November 2020 - openSUSE Updates - openSUSE Mailing Lists

[opensuse-updates] openSUSE-RU-2020:2077-1: moderate: Recommended update for brltty
by maintenance＠opensuse.org 27 Nov '20

27 Nov '20

openSUSE Recommended Update: Recommended update for brltty ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:2077-1 Rating: moderate References: #1177656 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for brltty fixes the following issues: - Add coreutils and util-linux to post requires to fix package installation. (bsc#1177656) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-2077=1 Package List: - openSUSE Leap 15.2 (noarch): brltty-lang-6.0-lp152.2.3.1 - openSUSE Leap 15.2 (x86_64): brlapi-devel-6.0-lp152.2.3.1 brlapi-java-6.0-lp152.2.3.1 brlapi-java-debuginfo-6.0-lp152.2.3.1 brltty-6.0-lp152.2.3.1 brltty-debuginfo-6.0-lp152.2.3.1 brltty-debugsource-6.0-lp152.2.3.1 brltty-driver-at-spi2-6.0-lp152.2.3.1 brltty-driver-at-spi2-debuginfo-6.0-lp152.2.3.1 brltty-driver-brlapi-6.0-lp152.2.3.1 brltty-driver-brlapi-debuginfo-6.0-lp152.2.3.1 brltty-driver-espeak-6.0-lp152.2.3.1 brltty-driver-espeak-debuginfo-6.0-lp152.2.3.1 brltty-driver-libbraille-6.0-lp152.2.3.1 brltty-driver-libbraille-debuginfo-6.0-lp152.2.3.1 brltty-driver-speech-dispatcher-6.0-lp152.2.3.1 brltty-driver-speech-dispatcher-debuginfo-6.0-lp152.2.3.1 brltty-driver-xwindow-6.0-lp152.2.3.1 brltty-driver-xwindow-debuginfo-6.0-lp152.2.3.1 brltty-utils-6.0-lp152.2.3.1 brltty-utils-debuginfo-6.0-lp152.2.3.1 libbrlapi0_7-6.0-lp152.2.3.1 libbrlapi0_7-debuginfo-6.0-lp152.2.3.1 ocaml-brlapi-6.0-lp152.2.3.1 ocaml-brlapi-debuginfo-6.0-lp152.2.3.1 python3-brlapi-6.0-lp152.2.3.1 python3-brlapi-debuginfo-6.0-lp152.2.3.1 tcl-brlapi-6.0-lp152.2.3.1 tcl-brlapi-debuginfo-6.0-lp152.2.3.1 xbrlapi-6.0-lp152.2.3.1 xbrlapi-debuginfo-6.0-lp152.2.3.1 References: https://bugzilla.suse.com/1177656

1 0

[opensuse-updates] openSUSE-SU-2020:2076-1: moderate: Security update for wireshark
by opensuse-security＠opensuse.org 27 Nov '20

27 Nov '20

openSUSE Security Update: Security update for wireshark ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:2076-1 Rating: moderate References: #1177406 #1178291 Cross-References: CVE-2020-26575 CVE-2020-28030 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for wireshark fixes the following issues: - wireshark was updated to 3.2.8: - CVE-2020-26575: Fixed an issue where FBZERO dissector was entering in infinite loop (bsc#1177406) - CVE-2020-28030: Fixed an issue where GQUIC dissector was crashing (bsc#1178291) * Infinite memory allocation while parsing this tcp packet This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-2076=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libwireshark13-3.2.8-lp152.2.9.1 libwireshark13-debuginfo-3.2.8-lp152.2.9.1 libwiretap10-3.2.8-lp152.2.9.1 libwiretap10-debuginfo-3.2.8-lp152.2.9.1 libwsutil11-3.2.8-lp152.2.9.1 libwsutil11-debuginfo-3.2.8-lp152.2.9.1 wireshark-3.2.8-lp152.2.9.1 wireshark-debuginfo-3.2.8-lp152.2.9.1 wireshark-debugsource-3.2.8-lp152.2.9.1 wireshark-devel-3.2.8-lp152.2.9.1 wireshark-ui-qt-3.2.8-lp152.2.9.1 wireshark-ui-qt-debuginfo-3.2.8-lp152.2.9.1 References: https://www.suse.com/security/cve/CVE-2020-26575.html https://www.suse.com/security/cve/CVE-2020-28030.html https://bugzilla.suse.com/1177406 https://bugzilla.suse.com/1178291

