April 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2020:0443-1: Recommended update for jovie
by maintenance＠opensuse.org 02 Apr '20

02 Apr '20

openSUSE Recommended Update: Recommended update for jovie ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0443-1 Rating: low References: Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for jovie fixes the following issues: * Fix speechd include paths for SLE This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-443=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): jovie-17.08.3-bp151.5.3.1 References:

1 0

openSUSE-RU-2020:0441-1: Recommended update for jovie
by maintenance＠opensuse.org 02 Apr '20

02 Apr '20

openSUSE Recommended Update: Recommended update for jovie ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0441-1 Rating: low References: Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for jovie fixes the following issues: * Fix speechd include paths for SLE Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-441=1 Package List: - openSUSE Leap 15.1 (x86_64): jovie-17.08.3-lp151.3.5.1 jovie-debuginfo-17.08.3-lp151.3.5.1 jovie-debugsource-17.08.3-lp151.3.5.1 References:

1 0

openSUSE-RU-2020:0442-1: moderate: Recommended update for python3
by maintenance＠opensuse.org 02 Apr '20

02 Apr '20

openSUSE Recommended Update: Recommended update for python3 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0442-1 Rating: moderate References: #1165894 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python3 fixes the following issue: - Rename idle icons to idle3 in order to not conflict with python2 variant of the package (bsc#1165894) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-442=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libpython3_6m1_0-3.6.10-lp151.6.15.2 libpython3_6m1_0-debuginfo-3.6.10-lp151.6.15.2 python3-3.6.10-lp151.6.15.2 python3-base-3.6.10-lp151.6.15.2 python3-base-debuginfo-3.6.10-lp151.6.15.2 python3-base-debugsource-3.6.10-lp151.6.15.2 python3-curses-3.6.10-lp151.6.15.2 python3-curses-debuginfo-3.6.10-lp151.6.15.2 python3-dbm-3.6.10-lp151.6.15.2 python3-dbm-debuginfo-3.6.10-lp151.6.15.2 python3-debuginfo-3.6.10-lp151.6.15.2 python3-debugsource-3.6.10-lp151.6.15.2 python3-devel-3.6.10-lp151.6.15.2 python3-devel-debuginfo-3.6.10-lp151.6.15.2 python3-idle-3.6.10-lp151.6.15.2 python3-testsuite-3.6.10-lp151.6.15.2 python3-testsuite-debuginfo-3.6.10-lp151.6.15.2 python3-tk-3.6.10-lp151.6.15.2 python3-tk-debuginfo-3.6.10-lp151.6.15.2 python3-tools-3.6.10-lp151.6.15.2 - openSUSE Leap 15.1 (x86_64): libpython3_6m1_0-32bit-3.6.10-lp151.6.15.2 libpython3_6m1_0-32bit-debuginfo-3.6.10-lp151.6.15.2 python3-32bit-3.6.10-lp151.6.15.2 python3-32bit-debuginfo-3.6.10-lp151.6.15.2 python3-base-32bit-3.6.10-lp151.6.15.2 python3-base-32bit-debuginfo-3.6.10-lp151.6.15.2 References: https://bugzilla.suse.com/1165894

1 0

openSUSE-SU-2020:0440-1: moderate: Security update for python-nltk
by opensuse-security＠opensuse.org 01 Apr '20

01 Apr '20

openSUSE Security Update: Security update for python-nltk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0440-1 Rating: moderate References: #1146427 Cross-References: CVE-2019-14751 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-nltk fixes the following issues: Update to 3.4.5 (boo#1146427, CVE-2019-14751): * CVE-2019-14751: Fixed Zip slip vulnerability in downloader for the unlikely situation where a user configures their downloader to use a compromised server (boo#1146427) Update to 3.4.4: * fix bug in plot function (probability.py) * add improved PanLex Swadesh corpus reader * add Text.generate() * add QuadgramAssocMeasures * add SSP to tokenizers * return confidence of best tag from AveragedPerceptron * make plot methods return Axes objects * don't require list arguments to PositiveNaiveBayesClassifier.train * fix Tree classes to work with native Python copy library * fix inconsistency for NomBank * fix random seeding in LanguageModel.generate * fix ConditionalFreqDist mutation on tabulate/plot call * fix broken links in documentation * fix misc Wordnet issues * update installation instructions Version update to 3.4.1: * add chomsky_normal_form for CFGs * add meteor score * add minimum edit/Levenshtein distance based alignment function * allow access to collocation list via text.collocation_list() * support corenlp server options * drop support for Python 3.4 * other minor fixes Update to v3.4: * Support Python 3.7 * New Language Modeling package * Cistem Stemmer for German * Support Russian National Corpus incl POS tag model * Krippendorf Alpha inter-rater reliability test * Comprehensive code clean-ups * Switch continuous integration from Jenkins to Travis Updated to v3.3: * Support Python 3.6 * New interface to CoreNLP * Support synset retrieval by sense key * Minor fixes to CoNLL Corpus Reader * AlignedSent * Fixed minor inconsistencies in APIs and API documentation * Better conformance to PEP8 * Drop Moses Tokenizer (incompatible license) This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-440=1 Package List: - openSUSE Backports SLE-15-SP1 (noarch): python2-nltk-3.4.5-bp151.4.3.1 python3-nltk-3.4.5-bp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2019-14751.html https://bugzilla.suse.com/1146427

