November 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2020:1820-1: moderate: Security update for icinga2
by opensuse-security＠opensuse.org 03 Nov '20

03 Nov '20

openSUSE Security Update: Security update for icinga2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1820-1 Rating: moderate References: #1159869 #1172171 #1174075 Cross-References: CVE-2020-14004 Affected Products: openSUSE Leap 15.2 openSUSE Leap 15.1 openSUSE Backports SLE-15-SP2 openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update for icinga2 fixes the following issues: - Info that since version 2.12.0 following security issue is fixed: prepare-dirs script allows for symlink attack in the icinga user context. boo#1172171 (CVE-2020-14004) Update to 2.12.1: * Bugfixes + Core - Fix crashes during config update #8348 #8345 - Fix crash while removing a downtime #8228 - Ensure the daemon doesn't get killed by logrotate #8170 - Fix hangup during shutdown #8211 - Fix a deadlock in Icinga DB #8168 - Clean up zombie processes during reload #8376 - Reduce check latency #8276 + IDO - Prevent unnecessary IDO updates #8327 #8320 - Commit IDO MySQL transactions earlier #8349 - Make sure to insert IDO program status #8330 - Improve IDO queue stats logging #8271 #8328 #8379 + Misc - Ensure API connections are closed properly #8293 - Prevent unnecessary notifications #8299 - Don't skip null values of command arguments #8174 - Fix Windows .exe version #8234 - Reset Icinga check warning after successful config update #8189 Update to 2.12.0: * Breaking changes - Deprecate Windows plugins in favor of our - PowerShell plugins #8071 - Deprecate Livestatus #8051 - Refuse acknowledging an already acknowledged checkable #7695 - Config lexer: complain on EOF in heredocs, i.e. {{{abc<EOF> #7541 * Enhancements + Core - Implement new database backend: Icinga DB #7571 - Re-send notifications previously suppressed by their time periods #7816 + API - Host/Service: Add acknowledgement_last_change and next_update attributes #7881 #7534 - Improve error message for POST queries #7681 - /v1/actions/remove-comment: let users specify themselves #7646 - /v1/actions/remove-downtime: let users specify themselves #7645 - /v1/config/stages: Add 'activate' parameter #7535 + CLI - Add pki verify command for better TLS certificate troubleshooting #7843 - Add OpenSSL version to 'Build' section in --version #7833 - Improve experience with 'Node Setup for Agents/Satellite' #7835 + DSL - Add get_template() and get_templates() #7632 - MacroProcessor::ResolveArguments(): skip null argument values #7567 - Fix crash due to dependency apply rule with ignore_on_error and non-existing parent #7538 - Introduce ternary operator (x ? y : z) #7442 - LegacyTimePeriod: support specifying seconds #7439 - Add support for Lambda Closures (() use(x) => x and () use(x) => { return x }) #7417 + ITL - Add notemp parameter to oracle health #7748 - Add extended checks options to snmp-interface command template #7602 - Add file age check for Windows command definition #7540 + Docs - Development: Update debugging instructions #7867 - Add new API clients #7859 - Clarify CRITICAL vs. UNKNOWN #7665 - Explicitly explain how to disable freshness checks #7664 - Update installation for RHEL/CentOS 8 and SLES 15 #7640 - Add Powershell example to validate the certificate #7603 + Misc - Don't send event::Heartbeat to unauthenticated peers #7747 - OpenTsdbWriter: Add custom tag support #7357 * Bugfixes + Core - Fix JSON-RPC crashes #7532 #7737 - Fix zone definitions in zones #7546 - Fix deadlock during start on OpenBSD #7739 - Consider PENDING not a problem #7685 - Fix zombie processes after reload #7606 - Don't wait for checks to finish during reload #7894 + Cluster - Fix segfault during heartbeat timeout with clients not yet signed #7970 - Make the config update process mutually exclusive (Prevents file system race conditions) #7936 - Fix check_timeout not being forwarded to agent command endpoints #7861 - Config sync: Use a more friendly message when configs are equal and don't need a reload #7811 - Fix open connections when agent waits for CA approval #7686 - Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #7836 - Send JsonRpcConnection heartbeat every 20s instead of 10s #8102 - Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8142 - Fix TLS context not being updated on signed certificate messages on agents #7654 + API - Close connections w/o successful TLS handshakes after 10s #7809 - Handle permission exceptions soon enough, returning 404 #7528 + SELinux - Fix safe-reload #7858 - Allow direct SMTP notifications #7749 + Windows - Terminate check processes with UNKNOWN state on timeout #7788 - Ensure that log replay files are properly renamed #7767 + Metrics - Graphite/OpenTSDB: Ensure that reconnect failure is detected #7765 - Always send 0 as value for thresholds #7696 + Scripts - Fix notification scripts to stay compatible with Dash #7706 - Fix bash line continuation in mail-host-notification.sh #7701 - Fix notification scripts string comparison #7647 - Service and host mail-notifications: Add line-breaks to very long output #6822 - Set correct UTF-8 email subject header (RFC1342) #6369 + Misc - DSL: Fix segfault due to passing null as custom function to Array#{sort,map,reduce,filter,any,all}() #8053 - CLI: pki save-cert: allow to specify --key and --cert for backwards compatibility #7995 - Catch exception when trusted cert is not readable during node setup on agent/satellite #7838 - CheckCommand ssl: Fix wrong parameter -N #7741 - Code quality fixes - Small documentation fixes - Update to 2.11.5 Version 2.11.5 fixes file system race conditions in the config update process occurring in large HA environments and improves the cluster connection liveness mechanisms. * Bugfixes + Make the config update process mutually exclusive (Prevents file system race conditions) #8093 + Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #8094 + Send JsonRpcConnection heartbeat every 20s instead of 10s #8103 + Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8097 - Update to 2.11.4 Version 2.11.4 fixes a crash during a heartbeat timeout with clients not yet signed. It also resolves an issue with endpoints not reconnecting after a reload/deploy, which caused a lot of UNKNOWN states. * Bugfixes + Cluster - Fix segfault during heartbeat timeout with clients not yet signed #7997 - Fix endpoints not reconnecting after reload (UNKNOWN hosts/services after reload) #8043 + Setup - Fix exception on trusted cert not readable during node setup #8044 - prepare-dirs: Only set permissions during directory creation #8046 + DSL - Fix segfault on missing compare function in Array functions (sort, map, reduce, filter, any, all) #8054 - Update to 2.11.3 * Bugfixes - Cluster Fix JSON-RPC crashes (#7532) in large environments: #7846 #7848 #7849 - Set minimum require boost version to 1.66 - Fix boo#1159869 Permission error when use the icinga cli wizard. - BuildRequire pkgconfig(libsystemd) instead of systemd-devel: Aloow OBS to shortcut through the -mini flavors. - Update to 2.11.2 This release fixes a problem where the newly introduced config sync "check-change-then-reload" functionality