1 0

[opensuse-updates] openSUSE-RU-2020:2070-1: moderate: Recommended update for monitoring-plugins
by maintenance＠opensuse.org 27 Nov '20

27 Nov '20

openSUSE Recommended Update: Recommended update for monitoring-plugins ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:2070-1 Rating: moderate References: #1175828 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for monitoring-plugins fixes the following issues: - Fixed a bug for hosts, that ran out of swap memory and reported 'ok' when running monitoring-plugins with '-n ok'. (bsc#1175828) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-2070=1 Package List: - openSUSE Leap 15.2 (x86_64): monitoring-plugins-2.2-lp152.7.3.1 monitoring-plugins-all-2.2-lp152.7.3.1 monitoring-plugins-breeze-2.2-lp152.7.3.1 monitoring-plugins-by_ssh-2.2-lp152.7.3.1 monitoring-plugins-by_ssh-debuginfo-2.2-lp152.7.3.1 monitoring-plugins-cluster-2.2-lp152.7.3.1 monitoring-plugins-cluster-debuginfo-2.2-lp152.7.3.1 monitoring-plugins-common-2.2-lp152.7.3.1 monitoring-plugins-common-debuginfo-2.2-lp152.7.3.1 monitoring-plugins-cups-2.2-lp152.7.3.1 monitoring-plugins-dbi-2.2-lp152.7.3.1 monitoring-plugins-dbi-debuginfo-2.2-lp152.7.3.1 monitoring-plugins-dbi-mysql-2.2-lp152.7.3.1 monitoring-plugins-dbi-pgsql-2.2-lp152.7.3.1 monitoring-plugins-dbi-sqlite3-2.2-lp152.7.3.1 monitoring-plugins-debuginfo-2.2-lp152.7.3.1 monitoring-plugins-debugsource-2.2-lp152.7.3.1 monitoring-plugins-dhcp-2.2-lp152.7.3.1 monitoring-plugins-dhcp-debuginfo-2.2-lp152.7.3.1 monitoring-plugins-dig-2.2-lp152.7.3.1 monitoring-plugins-dig-debuginfo-2.2-lp152.7.3.1 monitoring-plugins-disk-2.2-lp152.7.3.1 monitoring-plugins-disk-debuginfo-2.2-lp152.7.3.1 monitoring-plugins-disk_smb-2.2-lp152.7.3.1 monitoring-plugins-dns-2.2-lp152.7.3.1 monitoring-plugins-dns-debuginfo-2.2-lp152.7.3.1 monitoring-plugins-dummy-2.2-lp152.7.3.1 monitoring-plugins-dummy-debuginfo-2.2-lp152.7.3.1 monitoring-plugins-extras-2.2-lp152.7.3.1 monitoring-plugins-file_age-2.2-lp152.7.3.1 monitoring-plugins-flexlm-2.2-lp152.7.3.1 monitoring-plugins-fping-2.2-lp152.7.3.1 monitoring-plugins-fping-debuginfo-2.2-lp152.7.3.1 monitoring-plugins-hpjd-2.2-lp152.7.3.1 monitoring-plugins-hpjd-debuginfo-2.2-lp152.7.3.1 monitoring-plugins-http-2.2-lp152.7.3.1 monitoring-plugins-http-debuginfo-2.2-lp152.7.3.1 monitoring-plugins-icmp-2.2-lp152.7.3.1 monitoring-plugins-icmp-debuginfo-2.2-lp152.7.3.1 monitoring-plugins-ide_smart-2.2-lp152.7.3.1 monitoring-plugins-ide_smart-debuginfo-2.2-lp152.7.3.1 monitoring-plugins-ifoperstatus-2.2-lp152.7.3.1 monitoring-plugins-ifstatus-2.2-lp152.7.3.1 monitoring-plugins-ircd-2.2-lp152.7.3.1 monitoring-plugins-ldap-2.2-lp152.7.3.1 monitoring-plugins-ldap-debuginfo-2.2-lp152.7.3.1 monitoring-plugins-load-2.2-lp152.7.3.1 monitoring-plugins-load-debuginfo-2.2-lp152.7.3.1 monitoring-plugins-log-2.2-lp152.7.3.1 monitoring-plugins-mailq-2.2-lp152.7.3.1 monitoring-plugins-mrtg-2.2-lp152.7.3.1 monitoring-plugins-mrtg-debuginfo-2.2-lp152.7.3.1 monitoring-plugins-mrtgtraf-2.2-lp152.7.3.1 monitoring-plugins-mrtgtraf-debuginfo-2.2-lp152.7.3.1 monitoring-plugins-mysql-2.2-lp152.7.3.1 monitoring-plugins-mysql-debuginfo-2.2-lp152.7.3.1 monitoring-plugins-nagios-2.2-lp152.7.3.1 monitoring-plugins-nagios-debuginfo-2.2-lp152.7.3.1 monitoring-plugins-nt-2.2-lp152.7.3.1 monitoring-plugins-nt-debuginfo-2.2-lp152.7.3.1 monitoring-plugins-ntp_peer-2.2-lp152.7.3.1 monitoring-plugins-ntp_peer-debuginfo-2.2-lp152.7.3.1 monitoring-plugins-ntp_time-2.2-lp152.7.3.1 monitoring-plugins-ntp_time-debuginfo-2.2-lp152.7.3.1 monitoring-plugins-nwstat-2.2-lp152.7.3.1 monitoring-plugins-nwstat-debuginfo-2.2-lp152.7.3.1 monitoring-plugins-oracle-2.2-lp152.7.3.1 monitoring-plugins-overcr-2.2-lp152.7.3.1 monitoring-plugins-overcr-debuginfo-2.2-lp152.7.3.1 monitoring-plugins-pgsql-2.2-lp152.7.3.1 monitoring-plugins-pgsql-debuginfo-2.2-lp152.7.3.1 monitoring-plugins-ping-2.2-lp152.7.3.1 monitoring-plugins-ping-debuginfo-2.2-lp152.7.3.1 monitoring-plugins-procs-2.2-lp152.7.3.1 monitoring-plugins-procs-debuginfo-2.2-lp152.7.3.1 monitoring-plugins-radius-2.2-lp152.7.3.1 monitoring-plugins-radius-debuginfo-2.2-lp152.7.3.1 monitoring-plugins-real-2.2-lp152.7.3.1 monitoring-plugins-real-debuginfo-2.2-lp152.7.3.1 monitoring-plugins-rpc-2.2-lp152.7.3.1 monitoring-plugins-sensors-2.2-lp152.7.3.1 monitoring-plugins-smtp-2.2-lp152.7.3.1 monitoring-plugins-smtp-debuginfo-2.2-lp152.7.3.1 monitoring-plugins-snmp-2.2-lp152.7.3.1 monitoring-plugins-snmp-debuginfo-2.2-lp152.7.3.1 monitoring-plugins-ssh-2.2-lp152.7.3.1 monitoring-plugins-ssh-debuginfo-2.2-lp152.7.3.1 monitoring-plugins-swap-2.2-lp152.7.3.1 monitoring-plugins-swap-debuginfo-2.2-lp152.7.3.1 monitoring-plugins-tcp-2.2-lp152.7.3.1 monitoring-plugins-tcp-debuginfo-2.2-lp152.7.3.1 monitoring-plugins-time-2.2-lp152.7.3.1 monitoring-plugins-time-debuginfo-2.2-lp152.7.3.1 monitoring-plugins-ups-2.2-lp152.7.3.1 monitoring-plugins-ups-debuginfo-2.2-lp152.7.3.1 monitoring-plugins-users-2.2-lp152.7.3.1 monitoring-plugins-users-debuginfo-2.2-lp152.7.3.1 monitoring-plugins-wave-2.2-lp152.7.3.1 References: https://bugzilla.suse.com/1175828