1 0

openSUSE-RU-2020:0439-1: moderate: Recommended update for glibc
by maintenance＠opensuse.org 01 Apr '20

01 Apr '20

openSUSE Recommended Update: Recommended update for glibc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0439-1 Rating: moderate References: #1166106 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for glibc fixes the following issues: - Allow dlopen of filter object to work (bsc#1166106, BZ #16272) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-439=1 Package List: - openSUSE Leap 15.1 (i586 i686 x86_64): glibc-2.26-lp151.19.7.1 glibc-debuginfo-2.26-lp151.19.7.1 glibc-debugsource-2.26-lp151.19.7.1 glibc-devel-2.26-lp151.19.7.1 glibc-devel-debuginfo-2.26-lp151.19.7.1 glibc-devel-static-2.26-lp151.19.7.1 glibc-locale-2.26-lp151.19.7.1 glibc-locale-base-2.26-lp151.19.7.1 glibc-locale-base-debuginfo-2.26-lp151.19.7.1 glibc-profile-2.26-lp151.19.7.1 - openSUSE Leap 15.1 (i586 x86_64): glibc-extra-2.26-lp151.19.7.1 glibc-extra-debuginfo-2.26-lp151.19.7.1 glibc-utils-2.26-lp151.19.7.1 glibc-utils-debuginfo-2.26-lp151.19.7.1 glibc-utils-src-debugsource-2.26-lp151.19.7.1 nscd-2.26-lp151.19.7.1 nscd-debuginfo-2.26-lp151.19.7.1 - openSUSE Leap 15.1 (noarch): glibc-html-2.26-lp151.19.7.1 glibc-i18ndata-2.26-lp151.19.7.1 glibc-info-2.26-lp151.19.7.1 - openSUSE Leap 15.1 (x86_64): glibc-32bit-2.26-lp151.19.7.1 glibc-32bit-debuginfo-2.26-lp151.19.7.1 glibc-devel-32bit-2.26-lp151.19.7.1 glibc-devel-32bit-debuginfo-2.26-lp151.19.7.1 glibc-devel-static-32bit-2.26-lp151.19.7.1 glibc-locale-base-32bit-2.26-lp151.19.7.1 glibc-locale-base-32bit-debuginfo-2.26-lp151.19.7.1 glibc-profile-32bit-2.26-lp151.19.7.1 glibc-utils-32bit-2.26-lp151.19.7.1 glibc-utils-32bit-debuginfo-2.26-lp151.19.7.1 References: https://bugzilla.suse.com/1166106

1 0

openSUSE-SU-2020:0438-1: moderate: Security update for ldns
by opensuse-security＠opensuse.org 01 Apr '20

01 Apr '20

openSUSE Security Update: Security update for ldns ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0438-1 Rating: moderate References: #1068709 #1068711 Cross-References: CVE-2017-1000231 CVE-2017-1000232 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for ldns fixes the following issues: - CVE-2017-1000231: Fixed a buffer overflow during token parsing (bsc#1068711). - CVE-2017-1000232: Fixed a double-free vulnerability in str2host.c (bsc#1068709). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-438=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): ldns-1.7.0-lp151.4.3.1 ldns-debuginfo-1.7.0-lp151.4.3.1 ldns-debugsource-1.7.0-lp151.4.3.1 ldns-devel-1.7.0-lp151.4.3.1 libldns2-1.7.0-lp151.4.3.1 libldns2-debuginfo-1.7.0-lp151.4.3.1 perl-DNS-LDNS-1.7.0-lp151.4.3.1 perl-DNS-LDNS-debuginfo-1.7.0-lp151.4.3.1 python3-ldns-1.7.0-lp151.4.3.1 python3-ldns-debuginfo-1.7.0-lp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2017-1000231.html https://www.suse.com/security/cve/CVE-2017-1000232.html https://bugzilla.suse.com/1068709 https://bugzilla.suse.com/1068711

1 0