December 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2020:2305-1: moderate: Recommended update for tcl
by maintenance＠opensuse.org 21 Dec '20

21 Dec '20

openSUSE Recommended Update: Recommended update for tcl ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:2305-1 Rating: moderate References: #1179615 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for tcl fixes the following issue: - `TCL_LIBS` in `tclConfig.sh` possibly breaks build on newer service packs. (bsc#1179615) It is not needed for linking to a dynamic `libtcl` anyway and now it is empty. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-2305=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): tcl-8.6.7-lp152.7.3.1 tcl-debuginfo-8.6.7-lp152.7.3.1 tcl-debugsource-8.6.7-lp152.7.3.1 tcl-devel-8.6.7-lp152.7.3.1 - openSUSE Leap 15.2 (x86_64): tcl-32bit-8.6.7-lp152.7.3.1 tcl-32bit-debuginfo-8.6.7-lp152.7.3.1 References: https://bugzilla.suse.com/1179615

1 0

openSUSE-SU-2020:2310-1: important: Security update for webkit2gtk3
by opensuse-security＠opensuse.org 21 Dec '20

21 Dec '20

openSUSE Security Update: Security update for webkit2gtk3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:2310-1 Rating: important References: #1171531 #1177087 #1179122 #1179451 Cross-References: CVE-2020-13543 CVE-2020-13584 CVE-2020-9948 CVE-2020-9951 CVE-2020-9983 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for webkit2gtk3 fixes the following issues: -webkit2gtk3 was updated to version 2.30.3 (bsc#1179122 bsc#1179451): - CVE-2021-13543: Fixed a use after free which could have led to arbitrary code execution. - CVE-2021-13584: Fixed a use after free which could have led to arbitrary code execution. - CVE-2021-9948: Fixed a type confusion which could have led to arbitrary code execution. - CVE-2021-9951: Fixed a use after free which could have led to arbitrary code execution. - CVE-2021-9983: Fixed an out of bounds write which could have led to arbitrary code execution. - Have the libwebkit2gtk package require libjavascriptcoregtk of the same version (bsc#1171531). - Enable c_loop on aarch64: currently needed for compilation to succeed with JIT disabled. Also disable sampling profiler, since it conflicts with c_loop (bsc#1177087). This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-2310=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libjavascriptcoregtk-4_0-18-2.30.3-lp152.2.7.3 libjavascriptcoregtk-4_0-18-debuginfo-2.30.3-lp152.2.7.3 libwebkit2gtk-4_0-37-2.30.3-lp152.2.7.3 libwebkit2gtk-4_0-37-debuginfo-2.30.3-lp152.2.7.3 typelib-1_0-JavaScriptCore-4_0-2.30.3-lp152.2.7.3 typelib-1_0-WebKit2-4_0-2.30.3-lp152.2.7.3 typelib-1_0-WebKit2WebExtension-4_0-2.30.3-lp152.2.7.3 webkit-jsc-4-2.30.3-lp152.2.7.3 webkit-jsc-4-debuginfo-2.30.3-lp152.2.7.3 webkit2gtk-4_0-injected-bundles-2.30.3-lp152.2.7.3 webkit2gtk-4_0-injected-bundles-debuginfo-2.30.3-lp152.2.7.3 webkit2gtk3-debugsource-2.30.3-lp152.2.7.3 webkit2gtk3-devel-2.30.3-lp152.2.7.3 webkit2gtk3-minibrowser-2.30.3-lp152.2.7.3 webkit2gtk3-minibrowser-debuginfo-2.30.3-lp152.2.7.3 - openSUSE Leap 15.2 (x86_64): libjavascriptcoregtk-4_0-18-32bit-2.30.3-lp152.2.7.3 libjavascriptcoregtk-4_0-18-32bit-debuginfo-2.30.3-lp152.2.7.3 libwebkit2gtk-4_0-37-32bit-2.30.3-lp152.2.7.3 libwebkit2gtk-4_0-37-32bit-debuginfo-2.30.3-lp152.2.7.3 - openSUSE Leap 15.2 (noarch): libwebkit2gtk3-lang-2.30.3-lp152.2.7.3 References: https://www.suse.com/security/cve/CVE-2020-13543.html https://www.suse.com/security/cve/CVE-2020-13584.html https://www.suse.com/security/cve/CVE-2020-9948.html https://www.suse.com/security/cve/CVE-2020-9951.html https://www.suse.com/security/cve/CVE-2020-9983.html https://bugzilla.suse.com/1171531 https://bugzilla.suse.com/1177087 https://bugzilla.suse.com/1179122 https://bugzilla.suse.com/1179451

