April 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2020:0495-1: moderate: Recommended update for wget
by maintenance＠opensuse.org 10 Apr '20

10 Apr '20

openSUSE Recommended Update: Recommended update for wget ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0495-1 Rating: moderate References: #1167919 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for wget fixes the following issues: wget was updated to 1.20.3, fixing various bugs, including: - Fix for wget ignoring domains with leading "." in environment variable "no_proxy". (bsc#1167919) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-495=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): wget-1.20.3-lp151.5.3.1 wget-debuginfo-1.20.3-lp151.5.3.1 wget-debugsource-1.20.3-lp151.5.3.1 - openSUSE Leap 15.1 (noarch): wget-lang-1.20.3-lp151.5.3.1 References: https://bugzilla.suse.com/1167919

1 0

openSUSE-RU-2020:0498-1: moderate: Recommended update for lxc
by maintenance＠opensuse.org 10 Apr '20

10 Apr '20

openSUSE Recommended Update: Recommended update for lxc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0498-1 Rating: moderate References: Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for lxc fixes the following issues: - Fix mis-use of %suse_version when we actually want to check against %sle_version when determining whether lxc-user-nic should be setuid. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-498=1 Package List: - openSUSE Leap 15.1 (noarch): lxc-bash-completion-4.0.0-lp151.4.19.1 - openSUSE Leap 15.1 (x86_64): liblxc-devel-4.0.0-lp151.4.19.1 liblxc1-4.0.0-lp151.4.19.1 liblxc1-debuginfo-4.0.0-lp151.4.19.1 lxc-4.0.0-lp151.4.19.1 lxc-debuginfo-4.0.0-lp151.4.19.1 lxc-debugsource-4.0.0-lp151.4.19.1 pam_cgfs-4.0.0-lp151.4.19.1 pam_cgfs-debuginfo-4.0.0-lp151.4.19.1 References:

1 0

openSUSE-SU-2020:0494-1: important: Security update for ceph
by opensuse-security＠opensuse.org 10 Apr '20

