November 2020 - openSUSE Updates - openSUSE Mailing Lists

[opensuse-updates] openSUSE-SU-2020:2098-1: important: Security update for ucode-intel
by opensuse-security＠opensuse.org 28 Nov '20

28 Nov '20

openSUSE Security Update: Security update for ucode-intel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:2098-1 Rating: important References: #1170446 #1173592 #1173594 #1178971 Cross-References: CVE-2020-8695 CVE-2020-8696 CVE-2020-8698 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves three vulnerabilities and has one errata is now available. Description: This update for ucode-intel fixes the following issues: - Updated Intel CPU Microcode to 20201118 official release. (bsc#1178971) - Removed TGL/06-8c-01/80 due to functional issues with some OEM platforms. - Updated Intel CPU Microcode to 20201110 official release. - CVE-2020-8695: Fixed Intel RAPL sidechannel attack (SGX) (bsc#1170446) - CVE-2020-8698: Fixed Fast Store Forward Predictor INTEL-SA-00381 (bsc#1173594) - CVE-2020-8696: Vector Register Sampling Active INTEL-SA-00381 (bsc#1173592) - Release notes: - Security updates for [INTEL-SA-00381](https://www.intel.com/content/www/us/en/security-center/ad visory/intel-sa-00381.html). - Security updates for [INTEL-SA-00389](https://www.intel.com/content/www/us/en/security-center/ad visory/intel-sa-00389.html). - Update for functional issues. Refer to [Second Generation Intel�� Xeon�� Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details. - Update for functional issues. Refer to [Intel�� Xeon�� Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/613537) for details. - Update for functional issues. Refer to [Intel�� Xeon�� Processor E5 v3 Product Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e5-v3- spec-update.html?wapkw=processor+spec+update+e5) for details. - Update for functional issues. Refer to [10th Gen Intel�� Core�� Processor Families Specification Update](https://www.intel.com/content/www/us/en/products/docs/processors/co re/10th-gen-core-families-specification-update.html) for details. - Update for functional issues. Refer to [8th and 9th Gen Intel�� Core�� Processor Family Spec Update](https://www.intel.com/content/www/us/en/products/docs/processors/co re/8th-gen-core-spec-update.html) for details. - Update for functional issues. Refer to [7th Gen and 8th Gen (U Quad-Core) Intel�� Processor Families Specification Update](https://www.intel.com/content/www/us/en/processors/core/7th-gen-cor e-family-spec-update.html) for details. - Update for functional issues. Refer to [6th Gen Intel�� Processor Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/332689) for details. - Update for functional issues. Refer to [Intel�� Xeon�� E3-1200 v6 Processor Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e3-120 0v6-spec-update.html) for details. - Update for functional issues. Refer to [Intel�� Xeon�� E-2100 and E-2200 Processor Family Specification Update](https://www.intel.com/content/www/us/en/products/docs/processors/xe on/xeon-e-2100-specification-update.html) for details. ### New Platforms | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | CPX-SP | A1 | 06-55-0b/bf | | 0700001e | Xeon Scalable Gen3 | LKF | B2/B3 | 06-8a-01/10 | | 00000028 | Core w/Hybrid Technology | TGL | B1 | 06-8c-01/80 | | 00000068 | Core Gen11 Mobile | CML-H | R1 | 06-a5-02/20 | | 000000e0 | Core Gen10 Mobile | CML-S62 | G1 | 06-a5-03/22 | | 000000e0 | Core Gen10 | CML-S102 | Q0 | 06-a5-05/22 | | 000000e0 | Core Gen10 | CML-U62 V2 | K0 | 06-a6-01/80 | | 000000e0 | Core Gen10 Mobile ### Updated Platforms | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | HSX-E/EP | Cx/M1 | 06-3f-02/6f | 00000043 | 00000044 | Core Gen4 X series; Xeon E5 v3 | SKL-U/Y | D0 | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile | SKL-U23e | K1 | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile | SKX-SP | B1 | 06-55-03/97 | 01000157 | 01000159 | Xeon Scalable | SKX-SP | H0/M0/U0 | 06-55-04/b7 | 02006906 | 02006a08 | Xeon Scalable | SKX-D | M1 | 06-55-04/b7 | 02006906 | 02006a08 | Xeon D-21xx | CLX-SP | B0 | 06-55-06/bf | 04002f01 | 04003003 | Xeon Scalable Gen2 | CLX-SP | B1 | 06-55-07/bf | 05002f01 | 05003003 | Xeon Scalable Gen2 | APL | D0 | 06-5c-09/03 | 00000038 | 00000040 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx | APL | E0 | 06-5c-0a/03 | 00000016 | 0000001e | Atom x5-E39xx | SKL-H/S | R0/N0 | 06-5e-03/36 | 000000d6 | 000000e2 | Core Gen6; Xeon E3 v5 | GKL-R | R0 | 06-7a-08/01 | 00000016 | 00000018 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120 | ICL-U/Y | D1 | 06-7e-05/80 | 00000078 | 000000a0 | Core Gen10 Mobile | AML-Y22 | H0 | 06-8e-09/10 | 000000d6 | 000000de | Core Gen8 Mobile | KBL-U/Y | H0 | 06-8e-09/c0 | 000000d6 | 000000de | Core Gen7 Mobile | CFL-U43e | D0 | 06-8e-0a/c0 | 000000d6 | 000000e0 | Core Gen8 Mobile | WHL-U | W0 | 06-8e-0b/d0 | 000000d6 | 000000de | Core Gen8 Mobile | AML-Y42 | V0 | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile | CML-Y42 | V0 | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile | WHL-U | V0 | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen8 Mobile | KBL-G/H/S/E3 | B0 | 06-9e-09/2a | 000000d6 | 000000de | Core Gen7; Xeon E3 v6 | CFL-H/S/E3 | U0 | 06-9e-0a/22 | 000000d6 | 000000de | Core Gen8 Desktop, Mobile, Xeon E | CFL-S | B0 | 06-9e-0b/02 | 000000d6 | 000000de | Core Gen8 | CFL-H/S | P0 | 06-9e-0c/22 | 000000d6 | 000000de | Core Gen9 | CFL-H | R0 | 06-9e-0d/22 | 000000d6 | 000000de | Core Gen9 Mobile | CML-U62 | A0 | 06-a6-00/80 | 000000ca | 000000e0 | Core Gen10 Mobile This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-2098=1 Package List: - openSUSE Leap 15.1 (x86_64): ucode-intel-20201118-lp151.2.33.1 References: https://www.suse.com/security/cve/CVE-2020-8695.html https://www.suse.com/security/cve/CVE-2020-8696.html https://www.suse.com/security/cve/CVE-2020-8698.html https://bugzilla.suse.com/1170446 https://bugzilla.suse.com/1173592 https://bugzilla.suse.com/1173594 https://bugzilla.suse.com/1178971

