February 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2020:0249-1: moderate: Recommended update for chrony
by maintenance＠opensuse.org 27 Feb '20

27 Feb '20

openSUSE Recommended Update: Recommended update for chrony ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0249-1 Rating: moderate References: #1159840 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for chrony fixes the following issues: - Fix "make check" builds made after 2019-12-20. Existing installations do not need to be updated as the bug only affects the test, but not chrony itself (bsc#1159840). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-249=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): chrony-3.2-lp151.9.3.1 chrony-debuginfo-3.2-lp151.9.3.1 chrony-debugsource-3.2-lp151.9.3.1 References: https://bugzilla.suse.com/1159840

1 0

openSUSE-RU-2020:0246-1: moderate: Recommended update for python-ws4py
by maintenance＠opensuse.org 27 Feb '20

27 Feb '20

openSUSE Recommended Update: Recommended update for python-ws4py ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0246-1 Rating: moderate References: Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for python-ws4py fixes the following issues: - Fix license. Correct one is BSD-3-Clause. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-246=1 Package List: - openSUSE Leap 15.1 (noarch): python2-ws4py-0.4.2-lp151.3.3.1 python3-ws4py-0.4.2-lp151.3.3.1 References:

1 0

openSUSE-SU-2020:0259-1: important: Security update for chromium
by opensuse-security＠opensuse.org 27 Feb '20

27 Feb '20

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0259-1 Rating: important References: #1163484 #1163588 #1164828 Cross-References: CVE-2020-6407 CVE-2020-6418 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for chromium fixes the following issues: Chromium was updated to version 80.0.3987.122 (bsc#1164828). Security issues fixed: - CVE-2020-6418: Fixed a type confusion in V8 (bsc#1164828). - CVE-2020-6407: Fixed an OOB memory access in streams (bsc#1164828). - Fixed an integer overflow in ICU (bsc#1164828). Non-security issues fixed: - Dropped the sandbox binary as it should not be needed anymore (bsc#1163588). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-259=1 Package List: - openSUSE Leap 15.1 (x86_64): chromedriver-80.0.3987.122-lp151.2.66.1 chromedriver-debuginfo-80.0.3987.122-lp151.2.66.1 chromium-80.0.3987.122-lp151.2.66.1 chromium-debuginfo-80.0.3987.122-lp151.2.66.1 chromium-debugsource-80.0.3987.122-lp151.2.66.1 References: https://www.suse.com/security/cve/CVE-2020-6407.html https://www.suse.com/security/cve/CVE-2020-6418.html https://bugzilla.suse.com/1163484 https://bugzilla.suse.com/1163588 https://bugzilla.suse.com/1164828

1 0

openSUSE-SU-2020:0248-1: important: Security update for weechat
by opensuse-security＠opensuse.org 27 Feb '20

