February 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2020:0191-1: moderate: Recommended update for yast2-packager
by maintenance＠opensuse.org 10 Feb '20

10 Feb '20

openSUSE Recommended Update: Recommended update for yast2-packager ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0191-1 Rating: moderate References: #1157926 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-packager fixes the following issues: - Speed up product renames calculation while running a migration test. (bsc#1157926) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-191=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): yast2-packager-4.1.50-lp151.2.9.1 References: https://bugzilla.suse.com/1157926

1 0

openSUSE-RU-2020:0190-1: moderate: Recommended update for gssproxy
by maintenance＠opensuse.org 09 Feb '20

09 Feb '20

openSUSE Recommended Update: Recommended update for gssproxy ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0190-1 Rating: moderate References: #1024309 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gssproxy fixes the following issues: - Fix paths in tests and replace python's f-string usage - Initial check-in of gssproxy is needed on the NFS server if krb5 is used for NFS authentication using an AD directory server. (bsc#1024309)(FATE#322526) - 'krb5' may need "auth_to_local = RULE:[1:$1@$0]" on the "realms" section when "winbind" is used for nsswitch.conf. (bsc#1024309)(FATE#322526) Also ding-libs was updated from 0.6.0 to 0.6.1 (jsc#ECO-248): - libini now supports validators that check for well-formed INI files. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-190=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): ding-libs-debugsource-0.6.1-lp151.3.3.1 libbasicobjects-devel-0.1.1-lp151.3.3.1 libbasicobjects0-0.1.1-lp151.3.3.1 libbasicobjects0-debuginfo-0.1.1-lp151.3.3.1 libcollection-devel-0.7.0-lp151.3.3.1 libcollection4-0.7.0-lp151.3.3.1 libcollection4-debuginfo-0.7.0-lp151.3.3.1 libdhash-devel-0.5.0-lp151.3.3.1 libdhash1-0.5.0-lp151.3.3.1 libdhash1-debuginfo-0.5.0-lp151.3.3.1 libini_config-devel-1.3.1-lp151.3.3.1 libini_config5-1.3.1-lp151.3.3.1 libini_config5-debuginfo-1.3.1-lp151.3.3.1 libpath_utils-devel-0.2.1-lp151.3.3.1 libpath_utils1-0.2.1-lp151.3.3.1 libpath_utils1-debuginfo-0.2.1-lp151.3.3.1 libref_array-devel-0.1.5-lp151.3.3.1 libref_array1-0.1.5-lp151.3.3.1 libref_array1-debuginfo-0.1.5-lp151.3.3.1 - openSUSE Leap 15.1 (x86_64): libbasicobjects-devel-32bit-0.1.1-lp151.3.3.1 libbasicobjects0-32bit-0.1.1-lp151.3.3.1 libbasicobjects0-32bit-debuginfo-0.1.1-lp151.3.3.1 libcollection-devel-32bit-0.7.0-lp151.3.3.1 libcollection4-32bit-0.7.0-lp151.3.3.1 libcollection4-32bit-debuginfo-0.7.0-lp151.3.3.1 libdhash-devel-32bit-0.5.0-lp151.3.3.1 libdhash1-32bit-0.5.0-lp151.3.3.1 libdhash1-32bit-debuginfo-0.5.0-lp151.3.3.1 libini_config-devel-32bit-1.3.1-lp151.3.3.1 libini_config5-32bit-1.3.1-lp151.3.3.1 libini_config5-32bit-debuginfo-1.3.1-lp151.3.3.1 libpath_utils-devel-32bit-0.2.1-lp151.3.3.1 libpath_utils1-32bit-0.2.1-lp151.3.3.1 libpath_utils1-32bit-debuginfo-0.2.1-lp151.3.3.1 libref_array-devel-32bit-0.1.5-lp151.3.3.1 libref_array1-32bit-0.1.5-lp151.3.3.1 libref_array1-32bit-debuginfo-0.1.5-lp151.3.3.1 References: https://bugzilla.suse.com/1024309

1 0

openSUSE-SU-2020:0189-1: important: Security update for chromium
by opensuse-security＠opensuse.org 09 Feb '20