10 Apr '20

openSUSE Security Update: Security update for ceph ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0494-1 Rating: important References: #1166403 #1166484 Cross-References: CVE-2020-1759 CVE-2020-1760 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for ceph fixes the following issues: - CVE-2020-1759: Fixed once reuse in msgr V2 secure mode (bsc#1166403) - CVE-2020-1760: Fixed XSS due to RGW GetObject header-splitting (bsc#1166484). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-494=1 Package List: - openSUSE Leap 15.1 (noarch): ceph-dashboard-e2e-14.2.5.389+gb0f23ac248-lp151.2.13.1 ceph-grafana-dashboards-14.2.5.389+gb0f23ac248-lp151.2.13.1 ceph-mgr-dashboard-14.2.5.389+gb0f23ac248-lp151.2.13.1 ceph-mgr-diskprediction-cloud-14.2.5.389+gb0f23ac248-lp151.2.13.1 ceph-mgr-diskprediction-local-14.2.5.389+gb0f23ac248-lp151.2.13.1 ceph-mgr-k8sevents-14.2.5.389+gb0f23ac248-lp151.2.13.1 ceph-mgr-rook-14.2.5.389+gb0f23ac248-lp151.2.13.1 ceph-mgr-ssh-14.2.5.389+gb0f23ac248-lp151.2.13.1 ceph-prometheus-alerts-14.2.5.389+gb0f23ac248-lp151.2.13.1 - openSUSE Leap 15.1 (x86_64): ceph-14.2.5.389+gb0f23ac248-lp151.2.13.1 ceph-base-14.2.5.389+gb0f23ac248-lp151.2.13.1 ceph-base-debuginfo-14.2.5.389+gb0f23ac248-lp151.2.13.1 ceph-common-14.2.5.389+gb0f23ac248-lp151.2.13.1 ceph-common-debuginfo-14.2.5.389+gb0f23ac248-lp151.2.13.1 ceph-debugsource-14.2.5.389+gb0f23ac248-lp151.2.13.1 ceph-fuse-14.2.5.389+gb0f23ac248-lp151.2.13.1 ceph-fuse-debuginfo-14.2.5.389+gb0f23ac248-lp151.2.13.1 ceph-mds-14.2.5.389+gb0f23ac248-lp151.2.13.1 ceph-mds-debuginfo-14.2.5.389+gb0f23ac248-lp151.2.13.1 ceph-mgr-14.2.5.389+gb0f23ac248-lp151.2.13.1 ceph-mgr-debuginfo-14.2.5.389+gb0f23ac248-lp151.2.13.1 ceph-mon-14.2.5.389+gb0f23ac248-lp151.2.13.1 ceph-mon-debuginfo-14.2.5.389+gb0f23ac248-lp151.2.13.1 ceph-osd-14.2.5.389+gb0f23ac248-lp151.2.13.1 ceph-osd-debuginfo-14.2.5.389+gb0f23ac248-lp151.2.13.1 ceph-radosgw-14.2.5.389+gb0f23ac248-lp151.2.13.1 ceph-radosgw-debuginfo-14.2.5.389+gb0f23ac248-lp151.2.13.1 ceph-resource-agents-14.2.5.389+gb0f23ac248-lp151.2.13.1 ceph-test-14.2.5.389+gb0f23ac248-lp151.2.13.1 ceph-test-debuginfo-14.2.5.389+gb0f23ac248-lp151.2.13.1 ceph-test-debugsource-14.2.5.389+gb0f23ac248-lp151.2.13.1 cephfs-shell-14.2.5.389+gb0f23ac248-lp151.2.13.1 libcephfs-devel-14.2.5.389+gb0f23ac248-lp151.2.13.1 libcephfs2-14.2.5.389+gb0f23ac248-lp151.2.13.1 libcephfs2-debuginfo-14.2.5.389+gb0f23ac248-lp151.2.13.1 librados-devel-14.2.5.389+gb0f23ac248-lp151.2.13.1 librados-devel-debuginfo-14.2.5.389+gb0f23ac248-lp151.2.13.1 librados2-14.2.5.389+gb0f23ac248-lp151.2.13.1 librados2-debuginfo-14.2.5.389+gb0f23ac248-lp151.2.13.1 libradospp-devel-14.2.5.389+gb0f23ac248-lp151.2.13.1 libradosstriper-devel-14.2.5.389+gb0f23ac248-lp151.2.13.1 libradosstriper1-14.2.5.389+gb0f23ac248-lp151.2.13.1 libradosstriper1-debuginfo-14.2.5.389+gb0f23ac248-lp151.2.13.1 librbd-devel-14.2.5.389+gb0f23ac248-lp151.2.13.1 librbd1-14.2.5.389+gb0f23ac248-lp151.2.13.1 librbd1-debuginfo-14.2.5.389+gb0f23ac248-lp151.2.13.1 librgw-devel-14.2.5.389+gb0f23ac248-lp151.2.13.1 librgw2-14.2.5.389+gb0f23ac248-lp151.2.13.1 librgw2-debuginfo-14.2.5.389+gb0f23ac248-lp151.2.13.1 python3-ceph-argparse-14.2.5.389+gb0f23ac248-lp151.2.13.1 python3-cephfs-14.2.5.389+gb0f23ac248-lp151.2.13.1 python3-cephfs-debuginfo-14.2.5.389+gb0f23ac248-lp151.2.13.1 python3-rados-14.2.5.389+gb0f23ac248-lp151.2.13.1 python3-rados-debuginfo-14.2.5.389+gb0f23ac248-lp151.2.13.1 python3-rbd-14.2.5.389+gb0f23ac248-lp151.2.13.1 python3-rbd-debuginfo-14.2.5.389+gb0f23ac248-lp151.2.13.1 python3-rgw-14.2.5.389+gb0f23ac248-lp151.2.13.1 python3-rgw-debuginfo-14.2.5.389+gb0f23ac248-lp151.2.13.1 rados-objclass-devel-14.2.5.389+gb0f23ac248-lp151.2.13.1 rbd-fuse-14.2.5.389+gb0f23ac248-lp151.2.13.1 rbd-fuse-debuginfo-14.2.5.389+gb0f23ac248-lp151.2.13.1 rbd-mirror-14.2.5.389+gb0f23ac248-lp151.2.13.1 rbd-mirror-debuginfo-14.2.5.389+gb0f23ac248-lp151.2.13.1 rbd-nbd-14.2.5.389+gb0f23ac248-lp151.2.13.1 rbd-nbd-debuginfo-14.2.5.389+gb0f23ac248-lp151.2.13.1 References: https://www.suse.com/security/cve/CVE-2020-1759.html https://www.suse.com/security/cve/CVE-2020-1760.html https://bugzilla.suse.com/1166403 https://bugzilla.suse.com/1166484

1 0

openSUSE-RU-2020:0497-1: moderate: Recommended update for yast2-iscsi-lio-server
by maintenance＠opensuse.org 10 Apr '20