1 0

openSUSE-RU-2020:2309-1: moderate: Recommended update for yast2-registration
by maintenance＠opensuse.org 21 Dec '20

21 Dec '20

openSUSE Recommended Update: Recommended update for yast2-registration ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:2309-1 Rating: moderate References: #1177292 #1178128 #1178652 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for yast2-registration fixes the following issues: - Fixed finding the installed base product when doing upgrade using the Full installation medium. (bsc#1178652) - Fix the latest change to work in firstboot when system is registered. (bsc#1178128) - Showing add-on selection screen only if they are available. (bsc#1177292) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-2309=1 Package List: - openSUSE Leap 15.2 (noarch): yast2-registration-4.2.46-lp152.2.9.1 References: https://bugzilla.suse.com/1177292 https://bugzilla.suse.com/1178128 https://bugzilla.suse.com/1178652

1 0

openSUSE-RU-2020:2308-1: moderate: Recommended update for yast2-cluster
by maintenance＠opensuse.org 21 Dec '20

21 Dec '20

openSUSE Recommended Update: Recommended update for yast2-cluster ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:2308-1 Rating: moderate References: #1179007 #1179420 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for yast2-cluster fixes the following issues: - Fix for security auth when writing wrong configuration. (bsc#1179420) - Fix to write bind address correctly. (bsc#1179007) - Fix fail to configure ttl for the second ring. This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-2308=1 Package List: - openSUSE Leap 15.2 (noarch): yast2-cluster-4.2.10-lp152.2.9.1 References: https://bugzilla.suse.com/1179007 https://bugzilla.suse.com/1179420

1 0

openSUSE-RU-2020:2307-1: moderate: Recommended update for perl-Test-Warnings
by maintenance＠opensuse.org 21 Dec '20

21 Dec '20

openSUSE Recommended Update: Recommended update for perl-Test-Warnings ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:2307-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for perl-Test-Warnings fixes the following issues: Update from version 0.026 to version 0.030 - Fix tests that can fail when there is already an installed module named `Foo::Bar::Baz` - `report_warnings` feature, for printing all of the (unexpected) warning content when `had_no_warnings()` is called - Allow for calling `warnings->import` being called after importing the "warnings" sub - `fail_on_warning` feature, for more easily seeing where the surprising warning appeared during testing This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-2307=1 Package List: - openSUSE Leap 15.2 (noarch): perl-Test-Warnings-0.030-lp152.4.3.1 References:

1 0

openSUSE-SU-2020:2304-1: important: Security update for webkit2gtk3
by opensuse-security＠opensuse.org 21 Dec '20