could cause endless reload loops with agents. The most visible parts are failing command endpoint checks with "not connected" UNKNOWN state. Only applies to HA enabled zones with 2 masters and/or 2 satellites. * Bugfixes - Cluster Config Sync - Config sync checksum change detection may not work within high load HA clusters #7565 - Update to 2.11.1 This release fixes a hidden long lasting bug unveiled with 2.11 and distributed setups. If you are affected by agents/satellites not accepting configuration anymore, or not reloading, please upgrade. * Bugfixes - Cluster Config Sync - Never accept authoritative config markers from other instances #7552 - This affects setups where agent/satellites are newer than the config master, e.g. satellite/agent=2.11.0, master=2.10. - Configuration - Error message for command_endpoint should hint that zone is not set #7514 - Global variable 'ActiveStageOverride' has been set implicitly via 'ActiveStageOverride ... #7521 * Documentation - Docs: Add upgrading/troubleshooting details for repos, config sync, agents #7526 - Explain repository requirements for 2.11: https://icinga.com/docs/icinga2/latest/doc/16-upgrading-icinga-2/#added-boo st-166 - command_endpoint objects require a zone: https://icinga.com/docs/icinga2/latest/doc/16-upgrading-icinga-2/#agent-hos ts-with-command-endpoint-require-a-zone - Zones declared in zones.d are not loaded anymore: https://icinga.com/docs/icinga2/latest/doc/16-upgrading-icinga-2/#config-sy nc-zones-in-zones - Update to 2.11.0 * Core - Rewrite Network Stack (cluster, REST API) based on Boost Asio, Beast, Coroutines - Technical concept: #7041 - Requires package updates: Boost >1.66 (either from packages.icinga.com, EPEL or backports). SLES11 & Ubuntu 14 are EOL. - Require TLS 1.2 and harden default cipher list - Improved Reload Handling (umbrella process, now 3 processes at runtime) - Support running Icinga 2 in (Docker) containers natively in foreground - Quality: Use Modern JSON for C++ library instead of YAJL (dead project) - Quality: Improve handling of invalid UTF8 strings * API - Fix crashes on Linux, Unix and Windows from Nessus scans #7431 - Locks and stalled waits are fixed with the core rewrite in #7071 - schedule-downtime action supports all_services for host downtimes - Improve storage handling for runtime created objects in the _api package * Cluster - HA aware features & improvements for failover handling #2941 #7062 - Improve cluster config sync with staging #6716 - Fixed that same downtime/comment objects would be synced again in a cluster loop #7198 * Checks & Notifications - Ensure that notifications during a restart are sent - Immediately notify about a problem after leaving a downtime and still NOT-OK - Improve reload handling and wait for features/metrics - Store notification command results and sync them in HA enabled zones #6722 * DSL/Configuration - Add getenv() function - Fix TimePeriod range support over midnight - concurrent_checks in the Checker feature has no effect, use the global MaxConcurrentChecks constant instead * CLI - Permissions: node wizard/setup, feature, api setup now run in the Icinga user context, not root - ca list shows pending CSRs by default, ca remove/restore allow to delete signing requests * ITL - Add new commands and missing attributes * Windows - Update bundled NSClient++ to 0.5.2.39 - Refine agent setup wizard & update requirements to .NET 4.6 * Documentation - Service Monitoring: How to create plugins by example, check commands and a modern version of the supported plugin API with best practices - Features: Better structure on metrics, and supported features - Technical Concepts: TLS Network IO, Cluster Feature HA, Cluster Config Sync - Development: Rewritten for better debugging and development experience for contributors including a style guide. Add nightly build setup instructions. - Packaging: INSTALL.md was integrated into the Development chapter, being available at https://icinga.com/docs too. - Update to 2.10.6 * Bugfixes - Fix el7 not loading ECDHE cipher suites #7247 - update to 2.10.5 * Core - Fix crashes with logrotate signals #6737 (thanks Elias Ohm) * API - Fix crashes and problems with permission filters from recent Namespace introduction #6785 (thanks Elias Ohm) #6874 (backported from 2.11) - Reduce log spam with locked connections (real fix is the network stack rewrite in 2.11) #6877 * Cluster - Fix problems with replay log rotation and storage #6932 (thanks Peter Eckel) * IDO DB - Fix that reload shutdown deactivates hosts and hostgroups (introduced in 2.9) #7157 * Documentation - Improve the REST API chapter: Unix timestamp handling, filters, unify POST requests with filters in the body - Better layout for the features chapter, specifically metrics and events - Split object types into monitoring, runtime, features - Add technical concepts for cluster messages Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1820=1 - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1820=1 - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1820=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1820=1 Package List: - openSUSE Leap 15.2 (x86_64): icinga2-2.12.1-lp152.3.3.3 icinga2-bin-2.12.1-lp152.3.3.3 icinga2-bin-debuginfo-2.12.1-lp152.3.3.3 icinga2-common-2.12.1-lp152.3.3.3 icinga2-debuginfo-2.12.1-lp152.3.3.3 icinga2-debugsource-2.12.1-lp152.3.3.3 icinga2-doc-2.12.1-lp152.3.3.3 icinga2-ido-mysql-2.12.1-lp152.3.3.3 icinga2-ido-mysql-debuginfo-2.12.1-lp152.3.3.3 icinga2-ido-pgsql-2.12.1-lp152.3.3.3 icinga2-ido-pgsql-debuginfo-2.12.1-lp152.3.3.3 nano-icinga2-2.12.1-lp152.3.3.3 vim-icinga2-2.12.1-lp152.3.3.3 - openSUSE Leap 15.1 (x86_64): icinga2-2.12.1-lp151.2.3.4 icinga2-bin-2.12.1-lp151.2.3.4 icinga2-bin-debuginfo-2.12.1-lp151.2.3.4 icinga2-common-2.12.1-lp151.2.3.4 icinga2-debuginfo-2.12.1-lp151.2.3.4 icinga2-debugsource-2.12.1-lp151.2.3.4 icinga2-doc-2.12.1-lp151.2.3.4 icinga2-ido-mysql-2.12.1-lp151.2.3.4 icinga2-ido-mysql-debuginfo-2.12.1-lp151.2.3.4 icinga2-ido-pgsql-2.12.1-lp151.2.3.4 icinga2-ido-pgsql-debuginfo-2.12.1-lp151.2.3.4 nano-icinga2-2.12.1-lp151.2.3.4 vim-icinga2-2.12.1-lp151.2.3.4 - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le x86_64): icinga2-2.12.1-bp152.4.3.1 icinga2-bin-2.12.1-bp152.4.3.1 icinga2-bin-debuginfo-2.12.1-bp152.4.3.1 icinga2-common-2.12.1-bp152.4.3.1 icinga2-debuginfo-2.12.1-bp152.4.3.1 icinga2-debugsource-2.12.1-bp152.4.3.1 icinga2-doc-2.12.1-bp152.4.3.1 icinga2-ido-mysql-2.12.1-bp152.4.3.1 icinga2-ido-mysql-debuginfo-2.12.1-bp152.4.3.1 icinga2-ido-pgsql-2.12.1-bp152.4.3.1 icinga2-ido-pgsql-debuginfo-2.12.1-bp152.4.3.1 nano-icinga2-2.12.1-bp152.4.3.1 vim-icinga2-2.12.1-bp152.4.3.1 - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le x86_64): icinga2-2.12.1-bp151.3.3.4 icinga2-bin-2.12.1-bp151.3.3.4 icinga2-common-2.12.1-bp151.3.3.4 icinga2-doc-2.12.1-bp151.3.3.4 icinga2-ido-mysql-2.12.1-bp151.3.3.4 icinga2-ido-pgsql-2.12.1-bp151.3.3.4 nano-icinga2-2.12.1-bp151.3.3.4 vim-icinga2-2.12.1-bp151.3.3.4 References: https://www.suse.com/security/cve/CVE-2020-14004.html https://bugzilla.suse.com/1159869 https://bugzilla.suse.com/1172171 https://bugzilla.suse.com/1174075

