May 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2020:0749-1: Recommended update for python-requests
by maintenance＠opensuse.org 31 May '20

31 May '20

openSUSE Recommended Update: Recommended update for python-requests ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0749-1 Rating: low References: #1170175 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-requests fixes the following issues: - Fix for warnings 'test fails to build' for python http. (bsc#1170175) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-749=1 Package List: - openSUSE Leap 15.1 (noarch): python2-requests-2.20.1-lp151.2.6.1 python2-requests-test-2.20.1-lp151.2.6.1 python3-requests-2.20.1-lp151.2.6.1 python3-requests-test-2.20.1-lp151.2.6.1 References: https://bugzilla.suse.com/1170175

1 0

openSUSE-SU-2020:0746-1: Security update for libmspack
by opensuse-security＠opensuse.org 31 May '20

31 May '20

openSUSE Security Update: Security update for libmspack ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0746-1 Rating: low References: #1130489 #1141680 Cross-References: CVE-2019-1010305 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for libmspack fixes the following issues: Security issue fixed: - CVE-2019-1010305: Fixed a buffer overflow triggered by a crafted chm file which could have led to information disclosure (bsc#1141680). Other issue addressed: - Enable build-time tests (bsc#1130489) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-746=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libmspack-debugsource-0.6-lp151.4.3.1 libmspack-devel-0.6-lp151.4.3.1 libmspack0-0.6-lp151.4.3.1 libmspack0-debuginfo-0.6-lp151.4.3.1 mspack-tools-0.6-lp151.4.3.1 mspack-tools-debuginfo-0.6-lp151.4.3.1 - openSUSE Leap 15.1 (x86_64): libmspack0-32bit-0.6-lp151.4.3.1 libmspack0-32bit-debuginfo-0.6-lp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2019-1010305.html https://bugzilla.suse.com/1130489 https://bugzilla.suse.com/1141680

1 0

openSUSE-RU-2020:0748-1: moderate: Recommended update for dehydrated
by maintenance＠opensuse.org 31 May '20

31 May '20

openSUSE Recommended Update: Recommended update for dehydrated ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0748-1 Rating: moderate References: #1169834 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for dehydrated provides the following fixes: - Fix the lighttpd config file provided with the package. (bsc#1169834) - Provide nginx sub-package for SLE 15+. (jsc#SLE-11727) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-748=1 Package List: - openSUSE Leap 15.1 (noarch): dehydrated-0.6.5-lp151.3.6.1 dehydrated-apache2-0.6.5-lp151.3.6.1 dehydrated-lighttpd-0.6.5-lp151.3.6.1 dehydrated-nginx-0.6.5-lp151.3.6.1 References: https://bugzilla.suse.com/1169834

1 0

openSUSE-RU-2020:0747-1: moderate: Recommended update for python-rpm-macros
by maintenance＠opensuse.org 31 May '20

31 May '20

openSUSE Recommended Update: Recommended update for python-rpm-macros ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0747-1 Rating: moderate References: #1171561 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-rpm-macros fixes the following issue: - Update to version 20200207.5feb6c1 (bsc#1171561) * Do not write .pyc files for tests This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-747=1 Package List: - openSUSE Leap 15.1 (noarch): python-rpm-generators-20200207.5feb6c1-lp151.2.6.1 python-rpm-macros-20200207.5feb6c1-lp151.2.6.1 References: https://bugzilla.suse.com/1171561

1 0

openSUSE-RU-2020:0745-1: moderate: Recommended update for go1.12
by maintenance＠opensuse.org 30 May '20

30 May '20

openSUSE Recommended Update: Recommended update for go1.12 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0745-1 Rating: moderate References: #1170826 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for go1.12 fixes the following issues: - Add 'binutils-gold' as a dependency for arm and aarch64 architectures. (bsc#1170826) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-745=1 Package List: - openSUSE Leap 15.1 (x86_64): go1.11-1.11.13-lp151.2.18.1 go1.11-doc-1.11.13-lp151.2.18.1 go1.11-race-1.11.13-lp151.2.18.1 References: https://bugzilla.suse.com/1170826

1 0

openSUSE-SU-2020:0741-1: moderate: Security update for freetds
by opensuse-security＠opensuse.org 29 May '20

