from the build signing key, include this key instead as suse-container-key. (PM-1845 bsc#1170347) - The SUSE build key for SUSE Linux Enterprise 12 and 15 is extended by 4 more years. (bsc#1176759) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1836=1 Package List: - openSUSE Leap 15.1 (noarch): suse-build-key-12.0-lp151.5.9.1 References: https://bugzilla.suse.com/1170347 https://bugzilla.suse.com/1176759

1 0

openSUSE-SU-2020:1843-1: moderate: Security update for transfig
by opensuse-security＠opensuse.org 05 Nov '20

05 Nov '20

openSUSE Security Update: Security update for transfig ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1843-1 Rating: moderate References: #1143650 Cross-References: CVE-2019-14275 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for transfig fixes the following issues: Security issue fixed: - CVE-2019-14275: Fixed stack-based buffer overflow in the calc_arrow function (bsc#1143650). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1843=1 Package List: - openSUSE Leap 15.1 (x86_64): transfig-3.2.6a-lp151.4.9.1 transfig-debuginfo-3.2.6a-lp151.4.9.1 transfig-debugsource-3.2.6a-lp151.4.9.1 References: https://www.suse.com/security/cve/CVE-2019-14275.html https://bugzilla.suse.com/1143650

1 0

openSUSE-SU-2020:1833-1: critical: Security update for salt
by opensuse-security＠opensuse.org 05 Nov '20

05 Nov '20

openSUSE Security Update: Security update for salt ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1833-1 Rating: critical References: #1159670 #1175987 #1176024 #1176294 #1176397 #1177867 #1178319 #1178361 #1178362 Cross-References: CVE-2020-16846 CVE-2020-17490 CVE-2020-25592 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves three vulnerabilities and has 6 fixes is now available. Description: This update for salt fixes the following issues: - Properly validate eauth credentials and tokens on SSH calls made by Salt API (bsc#1178319, bsc#1178362, bsc#1178361, CVE-2020-25592, CVE-2020-17490, CVE-2020-16846) - Fix disk.blkid to avoid unexpected keyword argument '__pub_user'. (bsc#1177867) - Ensure virt.update stop_on_reboot is updated with its default value. - Do not break package building for systemd OSes. - Drop wrong mock from chroot unit test. - Support systemd versions with dot. (bsc#1176294) - Fix for grains.test_core unit test. - Fix file/directory user and group ownership containing UTF-8 characters. (bsc#1176024) - Several changes to virtualization: * Fix virt update when cpu and memory are changed. * Memory Tuning GSoC. * Properly fix memory setting regression in virt.update. * Expose libvirt on_reboot in virt states. - Support transactional systems (MicroOS). - zypperpkg module ignores retcode 104 for search(). (bsc#1159670) - Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding file or block disk. (bsc#1175987) - Invalidate file list cache when cache file modified time is in the future. (bsc#1176397) - Prevent import errors when running test_btrfs unit tests. This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1833=1 Package List: - openSUSE Leap 15.2 (x86_64): python2-salt-3000-lp152.3.15.1 python3-salt-3000-lp152.3.15.1 salt-3000-lp152.3.15.1 salt-api-3000-lp152.3.15.1 salt-cloud-3000-lp152.3.15.1 salt-doc-3000-lp152.3.15.1 salt-master-3000-lp152.3.15.1 salt-minion-3000-lp152.3.15.1 salt-proxy-3000-lp152.3.15.1 salt-ssh-3000-lp152.3.15.1 salt-standalone-formulas-configuration-3000-lp152.3.15.1 salt-syndic-3000-lp152.3.15.1 - openSUSE Leap 15.2 (noarch): salt-bash-completion-3000-lp152.3.15.1 salt-fish-completion-3000-lp152.3.15.1 salt-zsh-completion-3000-lp152.3.15.1 References: https://www.suse.com/security/cve/CVE-2020-16846.html https://www.suse.com/security/cve/CVE-2020-17490.html https://www.suse.com/security/cve/CVE-2020-25592.html https://bugzilla.suse.com/1159670 https://bugzilla.suse.com/1175987 https://bugzilla.suse.com/1176024 https://bugzilla.suse.com/1176294 https://bugzilla.suse.com/1176397 https://bugzilla.suse.com/1177867 https://bugzilla.suse.com/1178319 https://bugzilla.suse.com/1178361 https://bugzilla.suse.com/1178362

1 0

openSUSE-SU-2020:1831-1: important: Security update for chromium
by opensuse-security＠opensuse.org 05 Nov '20

05 Nov '20

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1831-1 Rating: important References: #1178375 Cross-References: CVE-2020-16004 CVE-2020-16005 CVE-2020-16006 CVE-2020-16007 CVE-2020-16008 CVE-2020-16009 CVE-2020-16011 Affected Products: openSUSE Leap 15.2 openSUSE Leap 15.1 openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: This update for chromium fixes the following issues: - Update to 86.0.4240.183 boo#1178375 - CVE-2020-16004: Use after free in user interface. - CVE-2020-16005: Insufficient policy enforcement in ANGLE. - CVE-2020-16006: Inappropriate implementation in V8 - CVE-2020-16007: Insufficient data validation in installer. - CVE-2020-16008: Stack buffer overflow in WebRTC. - CVE-2020-16009: Inappropriate implementation in V8. - CVE-2020-16011: Heap buffer overflow in UI on Windows. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1831=1 - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1831=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1831=1 Package List: - openSUSE Leap 15.2 (x86_64): chromedriver-86.0.4240.183-lp152.2.45.1 chromedriver-debuginfo-86.0.4240.183-lp152.2.45.1 chromium-86.0.4240.183-lp152.2.45.1 chromium-debuginfo-86.0.4240.183-lp152.2.45.1 - openSUSE Leap 15.1 (x86_64): chromedriver-86.0.4240.183-lp151.2.150.1 chromedriver-debuginfo-86.0.4240.183-lp151.2.150.1 chromium-86.0.4240.183-lp151.2.150.1 chromium-debuginfo-86.0.4240.183-lp151.2.150.1 - openSUSE Backports SLE-15-SP1 (aarch64 x86_64): chromedriver-86.0.4240.183-bp151.3.119.1 chromium-86.0.4240.183-bp151.3.119.1 References: https://www.suse.com/security/cve/CVE-2020-16004.html https://www.suse.com/security/cve/CVE-2020-16005.html https://www.suse.com/security/cve/CVE-2020-16006.html https://www.suse.com/security/cve/CVE-2020-16007.html https://www.suse.com/security/cve/CVE-2020-16008.html https://www.suse.com/security/cve/CVE-2020-16009.html https://www.suse.com/security/cve/CVE-2020-16011.html https://bugzilla.suse.com/1178375

1 0

openSUSE-RU-2020:1830-1: moderate: Recommended update for python-SQLAlchemy
by maintenance＠opensuse.org 05 Nov '20

05 Nov '20

openSUSE Recommended Update: Recommended update for python-SQLAlchemy ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1830-1 Rating: moderate References: #1176953 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-SQLAlchemy fixes the following issue: - Maintain compiled_params/replacement_expressions within expanding IN parameter. (bsc#1176953) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1830=1 Package List: - openSUSE Leap 15.1 (noarch): python-SQLAlchemy-doc-1.2.14-lp151.2.6.1 - openSUSE Leap 15.1 (x86_64): python-SQLAlchemy-debuginfo-1.2.14-lp151.2.6.1 python-SQLAlchemy-debugsource-1.2.14-lp151.2.6.1 python2-SQLAlchemy-1.2.14-lp151.2.6.1 python2-SQLAlchemy-debuginfo-1.2.14-lp151.2.6.1 python3-SQLAlchemy-1.2.14-lp151.2.6.1 python3-SQLAlchemy-debuginfo-1.2.14-lp151.2.6.1 References: https://bugzilla.suse.com/1176953

1 0

openSUSE-RU-2020:1832-1: moderate: Recommended update for dash
by maintenance＠opensuse.org 05 Nov '20

05 Nov '20

openSUSE Recommended Update: Recommended update for dash ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1832-1 Rating: moderate References: #1160260 #1177691 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for dash fixes the following issues: - Update to version 0.5.11.2 (bsc#1177691) * Add -fcommon to %optflags (bsc#1160260) * Fix a pathname expansion bug in dash (bsc#1177691) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1832=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): dash-0.5.11.2-lp151.3.3.1 dash-debuginfo-0.5.11.2-lp151.3.3.1 dash-debugsource-0.5.11.2-lp151.3.3.1 References: https://bugzilla.suse.com/1160260 https://bugzilla.suse.com/1177691

1 0

openSUSE-SU-2020:1829-1: important: Security update for chromium, gn
by opensuse-security＠opensuse.org 05 Nov '20

05 Nov '20

openSUSE Security Update: Security update for chromium, gn ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1829-1 Rating: important References: #1177408 #1177936 #1178375 Cross-References: CVE-2020-15967 CVE-2020-15968 CVE-2020-15969 CVE-2020-15970 CVE-2020-15971 CVE-2020-15972 CVE-2020-15973 CVE-2020-15974 CVE-2020-15975 CVE-2020-15976 CVE-2020-15977 CVE-2020-15978 CVE-2020-15979 CVE-2020-15980 CVE-2020-15981 CVE-2020-15982 CVE-2020-15983 CVE-2020-15984 CVE-2020-15985 CVE-2020-15986 CVE-2020-15987 CVE-2020-15988 CVE-2020-15989 CVE-2020-15990 CVE-2020-15991 CVE-2020-15992 CVE-2020-15999 CVE-2020-16000 CVE-2020-16001 CVE-2020-16002 CVE-2020-16003 CVE-2020-16004 CVE-2020-16005 CVE-2020-16006 CVE-2020-16007 CVE-2020-16008 CVE-2020-16009 CVE-2020-16011 CVE-2020-6557 Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that fixes 39 vulnerabilities is now available. Description: This update for chromium, gn fixes the following issues: chromium was updated to 86.0.4240.183 boo#1178375 - CVE-2020-16004: Use after free in user interface. - CVE-2020-16005: Insufficient policy enforcement in ANGLE. - CVE-2020-16006: Inappropriate implementation in V8 - CVE-2020-16007: Insufficient data validation in installer. - CVE-2020-16008: Stack buffer overflow in WebRTC. - CVE-2020-16009: Inappropriate implementation in V8. - CVE-2020-16011: Heap buffer overflow in UI on Windows. Update to 86.0.4240.111 boo#1177936 - CVE-2020-16000: Inappropriate implementation in Blink. - CVE-2020-16001: Use after free in media. - CVE-2020-16002: Use after free in PDFium. - CVE-2020-15999: Heap buffer overflow in Freetype. - CVE-2020-16003: Use after free in printing. - chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2 - Remove vdpau->vaapi bridge as it breaks a lot: (fixes welcome by someone else than me) - Fix cookiemonster: Update to 86.0.4240.75 boo#1177408: * CVE-2020-15967: Use after free in payments. * CVE-2020-15968: Use after free in Blink. * CVE-2020-15969: Use after free in WebRTC. * CVE-2020-15970: Use after free in NFC. * CVE-2020-15971: Use after free in printing. * CVE-2020-15972: Use after free in audio. * CVE-2020-15990: Use after free in autofill. * CVE-2020-15991: Use after free in password manager. * CVE-2020-15973: Insufficient policy enforcement in extensions. * CVE-2020-15974: Integer overflow in Blink. * CVE-2020-15975: Integer overflow in SwiftShader. * CVE-2020-15976: Use after free in WebXR. * CVE-2020-6557: Inappropriate implementation in networking. * CVE-2020-15977: Insufficient data validation in dialogs. * CVE-2020-15978: Insufficient data validation in navigation. * CVE-2020-15979: Inappropriate implementation in V8. * CVE-2020-15980: Insufficient policy enforcement in Intents. * CVE-2020-15981: Out of bounds read in audio. * CVE-2020-15982: Side-channel information leakage in cache. * CVE-2020-15983: Insufficient data validation in webUI. * CVE-2020-15984: Insufficient policy enforcement in Omnibox. * CVE-2020-15985: Inappropriate implementation in Blink. * CVE-2020-15986: Integer overflow in media. * CVE-2020-15987: Use after free in WebRTC. * CVE-2020-15992: Insufficient policy enforcement in networking. * CVE-2020-15988: Insufficient policy enforcement in downloads. * CVE-2020-15989: Uninitialized Use in PDFium. - Update to 0.1807: * no upstream changelog Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1829=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): gn-0.1807-bp152.2.3.4 gn-debuginfo-0.1807-bp152.2.3.4 gn-debugsource-0.1807-bp152.2.3.4 - openSUSE Backports SLE-15-SP2 (aarch64 x86_64): chromedriver-86.0.4240.183-bp152.2.26.1 chromium-86.0.4240.183-bp152.2.26.1 References: https://www.suse.com/security/cve/CVE-2020-15967.html https://www.suse.com/security/cve/CVE-2020-15968.html https://www.suse.com/security/cve/CVE-2020-15969.html https://www.suse.com/security/cve/CVE-2020-15970.html https://www.suse.com/security/cve/CVE-2020-15971.html https://www.suse.com/security/cve/CVE-2020-15972.html https://www.suse.com/security/cve/CVE-2020-15973.html https://www.suse.com/security/cve/CVE-2020-15974.html https://www.suse.com/security/cve/CVE-2020-15975.html https://www.suse.com/security/cve/CVE-2020-15976.html https://www.suse.com/security/cve/CVE-2020-15977.html https://www.suse.com/security/cve/CVE-2020-15978.html https://www.suse.com/security/cve/CVE-2020-15979.html https://www.suse.com/security/cve/CVE-2020-15980.html https://www.suse.com/security/cve/CVE-2020-15981.html https://www.suse.com/security/cve/CVE-2020-15982.html https://www.suse.com/security/cve/CVE-2020-15983.html https://www.suse.com/security/cve/CVE-2020-15984.html https://www.suse.com/security/cve/CVE-2020-15985.html https://www.suse.com/security/cve/CVE-2020-15986.html https://www.suse.com/security/cve/CVE-2020-15987.html https://www.suse.com/security/cve/CVE-2020-15988.html https://www.suse.com/security/cve/CVE-2020-15989.html https://www.suse.com/security/cve/CVE-2020-15990.html https://www.suse.com/security/cve/CVE-2020-15991.html https://www.suse.com/security/cve/CVE-2020-15992.html https://www.suse.com/security/cve/CVE-2020-15999.html https://www.suse.com/security/cve/CVE-2020-16000.html https://www.suse.com/security/cve/CVE-2020-16001.html https://www.suse.com/security/cve/CVE-2020-16002.html https://www.suse.com/security/cve/CVE-2020-16003.html https://www.suse.com/security/cve/CVE-2020-16004.html https://www.suse.com/security/cve/CVE-2020-16005.html https://www.suse.com/security/cve/CVE-2020-16006.html https://www.suse.com/security/cve/CVE-2020-16007.html https://www.suse.com/security/cve/CVE-2020-16008.html https://www.suse.com/security/cve/CVE-2020-16009.html https://www.suse.com/security/cve/CVE-2020-16011.html https://www.suse.com/security/cve/CVE-2020-6557.html https://bugzilla.suse.com/1177408 https://bugzilla.suse.com/1177936 https://bugzilla.suse.com/1178375