09 Feb '20

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0189-1 Rating: important References: #1162833 Cross-References: CVE-2019-18197 CVE-2019-19880 CVE-2019-19923 CVE-2019-19925 CVE-2019-19926 CVE-2020-6381 CVE-2020-6382 CVE-2020-6385 CVE-2020-6387 CVE-2020-6388 CVE-2020-6389 CVE-2020-6390 CVE-2020-6391 CVE-2020-6392 CVE-2020-6393 CVE-2020-6394 CVE-2020-6395 CVE-2020-6396 CVE-2020-6397 CVE-2020-6398 CVE-2020-6399 CVE-2020-6400 CVE-2020-6401 CVE-2020-6402 CVE-2020-6403 CVE-2020-6404 CVE-2020-6405 CVE-2020-6406 CVE-2020-6408 CVE-2020-6409 CVE-2020-6410 CVE-2020-6411 CVE-2020-6412 CVE-2020-6413 CVE-2020-6414 CVE-2020-6415 CVE-2020-6416 CVE-2020-6417 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 38 vulnerabilities is now available. Description: This update for chromium fixes the following issues: Chromium was updated to version 80.0.3987.87 (boo#1162833). Security issues fixed: - CVE-2020-6381: Integer overflow in JavaScript (boo#1162833). - CVE-2020-6382: Type Confusion in JavaScript (boo#1162833). - CVE-2019-18197: Multiple vulnerabilities in XML (boo#1162833). - CVE-2019-19926: Inappropriate implementation in SQLite (boo#1162833). - CVE-2020-6385: Insufficient policy enforcement in storage (boo#1162833). - CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite (boo#1162833). - CVE-2020-6387: Out of bounds write in WebRTC (boo#1162833). - CVE-2020-6388: Out of bounds memory access in WebAudio (boo#1162833). - CVE-2020-6389: Out of bounds write in WebRTC (boo#1162833). - CVE-2020-6390: Out of bounds memory access in streams (boo#1162833). - CVE-2020-6391: Insufficient validation of untrusted input in Blink (boo#1162833). - CVE-2020-6392: Insufficient policy enforcement in extensions (boo#1162833). - CVE-2020-6393: Insufficient policy enforcement in Blink (boo#1162833). - CVE-2020-6394: Insufficient policy enforcement in Blink (boo#1162833). - CVE-2020-6395: Out of bounds read in JavaScript (boo#1162833). - CVE-2020-6396: Inappropriate implementation in Skia (boo#1162833). - CVE-2020-6397: Incorrect security UI in sharing (boo#1162833). - CVE-2020-6398: Uninitialized use in PDFium (boo#1162833). - CVE-2020-6399: Insufficient policy enforcement in AppCache (boo#1162833). - CVE-2020-6400: Inappropriate implementation in CORS (boo#1162833). - CVE-2020-6401: Insufficient validation of untrusted input in Omnibox (boo#1162833). - CVE-2020-6402: Insufficient policy enforcement in downloads (boo#1162833). - CVE-2020-6403: Incorrect security UI in Omnibox (boo#1162833). - CVE-2020-6404: Inappropriate implementation in Blink (boo#1162833). - CVE-2020-6405: Out of bounds read in SQLite (boo#1162833). - CVE-2020-6406: Use after free in audio (boo#1162833). - CVE-2019-19923: Out of bounds memory access in SQLite (boo#1162833). - CVE-2020-6408: Insufficient policy enforcement in CORS (boo#1162833). - CVE-2020-6409: Inappropriate implementation in Omnibox (boo#1162833). - CVE-2020-6410: Insufficient policy