10 Apr '20

openSUSE Recommended Update: Recommended update for yast2-iscsi-lio-server ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0497-1 Rating: moderate References: #1165638 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-iscsi-lio-server fixes the following issues: - Change the default service action to use the yast modules properly. (bsc#1165638) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-497=1 Package List: - openSUSE Leap 15.1 (noarch): yast2-iscsi-lio-server-4.1.7-lp151.2.3.1 References: https://bugzilla.suse.com/1165638

1 0

openSUSE-SU-2020:0493-1: important: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 10 Apr '20

10 Apr '20

openSUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0493-1 Rating: important References: #1168874 Cross-References: CVE-2020-6821 CVE-2020-6822 CVE-2020-6825 CVE-2020-6827 CVE-2020-6828 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for MozillaFirefox to version 68.7.0 ESR fixes the following issues: - CVE-2020-6821: Uninitialized memory could be read when using the WebGL copyTexSubImage method (bsc#1168874). - CVE-2020-6822: Fixed out of bounds write in GMPDecodeData when processing large images (bsc#1168874). - CVE-2020-6825: Fixed Memory safety bugs (bsc#1168874). - CVE-2020-6827: Custom Tabs could have the URI spoofed (bsc#1168874). - CVE-2020-6828: Preference overwrite via crafted Intent (bsc#1168874). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-493=1 Package List: - openSUSE Leap 15.1 (x86_64): MozillaFirefox-68.7.0-lp151.2.42.1 MozillaFirefox-branding-upstream-68.7.0-lp151.2.42.1 MozillaFirefox-buildsymbols-68.7.0-lp151.2.42.1 MozillaFirefox-debuginfo-68.7.0-lp151.2.42.1 MozillaFirefox-debugsource-68.7.0-lp151.2.42.1 MozillaFirefox-devel-68.7.0-lp151.2.42.1 MozillaFirefox-translations-common-68.7.0-lp151.2.42.1 MozillaFirefox-translations-other-68.7.0-lp151.2.42.1 References: https://www.suse.com/security/cve/CVE-2020-6821.html https://www.suse.com/security/cve/CVE-2020-6822.html https://www.suse.com/security/cve/CVE-2020-6825.html https://www.suse.com/security/cve/CVE-2020-6827.html https://www.suse.com/security/cve/CVE-2020-6828.html https://bugzilla.suse.com/1168874

1 0

openSUSE-RU-2020:0489-1: moderate: Recommended update for libkcddb, libkcddb4
by maintenance＠opensuse.org 09 Apr '20

09 Apr '20

openSUSE Recommended Update: Recommended update for libkcddb, libkcddb4 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0489-1 Rating: moderate References: #1167417 Affected Products: openSUSE Leap 15.1 openSUSE Backports SLE-15-SP1 openSUSE Backports SLE-15 SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libkcddb, libkcddb4 fixes the following issues: - switch to use gnudb.org by default, freedb.org will be shutdown at the end of March (boo#1167417, kde#418421) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-489=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-489=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2020-489=1 - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2020-489=1 Package List: - openSUSE Leap 15.1 (noarch): libkcddb-lang-18.12.3-lp151.2.4.1 - openSUSE Leap 15.1 (x86_64): libKF5Cddb5-18.12.3-lp151.2.4.1 libKF5Cddb5-debuginfo-18.12.3-lp151.2.4.1 libKF5CddbWidgets5-18.12.3-lp151.2.4.1 libKF5CddbWidgets5-debuginfo-18.12.3-lp151.2.4.1 libkcddb-18.12.3-lp151.2.4.1 libkcddb-debuginfo-18.12.3-lp151.2.4.1 libkcddb-debugsource-18.12.3-lp151.2.4.1 libkcddb-devel-18.12.3-lp151.2.4.1 libkcddb4-16.08.3-lp151.3.3.1 libkcddb4-debuginfo-16.08.3-lp151.3.3.1 libkcddb4-debugsource-16.08.3-lp151.3.3.1 libkcddb4-devel-16.08.3-lp151.3.3.1 - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): libKF5Cddb5-18.12.3-bp151.3.3.7 libKF5Cddb5-debuginfo-18.12.3-bp151.3.3.7 libKF5CddbWidgets5-18.12.3-bp151.3.3.7 libKF5CddbWidgets5-debuginfo-18.12.3-bp151.3.3.7 libkcddb-18.12.3-bp151.3.3.7 libkcddb-debuginfo-18.12.3-bp151.3.3.7 libkcddb-debugsource-18.12.3-bp151.3.3.7 libkcddb-devel-18.12.3-bp151.3.3.7 libkcddb4-16.08.3-bp151.4.3.7 libkcddb4-debuginfo-16.08.3-bp151.4.3.7 libkcddb4-debugsource-16.08.3-bp151.4.3.7 libkcddb4-devel-16.08.3-bp151.4.3.7 - openSUSE Backports SLE-15-SP1 (noarch): libkcddb-lang-18.12.3-bp151.3.3.7 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): libKF5Cddb5-17.12.3-bp150.3.3.1 libKF5Cddb5-debuginfo-17.12.3-bp150.3.3.1 libKF5CddbWidgets5-17.12.3-bp150.3.3.1 libKF5CddbWidgets5-debuginfo-17.12.3-bp150.3.3.1 libkcddb-17.12.3-bp150.3.3.1 libkcddb-debuginfo-17.12.3-bp150.3.3.1 libkcddb-debugsource-17.12.3-bp150.3.3.1 libkcddb-devel-17.12.3-bp150.3.3.1 libkcddb4-16.08.3-bp150.3.3.1 libkcddb4-debuginfo-16.08.3-bp150.3.3.1 libkcddb4-debugsource-16.08.3-bp150.3.3.1 libkcddb4-devel-16.08.3-bp150.3.3.1 - openSUSE Backports SLE-15 (noarch): libkcddb-lang-17.12.3-bp150.3.3.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): libkcddb4-16.08.2-5.1 libkcddb4-debuginfo-16.08.2-5.1 libkcddb4-debugsource-16.08.2-5.1 libkcddb4-devel-16.08.2-5.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (ppc64le s390x x86_64): libkcddb4-15.12.3-6.1 libkcddb4-debuginfo-15.12.3-6.1 libkcddb4-debugsource-15.12.3-6.1 libkcddb4-devel-15.12.3-6.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): libkcddb-lang-17.04.2-5.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): libKF5Cddb5-17.04.2-5.1 libKF5CddbWidgets5-17.04.2-5.1 libkcddb-17.04.2-5.1 libkcddb-devel-17.04.2-5.1 References: https://bugzilla.suse.com/1167417