1 0

[opensuse-updates] openSUSE-RU-2020:2095-1: moderate: Recommended update for postgresql-pgagent
by maintenance＠opensuse.org 28 Nov '20

28 Nov '20

openSUSE Recommended Update: Recommended update for postgresql-pgagent ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:2095-1 Rating: moderate References: #1174996 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for postgresql-pgagent provides the following fixes: - Do not build postgresql11 and postgresql12 flavors where they're not available. - Drop postgresql94 flavor: pgsql 9.4 is EOL. - adding postgresql12 to _multibuild (bsc#1174996) - Remove postgresql93 from multibuild and add postgresql11. - Fix build with PostgreSQL 11. This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-2095=1 Package List: - openSUSE Leap 15.1 (x86_64): postgresql10-pgagent-4.0.0-lp151.2.4.1 postgresql10-pgagent-debuginfo-4.0.0-lp151.2.4.1 postgresql10-pgagent-debugsource-4.0.0-lp151.2.4.1 postgresql12-pgagent-4.0.0-lp151.2.4.1 postgresql12-pgagent-debuginfo-4.0.0-lp151.2.4.1 postgresql12-pgagent-debugsource-4.0.0-lp151.2.4.1 postgresql96-pgagent-4.0.0-lp151.2.4.1 postgresql96-pgagent-debuginfo-4.0.0-lp151.2.4.1 postgresql96-pgagent-debugsource-4.0.0-lp151.2.4.1 References: https://bugzilla.suse.com/1174996