1 0

[opensuse-updates] openSUSE-RU-2020:2074-1: moderate: Recommended update for yast2-network
by maintenance＠opensuse.org 27 Nov '20

27 Nov '20

openSUSE Recommended Update: Recommended update for yast2-network ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:2074-1 Rating: moderate References: #1175206 #1175360 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for yast2-network fixes the following issues: - Fixed an issue with the autoyast parser to avoid crash with internal error on unknown node in interfaces section. (bsc#1175360) - Support for defined default when missing bootproto in AY. (bsc#1175206) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-2074=1 Package List: - openSUSE Leap 15.2 (noarch): yast2-network-4.2.83-lp152.2.15.1 References: https://bugzilla.suse.com/1175206 https://bugzilla.suse.com/1175360

1 0

[opensuse-updates] openSUSE-RU-2020:2071-1: moderate: Recommended update for multipath-tools
by maintenance＠opensuse.org 27 Nov '20

27 Nov '20

openSUSE Recommended Update: Recommended update for multipath-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:2071-1 Rating: moderate References: #1162896 #1178354 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for multipath-tools fixes the following issues: - Avoid reading files extensions other than '.conf' from config dir. (bsc#1162896) - Fix wrong usage of '%service_del_preun -n' macro in spec file. (bsc#1178354) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-2071=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): kpartx-0.8.2+140.5146cae-lp152.3.6.1 kpartx-debuginfo-0.8.2+140.5146cae-lp152.3.6.1 libdmmp-devel-0.8.2+140.5146cae-lp152.3.6.1 libdmmp0_2_0-0.8.2+140.5146cae-lp152.3.6.1 libdmmp0_2_0-debuginfo-0.8.2+140.5146cae-lp152.3.6.1 multipath-tools-0.8.2+140.5146cae-lp152.3.6.1 multipath-tools-debuginfo-0.8.2+140.5146cae-lp152.3.6.1 multipath-tools-debugsource-0.8.2+140.5146cae-lp152.3.6.1 multipath-tools-devel-0.8.2+140.5146cae-lp152.3.6.1 References: https://bugzilla.suse.com/1162896 https://bugzilla.suse.com/1178354

1 0

[opensuse-updates] openSUSE-RU-2020:2073-1: moderate: Recommended update for dmidecode
by maintenance＠opensuse.org 27 Nov '20

27 Nov '20

openSUSE Recommended Update: Recommended update for dmidecode ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:2073-1 Rating: moderate References: #1174257 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for dmidecode fixes the following issues: - Add partial support for SMBIOS 3.4.0. (bsc#1174257) - Skip details of uninstalled memory modules. (bsc#1174257) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-2073=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): dmidecode-3.2-lp152.6.3.1 dmidecode-debuginfo-3.2-lp152.6.3.1 dmidecode-debugsource-3.2-lp152.6.3.1 References: https://bugzilla.suse.com/1174257

1 0

[opensuse-updates] openSUSE-SU-2020:2067-1: moderate: Security update for go1.14
by opensuse-security＠opensuse.org 27 Nov '20