1 0

openSUSE-RU-2020:1828-1: moderate: Recommended update for strawberry
by maintenance＠opensuse.org 04 Nov '20

04 Nov '20

openSUSE Recommended Update: Recommended update for strawberry ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1828-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for strawberry fixes the following issues: strawberry was updated to version 0.8.2: * Bugfixes: + Fixed broken transition to next song for CUE files with certain audio formats (regression since version 0.6.13). + Fixed all collection divider keys showing on top with some language collate settings (regression in version 0.8.1). + Fixed SQL querying songs by song ID when song ID is a string. + Fixed saving album covers for LMS Subsonic servers. + Fixed reading song creation dates with LMS Subsonic servers. + Fixed saving initial settings. + Removed use of HTML in system tray icon tooltip for all desktop environments instead of just KDE and Cinnamon. Update to version 0.8.1: * Bugfixes: + Fixed engine selection in backend settings with Qt 6. + Fixed pixelated playlist source icon for currently playing song. + Fixed crash when deleting queued songs from playlist. + Fixed situations where songs could disappear or be shown multiple times with certain collection groupings. + Fixed initial sizes of playlist header columns. + Fixed Strawberry preventing logout. + Fixed incorrectly splitting of basename for moodbar and transcoding for filenames with several dots. + Fixed certain cases where "playing now" for scrobbler were sent twice. + Fixed album cover loaded twice for certain songs causing slugglish playing widget. + Fixed playing widget to draw text after album cover is fully shown. + Fixed crash when trying to copy a closed playlist to a device. + Fixed incorrect song source for CUE songs when added through the collection watcher. + Disable use of HTML in system tray tooltip on Cinnamon too. + Remove problematic '&' character from OSD messages. * Enhancements: + Improved playlist autoscrolling. + Only allow playlist right click tag editing for editable songs. + Read song creation time from subsonic API. + Remember manually set compilation status for albums when songs are rescanned. + Added icons for edit tag playlist right click menu actions. + Maximize dialogs if they are already open when clicked again in the menu. + Added support for compilation tag to edit tag dialog. + Show song info and album cover in OSD on stop and pause. + Reshow OSD on song restart. + Always save initial settings. + Removed use of deprecated gstreamer "low-percent" (Minimum buffer fill setting). + Added buffer low and high watermark settings to backend settings. + Make use of newer version of the desktop notifications service when available. * New features: + Added setting for enabling scrobbling based on song source. + Added optional delete from disk in collection and playlist. + Added Last.fm import data wizard. + Added smart and dynamic playlists. + Added song ratings. + Added Qobuz streaming support. + Added Subsonic server side scrobbling support. + Load thumbnails from iPods to show under device collection. This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1828=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): strawberry-0.8.2-bp152.2.4.1 References:

1 0

openSUSE-RU-2020:1827-1: important: Recommended update for timezone
by maintenance＠opensuse.org 04 Nov '20

04 Nov '20

openSUSE Recommended Update: Recommended update for timezone ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1827-1 Rating: important References: #1177460 #1178346 #1178350 #1178353 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for timezone fixes the following issues: - Generate "fat" timezone files (was default before 2020b). (bsc#1178346, bsc#1178350, bsc#1178353) - Palestine ends DST earlier than predicted, on 2020-10-24. (bsc#1177460) - Fiji starts DST later than usual, on 2020-12-20. (bsc#1177460) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1827=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): timezone-2020d-lp152.8.1 timezone-debuginfo-2020d-lp152.8.1 timezone-debugsource-2020d-lp152.8.1 - openSUSE Leap 15.2 (noarch): timezone-java-2020d-lp152.8.1 References: https://bugzilla.suse.com/1177460 https://bugzilla.suse.com/1178346 https://bugzilla.suse.com/1178350 https://bugzilla.suse.com/1178353

1 0

openSUSE-RU-2020:1826-1: moderate: Recommended update for openssl-1_0_0
by maintenance＠opensuse.org 04 Nov '20

04 Nov '20

openSUSE Recommended Update: Recommended update for openssl-1_0_0 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1826-1 Rating: moderate References: #1175429 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for openssl-1_0_0 fixes the following issues: - Provide the same symbols as other distros in a compatible package. (bsc#1175429) - Add OPENSSL_1.0.1_EC symbol. (bsc#1175429) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1826=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libopenssl-1_0_0-devel-1.0.2p-lp151.5.17.1 libopenssl10-1.0.2p-lp151.5.17.1 libopenssl10-debuginfo-1.0.2p-lp151.5.17.1 libopenssl1_0_0-1.0.2p-lp151.5.17.1 libopenssl1_0_0-debuginfo-1.0.2p-lp151.5.17.1 libopenssl1_0_0-hmac-1.0.2p-lp151.5.17.1 libopenssl1_0_0-steam-1.0.2p-lp151.5.17.1 libopenssl1_0_0-steam-debuginfo-1.0.2p-lp151.5.17.1 openssl-1_0_0-1.0.2p-lp151.5.17.1 openssl-1_0_0-cavs-1.0.2p-lp151.5.17.1 openssl-1_0_0-cavs-debuginfo-1.0.2p-lp151.5.17.1 openssl-1_0_0-debuginfo-1.0.2p-lp151.5.17.1 openssl-1_0_0-debugsource-1.0.2p-lp151.5.17.1 - openSUSE Leap 15.1 (x86_64): libopenssl-1_0_0-devel-32bit-1.0.2p-lp151.5.17.1 libopenssl1_0_0-32bit-1.0.2p-lp151.5.17.1 libopenssl1_0_0-32bit-debuginfo-1.0.2p-lp151.5.17.1 libopenssl1_0_0-hmac-32bit-1.0.2p-lp151.5.17.1 libopenssl1_0_0-steam-32bit-1.0.2p-lp151.5.17.1 libopenssl1_0_0-steam-32bit-debuginfo-1.0.2p-lp151.5.17.1 - openSUSE Leap 15.1 (noarch): openssl-1_0_0-doc-1.0.2p-lp151.5.17.1 References: https://bugzilla.suse.com/1175429

1 0

openSUSE-SU-2020:1825-1: important: Security update for pacemaker
by opensuse-security＠opensuse.org 04 Nov '20

04 Nov '20

openSUSE Security Update: Security update for pacemaker ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1825-1 Rating: important References: #1167171 #1173668 #1175557 #1177916 Cross-References: CVE-2020-25654 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves one vulnerability and has three fixes is now available. Description: This update for pacemaker fixes the following issues: - executor: restrict certain IPC requests to Pacemaker daemons (CVE-2020-25654, bsc#1177916) - extra: add vim modelines to agents - extra: quote shell variables in agent code where appropriate (bsc#1175557) - extra: remove trailing whitespace from agent code - extra: update agent boilerplate (copyright/license notices) - extra: use 4-space indents in resource agent code - extra: use ":=" where appropriate in agent code - fencer: restrict certain IPC requests to privileged users (CVE-2020-25654, bsc#1177916) - move bcond_with/without up front for e.g. pcmk_release - pacemakerd: ignore shutdown requests from unprivileged users (CVE-2020-25654, bsc#1177916) - rpm: add spec option for enabling CIB secrets - rpm: put user-configurable items at top of spec - rpm: use the user/group ID 90 for haclient/hacluster to be consistent with cluster-glue (bsc#1167171) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1825=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libpacemaker-devel-2.0.1+20190417.13d370ca9-lp151.2.16.4 libpacemaker3-2.0.1+20190417.13d370ca9-lp151.2.16.4 libpacemaker3-debuginfo-2.0.1+20190417.13d370ca9-lp151.2.16.4 pacemaker-2.0.1+20190417.13d370ca9-lp151.2.16.4 pacemaker-cli-2.0.1+20190417.13d370ca9-lp151.2.16.4 pacemaker-cli-debuginfo-2.0.1+20190417.13d370ca9-lp151.2.16.4 pacemaker-debuginfo-2.0.1+20190417.13d370ca9-lp151.2.16.4 pacemaker-debugsource-2.0.1+20190417.13d370ca9-lp151.2.16.4 pacemaker-remote-2.0.1+20190417.13d370ca9-lp151.2.16.4 pacemaker-remote-debuginfo-2.0.1+20190417.13d370ca9-lp151.2.16.4 - openSUSE Leap 15.1 (noarch): pacemaker-cts-2.0.1+20190417.13d370ca9-lp151.2.16.4 References: https://www.suse.com/security/cve/CVE-2020-25654.html https://bugzilla.suse.com/1167171 https://bugzilla.suse.com/1173668 https://bugzilla.suse.com/1175557 https://bugzilla.suse.com/1177916

1 0

openSUSE-RU-2020:1824-1: moderate: Recommended update for libkgapi
by maintenance＠opensuse.org 03 Nov '20

03 Nov '20

openSUSE Recommended Update: Recommended update for libkgapi ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1824-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for libkgapi fixes the following issues: - Accept HTTP status 307 as a redirect; otherwise Google document download fails with an unknown error. (kde#425261) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1824=1 Package List: - openSUSE Leap 15.2 (noarch): libkgapi-lang-20.04.2-lp152.2.3.1 - openSUSE Leap 15.2 (x86_64): libKPimGAPIBlogger5-20.04.2-lp152.2.3.1 libKPimGAPIBlogger5-debuginfo-20.04.2-lp152.2.3.1 libKPimGAPICalendar5-20.04.2-lp152.2.3.1 libKPimGAPICalendar5-debuginfo-20.04.2-lp152.2.3.1 libKPimGAPIContacts5-20.04.2-lp152.2.3.1 libKPimGAPIContacts5-debuginfo-20.04.2-lp152.2.3.1 libKPimGAPICore5-20.04.2-lp152.2.3.1 libKPimGAPICore5-debuginfo-20.04.2-lp152.2.3.1 libKPimGAPIDrive5-20.04.2-lp152.2.3.1 libKPimGAPIDrive5-debuginfo-20.04.2-lp152.2.3.1 libKPimGAPILatitude5-20.04.2-lp152.2.3.1 libKPimGAPILatitude5-debuginfo-20.04.2-lp152.2.3.1 libKPimGAPIMaps5-20.04.2-lp152.2.3.1 libKPimGAPIMaps5-debuginfo-20.04.2-lp152.2.3.1 libKPimGAPITasks5-20.04.2-lp152.2.3.1 libKPimGAPITasks5-debuginfo-20.04.2-lp152.2.3.1 libkgapi-debuginfo-20.04.2-lp152.2.3.1 libkgapi-debugsource-20.04.2-lp152.2.3.1 libkgapi-devel-20.04.2-lp152.2.3.1 sasl2-kdexoauth2-20.04.2-lp152.2.3.1 sasl2-kdexoauth2-debuginfo-20.04.2-lp152.2.3.1 References:

1 0

openSUSE-RU-2020:1823-1: moderate: Recommended update for linuxrc
by maintenance＠opensuse.org 03 Nov '20

03 Nov '20

openSUSE Recommended Update: Recommended update for linuxrc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1823-1 Rating: moderate References: #1174912 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for linuxrc fixes the following issues: - Fixes an issue when the installer hangs on some specific hardware. (bsc#1174912) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1823=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): linuxrc-7.0.15.2-lp152.2.6.1 linuxrc-debuginfo-7.0.15.2-lp152.2.6.1 linuxrc-debugsource-7.0.15.2-lp152.2.6.1 References: https://bugzilla.suse.com/1174912

1 0

openSUSE-SU-2020:1820-1: moderate: Security update for icinga2
by opensuse-security＠opensuse.org 03 Nov '20