1 0

[opensuse-updates] openSUSE-RU-2020:2094-1: moderate: Recommended update for psi+
by maintenance＠opensuse.org 28 Nov '20

28 Nov '20

openSUSE Recommended Update: Recommended update for psi+ ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:2094-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for psi+ fixes the following issues: psi+ was updated to 1.4.877. * Fixed psi autostart on Linux OS * An attempt to fix text drag-n-drop in OS Linux with Qt>=5.11 * fixed drag'n'drop for sharing * PEP options updated. Added possibility to enable/disable tunes from options * Update sound record button on chatedit type switching * Fixed potential crash on audio histogram normalization * Added actions to desktop file * Fixed crash on roster contact search * make histogram working * Jingle over http (#464) * Removed A Tip Of The Day dialog as outdated * Rubbish removed * themeserver removed * Enabled http server on all unix systems * Fixed text label emptiness at start of recording * File sharing for arbitrary mimetype * Voice messaging UI * Deprecate http upload plugin in favor of internal media sharing * Auto accept jingle download requests for shared files * save downloaded share to cache * Handle only audio references for now * Make audio messages working * Work in progress on reference display * Fixed crash on apply of terminated session * Fixed crash on double delete of httpupload * Remove temporary shared files * Send all shared items in one message * Send references in one message * iris relinked * qite relinked This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-2094=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 x86_64): psi+-1.4.885+0-bp152.2.4.2 psi+-plugins-attentionplugin-1.4.885+0-bp152.2.4.2 psi+-plugins-autoreplyplugin-1.4.885+0-bp152.2.4.2 psi+-plugins-birthdayreminderplugin-1.4.885+0-bp152.2.4.2 psi+-plugins-chessplugin-1.4.885+0-bp152.2.4.2 psi+-plugins-cleanerplugin-1.4.885+0-bp152.2.4.2 psi+-plugins-clientswitcherplugin-1.4.885+0-bp152.2.4.2 psi+-plugins-conferenceloggerplugin-1.4.885+0-bp152.2.4.2 psi+-plugins-contentdownloaderplugin-1.4.885+0-bp152.2.4.2 psi+-plugins-devel-1.4.885+0-bp152.2.4.2 psi+-plugins-enummessagesplugin-1.4.885+0-bp152.2.4.2 psi+-plugins-extendedmenuplugin-1.4.885+0-bp152.2.4.2 psi+-plugins-extendedoptionsplugin-1.4.885+0-bp152.2.4.2 psi+-plugins-gnupgplugin-1.4.885+0-bp152.2.4.2 psi+-plugins-gomokugameplugin-1.4.885+0-bp152.2.4.2 psi+-plugins-historykeeperplugin-1.4.885+0-bp152.2.4.2 psi+-plugins-icqdieplugin-1.4.885+0-bp152.2.4.2 psi+-plugins-imageplugin-1.4.885+0-bp152.2.4.2 psi+-plugins-imagepreviewplugin-1.4.885+0-bp152.2.4.2 psi+-plugins-jabberdiskplugin-1.4.885+0-bp152.2.4.2 psi+-plugins-juickplugin-1.4.885+0-bp152.2.4.2 psi+-plugins-messagefilterplugin-1.4.885+0-bp152.2.4.2 psi+-plugins-omemoplugin-1.4.885+0-bp152.2.4.2 psi+-plugins-otrplugin-1.4.885+0-bp152.2.4.2 psi+-plugins-pepchangenotifyplugin-1.4.885+0-bp152.2.4.2 psi+-plugins-qipxstatusesplugin-1.4.885+0-bp152.2.4.2 psi+-plugins-screenshotplugin-1.4.885+0-bp152.2.4.2 psi+-plugins-skinsplugin-1.4.885+0-bp152.2.4.2 psi+-plugins-stopspamplugin-1.4.885+0-bp152.2.4.2 psi+-plugins-storagenotesplugin-1.4.885+0-bp152.2.4.2 psi+-plugins-translateplugin-1.4.885+0-bp152.2.4.2 psi+-plugins-videostatusplugin-1.4.885+0-bp152.2.4.2 psi+-plugins-watcherplugin-1.4.885+0-bp152.2.4.2 - openSUSE Backports SLE-15-SP2 (noarch): psi+-data-1.4.885+0-bp152.2.4.2 psi+-lang-1.4.877+2-bp152.2.4.1 References:

1 0

[opensuse-updates] openSUSE-SU-2020:2096-1: important: Security update for MozillaThunderbird
by opensuse-security＠opensuse.org 28 Nov '20

28 Nov '20

openSUSE Security Update: Security update for MozillaThunderbird ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:2096-1 Rating: important References: #1178894 Cross-References: CVE-2020-15999 CVE-2020-16012 CVE-2020-26951 CVE-2020-26953 CVE-2020-26956 CVE-2020-26958 CVE-2020-26959 CVE-2020-26960 CVE-2020-26961 CVE-2020-26965 CVE-2020-26966 CVE-2020-26968 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes 12 vulnerabilities is now available. Description: This update for MozillaThunderbird fixes the following issues: TODO - Mozilla Thunderbird 78.5.0 * new: OpenPGP: Added option to disable attaching the public key to a signed message (bmo#1654950) * new: MailExtensions: "compose_attachments" context added to Menus API (bmo#1670822) * new: MailExtensions: Menus API now available on displayed messages (bmo#1670825) * changed: MailExtensions: browser.tabs.create will now wait for "mail-delayed-startup-finished" event (bmo#1674407) * fixed: OpenPGP: Support for inline PGP messages improved (bmo#1672851) * fixed: OpenPGP: Message security dialog showed unverified keys as unavailable (bmo#1675285) * fixed: Chat: New chat contact menu item did not function (bmo#1663321) * fixed: Various theme and usability improvements (bmo#1673861) * fixed: Various security fixes MFSA 2020-52 (bsc#1178894) * CVE-2020-26951 (bmo#1667113) Parsing mismatches could confuse and bypass security sanitizer for chrome privileged code * CVE-2020-16012 (bmo#1642028) Variable time processing of cross-origin images during drawImage calls * CVE-2020-26953 (bmo#1656741) Fullscreen could be enabled without displaying the security UI * CVE-2020-26956 (bmo#1666300) XSS through paste (manual and clipboard API) * CVE-2020-26958 (bmo#1669355) Requests intercepted through ServiceWorkers lacked MIME type restrictions * CVE-2020-26959 (bmo#1669466) Use-after-free in WebRequestService * CVE-2020-26960 (bmo#1670358) Potential use-after-free in uses of nsTArray * CVE-2020-15999 (bmo#1672223) Heap buffer overflow in freetype * CVE-2020-26961 (bmo#1672528) DoH did not filter IPv4 mapped IP Addresses * CVE-2020-26965 (bmo#1661617) Software keyboards may have remembered typed passwords * CVE-2020-26966 (bmo#1663571) Single-word search queries were also broadcast to local network * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697, bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479, bmo#1671923) Memory safety bugs fixed in Thunderbird 78.5 - Mozilla Thunderbird 78.4.3 * fixed: User interface was inconsistent when switching from the default theme to the dark theme and back to the default theme (bmo#1659282) * fixed: Email subject would disappear when hovering over it with the mouse when using Windows 7 Classic theme (bmo#1675970) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-2096=1 Package List: - openSUSE Leap 15.2 (x86_64): MozillaThunderbird-78.5.0-lp152.2.19.1 MozillaThunderbird-debuginfo-78.5.0-lp152.2.19.1 MozillaThunderbird-debugsource-78.5.0-lp152.2.19.1 MozillaThunderbird-translations-common-78.5.0-lp152.2.19.1 MozillaThunderbird-translations-other-78.5.0-lp152.2.19.1 References: https://www.suse.com/security/cve/CVE-2020-15999.html https://www.suse.com/security/cve/CVE-2020-16012.html https://www.suse.com/security/cve/CVE-2020-26951.html https://www.suse.com/security/cve/CVE-2020-26953.html https://www.suse.com/security/cve/CVE-2020-26956.html https://www.suse.com/security/cve/CVE-2020-26958.html https://www.suse.com/security/cve/CVE-2020-26959.html https://www.suse.com/security/cve/CVE-2020-26960.html https://www.suse.com/security/cve/CVE-2020-26961.html https://www.suse.com/security/cve/CVE-2020-26965.html https://www.suse.com/security/cve/CVE-2020-26966.html https://www.suse.com/security/cve/CVE-2020-26968.html https://bugzilla.suse.com/1178894

