April 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2020:0468-1: important: Security update for qemu
by opensuse-security＠opensuse.org 07 Apr '20

07 Apr '20

openSUSE Security Update: Security update for qemu ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0468-1 Rating: important References: #1123156 #1154790 #1161066 #1162729 #1163018 #1165776 #1166240 #1166379 Cross-References: CVE-2019-15034 CVE-2019-20382 CVE-2019-6778 CVE-2020-1711 CVE-2020-7039 CVE-2020-8608 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves 6 vulnerabilities and has two fixes is now available. Description: This update for qemu fixes the following issues: - CVE-2020-7039: Fixed a heap buffer overflow in tcp_emu() routine while emulating IRC and other protocols (bsc#1161066). - CVE-2019-15034: Fixed a buffer overflow in hw/display/bochs-display.c due to improper PCI config space allocation (bsc#1166379). - CVE-2020-1711: Fixed an out of bounds heap buffer access iscsi_co_block_status() routine which could have allowed a remote denial of service or arbitrary code with privileges of the QEMU process on the host (bsc#1166240). - CVE-2019-6778: Fixed a heap buffer overflow in tcp_emu() routine while emulating the identification protocol and copying message data to a socket buffer (bsc#1123156). - CVE-2020-8608: Fixed a heap buffer overflow in tcp_emu() routine while emulating IRC and other protocols (bsc#1163018). - CVE-2019-20382: Fixed a memory leak in the VNC display driver which could have led to exhaustion of the host memory leading to a potential Denial of service (bsc#1165776). - Fixed a live migration error (bsc#1154790). - Fixed an issue where migrating VMs on KVM gets missing features:ospke error (bsc#1162729). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-468=1 Package List: - openSUSE Leap 15.1 (x86_64): qemu-3.1.1.1-lp151.7.12.1 qemu-arm-3.1.1.1-lp151.7.12.1 qemu-arm-debuginfo-3.1.1.1-lp151.7.12.1 qemu-audio-alsa-3.1.1.1-lp151.7.12.1 qemu-audio-alsa-debuginfo-3.1.1.1-lp151.7.12.1 qemu-audio-oss-3.1.1.1-lp151.7.12.1 qemu-audio-oss-debuginfo-3.1.1.1-lp151.7.12.1 qemu-audio-pa-3.1.1.1-lp151.7.12.1 qemu-audio-pa-debuginfo-3.1.1.1-lp151.7.12.1 qemu-audio-sdl-3.1.1.1-lp151.7.12.1 qemu-audio-sdl-debuginfo-3.1.1.1-lp151.7.12.1 qemu-block-curl-3.1.1.1-lp151.7.12.1 qemu-block-curl-debuginfo-3.1.1.1-lp151.7.12.1 qemu-block-dmg-3.1.1.1-lp151.7.12.1 qemu-block-dmg-debuginfo-3.1.1.1-lp151.7.12.1 qemu-block-gluster-3.1.1.1-lp151.7.12.1 qemu-block-gluster-debuginfo-3.1.1.1-lp151.7.12.1 qemu-block-iscsi-3.1.1.1-lp151.7.12.1 qemu-block-iscsi-debuginfo-3.1.1.1-lp151.7.12.1 qemu-block-nfs-3.1.1.1-lp151.7.12.1 qemu-block-nfs-debuginfo-3.1.1.1-lp151.7.12.1 qemu-block-rbd-3.1.1.1-lp151.7.12.1 qemu-block-rbd-debuginfo-3.1.1.1-lp151.7.12.1 qemu-block-ssh-3.1.1.1-lp151.7.12.1 qemu-block-ssh-debuginfo-3.1.1.1-lp151.7.12.1 qemu-debuginfo-3.1.1.1-lp151.7.12.1 qemu-debugsource-3.1.1.1-lp151.7.12.1 qemu-extra-3.1.1.1-lp151.7.12.1 qemu-extra-debuginfo-3.1.1.1-lp151.7.12.1 qemu-guest-agent-3.1.1.1-lp151.7.12.1 qemu-guest-agent-debuginfo-3.1.1.1-lp151.7.12.1 qemu-ksm-3.1.1.1-lp151.7.12.1 qemu-kvm-3.1.1.1-lp151.7.12.1 qemu-lang-3.1.1.1-lp151.7.12.1 qemu-linux-user-3.1.1.1-lp151.7.12.1 qemu-linux-user-debuginfo-3.1.1.1-lp151.7.12.1 qemu-linux-user-debugsource-3.1.1.1-lp151.7.12.1 qemu-ppc-3.1.1.1-lp151.7.12.1 qemu-ppc-debuginfo-3.1.1.1-lp151.7.12.1 qemu-s390-3.1.1.1-lp151.7.12.1 qemu-s390-debuginfo-3.1.1.1-lp151.7.12.1 qemu-tools-3.1.1.1-lp151.7.12.1 qemu-tools-debuginfo-3.1.1.1-lp151.7.12.1 qemu-ui-curses-3.1.1.1-lp151.7.12.1 qemu-ui-curses-debuginfo-3.1.1.1-lp151.7.12.1 qemu-ui-gtk-3.1.1.1-lp151.7.12.1 qemu-ui-gtk-debuginfo-3.1.1.1-lp151.7.12.1 qemu-ui-sdl-3.1.1.1-lp151.7.12.1 qemu-ui-sdl-debuginfo-3.1.1.1-lp151.7.12.1 qemu-x86-3.1.1.1-lp151.7.12.1 qemu-x86-debuginfo-3.1.1.1-lp151.7.12.1 - openSUSE Leap 15.1 (noarch): qemu-ipxe-1.0.0+-lp151.7.12.1 qemu-seabios-1.12.0-lp151.7.12.1 qemu-sgabios-8-lp151.7.12.1 qemu-vgabios-1.12.0-lp151.7.12.1 References: https://www.suse.com/security/cve/CVE-2019-15034.html https://www.suse.com/security/cve/CVE-2019-20382.html https://www.suse.com/security/cve/CVE-2019-6778.html https://www.suse.com/security/cve/CVE-2020-1711.html https://www.suse.com/security/cve/CVE-2020-7039.html https://www.suse.com/security/cve/CVE-2020-8608.html https://bugzilla.suse.com/1123156 https://bugzilla.suse.com/1154790 https://bugzilla.suse.com/1161066 https://bugzilla.suse.com/1162729 https://bugzilla.suse.com/1163018 https://bugzilla.suse.com/1165776 https://bugzilla.suse.com/1166240 https://bugzilla.suse.com/1166379

1 0

openSUSE-SU-2020:0467-1: important: Security update for glibc
by opensuse-security＠opensuse.org 06 Apr '20

06 Apr '20

openSUSE Security Update: Security update for glibc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0467-1 Rating: important References: #1167631 Cross-References: CVE-2020-1752 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for glibc fixes the following issues: - CVE-2020-1752: Fixed a use after free in glob which could have allowed a local attacker to create a specially crafted path that, when processed by the glob function, could potentially have led to arbitrary code execution (bsc#1167631). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-467=1 Package List: - openSUSE Leap 15.1 (i586 i686 x86_64): glibc-2.26-lp151.19.11.1 glibc-debuginfo-2.26-lp151.19.11.1 glibc-debugsource-2.26-lp151.19.11.1 glibc-devel-2.26-lp151.19.11.1 glibc-devel-debuginfo-2.26-lp151.19.11.1 glibc-devel-static-2.26-lp151.19.11.1 glibc-locale-2.26-lp151.19.11.1 glibc-locale-base-2.26-lp151.19.11.1 glibc-locale-base-debuginfo-2.26-lp151.19.11.1 glibc-profile-2.26-lp151.19.11.1 - openSUSE Leap 15.1 (i586 x86_64): glibc-extra-2.26-lp151.19.11.1 glibc-extra-debuginfo-2.26-lp151.19.11.1 glibc-utils-2.26-lp151.19.11.1 glibc-utils-debuginfo-2.26-lp151.19.11.1 glibc-utils-src-debugsource-2.26-lp151.19.11.1 nscd-2.26-lp151.19.11.1 nscd-debuginfo-2.26-lp151.19.11.1 - openSUSE Leap 15.1 (x86_64): glibc-32bit-2.26-lp151.19.11.1 glibc-32bit-debuginfo-2.26-lp151.19.11.1 glibc-devel-32bit-2.26-lp151.19.11.1 glibc-devel-32bit-debuginfo-2.26-lp151.19.11.1 glibc-devel-static-32bit-2.26-lp151.19.11.1 glibc-locale-base-32bit-2.26-lp151.19.11.1 glibc-locale-base-32bit-debuginfo-2.26-lp151.19.11.1 glibc-profile-32bit-2.26-lp151.19.11.1 glibc-utils-32bit-2.26-lp151.19.11.1 glibc-utils-32bit-debuginfo-2.26-lp151.19.11.1 - openSUSE Leap 15.1 (noarch): glibc-html-2.26-lp151.19.11.1 glibc-i18ndata-2.26-lp151.19.11.1 glibc-info-2.26-lp151.19.11.1 References: https://www.suse.com/security/cve/CVE-2020-1752.html https://bugzilla.suse.com/1167631

1 0

openSUSE-RU-2020:0466-1: moderate: Recommended update for mumble
by maintenance＠opensuse.org 06 Apr '20

06 Apr '20

openSUSE Recommended Update: Recommended update for mumble ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0466-1 Rating: moderate References: #1132350 #1148406 Affected Products: openSUSE Leap 15.1 openSUSE Backports SLE-15-SP1 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for mumble fixes the following issues: Mumble was updated to 1.3.0. Release notes are at: https://www.mumble.info/blog/mumble-1.3.0-release-announcement/ - set permissions of config file to 640 because it can contain passwords - Really use the system speex and opus dependencies. - Also recommend the Qt mysql and psql backend. Murmur also supports those drivers. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-466=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-466=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2020-466=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): mumble-1.3.0-lp151.4.9.1 mumble-debuginfo-1.3.0-lp151.4.9.1 mumble-debugsource-1.3.0-lp151.4.9.1 mumble-server-1.3.0-lp151.4.9.1 mumble-server-debuginfo-1.3.0-lp151.4.9.1 - openSUSE Leap 15.1 (x86_64): mumble-32bit-1.3.0-lp151.4.9.1 mumble-32bit-debuginfo-1.3.0-lp151.4.9.1 - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): mumble-1.3.0-bp151.6.9.1 mumble-server-1.3.0-bp151.6.9.1 - openSUSE Backports SLE-15-SP1 (aarch64_ilp32): mumble-64bit-1.3.0-bp151.6.9.1 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): mumble-1.3.0-bp150.3.6.1 mumble-debuginfo-1.3.0-bp150.3.6.1 mumble-debugsource-1.3.0-bp150.3.6.1 mumble-server-1.3.0-bp150.3.6.1 mumble-server-debuginfo-1.3.0-bp150.3.6.1 - openSUSE Backports SLE-15 (aarch64_ilp32): mumble-64bit-1.3.0-bp150.3.6.1 mumble-64bit-debuginfo-1.3.0-bp150.3.6.1 References: https://bugzilla.suse.com/1132350 https://bugzilla.suse.com/1148406

1 0

openSUSE-RU-2020:0464-1: moderate: Recommended update for samba
by maintenance＠opensuse.org 06 Apr '20