03 Nov '20

openSUSE Security Update: Security update for icinga2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1820-1 Rating: moderate References: #1159869 #1172171 #1174075 Cross-References: CVE-2020-14004 Affected Products: openSUSE Leap 15.2 openSUSE Leap 15.1 openSUSE Backports SLE-15-SP2 openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update for icinga2 fixes the following issues: - Info that since version 2.12.0 following security issue is fixed: prepare-dirs script allows for symlink attack in the icinga user context. boo#1172171 (CVE-2020-14004) Update to 2.12.1: * Bugfixes + Core - Fix crashes during config update #8348 #8345 - Fix crash while removing a downtime #8228 - Ensure the daemon doesn't get killed by logrotate #8170 - Fix hangup during shutdown #8211 - Fix a deadlock in Icinga DB #8168 - Clean up zombie processes during reload #8376 - Reduce check latency #8276 + IDO - Prevent unnecessary IDO updates #8327 #8320 - Commit IDO MySQL transactions earlier #8349 - Make sure to insert IDO program status #8330 - Improve IDO queue stats logging #8271 #8328 #8379 + Misc - Ensure API connections are closed properly #8293 - Prevent unnecessary notifications #8299 - Don't skip null values of command arguments #8174 - Fix Windows .exe version #8234 - Reset Icinga check warning after successful config update #8189 Update to 2.12.0: * Breaking changes - Deprecate Windows plugins in favor of our - PowerShell plugins #8071 - Deprecate Livestatus #8051 - Refuse acknowledging an already acknowledged checkable #7695 - Config lexer: complain on EOF in heredocs, i.e. {{{abc<EOF> #7541 * Enhancements + Core - Implement new database backend: Icinga DB #7571 - Re-send notifications previously suppressed by their time periods #7816 + API - Host/Service: Add acknowledgement_last_change and next_update attributes #7881 #7534 - Improve error message for POST queries #7681 - /v1/actions/remove-comment: let users specify themselves #7646 - /v1/actions/remove-downtime: let users specify themselves #7645 - /v1/config/stages: Add 'activate' parameter #7535 + CLI - Add pki verify command for better TLS certificate troubleshooting #7843 - Add OpenSSL version to 'Build' section in --version #7833 - Improve experience with 'Node Setup for Agents/Satellite' #7835 + DSL - Add get_template() and get_templates() #7632 - MacroProcessor::ResolveArguments(): skip null argument values #7567 - Fix crash due to dependency apply rule with ignore_on_error and non-existing parent #7538 - Introduce ternary operator (x ? y : z) #7442 - LegacyTimePeriod: support specifying seconds #7439 - Add support for Lambda Closures (() use(x) => x and () use(x) => { return x }) #7417 + ITL - Add notemp parameter to oracle health #7748 - Add extended checks options to snmp-interface command template #7602 - Add file age check for Windows command definition #7540 + Docs - Development: Update debugging instructions #7867 - Add new API clients #7859 - Clarify CRITICAL vs. UNKNOWN #7665 - Explicitly explain how to disable freshness checks #7664 - Update installation for RHEL/CentOS 8 and SLES 15 #7640 - Add Powershell example to validate the certificate #7603 + Misc - Don't send event::Heartbeat to unauthenticated peers #7747 - OpenTsdbWriter: Add custom tag support #7357 * Bugfixes + Core - Fix JSON-RPC crashes #7532 #7737 - Fix zone definitions in zones #7546 - Fix deadlock during start on OpenBSD #7739 - Consider PENDING not a problem #7685 - Fix zombie processes after reload #7606 - Don't wait for checks to finish during reload #7894 + Cluster - Fix segfault during heartbeat timeout with clients not yet signed #7970 - Make the config update process mutually exclusive (Prevents file system race conditions) #7936 - Fix check_timeout not being forwarded to agent command endpoints #7861 - Config sync: Use a more friendly message when configs are equal and don't need a reload #7811 - Fix open connections when agent waits for CA approval #7686 - Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #7836 - Send JsonRpcConnection heartbeat every 20s instead of 10s #8102 - Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8142 - Fix TLS context not being updated on signed certificate messages on agents #7654 + API - Close connections w/o successful TLS handshakes after 10s #7809 - Handle permission exceptions soon enough, returning 404 #7528 + SELinux - Fix safe-reload #7858 - Allow direct SMTP notifications #7749 + Windows - Terminate check processes with UNKNOWN state on timeout #7788 - Ensure that log replay files are properly renamed #7767 + Metrics - Graphite/OpenTSDB: Ensure that reconnect failure is detected #7765 - Always send 0 as value for thresholds #7696 + Scripts - Fix notification scripts to stay compatible with Dash #7706 - Fix bash line continuation in mail-host-notification.sh #7701 - Fix notification scripts string comparison #7647 - Service and host mail-notifications: Add line-breaks to very long output #6822 - Set correct UTF-8 email subject header (RFC1342) #6369 + Misc - DSL: Fix segfault due to passing null as custom function to Array#{sort,map,reduce,filter,any,all}() #8053 - CLI: pki save-cert: allow to specify --key and --cert for backwards compatibility #7995 - Catch exception when trusted cert is not readable during node setup on agent/satellite #7838 - CheckCommand ssl: Fix wrong parameter -N #7741 - Code quality fixes - Small documentation fixes - Update to 2.11.5 Version 2.11.5 fixes file system race conditions in the config update process occurring in large HA environments and improves the cluster connection liveness mechanisms. * Bugfixes + Make the config update process mutually exclusive (Prevents file system race conditions) #8093 + Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #8094 + Send JsonRpcConnection heartbeat every 20s instead of 10s #8103 + Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8097 - Update to 2.11.4 Version 2.11.4 fixes a crash during a heartbeat timeout with clients not yet signed. It also resolves an issue with endpoints not reconnecting after a reload/deploy, which caused a lot of UNKNOWN states. * Bugfixes + Cluster - Fix segfault during heartbeat timeout with clients not yet signed #7997 - Fix endpoints not reconnecting after reload (UNKNOWN hosts/services after reload) #8043 + Setup - Fix exception on trusted cert not readable during node setup #8044 - prepare-dirs: Only set permissions during directory creation #8046 + DSL - Fix segfault on missing compare function in Array functions (sort, map, reduce, filter, any, all) #8054 - Update to 2.11.3 * Bugfixes - Cluster Fix JSON-RPC crashes (#7532) in large environments: #7846 #7848 #7849 - Set minimum require boost version to 1.66 - Fix boo#1159869 Permission error when use the icinga cli wizard. - BuildRequire pkgconfig(libsystemd) instead of systemd-devel: Aloow OBS to shortcut through the -mini flavors. - Update to 2.11.2 This release fixes a problem where the newly introduced config sync "check-change-then-reload" functionality could cause endless reload loops with agents. The most visible parts are failing command endpoint checks with "not connected" UNKNOWN state. Only applies to HA enabled zones with 2 masters and/or 2 satellites. * Bugfixes - Cluster Config Sync - Config sync checksum change detection may not work within high load HA clusters #7565 - Update to 2.11.1 This release fixes a hidden long lasting bug unveiled with 2.11 and distributed setups. If you are affected by agents/satellites not accepting configuration anymore, or not reloading, please upgrade. * Bugfixes - Cluster Config Sync - Never accept authoritative config markers from other instances #7552 - This affects setups where agent/satellites are newer than the config master, e.g. satellite/agent=2.11.0, master=2.10. - Configuration - Error message for command_endpoint should hint that zone is not set #7514 - Global variable 'ActiveStageOverride' has been set implicitly via 'ActiveStageOverride ... #7521 * Documentation - Docs: Add upgrading/troubleshooting details for repos, config sync, agents #7526 - Explain repository requirements for 2.11: https://icinga.com/docs/icinga2/latest/doc/16-upgrading-icinga-2/#added-boo st-166 - command_endpoint objects require a zone: https://icinga.com/docs/icinga2/latest/doc/16-upgrading-icinga-2/#agent-hos ts-with-command-endpoint-require-a-zone - Zones declared in zones.d are not loaded anymore: https://icinga.com/docs/icinga2/latest/doc/16-upgrading-icinga-2/#config-sy nc-zones-in-zones - Update to 2.11.0 * Core - Rewrite Network Stack (cluster, REST API) based on Boost Asio, Beast, Coroutines - Technical concept: #7041 - Requires package updates: Boost >1.66 (either from packages.icinga.com, EPEL or backports). SLES11 & Ubuntu 14 are EOL. - Require TLS 1.2 and harden default cipher list - Improved Reload Handling (umbrella process, now 3 processes at runtime) - Support running Icinga 2 in (Docker) containers natively in foreground - Quality: Use Modern JSON for C++ library instead of YAJL (dead project) - Quality: Improve handling of invalid UTF8 strings * API - Fix crashes on Linux, Unix and Windows from Nessus scans #7431 - Locks and stalled waits are fixed with the core rewrite in #7071 - schedule-downtime action supports all_services for host downtimes - Improve storage handling for runtime created objects in the _api package * Cluster - HA aware features & improvements for failover handling #2941 #7062 - Improve cluster config sync with staging #6716 - Fixed that same downtime/comment objects would be synced again in a cluster loop #7198 * Checks & Notifications - Ensure that notifications during a restart are sent - Immediately notify about a problem after leaving a downtime and still NOT-OK - Improve reload handling and wait for features/metrics - Store notification command results and sync them in HA enabled zones #6722 * DSL/Configuration - Add getenv() function - Fix TimePeriod range support over midnight - concurrent_checks in the Checker feature has no effect, use the global MaxConcurrentChecks constant instead * CLI - Permissions: node wizard/setup, feature, api setup now run in the Icinga user context, not root - ca list shows pending CSRs by default, ca remove/restore allow to delete signing requests * ITL - Add new commands and missing attributes * Windows - Update bundled NSClient++ to 0.5.2.39 - Refine agent setup wizard & update requirements to .NET 4.6 * Documentation - Service Monitoring: How to create plugins by example, check commands and a modern version of the supported plugin API with best practices - Features: Better structure on metrics, and supported features - Technical Concepts: TLS Network IO, Cluster Feature HA, Cluster Config Sync - Development: Rewritten for better debugging and development experience for contributors including a style guide. Add nightly build setup instructions. - Packaging: INSTALL.md was integrated into the Development chapter, being available at https://icinga.com/docs too. - Update to 2.10.6 * Bugfixes - Fix el7 not loading ECDHE cipher suites #7247 - update to 2.10.5 * Core - Fix crashes with logrotate signals #6737 (thanks Elias Ohm) * API - Fix crashes and problems with permission filters from recent Namespace introduction #6785 (thanks Elias Ohm) #6874 (backported from 2.11) - Reduce log spam with locked connections (real fix is the network stack rewrite in 2.11) #6877 * Cluster - Fix problems with replay log rotation and storage #6932 (thanks Peter Eckel) * IDO DB - Fix that reload shutdown deactivates hosts and hostgroups (introduced in 2.9) #7157 * Documentation - Improve the REST API chapter: Unix timestamp handling, filters, unify POST requests with filters in the body - Better layout for the features chapter, specifically metrics and events - Split object types into monitoring, runtime, features - Add technical concepts for cluster messages Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1820=1 - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1820=1 - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1820=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1820=1 Package List: - openSUSE Leap 15.2 (x86_64): icinga2-2.12.1-lp152.3.3.3 icinga2-bin-2.12.1-lp152.3.3.3 icinga2-bin-debuginfo-2.12.1-lp152.3.3.3 icinga2-common-2.12.1-lp152.3.3.3 icinga2-debuginfo-2.12.1-lp152.3.3.3 icinga2-debugsource-2.12.1-lp152.3.3.3 icinga2-doc-2.12.1-lp152.3.3.3 icinga2-ido-mysql-2.12.1-lp152.3.3.3 icinga2-ido-mysql-debuginfo-2.12.1-lp152.3.3.3 icinga2-ido-pgsql-2.12.1-lp152.3.3.3 icinga2-ido-pgsql-debuginfo-2.12.1-lp152.3.3.3 nano-icinga2-2.12.1-lp152.3.3.3 vim-icinga2-2.12.1-lp152.3.3.3 - openSUSE Leap 15.1 (x86_64): icinga2-2.12.1-lp151.2.3.4 icinga2-bin-2.12.1-lp151.2.3.4 icinga2-bin-debuginfo-2.12.1-lp151.2.3.4 icinga2-common-2.12.1-lp151.2.3.4 icinga2-debuginfo-2.12.1-lp151.2.3.4 icinga2-debugsource-2.12.1-lp151.2.3.4 icinga2-doc-2.12.1-lp151.2.3.4 icinga2-ido-mysql-2.12.1-lp151.2.3.4 icinga2-ido-mysql-debuginfo-2.12.1-lp151.2.3.4 icinga2-ido-pgsql-2.12.1-lp151.2.3.4 icinga2-ido-pgsql-debuginfo-2.12.1-lp151.2.3.4 nano-icinga2-2.12.1-lp151.2.3.4 vim-icinga2-2.12.1-lp151.2.3.4 - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le x86_64): icinga2-2.12.1-bp152.4.3.1 icinga2-bin-2.12.1-bp152.4.3.1 icinga2-bin-debuginfo-2.12.1-bp152.4.3.1 icinga2-common-2.12.1-bp152.4.3.1 icinga2-debuginfo-2.12.1-bp152.4.3.1 icinga2-debugsource-2.12.1-bp152.4.3.1 icinga2-doc-2.12.1-bp152.4.3.1 icinga2-ido-mysql-2.12.1-bp152.4.3.1 icinga2-ido-mysql-debuginfo-2.12.1-bp152.4.3.1 icinga2-ido-pgsql-2.12.1-bp152.4.3.1 icinga2-ido-pgsql-debuginfo-2.12.1-bp152.4.3.1 nano-icinga2-2.12.1-bp152.4.3.1 vim-icinga2-2.12.1-bp152.4.3.1 - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le x86_64): icinga2-2.12.1-bp151.3.3.4 icinga2-bin-2.12.1-bp151.3.3.4 icinga2-common-2.12.1-bp151.3.3.4 icinga2-doc-2.12.1-bp151.3.3.4 icinga2-ido-mysql-2.12.1-bp151.3.3.4 icinga2-ido-pgsql-2.12.1-bp151.3.3.4 nano-icinga2-2.12.1-bp151.3.3.4 vim-icinga2-2.12.1-bp151.3.3.4 References: https://www.suse.com/security/cve/CVE-2020-14004.html https://bugzilla.suse.com/1159869 https://bugzilla.suse.com/1172171 https://bugzilla.suse.com/1174075

1 0

openSUSE-RU-2020:1821-1: moderate: Recommended update for keepassxc
by maintenance＠opensuse.org 03 Nov '20