1 0

[opensuse-updates] openSUSE-RU-2020:2093-1: moderate: Recommended update for int10h-oldschoolpc-fonts
by maintenance＠opensuse.org 28 Nov '20

28 Nov '20

openSUSE Recommended Update: Recommended update for int10h-oldschoolpc-fonts ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:2093-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for int10h-oldschoolpc-fonts fixes the following issues: Update to release 2.2 * MxPlus line of fonts: The characters ��, ��, ��, �� now consistently use the modified form of the h��ek/caron diacritic (as used in Czech/Slovak). * New fonts: * PC-compatible computers: NEC MultiSpeed (4 fonts), Schneider EuroPC (3 fonts), Tandy 1000 Video I -2x (1 font), Tandy 1000 Video II -2x (1 font) * PC semi-compatibles: DEC Rainbow 100 (4 fonts), HP 150 Touchscreen (1 font), Robotron A7100 (1 font), Tandy 2000 graphics modes (3 fonts), Zenith Z-100 (2 fonts) Update to release 2.1 * New fonts: Acer 710 Mono, HP 100LX, Olivetti MS-DOS, Sanyo MBC-55x, Sanyo MBC-775, Sharp PC-3000, TeleVideo Tele-PC, CL Eagle II, CL Eagle III, CL Stingray, InteGraphics VGA, PhoenixVGA, Sigma Designs RealMagic, STB AutoEGA, early Trident/TVGA8800CS, Tseng EVA-480 ET2000, Various/ACM VGA, Acorn BBC Master 512, Atari Portfolio, Philips :YES G-2x, Texas Instruments PC/PPC, Wang Professional Computer. * Removed Olivetti MxVGA: superseded by CL Stingray. - Switched to the Mx437/MxPlus variant font files and made Px437/PxPlus a fontconfig-level alias for compatibility. Update to release 2.0 * Added new variants: Ac (aspect corrected) and Mx (Mixed outline + bitmap). * New fonts (overview): AMI EGA, Acer-*, Apricot-*, Compaq Port3, DOS V, EpsonMGA, EverexME (like EGA), IBM Model30, IBM PS/55, LE Model D, NEC APC3, Nix8810, Olivetti M15/MX, Trident. * VGA SquarePx was renamed to AST PremiumExec. * ToshibaLCD was renamed to ToshibaSat; a few other minor renames. - All pre-stretched fonts (both Ac or Px-2X/Px-2Y variants) were moved to the -stretched subpackage. - Expand font scaling notes and separate out to extra file (there is a lot to talk about). Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-2093=1 Package List: - openSUSE Leap 15.2 (noarch): int10h-oldschoolpc-fonts-2.2-lp152.4.3.1 int10h-oldschoolpc-fonts-stretched-2.2-lp152.4.3.1 References:

1 0

[opensuse-updates] openSUSE-RU-2020:2091-1: moderate: Recommended update for systemd
by maintenance＠opensuse.org 28 Nov '20

28 Nov '20

openSUSE Recommended Update: Recommended update for systemd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:2091-1 Rating: moderate References: #1177458 #1177490 #1177510 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for systemd fixes the following issues: - build-sys: optionally disable support of journal over the network (bsc#1177458) - ask-password: prevent buffer overflow when reading from keyring (bsc#1177510) - mount: don't propagate errors from mount_setup_unit() further up - Rely on the new build option --disable-remote for journal_remote This allows to drop the workaround that consisted in cleaning journal-upload files and {sysusers.d,tmpfiles.d}/systemd-remote.conf manually when 'journal_remote' support was disabled. - Move journal-{remote,upload}.conf.5.gz man pages into systemd-journal_remote sub package - Make sure {sysusers.d,tmpfiles.d}/systemd-remote.conf are not shipped with --without=journal_remote (bsc#1177458) These files were incorrectly packaged in the main package when systemd-journal_remote was disabled. - Make use of %{_unitdir} and %{_sysusersdir} - Remove mq-deadline selection from 60-io-scheduler.rules (bsc#1177490) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-2091=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libsystemd0-234-lp152.31.13.1 libsystemd0-debuginfo-234-lp152.31.13.1 libsystemd0-mini-234-lp152.31.13.1 libsystemd0-mini-debuginfo-234-lp152.31.13.1 libudev-devel-234-lp152.31.13.1 libudev-mini-devel-234-lp152.31.13.1 libudev-mini1-234-lp152.31.13.1 libudev-mini1-debuginfo-234-lp152.31.13.1 libudev1-234-lp152.31.13.1 libudev1-debuginfo-234-lp152.31.13.1 nss-myhostname-234-lp152.31.13.1 nss-myhostname-debuginfo-234-lp152.31.13.1 nss-mymachines-234-lp152.31.13.1 nss-mymachines-debuginfo-234-lp152.31.13.1 nss-systemd-234-lp152.31.13.1 nss-systemd-debuginfo-234-lp152.31.13.1 systemd-234-lp152.31.13.1 systemd-container-234-lp152.31.13.1 systemd-container-debuginfo-234-lp152.31.13.1 systemd-coredump-234-lp152.31.13.1 systemd-coredump-debuginfo-234-lp152.31.13.1 systemd-debuginfo-234-lp152.31.13.1 systemd-debugsource-234-lp152.31.13.1 systemd-devel-234-lp152.31.13.1 systemd-journal-remote-234-lp152.31.13.1 systemd-journal-remote-debuginfo-234-lp152.31.13.1 systemd-logger-234-lp152.31.13.1 systemd-mini-234-lp152.31.13.1 systemd-mini-container-mini-234-lp152.31.13.1 systemd-mini-container-mini-debuginfo-234-lp152.31.13.1 systemd-mini-coredump-mini-234-lp152.31.13.1 systemd-mini-coredump-mini-debuginfo-234-lp152.31.13.1 systemd-mini-debuginfo-234-lp152.31.13.1 systemd-mini-debugsource-234-lp152.31.13.1 systemd-mini-devel-234-lp152.31.13.1 systemd-mini-sysvinit-234-lp152.31.13.1 systemd-network-234-lp152.31.13.1 systemd-network-debuginfo-234-lp152.31.13.1 systemd-sysvinit-234-lp152.31.13.1 udev-234-lp152.31.13.1 udev-debuginfo-234-lp152.31.13.1 udev-mini-234-lp152.31.13.1 udev-mini-debuginfo-234-lp152.31.13.1 - openSUSE Leap 15.2 (noarch): systemd-bash-completion-234-lp152.31.13.1 systemd-mini-bash-completion-234-lp152.31.13.1 - openSUSE Leap 15.2 (x86_64): libsystemd0-32bit-234-lp152.31.13.1 libsystemd0-32bit-debuginfo-234-lp152.31.13.1 libudev-devel-32bit-234-lp152.31.13.1 libudev1-32bit-234-lp152.31.13.1 libudev1-32bit-debuginfo-234-lp152.31.13.1 nss-myhostname-32bit-234-lp152.31.13.1 nss-myhostname-32bit-debuginfo-234-lp152.31.13.1 nss-mymachines-32bit-234-lp152.31.13.1 nss-mymachines-32bit-debuginfo-234-lp152.31.13.1 systemd-32bit-234-lp152.31.13.1 systemd-32bit-debuginfo-234-lp152.31.13.1 References: https://bugzilla.suse.com/1177458 https://bugzilla.suse.com/1177490 https://bugzilla.suse.com/1177510