1 0

openSUSE-SU-2020:0490-1: moderate: Security update for gnuhealth
by opensuse-security＠opensuse.org 09 Apr '20

09 Apr '20

openSUSE Security Update: Security update for gnuhealth ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0490-1 Rating: moderate References: #1167126 #1167128 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for gnuhealth fixes the following issues: - Fixed a local privilege escalation in gnuhealth-control, use of static tmp file/http transport (bsc#1167126) - Fixed a local DoS of backup functionality in gnuhealth-control due to use of static tmp files (bsc#1167128) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-490=1 Package List: - openSUSE Leap 15.1 (noarch): gnuhealth-3.4.1-lp151.2.11.1 References: https://bugzilla.suse.com/1167126 https://bugzilla.suse.com/1167128

1 0

openSUSE-RU-2020:0489-1: moderate: Recommended update for libkcddb, libkcddb4
by maintenance＠opensuse.org 09 Apr '20

09 Apr '20

openSUSE Recommended Update: Recommended update for libkcddb, libkcddb4 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0489-1 Rating: moderate References: #1167417 Affected Products: openSUSE Leap 15.1 openSUSE Backports SLE-15-SP1 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libkcddb, libkcddb4 fixes the following issues: - switch to use gnudb.org by default, freedb.org will be shutdown at the end of March (boo#1167417, kde#418421) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-489=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-489=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2020-489=1 Package List: - openSUSE Leap 15.1 (noarch): libkcddb-lang-18.12.3-lp151.2.4.1 - openSUSE Leap 15.1 (x86_64): libKF5Cddb5-18.12.3-lp151.2.4.1 libKF5Cddb5-debuginfo-18.12.3-lp151.2.4.1 libKF5CddbWidgets5-18.12.3-lp151.2.4.1 libKF5CddbWidgets5-debuginfo-18.12.3-lp151.2.4.1 libkcddb-18.12.3-lp151.2.4.1 libkcddb-debuginfo-18.12.3-lp151.2.4.1 libkcddb-debugsource-18.12.3-lp151.2.4.1 libkcddb-devel-18.12.3-lp151.2.4.1 libkcddb4-16.08.3-lp151.3.3.1 libkcddb4-debuginfo-16.08.3-lp151.3.3.1 libkcddb4-debugsource-16.08.3-lp151.3.3.1 libkcddb4-devel-16.08.3-lp151.3.3.1 - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): libKF5Cddb5-18.12.3-bp151.3.3.7 libKF5Cddb5-debuginfo-18.12.3-bp151.3.3.7 libKF5CddbWidgets5-18.12.3-bp151.3.3.7 libKF5CddbWidgets5-debuginfo-18.12.3-bp151.3.3.7 libkcddb-18.12.3-bp151.3.3.7 libkcddb-debuginfo-18.12.3-bp151.3.3.7 libkcddb-debugsource-18.12.3-bp151.3.3.7 libkcddb-devel-18.12.3-bp151.3.3.7 libkcddb4-16.08.3-bp151.4.3.7 libkcddb4-debuginfo-16.08.3-bp151.4.3.7 libkcddb4-debugsource-16.08.3-bp151.4.3.7 libkcddb4-devel-16.08.3-bp151.4.3.7 - openSUSE Backports SLE-15-SP1 (noarch): libkcddb-lang-18.12.3-bp151.3.3.7 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): libKF5Cddb5-17.12.3-bp150.3.3.1 libKF5Cddb5-debuginfo-17.12.3-bp150.3.3.1 libKF5CddbWidgets5-17.12.3-bp150.3.3.1 libKF5CddbWidgets5-debuginfo-17.12.3-bp150.3.3.1 libkcddb-17.12.3-bp150.3.3.1 libkcddb-debuginfo-17.12.3-bp150.3.3.1 libkcddb-debugsource-17.12.3-bp150.3.3.1 libkcddb-devel-17.12.3-bp150.3.3.1 libkcddb4-16.08.3-bp150.3.3.1 libkcddb4-debuginfo-16.08.3-bp150.3.3.1 libkcddb4-debugsource-16.08.3-bp150.3.3.1 libkcddb4-devel-16.08.3-bp150.3.3.1 - openSUSE Backports SLE-15 (noarch): libkcddb-lang-17.12.3-bp150.3.3.1 References: https://bugzilla.suse.com/1167417

