April 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2020:0468-1: important: Security update for qemu
by opensuse-security＠opensuse.org 07 Apr '20

07 Apr '20

openSUSE Security Update: Security update for qemu ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0468-1 Rating: important References: #1123156 #1154790 #1161066 #1162729 #1163018 #1165776 #1166240 #1166379 Cross-References: CVE-2019-15034 CVE-2019-20382 CVE-2019-6778 CVE-2020-1711 CVE-2020-7039 CVE-2020-8608 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves 6 vulnerabilities and has two fixes is now available. Description: This update for qemu fixes the following issues: - CVE-2020-7039: Fixed a heap buffer overflow in tcp_emu() routine while emulating IRC and other protocols (bsc#1161066). - CVE-2019-15034: Fixed a buffer overflow in hw/display/bochs-display.c due to improper PCI config space allocation (bsc#1166379). - CVE-2020-1711: Fixed an out of bounds heap buffer access iscsi_co_block_status() routine which could have allowed a remote denial of service or arbitrary code with privileges of the QEMU process on the host (bsc#1166240). - CVE-2019-6778: Fixed a heap buffer overflow in tcp_emu() routine while emulating the identification protocol and copying message data to a socket buffer (bsc#1123156). - CVE-2020-8608: Fixed a heap buffer overflow in tcp_emu() routine while emulating IRC and other protocols (bsc#1163018). - CVE-2019-20382: Fixed a memory leak in the VNC display driver which could have led to exhaustion of the host memory leading to a potential Denial of service (bsc#1165776). - Fixed a live migration error (bsc#1154790). - Fixed an issue where migrating VMs on KVM gets missing features:ospke error (bsc#1162729). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-468=1 Package List: - openSUSE Leap 15.1 (x86_64): qemu-3.1.1.1-lp151.7.12.1 qemu-arm-3.1.1.1-lp151.7.12.1 qemu-arm-debuginfo-3.1.1.1-lp151.7.12.1 qemu-audio-alsa-3.1.1.1-lp151.7.12.1 qemu-audio-alsa-debuginfo-3.1.1.1-lp151.7.12.1 qemu-audio-oss-3.1.1.1-lp151.7.12.1 qemu-audio-oss-debuginfo-3.1.1.1-lp151.7.12.1 qemu-audio-pa-3.1.1.1-lp151.7.12.1 qemu-audio-pa-debuginfo-3.1.1.1-lp151.7.12.1 qemu-audio-sdl-3.1.1.1-lp151.7.12.1 qemu-audio-sdl-debuginfo-3.1.1.1-lp151.7.12.1 qemu-block-curl-3.1.1.1-lp151.7.12.1 