enforcement in navigation (boo#1162833). - CVE-2020-6411: Insufficient validation of untrusted input in Omnibox (boo#1162833). - CVE-2020-6412: Insufficient validation of untrusted input in Omnibox (boo#1162833). - CVE-2020-6413: Inappropriate implementation in Blink (boo#1162833). - CVE-2020-6414: Insufficient policy enforcement in Safe Browsing (boo#1162833). - CVE-2020-6415: Inappropriate implementation in JavaScript (boo#1162833). - CVE-2020-6416: Insufficient data validation in streams (boo#1162833). - CVE-2020-6417: Inappropriate implementation in installer (boo#1162833). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-189=1 Package List: - openSUSE Leap 15.1 (x86_64): chromedriver-80.0.3987.87-lp151.2.63.1 chromedriver-debuginfo-80.0.3987.87-lp151.2.63.1 chromium-80.0.3987.87-lp151.2.63.1 chromium-debuginfo-80.0.3987.87-lp151.2.63.1 chromium-debugsource-80.0.3987.87-lp151.2.63.1 References: https://www.suse.com/security/cve/CVE-2019-18197.html https://www.suse.com/security/cve/CVE-2019-19880.html https://www.suse.com/security/cve/CVE-2019-19923.html https://www.suse.com/security/cve/CVE-2019-19925.html https://www.suse.com/security/cve/CVE-2019-19926.html https://www.suse.com/security/cve/CVE-2020-6381.html https://www.suse.com/security/cve/CVE-2020-6382.html https://www.suse.com/security/cve/CVE-2020-6385.html https://www.suse.com/security/cve/CVE-2020-6387.html https://www.suse.com/security/cve/CVE-2020-6388.html https://www.suse.com/security/cve/CVE-2020-6389.html https://www.suse.com/security/cve/CVE-2020-6390.html https://www.suse.com/security/cve/CVE-2020-6391.html https://www.suse.com/security/cve/CVE-2020-6392.html https://www.suse.com/security/cve/CVE-2020-6393.html https://www.suse.com/security/cve/CVE-2020-6394.html https://www.suse.com/security/cve/CVE-2020-6395.html https://www.suse.com/security/cve/CVE-2020-6396.html https://www.suse.com/security/cve/CVE-2020-6397.html https://www.suse.com/security/cve/CVE-2020-6398.html https://www.suse.com/security/cve/CVE-2020-6399.html https://www.suse.com/security/cve/CVE-2020-6400.html https://www.suse.com/security/cve/CVE-2020-6401.html https://www.suse.com/security/cve/CVE-2020-6402.html https://www.suse.com/security/cve/CVE-2020-6403.html https://www.suse.com/security/cve/CVE-2020-6404.html https://www.suse.com/security/cve/CVE-2020-6405.html https://www.suse.com/security/cve/CVE-2020-6406.html https://www.suse.com/security/cve/CVE-2020-6408.html https://www.suse.com/security/cve/CVE-2020-6409.html https://www.suse.com/security/cve/CVE-2020-6410.html https://www.suse.com/security/cve/CVE-2020-6411.html https://www.suse.com/security/cve/CVE-2020-6412.html https://www.suse.com/security/cve/CVE-2020-6413.html https://www.suse.com/security/cve/CVE-2020-6414.html https://www.suse.com/security/cve/CVE-2020-6415.html https://www.suse.com/security/cve/CVE-2020-6416.html https://www.suse.com/security/cve/CVE-2020-6417.html https://bugzilla.suse.com/1162833

