February 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2020:0223-1: moderate: Recommended update for python-pytest
by maintenance＠opensuse.org 15 Feb '20

15 Feb '20

openSUSE Recommended Update: Recommended update for python-pytest ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0223-1 Rating: moderate References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for python-pytest fixes the following issues: This update ships python-pytest in version 2.8.7. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2020-223=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): python-pytest-2.8.7-2.1 python3-pytest-2.8.7-2.1 References:

1 0

openSUSE-SU-2020:0220-1: moderate: Security update for nextcloud
by opensuse-security＠opensuse.org 15 Feb '20

15 Feb '20

openSUSE Security Update: Security update for nextcloud ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0220-1 Rating: moderate References: #1162766 #1162775 #1162776 #1162781 #1162782 #1162784 Cross-References: CVE-2019-15613 CVE-2019-15621 CVE-2019-15623 CVE-2019-15624 CVE-2020-8118 CVE-2020-8119 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update for nextcloud fixes the following issues: Nextcloud was updated to 15.0.14: - NC-SA-2020-002, CVE-2019-15613: workflow rules to depend their behaviour on the file extension when checking file mimetypes (boo#1162766) - NC-SA-2019-016, CVE-2019-15623: Exposure of Private Information caused the server to send it's domain and user IDs to the Nextcloud Lookup Server without any further data when the Lookup server is disabled (boo#1162775) - NC-SA-2019-015, CVE-2019-15624: Improper Input Validation allowed group admins to create users with IDs of system folders (boo#1162776) - NC-SA-2019-012, CVE-2020-8119: Improper authorization caused leaking of previews and files when a file-drop share link is opened via the gallery app (boo#1162781) - NC-SA-2019-014, CVE-2020-8118: An authenticated server-side request forgery allowed to detect local and remote services when adding a new subscription in the calendar application (boo#1162782) - NC-SA-2020-012, CVE-2019-15621: Improper permissions preservation causes sharees to be able to reshare with write permissions when sharing the mount point of a share they received, as a public link (boo#1162784) - To many changes. For detail see: https://nextcloud.com/changelog/ nextcloud was updated to 13.0.12: - Fix NC-SA-2020-001 - To many changes. For detail see: https://nextcloud.com/changelog/ Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2020-220=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): nextcloud-13.0.12-19.1 References: https://www.suse.com/security/cve/CVE-2019-15613.html https://www.suse.com/security/cve/CVE-2019-15621.html https://www.suse.com/security/cve/CVE-2019-15623.html https://www.suse.com/security/cve/CVE-2019-15624.html https://www.suse.com/security/cve/CVE-2020-8118.html https://www.suse.com/security/cve/CVE-2020-8119.html https://bugzilla.suse.com/1162766 https://bugzilla.suse.com/1162775 https://bugzilla.suse.com/1162776 https://bugzilla.suse.com/1162781 https://bugzilla.suse.com/1162782 https://bugzilla.suse.com/1162784

1 0

openSUSE-SU-2020:0219-1: moderate: Security update for docker-runc
by opensuse-security＠opensuse.org 13 Feb '20

13 Feb '20

openSUSE Security Update: Security update for docker-runc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0219-1 Rating: moderate References: #1160452 Cross-References: CVE-2019-19921 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for docker-runc fixes the following issues: - CVE-2019-19921: Fixed a volume mount race condition with shared mounts (bsc#1160452). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-219=1 Package List: - openSUSE Leap 15.1 (x86_64): docker-runc-1.0.0rc8+gitr3917_3e425f80a8c9-lp151.3.15.1 docker-runc-debuginfo-1.0.0rc8+gitr3917_3e425f80a8c9-lp151.3.15.1 References: https://www.suse.com/security/cve/CVE-2019-19921.html https://bugzilla.suse.com/1160452

1 0

openSUSE-RU-2020:0216-1: moderate: Recommended update for lvm2
by maintenance＠opensuse.org 12 Feb '20

