February 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2020:0241-1: moderate: Recommended update for calamares
by maintenance＠opensuse.org 24 Feb '20

24 Feb '20

openSUSE Recommended Update: Recommended update for calamares ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0241-1 Rating: moderate References: #1159739 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for calamares fixes the following issues: - Exclude /etc/dracut.conf.d/02-livecd.conf from copying into filesystem, otherwise installation may fail with with "Failed to run dracut on the target" error (boo#1159739) This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-241=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 x86_64): calamares-3.2.15-bp151.4.6.2 calamares-webview-3.2.15-bp151.4.6.2 - openSUSE Backports SLE-15-SP1 (noarch): calamares-branding-upstream-3.2.15-bp151.4.6.2 References: https://bugzilla.suse.com/1159739

1 0

openSUSE-RU-2020:0240-1: moderate: Recommended update for ebook-tools
by maintenance＠opensuse.org 24 Feb '20

24 Feb '20

openSUSE Recommended Update: Recommended update for ebook-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0240-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for ebook-tools fixes the following issues: * Fix a crash when a navPoint in toc.ncx has no navLabel, see kde#406116 and https://sourceforge.net/p/ebook-tools/bugs/8/ + add 0001-Avoid-crash-on-toc-navPoint-without-navLabel.patch * specfile cleanup, remove %defattr, add LICENSE This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-240=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): ebook-tools-0.2.2-bp151.4.3.1 libepub-devel-0.2.2-bp151.4.3.1 libepub0-0.2.2-bp151.4.3.1 - openSUSE Backports SLE-15-SP1 (aarch64_ilp32): libepub0-64bit-0.2.2-bp151.4.3.1 References:

1 0

openSUSE-RU-2020:0239-1: moderate: Recommended update for akonadi-server
by maintenance＠opensuse.org 23 Feb '20

23 Feb '20

openSUSE Recommended Update: Recommended update for akonadi-server ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0239-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for akonadi-server fixes the following issues: - Fixed a possible crash on exit (kde#401692) This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-239=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): akonadi-server-18.12.3-bp151.4.6.1 akonadi-server-devel-18.12.3-bp151.4.6.1 akonadi-server-sqlite-18.12.3-bp151.4.6.1 libKF5AkonadiAgentBase5-18.12.3-bp151.4.6.1 libKF5AkonadiCore5-18.12.3-bp151.4.6.1 libKF5AkonadiPrivate5-18.12.3-bp151.4.6.1 libKF5AkonadiWidgets5-18.12.3-bp151.4.6.1 libKF5AkonadiXml5-18.12.3-bp151.4.6.1 - openSUSE Backports SLE-15-SP1 (noarch): akonadi-server-lang-18.12.3-bp151.4.6.1 References:

1 0

openSUSE-RU-2020:0238-1: moderate: Recommended update for offlineimap
by maintenance＠opensuse.org 22 Feb '20

22 Feb '20

openSUSE Recommended Update: Recommended update for offlineimap ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0238-1 Rating: moderate References: Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for offlineimap fixes the following issues: Update to 7.3.2 - last stable release of offlineimap. - various bugfixes Adds new dependencies for offlineimap: - python-rfc6555 - python-selectors2 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-238=1 Package List: - openSUSE Leap 15.1 (noarch): offlineimap-7.3.2-lp151.3.3.1 offlineimap-htmldoc-7.3.2-lp151.3.3.1 python2-rfc6555-0.0.0-lp151.2.1 python2-selectors2-2.0.1-lp151.2.1 python3-rfc6555-0.0.0-lp151.2.1 python3-selectors2-2.0.1-lp151.2.1 References:

1 0

openSUSE-RU-2020:0237-1: moderate: Recommended update for lxd
by maintenance＠opensuse.org 21 Feb '20

21 Feb '20

openSUSE Recommended Update: Recommended update for lxd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0237-1 Rating: moderate References: #1156336 #1163651 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for lxd fixes the following issues: Update to LXD 3.21. (boo#1163651) The full upstream changelog is available from: https://discuss.linuxcontainers.org/t/lxd-3-21-has-been-released/6802 + New way to attach to LXD managed networks + Clustering: Configurable number of active and standby database members * Ceph ported to new storage driver infrastructure * VM: CPU pinning and topology * VM: Network and storage optimizations * VM: Agent-less reporting of IPv6 addresses Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-237=1 Package List: - openSUSE Leap 15.1 (x86_64): lxd-3.21-lp151.24.1 - openSUSE Leap 15.1 (noarch): lxd-bash-completion-3.21-lp151.24.1 References: https://bugzilla.suse.com/1156336 https://bugzilla.suse.com/1163651

1 0

openSUSE-SU-2020:0234-1: moderate: Security update for inn
by opensuse-security＠opensuse.org 19 Feb '20