1 0

openSUSE-RU-2020:0188-1: moderate: Recommended update for umoci
by maintenance＠opensuse.org 08 Feb '20

08 Feb '20

openSUSE Recommended Update: Recommended update for umoci ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0188-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for umoci fixes the following issues: - Enable build for s390x on openSUSE - Update to umoci v0.4.4. * Added full-stack verification of blob hashes and descriptors for all operations (improving our hardening against bad images). * For details, see CHANGELOG.md in the package. - Update to umoci v0.4.3. * Added --no-history to all commands with --history.* flags. Should only be used for umoci-config(1). * Added `umoci insert --tag` to allow non-destructive modifications. * For details, see packaged /usr/share/doc/packages/umoci/CHANGELOG.md. - Update to umoci v0.4.2. * umoci now has an exposed Go API * Added `umoci unpack --keep-dirlinks` * `umoci insert` now supports whiteouts two ways. * For details, see CHANGELOG.md in the package. - Update to umoci v0.4.1. * Support more tags (the valid set of characters in tags has expanded). * Add 'umoci insert' and 'umoci raw unpack'. * 'umoci unpack' correctly handles out-of-order whiteouts now. * 'umoci unpack' and 'umoci repack' make sure of a more optimised gzip implementation now -- in some benchmarks 'umoci repack' can have a speedup of up to 3x. * For details, see CHANGELOG.md in the package. - Update to umoci v0.4.0. Upstream changelog: + `umoci repack` now supports `--refresh-bundle` which will update the OCI bundle's metadata (mtree and umoci-specific manifests) after packing the image tag. This means that the bundle can be used as a base layer for future diffs without needing to unpack the image again. openSUSE/umoci#196 + Added a website, and reworked the documentation to be better structured. You can visit the website at [`umo.ci`][umo.ci]. openSUSE/umoci#188 + Added support for the `user.rootlesscontainers` specification, which allows for persistent on-disk emulation of `chown(2)` inside rootless containers. This implementation is interoperable with [@AkihiroSuda's `PRoot` fork][as-proot-fork] (though we do not test its interoperability at the moment) as both tools use [the same protobuf specification][rootlesscontainers-proto]. openSUSE/umoci#227 + `umoci unpack` now has support for opaque whiteouts (whiteouts which remove all children of a directory in the lower layer), though `umoci repack` does not currently have support for generating them. While this is technically a spec requirement, through testing we've never encountered an actual user of these whiteouts. openSUSE/umoci#224 openSUSE/umoci#229 + `umoci unpack` will now use some rootless tricks inside user namespaces for operations that are known to fail (such as `mknod(2)`) while other operations will be carried out as normal (such as `lchown(2)`). It should be noted that the `/proc/self/uid_map` checking we do can be tricked into not detecting user namespaces, but you would need to be trying to break it on purpose. openSUSE/umoci#171 openSUSE/umoci#230 * Fix a bug in our "parent directory restore" code, which is responsible for ensuring that the mtime and other similar properties of a directory are not modified by extraction inside said directory. The bug would manifest as xattrs not being restored properly in certain edge-cases (which we incidentally hit in a test-case). openSUSE/umoci#161 openSUSE/umoci#162 * `umoci unpack` will now "clean up" the bundle generated if an error occurs during unpacking. Previously this didn't happen, which made cleaning up the responsibility of the caller (which was quite difficult if you were unprivileged). This is a breaking change, but is in the error path so it's not critical. openSUSE/umoci#174 openSUSE/umoci#187 * `umoci gc` now will no longer remove unknown files and directories that aren't `flock(2)`ed, thus ensuring that any possible OCI image-spec extensions or other users of an image being operated on will no longer break. openSUSE/umoci#198 * `umoci unpack --rootless` will now correctly handle regular file unpacking when overwriting a file that `umoci` doesn't have write access to. In addition, the semantics of pre-existing hardlinks to a clobbered file are clarified (the hard-links will not refer to the new layer's inode). openSUSE/umoci#222 openSUSE/umoci#223 [as-proot-fork]: https://github.com/AkihiroSuda/runrootless [rootlesscontainers-proto]: https://rootlesscontaine.rs/proto/rootlesscontainers.proto [umo.ci]: https://umo.ci/ This update was imported from the SUSE:SLE-15:Update update project. This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-188=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): umoci-0.4.4-bp151.2.3.1 References:

1 0

openSUSE-SU-2020:0187-1: moderate: Security update for ceph
by opensuse-security＠opensuse.org 08 Feb '20