12 Feb '20

openSUSE Recommended Update: Recommended update for lvm2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0216-1 Rating: moderate References: #1150021 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for lvm2 fixes the following issues: - Fix for LVM in KVM: The scsi presistent reservation scenario can trigger and error during LVM actions. (bsc#1150021) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-216=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): device-mapper-1.02.149-lp151.4.12.1 device-mapper-debuginfo-1.02.149-lp151.4.12.1 device-mapper-debugsource-1.02.149-lp151.4.12.1 device-mapper-devel-1.02.149-lp151.4.12.1 libdevmapper-event1_03-1.02.149-lp151.4.12.1 libdevmapper-event1_03-debuginfo-1.02.149-lp151.4.12.1 libdevmapper1_03-1.02.149-lp151.4.12.1 libdevmapper1_03-debuginfo-1.02.149-lp151.4.12.1 liblvm2app2_2-2.02.180-lp151.4.12.1 liblvm2app2_2-debuginfo-2.02.180-lp151.4.12.1 liblvm2cmd2_02-2.02.180-lp151.4.12.1 liblvm2cmd2_02-debuginfo-2.02.180-lp151.4.12.1 lvm2-2.02.180-lp151.4.12.1 lvm2-clvm-2.02.180-lp151.4.12.1 lvm2-clvm-debuginfo-2.02.180-lp151.4.12.1 lvm2-clvm-debugsource-2.02.180-lp151.4.12.1 lvm2-cmirrord-2.02.180-lp151.4.12.1 lvm2-cmirrord-debuginfo-2.02.180-lp151.4.12.1 lvm2-debuginfo-2.02.180-lp151.4.12.1 lvm2-debugsource-2.02.180-lp151.4.12.1 lvm2-devel-2.02.180-lp151.4.12.1 lvm2-lockd-2.02.180-lp151.4.12.1 lvm2-lockd-debuginfo-2.02.180-lp151.4.12.1 lvm2-testsuite-2.02.180-lp151.4.12.1 lvm2-testsuite-debuginfo-2.02.180-lp151.4.12.1 - openSUSE Leap 15.1 (x86_64): device-mapper-devel-32bit-1.02.149-lp151.4.12.1 libdevmapper-event1_03-32bit-1.02.149-lp151.4.12.1 libdevmapper-event1_03-32bit-debuginfo-1.02.149-lp151.4.12.1 libdevmapper1_03-32bit-1.02.149-lp151.4.12.1 libdevmapper1_03-32bit-debuginfo-1.02.149-lp151.4.12.1 References: https://bugzilla.suse.com/1150021

1 0

openSUSE-RU-2020:0218-1: moderate: Recommended update for yast2-sudo
by maintenance＠opensuse.org 12 Feb '20

12 Feb '20

openSUSE Recommended Update: Recommended update for yast2-sudo ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0218-1 Rating: moderate References: #1156929 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-sudo fixes the following issues: - Prevent truncating the sudoers file after writing the changes. (bsc#1156929) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-218=1 Package List: - openSUSE Leap 15.1 (noarch): yast2-sudo-4.1.1-lp151.2.3.1 References: https://bugzilla.suse.com/1156929

1 0

openSUSE-RU-2020:0217-1: moderate: Recommended update for tpm2.0-abrmd
by maintenance＠opensuse.org 12 Feb '20

12 Feb '20

openSUSE Recommended Update: Recommended update for tpm2.0-abrmd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0217-1 Rating: moderate References: #1159176 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for tpm2.0-abrmd fixes the following issues: - Fix tcti loading using for both shorthand and full version specificaton (bsc#1159176). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-217=1 Package List: - openSUSE Leap 15.1 (x86_64): libtss2-tcti-tabrmd0-2.0.2-lp151.4.3.1 libtss2-tcti-tabrmd0-debuginfo-2.0.2-lp151.4.3.1 tpm2.0-abrmd-2.0.2-lp151.4.3.1 tpm2.0-abrmd-debuginfo-2.0.2-lp151.4.3.1 tpm2.0-abrmd-debugsource-2.0.2-lp151.4.3.1 tpm2.0-abrmd-devel-2.0.2-lp151.4.3.1 References: https://bugzilla.suse.com/1159176

