February 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2020:0172-1: moderate: Recommended update for spec-cleaner
by maintenance＠opensuse.org 05 Feb '20

05 Feb '20

openSUSE Recommended Update: Recommended update for spec-cleaner ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0172-1 Rating: moderate References: #1099674 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for spec-cleaner fixes the following issues: - Update to 1.1.8 (boo#1099674): * Change libexecdir substitution to do /usr/libexec to %{_libexecdir} * Exclude apache_rex_check from bracketing * Add testscase for boolean dependencies that gets mangled currently * Do not remove -p0 from autosetup * Use %make_build if possible issue * Teach spec-cleaner to not break the %elif* macros added with rpm 4.15 * Fixup the nested boolean dependencies * Fixup whitespace reported by flake8 * Set explicit urllib timeout issue * Replace more stuff for %make build Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-172=1 Package List: - openSUSE Leap 15.1 (noarch): spec-cleaner-1.1.8-lp151.2.15.1 spec-cleaner-format_spec_file-1.1.8-lp151.2.15.1 References: https://bugzilla.suse.com/1099674

1 0

openSUSE-RU-2020:0169-1: moderate: Recommended update for sendmail
by maintenance＠opensuse.org 05 Feb '20

05 Feb '20

openSUSE Recommended Update: Recommended update for sendmail ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0169-1 Rating: moderate References: Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for sendmail fixes the following issues: Add upstream patch 8.15.2.mci.p0: * If sendmail tried to reuse an SMTP session which had already been closed by the server, then the connection cache could have invalid information about the session. One possible consequence was that STARTTLS was not used even if offered. * The former deprecated macro RES_USE_INET6 is gone with glibc 2.30 Removal of the SuSEfirewall2 service file, since SuSEfirewall2 has been replaced by firewalld. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-169=1 Package List: - openSUSE Leap 15.1 (noarch): libmilter-doc-8.15.2-lp151.7.3.1 sendmail-starttls-8.15.2-lp151.7.3.1 - openSUSE Leap 15.1 (x86_64): libmilter1_0-8.15.2-lp151.7.3.1 libmilter1_0-debuginfo-8.15.2-lp151.7.3.1 rmail-8.15.2-lp151.7.3.1 rmail-debuginfo-8.15.2-lp151.7.3.1 sendmail-8.15.2-lp151.7.3.1 sendmail-debuginfo-8.15.2-lp151.7.3.1 sendmail-debugsource-8.15.2-lp151.7.3.1 sendmail-devel-8.15.2-lp151.7.3.1 References:

1 0

openSUSE-RU-2020:0168-1: moderate: Recommended update for lxc
by maintenance＠opensuse.org 05 Feb '20

05 Feb '20

openSUSE Recommended Update: Recommended update for lxc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0168-1 Rating: moderate References: #1162426 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for lxc fixes the following issues: - Fix bash-completion paths to match the binary names (and to avoid conflicts with LXD). boo#1162426 - Fixed "Containers fail to start regression lxc 3.2" Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-168=1 Package List: - openSUSE Leap 15.1 (noarch): lxc-bash-completion-3.2.1-lp151.4.8.1 - openSUSE Leap 15.1 (x86_64): liblxc-devel-3.2.1-lp151.4.8.1 liblxc1-3.2.1-lp151.4.8.1 liblxc1-debuginfo-3.2.1-lp151.4.8.1 lxc-3.2.1-lp151.4.8.1 lxc-debuginfo-3.2.1-lp151.4.8.1 lxc-debugsource-3.2.1-lp151.4.8.1 pam_cgfs-3.2.1-lp151.4.8.1 pam_cgfs-debuginfo-3.2.1-lp151.4.8.1 References: https://bugzilla.suse.com/1162426

1 0

openSUSE-RU-2020:0167-1: moderate: Recommended update for MozillaFirefox
by maintenance＠opensuse.org 05 Feb '20

05 Feb '20

openSUSE Recommended Update: Recommended update for MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0167-1 Rating: moderate References: #1161799 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for MozillaFirefox fixes the following issues: Mozilla Firefox Extended Support Release 68.4.2 ESR: * Fixed: Fixed various issues opening files with spaces in their path (bmo#1601905, bmo#1602726) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-167=1 Package List: - openSUSE Leap 15.1 (x86_64): MozillaFirefox-68.4.2-lp151.2.27.1 MozillaFirefox-branding-upstream-68.4.2-lp151.2.27.1 MozillaFirefox-buildsymbols-68.4.2-lp151.2.27.1 MozillaFirefox-debuginfo-68.4.2-lp151.2.27.1 MozillaFirefox-debugsource-68.4.2-lp151.2.27.1 MozillaFirefox-devel-68.4.2-lp151.2.27.1 MozillaFirefox-translations-common-68.4.2-lp151.2.27.1 MozillaFirefox-translations-other-68.4.2-lp151.2.27.1 References: https://bugzilla.suse.com/1161799