27 Nov '20

openSUSE Security Update: Security update for go1.14 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:2067-1 Rating: moderate References: #1164903 #1178750 #1178752 #1178753 Cross-References: CVE-2020-28362 CVE-2020-28366 CVE-2020-28367 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves three vulnerabilities and has one errata is now available. Description: This update for go1.14 fixes the following issues: - go1.14.12 (released 2020-11-12) includes security fixes to the cmd/go and math/big packages. * go#42553 math/big: panic during recursive division of very large numbers (bsc#1178750 CVE-2020-28362) * go#42560 cmd/go: arbitrary code can be injected into cgo generated files (bsc#1178752 CVE-2020-28367) * go#42557 cmd/go: improper validation of cgo flags can lead to remote code execution at build time (bsc#1178753 CVE-2020-28366) * go#42155 time: Location interprets wrong timezone (DST) with slim zoneinfo * go#42112 x/net/http2: the first write error on a connection will cause all subsequent write requests to fail blindly * go#41991 runtime: macOS-only segfault on 1.14+ with "split stack overflow" * go#41913 net/http: request.Clone doesn't deep copy TransferEncoding * go#41703 runtime: macOS syscall.Exec can get SIGILL due to preemption signal * go#41386 x/net/http2: connection-level flow control not returned if stream errors, causes server hang This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-2067=1 Package List: - openSUSE Leap 15.2 (x86_64): go1.14-1.14.12-lp152.2.12.1 go1.14-doc-1.14.12-lp152.2.12.1 go1.14-race-1.14.12-lp152.2.12.1 References: https://www.suse.com/security/cve/CVE-2020-28362.html https://www.suse.com/security/cve/CVE-2020-28366.html https://www.suse.com/security/cve/CVE-2020-28367.html https://bugzilla.suse.com/1164903 https://bugzilla.suse.com/1178750 https://bugzilla.suse.com/1178752 https://bugzilla.suse.com/1178753

1 0

[opensuse-updates] openSUSE-SU-2020:2064-1: moderate: Security update for perl-DBI
by opensuse-security＠opensuse.org 27 Nov '20

27 Nov '20

openSUSE Security Update: Security update for perl-DBI ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:2064-1 Rating: moderate References: #1176492 Cross-References: CVE-2014-10401 CVE-2014-10402 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for perl-DBI fixes the following issues: - DBD::File drivers can open files from folders other than those specifically passed via the f_dir attribute in the data source name (DSN). [bsc#1176492, CVE-2014-10401, CVE-2014-10402] This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-2064=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): perl-DBI-1.642-lp152.2.9.1 perl-DBI-debuginfo-1.642-lp152.2.9.1 perl-DBI-debugsource-1.642-lp152.2.9.1 References: https://www.suse.com/security/cve/CVE-2014-10401.html https://www.suse.com/security/cve/CVE-2014-10402.html https://bugzilla.suse.com/1176492

1 0

[opensuse-updates] openSUSE-SU-2020:2063-1: moderate: Security update for podman
by opensuse-security＠opensuse.org 27 Nov '20