27 Feb '20

openSUSE Security Update: Security update for weechat ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0248-1 Rating: important References: #1163889 Cross-References: CVE-2020-8955 Affected Products: openSUSE Leap 15.1 openSUSE Backports SLE-15-SP1 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for weechat fixes the following security issue: - CVE-2020-8955: Fixed a buffer overflow in plugins/irc/irc-mode.c that allowed attackers to cause a denial of service (bsc#1163889). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-248=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-248=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2020-248=1 Package List: - openSUSE Leap 15.1 (x86_64): weechat-2.1-lp151.3.3.1 weechat-aspell-2.1-lp151.3.3.1 weechat-aspell-debuginfo-2.1-lp151.3.3.1 weechat-debuginfo-2.1-lp151.3.3.1 weechat-debugsource-2.1-lp151.3.3.1 weechat-devel-2.1-lp151.3.3.1 weechat-guile-2.1-lp151.3.3.1 weechat-guile-debuginfo-2.1-lp151.3.3.1 weechat-lua-2.1-lp151.3.3.1 weechat-lua-debuginfo-2.1-lp151.3.3.1 weechat-perl-2.1-lp151.3.3.1 weechat-perl-debuginfo-2.1-lp151.3.3.1 weechat-python-2.1-lp151.3.3.1 weechat-python-debuginfo-2.1-lp151.3.3.1 weechat-ruby-2.1-lp151.3.3.1 weechat-ruby-debuginfo-2.1-lp151.3.3.1 weechat-tcl-2.1-lp151.3.3.1 weechat-tcl-debuginfo-2.1-lp151.3.3.1 - openSUSE Leap 15.1 (noarch): weechat-lang-2.1-lp151.3.3.1 - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): weechat-2.1-bp151.4.3.1 weechat-aspell-2.1-bp151.4.3.1 weechat-devel-2.1-bp151.4.3.1 weechat-guile-2.1-bp151.4.3.1 weechat-lua-2.1-bp151.4.3.1 weechat-perl-2.1-bp151.4.3.1 weechat-python-2.1-bp151.4.3.1 weechat-ruby-2.1-bp151.4.3.1 weechat-tcl-2.1-bp151.4.3.1 - openSUSE Backports SLE-15-SP1 (noarch): weechat-lang-2.1-bp151.4.3.1 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): weechat-2.1-bp150.3.3.1 weechat-aspell-2.1-bp150.3.3.1 weechat-aspell-debuginfo-2.1-bp150.3.3.1 weechat-debuginfo-2.1-bp150.3.3.1 weechat-debugsource-2.1-bp150.3.3.1 weechat-devel-2.1-bp150.3.3.1 weechat-guile-2.1-bp150.3.3.1 weechat-guile-debuginfo-2.1-bp150.3.3.1 weechat-lua-2.1-bp150.3.3.1 weechat-lua-debuginfo-2.1-bp150.3.3.1 weechat-perl-2.1-bp150.3.3.1 weechat-perl-debuginfo-2.1-bp150.3.3.1 weechat-python-2.1-bp150.3.3.1 weechat-python-debuginfo-2.1-bp150.3.3.1 weechat-ruby-2.1-bp150.3.3.1 weechat-ruby-debuginfo-2.1-bp150.3.3.1 weechat-tcl-2.1-bp150.3.3.1 weechat-tcl-debuginfo-2.1-bp150.3.3.1 - openSUSE Backports SLE-15 (noarch): weechat-lang-2.1-bp150.3.3.1 References: https://www.suse.com/security/cve/CVE-2020-8955.html https://bugzilla.suse.com/1163889

1 0

openSUSE-RU-2020:0258-1: moderate: Recommended update for rpmdevtools
by maintenance＠opensuse.org 27 Feb '20

27 Feb '20

openSUSE Recommended Update: Recommended update for rpmdevtools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0258-1 Rating: moderate References: Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for rpmdevtools fixes the following issues: - Reflect current spec-cleaner templates * Updated company name * Removed groups - Use generic runtime dependency on distribution-release - Move bash completions to correct dir - Update dependencies Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-258=1 Package List: - openSUSE Leap 15.1 (noarch): rpmdevtools-8.10-lp151.3.3.1 References:

1 0

openSUSE-SU-2020:0247-1: important: Security update for ipmitool
by opensuse-security＠opensuse.org 27 Feb '20

27 Feb '20

openSUSE Security Update: Security update for ipmitool ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0247-1 Rating: important References: #1163026 Cross-References: CVE-2020-5208 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for ipmitool fixes the following security issue: - CVE-2020-5208: Fixed several buffer overflows (bsc#1163026). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-247=1 Package List: - openSUSE Leap 15.1 (x86_64): ipmitool-1.8.18-lp151.4.3.1 ipmitool-debuginfo-1.8.18-lp151.4.3.1 ipmitool-debugsource-1.8.18-lp151.4.3.1 - openSUSE Leap 15.1 (noarch): ipmitool-bmc-snmp-proxy-1.8.18-lp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2020-5208.html https://bugzilla.suse.com/1163026