03 Nov '20

openSUSE Recommended Update: Recommended update for keepassxc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1821-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 openSUSE Leap 15.1 openSUSE Backports SLE-15-SP2 openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for keepassxc fixes the following issues: keepassxc was updated to version 2.6.2 - Added - Add option to keep window always on top to view menu [#5542] - Move show/hide usernames and passwords to view menu [#5542] - Add command line options and environment variables for changing the config locations [#5452] - Include TOTP settings in CSV import/export and add support for ISO datetimes [#5346] - Changed - Mask sensitive information in command execution confirmation prompt [#5542] - SSH Agent: Avoid shortcut conflict on macOS by changing "Add key" to Ctrl+H on all platforms [#5484] - Fixed - Prevent data loss with drag and drop between databases [#5536] - Fix crash when toggling Capslock rapidly [#5545] - Don't mark URL references as invalid URL [#5380] - Reset entry preview after search [#5483] - Set Qt::Dialog flag on database open dialog [#5356] - Fix sorting of database report columns [#5426] - Fix IfDevice matching logic [#5344] - Fix layout issues and a stray scrollbar appearing on top of the entry edit screen [#5424] - Fix tabbing into the notes field [#5424] - Fix password generator ignoring settings on load [#5340] - Restore natural entry sort order on application load [#5438] - Fix paperclip and TOTP columns not saving state [#5327] - Enforce fixed password font in entry preview [#5454] - Add scrollbar when new database wizard exceeds screen size [#5560] - Do not mark database as modified when viewing Auto-Type associations [#5542] - CLI: Fix two heap-use-after-free crashes [#5368, #5470] - Browser: Fix key exchange not working with multiple simultaneous users on Windows [#5485] - Browser: Fix entry retrieval when "only best matching" is enabled [#5316] - Browser: Ignore recycle bin on KeePassHTTP migration [#5481] - KeeShare: Fix import crash [#5542] - macOS: Fix toolbar theming and breadcrumb display issues [#5482] - macOS: Fix file dialog randomly closing [#5479] - macOS: Fix being unable to select OPVault files for import [#5341] Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1821=1 - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1821=1 - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1821=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1821=1 Package List: - openSUSE Leap 15.2 (noarch): keepassxc-lang-2.6.2-lp152.3.9.1 - openSUSE Leap 15.2 (x86_64): keepassxc-2.6.2-lp152.3.9.1 keepassxc-debuginfo-2.6.2-lp152.3.9.1 keepassxc-debugsource-2.6.2-lp152.3.9.1 - openSUSE Leap 15.1 (x86_64): keepassxc-2.6.2-lp151.2.24.1 keepassxc-debuginfo-2.6.2-lp151.2.24.1 keepassxc-debugsource-2.6.2-lp151.2.24.1 - openSUSE Leap 15.1 (noarch): keepassxc-lang-2.6.2-lp151.2.24.1 - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): keepassxc-2.6.2-bp152.3.14.1 keepassxc-debuginfo-2.6.2-bp152.3.14.1 keepassxc-debugsource-2.6.2-bp152.3.14.1 - openSUSE Backports SLE-15-SP2 (noarch): keepassxc-lang-2.6.2-bp152.3.14.1 - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): keepassxc-2.6.2-bp151.3.21.1 - openSUSE Backports SLE-15-SP1 (noarch): keepassxc-lang-2.6.2-bp151.3.21.1 References:

1 0

openSUSE-SU-2020:1822-1: moderate: Security update for claws-mail
by opensuse-security＠opensuse.org 03 Nov '20

03 Nov '20

openSUSE Security Update: Security update for claws-mail ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1822-1 Rating: moderate References: #1157594 #1177967 Cross-References: CVE-2020-15917 Affected Products: openSUSE Leap 15.2 openSUSE Leap 15.1 openSUSE Backports SLE-15-SP2 openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for claws-mail fixes the following issues: - Additional cleanup of the template handling claws-mail was updated to 3.17.8 (boo#1177967) * Shielded template's |program{} and |attach_program{} so that the command-line that is executed does not allow sequencing such as with && || ;, preventing possible execution of nasty, or at least unexpected, commands * bug fixes: claws#4376 * updated English, French, and Spanish manuals - Update to 3.17.7 * Image Viewer: Image attachments, when displayed, are now resized to fit the available width rather than the available height. * -d is now an alias to --debug. * Libravatar plugin: New styles supported: Robohash and Pagan. * SpamAssassin plugin: The 'Maximum size' option now matches SpamAssassin's maximum; it can now handle messages up to 256MB. * LiteHTML viewer plugin: The UI is now translatable. Bug fixes: * bug 4313, 'Recursion stack overflow with rebuilding folder tree' * bug 4372, '[pl_PL] Crash after "Send later" without recipient and then "Close"' * bug 4373, 'attach mailto URI double free' * bug 4374, 'insert mailto URI misses checks' * bug 4384, 'U+00AD (soft hyphen) changed to space in Subject' * bug 4386, 'Allow Sieve config without userid without warning' * Add missing SSL settings when cloning accounts. * Parsing of command-line arguments. * PGP Core plugin: fix segv in address completion with a keyring. * Libravatar plugin: fixes to image display. - Disable python-gtk plugin on suse_version > 1500: still relying on python2, which is EOL. - Update to 3.17.6: * It is now possible to 'Inherit Folder properties and processing rules from parent folder' when creating new folders with the move message and copy message dialogues. * A Phishing warning is now shown when copying a phishing URL, (in addition to clicking a phishing URL). * The progress window when importing an mbox file is now more responsive. * A warning dialogue is shown if the selected privacy system is 'None' and automatic signing amd/or encrypting is enabled. * Python plugin: pkgconfig is now used to check for python2. This enables the Python plugin (which uses python2) to be built on newer systems which have both python2 and python3. Bug fixes: * bug 3922, 'minimize to tray on startup not working' * bug 4220, 'generates files in cache without content' * bug 4325, 'Following redirects when retrieving image' * bug 4342, 'Import mbox file command doesn't work twice on a row' * fix STARTTLS protocol violation * fix initial debug line * fix fat-fingered crash when v (hiding msgview) is pressed just before c (check signature) * fix non-translation of some Templates strings - Update to 3.17.5 + Inline Git patches now have colour syntax highlighting The colours of these, and patch attachments, are configurable on the 'Other' tab of the Display/Colors page of the general preferences. + The previously hidden preference, 'summary_from_show', is now configurable within the UI, on the 'Message List' tab of the Display/Summaries page of the general preferences, 'Displayed in From column [ ]'. + 'Re-edit' has been added to the message context menu when in the Drafts folder. + Additional Date header formats are supported: - weekday, month, day, hh, mm, ss, year, zone - weekday, month, day, hh, mm, ss, year + LiteHtml viewer plugin: scrolling with the keyboard has been implemented. + The included tools/scripts have been updated: - eud2gc.py converted to Python 3 - tbird2claws.py converted to Python 3 - tbird2claws.py converted to Python 3 - google_search.pl has been replaced with ddg_search.pl (that is, duckduckgo.com instead of google.com) - fix_date.sh and its documentation have been updated - multiwebsearch.pl 'fm' (freshmeat.net) has been removed; 'google' has been replaced by 'ddg' - the outdated OOo2claws-mail.pl script has been removed + Updated manuals + Updated translations: British English, Catalan, Czech, Danish, Dutch, French, German, Russian, Slovak, Spanish, Swedish, Traditional Chinese, Turkish + bug fixes: claws#2131, claws#4237, claws#4239, claws#4248, claws#4253, claws#4257, claws#4277, claws#4278, claws#4305 + Misc bugs fixed: - Fix crash in litehtml_viewer when tag has no href - removed "The following file has been attached..." dialogue - MBOX import: give a better estimation of the time left and grey out widgets while importing - Fixed "vcard.c:238:2: warning: ‘strncpy’ output truncate before terminating nul copying as many bytes from a string as its length" - RSSyl: Fix handling deleted feed items where modified and published dates do not match - fix bolding of target folder - when creating a new account, don't pre-fill data from the default account - respect 'default selection' settings when moving a msg with manual filtering - Fix printing of empty pages when the selected part is rendered with a plugin not implementing print - Addressbook folder selection dialogs: make sure folder list is sorted and apply global prefs to get stripes in lists. - when user cancels the GPG signing passphrase dialogue, don't bother the user with an "error" dialogue - Fix imap keyword search. Libetpan assumes keyword search is a MUST but RFC states it is a MAY. Fix advanced search on MS Exchange - fix SHIFT+SPACE in msg list, moving in reverse - revert pasting images as attachments - Fix help about command-line arguments that require a parameter. - Printing: only print as plain text if the part is of type text - fix a segfault with default info icon when trying to print a non-text part. - Add a test on build-time libetpan version to require the proper version at run-time (boo#1157594) - Move "Mark all read/unread" menu entries where they belong. remove-MarkAll-from-message-menu.patch (claws#4278) add-MarkAll-to-folder-menu.patch (claws#4278) - Make litehtml plugin build on Tumbleweed. - Update to 3.17.4: * New HTML viewer plugin: Litehtml viewer * Added option 'Enable keyboard shortcuts' to the 'Keyboard shortcuts' frame on /Configuration/Preferences/Other/Miscellaneous * Compose: implemented copying of attached images to clipboard * Compose: images and text/uri-list (files) can now be attached by pasting into the Compose window * Python plugin: window sizes are now remembered for the Python console, the 'Open URLs' and the 'Set mailbox order' windows. * Fancy plugin: the download-link feature now follows redirections * MBOX export: the Enter key in the dialogue now starts the export * The date (ISO format) has been added to log timestamps * Update translations - bug 1920, 'No automatic NNTP filtering' - bug 2045, 'address book blocks focus on email window' - bug 2131, 'Focus stealing after mail check' - bug 2627, 'Filtering does not work on NNTP' - bug 3070, 'misbehaving text wrapping when URL chars are present' - bug 3838, 'Canceled right-click on message list leaves UI in inconsistent state' - bug 3977, 'Fix crashes when some external APIs fail' - bug 3979, 'Hang (with killing needed) during action which extracts attachments' - bug 4029, 'segfault after deleting message in a window' - bug 4031, 'fingerprint in SSL/TLS certificates for ... (regress error)' - bug 4037, 'Fix some small issues' - bug 4142, 'Translation error on Russian' - bug 4145, 'proxy server for sending doesn't work' - bug 4155, 'remember directory of last saving' - bug 4166, 'corrupted double-linked list' - bug 4167, 'Max line length exceeded when forwarding mail' - bug 4188, 'STL file is sent not as an attachment but as its base64 representation in plaintext' - CID 1442278, 'impossible to trigger buffer overflow' - Make key accelerators from menu work in addressbook window - save checkbox choices of display/summaries/defaults prefs - Do not throw an error when cancelling 'Save email as...'. - occasional crash on drag'n'drop of msgs - possible stack overflow in vcalendar's Curl data handler - crash when LDAP address source is defined in index, but - support is disabled - crash in Fancy plugin if one of the MIME parts has no - -ID - a few small memory leaks in scan_mailto_url() - configure script for rare cases where python is not installed - incorrect charset conversion in sc_html_read_line(). - markup in 'key not fully trusted' warning in pgpcore - use after free in rare code path in rssyl_subscribe() - several memory leaks - verify_folderlist_xml() for fresh starts - printf formats for size_t and goffset arguments. - alertpanel API use in win32 part of mimeview.c - pid handling in debug output of kill_children_cb() - incorrect pointer arithmetic in w32_filesel.c Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1822=1 - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1822=1 - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1822=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1822=1 Package List: - openSUSE Leap 15.2 (noarch): claws-mail-lang-3.17.8-lp152.3.6.1 - openSUSE Leap 15.2 (x86_64): claws-mail-3.17.8-lp152.3.6.1 claws-mail-debuginfo-3.17.8-lp152.3.6.1 claws-mail-debugsource-3.17.8-lp152.3.6.1 claws-mail-devel-3.17.8-lp152.3.6.1 - openSUSE Leap 15.1 (x86_64): claws-mail-3.17.8-lp151.2.6.1 claws-mail-debuginfo-3.17.8-lp151.2.6.1 claws-mail-debugsource-3.17.8-lp151.2.6.1 claws-mail-devel-3.17.8-lp151.2.6.1 - openSUSE Leap 15.1 (noarch): claws-mail-lang-3.17.8-lp151.2.6.1 - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): claws-mail-3.17.8-bp152.3.6.1 claws-mail-debuginfo-3.17.8-bp152.3.6.1 claws-mail-debugsource-3.17.8-bp152.3.6.1 claws-mail-devel-3.17.8-bp152.3.6.1 - openSUSE Backports SLE-15-SP2 (noarch): claws-mail-lang-3.17.8-bp152.3.6.1 - openSUSE Backports SLE-15-SP1 (x86_64): claws-mail-3.17.8-bp151.3.6.1 claws-mail-devel-3.17.8-bp151.3.6.1 - openSUSE Backports SLE-15-SP1 (noarch): claws-mail-lang-3.17.8-bp151.3.6.1 References: https://www.suse.com/security/cve/CVE-2020-15917.html https://bugzilla.suse.com/1157594 https://bugzilla.suse.com/1177967

1 0

openSUSE-SU-2020:1819-1: important: Security update for samba
by opensuse-security＠opensuse.org 02 Nov '20