1 0

[opensuse-updates] openSUSE-SU-2020:2092-1: moderate: Security update for c-ares
by opensuse-security＠opensuse.org 28 Nov '20

28 Nov '20

openSUSE Security Update: Security update for c-ares ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:2092-1 Rating: moderate References: #1178882 Cross-References: CVE-2020-8277 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for c-ares fixes the following issues: Version update to 1.17.0 * CVE-2020-8277: Fixed a Denial of Service through DNS request (bsc#1178882) * For further details see https://c-ares.haxx.se/changelog.html This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-2092=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): c-ares-debugsource-1.17.0-lp152.2.3.1 c-ares-devel-1.17.0-lp152.2.3.1 c-ares-utils-1.17.0-lp152.2.3.1 c-ares-utils-debuginfo-1.17.0-lp152.2.3.1 libcares2-1.17.0-lp152.2.3.1 libcares2-debuginfo-1.17.0-lp152.2.3.1 - openSUSE Leap 15.2 (x86_64): libcares2-32bit-1.17.0-lp152.2.3.1 libcares2-32bit-debuginfo-1.17.0-lp152.2.3.1 References: https://www.suse.com/security/cve/CVE-2020-8277.html https://bugzilla.suse.com/1178882

1 0

[opensuse-updates] openSUSE-SU-2020:2090-1: moderate: Security update for mariadb
by opensuse-security＠opensuse.org 28 Nov '20