27 Nov '20

openSUSE Security Update: Security update for podman ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:2063-1 Rating: moderate References: #1176804 #1178122 #1178392 Cross-References: CVE-2020-14370 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update for podman fixes the following issues: Security issue fixed: - This release resolves CVE-2020-14370, in which environment variables could be leaked between containers created using the Varlink API (bsc#1176804). Non-security issues fixed: - add dependency to timezone package or podman fails to build a container (bsc#1178122) - Install new auto-update system units - Update to v2.1.1 (bsc#1178392): * Changes - The `podman info` command now includes the cgroup manager Podman is using. * API - The REST API now includes a Server header in all responses. - Fixed a bug where the Libpod and Compat Attach endpoints could terminate early, before sending all output from the container. - Fixed a bug where the Compat Create endpoint for containers did not properly handle the Interactive parameter. - Fixed a bug where the Compat Kill endpoint for containers could continue to run after a fatal error. - Fixed a bug where the Limit parameter of the Compat List endpoint for Containers did not properly handle a limit of 0 (returning nothing, instead of all containers) [#7722]. - The Libpod Stats endpoint for containers is being deprecated and will be replaced by a similar endpoint with additional features in a future release. - Changes in v2.1.0 * Features - A new command, `podman image mount`, has been added. This allows for an image to be mounted, read-only, to inspect its contents without creating a container from it [#1433]. - The `podman save` and `podman load` commands can now create and load archives containing multiple images [#2669]. - Rootless Podman now supports all `podman network` commands, and rootless containers can now be joined to networks. - The performance of `podman build` on `ADD` and `COPY` instructions has been greatly improved, especially when a `.dockerignore` is present. - The `podman run` and `podman create` commands now support a new mode for the `--cgroups` option, `--cgroups=split`. Podman will create two cgroups under the cgroup it was launched in, one for the container and one for Conmon. This mode is useful for running Podman in a systemd unit, as it ensures that all processes are retained in systemd's cgroup hierarchy [#6400]. - The `podman run` and `podman create` commands can now specify options to slirp4netns by using the `--network` option as follows: `--net slirp4netns:opt1,opt2`. This allows for, among other things, switching the port forwarder used by slirp4netns away from rootlessport. - The `podman ps` command now features a new option, `--storage`, to show containers from Buildah, CRI-O and other applications. - The `podman run` and `podman create` commands now feature a `--sdnotify` option to control the behavior of systemd's sdnotify with containers, enabling improved support for Podman in `Type=notify` units. - The `podman run` command now features a `--preserve-fds` opton to pass file descriptors from the host into the container [#6458]. - The `podman run` and `podman create` commands can now create overlay volume mounts, by adding the `:O` option to a bind mount (e.g. `-v /test:/test:O`). Overlay volume mounts will mount a directory into a container from the host and allow changes to it, but not write those changes back to the directory on the host. - The `podman play kube` command now supports the Socket HostPath type [#7112]. - The `podman play kube` command now supports read-only mounts. - The `podman play kube` command now supports setting labels on pods from Kubernetes metadata labels. - The `podman play kube` command now supports setting container restart policy [#7656]. - The `podman play kube` command now properly handles `HostAlias` entries. - The `podman generate kube` command now adds entries to `/etc/hosts` from `--host-add` generated YAML as `HostAlias` entries. - The `podman play kube` and `podman generate kube` commands now properly support `shareProcessNamespace` to share the PID namespace in pods. - The `podman volume ls` command now supports the `dangling` filter to identify volumes that are dangling (not attached to any container). - The `podman run` and `podman create` commands now feature a `--umask` option to set the umask of the created container. - The `podman create` and `podman run` commands now feature a `--tz` option to set the timezone within the container [#5128]. - Environment variables for Podman can now be added in the `containers.conf` configuration file. - The `--mount` option of `podman run` and `podman create` now supports a new mount type, `type=devpts`, to add a `devpts` mount to the container. This is useful for containers that want to mount `/dev/` from the host into the container, but