qemu-block-curl-debuginfo-3.1.1.1-lp151.7.12.1 qemu-block-dmg-3.1.1.1-lp151.7.12.1 qemu-block-dmg-debuginfo-3.1.1.1-lp151.7.12.1 qemu-block-gluster-3.1.1.1-lp151.7.12.1 qemu-block-gluster-debuginfo-3.1.1.1-lp151.7.12.1 qemu-block-iscsi-3.1.1.1-lp151.7.12.1 qemu-block-iscsi-debuginfo-3.1.1.1-lp151.7.12.1 qemu-block-nfs-3.1.1.1-lp151.7.12.1 qemu-block-nfs-debuginfo-3.1.1.1-lp151.7.12.1 qemu-block-rbd-3.1.1.1-lp151.7.12.1 qemu-block-rbd-debuginfo-3.1.1.1-lp151.7.12.1 qemu-block-ssh-3.1.1.1-lp151.7.12.1 qemu-block-ssh-debuginfo-3.1.1.1-lp151.7.12.1 qemu-debuginfo-3.1.1.1-lp151.7.12.1 qemu-debugsource-3.1.1.1-lp151.7.12.1 qemu-extra-3.1.1.1-lp151.7.12.1 qemu-extra-debuginfo-3.1.1.1-lp151.7.12.1 qemu-guest-agent-3.1.1.1-lp151.7.12.1 qemu-guest-agent-debuginfo-3.1.1.1-lp151.7.12.1 qemu-ksm-3.1.1.1-lp151.7.12.1 qemu-kvm-3.1.1.1-lp151.7.12.1 qemu-lang-3.1.1.1-lp151.7.12.1 qemu-linux-user-3.1.1.1-lp151.7.12.1 qemu-linux-user-debuginfo-3.1.1.1-lp151.7.12.1 qemu-linux-user-debugsource-3.1.1.1-lp151.7.12.1 qemu-ppc-3.1.1.1-lp151.7.12.1 qemu-ppc-debuginfo-3.1.1.1-lp151.7.12.1 qemu-s390-3.1.1.1-lp151.7.12.1 qemu-s390-debuginfo-3.1.1.1-lp151.7.12.1 qemu-tools-3.1.1.1-lp151.7.12.1 qemu-tools-debuginfo-3.1.1.1-lp151.7.12.1 qemu-ui-curses-3.1.1.1-lp151.7.12.1 qemu-ui-curses-debuginfo-3.1.1.1-lp151.7.12.1 qemu-ui-gtk-3.1.1.1-lp151.7.12.1 qemu-ui-gtk-debuginfo-3.1.1.1-lp151.7.12.1 qemu-ui-sdl-3.1.1.1-lp151.7.12.1 qemu-ui-sdl-debuginfo-3.1.1.1-lp151.7.12.1 qemu-x86-3.1.1.1-lp151.7.12.1 qemu-x86-debuginfo-3.1.1.1-lp151.7.12.1 - openSUSE Leap 15.1 (noarch): qemu-ipxe-1.0.0+-lp151.7.12.1 qemu-seabios-1.12.0-lp151.7.12.1 qemu-sgabios-8-lp151.7.12.1 qemu-vgabios-1.12.0-lp151.7.12.1 References: https://www.suse.com/security/cve/CVE-2019-15034.html https://www.suse.com/security/cve/CVE-2019-20382.html https://www.suse.com/security/cve/CVE-2019-6778.html https://www.suse.com/security/cve/CVE-2020-1711.html https://www.suse.com/security/cve/CVE-2020-7039.html https://www.suse.com/security/cve/CVE-2020-8608.html https://bugzilla.suse.com/1123156 https://bugzilla.suse.com/1154790 https://bugzilla.suse.com/1161066 https://bugzilla.suse.com/1162729 https://bugzilla.suse.com/1163018 https://bugzilla.suse.com/1165776 https://bugzilla.suse.com/1166240 https://bugzilla.suse.com/1166379