1 0

openSUSE-RU-2020:0215-1: moderate: Recommended update for lmdb
by maintenance＠opensuse.org 12 Feb '20

12 Feb '20

openSUSE Recommended Update: Recommended update for lmdb ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0215-1 Rating: moderate References: #1159086 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for lmdb fixes the following issues: - Fix assert in LMBD during 'mdb_page_search_root'. (bsc#1159086). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-215=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): liblmdb-0_9_17-0.9.17-lp151.4.6.1 liblmdb-0_9_17-debuginfo-0.9.17-lp151.4.6.1 lmdb-0.9.17-lp151.4.6.1 lmdb-debuginfo-0.9.17-lp151.4.6.1 lmdb-debugsource-0.9.17-lp151.4.6.1 lmdb-devel-0.9.17-lp151.4.6.1 - openSUSE Leap 15.1 (x86_64): liblmdb-0_9_17-32bit-0.9.17-lp151.4.6.1 liblmdb-0_9_17-32bit-debuginfo-0.9.17-lp151.4.6.1 References: https://bugzilla.suse.com/1159086

1 0

openSUSE-SU-2020:0213-1: important: Security update for pcp
by opensuse-security＠opensuse.org 12 Feb '20

12 Feb '20

openSUSE Security Update: Security update for pcp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0213-1 Rating: important References: #1129991 #1152763 #1153921 Cross-References: CVE-2019-3695 CVE-2019-3696 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for pcp fixes the following issues: Security issue fixed: - CVE-2019-3695: Fixed a local privilege escalation of the pcp user during package update (bsc#1152763). Non-security issue fixed: - Fixed an dependency issue with pcp2csv (bsc#1129991). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-213=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libpcp-devel-4.3.1-lp151.2.3.1 libpcp3-4.3.1-lp151.2.3.1 libpcp3-debuginfo-4.3.1-lp151.2.3.1 libpcp_gui2-4.3.1-lp151.2.3.1 libpcp_gui2-debuginfo-4.3.1-lp151.2.3.1 libpcp_import1-4.3.1-lp151.2.3.1 libpcp_import1-debuginfo-4.3.1-lp151.2.3.1 libpcp_mmv1-4.3.1-lp151.2.3.1 libpcp_mmv1-debuginfo-4.3.1-lp151.2.3.1 libpcp_trace2-4.3.1-lp151.2.3.1 libpcp_trace2-debuginfo-4.3.1-lp151.2.3.1 libpcp_web1-4.3.1-lp151.2.3.1 libpcp_web1-debuginfo-4.3.1-lp151.2.3.1 pcp-4.3.1-lp151.2.3.1 pcp-conf-4.3.1-lp151.2.3.1 pcp-debuginfo-4.3.1-lp151.2.3.1 pcp-debugsource-4.3.1-lp151.2.3.1 pcp-devel-4.3.1-lp151.2.3.1 pcp-devel-debuginfo-4.3.1-lp151.2.3.1 pcp-export-pcp2elasticsearch-4.3.1-lp151.2.3.1 