still create a terminal. - The `--security-opt` flag to `podman run` and `podman create` now supports a new option, `proc-opts`, to specify options for the container's `/proc` filesystem. - Podman with the `crun` OCI runtime now supports a new option to `podman run` and `podman create`, `--cgroup-conf`, which allows for advanced configuration of cgroups on cgroups v2 systems. - The `podman create` and `podman run` commands now support a `--override-variant` option, to override the architecture variant of the image that will be pulled and ran. - A new global option has been added to Podman, `--runtime-flags`, which allows for setting flags to use when the OCI runtime is called. - The `podman manifest add` command now supports the `--cert-dir`, `--auth-file`, `--creds`, and `--tls-verify` options. * Security - This release resolves CVE-2020-14370, in which environment variables could be leaked between containers created using the Varlink API. * Changes - Podman will now retry pulling an image 3 times if a pull fails due to network errors. - The `podman exec` command would previously print error messages (e.g. `exec session exited with non-zero exit code -1`) when the command run exited with a non-0 exit code. It no longer does this. The `podman exec` command will still exit with the same exit code as the command run in the container did. - Error messages when creating a container or pod with a name that is already in use have been improved. - For read-only containers running systemd init, Podman creates a tmpfs filesystem at `/run`. This was previously limited to 65k in size and mounted `noexec`, but is now unlimited size and mounted `exec`. - The `podman system reset` command no longer removes configuration files for rootless Podman. * API - The Libpod API version has been bumped to v2.0.0 due to a breaking change in the Image List API. - Docker-compatible Volume Endpoints (Create, Inspect, List, Remove, Prune) are now available! - Added an endpoint for generating systemd unit files for containers. - The `last` parameter to the Libpod container list endpoint now has an alias, `limit` [#6413]. - The Libpod image list API new returns timestamps in Unix format, as integer, as opposed to as strings - The Compat Inspect endpoint for containers now includes port information in NetworkSettings. - The Compat List endpoint for images now features limited support for the (deprecated) `filter` query parameter [#6797]. - Fixed a bug where the Compat Create endpoint for containers was not correctly handling bind mounts. - Fixed a bug where the Compat Create endpoint for containers would not return a 404 when the requested image was not present. - Fixed a bug where the Compat Create endpoint for containers did not properly handle Entrypoint and Command from images. - Fixed a bug where name history information was not properly added in the Libpod Image List endpoint. - Fixed a bug where the Libpod image search endpoint improperly populated the Description field of responses. - Added a `noTrunc` option to the Libpod image search endpoint. - Fixed a bug where the Pod List API would return null, instead of an empty array, when no pods were present [#7392]. - Fixed a bug where endpoints that hijacked would do perform the hijack too early, before being ready to send and receive data [#7195]. - Fixed a bug where Pod endpoints that can operate on multiple containers at once (e.g. Kill, Pause, Unpause, Stop) would not forward errors from individual containers that failed. - The Compat List endpoint for networks now supports filtering results [#7462]. - Fixed a bug where the Top endpoint for pods would return both a 500 and 404 when run on a non-existent pod. - Fixed a bug where Pull endpoints did not stream progress back to the client. - The Version endpoints (Libpod and Compat) now provide version in a format compatible with Docker. - All non-hijacking responses to API requests should not include headers with the version of the server. - Fixed a bug where Libpod and Compat Events endpoints did not send response headers until the first event occurred [#7263]. - Fixed a bug where the Build endpoints (Compat and Libpod) did not stream progress to the client. - Fixed a bug where the Stats endpoints (Compat and Libpod) did not properly handle clients disconnecting. - Fixed a bug where the Ignore parameter to the Libpod Stop endpoint was not performing properly. - Fixed a bug where the Compat Logs endpoint for containers did not stream its output in the correct format [#7196]. This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-2063=1 Package List: - openSUSE Leap 15.2 (noarch): podman-cni-config-2.1.1-lp152.4.6.1 - openSUSE Leap 15.2 (x86_64): podman-2.1.1-lp152.4.6.1 References: https://www.suse.com/security/cve/CVE-2020-14370.html https://bugzilla.suse.com/1176804 https://bugzilla.suse.com/1178122 https://bugzilla.suse.com/1178392