06 Apr '20

openSUSE Recommended Update: Recommended update for samba ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0464-1 Rating: moderate References: #1160490 #1161389 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for samba fixes the following issues: - Fix for kerberos authentication issues with winbind in domain. (bso#14124, bsc#1160490) - Fix domain join when the machine account does not exists. (bso#14007, bsc#1161389) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-464=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): ctdb-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 ctdb-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 ctdb-pcp-pmda-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 ctdb-pcp-pmda-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 ctdb-tests-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 ctdb-tests-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libdcerpc-binding0-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libdcerpc-binding0-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libdcerpc-devel-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libdcerpc-samr-devel-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libdcerpc-samr0-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libdcerpc-samr0-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libdcerpc0-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libdcerpc0-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libndr-devel-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libndr-krb5pac-devel-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libndr-krb5pac0-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libndr-krb5pac0-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libndr-nbt-devel-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libndr-nbt0-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libndr-nbt0-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libndr-standard-devel-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libndr-standard0-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libndr-standard0-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libndr0-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libndr0-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libnetapi-devel-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libnetapi0-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libnetapi0-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-credentials-devel-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-credentials0-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-credentials0-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-errors-devel-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-errors0-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-errors0-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-hostconfig-devel-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-hostconfig0-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-hostconfig0-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-passdb-devel-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-passdb0-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-passdb0-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-policy-devel-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-policy-python-devel-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-policy-python3-devel-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-policy0-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-policy0-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-policy0-python3-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-policy0-python3-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-util-devel-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-util0-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-util0-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamdb-devel-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamdb0-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamdb0-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsmbclient-devel-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsmbclient0-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsmbclient0-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsmbconf-devel-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsmbconf0-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsmbconf0-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsmbldap-devel-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsmbldap2-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsmbldap2-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libtevent-util-devel-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libtevent-util0-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libtevent-util0-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libwbclient-devel-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libwbclient0-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libwbclient0-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-ad-dc-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-ad-dc-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-client-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-client-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-core-devel-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-debugsource-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-dsdb-modules-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-dsdb-modules-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-libs-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-libs-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-libs-python-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-libs-python-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-libs-python3-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-libs-python3-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-pidl-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-python-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-python-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-python3-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-python3-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-test-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-test-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-winbind-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-winbind-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 - openSUSE Leap 15.1 (x86_64): libdcerpc-binding0-32bit-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libdcerpc-binding0-32bit-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libdcerpc-samr0-32bit-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libdcerpc-samr0-32bit-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libdcerpc0-32bit-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libdcerpc0-32bit-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libndr-krb5pac0-32bit-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libndr-krb5pac0-32bit-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libndr-nbt0-32bit-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libndr-nbt0-32bit-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libndr-standard0-32bit-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libndr-standard0-32bit-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libndr0-32bit-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libndr0-32bit-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libnetapi0-32bit-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libnetapi0-32bit-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-credentials0-32bit-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-credentials0-32bit-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-errors0-32bit-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-errors0-32bit-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-hostconfig0-32bit-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-hostconfig0-32bit-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-passdb0-32bit-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-passdb0-32bit-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-policy0-32bit-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-policy0-32bit-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-policy0-python3-32bit-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-policy0-python3-32bit-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-util0-32bit-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamba-util0-32bit-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamdb0-32bit-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsamdb0-32bit-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsmbclient0-32bit-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsmbclient0-32bit-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsmbconf0-32bit-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsmbconf0-32bit-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsmbldap2-32bit-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libsmbldap2-32bit-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libtevent-util0-32bit-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libtevent-util0-32bit-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libwbclient0-32bit-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 libwbclient0-32bit-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-ad-dc-32bit-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-ad-dc-32bit-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-ceph-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-ceph-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-client-32bit-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-client-32bit-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-libs-32bit-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-libs-32bit-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-libs-python-32bit-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-libs-python-32bit-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-libs-python3-32bit-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-libs-python3-32bit-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-winbind-32bit-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 samba-winbind-32bit-debuginfo-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 - openSUSE Leap 15.1 (noarch): samba-doc-4.9.5+git.296.3dd62eee45e-lp151.2.21.1 References: https://bugzilla.suse.com/1160490 https://bugzilla.suse.com/1161389

1 0

openSUSE-RU-2020:0463-1: important: Recommended update for corosync
by maintenance＠opensuse.org 06 Apr '20

06 Apr '20

openSUSE Recommended Update: Recommended update for corosync ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0463-1 Rating: important References: #1163460 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for corosync fixes the following issues: - Fix for corosync to support link-local IPv6 addresses. (bsc#1163460) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-463=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): corosync-2.4.4-lp151.5.3.1 corosync-debuginfo-2.4.4-lp151.5.3.1 corosync-debugsource-2.4.4-lp151.5.3.1 corosync-qdevice-2.4.4-lp151.5.3.1 corosync-qdevice-debuginfo-2.4.4-lp151.5.3.1 corosync-qnetd-2.4.4-lp151.5.3.1 corosync-qnetd-debuginfo-2.4.4-lp151.5.3.1 corosync-testagents-2.4.4-lp151.5.3.1 corosync-testagents-debuginfo-2.4.4-lp151.5.3.1 libcfg6-2.4.4-lp151.5.3.1 libcfg6-debuginfo-2.4.4-lp151.5.3.1 libcmap4-2.4.4-lp151.5.3.1 libcmap4-debuginfo-2.4.4-lp151.5.3.1 libcorosync-devel-2.4.4-lp151.5.3.1 libcorosync_common4-2.4.4-lp151.5.3.1 libcorosync_common4-debuginfo-2.4.4-lp151.5.3.1 libcpg4-2.4.4-lp151.5.3.1 libcpg4-debuginfo-2.4.4-lp151.5.3.1 libquorum5-2.4.4-lp151.5.3.1 libquorum5-debuginfo-2.4.4-lp151.5.3.1 libsam4-2.4.4-lp151.5.3.1 libsam4-debuginfo-2.4.4-lp151.5.3.1 libtotem_pg5-2.4.4-lp151.5.3.1 libtotem_pg5-debuginfo-2.4.4-lp151.5.3.1 libvotequorum8-2.4.4-lp151.5.3.1 libvotequorum8-debuginfo-2.4.4-lp151.5.3.1 - openSUSE Leap 15.1 (x86_64): libcfg6-32bit-2.4.4-lp151.5.3.1 libcfg6-32bit-debuginfo-2.4.4-lp151.5.3.1 libcmap4-32bit-2.4.4-lp151.5.3.1 libcmap4-32bit-debuginfo-2.4.4-lp151.5.3.1 libcorosync_common4-32bit-2.4.4-lp151.5.3.1 libcorosync_common4-32bit-debuginfo-2.4.4-lp151.5.3.1 libcpg4-32bit-2.4.4-lp151.5.3.1 libcpg4-32bit-debuginfo-2.4.4-lp151.5.3.1 libquorum5-32bit-2.4.4-lp151.5.3.1 libquorum5-32bit-debuginfo-2.4.4-lp151.5.3.1 libsam4-32bit-2.4.4-lp151.5.3.1 libsam4-32bit-debuginfo-2.4.4-lp151.5.3.1 libtotem_pg5-32bit-2.4.4-lp151.5.3.1 libtotem_pg5-32bit-debuginfo-2.4.4-lp151.5.3.1 libvotequorum8-32bit-2.4.4-lp151.5.3.1 libvotequorum8-32bit-debuginfo-2.4.4-lp151.5.3.1 References: https://bugzilla.suse.com/1163460

1 0

openSUSE-RU-2020:0462-1: moderate: Recommended update for shim-leap
by maintenance＠opensuse.org 06 Apr '20

06 Apr '20

openSUSE Recommended Update: Recommended update for shim-leap ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0462-1 Rating: moderate References: #1166523 #1168104 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for shim-leap fixes the following issues: - Use "suse_version" instead of "sle_version" to avoid shim_lib64_share_compat being set in Tumbleweed forever. - Move 'efi'-executables to '/usr/share/efi' (FATE#326960, boo#1166523) - Use the full path of efibootmgr to avoid errors when invoking shim-install from packagekitd (bsc#1168104) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-462=1 Package List: - openSUSE Leap 15.1 (x86_64): shim-14-lp151.2.5.1 References: https://bugzilla.suse.com/1166523 https://bugzilla.suse.com/1168104

1 0

openSUSE-RU-2020:0465-1: moderate: Recommended update for go1.11
by maintenance＠opensuse.org 06 Apr '20

06 Apr '20

openSUSE Recommended Update: Recommended update for go1.11 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0465-1 Rating: moderate References: #1167874 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for go1.11 fixes the following issues: - ARMv7 requires binutils-gold to build with go1.4 (bsc#1167874) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-465=1 Package List: - openSUSE Leap 15.1 (x86_64): go1.11-1.11.13-lp151.2.12.1 go1.11-doc-1.11.13-lp151.2.12.1 go1.11-race-1.11.13-lp151.2.12.1 References: https://bugzilla.suse.com/1167874

1 0

openSUSE-SU-2020:0461-1: critical: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 06 Apr '20

06 Apr '20

openSUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0461-1 Rating: critical References: #1168630 Cross-References: CVE-2020-6819 CVE-2020-6820 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: Mozilla Firefox was updated to 68.6.1esr to fix critical security issues: MFSA 2020-11 (boo#1168630) * CVE-2020-6819: Use-after-free while running the nsDocShell destructor * CVE-2020-6820: Use-after-free when handling a ReadableStream Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-461=1 Package List: - openSUSE Leap 15.1 (x86_64): MozillaFirefox-68.6.1-lp151.2.39.1 MozillaFirefox-branding-upstream-68.6.1-lp151.2.39.1 MozillaFirefox-buildsymbols-68.6.1-lp151.2.39.1 MozillaFirefox-debuginfo-68.6.1-lp151.2.39.1 MozillaFirefox-debugsource-68.6.1-lp151.2.39.1 MozillaFirefox-devel-68.6.1-lp151.2.39.1 MozillaFirefox-translations-common-68.6.1-lp151.2.39.1 MozillaFirefox-translations-other-68.6.1-lp151.2.39.1 References: https://www.suse.com/security/cve/CVE-2020-6819.html https://www.suse.com/security/cve/CVE-2020-6820.html https://bugzilla.suse.com/1168630

1 0

openSUSE-RU-2020:0460-1: moderate: Recommended update for permissions
by maintenance＠opensuse.org 06 Apr '20

06 Apr '20

openSUSE Recommended Update: Recommended update for permissions ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0460-1 Rating: moderate References: #1167163 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for permissions fixes the following issue: - whitelist s390-tools set group ID (setgid) bit on log directory. (bsc#1167163) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-460=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): permissions-20181116-lp151.4.15.1 permissions-debuginfo-20181116-lp151.4.15.1 permissions-debugsource-20181116-lp151.4.15.1 - openSUSE Leap 15.1 (noarch): permissions-zypp-plugin-20181116-lp151.4.15.1 References: https://bugzilla.suse.com/1167163

1 0

openSUSE-SU-2020:0459-1: important: Security update for icu
by opensuse-security＠opensuse.org 05 Apr '20

05 Apr '20

openSUSE Security Update: Security update for icu ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0459-1 Rating: important References: #1166844 Cross-References: CVE-2020-10531 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for icu fixes the following issues: - CVE-2020-10531: Fixed a potential integer overflow in UnicodeString:doAppend (bsc#1166844). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-459=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): icu-60.2-lp151.3.11.1 icu-debuginfo-60.2-lp151.3.11.1 icu-debugsource-60.2-lp151.3.11.1 libicu-devel-60.2-lp151.3.11.1 libicu-doc-60.2-lp151.3.11.1 libicu60_2-60.2-lp151.3.11.1 libicu60_2-debuginfo-60.2-lp151.3.11.1 - openSUSE Leap 15.1 (noarch): libicu60_2-bedata-60.2-lp151.3.11.1 libicu60_2-ledata-60.2-lp151.3.11.1 - openSUSE Leap 15.1 (x86_64): libicu-devel-32bit-60.2-lp151.3.11.1 libicu60_2-32bit-60.2-lp151.3.11.1 libicu60_2-32bit-debuginfo-60.2-lp151.3.11.1 References: https://www.suse.com/security/cve/CVE-2020-10531.html https://bugzilla.suse.com/1166844

1 0

openSUSE-RU-2020:0452-1: moderate: Recommended update for alsa-utils
by maintenance＠opensuse.org 05 Apr '20