28 Nov '20

openSUSE Security Update: Security update for mariadb ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:2090-1 Rating: moderate References: #1175596 #1177472 #1178428 Cross-References: CVE-2020-14765 CVE-2020-14776 CVE-2020-14789 CVE-2020-14812 CVE-2020-15180 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for mariadb and mariadb-connector-c fixes the following issues: - Update mariadb to 10.2.36 GA [bsc#1177472, bsc#1178428] fixing for the following security vulnerabilities: CVE-2020-14812, CVE-2020-14765, CVE-2020-14776, CVE-2020-14789 CVE-2020-15180 - Update mariadb-connector-c to 3.1.11 [bsc#1177472 and bsc#1178428] This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-2090=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libmariadb-devel-3.1.11-lp152.2.3.1 libmariadb-devel-debuginfo-3.1.11-lp152.2.3.1 libmariadb3-3.1.11-lp152.2.3.1 libmariadb3-debuginfo-3.1.11-lp152.2.3.1 libmariadb_plugins-3.1.11-lp152.2.3.1 libmariadb_plugins-debuginfo-3.1.11-lp152.2.3.1 libmariadbprivate-3.1.11-lp152.2.3.1 libmariadbprivate-debuginfo-3.1.11-lp152.2.3.1 libmysqld-devel-10.2.36-lp152.2.6.1 libmysqld19-10.2.36-lp152.2.6.1 libmysqld19-debuginfo-10.2.36-lp152.2.6.1 mariadb-10.2.36-lp152.2.6.1 mariadb-bench-10.2.36-lp152.2.6.1 mariadb-bench-debuginfo-10.2.36-lp152.2.6.1 mariadb-client-10.2.36-lp152.2.6.1 mariadb-client-debuginfo-10.2.36-lp152.2.6.1 mariadb-connector-c-debugsource-3.1.11-lp152.2.3.1 mariadb-debuginfo-10.2.36-lp152.2.6.1 mariadb-debugsource-10.2.36-lp152.2.6.1 mariadb-galera-10.2.36-lp152.2.6.1 mariadb-test-10.2.36-lp152.2.6.1 mariadb-test-debuginfo-10.2.36-lp152.2.6.1 mariadb-tools-10.2.36-lp152.2.6.1 mariadb-tools-debuginfo-10.2.36-lp152.2.6.1 - openSUSE Leap 15.2 (x86_64): libmariadb3-32bit-3.1.11-lp152.2.3.1 libmariadb3-32bit-debuginfo-3.1.11-lp152.2.3.1 - openSUSE Leap 15.2 (noarch): mariadb-errormessages-10.2.36-lp152.2.6.1 References: https://www.suse.com/security/cve/CVE-2020-14765.html https://www.suse.com/security/cve/CVE-2020-14776.html https://www.suse.com/security/cve/CVE-2020-14789.html https://www.suse.com/security/cve/CVE-2020-14812.html https://www.suse.com/security/cve/CVE-2020-15180.html https://bugzilla.suse.com/1175596 https://bugzilla.suse.com/1177472 https://bugzilla.suse.com/1178428

1 0

[opensuse-updates] openSUSE-RU-2020:2087-1: moderate: Recommended update for dracut
by maintenance＠opensuse.org 28 Nov '20

28 Nov '20

openSUSE Recommended Update: Recommended update for dracut ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:2087-1 Rating: moderate References: #1164076 #1177811 #1178217 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for dracut fixes the following issues: - Update from version 049.1+suse.156.g7d852636 to version 049.1+suse.171.g65b2addf: - dracut.sh: FIPS workaround for openssl-libs (bsc#1178217) - 01fips: turn info calls into fips_info calls (bsc#1164076) - 00systemd: add missing cryptsetup-related targets (bsc#1177811) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-2087=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): dracut-049.1+suse.171.g65b2addf-lp152.2.12.1 dracut-debuginfo-049.1+suse.171.g65b2addf-lp152.2.12.1 dracut-debugsource-049.1+suse.171.g65b2addf-lp152.2.12.1 dracut-extra-049.1+suse.171.g65b2addf-lp152.2.12.1 dracut-fips-049.1+suse.171.g65b2addf-lp152.2.12.1 dracut-ima-049.1+suse.171.g65b2addf-lp152.2.12.1 dracut-tools-049.1+suse.171.g65b2addf-lp152.2.12.1 References: https://bugzilla.suse.com/1164076 https://bugzilla.suse.com/1177811 https://bugzilla.suse.com/1178217

1 0

[opensuse-updates] openSUSE-RU-2020:2088-1: important: Recommended update for kdump
by maintenance＠opensuse.org 28 Nov '20

28 Nov '20

openSUSE Recommended Update: Recommended update for kdump ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:2088-1 Rating: important References: #1173914 #1177196 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for kdump fixes the following issues: - Remove `console=hvc0` from command line. (bsc#1173914) - Set serial console from Xen command line. (bsc#1173914) - Do not add `rd.neednet=1` to dracut command line. (bsc#1177196) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-2088=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): kdump-0.9.0-lp152.7.3.1 kdump-debuginfo-0.9.0-lp152.7.3.1 kdump-debugsource-0.9.0-lp152.7.3.1 References: https://bugzilla.suse.com/1173914 https://bugzilla.suse.com/1177196

1 0