1 0

[opensuse-updates] openSUSE-OU-2020:2068-1: Optional update for vim
by maintenance＠opensuse.org 27 Nov '20

27 Nov '20

openSUSE Optional Update: Optional update for vim ______________________________________________________________________________ Announcement ID: openSUSE-OU-2020:2068-1 Rating: low References: #1166602 #1173256 #1174564 #1176549 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has four optional fixes can now be installed. Description: This update for vim doesn't fix any user visible issues and it is optional to install. - Introduce vim-small package with reduced requirements for small installations (bsc#1166602). - Stop owning /etc/vimrc so the old, distro provided config actually gets removed. - Own some dirs in vim-data-common so installation of vim-small doesn't leave not owned directories. (bsc#1173256) - Add vi as slave to update-alternatives so that every package has a matching "vi" symlink. (bsc#1174564, bsc#1176549) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Optional Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-2068=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): gvim-8.0.1568-lp152.8.3.1 gvim-debuginfo-8.0.1568-lp152.8.3.1 vim-8.0.1568-lp152.8.3.1 vim-debuginfo-8.0.1568-lp152.8.3.1 vim-debugsource-8.0.1568-lp152.8.3.1 vim-small-8.0.1568-lp152.8.3.1 vim-small-debuginfo-8.0.1568-lp152.8.3.1 - openSUSE Leap 15.2 (noarch): vim-data-8.0.1568-lp152.8.3.1 vim-data-common-8.0.1568-lp152.8.3.1 References: https://bugzilla.suse.com/1166602 https://bugzilla.suse.com/1173256 https://bugzilla.suse.com/1174564 https://bugzilla.suse.com/1176549

1 0