1 0

openSUSE-RU-2020:1821-1: moderate: Recommended update for keepassxc
by maintenance＠opensuse.org 03 Nov '20

03 Nov '20

openSUSE Recommended Update: Recommended update for keepassxc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1821-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 openSUSE Leap 15.1 openSUSE Backports SLE-15-SP2 openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for keepassxc fixes the following issues: keepassxc was updated to version 2.6.2 - Added - Add option to keep window always on top to view menu [#5542] - Move show/hide usernames and passwords to view menu [#5542] - Add command line options and environment variables for changing the config locations [#5452] - Include TOTP settings in CSV import/export and add support for ISO datetimes [#5346] - Changed - Mask sensitive information in command execution confirmation prompt [#5542] - SSH Agent: Avoid shortcut conflict on macOS by changing "Add key" to Ctrl+H on all platforms [#5484] - Fixed - Prevent data loss with drag and drop between databases [#5536] - Fix crash when toggling Capslock rapidly [#5545] - Don't mark URL references as invalid URL [#5380] - Reset entry preview after search [#5483] - Set Qt::Dialog flag on database open dialog [#5356] - Fix sorting of database report columns [#5426] - Fix IfDevice matching logic [#5344] - Fix layout issues and a stray scrollbar appearing on top of the entry edit screen [#5424] - Fix tabbing into the notes field [#5424] - Fix password generator ignoring settings on load [#5340] - Restore natural entry sort order on application load [#5438] - Fix paperclip and TOTP columns not saving state [#5327] - Enforce fixed password font in entry preview [#5454] - Add scrollbar when new database wizard exceeds screen size [#5560] - Do not mark database as modified when viewing Auto-Type associations [#5542] - CLI: Fix two heap-use-after-free crashes [#5368, #5470] - Browser: Fix key exchange not working with multiple simultaneous users on Windows [#5485] - Browser: Fix entry retrieval when "only best matching" is enabled [#5316] - Browser: Ignore recycle bin on KeePassHTTP migration [#5481] - KeeShare: Fix import crash [#5542] - macOS: Fix toolbar theming and breadcrumb display issues [#5482] - macOS: Fix file dialog randomly closing [#5479] - macOS: Fix being unable to select OPVault files for import [#5341] Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1821=1 - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1821=1 - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1821=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1821=1 Package List: - openSUSE Leap 15.2 (noarch): keepassxc-lang-2.6.2-lp152.3.9.1 - openSUSE Leap 15.2 (x86_64): keepassxc-2.6.2-lp152.3.9.1 keepassxc-debuginfo-2.6.2-lp152.3.9.1 keepassxc-debugsource-2.6.2-lp152.3.9.1 - openSUSE Leap 15.1 (x86_64): keepassxc-2.6.2-lp151.2.24.1 keepassxc-debuginfo-2.6.2-lp151.2.24.1 keepassxc-debugsource-2.6.2-lp151.2.24.1 - openSUSE Leap 15.1 (noarch): keepassxc-lang-2.6.2-lp151.2.24.1 - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): keepassxc-2.6.2-bp152.3.14.1 keepassxc-debuginfo-2.6.2-bp152.3.14.1 keepassxc-debugsource-2.6.2-bp152.3.14.1 - openSUSE Backports SLE-15-SP2 (noarch): keepassxc-lang-2.6.2-bp152.3.14.1 - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): keepassxc-2.6.2-bp151.3.21.1 - openSUSE Backports SLE-15-SP1 (noarch): keepassxc-lang-2.6.2-bp151.3.21.1 References:

1 0

openSUSE-SU-2020:1822-1: moderate: Security update for claws-mail
by opensuse-security＠opensuse.org 03 Nov '20

03 Nov '20

openSUSE Security Update: Security update for claws-mail ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1822-1 Rating: moderate References: #1157594 #1177967 Cross-References: CVE-2020-15917 Affected Products: openSUSE Leap 15.2 openSUSE Leap 15.1 openSUSE Backports SLE-15-SP2 openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for claws-mail fixes the following issues: - Additional cleanup of the template handling claws-mail was updated to 3.17.8 (boo#1177967) * Shielded template's |program{} and |attach_program{} so that the command-line that is executed does not allow sequencing such as with && || ;, preventing possible execution of nasty, or at least unexpected, commands * bug fixes: claws#4376 * updated English, French, and Spanish manuals - Update to 3.17.7 * Image Viewer: Image attachments, when displayed, are now resized to fit the available width rather than the available height. * -d is now an alias to --debug. * Libravatar plugin: New styles supported: Robohash and Pagan. * SpamAssassin plugin: The 'Maximum size' option now matches SpamAssassin's maximum; it can now handle messages up to 256MB. * LiteHTML viewer plugin: The UI is now translatable. Bug fixes: * bug 4313, 'Recursion stack overflow with rebuilding folder tree' * bug 4372, '[pl_PL] Crash after "Send later" without recipient and then "Close"' * bug 4373, 'attach mailto URI double free' * bug 4374, 'insert mailto URI misses checks' * bug 4384, 'U+00AD (soft hyphen) changed to space in Subject' * bug 4386, 'Allow Sieve config without userid without warning' * Add missing SSL settings when cloning accounts. * Parsing of command-line arguments. * PGP Core plugin: fix segv in address completion with a keyring. * Libravatar plugin: fixes to image display. - Disable python-gtk plugin on suse_version > 1500: still relying on python2, which is EOL. - Update to 3.17.6: * It is now possible to 'Inherit Folder properties and processing rules from parent folder' when creating new folders with the move message and copy message dialogues. * A Phishing warning is now shown when copying a phishing URL, (in addition to clicking a phishing URL). * The progress window when importing an mbox file is now more responsive. * A warning dialogue is shown if the selected privacy system is 'None' and automatic signing amd/or encrypting is enabled. * Python plugin: pkgconfig is now used to check for python2. This enables the Python plugin (which uses python2) to be built on newer systems which have both python2 and python3. Bug fixes: * bug 3922, 'minimize to tray on startup not working' * bug 4220, 'generates files in cache without content' * bug 4325, 'Following redirects when retrieving image' * bug 4342, 'Import mbox file command doesn't work twice on a row' * fix STARTTLS protocol violation * fix initial debug line * fix fat-fingered crash when v (hiding msgview) is pressed just before c (check signature) * fix non-translation of some Templates strings - Update to 3.17.5 + Inline Git patches now have colour syntax highlighting The colours of these, and patch attachments, are configurable on the 'Other' tab of the Display/Colors page of the general preferences. + The previously hidden preference, 'summary_from_show', is now configurable within the UI, on the 'Message List' tab of the Display/Summaries page of the general preferences, 'Displayed in From column [ ]'. + 'Re-edit' has been added to the message context menu when in the Drafts folder. + Additional Date header formats are supported: - weekday, month, day, hh, mm, ss, year, zone - weekday, month, day, hh, mm, ss, year + LiteHtml viewer plugin: scrolling with the keyboard has been implemented. + The included tools/scripts have been updated: - eud2gc.py converted to Python 3 - tbird2claws.py converted to Python 3 - tbird2claws.py converted to Python 3 - google_search.pl has been replaced with ddg_search.pl (that is, duckduckgo.com instead of google.com) - fix_date.sh and its documentation have been updated - multiwebsearch.pl 'fm' (freshmeat.net) has been removed; 'google' has been replaced by 'ddg' - the outdated OOo2claws-mail.pl script has been removed + Updated manuals + Updated translations: British English, Catalan, Czech, Danish, Dutch, French, German, Russian, Slovak, Spanish, Swedish, Traditional Chinese, Turkish + bug fixes: claws#2131, claws#4237, claws#4239, claws#4248, claws#4253, claws#4257, claws#4277, claws#4278, claws#4305 + Misc bugs fixed: - Fix crash in litehtml_viewer when tag has no href - removed "The following file has been attached..." dialogue - MBOX import: give a better estimation of the time left and grey out widgets while importing - Fixed "vcard.c:238:2: warning: ‘strncpy’ output truncate before terminating nul copying as many bytes from a string as its length" - RSSyl: Fix handling deleted feed items where modified and published dates do not match - fix bolding of target folder - when creating a new account, don't pre-fill data from the default account - respect 'default selection' settings when moving a msg with manual filtering - Fix