21 Dec '20

openSUSE Security Update: Security update for webkit2gtk3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:2304-1 Rating: important References: #1171531 #1177087 #1179122 #1179451 Cross-References: CVE-2020-13543 CVE-2020-13584 CVE-2020-9948 CVE-2020-9951 CVE-2020-9983 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for webkit2gtk3 fixes the following issues: -webkit2gtk3 was updated to version 2.30.3 (bsc#1179122 bsc#1179451): - CVE-2021-13543: Fixed a use after free which could have led to arbitrary code execution. - CVE-2021-13584: Fixed a use after free which could have led to arbitrary code execution. - CVE-2021-9948: Fixed a type confusion which could have led to arbitrary code execution. - CVE-2021-9951: Fixed a use after free which could have led to arbitrary code execution. - CVE-2021-9983: Fixed an out of bounds write which could have led to arbitrary code execution. - Have the libwebkit2gtk package require libjavascriptcoregtk of the same version (bsc#1171531). - Enable c_loop on aarch64: currently needed for compilation to succeed with JIT disabled. Also disable sampling profiler, since it conflicts with c_loop (bsc#1177087). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-2304=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libjavascriptcoregtk-4_0-18-2.30.3-lp151.2.28.2 libjavascriptcoregtk-4_0-18-debuginfo-2.30.3-lp151.2.28.2 libwebkit2gtk-4_0-37-2.30.3-lp151.2.28.2 libwebkit2gtk-4_0-37-debuginfo-2.30.3-lp151.2.28.2 typelib-1_0-JavaScriptCore-4_0-2.30.3-lp151.2.28.2 typelib-1_0-WebKit2-4_0-2.30.3-lp151.2.28.2 typelib-1_0-WebKit2WebExtension-4_0-2.30.3-lp151.2.28.2 webkit-jsc-4-2.30.3-lp151.2.28.2 webkit-jsc-4-debuginfo-2.30.3-lp151.2.28.2 webkit2gtk-4_0-injected-bundles-2.30.3-lp151.2.28.2 webkit2gtk-4_0-injected-bundles-debuginfo-2.30.3-lp151.2.28.2 webkit2gtk3-debugsource-2.30.3-lp151.2.28.2 webkit2gtk3-devel-2.30.3-lp151.2.28.2 webkit2gtk3-minibrowser-2.30.3-lp151.2.28.2 webkit2gtk3-minibrowser-debuginfo-2.30.3-lp151.2.28.2 - openSUSE Leap 15.1 (x86_64): libjavascriptcoregtk-4_0-18-32bit-2.30.3-lp151.2.28.2 libjavascriptcoregtk-4_0-18-32bit-debuginfo-2.30.3-lp151.2.28.2 libwebkit2gtk-4_0-37-32bit-2.30.3-lp151.2.28.2 libwebkit2gtk-4_0-37-32bit-debuginfo-2.30.3-lp151.2.28.2 - openSUSE Leap 15.1 (noarch): libwebkit2gtk3-lang-2.30.3-lp151.2.28.2 References: https://www.suse.com/security/cve/CVE-2020-13543.html https://www.suse.com/security/cve/CVE-2020-13584.html https://www.suse.com/security/cve/CVE-2020-9948.html https://www.suse.com/security/cve/CVE-2020-9951.html https://www.suse.com/security/cve/CVE-2020-9983.html https://bugzilla.suse.com/1171531 https://bugzilla.suse.com/1177087 https://bugzilla.suse.com/1179122 https://bugzilla.suse.com/1179451

1 0

openSUSE-RU-2020:2303-1: moderate: Recommended update for mkdud
by maintenance＠opensuse.org 21 Dec '20

21 Dec '20

openSUSE Recommended Update: Recommended update for mkdud ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:2303-1 Rating: moderate References: #1173988 Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for mkdud fixes the following issues: - ensure DUD repos are removed at the end of the installation (boo#1173988) - add --sign-key-id option to allow specifying a gpg signing key by id This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-2303=1 Package List: - openSUSE Backports SLE-15-SP2 (noarch): mkdud-1.50-bp152.2.3.1 References: https://bugzilla.suse.com/1173988

1 0

openSUSE-SU-2020:2300-1: moderate: Security update for gcc7
by opensuse-security＠opensuse.org 20 Dec '20