05 Apr '20

openSUSE Recommended Update: Recommended update for alsa-utils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0452-1 Rating: moderate References: #1162182 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for alsa-utils fixes the following issues: - Fix for dependency as it triggers uninstall of the unrelated "bat" (cat clone) package. (bsc#1162182) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-452=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): alsa-utils-1.1.5-lp151.4.3.1 alsa-utils-debuginfo-1.1.5-lp151.4.3.1 alsa-utils-debugsource-1.1.5-lp151.4.3.1 alsabat-1.1.5-lp151.4.3.1 alsabat-debuginfo-1.1.5-lp151.4.3.1 References: https://bugzilla.suse.com/1162182

1 0

openSUSE-RU-2020:0453-1: moderate: Recommended update for openslp
by maintenance＠opensuse.org 05 Apr '20

05 Apr '20

openSUSE Recommended Update: Recommended update for openslp ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0453-1 Rating: moderate References: #1165050 #1165121 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for openslp fixes the following issues: - Add missing group prerequisites to the openslp-server package. (bsc#1165050) - Add missing openslp prerequisites to the openslp-server package. (bsc#1165121) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-453=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): openslp-2.0.0-lp151.7.9.1 openslp-debuginfo-2.0.0-lp151.7.9.1 openslp-debugsource-2.0.0-lp151.7.9.1 openslp-devel-2.0.0-lp151.7.9.1 openslp-server-2.0.0-lp151.7.9.1 openslp-server-debuginfo-2.0.0-lp151.7.9.1 - openSUSE Leap 15.1 (x86_64): openslp-32bit-2.0.0-lp151.7.9.1 openslp-32bit-debuginfo-2.0.0-lp151.7.9.1 References: https://bugzilla.suse.com/1165050 https://bugzilla.suse.com/1165121

1 0

openSUSE-RU-2020:0458-1: moderate: Recommended update for resource-agents
by maintenance＠opensuse.org 05 Apr '20

05 Apr '20

openSUSE Recommended Update: Recommended update for resource-agents ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0458-1 Rating: moderate References: #1161898 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for resource-agents fixes the following issue: - Request to add "gcp-vpc-move-route" resource agent to SLE12 and SLE15. (bsc#1161898) The currently available floating IP resource agent (RA) "gcp-vpc-move-ip" is deprecated and the newer RA "gcp-vpc-move-route" is not available. This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-458=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): ldirectord-4.3.0184.6ee15eb2-lp151.3.15.1 resource-agents-4.3.0184.6ee15eb2-lp151.3.15.1 resource-agents-debuginfo-4.3.0184.6ee15eb2-lp151.3.15.1 resource-agents-debugsource-4.3.0184.6ee15eb2-lp151.3.15.1 - openSUSE Leap 15.1 (noarch): monitoring-plugins-metadata-4.3.0184.6ee15eb2-lp151.3.15.1 References: https://bugzilla.suse.com/1161898

1 0

openSUSE-RU-2020:0454-1: moderate: Recommended update for parted
by maintenance＠opensuse.org 05 Apr '20

05 Apr '20

openSUSE Recommended Update: Recommended update for parted ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0454-1 Rating: moderate References: #1161783 #1164260 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for parted fixes the following issue: - Make parted work with pmemXs devices. (bsc#1164260) - Fix for error when parted output size crashing parted in yast. (bsc#1161783) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-454=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libparted0-3.2-lp151.9.6.1 libparted0-debuginfo-3.2-lp151.9.6.1 parted-3.2-lp151.9.6.1 parted-debuginfo-3.2-lp151.9.6.1 parted-debugsource-3.2-lp151.9.6.1 parted-devel-3.2-lp151.9.6.1 - openSUSE Leap 15.1 (x86_64): libparted0-32bit-3.2-lp151.9.6.1 libparted0-32bit-debuginfo-3.2-lp151.9.6.1 - openSUSE Leap 15.1 (noarch): parted-lang-3.2-lp151.9.6.1 References: https://bugzilla.suse.com/1161783 https://bugzilla.suse.com/1164260

1 0

openSUSE-RU-2020:0457-1: moderate: Recommended update for drbd-utils
by maintenance＠opensuse.org 05 Apr '20

05 Apr '20

openSUSE Recommended Update: Recommended update for drbd-utils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0457-1 Rating: moderate References: #1166200 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for drbd-utils fixes the following issue: - Detect Pacemaker 2 "promotable clones" (bsc#1166200) The update solve a regular expression issue with the new xml of Pacemaker 2. This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-457=1 Package List: - openSUSE Leap 15.1 (x86_64): drbd-utils-9.6.0-lp151.2.6.1 drbd-utils-debuginfo-9.6.0-lp151.2.6.1 drbd-utils-debugsource-9.6.0-lp151.2.6.1 References: https://bugzilla.suse.com/1166200

1 0

openSUSE-RU-2020:0456-1: moderate: Recommended update for podman, slirp4netns
by maintenance＠opensuse.org 05 Apr '20

05 Apr '20

openSUSE Recommended Update: Recommended update for podman, slirp4netns ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0456-1 Rating: moderate References: #1167850 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for podman, slirp4netns fixes the following issues: slirp4netns was updated to 0.4.4 (bsc#1167850): * libslirp: Update to v4.2.0: * New API function slirp_add_unix: add a forward rule to a Unix socket. * New API function slirp_remove_guestfwd: remove a forward rule previously added by slirp_add_exec, slirp_add_unix or slirp_add_guestfwd * New SlirpConfig.outbound_addr{,6} fields to bind output socket to a specific address * socket: do not fallback on host loopback if get_dns_addr() failed or the address is in slirp network * ncsi: fix checksum OOB memory access * tcp_emu(): fix OOB accesses * tftp: restrict relative path access * state: fix loading of guestfwd state Update to 0.4.3: * api: raise an error if the socket path is too long * libslirp: update to v4.1.0: Including the fix for libslirp sends RST to app in response to arriving FIN when containerized socket is shutdown() with SHUT_WR * Fix create_sandbox error Update to 0.4.2: * Do not propagate mounts to the parent ns in sandbox Update to 0.4.1: * Support specifying netns path (slirp4netns --netns-type=path PATH TAPNAME) * Support specifying --userns-path * Vendor https://gitlab.freedesktop.org/slirp/libslirp (QEMU v4.1+) * Bring up loopback device when --configure is specified * Support sandboxing by creating a mount namespace (--enable-sandbox) * Support seccomp (--enable-seccomp) - Add new build dependencies libcap-devel and libseccomp-devel Update to 0.3.3: * Fix use-after-free in libslirp Update to 0.3.2: * Fix heap overflow in `ip_reass` on big packet input Update to 0.3.1: * Fix use-after-free Changes in podman: - Fixed dependency on slirp4netns. We need at least 0.4.0 now (bsc#1167850) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-456=1 Package List: - openSUSE Leap 15.1 (x86_64): podman-1.8.0-lp151.3.13.1 slirp4netns-0.4.4-lp151.2.6.1 slirp4netns-debuginfo-0.4.4-lp151.2.6.1 slirp4netns-debugsource-0.4.4-lp151.2.6.1 - openSUSE Leap 15.1 (noarch): podman-cni-config-1.8.0-lp151.3.13.1 References: https://bugzilla.suse.com/1167850

1 0

openSUSE-RU-2020:0455-1: moderate: Recommended update for python-paramiko
by maintenance＠opensuse.org 05 Apr '20

05 Apr '20

openSUSE Recommended Update: Recommended update for python-paramiko ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0455-1 Rating: moderate References: #1166758 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-paramiko fixes the following issues: - Added support for the new OpenSSH >= 7.8p1 private key format (bsc#1166758) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-455=1 Package List: - openSUSE Leap 15.1 (noarch): python-paramiko-doc-2.4.2-lp151.2.3.1 python2-paramiko-2.4.2-lp151.2.3.1 python3-paramiko-2.4.2-lp151.2.3.1 References: https://bugzilla.suse.com/1166758

1 0

openSUSE-RU-2020:0451-1: important: Recommended update for python3-ec2imgutils
by maintenance＠opensuse.org 05 Apr '20

05 Apr '20

openSUSE Recommended Update: Recommended update for python3-ec2imgutils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0451-1 Rating: important References: #1167148 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python3-ec2imgutils fixes the following issues: - Fix for image upload to support instance types that are based on NVMe. (bsc#1167148) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-451=1 Package List: - openSUSE Leap 15.1 (noarch): python3-ec2imgutils-7.0.9-lp151.2.9.1 References: https://bugzilla.suse.com/1167148

1 0

openSUSE-RU-2020:0449-1: important: Recommended update for installation-images
by maintenance＠opensuse.org 05 Apr '20

05 Apr '20

openSUSE Recommended Update: Recommended update for installation-images ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0449-1 Rating: important References: #1160449 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for installation-images fixes the following issues: - Fix for rescure system not to mount root fs as temp filesystem, so the symlinks will work also. (bsc#1160449) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-449=1 Package List: - openSUSE Leap 15.1 (noarch): tftpboot-installation-openSUSE-Leap-15.1-x86_64-14.427.1-lp151.2.6.1 - openSUSE Leap 15.1 (x86_64): install-initrd-openSUSE-14.427.1-lp151.2.6.1 installation-images-debuginfodeps-openSUSE-14.427.1-lp151.2.6.1 installation-images-openSUSE-14.427.1-lp151.2.6.1 skelcd-installer-net-openSUSE-14.427.1-lp151.2.6.1 skelcd-installer-openSUSE-14.427.1-lp151.2.6.1 References: https://bugzilla.suse.com/1160449

1 0

openSUSE-RU-2020:0450-1: important: Recommended update for libstorage-ng
by maintenance＠opensuse.org 05 Apr '20

05 Apr '20

openSUSE Recommended Update: Recommended update for libstorage-ng ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0450-1 Rating: important References: #1164295 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libstorage-ng fixes the following issues: - Fix for tracking device block size when creating a RAID device. (bsc#1164295) - Simplify combining disks with different block sizes into RAID. (bsc#1164295) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-450=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libstorage-ng-debuginfo-4.1.109-lp151.3.15.1 libstorage-ng-debugsource-4.1.109-lp151.3.15.1 libstorage-ng-devel-4.1.109-lp151.3.15.1 libstorage-ng-integration-tests-4.1.109-lp151.3.15.1 libstorage-ng-python3-4.1.109-lp151.3.15.1 libstorage-ng-python3-debuginfo-4.1.109-lp151.3.15.1 libstorage-ng-ruby-4.1.109-lp151.3.15.1 libstorage-ng-ruby-debuginfo-4.1.109-lp151.3.15.1 libstorage-ng-utils-4.1.109-lp151.3.15.1 libstorage-ng-utils-debuginfo-4.1.109-lp151.3.15.1 libstorage-ng1-4.1.109-lp151.3.15.1 libstorage-ng1-debuginfo-4.1.109-lp151.3.15.1 - openSUSE Leap 15.1 (noarch): libstorage-ng-lang-4.1.109-lp151.3.15.1 References: https://bugzilla.suse.com/1164295

1 0

openSUSE-RU-2020:0448-1: moderate: Recommended update for QR-Code-generator, boost, libreoffice, myspell-dictionaries, xmlsec1
by maintenance＠opensuse.org 05 Apr '20