pcp-export-pcp2graphite-4.3.1-lp151.2.3.1 pcp-export-pcp2influxdb-4.3.1-lp151.2.3.1 pcp-export-pcp2json-4.3.1-lp151.2.3.1 pcp-export-pcp2spark-4.3.1-lp151.2.3.1 pcp-export-pcp2xml-4.3.1-lp151.2.3.1 pcp-export-pcp2zabbix-4.3.1-lp151.2.3.1 pcp-export-zabbix-agent-4.3.1-lp151.2.3.1 pcp-export-zabbix-agent-debuginfo-4.3.1-lp151.2.3.1 pcp-gui-4.3.1-lp151.2.3.1 pcp-gui-debuginfo-4.3.1-lp151.2.3.1 pcp-import-collectl2pcp-4.3.1-lp151.2.3.1 pcp-import-collectl2pcp-debuginfo-4.3.1-lp151.2.3.1 pcp-import-ganglia2pcp-4.3.1-lp151.2.3.1 pcp-import-iostat2pcp-4.3.1-lp151.2.3.1 pcp-import-mrtg2pcp-4.3.1-lp151.2.3.1 pcp-import-sar2pcp-4.3.1-lp151.2.3.1 pcp-manager-4.3.1-lp151.2.3.1 pcp-manager-debuginfo-4.3.1-lp151.2.3.1 pcp-pmda-activemq-4.3.1-lp151.2.3.1 pcp-pmda-apache-4.3.1-lp151.2.3.1 pcp-pmda-apache-debuginfo-4.3.1-lp151.2.3.1 pcp-pmda-bash-4.3.1-lp151.2.3.1 pcp-pmda-bash-debuginfo-4.3.1-lp151.2.3.1 pcp-pmda-bind2-4.3.1-lp151.2.3.1 pcp-pmda-bonding-4.3.1-lp151.2.3.1 pcp-pmda-cifs-4.3.1-lp151.2.3.1 pcp-pmda-cifs-debuginfo-4.3.1-lp151.2.3.1 pcp-pmda-cisco-4.3.1-lp151.2.3.1 pcp-pmda-cisco-debuginfo-4.3.1-lp151.2.3.1 pcp-pmda-dbping-4.3.1-lp151.2.3.1 pcp-pmda-dm-4.3.1-lp151.2.3.1 pcp-pmda-dm-debuginfo-4.3.1-lp151.2.3.1 pcp-pmda-docker-4.3.1-lp151.2.3.1 pcp-pmda-docker-debuginfo-4.3.1-lp151.2.3.1 pcp-pmda-ds389-4.3.1-lp151.2.3.1 pcp-pmda-ds389log-4.3.1-lp151.2.3.1 pcp-pmda-elasticsearch-4.3.1-lp151.2.3.1 pcp-pmda-gfs2-4.3.1-lp151.2.3.1 pcp-pmda-gfs2-debuginfo-4.3.1-lp151.2.3.1 pcp-pmda-gluster-4.3.1-lp151.2.3.1 pcp-pmda-gpfs-4.3.1-lp151.2.3.1 pcp-pmda-gpsd-4.3.1-lp151.2.3.1 pcp-pmda-haproxy-4.3.1-lp151.2.3.1 pcp-pmda-infiniband-4.3.1-lp151.2.3.1 pcp-pmda-infiniband-debuginfo-4.3.1-lp151.2.3.1 pcp-pmda-json-4.3.1-lp151.2.3.1 pcp-pmda-lmsensors-4.3.1-lp151.2.3.1 pcp-pmda-logger-4.3.1-lp151.2.3.1 pcp-pmda-logger-debuginfo-4.3.1-lp151.2.3.1 pcp-pmda-lustre-4.3.1-lp151.2.3.1 pcp-pmda-lustrecomm-4.3.1-lp151.2.3.1 pcp-pmda-lustrecomm-debuginfo-4.3.1-lp151.2.3.1 pcp-pmda-mailq-4.3.1-lp151.2.3.1 pcp-pmda-mailq-debuginfo-4.3.1-lp151.2.3.1 pcp-pmda-memcache-4.3.1-lp151.2.3.1 pcp-pmda-mic-4.3.1-lp151.2.3.1 pcp-pmda-mounts-4.3.1-lp151.2.3.1 pcp-pmda-mounts-debuginfo-4.3.1-lp151.2.3.1 pcp-pmda-mysql-4.3.1-lp151.2.3.1 pcp-pmda-named-4.3.1-lp151.2.3.1 pcp-pmda-netfilter-4.3.1-lp151.2.3.1 pcp-pmda-news-4.3.1-lp151.2.3.1 pcp-pmda-nfsclient-4.3.1-lp151.2.3.1 