20 Dec '20

openSUSE Security Update: Security update for gcc7 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:2300-1 Rating: moderate References: #1150164 #1161913 #1167939 #1172798 #1178577 #1178614 #1178624 #1178675 Cross-References: CVE-2020-13844 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves one vulnerability and has 7 fixes is now available. Description: This update for gcc7 fixes the following issues: - CVE-2020-13844: Added mitigation for aarch64 Straight Line Speculation issue (bsc#1172798) - Enable fortran for the nvptx offload compiler. - Update README.First-for.SuSE.packagers - avoid assembler errors with AVX512 gather and scatter instructions when using -masm=intel. - Backport the aarch64 -moutline-atomics feature and accumulated fixes but not its default enabling. [jsc#SLE-12209, bsc#1167939] - Fixed 32bit libgnat.so link. [bsc#1178675] - Fixed memcpy miscompilation on aarch64. [bsc#1178624, bsc#1178577] - Fixed debug line info for try/catch. [bsc#1178614] - Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is used to build gcc7 (ie when ada is enabled) - Fixed corruption of pass private ->aux via DF. [gcc#94148] - Fixed debug information issue with inlined functions and passed by reference arguments. [gcc#93888] - Fixed binutils release date detection issue. - Fixed register allocation issue with exception handling code on s390x. [bsc#1161913] - Fixed miscompilation of some atomic code on aarch64. [bsc#1150164] This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-2300=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): cpp7-7.5.0+r278197-lp151.2.15.1 cpp7-debuginfo-7.5.0+r278197-lp151.2.15.1 gcc7-7.5.0+r278197-lp151.2.15.1 gcc7-ada-7.5.0+r278197-lp151.2.15.1 gcc7-ada-debuginfo-7.5.0+r278197-lp151.2.15.1 gcc7-c++-7.5.0+r278197-lp151.2.15.1 gcc7-c++-debuginfo-7.5.0+r278197-lp151.2.15.1 gcc7-debuginfo-7.5.0+r278197-lp151.2.15.1 gcc7-debugsource-7.5.0+r278197-lp151.2.15.1 gcc7-fortran-7.5.0+r278197-lp151.2.15.1 gcc7-fortran-debuginfo-7.5.0+r278197-lp151.2.15.1 gcc7-go-7.5.0+r278197-lp151.2.15.1 gcc7-go-debuginfo-7.5.0+r278197-lp151.2.15.1 gcc7-locale-7.5.0+r278197-lp151.2.15.1 gcc7-obj-c++-7.5.0+r278197-lp151.2.15.1 gcc7-obj-c++-debuginfo-7.5.0+r278197-lp151.2.15.1 gcc7-objc-7.5.0+r278197-lp151.2.15.1 gcc7-objc-debuginfo-7.5.0+r278197-lp151.2.15.1 libada7-7.5.0+r278197-lp151.2.15.1 libada7-debuginfo-7.5.0+r278197-lp151.2.15.1 libasan4-7.5.0+r278197-lp151.2.15.1 libasan4-debuginfo-7.5.0+r278197-lp151.2.15.1 libcilkrts5-7.5.0+r278197-lp151.2.15.1 libcilkrts5-debuginfo-7.5.0+r278197-lp151.2.15.1 libgfortran4-7.5.0+r278197-lp151.2.15.1 libgfortran4-debuginfo-7.5.0+r278197-lp151.2.15.1 libgo11-7.5.0+r278197-lp151.2.15.1 libgo11-debuginfo-7.5.0+r278197-lp151.2.15.1 libstdc++6-devel-gcc7-7.5.0+r278197-lp151.2.15.1 libubsan0-7.5.0+r278197-lp151.2.15.1 libubsan0-debuginfo-7.5.0+r278197-lp151.2.15.1 - openSUSE Leap 15.1 (noarch): gcc7-info-7.5.0+r278197-lp151.2.15.1 - openSUSE Leap 15.1 (x86_64): gcc7-32bit-7.5.0+r278197-lp151.2.15.1 gcc7-ada-32bit-7.5.0+r278197-lp151.2.15.1 gcc7-c++-32bit-7.5.0+r278197-lp151.2.15.1 gcc7-fortran-32bit-7.5.0+r278197-lp151.2.15.1 gcc7-go-32bit-7.5.0+r278197-lp151.2.15.1 gcc7-obj-c++-32bit-7.5.0+r278197-lp151.2.15.1 gcc7-objc-32bit-7.5.0+r278197-lp151.2.15.1 libada7-32bit-7.5.0+r278197-lp151.2.15.1 libada7-32bit-debuginfo-7.5.0+r278197-lp151.2.15.1 libasan4-32bit-7.5.0+r278197-lp151.2.15.1 libasan4-32bit-debuginfo-7.5.0+r278197-lp151.2.15.1 libcilkrts5-32bit-7.5.0+r278197-lp151.2.15.1 libcilkrts5-32bit-debuginfo-7.5.0+r278197-lp151.2.15.1 libgfortran4-32bit-7.5.0+r278197-lp151.2.15.1 libgfortran4-32bit-debuginfo-7.5.0+r278197-lp151.2.15.1 libgo11-32bit-7.5.0+r278197-lp151.2.15.1 libgo11-32bit-debuginfo-7.5.0+r278197-lp151.2.15.1 libstdc++6-devel-gcc7-32bit-7.5.0+r278197-lp151.2.15.1 libubsan0-32bit-7.5.0+r278197-lp151.2.15.1 libubsan0-32bit-debuginfo-7.5.0+r278197-lp151.2.15.1 References: https://www.suse.com/security/cve/CVE-2020-13844.html https://bugzilla.suse.com/1150164 https://bugzilla.suse.com/1161913 https://bugzilla.suse.com/1167939 https://bugzilla.suse.com/1172798 https://bugzilla.suse.com/1178577 https://bugzilla.suse.com/1178614 https://bugzilla.suse.com/1178624 https://bugzilla.suse.com/1178675