05 Apr '20

openSUSE Recommended Update: Recommended update for QR-Code-generator, boost, libreoffice, myspell-dictionaries, xmlsec1 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0448-1 Rating: moderate References: #1161816 #1162152 #1167223 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for QR-Code-generator, boost, libreoffice, myspell-dictionaries, xmlsec1 fixes the following issues: libreoffice was updated to 6.4.2.2 (jsc#SLE-11174 jsc#SLE-11175 jsc#SLE-11176 bsc#1167223): Full Release Notes can be found on: https://wiki.documentfoundation.org/ReleaseNotes/6.4 - Fixed broken handling of non-ASCII characters in the KDE filedialog (bsc#1161816) - Move the animation library to core package bsc#1162152 xmlsec1 was updated to 1.2.28: * Added BoringSSL support (chenbd). * Added gnutls-3.6.x support (alonbl). * Added DSA and ECDSA key size getter for MSCNG (vmiklos). * Added --enable-mans configuration option (alonbl). * Added coninuous build integration for MacOSX (vmiklos). * Several other small fixes (more details). - Make sure to recommend at least one backend when you install just xmlsec1 - Drop the gnutls backend as based on the tests it is quite borked: * We still have nss and openssl backend for people to use Version update to 1.2.27: * Added AES-GCM support for OpenSSL and MSCNG (snargit). * Added DSA-SHA256 and ECDSA-SHA384 support for NSS (vmiklos). * Added RSA-OAEP support for MSCNG (vmiklos). * Continuous build integration in Travis and Appveyor. * Several other small fixes (more details). myspell-dictionaries was updated to 20191219: * Updated the English dictionaries: GB+US+CA+AU * Bring shipped Spanish dictionary up to version 2.5 boost was updated to fix: - add a backport of Boost.Optional::has_value() for LibreOffice The QR-Code-generator is shipped: - Initial commit, needed by libreoffice 6.4 This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-448=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): boost-base-debugsource-1.66.0-lp151.5.3.1 boost_1_66-jam-1.66.0-lp151.5.3.1 boost_1_66-quickbook-1.66.0-lp151.5.3.1 boost_1_66-quickbook-debuginfo-1.66.0-lp151.5.3.1 libboost_atomic1_66_0-1.66.0-lp151.5.3.1 libboost_atomic1_66_0-debuginfo-1.66.0-lp151.5.3.1 libboost_atomic1_66_0-devel-1.66.0-lp151.5.3.1 libboost_chrono1_66_0-1.66.0-lp151.5.3.1 libboost_chrono1_66_0-debuginfo-1.66.0-lp151.5.3.1 libboost_chrono1_66_0-devel-1.66.0-lp151.5.3.1 libboost_container1_66_0-1.66.0-lp151.5.3.1 libboost_container1_66_0-debuginfo-1.66.0-lp151.5.3.1 libboost_container1_66_0-devel-1.66.0-lp151.5.3.1 libboost_context1_66_0-1.66.0-lp151.5.3.1 libboost_context1_66_0-debuginfo-1.66.0-lp151.5.3.1 libboost_context1_66_0-devel-1.66.0-lp151.5.3.1 libboost_coroutine1_66_0-1.66.0-lp151.5.3.1 libboost_coroutine1_66_0-debuginfo-1.66.0-lp151.5.3.1 libboost_coroutine1_66_0-devel-1.66.0-lp151.5.3.1 libboost_date_time1_66_0-1.66.0-lp151.5.3.1 libboost_date_time1_66_0-debuginfo-1.66.0-lp151.5.3.1 libboost_date_time1_66_0-devel-1.66.0-lp151.5.3.1 libboost_fiber1_66_0-1.66.0-lp151.5.3.1 libboost_fiber1_66_0-debuginfo-1.66.0-lp151.5.3.1 libboost_fiber1_66_0-devel-1.66.0-lp151.5.3.1 libboost_filesystem1_66_0-1.66.0-lp151.5.3.1 libboost_filesystem1_66_0-debuginfo-1.66.0-lp151.5.3.1 libboost_filesystem1_66_0-devel-1.66.0-lp151.5.3.1 libboost_graph1_66_0-1.66.0-lp151.5.3.1 libboost_graph1_66_0-debuginfo-1.66.0-lp151.5.3.1 libboost_graph1_66_0-devel-1.66.0-lp151.5.3.1 libboost_graph_parallel1_66_0-1.66.0-lp151.5.3.1 libboost_graph_parallel1_66_0-debuginfo-1.66.0-lp151.5.3.1 libboost_graph_parallel1_66_0-devel-1.66.0-lp151.5.3.1 libboost_headers1_66_0-devel-1.66.0-lp151.5.3.1 libboost_iostreams1_66_0-1.66.0-lp151.5.3.1 libboost_iostreams1_66_0-debuginfo-1.66.0-lp151.5.3.1 libboost_iostreams1_66_0-devel-1.66.0-lp151.5.3.1 libboost_locale1_66_0-1.66.0-lp151.5.3.1 libboost_locale1_66_0-debuginfo-1.66.0-lp151.5.3.1 libboost_locale1_66_0-devel-1.66.0-lp151.5.3.1 libboost_log1_66_0-1.66.0-lp151.5.3.1 libboost_log1_66_0-debuginfo-1.66.0-lp151.5.3.1 libboost_log1_66_0-devel-1.66.0-lp151.5.3.1 libboost_math1_66_0-1.66.0-lp151.5.3.1 libboost_math1_66_0-debuginfo-1.66.0-lp151.5.3.1 libboost_math1_66_0-devel-1.66.0-lp151.5.3.1 libboost_mpi1_66_0-1.66.0-lp151.5.3.1 libboost_mpi1_66_0-debuginfo-1.66.0-lp151.5.3.1 libboost_mpi1_66_0-devel-1.66.0-lp151.5.3.1 libboost_mpi_python-py2_7-1_66_0-1.66.0-lp151.5.3.1 libboost_mpi_python-py2_7-1_66_0-debuginfo-1.66.0-lp151.5.3.1 libboost_mpi_python-py2_7-1_66_0-devel-1.66.0-lp151.5.3.1 libboost_mpi_python-py3-1_66_0-1.66.0-lp151.5.3.1 libboost_mpi_python-py3-1_66_0-debuginfo-1.66.0-lp151.5.3.1 libboost_mpi_python-py3-1_66_0-devel-1.66.0-lp151.5.3.1 libboost_numpy-py2_7-1_66_0-1.66.0-lp151.5.3.1 libboost_numpy-py2_7-1_66_0-debuginfo-1.66.0-lp151.5.3.1 libboost_numpy-py2_7-1_66_0-devel-1.66.0-lp151.5.3.1 libboost_numpy-py3-1_66_0-1.66.0-lp151.5.3.1 libboost_numpy-py3-1_66_0-debuginfo-1.66.0-lp151.5.3.1 libboost_numpy-py3-1_66_0-devel-1.66.0-lp151.5.3.1 libboost_program_options1_66_0-1.66.0-lp151.5.3.1 libboost_program_options1_66_0-debuginfo-1.66.0-lp151.5.3.1 libboost_program_options1_66_0-devel-1.66.0-lp151.5.3.1 libboost_python-py2_7-1_66_0-1.66.0-lp151.5.3.1 libboost_python-py2_7-1_66_0-debuginfo-1.66.0-lp151.5.3.1 libboost_python-py2_7-1_66_0-devel-1.66.0-lp151.5.3.1 libboost_python-py3-1_66_0-1.66.0-lp151.5.3.1 libboost_python-py3-1_66_0-debuginfo-1.66.0-lp151.5.3.1 libboost_python-py3-1_66_0-devel-1.66.0-lp151.5.3.1 libboost_random1_66_0-1.66.0-lp151.5.3.1 libboost_random1_66_0-debuginfo-1.66.0-lp151.5.3.1 libboost_random1_66_0-devel-1.66.0-lp151.5.3.1 libboost_regex1_66_0-1.66.0-lp151.5.3.1 libboost_regex1_66_0-debuginfo-1.66.0-lp151.5.3.1 libboost_regex1_66_0-devel-1.66.0-lp151.5.3.1 libboost_serialization1_66_0-1.66.0-lp151.5.3.1 libboost_serialization1_66_0-debuginfo-1.66.0-lp151.5.3.1 libboost_serialization1_66_0-devel-1.66.0-lp151.5.3.1 libboost_signals1_66_0-1.66.0-lp151.5.3.1 libboost_signals1_66_0-debuginfo-1.66.0-lp151.5.3.1 libboost_signals1_66_0-devel-1.66.0-lp151.5.3.1 libboost_stacktrace1_66_0-1.66.0-lp151.5.3.1 libboost_stacktrace1_66_0-debuginfo-1.66.0-lp151.5.3.1 libboost_stacktrace1_66_0-devel-1.66.0-lp151.5.3.1 libboost_system1_66_0-1.66.0-lp151.5.3.1 libboost_system1_66_0-debuginfo-1.66.0-lp151.5.3.1 libboost_system1_66_0-devel-1.66.0-lp151.5.3.1 libboost_test1_66_0-1.66.0-lp151.5.3.1 libboost_test1_66_0-debuginfo-1.66.0-lp151.5.3.1 libboost_test1_66_0-devel-1.66.0-lp151.5.3.1 libboost_thread1_66_0-1.66.0-lp151.5.3.1 libboost_thread1_66_0-debuginfo-1.66.0-lp151.5.3.1 libboost_thread1_66_0-devel-1.66.0-lp151.5.3.1 libboost_timer1_66_0-1.66.0-lp151.5.3.1 libboost_timer1_66_0-debuginfo-1.66.0-lp151.5.3.1 libboost_timer1_66_0-devel-1.66.0-lp151.5.3.1 libboost_type_erasure1_66_0-1.66.0-lp151.5.3.1 libboost_type_erasure1_66_0-debuginfo-1.66.0-lp151.5.3.1 libboost_type_erasure1_66_0-devel-1.66.0-lp151.5.3.1 libboost_wave1_66_0-1.66.0-lp151.5.3.1 libboost_wave1_66_0-debuginfo-1.66.0-lp151.5.3.1 libboost_wave1_66_0-devel-1.66.0-lp151.5.3.1 libxmlsec1-1-1.2.28-lp151.2.3.1 libxmlsec1-1-debuginfo-1.2.28-lp151.2.3.1 libxmlsec1-gcrypt1-1.2.28-lp151.2.3.1 libxmlsec1-gcrypt1-debuginfo-1.2.28-lp151.2.3.1 libxmlsec1-gnutls1-1.2.28-lp151.2.3.1 libxmlsec1-gnutls1-debuginfo-1.2.28-lp151.2.3.1 libxmlsec1-nss1-1.2.28-lp151.2.3.1 libxmlsec1-nss1-debuginfo-1.2.28-lp151.2.3.1 libxmlsec1-openssl1-1.2.28-lp151.2.3.1 libxmlsec1-openssl1-debuginfo-1.2.28-lp151.2.3.1 myspell-dictionaries-20191219-lp151.2.9.1 myspell-lightproof-en-20191219-lp151.2.9.1 myspell-lightproof-hu_HU-20191219-lp151.2.9.1 myspell-lightproof-pt_BR-20191219-lp151.2.9.1 myspell-lightproof-ru_RU-20191219-lp151.2.9.1 python2-boost_parallel_mpi1_66_0-1.66.0-lp151.5.3.1 python2-boost_parallel_mpi1_66_0-debuginfo-1.66.0-lp151.5.3.1 python3-boost_parallel_mpi1_66_0-1.66.0-lp151.5.3.1 python3-boost_parallel_mpi1_66_0-debuginfo-1.66.0-lp151.5.3.1 