08 Feb '20

openSUSE Security Update: Security update for ceph ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0187-1 Rating: moderate References: #1161074 #1161312 Cross-References: CVE-2020-1699 CVE-2020-1700 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for ceph fixes the following issues: - CVE-2020-1700: Fixed a denial of service against the RGW server via connection leakage (bsc#1161312). - CVE-2020-1699: Fixed a information disclosure by improper URL checking (bsc#1161074). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-187=1 Package List: - openSUSE Leap 15.1 (noarch): ceph-dashboard-e2e-14.2.5.382+g8881d33957-lp151.2.10.1 ceph-grafana-dashboards-14.2.5.382+g8881d33957-lp151.2.10.1 ceph-mgr-dashboard-14.2.5.382+g8881d33957-lp151.2.10.1 ceph-mgr-diskprediction-cloud-14.2.5.382+g8881d33957-lp151.2.10.1 ceph-mgr-diskprediction-local-14.2.5.382+g8881d33957-lp151.2.10.1 ceph-mgr-k8sevents-14.2.5.382+g8881d33957-lp151.2.10.1 ceph-mgr-rook-14.2.5.382+g8881d33957-lp151.2.10.1 ceph-mgr-ssh-14.2.5.382+g8881d33957-lp151.2.10.1 ceph-prometheus-alerts-14.2.5.382+g8881d33957-lp151.2.10.1 - openSUSE Leap 15.1 (x86_64): ceph-14.2.5.382+g8881d33957-lp151.2.10.1 ceph-base-14.2.5.382+g8881d33957-lp151.2.10.1 ceph-base-debuginfo-14.2.5.382+g8881d33957-lp151.2.10.1 ceph-common-14.2.5.382+g8881d33957-lp151.2.10.1 ceph-common-debuginfo-14.2.5.382+g8881d33957-lp151.2.10.1 ceph-debugsource-14.2.5.382+g8881d33957-lp151.2.10.1 ceph-fuse-14.2.5.382+g8881d33957-lp151.2.10.1 ceph-fuse-debuginfo-14.2.5.382+g8881d33957-lp151.2.10.1 ceph-mds-14.2.5.382+g8881d33957-lp151.2.10.1 ceph-mds-debuginfo-14.2.5.382+g8881d33957-lp151.2.10.1 ceph-mgr-14.2.5.382+g8881d33957-lp151.2.10.1 ceph-mgr-debuginfo-14.2.5.382+g8881d33957-lp151.2.10.1 ceph-mon-14.2.5.382+g8881d33957-lp151.2.10.1 ceph-mon-debuginfo-14.2.5.382+g8881d33957-lp151.2.10.1 ceph-osd-14.2.5.382+g8881d33957-lp151.2.10.1 ceph-osd-debuginfo-14.2.5.382+g8881d33957-lp151.2.10.1 ceph-radosgw-14.2.5.382+g8881d33957-lp151.2.10.1 ceph-radosgw-debuginfo-14.2.5.382+g8881d33957-lp151.2.10.1 ceph-resource-agents-14.2.5.382+g8881d33957-lp151.2.10.1 ceph-test-14.2.5.382+g8881d33957-lp151.2.10.1 ceph-test-debuginfo-14.2.5.382+g8881d33957-lp151.2.10.1 ceph-test-debugsource-14.2.5.382+g8881d33957-lp151.2.10.1 cephfs-shell-14.2.5.382+g8881d33957-lp151.2.10.1 libcephfs-devel-14.2.5.382+g8881d33957-lp151.2.10.1 libcephfs2-14.2.5.382+g8881d33957-lp151.2.10.1 libcephfs2-debuginfo-14.2.5.382+g8881d33957-lp151.2.10.1 librados-devel-14.2.5.382+g8881d33957-lp151.2.10.1 librados-devel-debuginfo-14.2.5.382+g8881d33957-lp151.2.10.1 librados2-14.2.5.382+g8881d33957-lp151.2.10.1 librados2-debuginfo-14.2.5.382+g8881d33957-lp151.2.10.1 libradospp-devel-14.2.5.382+g8881d33957-lp151.2.10.1 libradosstriper-devel-14.2.5.382+g8881d33957-lp151.2.10.1 libradosstriper1-14.2.5.382+g8881d33957-lp151.2.10.1 libradosstriper1-debuginfo-14.2.5.382+g8881d33957-lp151.2.10.1 librbd-devel-14.2.5.382+g8881d33957-lp151.2.10.1 librbd1-14.2.5.382+g8881d33957-lp151.2.10.1 librbd1-debuginfo-14.2.5.382+g8881d33957-lp151.2.10.1 librgw-devel-14.2.5.382+g8881d33957-lp151.2.10.1 librgw2-14.2.5.382+g8881d33957-lp151.2.10.1 librgw2-debuginfo-14.2.5.382+g8881d33957-lp151.2.10.1 python3-ceph-argparse-14.2.5.382+g8881d33957-lp151.2.10.1 python3-cephfs-14.2.5.382+g8881d33957-lp151.2.10.1 python3-cephfs-debuginfo-14.2.5.382+g8881d33957-lp151.2.10.1 python3-rados-14.2.5.382+g8881d33957-lp151.2.10.1 python3-rados-debuginfo-14.2.5.382+g8881d33957-lp151.2.10.1 python3-rbd-14.2.5.382+g8881d33957-lp151.2.10.1 python3-rbd-debuginfo-14.2.5.382+g8881d33957-lp151.2.10.1 python3-rgw-14.2.5.382+g8881d33957-lp151.2.10.1 python3-rgw-debuginfo-14.2.5.382+g8881d33957-lp151.2.10.1 rados-objclass-devel-14.2.5.382+g8881d33957-lp151.2.10.1 rbd-fuse-14.2.5.382+g8881d33957-lp151.2.10.1 rbd-fuse-debuginfo-14.2.5.382+g8881d33957-lp151.2.10.1 rbd-mirror-14.2.5.382+g8881d33957-lp151.2.10.1 rbd-mirror-debuginfo-14.2.5.382+g8881d33957-lp151.2.10.1 rbd-nbd-14.2.5.382+g8881d33957-lp151.2.10.1 rbd-nbd-debuginfo-14.2.5.382+g8881d33957-lp151.2.10.1 References: https://www.suse.com/security/cve/CVE-2020-1699.html https://www.suse.com/security/cve/CVE-2020-1700.html https://bugzilla.suse.com/1161074 https://bugzilla.suse.com/1161312