1 0

openSUSE-SU-2020:0467-1: important: Security update for glibc
by opensuse-security＠opensuse.org 06 Apr '20

06 Apr '20

openSUSE Security Update: Security update for glibc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0467-1 Rating: important References: #1167631 Cross-References: CVE-2020-1752 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for glibc fixes the following issues: - CVE-2020-1752: Fixed a use after free in glob which could have allowed a local attacker to create a specially crafted path that, when processed by the glob function, could potentially have led to arbitrary code execution (bsc#1167631). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-467=1 Package List: - openSUSE Leap 15.1 (i586 i686 x86_64): glibc-2.26-lp151.19.11.1 glibc-debuginfo-2.26-lp151.19.11.1 glibc-debugsource-2.26-lp151.19.11.1 glibc-devel-2.26-lp151.19.11.1 glibc-devel-debuginfo-2.26-lp151.19.11.1 glibc-devel-static-2.26-lp151.19.11.1 glibc-locale-2.26-lp151.19.11.1 glibc-locale-base-2.26-lp151.19.11.1 glibc-locale-base-debuginfo-2.26-lp151.19.11.1 glibc-profile-2.26-lp151.19.11.1 - openSUSE Leap 15.1 (i586 x86_64): glibc-extra-2.26-lp151.19.11.1 glibc-extra-debuginfo-2.26-lp151.19.11.1 glibc-utils-2.26-lp151.19.11.1 glibc-utils-debuginfo-2.26-lp151.19.11.1 glibc-utils-src-debugsource-2.26-lp151.19.11.1 nscd-2.26-lp151.19.11.1 nscd-debuginfo-2.26-lp151.19.11.1 - openSUSE Leap 15.1 (x86_64): glibc-32bit-2.26-lp151.19.11.1 glibc-32bit-debuginfo-2.26-lp151.19.11.1 glibc-devel-32bit-2.26-lp151.19.11.1 glibc-devel-32bit-debuginfo-2.26-lp151.19.11.1 glibc-devel-static-32bit-2.26-lp151.19.11.1 glibc-locale-base-32bit-2.26-lp151.19.11.1 glibc-locale-base-32bit-debuginfo-2.26-lp151.19.11.1 glibc-profile-32bit-2.26-lp151.19.11.1 glibc-utils-32bit-2.26-lp151.19.11.1 glibc-utils-32bit-debuginfo-2.26-lp151.19.11.1 - openSUSE Leap 15.1 (noarch): glibc-html-2.26-lp151.19.11.1 glibc-i18ndata-2.26-lp151.19.11.1 glibc-info-2.26-lp151.19.11.1 References: https://www.suse.com/security/cve/CVE-2020-1752.html https://bugzilla.suse.com/1167631

1 0

openSUSE-RU-2020:0466-1: moderate: Recommended update for mumble
by maintenance＠opensuse.org 06 Apr '20

06 Apr '20

openSUSE Recommended Update: Recommended update for mumble ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0466-1 Rating: moderate References: #1132350 #1148406 Affected Products: openSUSE Leap 15.1 openSUSE Backports SLE-15-SP1 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for mumble fixes the following issues: Mumble was updated to 1.3.0. Release notes are at: https://www.mumble.info/blog/mumble-1.3.0-release-announcement/ - set permissions of config file to 640 because it can contain passwords - Really use the system speex and opus dependencies. - Also recommend the Qt mysql and psql backend. Murmur also supports those drivers. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-466=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-466=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2020-466=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): mumble-1.3.0-lp151.4.9.1 mumble-debuginfo-1.3.0-lp151.4.9.1 mumble-debugsource-1.3.0-lp151.4.9.1 mumble-server-1.3.0-lp151.4.9.1 mumble-server-debuginfo-1.3.0-lp151.4.9.1 - openSUSE Leap 15.1 (x86_64): mumble-32bit-1.3.0-lp151.4.9.1 mumble-32bit-debuginfo-1.3.0-lp151.4.9.1 - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): mumble-1.3.0-bp151.6.9.1 mumble-server-1.3.0-bp151.6.9.1 - openSUSE Backports SLE-15-SP1 (aarch64_ilp32): mumble-64bit-1.3.0-bp151.6.9.1 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): mumble-1.3.0-bp150.3.6.1 mumble-debuginfo-1.3.0-bp150.3.6.1 mumble-debugsource-1.3.0-bp150.3.6.1 mumble-server-1.3.0-bp150.3.6.1 mumble-server-debuginfo-1.3.0-bp150.3.6.1 - openSUSE Backports SLE-15 (aarch64_ilp32): mumble-64bit-1.3.0-bp150.3.6.1 mumble-64bit-debuginfo-1.3.0-bp150.3.6.1 References: https://bugzilla.suse.com/1132350 https://bugzilla.suse.com/1148406

1 0

openSUSE-RU-2020:0464-1: moderate: Recommended update for samba
by maintenance＠opensuse.org 06 Apr '20

