March 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2020:0264-1: moderate: Security update for libexif
by opensuse-security＠opensuse.org 01 Mar '20

01 Mar '20

openSUSE Security Update: Security update for libexif ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0264-1 Rating: moderate References: #1120943 #1160770 Cross-References: CVE-2018-20030 CVE-2019-9278 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for libexif fixes the following issues: - CVE-2019-9278: Fixed an integer overflow (bsc#1160770). - CVE-2018-20030: Fixed a denial of service by endless recursion (bsc#1120943). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-264=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libexif-debugsource-0.6.21-lp151.4.3.1 libexif-devel-0.6.21-lp151.4.3.1 libexif12-0.6.21-lp151.4.3.1 libexif12-debuginfo-0.6.21-lp151.4.3.1 - openSUSE Leap 15.1 (x86_64): libexif-devel-32bit-0.6.21-lp151.4.3.1 libexif12-32bit-0.6.21-lp151.4.3.1 libexif12-32bit-debuginfo-0.6.21-lp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2018-20030.html https://www.suse.com/security/cve/CVE-2019-9278.html https://bugzilla.suse.com/1120943 https://bugzilla.suse.com/1160770

1 0

openSUSE-RU-2020:0263-1: moderate: Recommended update for build
by maintenance＠opensuse.org 01 Mar '20

01 Mar '20

openSUSE Recommended Update: Recommended update for build ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0263-1 Rating: moderate References: #1161983 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for build fixes the following issues: - Added support for Arch Linux zstd format - Does now allow to enter buildroots w/o receipe - qemu vm_type is now running qemu system emulator (works only for aarch64, armv7l, ppc64/ppc64le, s390/s390x, riscv64) (see this rpm's changelog for more details) For all technical changes, please refer to this rpm's changelog. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-263=1 Package List: - openSUSE Leap 15.1 (noarch): build-20200110-lp151.2.3.1 build-initvm-i586-20200110-lp151.2.3.1 build-initvm-x86_64-20200110-lp151.2.3.1 build-mkbaselibs-20200110-lp151.2.3.1 build-mkdrpms-20200110-lp151.2.3.1 References: https://bugzilla.suse.com/1161983

1 0

openSUSE-RU-2020:0262-1: moderate: Recommended update for autoyast2, yast2-schema
by maintenance＠opensuse.org 01 Mar '20

01 Mar '20

openSUSE Recommended Update: Recommended update for autoyast2, yast2-schema ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0262-1 Rating: moderate References: #1123091 #1134501 #1143106 #1156905 #1159157 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: This update for autoyast2, yast2-schema fixes the following issues: autoyast2 was updated to fix: - Fixed conflicting items in rule dialogs (bsc#1123091). - Semi-automatic with partition: Do not use the common AY partition workflow (bsc#1134501). - Do not reset Base-Product while registration. Do not call registration in the second installation stage again. (bsc#1143106). - Fix profile validation for scripts elements (bsc#1156905). - UI: Report XML parsing errors instead of just crashing (bsc#1159157). Updates in yast2-schema: - Fix 'scripts' elements validation (bsc#1156905). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-262=1 Package List: - openSUSE Leap 15.1 (noarch): autoyast2-4.1.8-lp151.2.6.1 autoyast2-installation-4.1.8-lp151.2.6.1 - openSUSE Leap 15.1 (x86_64): yast2-schema-4.1.8-lp151.2.6.1 References: https://bugzilla.suse.com/1123091 https://bugzilla.suse.com/1134501 https://bugzilla.suse.com/1143106 https://bugzilla.suse.com/1156905 https://bugzilla.suse.com/1159157

1 0

openSUSE-RU-2020:0266-1: moderate: Recommended update for post-build-checks
by maintenance＠opensuse.org 01 Mar '20

01 Mar '20

openSUSE Recommended Update: Recommended update for post-build-checks ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0266-1 Rating: moderate References: #1162030 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for post-build-checks fixes the following issues: - Avoid to remove the coreutils package - Fixes rpm-ndb build issues (bsc#1162030) Convert the rpm database from berkeley db to the New RPM DB format (ndb) before rpm-ndb is installed and avoid to uninstall rpm-ndb package that is required for generating other baselibs This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-266=1 Package List: - openSUSE Leap 15.1 (noarch): post-build-checks-84.88+git20181015.ceb5c96-lp151.2.3.1 References: https://bugzilla.suse.com/1162030

1 0

openSUSE-RU-2020:0265-1: moderate: Recommended update for pcsc-tools
by maintenance＠opensuse.org 01 Mar '20

01 Mar '20

openSUSE Recommended Update: Recommended update for pcsc-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0265-1 Rating: moderate References: #1145779 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for pcsc-tools fixes the following issues: - added missing dependencies for gscriptor (bsc#1145779) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-265=1 Package List: - openSUSE Leap 15.1 (x86_64): pcsc-tools-1.5.4-lp151.2.6.1 pcsc-tools-debuginfo-1.5.4-lp151.2.6.1 pcsc-tools-debugsource-1.5.4-lp151.2.6.1 References: https://bugzilla.suse.com/1145779

1 0