1 0

openSUSE-SU-2020:0165-1: important: Security update for wicked
by opensuse-security＠opensuse.org 04 Feb '20

04 Feb '20

openSUSE Security Update: Security update for wicked ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0165-1 Rating: important References: #1160903 #1160905 Cross-References: CVE-2019-18902 CVE-2020-7216 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for wicked fixes the following issues: - CVE-2019-18902: Fixed a use-after-free when receiving invalid DHCP6 client options (bsc#1160903). - CVE-2020-7216: Fixed a potential denial of service via a memory leak when processing packets with missing message type option in DHCP4 (bsc#1160905). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-165=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): wicked-0.6.60-lp151.2.6.1 wicked-debuginfo-0.6.60-lp151.2.6.1 wicked-debugsource-0.6.60-lp151.2.6.1 wicked-service-0.6.60-lp151.2.6.1 References: https://www.suse.com/security/cve/CVE-2019-18902.html https://www.suse.com/security/cve/CVE-2020-7216.html https://bugzilla.suse.com/1160903 https://bugzilla.suse.com/1160905

1 0

openSUSE-SU-2020:0166-1: moderate: Security update for e2fsprogs
by opensuse-security＠opensuse.org 04 Feb '20

04 Feb '20

openSUSE Security Update: Security update for e2fsprogs ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0166-1 Rating: moderate References: #1160571 Cross-References: CVE-2019-5188 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for e2fsprogs fixes the following issues: - CVE-2019-5188: Fixed a code execution vulnerability in the directory rehashing functionality (bsc#1160571). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-166=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): e2fsprogs-1.43.8-lp151.5.12.1 e2fsprogs-debuginfo-1.43.8-lp151.5.12.1 e2fsprogs-debugsource-1.43.8-lp151.5.12.1 e2fsprogs-devel-1.43.8-lp151.5.12.1 libcom_err-devel-1.43.8-lp151.5.12.1 libcom_err-devel-static-1.43.8-lp151.5.12.1 libcom_err2-1.43.8-lp151.5.12.1 libcom_err2-debuginfo-1.43.8-lp151.5.12.1 libext2fs-devel-1.43.8-lp151.5.12.1 libext2fs-devel-static-1.43.8-lp151.5.12.1 libext2fs2-1.43.8-lp151.5.12.1 libext2fs2-debuginfo-1.43.8-lp151.5.12.1 - openSUSE Leap 15.1 (x86_64): e2fsprogs-32bit-debuginfo-1.43.8-lp151.5.12.1 libcom_err-devel-32bit-1.43.8-lp151.5.12.1 libcom_err2-32bit-1.43.8-lp151.5.12.1 libcom_err2-32bit-debuginfo-1.43.8-lp151.5.12.1 libext2fs-devel-32bit-1.43.8-lp151.5.12.1 libext2fs2-32bit-1.43.8-lp151.5.12.1 libext2fs2-32bit-debuginfo-1.43.8-lp151.5.12.1 References: https://www.suse.com/security/cve/CVE-2019-5188.html https://bugzilla.suse.com/1160571

1 0

openSUSE-SU-2020:0163-1: moderate: Security update for upx
by opensuse-security＠opensuse.org 04 Feb '20

04 Feb '20

openSUSE Security Update: Security update for upx ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0163-1 Rating: moderate References: #1094138 #1141777 #1143839 #1159833 #1159920 Cross-References: CVE-2018-11243 CVE-2019-1010048 CVE-2019-14296 CVE-2019-20021 CVE-2019-20053 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for upx to version 3.96 fixes the following issues: - CVE-2019-1010048: Fixed a denial of service in PackLinuxElf32::PackLinuxElf32help1() (boo#1141777). - CVE-2019-14296: Fixed a denial of service in canUnpack() (boo#1143839). - CVE-2019-20021: Fixed a heap-based buffer over-read in canUnpack() (boo#1159833). - CVE-2019-20053: Fixed a denial of service in canUnpack() (boo#1159920). - CVE-2018-11243: Fixed a denial of service in PackLinuxElf64::unpack() (boo#1094138). - Update to version 3.96 * Bug fixes: [CVE-2019-1010048, boo#1141777] [CVE-2019-14296, boo#1143839] [CVE-2019-20021, boo#1159833] [CVE-2019-20053, boo#1159920] [CVE-2018-11243 partially - ticket 206 ONLY, boo#1094138] - Update to version 3.95 * Flag --force-pie when ET_DYN main program is not marked as DF_1_PIE * Better compatibility with varying layout of address space on Linux * Support for 4 PT_LOAD layout in ELF generated by binutils-2.31 * bug fixes, particularly better diagnosis of malformed input * bug fixes - see https://github.com/upx/upx/milestone/4 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-163=1 Package List: - openSUSE Leap 15.1 (x86_64): upx-3.96-lp151.3.3.1 upx-debuginfo-3.96-lp151.3.3.1 upx-debugsource-3.96-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2018-11243.html https://www.suse.com/security/cve/CVE-2019-1010048.html https://www.suse.com/security/cve/CVE-2019-14296.html https://www.suse.com/security/cve/CVE-2019-20021.html https://www.suse.com/security/cve/CVE-2019-20053.html https://bugzilla.suse.com/1094138 https://bugzilla.suse.com/1141777 https://bugzilla.suse.com/1143839 https://bugzilla.suse.com/1159833 https://bugzilla.suse.com/1159920