06 Apr '20

openSUSE Recommended Update: Recommended update for samba ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0464-1 Rating: moderate References: #1160490 #1161389 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for samba fixes the following issues: - Fix for kerberos authentication issues with winbind in domain. (bso#14124, bsc#1160490) - Fix domain join when the machine account does not exists. (bso#14007, bsc#1161389) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-464=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): ctdb-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 ctdb-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 ctdb-pcp-pmda-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 ctdb-pcp-pmda-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 ctdb-tests-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 ctdb-tests-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libdcerpc-binding0-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libdcerpc-binding0-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libdcerpc-devel-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libdcerpc-samr-devel-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libdcerpc-samr0-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libdcerpc-samr0-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libdcerpc0-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libdcerpc0-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libndr-devel-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libndr-krb5pac-devel-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libndr-krb5pac0-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libndr-krb5pac0-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libndr-nbt-devel-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libndr-nbt0-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libndr-nbt0-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libndr-standard-devel-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libndr-standard0-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libndr-standard0-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libndr0-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libndr0-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libnetapi-devel-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libnetapi0-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libnetapi0-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-credentials-devel-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-credentials0-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-credentials0-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-errors-devel-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-errors0-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-errors0-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-hostconfig-devel-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-hostconfig0-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-hostconfig0-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-passdb-devel-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-passdb0-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-passdb0-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-policy-devel-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-policy-python-devel-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-policy-python3-devel-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-policy0-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-policy0-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-policy0-python3-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-policy0-python3-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-util-devel-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-util0-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-util0-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamdb-devel-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamdb0-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamdb0-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsmbclient-devel-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsmbclient0-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsmbclient0-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsmbconf-devel-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsmbconf0-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsmbconf0-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsmbldap-devel-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsmbldap2-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsmbldap2-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libtevent-util-devel-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libtevent-util0-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libtevent-util0-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libwbclient-devel-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libwbclient0-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libwbclient0-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-ad-dc-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-ad-dc-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-client-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-client-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-core-devel-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-debugsource-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-dsdb-modules-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-dsdb-modules-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-libs-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-libs-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-libs-python-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-libs-python-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-libs-python3-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-libs-python3-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-pidl-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-python-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-python-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-python3-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-python3-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-test-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-test-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-winbind-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-winbind-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 - openSUSE Leap 15.1 (x86_64): libdcerpc-binding0-32bit-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libdcerpc-binding0-32bit-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libdcerpc-samr0-32bit-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libdcerpc-samr0-32bit-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libdcerpc0-32bit-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libdcerpc0-32bit-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libndr-krb5pac0-32bit-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libndr-krb5pac0-32bit-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libndr-nbt0-32bit-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libndr-nbt0-32bit-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libndr-standard0-32bit-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libndr-standard0-32bit-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libndr0-32bit-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libndr0-32bit-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libnetapi0-32bit-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libnetapi0-32bit-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-credentials0-32bit-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-credentials0-32bit-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-errors0-32bit-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-errors0-32bit-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-hostconfig0-32bit-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-hostconfig0-32bit-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-passdb0-32bit-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-passdb0-32bit-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-policy0-32bit-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-policy0-32bit-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-policy0-python3-32bit-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-policy0-python3-32bit-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-util0-32bit-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-util0-32bit-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamdb0-32bit-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamdb0-32bit-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsmbclient0-32bit-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsmbclient0-32bit-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsmbconf0-32bit-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsmbconf0-32bit-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsmbldap2-32bit-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsmbldap2-32bit-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libtevent-util0-32bit-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libtevent-util0-32bit-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libwbclient0-32bit-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libwbclient0-32bit-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-ad-dc-32bit-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-ad-dc-32bit-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-ceph-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-ceph-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-client-32bit-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-client-32bit-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-libs-32bit-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-libs-32bit-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-libs-python-32bit-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-libs-python-32bit-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-libs-python3-32bit-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-libs-python3-32bit-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-winbind-32bit-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-winbind-32bit-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 - openSUSE Leap 15.1 (noarch): samba-doc-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 References: https://bugzilla.suse.com/1160490 https://bugzilla.suse.com/1161389

1 0

openSUSE-RU-2020:0463-1: important: Recommended update for corosync
by maintenance＠opensuse.org 06 Apr '20