printing of empty pages when the selected part is rendered with a plugin not implementing print - Addressbook folder selection dialogs: make sure folder list is sorted and apply global prefs to get stripes in lists. - when user cancels the GPG signing passphrase dialogue, don't bother the user with an "error" dialogue - Fix imap keyword search. Libetpan assumes keyword search is a MUST but RFC states it is a MAY. Fix advanced search on MS Exchange - fix SHIFT+SPACE in msg list, moving in reverse - revert pasting images as attachments - Fix help about command-line arguments that require a parameter. - Printing: only print as plain text if the part is of type text - fix a segfault with default info icon when trying to print a non-text part. - Add a test on build-time libetpan version to require the proper version at run-time (boo#1157594) - Move "Mark all read/unread" menu entries where they belong. remove-MarkAll-from-message-menu.patch (claws#4278) add-MarkAll-to-folder-menu.patch (claws#4278) - Make litehtml plugin build on Tumbleweed. - Update to 3.17.4: * New HTML viewer plugin: Litehtml viewer * Added option 'Enable keyboard shortcuts' to the 'Keyboard shortcuts' frame on /Configuration/Preferences/Other/Miscellaneous * Compose: implemented copying of attached images to clipboard * Compose: images and text/uri-list (files) can now be attached by pasting into the Compose window * Python plugin: window sizes are now remembered for the Python console, the 'Open URLs' and the 'Set mailbox order' windows. * Fancy plugin: the download-link feature now follows redirections * MBOX export: the Enter key in the dialogue now starts the export * The date (ISO format) has been added to log timestamps * Update translations - bug 1920, 'No automatic NNTP filtering' - bug 2045, 'address book blocks focus on email window' - bug 2131, 'Focus stealing after mail check' - bug 2627, 'Filtering does not work on NNTP' - bug 3070, 'misbehaving text wrapping when URL chars are present' - bug 3838, 'Canceled right-click on message list leaves UI in inconsistent state' - bug 3977, 'Fix crashes when some external APIs fail' - bug 3979, 'Hang (with killing needed) during action which extracts attachments' - bug 4029, 'segfault after deleting message in a window' - bug 4031, 'fingerprint in SSL/TLS certificates for ... (regress error)' - bug 4037, 'Fix some small issues' - bug 4142, 'Translation error on Russian' - bug 4145, 'proxy server for sending doesn't work' - bug 4155, 'remember directory of last saving' - bug 4166, 'corrupted double-linked list' - bug 4167, 'Max line length exceeded when forwarding mail' - bug 4188, 'STL file is sent not as an attachment but as its base64 representation in plaintext' - CID 1442278, 'impossible to trigger buffer overflow' - Make key accelerators from menu work in addressbook window - save checkbox choices of display/summaries/defaults prefs - Do not throw an error when cancelling 'Save email as...'. - occasional crash on drag'n'drop of msgs - possible stack overflow in vcalendar's Curl data handler - crash when LDAP address source is defined in index, but - support is disabled - crash in Fancy plugin if one of the MIME parts has no - -ID - a few small memory leaks in scan_mailto_url() - configure script for rare cases where python is not installed - incorrect charset conversion in sc_html_read_line(). - markup in 'key not fully trusted' warning in pgpcore - use after free in rare code path in rssyl_subscribe() - several memory leaks - verify_folderlist_xml() for fresh starts - printf formats for size_t and goffset arguments. - alertpanel API use in win32 part of mimeview.c - pid handling in debug output of kill_children_cb() - incorrect pointer arithmetic in w32_filesel.c Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1822=1 - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1822=1 - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1822=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1822=1 Package List: - openSUSE Leap 15.2 (noarch): claws-mail-lang-3.17.8-lp152.3.6.1 - openSUSE Leap 15.2 (x86_64): claws-mail-3.17.8-lp152.3.6.1 claws-mail-debuginfo-3.17.8-lp152.3.6.1 claws-mail-debugsource-3.17.8-lp152.3.6.1 claws-mail-devel-3.17.8-lp152.3.6.1 - openSUSE Leap 15.1 (x86_64): claws-mail-3.17.8-lp151.2.6.1 claws-mail-debuginfo-3.17.8-lp151.2.6.1 claws-mail-debugsource-3.17.8-lp151.2.6.1 claws-mail-devel-3.17.8-lp151.2.6.1 - openSUSE Leap 15.1 (noarch): claws-mail-lang-3.17.8-lp151.2.6.1 - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): claws-mail-3.17.8-bp152.3.6.1 claws-mail-debuginfo-3.17.8-bp152.3.6.1 claws-mail-debugsource-3.17.8-bp152.3.6.1 claws-mail-devel-3.17.8-bp152.3.6.1 - openSUSE Backports SLE-15-SP2 (noarch): claws-mail-lang-3.17.8-bp152.3.6.1 - openSUSE Backports SLE-15-SP1 (x86_64): claws-mail-3.17.8-bp151.3.6.1 claws-mail-devel-3.17.8-bp151.3.6.1 - openSUSE Backports SLE-15-SP1 (noarch): claws-mail-lang-3.17.8-bp151.3.6.1 References: https://www.suse.com/security/cve/CVE-2020-15917.html https://bugzilla.suse.com/1157594 https://bugzilla.suse.com/1177967

1 0

openSUSE-SU-2020:1819-1: important: Security update for samba
by opensuse-security＠opensuse.org 02 Nov '20