02 Nov '20

openSUSE Security Update: Security update for samba ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1819-1 Rating: important References: #1173902 #1173994 #1177613 Cross-References: CVE-2020-14318 CVE-2020-14323 CVE-2020-14383 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for samba fixes the following issues: Update to samba 4.11.14 - CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records (bsc#1177613). - CVE-2020-14323: Unprivileged user can crash winbind (bsc#1173994). - CVE-2020-14318: Missing permissions check in SMB1/2/3 ChangeNotify (bsc#1173902). - lib/util: Do not install /usr/bin/test_util - smbd: don't log success as error - idmap_ad does not deal properly with a RFC4511 section 4.4.1 response; - winbind: Fix a memleak - idmap_ad: Pass tldap debug messages on to DEBUG() - lib/replace: Move lib/replace/closefrom.c from ROKEN_HOSTCC_SOURCE to REPLACE_HOSTCC_SOURCE - ctdb disable/enable can fail due to race condition This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1819=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): ctdb-4.11.14+git.202.344b137b75d-lp152.3.16.1 ctdb-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 ctdb-pcp-pmda-4.11.14+git.202.344b137b75d-lp152.3.16.1 ctdb-pcp-pmda-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 ctdb-tests-4.11.14+git.202.344b137b75d-lp152.3.16.1 ctdb-tests-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libdcerpc-binding0-4.11.14+git.202.344b137b75d-lp152.3.16.1 libdcerpc-binding0-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libdcerpc-devel-4.11.14+git.202.344b137b75d-lp152.3.16.1 libdcerpc-samr-devel-4.11.14+git.202.344b137b75d-lp152.3.16.1 libdcerpc-samr0-4.11.14+git.202.344b137b75d-lp152.3.16.1 libdcerpc-samr0-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libdcerpc0-4.11.14+git.202.344b137b75d-lp152.3.16.1 libdcerpc0-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libndr-devel-4.11.14+git.202.344b137b75d-lp152.3.16.1 libndr-krb5pac-devel-4.11.14+git.202.344b137b75d-lp152.3.16.1 libndr-krb5pac0-4.11.14+git.202.344b137b75d-lp152.3.16.1 libndr-krb5pac0-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libndr-nbt-devel-4.11.14+git.202.344b137b75d-lp152.3.16.1 libndr-nbt0-4.11.14+git.202.344b137b75d-lp152.3.16.1 libndr-nbt0-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libndr-standard-devel-4.11.14+git.202.344b137b75d-lp152.3.16.1 libndr-standard0-4.11.14+git.202.344b137b75d-lp152.3.16.1 libndr-standard0-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libndr0-4.11.14+git.202.344b137b75d-lp152.3.16.1 libndr0-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libnetapi-devel-4.11.14+git.202.344b137b75d-lp152.3.16.1 libnetapi0-4.11.14+git.202.344b137b75d-lp152.3.16.1 libnetapi0-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamba-credentials-devel-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamba-credentials0-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamba-credentials0-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamba-errors-devel-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamba-errors0-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamba-errors0-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamba-hostconfig-devel-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamba-hostconfig0-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamba-hostconfig0-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamba-passdb-devel-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamba-passdb0-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamba-passdb0-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamba-policy-devel-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamba-policy-python3-devel-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamba-policy0-python3-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamba-policy0-python3-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamba-util-devel-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamba-util0-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamba-util0-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamdb-devel-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamdb0-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamdb0-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsmbclient-devel-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsmbclient0-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsmbclient0-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsmbconf-devel-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsmbconf0-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsmbconf0-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsmbldap-devel-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsmbldap2-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsmbldap2-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libtevent-util-devel-4.11.14+git.202.344b137b75d-lp152.3.16.1 libtevent-util0-4.11.14+git.202.344b137b75d-lp152.3.16.1 libtevent-util0-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libwbclient-devel-4.11.14+git.202.344b137b75d-lp152.3.16.1 libwbclient0-4.11.14+git.202.344b137b75d-lp152.3.16.1 libwbclient0-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 samba-4.11.14+git.202.344b137b75d-lp152.3.16.1 samba-ad-dc-4.11.14+git.202.344b137b75d-lp152.3.16.1 samba-ad-dc-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 samba-client-4.11.14+git.202.344b137b75d-lp152.3.16.1 samba-client-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 samba-core-devel-4.11.14+git.202.344b137b75d-lp152.3.16.1 samba-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 samba-debugsource-4.11.14+git.202.344b137b75d-lp152.3.16.1 samba-dsdb-modules-4.11.14+git.202.344b137b75d-lp152.3.16.1 samba-dsdb-modules-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 samba-libs-4.11.14+git.202.344b137b75d-lp152.3.16.1 samba-libs-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 samba-libs-python3-4.11.14+git.202.344b137b75d-lp152.3.16.1 samba-libs-python3-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 samba-python3-4.11.14+git.202.344b137b75d-lp152.3.16.1 samba-python3-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 samba-test-4.11.14+git.202.344b137b75d-lp152.3.16.1 samba-test-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 samba-winbind-4.11.14+git.202.344b137b75d-lp152.3.16.1 samba-winbind-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 - openSUSE Leap 15.2 (noarch): samba-doc-4.11.14+git.202.344b137b75d-lp152.3.16.1 - openSUSE Leap 15.2 (x86_64): libdcerpc-binding0-32bit-4.11.14+git.202.344b137b75d-lp152.3.16.1 libdcerpc-binding0-32bit-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libdcerpc-samr0-32bit-4.11.14+git.202.344b137b75d-lp152.3.16.1 libdcerpc-samr0-32bit-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libdcerpc0-32bit-4.11.14+git.202.344b137b75d-lp152.3.16.1 libdcerpc0-32bit-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libndr-krb5pac0-32bit-4.11.14+git.202.344b137b75d-lp152.3.16.1 libndr-krb5pac0-32bit-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libndr-nbt0-32bit-4.11.14+git.202.344b137b75d-lp152.3.16.1 libndr-nbt0-32bit-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libndr-standard0-32bit-4.11.14+git.202.344b137b75d-lp152.3.16.1 libndr-standard0-32bit-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libndr0-32bit-4.11.14+git.202.344b137b75d-lp152.3.16.1 libndr0-32bit-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libnetapi-devel-32bit-4.11.14+git.202.344b137b75d-lp152.3.16.1 libnetapi0-32bit-4.11.14+git.202.344b137b75d-lp152.3.16.1 libnetapi0-32bit-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamba-credentials0-32bit-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamba-credentials0-32bit-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamba-errors0-32bit-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamba-errors0-32bit-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamba-hostconfig0-32bit-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamba-hostconfig0-32bit-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamba-passdb0-32bit-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamba-passdb0-32bit-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamba-policy0-python3-32bit-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamba-policy0-python3-32bit-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamba-util0-32bit-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamba-util0-32bit-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamdb0-32bit-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamdb0-32bit-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsmbclient0-32bit-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsmbclient0-32bit-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsmbconf0-32bit-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsmbconf0-32bit-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsmbldap2-32bit-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsmbldap2-32bit-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libtevent-util0-32bit-4.11.14+git.202.344b137b75d-lp152.3.16.1 libtevent-util0-32bit-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libwbclient0-32bit-4.11.14+git.202.344b137b75d-lp152.3.16.1 libwbclient0-32bit-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 samba-ad-dc-32bit-4.11.14+git.202.344b137b75d-lp152.3.16.1 samba-ad-dc-32bit-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 samba-ceph-4.11.14+git.202.344b137b75d-lp152.3.16.1 samba-ceph-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 samba-client-32bit-4.11.14+git.202.344b137b75d-lp152.3.16.1 samba-client-32bit-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 samba-libs-32bit-4.11.14+git.202.344b137b75d-lp152.3.16.1 samba-libs-32bit-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 samba-libs-python3-32bit-4.11.14+git.202.344b137b75d-lp152.3.16.1 samba-libs-python3-32bit-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 samba-winbind-32bit-4.11.14+git.202.344b137b75d-lp152.3.16.1 samba-winbind-32bit-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 References: https://www.suse.com/security/cve/CVE-2020-14318.html https://www.suse.com/security/cve/CVE-2020-14323.html https://www.suse.com/security/cve/CVE-2020-14383.html https://bugzilla.suse.com/1173902 https://bugzilla.suse.com/1173994 https://bugzilla.suse.com/1177613

1 0

openSUSE-SU-2020:1812-1: important: Security update for lout
by opensuse-security＠opensuse.org 02 Nov '20

02 Nov '20

openSUSE Security Update: Security update for lout ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1812-1 Rating: important References: #1159713 #1159714 Cross-References: CVE-2019-19917 CVE-2019-19918 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for lout fixes the following issues: - CVE-2019-19918: Fixed buffer overflow in srcnext() (boo#1159713). - CVE-2019-19917: Fixed buffer overflow in StringQuotedWord() (boo#1159714). This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1812=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): lout-3.40-bp151.2.3.1 References: https://www.suse.com/security/cve/CVE-2019-19917.html https://www.suse.com/security/cve/CVE-2019-19918.html https://bugzilla.suse.com/1159713 https://bugzilla.suse.com/1159714

1 0

openSUSE-RU-2020:1817-1: moderate: Recommended update for gnome-desktop
by maintenance＠opensuse.org 02 Nov '20

02 Nov '20

openSUSE Recommended Update: Recommended update for gnome-desktop ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1817-1 Rating: moderate References: #1176596 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gnome-desktop fixes the following issues: - Fix a crash caused by a malformed background xml file. (bsc#1176596) - Update testsuite for new Hebrew clock format. - Updated translations. This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1817=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): gnome-desktop-debugsource-3.34.7-lp152.2.3.1 gnome-version-3.34.7-lp152.2.3.1 libgnome-desktop-3-18-3.34.7-lp152.2.3.1 libgnome-desktop-3-18-debuginfo-3.34.7-lp152.2.3.1 libgnome-desktop-3-devel-3.34.7-lp152.2.3.1 libgnome-desktop-3_0-common-3.34.7-lp152.2.3.1 libgnome-desktop-3_0-common-debuginfo-3.34.7-lp152.2.3.1 typelib-1_0-GnomeDesktop-3_0-3.34.7-lp152.2.3.1 - openSUSE Leap 15.2 (noarch): gnome-desktop-lang-3.34.7-lp152.2.3.1 - openSUSE Leap 15.2 (x86_64): libgnome-desktop-3-18-32bit-3.34.7-lp152.2.3.1 libgnome-desktop-3-18-32bit-debuginfo-3.34.7-lp152.2.3.1 References: https://bugzilla.suse.com/1176596

1 0

openSUSE-SU-2020:1813-1: important: Security update for lout
by opensuse-security＠opensuse.org 02 Nov '20

02 Nov '20

openSUSE Security Update: Security update for lout ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1813-1 Rating: important References: #1159713 #1159714 Cross-References: CVE-2019-19917 CVE-2019-19918 Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for lout fixes the following issues: - CVE-2019-19918: Fixed buffer overflow in srcnext() (boo#1159713). - CVE-2019-19917: Fixed buffer overflow in StringQuotedWord() (boo#1159714). This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1813=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): lout-3.40-bp152.4.3.1 References: https://www.suse.com/security/cve/CVE-2019-19917.html https://www.suse.com/security/cve/CVE-2019-19918.html https://bugzilla.suse.com/1159713 https://bugzilla.suse.com/1159714

1 0

openSUSE-SU-2020:1814-1: important: Security update for singularity
by opensuse-security＠opensuse.org 02 Nov '20

02 Nov '20

openSUSE Security Update: Security update for singularity ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1814-1 Rating: important References: #1177901 Cross-References: CVE-2020-15229 Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for singularity fixes the following issues: Update to new version 3.6.4: - CVE-2020-15229: Due to insecure handling of path traversal and the lack of path sanitization within unsquashfs, it is possible to overwrite/create files on the host filesystem during the extraction of a crafted squashfs filesystem (boo#1177901). This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1814=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): singularity-3.6.4-bp152.2.12.1 References: https://www.suse.com/security/cve/CVE-2020-15229.html https://bugzilla.suse.com/1177901

1 0

openSUSE-SU-2020:1811-1: important: Security update for samba
by opensuse-security＠opensuse.org 02 Nov '20

02 Nov '20

openSUSE Security Update: Security update for samba ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1811-1 Rating: important References: #1173902 #1173994 #1177613 Cross-References: CVE-2020-14318 CVE-2020-14323 CVE-2020-14383 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for samba fixes the following issues: - CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records (bsc#1177613). - CVE-2020-14323: Unprivileged user can crash winbind (bsc#1173994). - CVE-2020-14318: Missing permissions check in SMB1/2/3 ChangeNotify (bsc#1173902). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1811=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): ctdb-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 ctdb-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 ctdb-pcp-pmda-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 ctdb-pcp-pmda-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 ctdb-tests-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 ctdb-tests-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libdcerpc-binding0-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libdcerpc-binding0-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libdcerpc-devel-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libdcerpc-samr-devel-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libdcerpc-samr0-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libdcerpc-samr0-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libdcerpc0-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libdcerpc0-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libndr-devel-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libndr-krb5pac-devel-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libndr-krb5pac0-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libndr-krb5pac0-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libndr-nbt-devel-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libndr-nbt0-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libndr-nbt0-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libndr-standard-devel-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libndr-standard0-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libndr-standard0-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libndr0-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libndr0-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libnetapi-devel-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libnetapi0-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libnetapi0-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-credentials-devel-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-credentials0-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-credentials0-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-errors-devel-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-errors0-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-errors0-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-hostconfig-devel-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-hostconfig0-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-hostconfig0-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-passdb-devel-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-passdb0-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-passdb0-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-policy-devel-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-policy-python-devel-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-policy-python3-devel-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-policy0-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-policy0-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-policy0-python3-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-policy0-python3-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-util-devel-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-util0-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-util0-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamdb-devel-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamdb0-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamdb0-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsmbclient-devel-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsmbclient0-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsmbclient0-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsmbconf-devel-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsmbconf0-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsmbconf0-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsmbldap-devel-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsmbldap2-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsmbldap2-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libtevent-util-devel-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libtevent-util0-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libtevent-util0-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libwbclient-devel-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libwbclient0-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libwbclient0-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-ad-dc-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-ad-dc-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-client-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-client-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-core-devel-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-debugsource-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-dsdb-modules-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-dsdb-modules-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-libs-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-libs-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-libs-python-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-libs-python-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-libs-python3-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-libs-python3-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-pidl-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-python-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-python-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-python3-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-python3-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-test-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-test-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-winbind-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-winbind-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 - openSUSE Leap 15.1 (noarch): samba-doc-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 - openSUSE Leap 15.1 (x86_64): libdcerpc-binding0-32bit-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libdcerpc-binding0-32bit-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libdcerpc-samr0-32bit-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libdcerpc-samr0-32bit-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libdcerpc0-32bit-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libdcerpc0-32bit-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libndr-krb5pac0-32bit-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libndr-krb5pac0-32bit-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libndr-nbt0-32bit-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libndr-nbt0-32bit-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libndr-standard0-32bit-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libndr-standard0-32bit-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libndr0-32bit-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libndr0-32bit-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libnetapi-devel-32bit-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libnetapi0-32bit-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libnetapi0-32bit-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-credentials0-32bit-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-credentials0-32bit-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-errors0-32bit-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-errors0-32bit-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-hostconfig0-32bit-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-hostconfig0-32bit-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-passdb0-32bit-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-passdb0-32bit-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-policy0-32bit-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-policy0-32bit-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-policy0-python3-32bit-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-policy0-python3-32bit-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-util0-32bit-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-util0-32bit-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamdb0-32bit-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamdb0-32bit-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsmbclient0-32bit-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsmbclient0-32bit-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsmbconf0-32bit-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsmbconf0-32bit-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsmbldap2-32bit-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsmbldap2-32bit-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libtevent-util0-32bit-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libtevent-util0-32bit-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libwbclient0-32bit-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libwbclient0-32bit-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-ad-dc-32bit-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-ad-dc-32bit-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-ceph-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-ceph-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-client-32bit-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-client-32bit-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-libs-32bit-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-libs-32bit-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-libs-python-32bit-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-libs-python-32bit-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-libs-python3-32bit-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-libs-python3-32bit-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-winbind-32bit-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-winbind-32bit-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 References: https://www.suse.com/security/cve/CVE-2020-14318.html https://www.suse.com/security/cve/CVE-2020-14323.html https://www.suse.com/security/cve/CVE-2020-14383.html https://bugzilla.suse.com/1173902 https://bugzilla.suse.com/1173994 https://bugzilla.suse.com/1177613

1 0

openSUSE-RU-2020:1815-1: moderate: Recommended update for autoyast2
by maintenance＠opensuse.org 02 Nov '20