1 0

openSUSE-SU-2020:2301-1: moderate: Security update for gcc7
by opensuse-security＠opensuse.org 20 Dec '20

20 Dec '20

openSUSE Security Update: Security update for gcc7 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:2301-1 Rating: moderate References: #1150164 #1161913 #1167939 #1172798 #1178577 #1178614 #1178624 #1178675 Cross-References: CVE-2020-13844 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves one vulnerability and has 7 fixes is now available. Description: This update for gcc7 fixes the following issues: - CVE-2020-13844: Added mitigation for aarch64 Straight Line Speculation issue (bsc#1172798) - Enable fortran for the nvptx offload compiler. - Update README.First-for.SuSE.packagers - avoid assembler errors with AVX512 gather and scatter instructions when using -masm=intel. - Backport the aarch64 -moutline-atomics feature and accumulated fixes but not its default enabling. [jsc#SLE-12209, bsc#1167939] - Fixed 32bit libgnat.so link. [bsc#1178675] - Fixed memcpy miscompilation on aarch64. [bsc#1178624, bsc#1178577] - Fixed debug line info for try/catch. [bsc#1178614] - Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is used to build gcc7 (ie when ada is enabled) - Fixed corruption of pass private ->aux via DF. [gcc#94148] - Fixed debug information issue with inlined functions and passed by reference arguments. [gcc#93888] - Fixed binutils release date detection issue. - Fixed register allocation issue with exception handling code on s390x. [bsc#1161913] - Fixed miscompilation of some atomic code on aarch64. [bsc#1150164] This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-2301=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): cpp7-7.5.0+r278197-lp152.3.3.1 cpp7-debuginfo-7.5.0+r278197-lp152.3.3.1 gcc7-7.5.0+r278197-lp152.3.3.1 gcc7-ada-7.5.0+r278197-lp152.3.3.1 gcc7-ada-debuginfo-7.5.0+r278197-lp152.3.3.1 gcc7-c++-7.5.0+r278197-lp152.3.3.1 gcc7-c++-debuginfo-7.5.0+r278197-lp152.3.3.1 gcc7-debuginfo-7.5.0+r278197-lp152.3.3.1 gcc7-debugsource-7.5.0+r278197-lp152.3.3.1 gcc7-fortran-7.5.0+r278197-lp152.3.3.1 gcc7-fortran-debuginfo-7.5.0+r278197-lp152.3.3.1 gcc7-go-7.5.0+r278197-lp152.3.3.1 gcc7-go-debuginfo-7.5.0+r278197-lp152.3.3.1 gcc7-locale-7.5.0+r278197-lp152.3.3.1 gcc7-obj-c++-7.5.0+r278197-lp152.3.3.1 gcc7-obj-c++-debuginfo-7.5.0+r278197-lp152.3.3.1 gcc7-objc-7.5.0+r278197-lp152.3.3.1 gcc7-objc-debuginfo-7.5.0+r278197-lp152.3.3.1 libada7-7.5.0+r278197-lp152.3.3.1 libada7-debuginfo-7.5.0+r278197-lp152.3.3.1 libasan4-7.5.0+r278197-lp152.3.3.1 libasan4-debuginfo-7.5.0+r278197-lp152.3.3.1 libcilkrts5-7.5.0+r278197-lp152.3.3.1 