02 Nov '20

openSUSE Security Update: Security update for samba ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1819-1 Rating: important References: #1173902 #1173994 #1177613 Cross-References: CVE-2020-14318 CVE-2020-14323 CVE-2020-14383 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for samba fixes the following issues: Update to samba 4.11.14 - CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records (bsc#1177613). - CVE-2020-14323: Unprivileged user can crash winbind (bsc#1173994). - CVE-2020-14318: Missing permissions check in SMB1/2/3 ChangeNotify (bsc#1173902). - lib/util: Do not install /usr/bin/test_util - smbd: don't log success as error - idmap_ad does not deal properly with a RFC4511 section 4.4.1 response; - winbind: Fix a memleak - idmap_ad: Pass tldap debug messages on to DEBUG() - lib/replace: Move lib/replace/closefrom.c from ROKEN_HOSTCC_SOURCE to REPLACE_HOSTCC_SOURCE - ctdb disable/enable can fail due to race condition This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1819=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): ctdb-4.11.14+git.202.344b137b75d-lp152.3.16.1 ctdb-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 ctdb-pcp-pmda-4.11.14+git.202.344b137b75d-lp152.3.16.1 ctdb-pcp-pmda-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 ctdb-tests-4.11.14+git.202.344b137b75d-lp152.3.16.1 ctdb-tests-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libdcerpc-binding0-4.11.14+git.202.344b137b75d-lp152.3.16.1 libdcerpc-binding0-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libdcerpc-devel-4.11.14+git.202.344b137b75d-lp152.3.16.1 libdcerpc-samr-devel-4.11.14+git.202.344b137b75d-lp152.3.16.1 libdcerpc-samr0-4.11.14+git.202.344b137b75d-lp152.3.16.1 libdcerpc-samr0-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libdcerpc0-4.11.14+git.202.344b137b75d-lp152.3.16.1 libdcerpc0-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libndr-devel-4.11.14+git.202.344b137b75d-lp152.3.16.1 libndr-krb5pac-devel-4.11.14+git.202.344b137b75d-lp152.3.16.1 libndr-krb5pac0-4.11.14+git.202.344b137b75d-lp152.3.16.1 libndr-krb5pac0-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libndr-nbt-devel-4.11.14+git.202.344b137b75d-lp152.3.16.1 libndr-nbt0-4.11.14+git.202.344b137b75d-lp152.3.16.1 libndr-nbt0-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libndr-standard-devel-4.11.14+git.202.344b137b75d-lp152.3.16.1 libndr-standard0-4.11.14+git.202.344b137b75d-lp152.3.16.1 libndr-standard0-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libndr0-4.11.14+git.202.344b137b75d-lp152.3.16.1 libndr0-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libnetapi-devel-4.11.14+git.202.344b137b75d-lp152.3.16.1 libnetapi0-4.11.14+git.202.344b137b75d-lp152.3.16.1 libnetapi0-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamba-credentials-devel-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamba-credentials0-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamba-credentials0-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamba-errors-devel-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamba-errors0-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamba-errors0-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamba-hostconfig-devel-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamba-hostconfig0-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamba-hostconfig0-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamba-passdb-devel-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamba-passdb0-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamba-passdb0-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamba-policy-devel-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamba-policy-python3-devel-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamba-policy0-python3-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamba-policy0-python3-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamba-util-devel-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamba-util0-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamba-util0-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamdb-devel-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamdb0-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamdb0-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsmbclient-devel-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsmbclient0-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsmbclient0-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsmbconf-devel-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsmbconf0-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsmbconf0-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsmbldap-devel-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsmbldap2-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsmbldap2-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libtevent-util-devel-4.11.14+git.202.344b137b75d-lp152.3.16.1 libtevent-util0-4.11.14+git.202.344b137b75d-lp152.3.16.1 libtevent-util0-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libwbclient-devel-4.11.14+git.202.344b137b75d-lp152.3.16.1 libwbclient0-4.11.14+git.202.344b137b75d-lp152.3.16.1 libwbclient0-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 samba-4.11.14+git.202.344b137b75d-lp152.3.16.1 samba-ad-dc-4.11.14+git.202.344b137b75d-lp152.3.16.1 samba-ad-dc-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 samba-client-4.11.14+git.202.344b137b75d-lp152.3.16.1 samba-client-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 samba-core-devel-4.11.14+git.202.344b137b75d-lp152.3.16.1 samba-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 samba-debugsource-4.11.14+git.202.344b137b75d-lp152.3.16.1 samba-dsdb-modules-4.11.14+git.202.344b137b75d-lp152.3.16.1 samba-dsdb-modules-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 samba-libs-4.11.14+git.202.344b137b75d-lp152.3.16.1 samba-libs-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 samba-libs-python3-4.11.14+git.202.344b137b75d-lp152.3.16.1 samba-libs-python3-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 samba-python3-4.11.14+git.202.344b137b75d-lp152.3.16.1 samba-python3-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 samba-test-4.11.14+git.202.344b137b75d-lp152.3.16.1 samba-test-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 samba-winbind-4.11.14+git.202.344b137b75d-lp152.3.16.1 samba-winbind-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 - openSUSE Leap 15.2 (noarch): samba-doc-4.11.14+git.202.344b137b75d-lp152.3.16.1 - openSUSE Leap 15.2 (x86_64): libdcerpc-binding0-32bit-4.11.14+git.202.344b137b75d-lp152.3.16.1 libdcerpc-binding0-32bit-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libdcerpc-samr0-32bit-4.11.14+git.202.344b137b75d-lp152.3.16.1 libdcerpc-samr0-32bit-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libdcerpc0-32bit-4.11.14+git.202.344b137b75d-lp152.3.16.1 libdcerpc0-32bit-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libndr-krb5pac0-32bit-4.11.14+git.202.344b137b75d-lp152.3.16.1 libndr-krb5pac0-32bit-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libndr-nbt0-32bit-4.11.14+git.202.344b137b75d-lp152.3.16.1 libndr-nbt0-32bit-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libndr-standard0-32bit-4.11.14+git.202.344b137b75d-lp152.3.16.1 libndr-standard0-32bit-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libndr0-32bit-4.11.14+git.202.344b137b75d-lp152.3.16.1 libndr0-32bit-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libnetapi-devel-32bit-4.11.14+git.202.344b137b75d-lp152.3.16.1 libnetapi0-32bit-4.11.14+git.202.344b137b75d-lp152.3.16.1 libnetapi0-32bit-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamba-credentials0-32bit-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamba-credentials0-32bit-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamba-errors0-32bit-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamba-errors0-32bit-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamba-hostconfig0-32bit-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamba-hostconfig0-32bit-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamba-passdb0-32bit-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamba-passdb0-32bit-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamba-policy0-python3-32bit-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamba-policy0-python3-32bit-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamba-util0-32bit-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamba-util0-32bit-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamdb0-32bit-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsamdb0-32bit-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsmbclient0-32bit-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsmbclient0-32bit-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsmbconf0-32bit-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsmbconf0-32bit-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsmbldap2-32bit-4.11.14+git.202.344b137b75d-lp152.3.16.1 libsmbldap2-32bit-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libtevent-util0-32bit-4.11.14+git.202.344b137b75d-lp152.3.16.1 libtevent-util0-32bit-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 libwbclient0-32bit-4.11.14+git.202.344b137b75d-lp152.3.16.1 libwbclient0-32bit-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 samba-ad-dc-32bit-4.11.14+git.202.344b137b75d-lp152.3.16.1 samba-ad-dc-32bit-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 samba-ceph-4.11.14+git.202.344b137b75d-lp152.3.16.1 samba-ceph-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 samba-client-32bit-4.11.14+git.202.344b137b75d-lp152.3.16.1 samba-client-32bit-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 samba-libs-32bit-4.11.14+git.202.344b137b75d-lp152.3.16.1 samba-libs-32bit-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 samba-libs-python3-32bit-4.11.14+git.202.344b137b75d-lp152.3.16.1 samba-libs-python3-32bit-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 samba-winbind-32bit-4.11.14+git.202.344b137b75d-lp152.3.16.1 samba-winbind-32bit-debuginfo-4.11.14+git.202.344b137b75d-lp152.3.16.1 References: https://www.suse.com/security/cve/CVE-2020-14318.html https://www.suse.com/security/cve/CVE-2020-14323.html https://www.suse.com/security/cve/CVE-2020-14383.html https://bugzilla.suse.com/1173902 https://bugzilla.suse.com/1173994 https://bugzilla.suse.com/1177613