1 0

openSUSE-SU-2020:0245-1: important: Security update for chromium
by opensuse-security＠opensuse.org 26 Feb '20

26 Feb '20

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0245-1 Rating: important References: #1163484 #1163588 #1164828 Cross-References: CVE-2020-6407 CVE-2020-6418 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for chromium fixes the following issues: Chromium was updated to version 80.0.3987.122 (bsc#1164828). Security issues fixed: - CVE-2020-6418: Fixed a type confusion in V8 (bsc#1164828). - CVE-2020-6407: Fixed an OOB memory access in streams (bsc#1164828). - Fixed an integer overflow in ICU (bsc#1164828). Non-security issues fixed: - Dropped the sandbox binary as it should not be needed anymore (bsc#1163588). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2020-245=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 x86_64): chromedriver-80.0.3987.122-34.1 chromium-80.0.3987.122-34.1 References: https://www.suse.com/security/cve/CVE-2020-6407.html https://www.suse.com/security/cve/CVE-2020-6418.html https://bugzilla.suse.com/1163484 https://bugzilla.suse.com/1163588 https://bugzilla.suse.com/1164828

1 0

openSUSE-SU-2020:0244-1: important: Security update for sudo
by opensuse-security＠opensuse.org 25 Feb '20

25 Feb '20

openSUSE Security Update: Security update for sudo ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0244-1 Rating: important References: #1162202 #1162675 Cross-References: CVE-2019-18634 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for sudo fixes the following issues: Security issue fixed: - CVE-2019-18634: Fixed a buffer overflow in the passphrase prompt that could occur when pwfeedback was enabled in /etc/sudoers (bsc#1162202). Non-security issue fixed: - Fixed an issue where sudo -l would ask for a password even though `listpw` was set to `never` (bsc#1162675). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-244=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): sudo-1.8.22-lp151.5.6.1 sudo-debuginfo-1.8.22-lp151.5.6.1 sudo-debugsource-1.8.22-lp151.5.6.1 sudo-devel-1.8.22-lp151.5.6.1 sudo-test-1.8.22-lp151.5.6.1 References: https://www.suse.com/security/cve/CVE-2019-18634.html https://bugzilla.suse.com/1162202 https://bugzilla.suse.com/1162675

1 0

openSUSE-RU-2020:0243-1: moderate: Recommended update for gcc7
by maintenance＠opensuse.org 25 Feb '20