xmlsec1-1.2.28-lp151.2.3.1 xmlsec1-debuginfo-1.2.28-lp151.2.3.1 xmlsec1-debugsource-1.2.28-lp151.2.3.1 xmlsec1-devel-1.2.28-lp151.2.3.1 xmlsec1-gcrypt-devel-1.2.28-lp151.2.3.1 xmlsec1-gnutls-devel-1.2.28-lp151.2.3.1 xmlsec1-nss-devel-1.2.28-lp151.2.3.1 xmlsec1-openssl-devel-1.2.28-lp151.2.3.1 - openSUSE Leap 15.1 (noarch): boost-license1_66_0-1.66.0-lp151.5.3.1 boost_1_66-doc-html-1.66.0-lp151.5.3.1 boost_1_66-doc-pdf-1.66.0-lp151.5.3.1 libreoffice-branding-upstream-6.4.2.2-lp151.3.12.3 libreoffice-gdb-pretty-printers-6.4.2.2-lp151.3.12.3 libreoffice-glade-6.4.2.2-lp151.3.12.3 libreoffice-icon-themes-6.4.2.2-lp151.3.12.3 libreoffice-l10n-af-6.4.2.2-lp151.3.12.3 libreoffice-l10n-am-6.4.2.2-lp151.3.12.3 libreoffice-l10n-ar-6.4.2.2-lp151.3.12.3 libreoffice-l10n-as-6.4.2.2-lp151.3.12.3 libreoffice-l10n-ast-6.4.2.2-lp151.3.12.3 libreoffice-l10n-be-6.4.2.2-lp151.3.12.3 libreoffice-l10n-bg-6.4.2.2-lp151.3.12.3 libreoffice-l10n-bn-6.4.2.2-lp151.3.12.3 libreoffice-l10n-bn_IN-6.4.2.2-lp151.3.12.3 libreoffice-l10n-bo-6.4.2.2-lp151.3.12.3 libreoffice-l10n-br-6.4.2.2-lp151.3.12.3 libreoffice-l10n-brx-6.4.2.2-lp151.3.12.3 libreoffice-l10n-bs-6.4.2.2-lp151.3.12.3 libreoffice-l10n-ca-6.4.2.2-lp151.3.12.3 libreoffice-l10n-ca_valencia-6.4.2.2-lp151.3.12.3 libreoffice-l10n-cs-6.4.2.2-lp151.3.12.3 libreoffice-l10n-cy-6.4.2.2-lp151.3.12.3 libreoffice-l10n-da-6.4.2.2-lp151.3.12.3 libreoffice-l10n-de-6.4.2.2-lp151.3.12.3 libreoffice-l10n-dgo-6.4.2.2-lp151.3.12.3 libreoffice-l10n-dsb-6.4.2.2-lp151.3.12.3 libreoffice-l10n-dz-6.4.2.2-lp151.3.12.3 libreoffice-l10n-el-6.4.2.2-lp151.3.12.3 libreoffice-l10n-en-6.4.2.2-lp151.3.12.3 libreoffice-l10n-en_GB-6.4.2.2-lp151.3.12.3 libreoffice-l10n-en_ZA-6.4.2.2-lp151.3.12.3 libreoffice-l10n-eo-6.4.2.2-lp151.3.12.3 libreoffice-l10n-es-6.4.2.2-lp151.3.12.3 libreoffice-l10n-et-6.4.2.2-lp151.3.12.3 libreoffice-l10n-eu-6.4.2.2-lp151.3.12.3 libreoffice-l10n-fa-6.4.2.2-lp151.3.12.3 libreoffice-l10n-fi-6.4.2.2-lp151.3.12.3 libreoffice-l10n-fr-6.4.2.2-lp151.3.12.3 libreoffice-l10n-fy-6.4.2.2-lp151.3.12.3 libreoffice-l10n-ga-6.4.2.2-lp151.3.12.3 libreoffice-l10n-gd-6.4.2.2-lp151.3.12.3 libreoffice-l10n-gl-6.4.2.2-lp151.3.12.3 libreoffice-l10n-gu-6.4.2.2-lp151.3.12.3 libreoffice-l10n-gug-6.4.2.2-lp151.3.12.3 libreoffice-l10n-he-6.4.2.2-lp151.3.12.3 libreoffice-l10n-hi-6.4.2.2-lp151.3.12.3 libreoffice-l10n-hr-6.4.2.2-lp151.3.12.3 libreoffice-l10n-hsb-6.4.2.2-lp151.3.12.3 libreoffice-l10n-hu-6.4.2.2-lp151.3.12.3 libreoffice-l10n-id-6.4.2.2-lp151.3.12.3 libreoffice-l10n-is-6.4.2.2-lp151.3.12.3 libreoffice-l10n-it-6.4.2.2-lp151.3.12.3 libreoffice-l10n-ja-6.4.2.2-lp151.3.12.3 libreoffice-l10n-ka-6.4.2.2-lp151.3.12.3 libreoffice-l10n-kab-6.4.2.2-lp151.3.12.3 libreoffice-l10n-kk-6.4.2.2-lp151.3.12.3 libreoffice-l10n-km-6.4.2.2-lp151.3.12.3 libreoffice-l10n-kmr_Latn-6.4.2.2-lp151.3.12.3 libreoffice-l10n-kn-6.4.2.2-lp151.3.12.3 libreoffice-l10n-ko-6.4.2.2-lp151.3.12.3 libreoffice-l10n-kok-6.4.2.2-lp151.3.12.3 libreoffice-l10n-ks-6.4.2.2-lp151.3.12.3 libreoffice-l10n-lb-6.4.2.2-lp151.3.12.3 libreoffice-l10n-lo-6.4.2.2-lp151.3.12.3 libreoffice-l10n-lt-6.4.2.2-lp151.3.12.3 libreoffice-l10n-lv-6.4.2.2-lp151.3.12.3 libreoffice-l10n-mai-6.4.2.2-lp151.3.12.3 libreoffice-l10n-mk-6.4.2.2-lp151.3.12.3 libreoffice-l10n-ml-6.4.2.2-lp151.3.12.3 libreoffice-l10n-mn-6.4.2.2-lp151.3.12.3 libreoffice-l10n-mni-6.4.2.2-lp151.3.12.3 libreoffice-l10n-mr-6.4.2.2-lp151.3.12.3 libreoffice-l10n-my-6.4.2.2-lp151.3.12.3 libreoffice-l10n-nb-6.4.2.2-lp151.3.12.3 libreoffice-l10n-ne-6.4.2.2-lp151.3.12.3 libreoffice-l10n-nl-6.4.2.2-lp151.3.12.3 libreoffice-l10n-nn-6.4.2.2-lp151.3.12.3 libreoffice-l10n-nr-6.4.2.2-lp151.3.12.3 libreoffice-l10n-nso-6.4.2.2-lp151.3.12.3 libreoffice-l10n-oc-6.4.2.2-lp151.3.12.3 libreoffice-l10n-om-6.4.2.2-lp151.3.12.3 libreoffice-l10n-or-6.4.2.2-lp151.3.12.3 libreoffice-l10n-pa-6.4.2.2-lp151.3.12.3 libreoffice-l10n-pl-6.4.2.2-lp151.3.12.3 libreoffice-l10n-pt_BR-6.4.2.2-lp151.3.12.3 libreoffice-l10n-pt_PT-6.4.2.2-lp151.3.12.3 libreoffice-l10n-ro-6.4.2.2-lp151.3.12.3 libreoffice-l10n-ru-6.4.2.2-lp151.3.12.3 libreoffice-l10n-rw-6.4.2.2-lp151.3.12.3 libreoffice-l10n-sa_IN-6.4.2.2-lp151.3.12.3 libreoffice-l10n-sat-6.4.2.2-lp151.3.12.3 libreoffice-l10n-sd-6.4.2.2-lp151.3.12.3 libreoffice-l10n-si-6.4.2.2-lp151.3.12.3 libreoffice-l10n-sid-6.4.2.2-lp151.3.12.3 libreoffice-l10n-sk-6.4.2.2-lp151.3.12.3 libreoffice-l10n-sl-6.4.2.2-lp151.3.12.3 libreoffice-l10n-sq-6.4.2.2-lp151.3.12.3 libreoffice-l10n-sr-6.4.2.2-lp151.3.12.3 libreoffice-l10n-ss-6.4.2.2-lp151.3.12.3 libreoffice-l10n-st-6.4.2.2-lp151.3.12.3 libreoffice-l10n-sv-6.4.2.2-lp151.3.12.3 libreoffice-l10n-sw_TZ-6.4.2.2-lp151.3.12.3 libreoffice-l10n-szl-6.4.2.2-lp151.3.12.3 libreoffice-l10n-ta-6.4.2.2-lp151.3.12.3 libreoffice-l10n-te-6.4.2.2-lp151.3.12.3 libreoffice-l10n-tg-6.4.2.2-lp151.3.12.3 libreoffice-l10n-th-6.4.2.2-lp151.3.12.3 libreoffice-l10n-tn-6.4.2.2-lp151.3.12.3 libreoffice-l10n-tr-6.4.2.2-lp151.3.12.3 libreoffice-l10n-ts-6.4.2.2-lp151.3.12.3 libreoffice-l10n-tt-6.4.2.2-lp151.3.12.3 libreoffice-l10n-ug-6.4.2.2-lp151.3.12.3 libreoffice-l10n-uk-6.4.2.2-lp151.3.12.3 libreoffice-l10n-uz-6.4.2.2-lp151.3.12.3 libreoffice-l10n-ve-6.4.2.2-lp151.3.12.3 libreoffice-l10n-vec-6.4.2.2-lp151.3.12.3 libreoffice-l10n-vi-6.4.2.2-lp151.3.12.3 libreoffice-l10n-xh-6.4.2.2-lp151.3.12.3 libreoffice-l10n-zh_CN-6.4.2.2-lp151.3.12.3 libreoffice-l10n-zh_TW-6.4.2.2-lp151.3.12.3 libreoffice-l10n-zu-6.4.2.2-lp151.3.12.3 myspell-af_NA-20191219-lp151.2.9.1 myspell-af_ZA-20191219-lp151.2.9.1 myspell-an-20191219-lp151.2.9.1 myspell-an_ES-20191219-lp151.2.9.1 myspell-ar-20191219-lp151.2.9.1 myspell-ar_AE-20191219-lp151.2.9.1 myspell-ar_BH-20191219-lp151.2.9.1 myspell-ar_DZ-20191219-lp151.2.9.1 myspell-ar_EG-20191219-lp151.2.9.1 myspell-ar_IQ-20191219-lp151.2.9.1 myspell-ar_JO-20191219-lp151.2.9.1 myspell-ar_KW-20191219-lp151.2.9.1 myspell-ar_LB-20191219-lp151.2.9.1 myspell-ar_LY-20191219-lp151.2.9.1 myspell-ar_MA-20191219-lp151.2.9.1 myspell-ar_OM-20191219-lp151.2.9.1 myspell-ar_QA-20191219-lp151.2.9.1 myspell-ar_SA-20191219-lp151.2.9.1 myspell-ar_SD-20191219-lp151.2.9.1 myspell-ar_SY-20191219-lp151.2.9.1 myspell-ar_TN-20191219-lp151.2.9.1 myspell-ar_YE-20191219-lp151.2.9.1 myspell-be_BY-20191219-lp151.2.9.1 myspell-bg_BG-20191219-lp151.2.9.1 myspell-bn_BD-20191219-lp151.2.9.1 myspell-bn_IN-20191219-lp151.2.9.1 myspell-bo-20191219-lp151.2.9.1 myspell-bo_CN-20191219-lp151.2.9.1 myspell-bo_IN-20191219-lp151.2.9.1 myspell-br_FR-20191219-lp151.2.9.1 myspell-bs-20191219-lp151.2.9.1 myspell-bs_BA-20191219-lp151.2.9.1 myspell-ca-20191219-lp151.2.9.1 myspell-ca_AD-20191219-lp151.2.9.1 myspell-ca_ES-20191219-lp151.2.9.1 myspell-ca_ES_valencia-20191219-lp151.2.9.1 myspell-ca_FR-20191219-lp151.2.9.1 myspell-ca_IT-20191219-lp151.2.9.1 myspell-cs_CZ-20191219-lp151.2.9.1 myspell-da_DK-20191219-lp151.2.9.1 myspell-de-20191219-lp151.2.9.1 myspell-de_AT-20191219-lp151.2.9.1 myspell-de_CH-20191219-lp151.2.9.1 myspell-de_DE-20191219-lp151.2.9.1 myspell-el_GR-20191219-lp151.2.9.1 myspell-en-20191219-lp151.2.9.1 myspell-en_AU-20191219-lp151.2.9.1 myspell-en_BS-20191219-lp151.2.9.1 myspell-en_BZ-20191219-lp151.2.9.1 myspell-en_CA-20191219-lp151.2.9.1 myspell-en_GB-20191219-lp151.2.9.1 myspell-en_GH-20191219-lp151.2.9.1 myspell-en_IE-20191219-lp151.2.9.1 myspell-en_IN-20191219-lp151.2.9.1 myspell-en_JM-20191219-lp151.2.9.1 myspell-en_MW-20191219-lp151.2.9.1 myspell-en_NA-20191219-lp151.2.9.1 myspell-en_NZ-20191219-lp151.2.9.1 myspell-en_PH-20191219-lp151.2.9.1 myspell-en_TT-20191219-lp151.2.9.1 myspell-en_US-20191219-lp151.2.9.1 myspell-en_ZA-20191219-lp151.2.9.1 myspell-en_ZW-20191219-lp151.2.9.1 myspell-es-20191219-lp151.2.9.1 myspell-es_AR-20191219-lp151.2.9.1 myspell-es_BO-20191219-lp151.2.9.1 myspell-es_CL-20191219-lp151.2.9.1 myspell-es_CO-20191219-lp151.2.9.1 