02 Nov '20

openSUSE Recommended Update: Recommended update for autoyast2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1815-1 Rating: moderate References: #1172817 #1175714 #1175725 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for autoyast2 fixes the following issues: - Import general and report sections in case that some pre-script modified the profile (bsc#1175725) - When 'NetworkManager' is selected in the profile as the network backend to be used, the 'NetworkManager' package is added to the list of packages to be installed in case of missing (bsc#1172817) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1815=1 Package List: - openSUSE Leap 15.2 (noarch): autoyast2-4.2.45-lp152.2.6.1 autoyast2-installation-4.2.45-lp152.2.6.1 References: https://bugzilla.suse.com/1172817 https://bugzilla.suse.com/1175714 https://bugzilla.suse.com/1175725

1 0

openSUSE-RU-2020:1816-1: moderate: Recommended update for timezone
by maintenance＠opensuse.org 02 Nov '20

02 Nov '20

openSUSE Recommended Update: Recommended update for timezone ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1816-1 Rating: moderate References: #1177460 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for timezone fixes the following issues: - timezone update 2020b (bsc#1177460) * Revised predictions for Morocco's changes starting in 2023. * Canada's Yukon changes to -07 on 2020-11-01, not 2020-03-08. * Macquarie Island has stayed in sync with Tasmania since 2011. * Casey, Antarctica is at +08 in winter and +11 in summer. * zic no longer supports -y, nor the TYPE field of Rules. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1816=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): timezone-2020b-lp152.3.3.1 timezone-debuginfo-2020b-lp152.3.3.1 timezone-debugsource-2020b-lp152.3.3.1 - openSUSE Leap 15.2 (noarch): timezone-java-2020b-lp152.3.3.1 References: https://bugzilla.suse.com/1177460

1 0

openSUSE-RU-2020:1818-1: Recommended update for go1.14
by maintenance＠opensuse.org 02 Nov '20

02 Nov '20

openSUSE Recommended Update: Recommended update for go1.14 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1818-1 Rating: low References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for go1.14 fixes the following issues: - includes fixes to the compiler, runtime, and the plugin and testing packages. * database/sql: TestTxCannotCommitAfterRollback failures on windows-amd64-2008 builder * runtime: memory corruption from stack-allocated defer on 32-bit * memory corruption on linux/386 with float32 arithmetic, GO386=387, buildmode pie/c-archive * runtime: "fatal error: unexpected signal during runtime execution" on windows-amd64-longtest builder of Go 1.15.2 commit * testing: summary and test output interleaved * plugin: program on linux/s390x sometimes hangs after calling "plugin.Open" * runtime: pcdata is -2 and 12 locals stack map entries error on nil pointer * runtime: race between stack shrinking and channel send/recv leads to bad sudog values This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1818=1 Package List: - openSUSE Leap 15.2 (x86_64): go1.14-1.14.10-lp152.2.9.1 go1.14-doc-1.14.10-lp152.2.9.1 go1.14-race-1.14.10-lp152.2.9.1 References:

1 0

openSUSE-SU-2020:1810-1: moderate: Security update for pagure
by opensuse-security＠opensuse.org 01 Nov '20

01 Nov '20

openSUSE Security Update: Security update for pagure ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1810-1 Rating: moderate References: #1176987 Cross-References: CVE-2019-11556 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for pagure fixes the following issues: - CVE-2019-11556: Fixed XSS via the templates/blame.html blame view (boo#1176987) This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1810=1 Package List: - openSUSE Backports SLE-15-SP1 (noarch): pagure-5.5-bp151.2.3.1 pagure-ci-5.5-bp151.2.3.1 pagure-ev-5.5-bp151.2.3.1 pagure-loadjson-5.5-bp151.2.3.1 pagure-logcom-5.5-bp151.2.3.1 pagure-milters-5.5-bp151.2.3.1 pagure-mirror-5.5-bp151.2.3.1 pagure-theme-chameleon-5.5-bp151.2.3.1 pagure-theme-default-openSUSE-5.5-bp151.2.3.1 pagure-theme-default-upstream-5.5-bp151.2.3.1 pagure-theme-pagureio-5.5-bp151.2.3.1 pagure-theme-srcfpo-5.5-bp151.2.3.1 pagure-theme-upstream-5.5-bp151.2.3.1 pagure-webhook-5.5-bp151.2.3.1 References: https://www.suse.com/security/cve/CVE-2019-11556.html https://bugzilla.suse.com/1176987

1 0

openSUSE-RU-2020:1809-1: Recommended update for go1.14
by maintenance＠opensuse.org 01 Nov '20

01 Nov '20

openSUSE Recommended Update: Recommended update for go1.14 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1809-1 Rating: low References: Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for go1.14 fixes the following issues: - includes fixes to the compiler, runtime, and the plugin and testing packages. * database/sql: TestTxCannotCommitAfterRollback failures on windows-amd64-2008 builder * runtime: memory corruption from stack-allocated defer on 32-bit * memory corruption on linux/386 with float32 arithmetic, GO386=387, buildmode pie/c-archive * runtime: "fatal error: unexpected signal during runtime execution" on windows-amd64-longtest builder of Go 1.15.2 commit * testing: summary and test output interleaved * plugin: program on linux/s390x sometimes hangs after calling "plugin.Open" * runtime: pcdata is -2 and 12 locals stack map entries error on nil pointer * runtime: race between stack shrinking and channel send/recv leads to bad sudog values This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1809=1 Package List: - openSUSE Leap 15.1 (x86_64): go1.14-1.14.10-lp151.19.1 go1.14-doc-1.14.10-lp151.19.1 go1.14-race-1.14.10-lp151.19.1 References:

1 0

openSUSE-RU-2020:1807-1: moderate: Recommended update for autoyast2
by maintenance＠opensuse.org 01 Nov '20

01 Nov '20

openSUSE Recommended Update: Recommended update for autoyast2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1807-1 Rating: moderate References: #1110413 #1145269 #1172026 #1175714 #1175725 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: This update for autoyast2 fixes the following issues: - Saving log files of postpartitioning-scripts. (bsc#1145269) - Fix for an issue when Autoyast was unable to set NTP client configuration policy. (bsc#1172026) - Move pre-scripts to the 'autoinit' client, running them just after the profile has been processed. (bsc#1110413) - Import general and report sections in case that some pre-script modified the profile (bsc#1175725) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1807=1 Package List: - openSUSE Leap 15.1 (noarch): autoyast2-4.1.21-lp151.2.18.1 autoyast2-installation-4.1.21-lp151.2.18.1 References: https://bugzilla.suse.com/1110413 https://bugzilla.suse.com/1145269 https://bugzilla.suse.com/1172026 https://bugzilla.suse.com/1175714 https://bugzilla.suse.com/1175725

1 0

openSUSE-RU-2020:1808-1: moderate: Recommended update for yast2-pkg-bindings
by maintenance＠opensuse.org 01 Nov '20

01 Nov '20

openSUSE Recommended Update: Recommended update for yast2-pkg-bindings ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1808-1 Rating: moderate References: #1171977 #1175681 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for yast2-pkg-bindings fixes the following issues: - Fixed migration from SLE-HPC-12 with activated HPC module to SLE15-SP2 (fixed saving service files). (bsc#1171977) - Return "nil" when a product package is not defined, to fix a possible crash caused by the missing value. (bsc#1175681) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1808=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): yast2-pkg-bindings-4.2.10-lp152.2.6.1 yast2-pkg-bindings-debuginfo-4.2.10-lp152.2.6.1 yast2-pkg-bindings-debugsource-4.2.10-lp152.2.6.1 - openSUSE Leap 15.2 (noarch): yast2-pkg-bindings-devel-doc-4.2.10-lp152.2.6.1 References: https://bugzilla.suse.com/1171977 https://bugzilla.suse.com/1175681

1 0

openSUSE-SU-2020:1806-1: important: Security update for phpMyAdmin
by opensuse-security＠opensuse.org 01 Nov '20

01 Nov '20

openSUSE Security Update: Security update for phpMyAdmin ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1806-1 Rating: important References: #1167335 #1167336 #1167337 #1177561 #1177562 #1177842 Cross-References: CVE-2020-10802 CVE-2020-10803 CVE-2020-10804 CVE-2020-26934 CVE-2020-26935 Affected Products: openSUSE Leap 15.1 openSUSE Backports SLE-15-SP1 openSUSE Backports SLE-15 SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that solves 5 vulnerabilities and has one errata is now available. Description: This update for phpMyAdmin fixes the following issues: phpMyAdmin was updated to 4.9.7 (boo#1177842): * Fix two factor authentication that was broken in 4.9.6 * Fix incompatibilities with older PHP versions Update to 4.9.6: - Fixed XSS relating to the transformation feature (boo#1177561 CVE-2020-26934, PMASA-2020-5) - Fixed SQL injection vulnerability in SearchController (boo#1177562 CVE-2020-26935, PMASA-2020-6) Update to 4.9.5: This is a security release containing several bug fixes. * CVE-2020-10804: SQL injection vulnerability in the user accounts page, particularly when changing a password (boo#1167335, PMASA-2020-2) * CVE-2020-10802: SQL injection vulnerability relating to the search feature (boo#1167336, PMASA-2020-3) * CVE-2020-10803: SQL injection and XSS having to do with displaying results (boo#1167337, PMASA-2020-4) * Removing of the "options" field for the external transformation. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1806=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1806=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2020-1806=1 - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2020-1806=1 Package List: - openSUSE Leap 15.1 (noarch): phpMyAdmin-4.9.7-lp151.2.24.1 - openSUSE Backports SLE-15-SP1 (noarch): phpMyAdmin-4.9.7-bp151.3.24.1 - openSUSE Backports SLE-15 (noarch): phpMyAdmin-4.9.7-bp150.43.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): phpMyAdmin-4.9.7-52.1 References: https://www.suse.com/security/cve/CVE-2020-10802.html https://www.suse.com/security/cve/CVE-2020-10803.html https://www.suse.com/security/cve/CVE-2020-10804.html https://www.suse.com/security/cve/CVE-2020-26934.html https://www.suse.com/security/cve/CVE-2020-26935.html https://bugzilla.suse.com/1167335 https://bugzilla.suse.com/1167336 https://bugzilla.suse.com/1167337 https://bugzilla.suse.com/1177561 https://bugzilla.suse.com/1177562 https://bugzilla.suse.com/1177842

1 0

openSUSE-SU-2020:1806-1: important: Security update for phpMyAdmin
by opensuse-security＠opensuse.org 01 Nov '20

01 Nov '20

openSUSE Security Update: Security update for phpMyAdmin ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1806-1 Rating: important References: #1167335 #1167336 #1167337 #1177561 #1177562 #1177842 Cross-References: CVE-2020-10802 CVE-2020-10803 CVE-2020-10804 CVE-2020-26934 CVE-2020-26935 Affected Products: openSUSE Leap 15.1 openSUSE Backports SLE-15-SP1 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that solves 5 vulnerabilities and has one errata is now available. Description: This update for phpMyAdmin fixes the following issues: phpMyAdmin was updated to 4.9.7 (boo#1177842): * Fix two factor authentication that was broken in 4.9.6 * Fix incompatibilities with older PHP versions Update to 4.9.6: - Fixed XSS relating to the transformation feature (boo#1177561 CVE-2020-26934, PMASA-2020-5) - Fixed SQL injection vulnerability in SearchController (boo#1177562 CVE-2020-26935, PMASA-2020-6) Update to 4.9.5: This is a security release containing several bug fixes. * CVE-2020-10804: SQL injection vulnerability in the user accounts page, particularly when changing a password (boo#1167335, PMASA-2020-2) * CVE-2020-10802: SQL injection vulnerability relating to the search feature (boo#1167336, PMASA-2020-3) * CVE-2020-10803: SQL injection and XSS having to do with displaying results (boo#1167337, PMASA-2020-4) * Removing of the "options" field for the external transformation. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1806=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1806=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2020-1806=1 Package List: - openSUSE Leap 15.1 (noarch): phpMyAdmin-4.9.7-lp151.2.24.1 - openSUSE Backports SLE-15-SP1 (noarch): phpMyAdmin-4.9.7-bp151.3.24.1 - openSUSE Backports SLE-15 (noarch): phpMyAdmin-4.9.7-bp150.43.1 References: https://www.suse.com/security/cve/CVE-2020-10802.html https://www.suse.com/security/cve/CVE-2020-10803.html https://www.suse.com/security/cve/CVE-2020-10804.html https://www.suse.com/security/cve/CVE-2020-26934.html https://www.suse.com/security/cve/CVE-2020-26935.html https://bugzilla.suse.com/1167335 https://bugzilla.suse.com/1167336 https://bugzilla.suse.com/1167337 https://bugzilla.suse.com/1177561 https://bugzilla.suse.com/1177562 https://bugzilla.suse.com/1177842

1 0

openSUSE-RU-2020:1805-1: moderate: Recommended update for gettext-runtime
by maintenance＠opensuse.org 01 Nov '20

01 Nov '20

openSUSE Recommended Update: Recommended update for gettext-runtime ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1805-1 Rating: moderate References: #1176142 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gettext-runtime fixes the following issues: - Fix for an issue when 'xgettext' crashes during creating a 'POT' file. (bsc#1176142) This update was imported from the SUSE:SLE-15:Update update project. This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1805=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le x86_64): gettext-csharp-0.19.8.1-bp151.5.1 References: https://bugzilla.suse.com/1176142

1 0

openSUSE-SU-2020:1804-1: moderate: Security update for binutils
by opensuse-security＠opensuse.org 01 Nov '20