1 0

openSUSE-SU-2020:1812-1: important: Security update for lout
by opensuse-security＠opensuse.org 02 Nov '20

02 Nov '20

openSUSE Security Update: Security update for lout ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1812-1 Rating: important References: #1159713 #1159714 Cross-References: CVE-2019-19917 CVE-2019-19918 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for lout fixes the following issues: - CVE-2019-19918: Fixed buffer overflow in srcnext() (boo#1159713). - CVE-2019-19917: Fixed buffer overflow in StringQuotedWord() (boo#1159714). This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1812=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): lout-3.40-bp151.2.3.1 References: https://www.suse.com/security/cve/CVE-2019-19917.html https://www.suse.com/security/cve/CVE-2019-19918.html https://bugzilla.suse.com/1159713 https://bugzilla.suse.com/1159714

1 0

openSUSE-RU-2020:1817-1: moderate: Recommended update for gnome-desktop
by maintenance＠opensuse.org 02 Nov '20

02 Nov '20

openSUSE Recommended Update: Recommended update for gnome-desktop ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1817-1 Rating: moderate References: #1176596 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gnome-desktop fixes the following issues: - Fix a crash caused by a malformed background xml file. (bsc#1176596) - Update testsuite for new Hebrew clock format. - Updated translations. This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1817=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): gnome-desktop-debugsource-3.34.7-lp152.2.3.1 gnome-version-3.34.7-lp152.2.3.1 libgnome-desktop-3-18-3.34.7-lp152.2.3.1 libgnome-desktop-3-18-debuginfo-3.34.7-lp152.2.3.1 libgnome-desktop-3-devel-3.34.7-lp152.2.3.1 libgnome-desktop-3_0-common-3.34.7-lp152.2.3.1 libgnome-desktop-3_0-common-debuginfo-3.34.7-lp152.2.3.1 typelib-1_0-GnomeDesktop-3_0-3.34.7-lp152.2.3.1 - openSUSE Leap 15.2 (noarch): gnome-desktop-lang-3.34.7-lp152.2.3.1 - openSUSE Leap 15.2 (x86_64): libgnome-desktop-3-18-32bit-3.34.7-lp152.2.3.1 libgnome-desktop-3-18-32bit-debuginfo-3.34.7-lp152.2.3.1 References: https://bugzilla.suse.com/1176596

1 0

openSUSE-SU-2020:1813-1: important: Security update for lout
by opensuse-security＠opensuse.org 02 Nov '20

02 Nov '20

openSUSE Security Update: Security update for lout ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1813-1 Rating: important References: #1159713 #1159714 Cross-References: CVE-2019-19917 CVE-2019-19918 Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for lout fixes the following issues: - CVE-2019-19918: Fixed buffer overflow in srcnext() (boo#1159713). - CVE-2019-19917: Fixed buffer overflow in StringQuotedWord() (boo#1159714). This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1813=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): lout-3.40-bp152.4.3.1 References: https://www.suse.com/security/cve/CVE-2019-19917.html https://www.suse.com/security/cve/CVE-2019-19918.html https://bugzilla.suse.com/1159713 https://bugzilla.suse.com/1159714

1 0

openSUSE-SU-2020:1814-1: important: Security update for singularity
by opensuse-security＠opensuse.org 02 Nov '20

02 Nov '20

openSUSE Security Update: Security update for singularity ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1814-1 Rating: important References: #1177901 Cross-References: CVE-2020-15229 Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for singularity fixes the following issues: Update to new version 3.6.4: - CVE-2020-15229: Due to insecure handling of path traversal and the lack of path sanitization within unsquashfs, it is possible to overwrite/create files on the host filesystem during the extraction of a crafted squashfs filesystem (boo#1177901). This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1814=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): singularity-3.6.4-bp152.2.12.1 References: https://www.suse.com/security/cve/CVE-2020-15229.html https://bugzilla.suse.com/1177901