myspell-es_CR-20191219-lp151.2.9.1 myspell-es_CU-20191219-lp151.2.9.1 myspell-es_DO-20191219-lp151.2.9.1 myspell-es_EC-20191219-lp151.2.9.1 myspell-es_ES-20191219-lp151.2.9.1 myspell-es_GT-20191219-lp151.2.9.1 myspell-es_HN-20191219-lp151.2.9.1 myspell-es_MX-20191219-lp151.2.9.1 myspell-es_NI-20191219-lp151.2.9.1 myspell-es_PA-20191219-lp151.2.9.1 myspell-es_PE-20191219-lp151.2.9.1 myspell-es_PR-20191219-lp151.2.9.1 myspell-es_PY-20191219-lp151.2.9.1 myspell-es_SV-20191219-lp151.2.9.1 myspell-es_UY-20191219-lp151.2.9.1 myspell-es_VE-20191219-lp151.2.9.1 myspell-et_EE-20191219-lp151.2.9.1 myspell-fr_BE-20191219-lp151.2.9.1 myspell-fr_CA-20191219-lp151.2.9.1 myspell-fr_CH-20191219-lp151.2.9.1 myspell-fr_FR-20191219-lp151.2.9.1 myspell-fr_LU-20191219-lp151.2.9.1 myspell-fr_MC-20191219-lp151.2.9.1 myspell-gd_GB-20191219-lp151.2.9.1 myspell-gl-20191219-lp151.2.9.1 myspell-gl_ES-20191219-lp151.2.9.1 myspell-gu_IN-20191219-lp151.2.9.1 myspell-gug-20191219-lp151.2.9.1 myspell-gug_PY-20191219-lp151.2.9.1 myspell-he_IL-20191219-lp151.2.9.1 myspell-hi_IN-20191219-lp151.2.9.1 myspell-hr_HR-20191219-lp151.2.9.1 myspell-hu_HU-20191219-lp151.2.9.1 myspell-id-20191219-lp151.2.9.1 myspell-id_ID-20191219-lp151.2.9.1 myspell-is-20191219-lp151.2.9.1 myspell-is_IS-20191219-lp151.2.9.1 myspell-it_IT-20191219-lp151.2.9.1 myspell-kmr_Latn-20191219-lp151.2.9.1 myspell-kmr_Latn_SY-20191219-lp151.2.9.1 myspell-kmr_Latn_TR-20191219-lp151.2.9.1 myspell-lo_LA-20191219-lp151.2.9.1 myspell-lt_LT-20191219-lp151.2.9.1 myspell-lv_LV-20191219-lp151.2.9.1 myspell-nb_NO-20191219-lp151.2.9.1 myspell-ne_NP-20191219-lp151.2.9.1 myspell-nl_BE-20191219-lp151.2.9.1 myspell-nl_NL-20191219-lp151.2.9.1 myspell-nn_NO-20191219-lp151.2.9.1 myspell-no-20191219-lp151.2.9.1 myspell-oc_FR-20191219-lp151.2.9.1 myspell-pl_PL-20191219-lp151.2.9.1 myspell-pt_AO-20191219-lp151.2.9.1 myspell-pt_BR-20191219-lp151.2.9.1 myspell-pt_PT-20191219-lp151.2.9.1 myspell-ro-20191219-lp151.2.9.1 myspell-ro_RO-20191219-lp151.2.9.1 myspell-ru_RU-20191219-lp151.2.9.1 myspell-si_LK-20191219-lp151.2.9.1 myspell-sk_SK-20191219-lp151.2.9.1 myspell-sl_SI-20191219-lp151.2.9.1 myspell-sq_AL-20191219-lp151.2.9.1 myspell-sr-20191219-lp151.2.9.1 myspell-sr_CS-20191219-lp151.2.9.1 myspell-sr_Latn_CS-20191219-lp151.2.9.1 myspell-sr_Latn_RS-20191219-lp151.2.9.1 myspell-sr_RS-20191219-lp151.2.9.1 myspell-sv_FI-20191219-lp151.2.9.1 myspell-sv_SE-20191219-lp151.2.9.1 myspell-sw_TZ-20191219-lp151.2.9.1 myspell-te-20191219-lp151.2.9.1 myspell-te_IN-20191219-lp151.2.9.1 myspell-th_TH-20191219-lp151.2.9.1 myspell-tr-20191219-lp151.2.9.1 myspell-tr_TR-20191219-lp151.2.9.1 myspell-uk_UA-20191219-lp151.2.9.1 myspell-vi-20191219-lp151.2.9.1 myspell-vi_VN-20191219-lp151.2.9.1 myspell-zu_ZA-20191219-lp151.2.9.1 - openSUSE Leap 15.1 (x86_64): QR-Code-generator-debuginfo-1.5.0-lp151.2.1 QR-Code-generator-debugsource-1.5.0-lp151.2.1 QR-Code-generator-devel-1.5.0-lp151.2.1 libboost_atomic1_66_0-32bit-1.66.0-lp151.5.3.1 libboost_atomic1_66_0-32bit-debuginfo-1.66.0-lp151.5.3.1 libboost_container1_66_0-32bit-1.66.0-lp151.5.3.1 libboost_container1_66_0-32bit-debuginfo-1.66.0-lp151.5.3.1 libboost_context1_66_0-32bit-1.66.0-lp151.5.3.1 libboost_context1_66_0-32bit-debuginfo-1.66.0-lp151.5.3.1 libboost_coroutine1_66_0-32bit-1.66.0-lp151.5.3.1 libboost_coroutine1_66_0-32bit-debuginfo-1.66.0-lp151.5.3.1 libboost_date_time1_66_0-32bit-1.66.0-lp151.5.3.1 libboost_date_time1_66_0-32bit-debuginfo-1.66.0-lp151.5.3.1 libboost_fiber1_66_0-32bit-1.66.0-lp151.5.3.1 libboost_fiber1_66_0-32bit-debuginfo-1.66.0-lp151.5.3.1 libboost_filesystem1_66_0-32bit-1.66.0-lp151.5.3.1 libboost_filesystem1_66_0-32bit-debuginfo-1.66.0-lp151.5.3.1 libboost_graph1_66_0-32bit-1.66.0-lp151.5.3.1 libboost_graph1_66_0-32bit-debuginfo-1.66.0-lp151.5.3.1 libboost_graph_parallel1_66_0-32bit-1.66.0-lp151.5.3.1 libboost_graph_parallel1_66_0-32bit-debuginfo-1.66.0-lp151.5.3.1 libboost_iostreams1_66_0-32bit-1.66.0-lp151.5.3.1 libboost_iostreams1_66_0-32bit-debuginfo-1.66.0-lp151.5.3.1 libboost_locale1_66_0-32bit-1.66.0-lp151.5.3.1 libboost_locale1_66_0-32bit-debuginfo-1.66.0-lp151.5.3.1 libboost_math1_66_0-32bit-1.66.0-lp151.5.3.1 libboost_math1_66_0-32bit-debuginfo-1.66.0-lp151.5.3.1 libboost_mpi1_66_0-32bit-1.66.0-lp151.5.3.1 libboost_mpi1_66_0-32bit-debuginfo-1.66.0-lp151.5.3.1 libboost_program_options1_66_0-32bit-1.66.0-lp151.5.3.1 libboost_program_options1_66_0-32bit-debuginfo-1.66.0-lp151.5.3.1 libboost_python-py2_7-1_66_0-32bit-1.66.0-lp151.5.3.1 libboost_python-py2_7-1_66_0-32bit-debuginfo-1.66.0-lp151.5.3.1 libboost_python-py3-1_66_0-32bit-1.66.0-lp151.5.3.1 libboost_python-py3-1_66_0-32bit-debuginfo-1.66.0-lp151.5.3.1 libboost_random1_66_0-32bit-1.66.0-lp151.5.3.1 libboost_random1_66_0-32bit-debuginfo-1.66.0-lp151.5.3.1 libboost_regex1_66_0-32bit-1.66.0-lp151.5.3.1 libboost_regex1_66_0-32bit-debuginfo-1.66.0-lp151.5.3.1 libboost_serialization1_66_0-32bit-1.66.0-lp151.5.3.1 libboost_serialization1_66_0-32bit-debuginfo-1.66.0-lp151.5.3.1 libboost_signals1_66_0-32bit-1.66.0-lp151.5.3.1 libboost_signals1_66_0-32bit-debuginfo-1.66.0-lp151.5.3.1 libboost_stacktrace1_66_0-32bit-1.66.0-lp151.5.3.1 libboost_stacktrace1_66_0-32bit-debuginfo-1.66.0-lp151.5.3.1 libboost_system1_66_0-32bit-1.66.0-lp151.5.3.1 libboost_system1_66_0-32bit-debuginfo-1.66.0-lp151.5.3.1 libboost_test1_66_0-32bit-1.66.0-lp151.5.3.1 libboost_test1_66_0-32bit-debuginfo-1.66.0-lp151.5.3.1 libboost_thread1_66_0-32bit-1.66.0-lp151.5.3.1 libboost_thread1_66_0-32bit-debuginfo-1.66.0-lp151.5.3.1 libboost_type_erasure1_66_0-32bit-1.66.0-lp151.5.3.1 libboost_type_erasure1_66_0-32bit-debuginfo-1.66.0-lp151.5.3.1 libboost_wave1_66_0-32bit-1.66.0-lp151.5.3.1 libboost_wave1_66_0-32bit-debuginfo-1.66.0-lp151.5.3.1 libqrcodegen1-1.5.0-lp151.2.1 libqrcodegen1-debuginfo-1.5.0-lp151.2.1 libqrcodegencpp1-1.5.0-lp151.2.1 libqrcodegencpp1-debuginfo-1.5.0-lp151.2.1 libreoffice-6.4.2.2-lp151.3.12.3 libreoffice-base-6.4.2.2-lp151.3.12.3 libreoffice-base-debuginfo-6.4.2.2-lp151.3.12.3 libreoffice-base-drivers-firebird-6.4.2.2-lp151.3.12.3 libreoffice-base-drivers-firebird-debuginfo-6.4.2.2-lp151.3.12.3 libreoffice-base-drivers-postgresql-6.4.2.2-lp151.3.12.3 libreoffice-base-drivers-postgresql-debuginfo-6.4.2.2-lp151.3.12.3 libreoffice-calc-6.4.2.2-lp151.3.12.3 libreoffice-calc-debuginfo-6.4.2.2-lp151.3.12.3 libreoffice-calc-extensions-6.4.2.2-lp151.3.12.3 libreoffice-debuginfo-6.4.2.2-lp151.3.12.3 libreoffice-debugsource-6.4.2.2-lp151.3.12.3 libreoffice-draw-6.4.2.2-lp151.3.12.3 libreoffice-draw-debuginfo-6.4.2.2-lp151.3.12.3 libreoffice-filters-optional-6.4.2.2-lp151.3.12.3 libreoffice-gnome-6.4.2.2-lp151.3.12.3 libreoffice-gnome-debuginfo-6.4.2.2-lp151.3.12.3 libreoffice-gtk3-6.4.2.2-lp151.3.12.3 libreoffice-gtk3-debuginfo-6.4.2.2-lp151.3.12.3 libreoffice-impress-6.4.2.2-lp151.3.12.3 libreoffice-impress-debuginfo-6.4.2.2-lp151.3.12.3 libreoffice-librelogo-6.4.2.2-lp151.3.12.3 libreoffice-mailmerge-6.4.2.2-lp151.3.12.3 libreoffice-math-6.4.2.2-lp151.3.12.3 libreoffice-math-debuginfo-6.4.2.2-lp151.3.12.3 libreoffice-officebean-6.4.2.2-lp151.3.12.3 libreoffice-officebean-debuginfo-6.4.2.2-lp151.3.12.3 libreoffice-pyuno-6.4.2.2-lp151.3.12.3 libreoffice-pyuno-debuginfo-6.4.2.2-lp151.3.12.3 libreoffice-qt5-6.4.2.2-lp151.3.12.3 libreoffice-qt5-debuginfo-6.4.2.2-lp151.3.12.3 libreoffice-sdk-6.4.2.2-lp151.3.12.3 libreoffice-sdk-debuginfo-6.4.2.2-lp151.3.12.3 libreoffice-sdk-doc-6.4.2.2-lp151.3.12.3 libreoffice-writer-6.4.2.2-lp151.3.12.3 libreoffice-writer-debuginfo-6.4.2.2-lp151.3.12.3 libreoffice-writer-extensions-6.4.2.2-lp151.3.12.3 libreofficekit-6.4.2.2-lp151.3.12.3 libreofficekit-devel-6.4.2.2-lp151.3.12.3 python2-QR-Code-generator-1.5.0-lp151.2.1 python3-QR-Code-generator-1.5.0-lp151.2.1 References: https://bugzilla.suse.com/1161816 https://bugzilla.suse.com/1162152 https://bugzilla.suse.com/1167223