01 Nov '20

openSUSE Security Update: Security update for binutils ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1804-1 Rating: moderate References: #1126826 #1126829 #1126831 #1140126 #1142649 #1143609 #1153768 #1153770 #1157755 #1160254 #1160590 #1163333 #1163744 Cross-References: CVE-2019-12972 CVE-2019-14250 CVE-2019-14444 CVE-2019-17450 CVE-2019-17451 CVE-2019-9074 CVE-2019-9075 CVE-2019-9077 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves 8 vulnerabilities and has 5 fixes is now available. Description: This update for binutils fixes the following issues: binutils was updated to version 2.35. (jsc#ECO-2373) Update to binutils 2.35: * The assembler can now produce DWARF-5 format line number tables. * Readelf now has a "lint" mode to enable extra checks of the files it is processing. * Readelf will now display "[...]" when it has to truncate a symbol name. The old behaviour - of displaying as many characters as possible, up to the 80 column limit - can be restored by the use of the --silent-truncation option. * The linker can now produce a dependency file listing the inputs that it has processed, much like the -M -MP option supported by the compiler. - fix DT_NEEDED order with -flto [bsc#1163744] Update to binutils 2.34: * The disassembler (objdump --disassemble) now has an option to generate ascii art thats show the arcs between that start and end points of control flow instructions. * The binutils tools now have support for debuginfod. Debuginfod is a HTTP service for distributing ELF/DWARF debugging information as well as source code. The tools can now connect to debuginfod servers in order to download debug information about the files that they are processing. * The assembler and linker now support the generation of ELF format files for the Z80 architecture. - Add new subpackages for libctf and libctf-nobfd. - Disable LTO due to bsc#1163333. - Includes fixes for these CVEs: bsc#1153768 aka CVE-2019-17451 aka PR25070 bsc#1153770 aka CVE-2019-17450 aka PR25078 - fix various build fails on aarch64 (PR25210, bsc#1157755). Update to binutils 2.33.1: * Adds support for the Arm Scalable Vector Extension version 2 (SVE2) instructions, the Arm Transactional Memory Extension (TME) instructions and the Armv8.1-M Mainline and M-profile Vector Extension (MVE) instructions. * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE, Cortex-A76AE, and Cortex-A77 processors. * Adds a .float16 directive for both Arm and AArch64 to allow encoding of 16-bit floating point literals. * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not) Loongson3 LLSC Errata. Add a --enable-mips-fix-loongson3-llsc=[yes|no] configure time option to set the default behavior. Set the default if the configure option is not used to "no". * The Cortex-A53 Erratum 843419 workaround now supports a choice of which workaround to use. The option --fix-cortex-a53-843419 now takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp] which can be used to force a particular workaround to be used. See --help for AArch64 for more details. * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and GNU_PROPERTY_AARCH64_FEATURE_1_PAC in ELF GNU program properties in the AArch64 ELF linker. * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI on inputs and use PLTs protected with BTI. * Add -z pac-plt for AArch64 to pick PAC enabled PLTs. * Add --source-comment[=<txt>] option to objdump which if present, provides a prefix to source code lines displayed in a disassembly. * Add --set-section-alignment <section-name>=<power-of-2-align> option to objcopy to allow the changing of section alignments. * Add --verilog-data-width option to objcopy for verilog targets to control width of data elements in verilog hex format. * The separate debug info file options of readelf (--debug-dump=links and --debug-dump=follow) and objdump (--dwarf=links and --dwarf=follow-links) will now display and/or follow multiple links if more than one are present in a file. (This usually happens when gcc's -gsplit-dwarf option is used). In addition objdump's --dwarf=follow-links now also affects its other display options, so that for example, when combined with --syms it will cause the symbol tables in any linked debug info files to also be displayed. In addition when combined with --disassemble the --dwarf= follow-links option will ensure that any symbol tables in the linked files are read and used when disassembling code in the main file. * Add support for dumping types encoded in the Compact Type Format to objdump and readelf. - Includes fixes for these CVEs: bsc#1126826 aka CVE-2019-9077 aka PR1126826 bsc#1126829 aka CVE-2019-9075 aka PR1126829 bsc#1126831 aka CVE-2019-9074 aka PR24235 bsc#1140126 aka CVE-2019-12972 aka PR23405 bsc#1143609 aka CVE-2019-14444 aka PR24829 bsc#1142649 aka CVE-2019-14250 aka PR90924 * Add xBPF target * Fix various problems with DWARF 5 support in gas * fix nm -B for objects compiled with -flto and -fcommon. This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1804=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): binutils-2.35-lp152.4.3.1 binutils-debuginfo-2.35-lp152.4.3.1 binutils-debugsource-2.35-lp152.4.3.1 binutils-devel-2.35-lp152.4.3.1 binutils-gold-2.35-lp152.4.3.1 binutils-gold-debuginfo-2.35-lp152.4.3.1 libctf-nobfd0-2.35-lp152.4.3.1 libctf-nobfd0-debuginfo-2.35-lp152.4.3.1 libctf0-2.35-lp152.4.3.1 libctf0-debuginfo-2.35-lp152.4.3.1 - openSUSE Leap 15.2 (x86_64): binutils-devel-32bit-2.35-lp152.4.3.1 cross-aarch64-binutils-2.35-lp152.4.3.1 cross-aarch64-binutils-debuginfo-2.35-lp152.4.3.1 cross-aarch64-binutils-debugsource-2.35-lp152.4.3.1 cross-arm-binutils-2.35-lp152.4.3.1 cross-arm-binutils-debuginfo-2.35-lp152.4.3.1 cross-arm-binutils-debugsource-2.35-lp152.4.3.1 cross-avr-binutils-2.35-lp152.4.3.1 cross-avr-binutils-debuginfo-2.35-lp152.4.3.1 cross-avr-binutils-debugsource-2.35-lp152.4.3.1 cross-epiphany-binutils-2.35-lp152.4.3.1 cross-epiphany-binutils-debuginfo-2.35-lp152.4.3.1 cross-epiphany-binutils-debugsource-2.35-lp152.4.3.1 cross-hppa-binutils-2.35-lp152.4.3.1 cross-hppa-binutils-debuginfo-2.35-lp152.4.3.1 cross-hppa-binutils-debugsource-2.35-lp152.4.3.1 cross-hppa64-binutils-2.35-lp152.4.3.1 cross-hppa64-binutils-debuginfo-2.35-lp152.4.3.1 cross-hppa64-binutils-debugsource-2.35-lp152.4.3.1 cross-i386-binutils-2.35-lp152.4.3.1 cross-i386-binutils-debuginfo-2.35-lp152.4.3.1 cross-i386-binutils-debugsource-2.35-lp152.4.3.1 cross-ia64-binutils-2.35-lp152.4.3.1 cross-ia64-binutils-debuginfo-2.35-lp152.4.3.1 cross-ia64-binutils-debugsource-2.35-lp152.4.3.1 cross-m68k-binutils-2.35-lp152.4.3.1 cross-m68k-binutils-debuginfo-2.35-lp152.4.3.1 cross-m68k-binutils-debugsource-2.35-lp152.4.3.1 cross-mips-binutils-2.35-lp152.4.3.1 cross-mips-binutils-debuginfo-2.35-lp152.4.3.1 cross-mips-binutils-debugsource-2.35-lp152.4.3.1 cross-ppc-binutils-2.35-lp152.4.3.1 cross-ppc-binutils-debuginfo-2.35-lp152.4.3.1 cross-ppc-binutils-debugsource-2.35-lp152.4.3.1 cross-ppc64-binutils-2.35-lp152.4.3.1 cross-ppc64-binutils-debuginfo-2.35-lp152.4.3.1 cross-ppc64-binutils-debugsource-2.35-lp152.4.3.1 cross-ppc64le-binutils-2.35-lp152.4.3.1 cross-ppc64le-binutils-debuginfo-2.35-lp152.4.3.1 cross-ppc64le-binutils-debugsource-2.35-lp152.4.3.1 cross-riscv64-binutils-2.35-lp152.4.3.1 cross-riscv64-binutils-debuginfo-2.35-lp152.4.3.1 cross-riscv64-binutils-debugsource-2.35-lp152.4.3.1 cross-rx-binutils-2.35-lp152.4.3.1 cross-rx-binutils-debuginfo-2.35-lp152.4.3.1 cross-rx-binutils-debugsource-2.35-lp152.4.3.1 cross-s390-binutils-2.35-lp152.4.3.1 cross-s390-binutils-debuginfo-2.35-lp152.4.3.1 cross-s390-binutils-debugsource-2.35-lp152.4.3.1 cross-s390x-binutils-2.35-lp152.4.3.1 cross-s390x-binutils-debuginfo-2.35-lp152.4.3.1 cross-s390x-binutils-debugsource-2.35-lp152.4.3.1 cross-sparc-binutils-2.35-lp152.4.3.1 cross-sparc-binutils-debuginfo-2.35-lp152.4.3.1 cross-sparc-binutils-debugsource-2.35-lp152.4.3.1 cross-sparc64-binutils-2.35-lp152.4.3.1 cross-sparc64-binutils-debuginfo-2.35-lp152.4.3.1 cross-sparc64-binutils-debugsource-2.35-lp152.4.3.1 cross-spu-binutils-2.35-lp152.4.3.1 cross-spu-binutils-debuginfo-2.35-lp152.4.3.1 cross-spu-binutils-debugsource-2.35-lp152.4.3.1 cross-xtensa-binutils-2.35-lp152.4.3.1 cross-xtensa-binutils-debuginfo-2.35-lp152.4.3.1 cross-xtensa-binutils-debugsource-2.35-lp152.4.3.1 References: https://www.suse.com/security/cve/CVE-2019-12972.html https://www.suse.com/security/cve/CVE-2019-14250.html https://www.suse.com/security/cve/CVE-2019-14444.html https://www.suse.com/security/cve/CVE-2019-17450.html https://www.suse.com/security/cve/CVE-2019-17451.html https://www.suse.com/security/cve/CVE-2019-9074.html https://www.suse.com/security/cve/CVE-2019-9075.html https://www.suse.com/security/cve/CVE-2019-9077.html https://bugzilla.suse.com/1126826 https://bugzilla.suse.com/1126829 https://bugzilla.suse.com/1126831 https://bugzilla.suse.com/1140126 https://bugzilla.suse.com/1142649 https://bugzilla.suse.com/1143609 https://bugzilla.suse.com/1153768 https://bugzilla.suse.com/1153770 https://bugzilla.suse.com/1157755 https://bugzilla.suse.com/1160254 https://bugzilla.suse.com/1160590 https://bugzilla.suse.com/1163333 https://bugzilla.suse.com/1163744

1 0

openSUSE-RU-2020:1796-1: moderate: Recommended update for xscreensaver
by maintenance＠opensuse.org 01 Nov '20

01 Nov '20

openSUSE Recommended Update: Recommended update for xscreensaver ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1796-1 Rating: moderate References: #1101393 #1165170 #890595 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for xscreensaver fixes the following issues: - update to 5.44 (ECO-2755): * New hacks, gibson, etruscanvenus and scooter * BSOD supports Tivo and Nintendo * New color options in romanboy, projectiveplane, hypertorus and klein * Performance tweaks for eruption, fireworkx, halftone, halo, moire2, rd-bomb * X11: Always use $HOME/.xscreensaver, not getpwuid's directory * New hacks GravityWell, DeepStars, handsy. * GLPlanet now supports the Mercator projection. * Bouncing Cow has mathematically ideal cows. * Foggy toasters. * Unknown Pleasures can now use an image file as a clip mask. * Updated webcollage for recent changes. * Added some sample unlock dialog color schemes to the .ad file. * On systemd systems, closing your laptop lid actually lock your screen now. (bsc#1101393) * Lock after completing fade (bsc#1101393). * sonar can ping without being setuid by using setcap. * The new font-loading fallback heuristics work again. * Fixed `noof' from displaying minimalistically. * Rewrote `unknownpleasures' to be faster, and a true waterfall graph. * If the xscreensaver daemon is setuid, the screen wont be unlocked. * Fix a BadWindow error. (bsc#1165170) * Suspend/Resumes don't show the desktop content before loading the lock screen. (bsc#1101393) * No longer require Xxf86misc extension, which is no longer supported and it has been removed from Xserver years ago. * New hacks filmleader vfeedback glitchpeg, razzledazzle, peepers, crumbler, maze3d and esper. * webcollagenow works with ImageMagick. * Improvements of GLPlanet, DymaxionMap, Tessellimage, XAnalogTV. * More heuristics for using RSS feeds as image sources. * Built-in image assets are now PNG instead of XPM or XBM. * Better font-loading fallback. * In case of too old versions, the message will advise to open a bugreport. (bsc#890595). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1796=1 Package List: - openSUSE Leap 15.2 (x86_64): xscreensaver-5.44-lp152.6.3.1 xscreensaver-data-5.44-lp152.6.3.1 xscreensaver-data-debuginfo-5.44-lp152.6.3.1 xscreensaver-data-extra-5.44-lp152.6.3.1 xscreensaver-data-extra-debuginfo-5.44-lp152.6.3.1 xscreensaver-debuginfo-5.44-lp152.6.3.1 xscreensaver-debugsource-5.44-lp152.6.3.1 - openSUSE Leap 15.2 (noarch): xscreensaver-lang-5.44-lp152.6.3.1 References: https://bugzilla.suse.com/1101393 https://bugzilla.suse.com/1165170 https://bugzilla.suse.com/890595

1 0

openSUSE-RU-2020:1800-1: moderate: Recommended update for rubygem-railties-5_1
by maintenance＠opensuse.org 01 Nov '20

01 Nov '20

openSUSE Recommended Update: Recommended update for rubygem-railties-5_1 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1800-1 Rating: moderate References: #1174315 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for rubygem-railties-5_1 fixes the following issue: - Fix rubygems dependencies for puma update and respect older version. (bnc#1174315) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1800=1 Package List: - openSUSE Leap 15.2 (x86_64): ruby2.5-rubygem-railties-5_1-5.1.4-lp152.4.3.1 ruby2.5-rubygem-railties-doc-5_1-5.1.4-lp152.4.3.1 References: https://bugzilla.suse.com/1174315

1 0

openSUSE-RU-2020:1797-1: moderate: Recommended update for sysconfig
by maintenance＠opensuse.org 01 Nov '20

01 Nov '20

openSUSE Recommended Update: Recommended update for sysconfig ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1797-1 Rating: moderate References: #1173391 #1176285 #1176325 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for sysconfig fixes the following issues: - Fix for 'netconfig' to run with a new library including fallback to the previous location. (bsc#1176285) - Fix for changing content of such files like '/etc/resolv.conf' to avoid linked applications re-read them and unnecessarily re-initializes themselves accordingly. (bsc#1176325) - Fix for 'chrony helper' calling in background. (bsc#1173391) - Fix for configuration file by creating a symlink for it to prevent false ownership on the file. (bsc#1159566) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1797=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): sysconfig-0.85.6-lp152.2.3.1 sysconfig-debuginfo-0.85.6-lp152.2.3.1 sysconfig-debugsource-0.85.6-lp152.2.3.1 sysconfig-netconfig-0.85.6-lp152.2.3.1 References: https://bugzilla.suse.com/1173391 https://bugzilla.suse.com/1176285 https://bugzilla.suse.com/1176325

