April 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2020:0478-1: moderate: Recommended update for wpa_supplicant
by maintenance＠opensuse.org 08 Apr '20

08 Apr '20

openSUSE Recommended Update: Recommended update for wpa_supplicant ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0478-1 Rating: moderate References: #1166933 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for wpa_supplicant fixes the following issue: - Change wpa_supplicant.service to ensure wpa_supplicant gets started before network. Fix WLAN config on boot with wicked. (bsc#1166933) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-478=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): wpa_supplicant-2.6-lp151.5.7.1 wpa_supplicant-debuginfo-2.6-lp151.5.7.1 wpa_supplicant-debugsource-2.6-lp151.5.7.1 wpa_supplicant-gui-2.6-lp151.5.7.1 wpa_supplicant-gui-debuginfo-2.6-lp151.5.7.1 References: https://bugzilla.suse.com/1166933

1 0

openSUSE-SU-2020:0479-1: moderate: Security update for bluez
by opensuse-security＠opensuse.org 08 Apr '20

08 Apr '20

openSUSE Security Update: Security update for bluez ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0479-1 Rating: moderate References: #1166751 Cross-References: CVE-2020-0556 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for bluez fixes the following issues: - CVE-2020-0556: Fixed an improper access control which could have allowed an unauthenticated user to potentially enable escalation of privilege and denial of service (bsc#1166751). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-479=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): bluez-5.48-lp151.8.12.1 bluez-cups-5.48-lp151.8.12.1 bluez-cups-debuginfo-5.48-lp151.8.12.1 bluez-debuginfo-5.48-lp151.8.12.1 bluez-debugsource-5.48-lp151.8.12.1 bluez-devel-5.48-lp151.8.12.1 bluez-test-5.48-lp151.8.12.1 bluez-test-debuginfo-5.48-lp151.8.12.1 libbluetooth3-5.48-lp151.8.12.1 libbluetooth3-debuginfo-5.48-lp151.8.12.1 - openSUSE Leap 15.1 (x86_64): bluez-devel-32bit-5.48-lp151.8.12.1 libbluetooth3-32bit-5.48-lp151.8.12.1 libbluetooth3-32bit-debuginfo-5.48-lp151.8.12.1 - openSUSE Leap 15.1 (noarch): bluez-auto-enable-devices-5.48-lp151.8.12.1 References: https://www.suse.com/security/cve/CVE-2020-0556.html https://bugzilla.suse.com/1166751

1 0

openSUSE-RU-2020:0472-1: moderate: Recommended update for uwsgi
by maintenance＠opensuse.org 08 Apr '20

08 Apr '20

openSUSE Recommended Update: Recommended update for uwsgi ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0472-1 Rating: moderate References: #1082002 #1090695 #1156199 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for uwsgi fixes the following issues: - Disabled geoip plugin [boo#1156199] - Fix systemd kill signal (uwsgi does not die on SIGTERM) - Add reload command to systemd service Update to upstream release 2.0.18: * Fixed support for Python 3.7 * Allow to use autoport (socket :0) with custom socket backlog * pyuwsgi ported to python3 * pyuwsgi packages fixes * pyuwsginossl build configuration for building pyuwsgi without ssl support * Fix unix socket inheritance after reload on FreeBSD * Fix crashes with --wsgi-env-behavior=holy (#1950) * Fix invalid free in python plugin (#1942) * Fix compilation warnings with gcc-8 (#1819) * Fix spooler python references * Don't generate build warnings in systemd_logger * Fix segmentation fault during worker shutdown (#1651) Update to upstream release 2.0.17.1: * Fixed memory leak in HTTPS_CLIENT_CERTIFICATE * TLSv1 is now disabled by default * Improved daemons throttle system * Add “secs” log formatting variable * Improved snprintf() usage to be OpenBSD-friendly * Improved glibc crypt/crypt_r management * Fixed websocket pong timeout check * Add the “License” classifier to setup.py * Add support for php user.ini * Official support for Python 3.7 - Don't create a /run directory for Apache on startup. It fails if Apache is not installed and sockets are defined per-application anyway (boo#1082002) - Fix broken build dependency on Leap 15 - Require Apache 2.4.33 for Leap 15 and Tumbleweed because otherwise mod_proxy_uwsgi is not available (boo#1090695) This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-472=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le x86_64): apache2-mod_uwsgi-2.0.18-bp151.4.3.6 uwsgi-2.0.18-bp151.4.3.6 uwsgi-emperor_pg-2.0.18-bp151.4.3.6 uwsgi-emperor_zeromq-2.0.18-bp151.4.3.6 uwsgi-gevent-2.0.18-bp151.4.3.6 uwsgi-glusterfs-2.0.18-bp151.4.3.6 uwsgi-greenlet-2.0.18-bp151.4.3.6 uwsgi-jvm-2.0.18-bp151.4.3.6 uwsgi-ldap-2.0.18-bp151.4.3.6 uwsgi-libffi-2.0.18-bp151.4.3.6 uwsgi-logzmq-2.0.18-bp151.4.3.6 uwsgi-lua-2.0.18-bp151.4.3.6 uwsgi-pam-2.0.18-bp151.4.3.6 uwsgi-php7-2.0.18-bp151.4.3.6 uwsgi-psgi-2.0.18-bp151.4.3.6 uwsgi-pypy-2.0.18-bp151.4.3.6 uwsgi-python-2.0.18-bp151.4.3.6 uwsgi-python3-2.0.18-bp151.4.3.6 uwsgi-sqlite3-2.0.18-bp151.4.3.6 uwsgi-xslt-2.0.18-bp151.4.3.6 References: https://bugzilla.suse.com/1082002 https://bugzilla.suse.com/1090695 https://bugzilla.suse.com/1156199