pcp-pmda-nginx-4.3.1-lp151.2.3.1 pcp-pmda-nutcracker-4.3.1-lp151.2.3.1 pcp-pmda-nvidia-gpu-4.3.1-lp151.2.3.1 pcp-pmda-nvidia-gpu-debuginfo-4.3.1-lp151.2.3.1 pcp-pmda-oracle-4.3.1-lp151.2.3.1 pcp-pmda-papi-4.3.1-lp151.2.3.1 pcp-pmda-papi-debuginfo-4.3.1-lp151.2.3.1 pcp-pmda-pdns-4.3.1-lp151.2.3.1 pcp-pmda-perfevent-4.3.1-lp151.2.3.1 pcp-pmda-perfevent-debuginfo-4.3.1-lp151.2.3.1 pcp-pmda-postfix-4.3.1-lp151.2.3.1 pcp-pmda-prometheus-4.3.1-lp151.2.3.1 pcp-pmda-redis-4.3.1-lp151.2.3.1 pcp-pmda-roomtemp-4.3.1-lp151.2.3.1 pcp-pmda-roomtemp-debuginfo-4.3.1-lp151.2.3.1 pcp-pmda-rpm-4.3.1-lp151.2.3.1 pcp-pmda-rpm-debuginfo-4.3.1-lp151.2.3.1 pcp-pmda-rsyslog-4.3.1-lp151.2.3.1 pcp-pmda-samba-4.3.1-lp151.2.3.1 pcp-pmda-sendmail-4.3.1-lp151.2.3.1 pcp-pmda-sendmail-debuginfo-4.3.1-lp151.2.3.1 pcp-pmda-shping-4.3.1-lp151.2.3.1 pcp-pmda-shping-debuginfo-4.3.1-lp151.2.3.1 pcp-pmda-slurm-4.3.1-lp151.2.3.1 pcp-pmda-smart-4.3.1-lp151.2.3.1 pcp-pmda-smart-debuginfo-4.3.1-lp151.2.3.1 pcp-pmda-snmp-4.3.1-lp151.2.3.1 pcp-pmda-summary-4.3.1-lp151.2.3.1 pcp-pmda-summary-debuginfo-4.3.1-lp151.2.3.1 pcp-pmda-systemd-4.3.1-lp151.2.3.1 pcp-pmda-systemd-debuginfo-4.3.1-lp151.2.3.1 pcp-pmda-trace-4.3.1-lp151.2.3.1 pcp-pmda-trace-debuginfo-4.3.1-lp151.2.3.1 pcp-pmda-unbound-4.3.1-lp151.2.3.1 pcp-pmda-vmware-4.3.1-lp151.2.3.1 pcp-pmda-weblog-4.3.1-lp151.2.3.1 pcp-pmda-weblog-debuginfo-4.3.1-lp151.2.3.1 pcp-pmda-zimbra-4.3.1-lp151.2.3.1 pcp-pmda-zswap-4.3.1-lp151.2.3.1 pcp-system-tools-4.3.1-lp151.2.3.1 pcp-system-tools-debuginfo-4.3.1-lp151.2.3.1 pcp-testsuite-4.3.1-lp151.2.3.1 pcp-testsuite-debuginfo-4.3.1-lp151.2.3.1 pcp-webapi-4.3.1-lp151.2.3.1 pcp-webapi-debuginfo-4.3.1-lp151.2.3.1 pcp-zeroconf-4.3.1-lp151.2.3.1 perl-PCP-LogImport-4.3.1-lp151.2.3.1 perl-PCP-LogImport-debuginfo-4.3.1-lp151.2.3.1 perl-PCP-LogSummary-4.3.1-lp151.2.3.1 perl-PCP-MMV-4.3.1-lp151.2.3.1 perl-PCP-MMV-debuginfo-4.3.1-lp151.2.3.1 perl-PCP-PMDA-4.3.1-lp151.2.3.1 perl-PCP-PMDA-debuginfo-4.3.1-lp151.2.3.1 python3-pcp-4.3.1-lp151.2.3.1 python3-pcp-debuginfo-4.3.1-lp151.2.3.1 - openSUSE Leap 15.1 (noarch): pcp-doc-4.3.1-lp151.2.3.1 References: https://www.suse.com/security/cve/CVE-2019-3695.html https://www.suse.com/security/cve/CVE-2019-3696.html https://bugzilla.suse.com/1129991 https://bugzilla.suse.com/1152763 https://bugzilla.suse.com/1153921