06 Apr '20

openSUSE Recommended Update: Recommended update for corosync ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0463-1 Rating: important References: #1163460 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for corosync fixes the following issues: - Fix for corosync to support link-local IPv6 addresses. (bsc#1163460) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-463=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): corosync-2.4.4-lp151.5.3.1 corosync-debuginfo-2.4.4-lp151.5.3.1 corosync-debugsource-2.4.4-lp151.5.3.1 corosync-qdevice-2.4.4-lp151.5.3.1 corosync-qdevice-debuginfo-2.4.4-lp151.5.3.1 corosync-qnetd-2.4.4-lp151.5.3.1 corosync-qnetd-debuginfo-2.4.4-lp151.5.3.1 corosync-testagents-2.4.4-lp151.5.3.1 corosync-testagents-debuginfo-2.4.4-lp151.5.3.1 libcfg6-2.4.4-lp151.5.3.1 libcfg6-debuginfo-2.4.4-lp151.5.3.1 libcmap4-2.4.4-lp151.5.3.1 libcmap4-debuginfo-2.4.4-lp151.5.3.1 libcorosync-devel-2.4.4-lp151.5.3.1 libcorosync_common4-2.4.4-lp151.5.3.1 libcorosync_common4-debuginfo-2.4.4-lp151.5.3.1 libcpg4-2.4.4-lp151.5.3.1 libcpg4-debuginfo-2.4.4-lp151.5.3.1 libquorum5-2.4.4-lp151.5.3.1 libquorum5-debuginfo-2.4.4-lp151.5.3.1 libsam4-2.4.4-lp151.5.3.1 libsam4-debuginfo-2.4.4-lp151.5.3.1 libtotem_pg5-2.4.4-lp151.5.3.1 libtotem_pg5-debuginfo-2.4.4-lp151.5.3.1 libvotequorum8-2.4.4-lp151.5.3.1 libvotequorum8-debuginfo-2.4.4-lp151.5.3.1 - openSUSE Leap 15.1 (x86_64): libcfg6-32bit-2.4.4-lp151.5.3.1 libcfg6-32bit-debuginfo-2.4.4-lp151.5.3.1 libcmap4-32bit-2.4.4-lp151.5.3.1 libcmap4-32bit-debuginfo-2.4.4-lp151.5.3.1 libcorosync_common4-32bit-2.4.4-lp151.5.3.1 libcorosync_common4-32bit-debuginfo-2.4.4-lp151.5.3.1 libcpg4-32bit-2.4.4-lp151.5.3.1 libcpg4-32bit-debuginfo-2.4.4-lp151.5.3.1 libquorum5-32bit-2.4.4-lp151.5.3.1 libquorum5-32bit-debuginfo-2.4.4-lp151.5.3.1 libsam4-32bit-2.4.4-lp151.5.3.1 libsam4-32bit-debuginfo-2.4.4-lp151.5.3.1 libtotem_pg5-32bit-2.4.4-lp151.5.3.1 libtotem_pg5-32bit-debuginfo-2.4.4-lp151.5.3.1 libvotequorum8-32bit-2.4.4-lp151.5.3.1 libvotequorum8-32bit-debuginfo-2.4.4-lp151.5.3.1 References: https://bugzilla.suse.com/1163460

1 0

openSUSE-RU-2020:0462-1: moderate: Recommended update for shim-leap
by maintenance＠opensuse.org 06 Apr '20

06 Apr '20

openSUSE Recommended Update: Recommended update for shim-leap ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0462-1 Rating: moderate References: #1166523 #1168104 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for shim-leap fixes the following issues: - Use "suse_version" instead of "sle_version" to avoid shim_lib64_share_compat being set in Tumbleweed forever. - Move 'efi'-executables to '/usr/share/efi' (FATE#326960, boo#1166523) - Use the full path of efibootmgr to avoid errors when invoking shim-install from packagekitd (bsc#1168104) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-462=1 Package List: - openSUSE Leap 15.1 (x86_64): shim-14-lp151.2.5.1 References: https://bugzilla.suse.com/1166523 https://bugzilla.suse.com/1168104

1 0

openSUSE-RU-2020:0465-1: moderate: Recommended update for go1.11
by maintenance＠opensuse.org 06 Apr '20