1 0

openSUSE-RU-2020:0473-1: moderate: Recommended update for lxd
by maintenance＠opensuse.org 08 Apr '20

08 Apr '20

openSUSE Recommended Update: Recommended update for lxd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0473-1 Rating: moderate References: #1168338 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for lxd fixes the following issues: Update to LXD 4.0.0. (boo#1168338) The full upstream changelog is available from: https://discuss.linuxcontainers.org/t/lxd-4-0-lts-has-been-released/7231 Breaking Changes: * Removal of --container-only, replaced by --instance-only + VM: Support for backup (import/export) + PCI and USB devices in the resource API + Support for multiple ipvlan NIC devices + Support for host addresses on routed NIC + Support for editing cluster roles + Disk usage for custom volumes + Disk usage for snapshots + Support for passwordless PKI mode Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-473=1 Package List: - openSUSE Leap 15.1 (noarch): lxd-bash-completion-4.0.0-lp151.33.1 - openSUSE Leap 15.1 (x86_64): lxd-4.0.0-lp151.33.1 References: https://bugzilla.suse.com/1168338

1 0

openSUSE-RU-2020:0474-1: moderate: Recommended update for GeoIP
by maintenance＠opensuse.org 08 Apr '20

08 Apr '20

openSUSE Recommended Update: Recommended update for GeoIP ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0474-1 Rating: moderate References: #1156194 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for GeoIP fixes the following issues: - Update README.SUSE with a description how to get the latest Geo IP data after the distribution changes. (jsc#SLE-11184, bsc#1156194, jsc#ECO-1405) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-474=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): GeoIP-1.6.12-lp151.2.3.1 GeoIP-debuginfo-1.6.12-lp151.2.3.1 GeoIP-debugsource-1.6.12-lp151.2.3.1 libGeoIP-devel-1.6.12-lp151.2.3.1 libGeoIP1-1.6.12-lp151.2.3.1 libGeoIP1-debuginfo-1.6.12-lp151.2.3.1 - openSUSE Leap 15.1 (x86_64): libGeoIP-devel-32bit-1.6.12-lp151.2.3.1 libGeoIP1-32bit-1.6.12-lp151.2.3.1 libGeoIP1-32bit-debuginfo-1.6.12-lp151.2.3.1 - openSUSE Leap 15.1 (noarch): GeoIP-data-1.6.12-lp151.2.3.1 References: https://bugzilla.suse.com/1156194

1 0

openSUSE-RU-2020:0476-1: moderate: Recommended update for tracker-miners
by maintenance＠opensuse.org 08 Apr '20

08 Apr '20

openSUSE Recommended Update: Recommended update for tracker-miners ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0476-1 Rating: moderate References: #1165635 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for tracker-miners fixes the following issue: - GNOME Tracker does not search for new files. (bsc#1165635) This update implement the proper return value of the check crawl interval and the time stamp of last crawl event. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-476=1 Package List: - openSUSE Leap 15.1 (x86_64): tracker-miner-files-2.0.4-lp151.3.3.1 tracker-miner-files-debuginfo-2.0.4-lp151.3.3.1 tracker-miner-rss-2.0.4-lp151.3.3.1 tracker-miner-rss-debuginfo-2.0.4-lp151.3.3.1 tracker-miners-2.0.4-lp151.3.3.1 tracker-miners-debuginfo-2.0.4-lp151.3.3.1 tracker-miners-debugsource-2.0.4-lp151.3.3.1 - openSUSE Leap 15.1 (noarch): tracker-miners-lang-2.0.4-lp151.3.3.1 References: https://bugzilla.suse.com/1165635

1 0

openSUSE-RU-2020:0475-1: moderate: Recommended update for yast2-ntp-client
by maintenance＠opensuse.org 08 Apr '20

08 Apr '20

openSUSE Recommended Update: Recommended update for yast2-ntp-client ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0475-1 Rating: moderate References: #1164547 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-ntp-client fixes the following issue: - Support more than one NTP server in the time setting module. (bsc#1164547) With this update, if more than one NTP server is configured in the NTP client the servers will be shown only in the time setting screen. This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-475=1 Package List: - openSUSE Leap 15.1 (noarch): yast2-ntp-client-4.1.12-lp151.2.6.1 References: https://bugzilla.suse.com/1164547