1 0

openSUSE-SU-2020:1811-1: important: Security update for samba
by opensuse-security＠opensuse.org 02 Nov '20

02 Nov '20

openSUSE Security Update: Security update for samba ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1811-1 Rating: important References: #1173902 #1173994 #1177613 Cross-References: CVE-2020-14318 CVE-2020-14323 CVE-2020-14383 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for samba fixes the following issues: - CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records (bsc#1177613). - CVE-2020-14323: Unprivileged user can crash winbind (bsc#1173994). - CVE-2020-14318: Missing permissions check in SMB1/2/3 ChangeNotify (bsc#1173902). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1811=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): ctdb-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 ctdb-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 ctdb-pcp-pmda-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 ctdb-pcp-pmda-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 ctdb-tests-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 ctdb-tests-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libdcerpc-binding0-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libdcerpc-binding0-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libdcerpc-devel-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libdcerpc-samr-devel-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libdcerpc-samr0-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libdcerpc-samr0-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libdcerpc0-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libdcerpc0-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libndr-devel-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libndr-krb5pac-devel-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libndr-krb5pac0-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libndr-krb5pac0-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libndr-nbt-devel-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libndr-nbt0-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libndr-nbt0-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libndr-standard-devel-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libndr-standard0-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libndr-standard0-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libndr0-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libndr0-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libnetapi-devel-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libnetapi0-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libnetapi0-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-credentials-devel-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-credentials0-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-credentials0-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-errors-devel-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-errors0-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-errors0-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-hostconfig-devel-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-hostconfig0-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-hostconfig0-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-passdb-devel-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-passdb0-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-passdb0-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-policy-devel-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-policy-python-devel-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-policy-python3-devel-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-policy0-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-policy0-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-policy0-python3-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-policy0-python3-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-util-devel-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-util0-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-util0-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamdb-devel-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamdb0-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamdb0-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsmbclient-devel-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsmbclient0-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsmbclient0-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsmbconf-devel-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsmbconf0-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsmbconf0-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsmbldap-devel-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsmbldap2-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsmbldap2-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libtevent-util-devel-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libtevent-util0-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libtevent-util0-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libwbclient-devel-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libwbclient0-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libwbclient0-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-ad-dc-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-ad-dc-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-client-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-client-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-core-devel-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-debugsource-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-dsdb-modules-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-dsdb-modules-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-libs-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-libs-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-libs-python-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-libs-python-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-libs-python3-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-libs-python3-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-pidl-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-python-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-python-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-python3-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-python3-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-test-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-test-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-winbind-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-winbind-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 - openSUSE Leap 15.1 (noarch): samba-doc-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 - openSUSE Leap 15.1 (x86_64): libdcerpc-binding0-32bit-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libdcerpc-binding0-32bit-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libdcerpc-samr0-32bit-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libdcerpc-samr0-32bit-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libdcerpc0-32bit-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libdcerpc0-32bit-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libndr-krb5pac0-32bit-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libndr-krb5pac0-32bit-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libndr-nbt0-32bit-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libndr-nbt0-32bit-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libndr-standard0-32bit-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libndr-standard0-32bit-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libndr0-32bit-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libndr0-32bit-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libnetapi-devel-32bit-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libnetapi0-32bit-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libnetapi0-32bit-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-credentials0-32bit-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-credentials0-32bit-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-errors0-32bit-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-errors0-32bit-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-hostconfig0-32bit-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-hostconfig0-32bit-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-passdb0-32bit-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-passdb0-32bit-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-policy0-32bit-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-policy0-32bit-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-policy0-python3-32bit-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-policy0-python3-32bit-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-util0-32bit-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamba-util0-32bit-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamdb0-32bit-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsamdb0-32bit-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsmbclient0-32bit-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsmbclient0-32bit-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsmbconf0-32bit-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsmbconf0-32bit-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsmbldap2-32bit-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libsmbldap2-32bit-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libtevent-util0-32bit-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libtevent-util0-32bit-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libwbclient0-32bit-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 libwbclient0-32bit-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-ad-dc-32bit-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-ad-dc-32bit-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-ceph-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-ceph-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-client-32bit-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-client-32bit-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-libs-32bit-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-libs-32bit-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-libs-python-32bit-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-libs-python-32bit-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-libs-python3-32bit-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-libs-python3-32bit-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-winbind-32bit-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 samba-winbind-32bit-debuginfo-4.9.5+git.383.7b7f8f14df8-lp151.2.36.1 References: https://www.suse.com/security/cve/CVE-2020-14318.html https://www.suse.com/security/cve/CVE-2020-14323.html https://www.suse.com/security/cve/CVE-2020-14383.html https://bugzilla.suse.com/1173902 https://bugzilla.suse.com/1173994 https://bugzilla.suse.com/1177613

1 0

openSUSE-RU-2020:1815-1: moderate: Recommended update for autoyast2
by maintenance＠opensuse.org 02 Nov '20

02 Nov '20

openSUSE Recommended Update: Recommended update for autoyast2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1815-1 Rating: moderate References: #1172817 #1175714 #1175725 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for autoyast2 fixes the following issues: - Import general and report sections in case that some pre-script modified the profile (bsc#1175725) - When 'NetworkManager' is selected in the profile as the network backend to be used, the 'NetworkManager' package is added to the list of packages to be installed in case of missing (bsc#1172817) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1815=1 Package List: - openSUSE Leap 15.2 (noarch): autoyast2-4.2.45-lp152.2.6.1 autoyast2-installation-4.2.45-lp152.2.6.1 References: https://bugzilla.suse.com/1172817 https://bugzilla.suse.com/1175714 https://bugzilla.suse.com/1175725

1 0