25 Feb '20

openSUSE Recommended Update: Recommended update for gcc7 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0243-1 Rating: moderate References: #1160086 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gcc7 fixes the following issue: - Fixed a miscompilation in zSeries code (bsc#1160086) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-243=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): cpp7-7.5.0+r278197-lp151.2.12.1 cpp7-debuginfo-7.5.0+r278197-lp151.2.12.1 gcc7-7.5.0+r278197-lp151.2.12.1 gcc7-ada-7.5.0+r278197-lp151.2.12.1 gcc7-ada-debuginfo-7.5.0+r278197-lp151.2.12.1 gcc7-c++-7.5.0+r278197-lp151.2.12.1 gcc7-c++-debuginfo-7.5.0+r278197-lp151.2.12.1 gcc7-debuginfo-7.5.0+r278197-lp151.2.12.1 gcc7-debugsource-7.5.0+r278197-lp151.2.12.1 gcc7-fortran-7.5.0+r278197-lp151.2.12.1 gcc7-fortran-debuginfo-7.5.0+r278197-lp151.2.12.1 gcc7-go-7.5.0+r278197-lp151.2.12.1 gcc7-go-debuginfo-7.5.0+r278197-lp151.2.12.1 gcc7-locale-7.5.0+r278197-lp151.2.12.1 gcc7-obj-c++-7.5.0+r278197-lp151.2.12.1 gcc7-obj-c++-debuginfo-7.5.0+r278197-lp151.2.12.1 gcc7-objc-7.5.0+r278197-lp151.2.12.1 gcc7-objc-debuginfo-7.5.0+r278197-lp151.2.12.1 libada7-7.5.0+r278197-lp151.2.12.1 libada7-debuginfo-7.5.0+r278197-lp151.2.12.1 libasan4-7.5.0+r278197-lp151.2.12.1 libasan4-debuginfo-7.5.0+r278197-lp151.2.12.1 libcilkrts5-7.5.0+r278197-lp151.2.12.1 libcilkrts5-debuginfo-7.5.0+r278197-lp151.2.12.1 libgfortran4-7.5.0+r278197-lp151.2.12.1 libgfortran4-debuginfo-7.5.0+r278197-lp151.2.12.1 libgo11-7.5.0+r278197-lp151.2.12.1 libgo11-debuginfo-7.5.0+r278197-lp151.2.12.1 libobjc4-7.5.0+r278197-lp151.2.12.1 libobjc4-debuginfo-7.5.0+r278197-lp151.2.12.1 libstdc++6-devel-gcc7-7.5.0+r278197-lp151.2.12.1 libubsan0-7.5.0+r278197-lp151.2.12.1 libubsan0-debuginfo-7.5.0+r278197-lp151.2.12.1 - openSUSE Leap 15.1 (noarch): gcc7-info-7.5.0+r278197-lp151.2.12.1 - openSUSE Leap 15.1 (x86_64): gcc7-32bit-7.5.0+r278197-lp151.2.12.1 gcc7-ada-32bit-7.5.0+r278197-lp151.2.12.1 gcc7-c++-32bit-7.5.0+r278197-lp151.2.12.1 gcc7-fortran-32bit-7.5.0+r278197-lp151.2.12.1 gcc7-go-32bit-7.5.0+r278197-lp151.2.12.1 gcc7-obj-c++-32bit-7.5.0+r278197-lp151.2.12.1 gcc7-objc-32bit-7.5.0+r278197-lp151.2.12.1 libada7-32bit-7.5.0+r278197-lp151.2.12.1 libada7-32bit-debuginfo-7.5.0+r278197-lp151.2.12.1 libasan4-32bit-7.5.0+r278197-lp151.2.12.1 libasan4-32bit-debuginfo-7.5.0+r278197-lp151.2.12.1 libcilkrts5-32bit-7.5.0+r278197-lp151.2.12.1 libcilkrts5-32bit-debuginfo-7.5.0+r278197-lp151.2.12.1 libgfortran4-32bit-7.5.0+r278197-lp151.2.12.1 libgfortran4-32bit-debuginfo-7.5.0+r278197-lp151.2.12.1 libgo11-32bit-7.5.0+r278197-lp151.2.12.1 libgo11-32bit-debuginfo-7.5.0+r278197-lp151.2.12.1 libobjc4-32bit-7.5.0+r278197-lp151.2.12.1 libobjc4-32bit-debuginfo-7.5.0+r278197-lp151.2.12.1 libstdc++6-devel-gcc7-32bit-7.5.0+r278197-lp151.2.12.1 libubsan0-32bit-7.5.0+r278197-lp151.2.12.1 libubsan0-32bit-debuginfo-7.5.0+r278197-lp151.2.12.1 References: https://bugzilla.suse.com/1160086

1 0

openSUSE-SU-2020:0242-1: moderate: Security update for inn
by opensuse-security＠opensuse.org 24 Feb '20

24 Feb '20

openSUSE Security Update: Security update for inn ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0242-1 Rating: moderate References: #1154302 Cross-References: CVE-2019-3692 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for inn fixes the following issues: - CVE-2019-3692: Fixed a local privilage escalation from user to 'news' (bsc#1154302). This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-242=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): inn-2.5.4-bp151.4.3.1 inn-devel-2.5.4-bp151.4.3.1 mininews-2.5.4-bp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2019-3692.html https://bugzilla.suse.com/1154302

1 0