1 0

openSUSE-RU-2020:0447-1: moderate: Recommended update for pari-galdata, pari-galpol, pari-seadata
by maintenance＠opensuse.org 04 Apr '20

04 Apr '20

openSUSE Recommended Update: Recommended update for pari-galdata, pari-galpol, pari-seadata ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0447-1 Rating: moderate References: #1106378 #1165480 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for pari-galdata, pari-galpol, pari-seadata fixes the following issues: Changes in pari-galdata: - Strip /data/ subdirectory [boo#1106378, boo#1165480] Changes in pari-galpol: - Update to new upstream release 20180625 * No changelog was provided - Strip /data/ subdirectory [boo#1106378, boo#1165480] Changes in pari-seadata: - Strip /data/ subdirectory [boo#1106378, boo#1165480] Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-447=1 Package List: - openSUSE Leap 15.1 (noarch): pari-galdata-20080411-lp151.3.3.1 pari-galpol-20180625-lp151.3.3.1 pari-seadata-20090618-lp151.3.3.1 References: https://bugzilla.suse.com/1106378 https://bugzilla.suse.com/1165480

1 0

openSUSE-SU-2020:0446-1: important: Security update for spamassassin
by opensuse-security＠opensuse.org 04 Apr '20

04 Apr '20

openSUSE Security Update: Security update for spamassassin ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0446-1 Rating: important References: #1118987 #1162197 #1162200 #862963 Cross-References: CVE-2018-11805 CVE-2020-1930 CVE-2020-1931 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves three vulnerabilities and has one errata is now available. Description: This update for spamassassin fixes the following issues: Security issues fixed: - CVE-2018-11805: Fixed an issue with delimiter handling in rule files related to is_regexp_valid() (bsc#1118987). - CVE-2020-1930: Fixed an issue with rule configuration (.cf) files which can be configured to run system commands (bsc#1162197). - CVE-2020-1931: Fixed an issue with rule configuration (.cf) files which can be configured to run system commands with warnings (bsc#1162200). Non-security issue fixed: - Altering hash requires restarting loop (bsc#862963). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-446=1 Package List: - openSUSE Leap 15.1 (x86_64): perl-Mail-SpamAssassin-3.4.2-lp151.8.3.1 perl-Mail-SpamAssassin-Plugin-iXhash2-2.05-lp151.8.3.1 spamassassin-3.4.2-lp151.8.3.1 spamassassin-debuginfo-3.4.2-lp151.8.3.1 spamassassin-debugsource-3.4.2-lp151.8.3.1 References: https://www.suse.com/security/cve/CVE-2018-11805.html https://www.suse.com/security/cve/CVE-2020-1930.html https://www.suse.com/security/cve/CVE-2020-1931.html https://bugzilla.suse.com/1118987 https://bugzilla.suse.com/1162197 https://bugzilla.suse.com/1162200 https://bugzilla.suse.com/862963

1 0

openSUSE-RU-2020:0445-1: moderate: Recommended update for pmacct
by maintenance＠opensuse.org 04 Apr '20

04 Apr '20

openSUSE Recommended Update: Recommended update for pmacct ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0445-1 Rating: moderate References: Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for pmacct fixes the following issues: Update to version 1.7.4p1 - fix, pre_tag_map: a memory leak in pretag_entry_process() has been introduced in 1.7.4. Update to version 1.7.4 + Introduced support for the 'vxlan' VXLAN/VNI primitive in all traffic daemons + BMP daemon: added support for Peer Up message namespace for TLVs + sfprobe plugin: added support for IPv6 transport for sFlow export. See /usr/share/doc/packages/pmacct/ChangeLog for all changes - Do not longer build with support for the obsolete GeoIP The GeoIP-interface has been discontinued by Maxmind. See https://support.maxmind.com/geolite-legacy-discontinuation-notice/ for details. Without the database GeoIP is useless. pmacct is now build with support for libmaxminddb (GeoIPv2) that provides the same features but with a new supported interface. Update to version 1.7.3 + Introduced the RPKI daemon to build a ROA database and check prefixes validation status and coverages. Resource Public Key Infrastructure (RPKI) is a specialized public key infrastructure (PKI) framework designed to secure the Internet routing. RPKI uses certificates to allow Local Internet Registries (LIRs) to list the Internet number resources they hold. These attestations are called Route Origination Authorizations (ROAs). ROA information can be acquired in one of the two following ways: 1) importing it using the rpki_roas_file config directive from a file in the RIPE Validator format or 2) connecting to a RPKI RTR Cache for live ROA updates; the cache IP address/port being defined by the rpki_rtr_cache config directive (and a few more optional rpki_rtr_* directives are available and can be reviwed in the CONFIG-KEYS doc). The ROA fields will be populated with one of these five values: 'u' Unknown, 'v' Valid, 'i' Invalid no overlaps, 'V' Invalid with a covering Valid prefix, 'U' Invalid with a covering Unknown prefix. + Introducing pmgrpcd.py, written in Python, a daemon to handle gRPC- based Streaming Telemetry sessions and unmarshall GPB data. Code was mostly courtesy by Matthias Arnold ( @tbearma1 ). This is in addition (or feeding into) pmtelemetryd, written in C, a daemon to handle TCP/UDP-based Streaming Telemetry sessions with JSON-encoded data. + pmacctd, uacctd: added support for CFP (Cisco FabricPath) and Cisco Virtual Network Tag protocols. + print plugin: added 'custom' to print_output. This is to cover two main use-cases: 1) use JSON or Avro encodings but fix the format of the messages in a custom way and 2) use a different encoding than JSON or Avro. See also example in examples/custom and new directives print_output_custom_lib and print_output_custom_cfg_file. The patch was courtesy by Edge Intelligence ( @edge-intelligence ). + Introducing mpls_pw_id aggregation primitive and mpls_pw_id key in pre_tag_map to filter on signalled L2 MPLS VPN Pseudowire IDs. + BGP daemon: added bgp_disable_router_id knob to enable/disable BGP Router-ID check, both at BGP OPEN time and BGP lookup. Useful, for example, in scenarios with split BGP v4/v6 AFs over v4/v6 transports. + BGP, BMP daemons: translate origin attribute numeric value into IGP (i), EGP (e) and Incomplete (u) strings. + plugins: added new plugin_exit_any feature to make the daemon bail out if any (not all, which is the default behaviour) of the plugins exits. + maps_index: improved selection of buckets for index hash structure by picking the closest prime number to the double of the entries of the map to be indexed in order to achieve better elements dispersion and hence better performances. + nfacctd: added support for IPFIX templateId-scoped (IE 145) sampling information. + pmacctd, uacctd, sfacctd, nfacctd: added a -M command-line option to set *_markers (ie. print_markers) to true and fixed -A command-line option to set print_output_file_append to align to true/false. ! fix, BGP, BMP, Streaming Telemetry daemons: improved sequencing of dump events by assigning a single sequence number per event (ie. for streaming pipeline scenarios in order to reduce correlation with dump_init/dump_close messages). Also amount of record dumped was added to the close message. ! fix, BGP, BMP, Streaming Telemetry daemons: removed hierarchical json_decref() since json_object_get() borrows reference. This was occasionaly leading to SEGVs. ! fix, uacctd: dynamically allocate jumbo_container buffer size as packets larger than 10KB, previous static allocation, would lead to crashes. ! fix, nfacctd: wired (BGP, BMP, ISIS, etc.) lookups to the NEL/NSEL use-case. ! fix, nfacctd: search for IE 408 (dataLinkFrameType) was leading to SEGVs. Also improved handling of variable-length IPFIX templates. ! fix, BMP daemon: solved an occasional truncation of the last message in a packet. ! fix, BGP daemon: when processing bgp_daemon_md5_file, ipv4 addresses were incorrectly translated to ipv4-mapped ipv6 ones as a result of which TCP-MD5 hashes were not correctly bound to sockets. ! fix, BGP daemon: improved label-unicast and mpls-vpn SAFIs handling (some bogus messages, multiple labels, etc.). ! fix, BGP daemon: introduced PREFIX_STRLEN to make enough room for prefix2str() calls (before unsufficient INET6_ADDRSTRLEN was used). ! fix, BMP daemon: improved handling of ADD-PATH capability. ! fix, plugins: an incorrect evaluation in P_cache_attach_new_node did make possible to buffer overrun in plugins cache allocation. This was found related to a "[..]: Assertion `!cache_ptr->stitch' failed." daemon bail-out message. ! fix, plugins: if pidfile directive was enabled, exit_gracefully() was mistakenly deleting the plugin pidfile when called by a child process (ie. writer, dumper, etc.). ! fix, plugins: when taking exit_gracefully(), if the process is marked as 'is_forked', just exit and don't perform extra ops in exit_all() or exit_plugin(). ! fix, plugins: re-evaluate dynamic tables/files name if *_refresh_time is different than *_history period. ! fix, SQL plugins: a missing 'AND' was making SQL statements related to src_host_coords and dst_host_coords fail. ! fix, GeoIPv2: if no match is returned by libmaxminddb, return O1 code (Other Country) instead of a null value. ! fix, flow_to_rd_map: mpls_vpn_id was not working when maps_index was enabled. Also partly re-written mpls_vpn_id handler. ! fix, nfprobe plugin: serialize_bin() function introduced for correct serialization of custom primitives defined with 'raw' semantics. ! fix, PostgreSQL plugin: testing for presence of PQlibVersion() in libpq to prevent compiling issues (ie. on CentOS 6). ! fix, MySQL plugin: including mysql_version.h to compile successfully against newer MariaDB releases. ! fix, nDPI classification: send log message if 'class' primitive is selected but nDPI is not compiled in; also updated code to follow API changes in versions >= 2.6 of the library. Dropped support for versions < 2.4. ! fix, sfprobe plugin: added (and documented) conditional for optional export of classification info. ! fix, aggregate_primitives: field_type is now also allowed for pmacctd and uaccd daemons so that it can be used for NetFlow v9/IPFIX export (nfprobe plugin) purposes. ! fix, pre_tag_map: if no 'ip' keyword is specified, an entry of the map gets recirculated in order to be set for both v4 and v6 maps. If a 'set_label' is also specified, it was causing a SEGV. Now the label is correctly copied in case of recirculation. ! fix, zmq_common.c: added option for non-blocking p_zmq_send_bin() as otherwise program would block in case of no consumers (main use-case: flow replication over ZeroMQ queues); as a result, a generous hwm value was added on both sides of these queues. ! fix, zmq_common.c: ZAP socket moved inside thread to prevent failed assert() when compiling with gcc7/gcc8. Also a single user/password auto-generated combination is used for all plugins. ! fix, signals.c: SIGUSR1 handler for nfacctd and nfacctd is changed to syncronous in order to prevent race conditions. Also, in pmacctd, upon sending SIGUSR1, stats were not printed when reading packets from a pcap_interfaaces_map. ! fix, plugin_cmn_json.c: if leaving protocols numerical (ie. proto, tunnel_proto primitives), convert them to string-represented numbers for data consistency for consumers. ! fix, util.c: open_output_file(), if file exists and it's a FIFO then set O_NONBLOCK when opening. ! fix, pretag.c: pretag_index_report() was reporting incorrect info of the hash structure built for the maps_index feature. Its format was has also changed to be better parseable. ! fix, compile time warnings: several warnings were addressed including but not restricted to -Wformat ones. Also an annotation was added to the Log function to inform the compiler it's a printf-style function, allowing it to give warnings for argument mismatches. - --enable-ipv6 configure script switch has been deprecated and, as a result, IPv6 support was made mandatory. - BGP daemon: removed unused pathlimit field from bgp_attr structure. - pmacct client: removed deprecated SYM field from from formatted and CSV headers. - Build with support for * ZeroMQ * Maxmind GeoIP DB v2 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-445=1 Package List: - openSUSE Leap 15.1 (x86_64): pmacct-1.7.4p1-lp151.2.6.1 pmacct-debuginfo-1.7.4p1-lp151.2.6.1 pmacct-debugsource-1.7.4p1-lp151.2.6.1 References:

1 0

openSUSE-SU-2020:0444-1: important: Security update for haproxy
by opensuse-security＠opensuse.org 04 Apr '20

04 Apr '20

openSUSE Security Update: Security update for haproxy ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0444-1 Rating: important References: #1168023 Cross-References: CVE-2020-11100 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for haproxy fixes the following issues: - CVE-2020-11100: Fixed an H2/HPAC vulnerability ch might have allowed arbitrary writes into a 32-bit relative address space (bsc#1168023). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-444=1 Package List: - openSUSE Leap 15.1 (x86_64): haproxy-2.0.10+git0.ac198b92-lp151.2.9.1 haproxy-debuginfo-2.0.10+git0.ac198b92-lp151.2.9.1 haproxy-debugsource-2.0.10+git0.ac198b92-lp151.2.9.1 References: https://www.suse.com/security/cve/CVE-2020-11100.html https://bugzilla.suse.com/1168023

1 0

openSUSE-RU-2020:0443-1: Recommended update for jovie
by maintenance＠opensuse.org 02 Apr '20

02 Apr '20

openSUSE Recommended Update: Recommended update for jovie ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0443-1 Rating: low References: Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for jovie fixes the following issues: * Fix speechd include paths for SLE This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-443=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): jovie-17.08.3-bp151.5.3.1 References:

1 0

openSUSE-RU-2020:0441-1: Recommended update for jovie
by maintenance＠opensuse.org 02 Apr '20

02 Apr '20

openSUSE Recommended Update: Recommended update for jovie ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0441-1 Rating: low References: Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for jovie fixes the following issues: * Fix speechd include paths for SLE Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-441=1 Package List: - openSUSE Leap 15.1 (x86_64): jovie-17.08.3-lp151.3.5.1 jovie-debuginfo-17.08.3-lp151.3.5.1 jovie-debugsource-17.08.3-lp151.3.5.1 References:

1 0

openSUSE-RU-2020:0442-1: moderate: Recommended update for python3
by maintenance＠opensuse.org 02 Apr '20

02 Apr '20

openSUSE Recommended Update: Recommended update for python3 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0442-1 Rating: moderate References: #1165894 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python3 fixes the following issue: - Rename idle icons to idle3 in order to not conflict with python2 variant of the package (bsc#1165894) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-442=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libpython3_6m1_0-3.6.10-lp151.6.15.2 libpython3_6m1_0-debuginfo-3.6.10-lp151.6.15.2 python3-3.6.10-lp151.6.15.2 python3-base-3.6.10-lp151.6.15.2 python3-base-debuginfo-3.6.10-lp151.6.15.2 python3-base-debugsource-3.6.10-lp151.6.15.2 python3-curses-3.6.10-lp151.6.15.2 python3-curses-debuginfo-3.6.10-lp151.6.15.2 python3-dbm-3.6.10-lp151.6.15.2 python3-dbm-debuginfo-3.6.10-lp151.6.15.2 python3-debuginfo-3.6.10-lp151.6.15.2 python3-debugsource-3.6.10-lp151.6.15.2 python3-devel-3.6.10-lp151.6.15.2 python3-devel-debuginfo-3.6.10-lp151.6.15.2 python3-idle-3.6.10-lp151.6.15.2 python3-testsuite-3.6.10-lp151.6.15.2 python3-testsuite-debuginfo-3.6.10-lp151.6.15.2 python3-tk-3.6.10-lp151.6.15.2 python3-tk-debuginfo-3.6.10-lp151.6.15.2 python3-tools-3.6.10-lp151.6.15.2 - openSUSE Leap 15.1 (x86_64): libpython3_6m1_0-32bit-3.6.10-lp151.6.15.2 libpython3_6m1_0-32bit-debuginfo-3.6.10-lp151.6.15.2 python3-32bit-3.6.10-lp151.6.15.2 python3-32bit-debuginfo-3.6.10-lp151.6.15.2 python3-base-32bit-3.6.10-lp151.6.15.2 python3-base-32bit-debuginfo-3.6.10-lp151.6.15.2 References: https://bugzilla.suse.com/1165894

1 0

openSUSE-SU-2020:0440-1: moderate: Security update for python-nltk
by opensuse-security＠opensuse.org 01 Apr '20

01 Apr '20

openSUSE Security Update: Security update for python-nltk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0440-1 Rating: moderate References: #1146427 Cross-References: CVE-2019-14751 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-nltk fixes the following issues: Update to 3.4.5 (boo#1146427, CVE-2019-14751): * CVE-2019-14751: Fixed Zip slip vulnerability in downloader for the unlikely situation where a user configures their downloader to use a compromised server (boo#1146427) Update to 3.4.4: * fix bug in plot function (probability.py) * add improved PanLex Swadesh corpus reader * add Text.generate() * add QuadgramAssocMeasures * add SSP to tokenizers * return confidence of best tag from AveragedPerceptron * make plot methods return Axes objects * don't require list arguments to PositiveNaiveBayesClassifier.train * fix Tree classes to work with native Python copy library * fix inconsistency for NomBank * fix random seeding in LanguageModel.generate * fix ConditionalFreqDist mutation on tabulate/plot call * fix broken links in documentation * fix misc Wordnet issues * update installation instructions Version update to 3.4.1: * add chomsky_normal_form for CFGs * add meteor score * add minimum edit/Levenshtein distance based alignment function * allow access to collocation list via text.collocation_list() * support corenlp server options * drop support for Python 3.4 * other minor fixes Update to v3.4: * Support Python 3.7 * New Language Modeling package * Cistem Stemmer for German * Support Russian National Corpus incl POS tag model * Krippendorf Alpha inter-rater reliability test * Comprehensive code clean-ups * Switch continuous integration from Jenkins to Travis Updated to v3.3: * Support Python 3.6 * New interface to CoreNLP * Support synset retrieval by sense key * Minor fixes to CoNLL Corpus Reader * AlignedSent * Fixed minor inconsistencies in APIs and API documentation * Better conformance to PEP8 * Drop Moses Tokenizer (incompatible license) This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-440=1 Package List: - openSUSE Backports SLE-15-SP1 (noarch): python2-nltk-3.4.5-bp151.4.3.1 python3-nltk-3.4.5-bp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2019-14751.html https://bugzilla.suse.com/1146427

1 0

openSUSE-RU-2020:0439-1: moderate: Recommended update for glibc
by maintenance＠opensuse.org 01 Apr '20

01 Apr '20

openSUSE Recommended Update: Recommended update for glibc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0439-1 Rating: moderate References: #1166106 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for glibc fixes the following issues: - Allow dlopen of filter object to work (bsc#1166106, BZ #16272) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-439=1 Package List: - openSUSE Leap 15.1 (i586 i686 x86_64): glibc-2.26-lp151.19.7.1 glibc-debuginfo-2.26-lp151.19.7.1 glibc-debugsource-2.26-lp151.19.7.1 glibc-devel-2.26-lp151.19.7.1 glibc-devel-debuginfo-2.26-lp151.19.7.1 glibc-devel-static-2.26-lp151.19.7.1 glibc-locale-2.26-lp151.19.7.1 glibc-locale-base-2.26-lp151.19.7.1 glibc-locale-base-debuginfo-2.26-lp151.19.7.1 glibc-profile-2.26-lp151.19.7.1 - openSUSE Leap 15.1 (i586 x86_64): glibc-extra-2.26-lp151.19.7.1 glibc-extra-debuginfo-2.26-lp151.19.7.1 glibc-utils-2.26-lp151.19.7.1 glibc-utils-debuginfo-2.26-lp151.19.7.1 glibc-utils-src-debugsource-2.26-lp151.19.7.1 nscd-2.26-lp151.19.7.1 nscd-debuginfo-2.26-lp151.19.7.1 - openSUSE Leap 15.1 (noarch): glibc-html-2.26-lp151.19.7.1 glibc-i18ndata-2.26-lp151.19.7.1 glibc-info-2.26-lp151.19.7.1 - openSUSE Leap 15.1 (x86_64): glibc-32bit-2.26-lp151.19.7.1 glibc-32bit-debuginfo-2.26-lp151.19.7.1 glibc-devel-32bit-2.26-lp151.19.7.1 glibc-devel-32bit-debuginfo-2.26-lp151.19.7.1 glibc-devel-static-32bit-2.26-lp151.19.7.1 glibc-locale-base-32bit-2.26-lp151.19.7.1 glibc-locale-base-32bit-debuginfo-2.26-lp151.19.7.1 glibc-profile-32bit-2.26-lp151.19.7.1 glibc-utils-32bit-2.26-lp151.19.7.1 glibc-utils-32bit-debuginfo-2.26-lp151.19.7.1 References: https://bugzilla.suse.com/1166106

1 0

openSUSE-SU-2020:0438-1: moderate: Security update for ldns
by opensuse-security＠opensuse.org 01 Apr '20

01 Apr '20

openSUSE Security Update: Security update for ldns ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0438-1 Rating: moderate References: #1068709 #1068711 Cross-References: CVE-2017-1000231 CVE-2017-1000232 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for ldns fixes the following issues: - CVE-2017-1000231: Fixed a buffer overflow during token parsing (bsc#1068711). - CVE-2017-1000232: Fixed a double-free vulnerability in str2host.c (bsc#1068709). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-438=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): ldns-1.7.0-lp151.4.3.1 ldns-debuginfo-1.7.0-lp151.4.3.1 ldns-debugsource-1.7.0-lp151.4.3.1 ldns-devel-1.7.0-lp151.4.3.1 libldns2-1.7.0-lp151.4.3.1 libldns2-debuginfo-1.7.0-lp151.4.3.1 perl-DNS-LDNS-1.7.0-lp151.4.3.1 perl-DNS-LDNS-debuginfo-1.7.0-lp151.4.3.1 python3-ldns-1.7.0-lp151.4.3.1 python3-ldns-debuginfo-1.7.0-lp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2017-1000231.html https://www.suse.com/security/cve/CVE-2017-1000232.html https://bugzilla.suse.com/1068709 https://bugzilla.suse.com/1068711

1 0