1 0

openSUSE-SU-2020:1798-1: important: Security update for sane-backends
by opensuse-security＠opensuse.org 01 Nov '20

01 Nov '20

openSUSE Security Update: Security update for sane-backends ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1798-1 Rating: important References: #1172524 Cross-References: CVE-2020-12861 CVE-2020-12862 CVE-2020-12863 CVE-2020-12864 CVE-2020-12865 CVE-2020-12866 CVE-2020-12867 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: This update for sane-backends fixes the following issues: sane-backends was updated to 1.0.31 to further improve hardware enablement for scanner devices (jsc#ECO-2418 jsc#SLE-15561 jsc#SLE-15560) and also fix various security issues: - CVE-2020-12861,CVE-2020-12865: Fixed an out of bounds write (bsc#1172524) - CVE-2020-12862,CVE-2020-12863,CVE-2020-12864,: Fixed an out of bounds read (bsc#1172524) - CVE-2020-12866,CVE-2020-12867: Fixed a null pointer dereference (bsc#1172524) The upstream changelogs can be found here: - https://gitlab.com/sane-project/backends/-/releases/1.0.28 - https://gitlab.com/sane-project/backends/-/releases/1.0.29 - https://gitlab.com/sane-project/backends/-/releases/1.0.30 - https://gitlab.com/sane-project/backends/-/releases/1.0.31 This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1798=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): sane-backends-1.0.31-lp152.7.3.1 sane-backends-autoconfig-1.0.31-lp152.7.3.1 sane-backends-debuginfo-1.0.31-lp152.7.3.1 sane-backends-debugsource-1.0.31-lp152.7.3.1 sane-backends-devel-1.0.31-lp152.7.3.1 - openSUSE Leap 15.2 (x86_64): sane-backends-32bit-1.0.31-lp152.7.3.1 sane-backends-32bit-debuginfo-1.0.31-lp152.7.3.1 sane-backends-devel-32bit-1.0.31-lp152.7.3.1 References: https://www.suse.com/security/cve/CVE-2020-12861.html https://www.suse.com/security/cve/CVE-2020-12862.html https://www.suse.com/security/cve/CVE-2020-12863.html https://www.suse.com/security/cve/CVE-2020-12864.html https://www.suse.com/security/cve/CVE-2020-12865.html https://www.suse.com/security/cve/CVE-2020-12866.html https://www.suse.com/security/cve/CVE-2020-12867.html https://bugzilla.suse.com/1172524

1 0

openSUSE-SU-2020:1799-1: moderate: Security update for tomcat
by opensuse-security＠opensuse.org 01 Nov '20

01 Nov '20

openSUSE Security Update: Security update for tomcat ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1799-1 Rating: moderate References: #1177582 Cross-References: CVE-2020-13943 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for tomcat fixes the following issues: - CVE-2020-13943: Fixed HTTP/2 Request mix-up (bsc#1177582) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1799=1 Package List: - openSUSE Leap 15.2 (noarch): tomcat-9.0.36-lp152.2.10.1 tomcat-admin-webapps-9.0.36-lp152.2.10.1 tomcat-docs-webapp-9.0.36-lp152.2.10.1 tomcat-el-3_0-api-9.0.36-lp152.2.10.1 tomcat-embed-9.0.36-lp152.2.10.1 tomcat-javadoc-9.0.36-lp152.2.10.1 tomcat-jsp-2_3-api-9.0.36-lp152.2.10.1 tomcat-jsvc-9.0.36-lp152.2.10.1 tomcat-lib-9.0.36-lp152.2.10.1 tomcat-servlet-4_0-api-9.0.36-lp152.2.10.1 tomcat-webapps-9.0.36-lp152.2.10.1 References: https://www.suse.com/security/cve/CVE-2020-13943.html https://bugzilla.suse.com/1177582

1 0

openSUSE-RU-2020:1795-1: moderate: Recommended update for strawberry
by maintenance＠opensuse.org 01 Nov '20

01 Nov '20

openSUSE Recommended Update: Recommended update for strawberry ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1795-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for strawberry fixes the following issues: strawberry was updated to version 0.8.2: * Bugfixes: + Fixed broken transition to next song for CUE files with certain audio formats (regression since version 0.6.13). + Fixed all collection divider keys showing on top with some language collate settings (regression in version 0.8.1). + Fixed SQL querying songs by song ID when song ID is a string. + Fixed saving album covers for LMS Subsonic servers. + Fixed reading song creation dates with LMS Subsonic servers. + Fixed saving initial settings. + Removed use of HTML in system tray icon tooltip for all desktop environments instead of just KDE and Cinnamon. Update to version 0.8.1: * Bugfixes: + Fixed engine selection in backend settings with Qt 6. + Fixed pixelated playlist source icon for currently playing song. + Fixed crash when deleting queued songs from playlist. + Fixed situations where songs could disappear or be shown multiple times with certain collection groupings. + Fixed initial sizes of playlist header columns. + Fixed Strawberry preventing logout. + Fixed incorrectly splitting of basename for moodbar and transcoding for filenames with several dots. + Fixed certain cases where "playing now" for scrobbler were sent twice. + Fixed album cover loaded twice for certain songs causing slugglish playing widget. + Fixed playing widget to draw text after album cover is fully shown. + Fixed crash when trying to copy a closed playlist to a device. + Fixed incorrect song source for CUE songs when added through the collection watcher. + Disable use of HTML in system tray tooltip on Cinnamon too. + Remove problematic '&' character from OSD messages. * Enhancements: + Improved playlist autoscrolling. + Only allow playlist right click tag editing for editable songs. + Read song creation time from subsonic API. + Remember manually set compilation status for albums when songs are rescanned. + Added icons for edit tag playlist right click menu actions. + Maximize dialogs if they are already open when clicked again in the menu. + Added support for compilation tag to edit tag dialog. + Show song info and album cover in OSD on stop and pause. + Reshow OSD on song restart. + Always save initial settings. + Removed use of deprecated gstreamer "low-percent" (Minimum buffer fill setting). + Added buffer low and high watermark settings to backend settings. + Make use of newer version of the desktop notifications service when available. * New features: + Added setting for enabling scrobbling based on song source. + Added optional delete from disk in collection and playlist. + Added Last.fm import data wizard. + Added smart and dynamic playlists. + Added song ratings. + Added Qobuz streaming support. + Added Subsonic server side scrobbling support. + Load thumbnails from iPods to show under device collection. This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1795=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): strawberry-0.8.2-bp152.2.8.1 References:

1 0

openSUSE-SU-2020:1802-1: moderate: Security update for spice
by opensuse-security＠opensuse.org 01 Nov '20

01 Nov '20

openSUSE Security Update: Security update for spice ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1802-1 Rating: moderate References: #1177158 Cross-References: CVE-2020-14355 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for spice fixes the following issues: - CVE-2020-14355: Fixed multiple buffer overflow vulnerabilities in QUIC image decoding (bsc#1177158). This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1802=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libspice-server-devel-0.14.2-lp152.2.3.1 libspice-server1-0.14.2-lp152.2.3.1 libspice-server1-debuginfo-0.14.2-lp152.2.3.1 spice-debugsource-0.14.2-lp152.2.3.1 References: https://www.suse.com/security/cve/CVE-2020-14355.html https://bugzilla.suse.com/1177158

1 0

openSUSE-RU-2020:1801-1: moderate: Recommended update for catatonit
by maintenance＠opensuse.org 01 Nov '20

01 Nov '20

openSUSE Recommended Update: Recommended update for catatonit ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1801-1 Rating: moderate References: #1176155 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for catatonit fixes the following issues: - Fixes an issue when catatonit hangs when process dies in very specific way. (bsc#1176155) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1801=1 Package List: - openSUSE Leap 15.2 (x86_64): catatonit-0.1.5-lp152.4.3.1 catatonit-debuginfo-0.1.5-lp152.4.3.1 catatonit-debugsource-0.1.5-lp152.4.3.1 References: https://bugzilla.suse.com/1176155

1 0

openSUSE-SU-2020:1803-1: moderate: Security update for spice-gtk
by opensuse-security＠opensuse.org 01 Nov '20

01 Nov '20

openSUSE Security Update: Security update for spice-gtk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1803-1 Rating: moderate References: #1177158 Cross-References: CVE-2020-14355 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for spice-gtk fixes the following issues: - CVE-2020-14355: Fixed multiple buffer overflow vulnerabilities in QUIC image decoding (bsc#1177158). This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1803=1 Package List: - openSUSE Leap 15.2 (noarch): spice-gtk-lang-0.37-lp152.2.3.1 - openSUSE Leap 15.2 (x86_64): libspice-client-glib-2_0-8-0.37-lp152.2.3.1 libspice-client-glib-2_0-8-debuginfo-0.37-lp152.2.3.1 libspice-client-glib-helper-0.37-lp152.2.3.1 libspice-client-glib-helper-debuginfo-0.37-lp152.2.3.1 libspice-client-gtk-3_0-5-0.37-lp152.2.3.1 libspice-client-gtk-3_0-5-debuginfo-0.37-lp152.2.3.1 spice-gtk-0.37-lp152.2.3.1 spice-gtk-debuginfo-0.37-lp152.2.3.1 spice-gtk-debugsource-0.37-lp152.2.3.1 spice-gtk-devel-0.37-lp152.2.3.1 typelib-1_0-SpiceClientGlib-2_0-0.37-lp152.2.3.1 typelib-1_0-SpiceClientGtk-3_0-0.37-lp152.2.3.1 References: https://www.suse.com/security/cve/CVE-2020-14355.html https://bugzilla.suse.com/1177158

1 0

openSUSE-RU-2020:1794-1: moderate: Recommended update for libsolv, libzypp, zypper
by maintenance＠opensuse.org 01 Nov '20

01 Nov '20

openSUSE Recommended Update: Recommended update for libsolv, libzypp, zypper ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1794-1 Rating: moderate References: #1174918 #1176192 #1176435 #1176712 #1176740 #1176902 #1177238 #935885 SLE-16271 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 8 recommended fixes and contains one feature can now be installed. Description: This update for libsolv, libzypp, zypper fixes the following issues: libzypp was updated to 17.25.1: - When kernel-rt has been installed, the purge-kernels service fails during boot. (bsc#1176902) - Use package name provides as group key in purge-kernel (bsc#1176740 bsc#1176192) kernel-default-base has new packaging, where the kernel uname -r does not reflect the full package version anymore. This patch adds additional logic to use the most generic/shortest edition each package provides with %{packagename}=<version> to group the kernel packages instead of the rpm versions. This also changes how the keep-spec for specific versions is applied, instead of matching the package versions, each of the package name provides will be matched. - RepoInfo: Return the type of the local metadata cache as fallback (bsc#1176435) - VendorAttr: Fix broken "suse,opensuse" equivalence handling. Enhance API and testcases. (bsc#1174918) - Update docs regarding 'opensuse' namepace matching. - Link against libzstd to close libsolvs open references (as we link statically) zypper was updated to 1.14.40: - info: Assume descriptions starting with '<p>' are richtext (bsc#935885) - help: prevent 'whatis' from writing to stderr (bsc#1176712) - wp: point out that command is aliased to a search command and searches case-insensitive (jsc#SLE-16271) libsolv was updated to 0.7.15 to fix: - make testcase_mangle_repo_names deal correctly with freed repos [bsc#1177238] - fix deduceq2addedmap clearing bits outside of the map - conda: feature depriorization first - conda: fix startswith implementation - move find_update_seeds() call in cleandeps calculation - set SOLVABLE_BUILDHOST in rpm and rpmmd parsers - new testcase_mangle_repo_names() function - new solv_fmemopen() function Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1794=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libsolv-debuginfo-0.7.15-lp152.2.10.1 libsolv-debugsource-0.7.15-lp152.2.10.1 libsolv-demo-0.7.15-lp152.2.10.1 libsolv-demo-debuginfo-0.7.15-lp152.2.10.1 libsolv-devel-0.7.15-lp152.2.10.1 libsolv-devel-debuginfo-0.7.15-lp152.2.10.1 libsolv-tools-0.7.15-lp152.2.10.1 libsolv-tools-debuginfo-0.7.15-lp152.2.10.1 libyaml-cpp0_6-0.6.1-lp152.5.2.1 libyaml-cpp0_6-debuginfo-0.6.1-lp152.5.2.1 libzypp-17.25.1-lp152.2.13.1 libzypp-debuginfo-17.25.1-lp152.2.13.1 libzypp-debugsource-17.25.1-lp152.2.13.1 libzypp-devel-17.25.1-lp152.2.13.1 libzypp-devel-doc-17.25.1-lp152.2.13.1 perl-solv-0.7.15-lp152.2.10.1 perl-solv-debuginfo-0.7.15-lp152.2.10.1 python-solv-0.7.15-lp152.2.10.1 python-solv-debuginfo-0.7.15-lp152.2.10.1 python3-solv-0.7.15-lp152.2.10.1 python3-solv-debuginfo-0.7.15-lp152.2.10.1 ruby-solv-0.7.15-lp152.2.10.1 ruby-solv-debuginfo-0.7.15-lp152.2.10.1 yaml-cpp-debugsource-0.6.1-lp152.5.2.1 yaml-cpp-devel-0.6.1-lp152.5.2.1 zypper-1.14.40-lp152.2.9.1 zypper-debuginfo-1.14.40-lp152.2.9.1 zypper-debugsource-1.14.40-lp152.2.9.1 - openSUSE Leap 15.2 (noarch): zypper-aptitude-1.14.40-lp152.2.9.1 zypper-log-1.14.40-lp152.2.9.1 zypper-needs-restarting-1.14.40-lp152.2.9.1 References: https://bugzilla.suse.com/1174918 https://bugzilla.suse.com/1176192 https://bugzilla.suse.com/1176435 https://bugzilla.suse.com/1176712 https://bugzilla.suse.com/1176740 https://bugzilla.suse.com/1176902 https://bugzilla.suse.com/1177238 https://bugzilla.suse.com/935885

1 0