1 0

openSUSE-RU-2020:0164-1: moderate: Recommended update for kio
by maintenance＠opensuse.org 04 Feb '20

04 Feb '20

openSUSE Recommended Update: Recommended update for kio ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0164-1 Rating: moderate References: #1161851 Affected Products: openSUSE Leap 15.1 openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for kio fixes the following issues: - Fix a possible crash when copying an already existing dir and pressing "Skip" (boo#1161851, kde#408350) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-164=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-164=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): kio-5.55.0-lp151.3.6.1 kio-core-5.55.0-lp151.3.6.1 kio-core-debuginfo-5.55.0-lp151.3.6.1 kio-debuginfo-5.55.0-lp151.3.6.1 kio-debugsource-5.55.0-lp151.3.6.1 kio-devel-5.55.0-lp151.3.6.1 kio-devel-debuginfo-5.55.0-lp151.3.6.1 - openSUSE Leap 15.1 (x86_64): kio-32bit-5.55.0-lp151.3.6.1 kio-32bit-debuginfo-5.55.0-lp151.3.6.1 kio-core-32bit-5.55.0-lp151.3.6.1 kio-core-32bit-debuginfo-5.55.0-lp151.3.6.1 kio-devel-32bit-5.55.0-lp151.3.6.1 kio-devel-32bit-debuginfo-5.55.0-lp151.3.6.1 - openSUSE Leap 15.1 (noarch): kio-lang-5.55.0-lp151.3.6.1 - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): kio-5.55.0-bp151.4.6.1 kio-core-5.55.0-bp151.4.6.1 kio-devel-5.55.0-bp151.4.6.1 - openSUSE Backports SLE-15-SP1 (aarch64_ilp32): kio-64bit-5.55.0-bp151.4.6.1 kio-core-64bit-5.55.0-bp151.4.6.1 kio-devel-64bit-5.55.0-bp151.4.6.1 - openSUSE Backports SLE-15-SP1 (noarch): kio-lang-5.55.0-bp151.4.6.1 References: https://bugzilla.suse.com/1161851

1 0

openSUSE-RU-2020:0161-1: moderate: Recommended update for libisds
by maintenance＠opensuse.org 04 Feb '20

04 Feb '20

openSUSE Recommended Update: Recommended update for libisds ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0161-1 Rating: moderate References: #1135761 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libisds fixes the following issues: - Version bump to 0.11: * mobile key authentication * manual pages are generated * compatibility with OpenSSL 1.1.0 - Adjust SRPM group. - Use the default GPGme library instead of OpenSSL [boo#1135761] Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-161=1 Package List: - openSUSE Leap 15.1 (x86_64): libisds-debugsource-0.11-lp151.2.3.1 libisds-devel-0.11-lp151.2.3.1 libisds5-0.11-lp151.2.3.1 libisds5-debuginfo-0.11-lp151.2.3.1 References: https://bugzilla.suse.com/1135761

1 0

openSUSE-RU-2020:0158-1: moderate: Recommended update for obs-service-format_spec_file
by maintenance＠opensuse.org 04 Feb '20

04 Feb '20

openSUSE Recommended Update: Recommended update for obs-service-format_spec_file ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0158-1 Rating: moderate References: #1160801 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for obs-service-format_spec_file fixes the following issues: - Update copyright removing the closing colon, according to the SUSE standards. (bsc#1160801) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-158=1 Package List: - openSUSE Leap 15.1 (noarch): obs-service-format_spec_file-20191114-lp151.2.3.1 References: https://bugzilla.suse.com/1160801

1 0