1 0

openSUSE-RU-2020:0470-1: moderate: Recommended update for lxcfs
by maintenance＠opensuse.org 07 Apr '20

07 Apr '20

openSUSE Recommended Update: Recommended update for lxcfs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0470-1 Rating: moderate References: #1168338 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for lxcfs fixes the following issues: Update to LXCFS 4.0.1. The full upstream changelog is available from: https://discuss.linuxcontainers.org/t/lxcfs-4-0-lts-has-been-released/7031 https://discuss.linuxcontainers.org/t/lxcfs-4-0-1-lts-has-been-released/713 0 Related to the LXD 4.0.0 update (boo#1168338). + cgroup2: Support for the new unified cgroup hierarchy + /proc/cpuinfo and cpu output in /proc/stat based on cpu shares + /proc/loadavg virtualization + pidfd supported process tracking * Improved command line options * Compiler based hardening * Minimal compiler based resource management Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-470=1 Package List: - openSUSE Leap 15.1 (x86_64): lxcfs-4.0.1-lp151.2.6.1 lxcfs-debuginfo-4.0.1-lp151.2.6.1 lxcfs-debugsource-4.0.1-lp151.2.6.1 - openSUSE Leap 15.1 (noarch): lxcfs-hooks-lxc-4.0.1-lp151.2.6.1 References: https://bugzilla.suse.com/1168338

1 0

openSUSE-RU-2020:0471-1: moderate: Recommended update for libgcrypt
by maintenance＠opensuse.org 07 Apr '20

07 Apr '20

openSUSE Recommended Update: Recommended update for libgcrypt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0471-1 Rating: moderate References: #1164950 #1166748 #1167674 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for libgcrypt fixes the following issues: - FIPS: Remove an unneeded check in _gcry_global_constructor (bsc#1164950) - FIPS: Fix drbg to be threadsafe (bsc#1167674) - FIPS: Run self-tests from constructor during power-on [bsc#1166748] * Set up global_init as the constructor function: * Relax the entropy requirements on selftest. This is especially important for virtual machines to boot properly before the RNG is available: This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-471=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libgcrypt-cavs-1.8.2-lp151.9.16.1 libgcrypt-cavs-debuginfo-1.8.2-lp151.9.16.1 libgcrypt-debugsource-1.8.2-lp151.9.16.1 libgcrypt-devel-1.8.2-lp151.9.16.1 libgcrypt-devel-debuginfo-1.8.2-lp151.9.16.1 libgcrypt20-1.8.2-lp151.9.16.1 libgcrypt20-debuginfo-1.8.2-lp151.9.16.1 libgcrypt20-hmac-1.8.2-lp151.9.16.1 - openSUSE Leap 15.1 (x86_64): libgcrypt-devel-32bit-1.8.2-lp151.9.16.1 libgcrypt-devel-32bit-debuginfo-1.8.2-lp151.9.16.1 libgcrypt20-32bit-1.8.2-lp151.9.16.1 libgcrypt20-32bit-debuginfo-1.8.2-lp151.9.16.1 libgcrypt20-hmac-32bit-1.8.2-lp151.9.16.1 References: https://bugzilla.suse.com/1164950 https://bugzilla.suse.com/1166748 https://bugzilla.suse.com/1167674

1 0

openSUSE-RU-2020:0469-1: moderate: Recommended update for lxc
by maintenance＠opensuse.org 07 Apr '20

07 Apr '20

openSUSE Recommended Update: Recommended update for lxc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0469-1 Rating: moderate References: #1168338 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for lxc fixes the following issues: Update to LXC 4.0.0. The full upstream changelog is available from: https://discuss.linuxcontainers.org/t/lxc-4-0-lts-has-been-released/7182 Related to the LXD 4.0.0 update (boo#1168338). + cgroups: Full cgroup2 support + cgroups: Freezer support in CGroup2 + cgroups: eBPF device controller support in CGroup2 + AppArmor: Deny access to /proc/acpi/** + config: Add lxc.autodev.tmpfs.size configuration key + config: Add lxc.selinux.context.keyring key + config: Add lxc.keyring.session + seccomp: Add s390 support * network: Improved network device creation and removal + network: Allow moving wireless devices Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-469=1 Package List: - openSUSE Leap 15.1 (noarch): lxc-bash-completion-4.0.0-lp151.4.16.1 - openSUSE Leap 15.1 (x86_64): liblxc-devel-4.0.0-lp151.4.16.1 liblxc1-4.0.0-lp151.4.16.1 liblxc1-debuginfo-4.0.0-lp151.4.16.1 lxc-4.0.0-lp151.4.16.1 lxc-debuginfo-4.0.0-lp151.4.16.1 lxc-debugsource-4.0.0-lp151.4.16.1 pam_cgfs-4.0.0-lp151.4.16.1 pam_cgfs-debuginfo-4.0.0-lp151.4.16.1 References: https://bugzilla.suse.com/1168338

1 0