libcilkrts5-debuginfo-7.5.0+r278197-lp152.3.3.1 libgfortran4-7.5.0+r278197-lp152.3.3.1 libgfortran4-debuginfo-7.5.0+r278197-lp152.3.3.1 libgo11-7.5.0+r278197-lp152.3.3.1 libgo11-debuginfo-7.5.0+r278197-lp152.3.3.1 libstdc++6-devel-gcc7-7.5.0+r278197-lp152.3.3.1 libubsan0-7.5.0+r278197-lp152.3.3.1 libubsan0-debuginfo-7.5.0+r278197-lp152.3.3.1 - openSUSE Leap 15.2 (noarch): gcc7-info-7.5.0+r278197-lp152.3.3.1 - openSUSE Leap 15.2 (x86_64): gcc7-32bit-7.5.0+r278197-lp152.3.3.1 gcc7-ada-32bit-7.5.0+r278197-lp152.3.3.1 gcc7-c++-32bit-7.5.0+r278197-lp152.3.3.1 gcc7-fortran-32bit-7.5.0+r278197-lp152.3.3.1 gcc7-go-32bit-7.5.0+r278197-lp152.3.3.1 gcc7-obj-c++-32bit-7.5.0+r278197-lp152.3.3.1 gcc7-objc-32bit-7.5.0+r278197-lp152.3.3.1 libada7-32bit-7.5.0+r278197-lp152.3.3.1 libada7-32bit-debuginfo-7.5.0+r278197-lp152.3.3.1 libasan4-32bit-7.5.0+r278197-lp152.3.3.1 libasan4-32bit-debuginfo-7.5.0+r278197-lp152.3.3.1 libcilkrts5-32bit-7.5.0+r278197-lp152.3.3.1 libcilkrts5-32bit-debuginfo-7.5.0+r278197-lp152.3.3.1 libgfortran4-32bit-7.5.0+r278197-lp152.3.3.1 libgfortran4-32bit-debuginfo-7.5.0+r278197-lp152.3.3.1 libgo11-32bit-7.5.0+r278197-lp152.3.3.1 libgo11-32bit-debuginfo-7.5.0+r278197-lp152.3.3.1 libstdc++6-devel-gcc7-32bit-7.5.0+r278197-lp152.3.3.1 libubsan0-32bit-7.5.0+r278197-lp152.3.3.1 libubsan0-32bit-debuginfo-7.5.0+r278197-lp152.3.3.1 References: https://www.suse.com/security/cve/CVE-2020-13844.html https://bugzilla.suse.com/1150164 https://bugzilla.suse.com/1161913 https://bugzilla.suse.com/1167939 https://bugzilla.suse.com/1172798 https://bugzilla.suse.com/1178577 https://bugzilla.suse.com/1178614 https://bugzilla.suse.com/1178624 https://bugzilla.suse.com/1178675

1 0

openSUSE-RU-2020:2302-1: moderate: Recommended update for tcl
by maintenance＠opensuse.org 20 Dec '20

20 Dec '20

openSUSE Recommended Update: Recommended update for tcl ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:2302-1 Rating: moderate References: #1179615 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for tcl fixes the following issue: - `TCL_LIBS` in `tclConfig.sh` possibly breaks build on newer service packs. (bsc#1179615) It is not needed for linking to a dynamic `libtcl` anyway and now it is empty. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-2302=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): tcl-8.6.7-lp151.6.3.1 tcl-debuginfo-8.6.7-lp151.6.3.1 tcl-debugsource-8.6.7-lp151.6.3.1 tcl-devel-8.6.7-lp151.6.3.1 - openSUSE Leap 15.1 (x86_64): tcl-32bit-8.6.7-lp151.6.3.1 tcl-32bit-debuginfo-8.6.7-lp151.6.3.1 References: https://bugzilla.suse.com/1179615

1 0