1 0

openSUSE-RU-2020:0186-1: moderate: Recommended update for python-pyroute2
by maintenance＠opensuse.org 08 Feb '20

08 Feb '20

openSUSE Recommended Update: Recommended update for python-pyroute2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0186-1 Rating: moderate References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for python-pyroute2 fixes the following issues: python-pyroute2 was shipped in version 0.5.6. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2020-186=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): python-pyroute2-0.5.6-2.1 python3-pyroute2-0.5.6-2.1 References:

1 0

openSUSE-RU-2020:0185-1: moderate: Recommended update for opus
by maintenance＠opensuse.org 07 Feb '20

07 Feb '20

openSUSE Recommended Update: Recommended update for opus ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0185-1 Rating: moderate References: #1162395 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for opus fixes the following issues: - Fixes an issue with the analysis on files with digital silence (all zeros), especially on x87 builds (mostly affects 32-bit builds) - Improved speech/music detection based on a neural network - Low-bitrate speech improvements - Added support for immersive audio using ambisonics - Improved tone quality This update also improves the security of this software. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-185=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libopus-devel-1.3.1-lp151.3.3.1 libopus0-1.3.1-lp151.3.3.1 libopus0-debuginfo-1.3.1-lp151.3.3.1 opus-debugsource-1.3.1-lp151.3.3.1 - openSUSE Leap 15.1 (x86_64): libopus0-32bit-1.3.1-lp151.3.3.1 libopus0-32bit-debuginfo-1.3.1-lp151.3.3.1 References: https://bugzilla.suse.com/1162395

1 0

openSUSE-RU-2020:0181-1: moderate: Recommended update for lxc
by maintenance＠opensuse.org 06 Feb '20

06 Feb '20

openSUSE Recommended Update: Recommended update for lxc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0181-1 Rating: moderate References: #1162426 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for lxc fixes the following issues: - Fix bash-completion paths to match the binary names (and to avoid conflicts with LXD). boo#1162426 - Fixed "Containers fail to start regression lxc 3.2" This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-181=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): liblxc-devel-3.2.1-bp151.5.6.1 liblxc1-3.2.1-bp151.5.6.1 lxc-3.2.1-bp151.5.6.1 pam_cgfs-3.2.1-bp151.5.6.1 - openSUSE Backports SLE-15-SP1 (noarch): lxc-bash-completion-3.2.1-bp151.5.6.1 References: https://bugzilla.suse.com/1162426

1 0

openSUSE-RU-2020:0177-1: moderate: Recommended update for libisds
by maintenance＠opensuse.org 06 Feb '20

06 Feb '20

openSUSE Recommended Update: Recommended update for libisds ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0177-1 Rating: moderate References: #1135761 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libisds fixes the following issues: - Version bump to 0.11: * mobile key authentication * manual pages are generated * compatibility with OpenSSL 1.1.0 - Adjust SRPM group. - Use the default GPGme library instead of OpenSSL [boo#1135761] This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-177=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): libisds-devel-0.11-bp151.5.3.1 libisds5-0.11-bp151.5.3.1 References: https://bugzilla.suse.com/1135761

1 0

openSUSE-SU-2020:0179-1: moderate: Security update for ucl
by opensuse-security＠opensuse.org 06 Feb '20

06 Feb '20

openSUSE Security Update: Security update for ucl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0179-1 Rating: moderate References: #1094138 Cross-References: CVE-2018-11243 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for ucl fixes the following issues: CVE-2018-11243: Fix remotely triggerable DoS via double free (boo#1094138) This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-179=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): libucl1-1.03-bp151.4.3.1 ucl-devel-1.03-bp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2018-11243.html https://bugzilla.suse.com/1094138

1 0