1 0

openSUSE-RU-2020:0212-1: moderate: Recommended update for kernel-firmware
by maintenance＠opensuse.org 12 Feb '20

12 Feb '20

openSUSE Recommended Update: Recommended update for kernel-firmware ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0212-1 Rating: moderate References: #1143331 #1160204 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for kernel-firmware fixes the following issues: Update to version 20200107 (git commit 67d4ff59bf33): * Mellanox: Add new mlxsw_spectrum firmware xx.2000.2714 * radeon: update oland rlc microcode from amdgpu * amdgpu: update vega20 microcode for 19.50 * amdgpu: update vega12 microcode for 19.50 * amdgpu: update vega10 microcode for 19.50 * amdgpu: update picasso microcode for 19.50 * amdgpu: update raven2 microcode for 19.50 * amdgpu: update raven microcode for 19.50 * amdgpu: update navi10 microcode for 19.50 * amdgpu: update navi14 microcode for 19.50 * amdgpu: add TA microcode for Raven asics * qed: Add firmware 8.42.2.0 * Adjust WHENCE entry to check_whence doesn't complain * qcom: Switch SDM845 WLAN firmware * linux-firmware: add NXP firmware licence file * ath10k: WCN3990 hw1.0: add firmware WLAN.HL.2.0-01387-QCAHLSWMTPLZ-1 * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00070 * ath10k: QCA988X hw2.0: update firmware-5.bin to 10.2.4-1.0-00047 * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00070 * ath10k: QCA9887 hw1.0: update firmware-5.bin to 10.2.4-1.0-00047 * ath10k: QCA6174 hw3.0: update board-2.bin * linux-firmware: Update AMD cpu microcode (bsc#1160204) * inside-secure: add new "mini" firmware for the EIP197 driver * WHENCE: Add raspberry-pi4 SDIO file * qcom: update venus firmware files for v5.4 * cxgb4: Update firmware to revision 1.24.11.0 * brcm: Add BCM43455 NVRAM for Raspberry Pi 4 B * qcom: Add SDM845 Compute DSP firmware * qcom: Add SDM845 Audio DSP firmware * qcom: Add SDM845 modem firmware This patch reverts vega10_sos.bin again as the latest firmware still broken for SLE15-SP1 (4.19 DRM-base) amdgpu driver (bsc#1143331) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-212=1 Package List: - openSUSE Leap 15.1 (noarch): kernel-firmware-20200107-lp151.2.12.1 ucode-amd-20200107-lp151.2.12.1 References: https://bugzilla.suse.com/1143331 https://bugzilla.suse.com/1160204

1 0

openSUSE-SU-2020:0214-1: moderate: Security update for rubygem-rack
by opensuse-security＠opensuse.org 12 Feb '20

12 Feb '20

openSUSE Security Update: Security update for rubygem-rack ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0214-1 Rating: moderate References: #1114828 #1116600 #1159548 Cross-References: CVE-2018-16471 CVE-2019-16782 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for rubygem-rack to version 2.0.8 fixes the following issues: - CVE-2018-16471: Fixed a cross-site scripting (XSS) flaw via the scheme method on Rack::Request (bsc#1116600). - CVE-2019-16782: Fixed a possible information leak and session hijack vulnerability (bsc#1159548). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-214=1 Package List: - openSUSE Leap 15.1 (x86_64): ruby2.5-rubygem-rack-2.0.8-lp151.3.3.1 ruby2.5-rubygem-rack-doc-2.0.8-lp151.3.3.1 ruby2.5-rubygem-rack-testsuite-2.0.8-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2018-16471.html https://www.suse.com/security/cve/CVE-2019-16782.html https://bugzilla.suse.com/1114828 https://bugzilla.suse.com/1116600 https://bugzilla.suse.com/1159548

1 0