19 Feb '20

openSUSE Security Update: Security update for inn ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0234-1 Rating: moderate References: #1154302 Cross-References: CVE-2019-3692 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for inn fixes the following issues: - CVE-2019-3692: Fixed a local privilage escalation from user to 'news' (bsc#1154302). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-234=1 Package List: - openSUSE Leap 15.1 (x86_64): inn-2.5.4-lp151.3.3.1 inn-debuginfo-2.5.4-lp151.3.3.1 inn-debugsource-2.5.4-lp151.3.3.1 inn-devel-2.5.4-lp151.3.3.1 mininews-2.5.4-lp151.3.3.1 mininews-debuginfo-2.5.4-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2019-3692.html https://bugzilla.suse.com/1154302

1 0

openSUSE-SU-2020:0235-1: important: Security update for rmt-server
by opensuse-security＠opensuse.org 19 Feb '20

19 Feb '20

openSUSE Security Update: Security update for rmt-server ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0235-1 Rating: important References: #1141122 #1157119 #1160673 #1160922 Cross-References: CVE-2019-18904 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves one vulnerability and has three fixes is now available. Description: This update for rmt-server to version 2.5.2 fixes the following issues: Security issue fixed: - CVE-2019-18904: Fixed a denial of service in the offline migration (bsc#1160922). Non-security issue fixed: - Relaxed systemd units dependencies (bsc#1160673) - Added more verbose error reporting for SCC API errors (bsc#1157119) - Fixed system listing when architecture is not well referenced (bsc#1141122) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-235=1 Package List: - openSUSE Leap 15.1 (x86_64): rmt-server-2.5.2-lp151.2.9.1 rmt-server-config-2.5.2-lp151.2.9.1 rmt-server-debuginfo-2.5.2-lp151.2.9.1 rmt-server-debugsource-2.5.2-lp151.2.9.1 rmt-server-pubcloud-2.5.2-lp151.2.9.1 References: https://www.suse.com/security/cve/CVE-2019-18904.html https://bugzilla.suse.com/1141122 https://bugzilla.suse.com/1157119 https://bugzilla.suse.com/1160673 https://bugzilla.suse.com/1160922

1 0

openSUSE-SU-2020:0233-1: important: Security update for chromium, re2
by opensuse-security＠opensuse.org 19 Feb '20

19 Feb '20

openSUSE Security Update: Security update for chromium, re2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0233-1 Rating: important References: #1162833 Cross-References: CVE-2019-18197 CVE-2019-19880 CVE-2019-19923 CVE-2019-19925 CVE-2019-19926 CVE-2020-6381 CVE-2020-6382 CVE-2020-6385 CVE-2020-6387 CVE-2020-6388 CVE-2020-6389 CVE-2020-6390 CVE-2020-6391 CVE-2020-6392 CVE-2020-6393 CVE-2020-6394 CVE-2020-6395 CVE-2020-6396 CVE-2020-6397 CVE-2020-6398 CVE-2020-6399 CVE-2020-6400 CVE-2020-6401 CVE-2020-6402 CVE-2020-6403 CVE-2020-6404 CVE-2020-6405 CVE-2020-6406 CVE-2020-6408 CVE-2020-6409 CVE-2020-6410 CVE-2020-6411 CVE-2020-6412 CVE-2020-6413 CVE-2020-6414 CVE-2020-6415 CVE-2020-6416 CVE-2020-6417 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes 38 vulnerabilities is now available. Description: This update for chromium, re2 fixes the following issues: - Update to 80.0.3987.87 boo#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox * CVE-2020-6410: Insufficient policy enforcement in navigation * CVE-2020-6411: Insufficient validation of untrusted input in Omnibox * CVE-2020-6412: Insufficient validation of untrusted input in Omnibox * CVE-2020-6413: Inappropriate implementation in Blink * CVE-2020-6414: Insufficient policy enforcement in Safe Browsing * CVE-2020-6415: Inappropriate implementation in JavaScript * CVE-2020-6416: Insufficient data validation in streams * CVE-2020-6417: Inappropriate implementation in installer re2 was updated to fix: Update to 2020-01-01: * various developer visible changes Update to 2019-12-01: * fix latent bugs and undefined behavior Update to 2019-11-01: * new benchmark API Update to 2019-09-01: * build system fixes Update to 2019-08-01: * Update Unicode data to 12.1.0 * Various developer visible changes Update to 2019-07-01: * developer visible changes Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2020-233=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): libre2-0-20200101-25.1 libre2-0-debuginfo-20200101-25.1 re2-debugsource-20200101-25.1 re2-devel-20200101-25.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 x86_64): chromedriver-80.0.3987.87-31.1 chromium-80.0.3987.87-31.1 References: https://www.suse.com/security/cve/CVE-2019-18197.html https://www.suse.com/security/cve/CVE-2019-19880.html https://www.suse.com/security/cve/CVE-2019-19923.html https://www.suse.com/security/cve/CVE-2019-19925.html https://www.suse.com/security/cve/CVE-2019-19926.html https://www.suse.com/security/cve/CVE-2020-6381.html https://www.suse.com/security/cve/CVE-2020-6382.html https://www.suse.com/security/cve/CVE-2020-6385.html https://www.suse.com/security/cve/CVE-2020-6387.html https://www.suse.com/security/cve/CVE-2020-6388.html https://www.suse.com/security/cve/CVE-2020-6389.html https://www.suse.com/security/cve/CVE-2020-6390.html https://www.suse.com/security/cve/CVE-2020-6391.html https://www.suse.com/security/cve/CVE-2020-6392.html https://www.suse.com/security/cve/CVE-2020-6393.html https://www.suse.com/security/cve/CVE-2020-6394.html https://www.suse.com/security/cve/CVE-2020-6395.html https://www.suse.com/security/cve/CVE-2020-6396.html https://www.suse.com/security/cve/CVE-2020-6397.html https://www.suse.com/security/cve/CVE-2020-6398.html https://www.suse.com/security/cve/CVE-2020-6399.html https://www.suse.com/security/cve/CVE-2020-6400.html https://www.suse.com/security/cve/CVE-2020-6401.html https://www.suse.com/security/cve/CVE-2020-6402.html https://www.suse.com/security/cve/CVE-2020-6403.html https://www.suse.com/security/cve/CVE-2020-6404.html https://www.suse.com/security/cve/CVE-2020-6405.html https://www.suse.com/security/cve/CVE-2020-6406.html https://www.suse.com/security/cve/CVE-2020-6408.html https://www.suse.com/security/cve/CVE-2020-6409.html https://www.suse.com/security/cve/CVE-2020-6410.html https://www.suse.com/security/cve/CVE-2020-6411.html https://www.suse.com/security/cve/CVE-2020-6412.html https://www.suse.com/security/cve/CVE-2020-6413.html https://www.suse.com/security/cve/CVE-2020-6414.html https://www.suse.com/security/cve/CVE-2020-6415.html https://www.suse.com/security/cve/CVE-2020-6416.html https://www.suse.com/security/cve/CVE-2020-6417.html https://bugzilla.suse.com/1162833