1 0

openSUSE-SU-2020:0491-1: moderate: Security update for exim
by opensuse-security＠opensuse.org 09 Apr '20

09 Apr '20

openSUSE Security Update: Security update for exim ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0491-1 Rating: moderate References: #1154183 #1160726 Cross-References: CVE-2020-8015 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for exim fixes the following issues: - CVE-2020-8015: Fixed a local privilege escalation from user mail to root (boo#1154183). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-491=1 Package List: - openSUSE Leap 15.1 (x86_64): exim-4.88-lp151.4.12.1 exim-debuginfo-4.88-lp151.4.12.1 exim-debugsource-4.88-lp151.4.12.1 eximon-4.88-lp151.4.12.1 eximon-debuginfo-4.88-lp151.4.12.1 eximstats-html-4.88-lp151.4.12.1 References: https://www.suse.com/security/cve/CVE-2020-8015.html https://bugzilla.suse.com/1154183 https://bugzilla.suse.com/1160726

1 0

openSUSE-RU-2020:0492-1: moderate: Recommended update for libcontainers-common
by maintenance＠opensuse.org 09 Apr '20

09 Apr '20

openSUSE Recommended Update: Recommended update for libcontainers-common ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0492-1 Rating: moderate References: #1165917 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libcontainers-common fixes the following issues: - Add registries warning to registries.conf. (bsc#1165917) - Add `rootless_storage_path` directive to storage.conf. (bsc#1165917) - Clean up various imports primarily so that imports of packages that aren't in the standard library are all in one section. (bsc#1165917) - copy.Image(): select the CopySystemImage image using the source context. (bsc#1165917) - docker: handle http 429 status codes. (bsc#1165917) - allow for .dockercfg files to reside in non-home directories. (bsc#1165917) - Handling of the libpod.conf configuration file has seen major changes. Most significantly, rootless users will no longer automatically receive a complete configuration file when they first use Podman, and will instead only receive differences from the global configuration. (bsc#1165917) - Initial support for the CNI DNS plugin, which allows containers to resolve the IPs of other containers via DNS name, has been added. (bsc#1165917) - Podman now supports anonymous named volumes, created by specifying only a destination to the -v flag to the podman create and podman run commands. (bsc#1165917) - Named volumes now support uid and gid options in --opt o=... to set UID and GID of the created volume. (bsc#1165917) - overlay: allow storing images with more than 127 layers. (bsc#1165917) - Lazy initialize the layer store. (bsc#1165917) - Add a default registries.d configuration file, used to specify images. (bsc#1165917) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-492=1 Package List: - openSUSE Leap 15.1 (noarch): libcontainers-common-20200306-lp151.2.7.1 References: https://bugzilla.suse.com/1165917

1 0