06 Apr '20

openSUSE Recommended Update: Recommended update for go1.11 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0465-1 Rating: moderate References: #1167874 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for go1.11 fixes the following issues: - ARMv7 requires binutils-gold to build with go1.4 (bsc#1167874) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-465=1 Package List: - openSUSE Leap 15.1 (x86_64): go1.11-1.11.13-lp151.2.12.1 go1.11-doc-1.11.13-lp151.2.12.1 go1.11-race-1.11.13-lp151.2.12.1 References: https://bugzilla.suse.com/1167874

1 0

openSUSE-SU-2020:0461-1: critical: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 06 Apr '20

06 Apr '20

openSUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0461-1 Rating: critical References: #1168630 Cross-References: CVE-2020-6819 CVE-2020-6820 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: Mozilla Firefox was updated to 68.6.1esr to fix critical security issues: MFSA 2020-11 (boo#1168630) * CVE-2020-6819: Use-after-free while running the nsDocShell destructor * CVE-2020-6820: Use-after-free when handling a ReadableStream Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-461=1 Package List: - openSUSE Leap 15.1 (x86_64): MozillaFirefox-68.6.1-lp151.2.39.1 MozillaFirefox-branding-upstream-68.6.1-lp151.2.39.1 MozillaFirefox-buildsymbols-68.6.1-lp151.2.39.1 MozillaFirefox-debuginfo-68.6.1-lp151.2.39.1 MozillaFirefox-debugsource-68.6.1-lp151.2.39.1 MozillaFirefox-devel-68.6.1-lp151.2.39.1 MozillaFirefox-translations-common-68.6.1-lp151.2.39.1 MozillaFirefox-translations-other-68.6.1-lp151.2.39.1 References: https://www.suse.com/security/cve/CVE-2020-6819.html https://www.suse.com/security/cve/CVE-2020-6820.html https://bugzilla.suse.com/1168630

1 0

openSUSE-RU-2020:0460-1: moderate: Recommended update for permissions
by maintenance＠opensuse.org 06 Apr '20

06 Apr '20

openSUSE Recommended Update: Recommended update for permissions ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0460-1 Rating: moderate References: #1167163 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for permissions fixes the following issue: - whitelist s390-tools set group ID (setgid) bit on log directory. (bsc#1167163) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-460=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): permissions-20181116-lp151.4.15.1 permissions-debuginfo-20181116-lp151.4.15.1 permissions-debugsource-20181116-lp151.4.15.1 - openSUSE Leap 15.1 (noarch): permissions-zypp-plugin-20181116-lp151.4.15.1 References: https://bugzilla.suse.com/1167163

1 0

openSUSE-SU-2020:0459-1: important: Security update for icu
by opensuse-security＠opensuse.org 05 Apr '20

05 Apr '20

openSUSE Security Update: Security update for icu ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0459-1 Rating: important References: #1166844 Cross-References: CVE-2020-10531 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for icu fixes the following issues: - CVE-2020-10531: Fixed a potential integer overflow in UnicodeString:doAppend (bsc#1166844). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-459=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): icu-60.2-lp151.3.11.1 icu-debuginfo-60.2-lp151.3.11.1 icu-debugsource-60.2-lp151.3.11.1 libicu-devel-60.2-lp151.3.11.1 libicu-doc-60.2-lp151.3.11.1 libicu60_2-60.2-lp151.3.11.1 libicu60_2-debuginfo-60.2-lp151.3.11.1 - openSUSE Leap 15.1 (noarch): libicu60_2-bedata-60.2-lp151.3.11.1 libicu60_2-ledata-60.2-lp151.3.11.1 - openSUSE Leap 15.1 (x86_64): libicu-devel-32bit-60.2-lp151.3.11.1 libicu60_2-32bit-60.2-lp151.3.11.1 libicu60_2-32bit-debuginfo-60.2-lp151.3.11.1 References: https://www.suse.com/security/cve/CVE-2020-10531.html https://bugzilla.suse.com/1166844

1 0