1 0

openSUSE-RU-2020:0232-1: moderate: Recommended update for ebook-tools
by maintenance＠opensuse.org 18 Feb '20

18 Feb '20

openSUSE Recommended Update: Recommended update for ebook-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0232-1 Rating: moderate References: Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for ebook-tools fixes the following issues: * Fix a crash when a navPoint in toc.ncx has no navLabel, see kde#406116 and https://sourceforge.net/p/ebook-tools/bugs/8/ + add 0001-Avoid-crash-on-toc-navPoint-without-navLabel.patch * specfile cleanup, remove %defattr, add LICENSE Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-232=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): ebook-tools-0.2.2-lp151.3.3.1 ebook-tools-debuginfo-0.2.2-lp151.3.3.1 ebook-tools-debugsource-0.2.2-lp151.3.3.1 libepub-devel-0.2.2-lp151.3.3.1 libepub0-0.2.2-lp151.3.3.1 libepub0-debuginfo-0.2.2-lp151.3.3.1 - openSUSE Leap 15.1 (x86_64): libepub0-32bit-0.2.2-lp151.3.3.1 libepub0-32bit-debuginfo-0.2.2-lp151.3.3.1 References:

1 0

openSUSE-SU-2020:0230-1: important: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 18 Feb '20

18 Feb '20

openSUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0230-1 Rating: important References: #1163368 Cross-References: CVE-2020-6796 CVE-2020-6797 CVE-2020-6798 CVE-2020-6799 CVE-2020-6800 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 68.5.0 ESR * Fixed: Various stability and security fixes - Mozilla Firefox ESR68.5 MFSA 2020-06 (bsc#1163368) * CVE-2020-6796 (bmo#1610426) Missing bounds check on shared memory read in the parent process * CVE-2020-6797 (bmo#1596668) Extensions granted downloads.open permission could open arbitrary applications on Mac OSX * CVE-2020-6798 (bmo#1602944) Incorrect parsing of template tag could result in JavaScript injection * CVE-2020-6799 (bmo#1606596) Arbitrary code execution when opening pdf links from other applications, when Firefox is configured as default pdf reader * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543, bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785) Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5 This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-230=1 Package List: - openSUSE Leap 15.1 (x86_64): MozillaFirefox-68.5.0-lp151.2.30.1 MozillaFirefox-branding-upstream-68.5.0-lp151.2.30.1 MozillaFirefox-buildsymbols-68.5.0-lp151.2.30.1 MozillaFirefox-debuginfo-68.5.0-lp151.2.30.1 MozillaFirefox-debugsource-68.5.0-lp151.2.30.1 MozillaFirefox-devel-68.5.0-lp151.2.30.1 MozillaFirefox-translations-common-68.5.0-lp151.2.30.1 MozillaFirefox-translations-other-68.5.0-lp151.2.30.1 References: https://www.suse.com/security/cve/CVE-2020-6796.html https://www.suse.com/security/cve/CVE-2020-6797.html https://www.suse.com/security/cve/CVE-2020-6798.html https://www.suse.com/security/cve/CVE-2020-6799.html https://www.suse.com/security/cve/CVE-2020-6800.html https://bugzilla.suse.com/1163368

1 0