29 May '20

openSUSE Security Update: Security update for freetds ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0741-1 Rating: moderate References: #1141132 Cross-References: CVE-2019-13508 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for freetds to 1.1.36 fixes the following issues: Security issue fixed: - CVE-2019-13508: Fixed a heap overflow that could have been caused by malicious servers sending UDT types over protocol version 5.0 (bsc#1141132). Non-security issues fixed: - Enabled Kerberos support - Version update to 1.1.36: * Default TDS protocol version is now "auto" * Improved UTF-8 performances * TDS Pool Server is enabled * MARS support is enabled * NTLMv2 is enabled * See NEWS and ChangeLog for a complete list of changes This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-741=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): freetds-config-1.1.36-lp151.3.3.1 freetds-debuginfo-1.1.36-lp151.3.3.1 freetds-debugsource-1.1.36-lp151.3.3.1 freetds-devel-1.1.36-lp151.3.3.1 freetds-doc-1.1.36-lp151.3.3.1 freetds-tools-1.1.36-lp151.3.3.1 freetds-tools-debuginfo-1.1.36-lp151.3.3.1 libct4-1.1.36-lp151.3.3.1 libct4-debuginfo-1.1.36-lp151.3.3.1 libsybdb5-1.1.36-lp151.3.3.1 libsybdb5-debuginfo-1.1.36-lp151.3.3.1 libtdsodbc0-1.1.36-lp151.3.3.1 libtdsodbc0-debuginfo-1.1.36-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2019-13508.html https://bugzilla.suse.com/1141132

1 0

openSUSE-RU-2020:0743-1: moderate: Recommended update for tigervnc
by maintenance＠opensuse.org 29 May '20

29 May '20

openSUSE Recommended Update: Recommended update for tigervnc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0743-1 Rating: moderate References: #1171519 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for tigervnc fixes the following issue: - Fixes crash in free() when using "-f" option of vncpasswd command. (bsc#1171519) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-743=1 Package List: - openSUSE Leap 15.1 (noarch): tigervnc-x11vnc-1.9.0-lp151.4.6.1 xorg-x11-Xvnc-java-1.9.0-lp151.4.6.1 xorg-x11-Xvnc-novnc-1.9.0-lp151.4.6.1 - openSUSE Leap 15.1 (x86_64): libXvnc-devel-1.9.0-lp151.4.6.1 libXvnc1-1.9.0-lp151.4.6.1 libXvnc1-debuginfo-1.9.0-lp151.4.6.1 tigervnc-1.9.0-lp151.4.6.1 tigervnc-debuginfo-1.9.0-lp151.4.6.1 tigervnc-debugsource-1.9.0-lp151.4.6.1 xorg-x11-Xvnc-1.9.0-lp151.4.6.1 xorg-x11-Xvnc-debuginfo-1.9.0-lp151.4.6.1 xorg-x11-Xvnc-module-1.9.0-lp151.4.6.1 xorg-x11-Xvnc-module-debuginfo-1.9.0-lp151.4.6.1 References: https://bugzilla.suse.com/1171519

1 0

openSUSE-RU-2020:0742-1: moderate: Recommended update for libguestfs
by maintenance＠opensuse.org 29 May '20

29 May '20

openSUSE Recommended Update: Recommended update for libguestfs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0742-1 Rating: moderate References: #1167131 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libguestfs fixes the following issue: - virt-v2v fails importing Ubuntu 18.04 LTS ova. (bsc#1167131) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-742=1 Package List: - openSUSE Leap 15.1 (x86_64): guestfs-data-1.38.0-lp151.4.9.1 guestfs-tools-1.38.0-lp151.4.9.1 guestfs-tools-debuginfo-1.38.0-lp151.4.9.1 guestfsd-1.38.0-lp151.4.9.1 guestfsd-debuginfo-1.38.0-lp151.4.9.1 libguestfs-debugsource-1.38.0-lp151.4.9.1 libguestfs-devel-1.38.0-lp151.4.9.1 libguestfs-test-1.38.0-lp151.4.9.1 libguestfs0-1.38.0-lp151.4.9.1 libguestfs0-debuginfo-1.38.0-lp151.4.9.1 lua-libguestfs-1.38.0-lp151.4.9.1 lua-libguestfs-debuginfo-1.38.0-lp151.4.9.1 ocaml-libguestfs-1.38.0-lp151.4.9.1 ocaml-libguestfs-debuginfo-1.38.0-lp151.4.9.1 ocaml-libguestfs-devel-1.38.0-lp151.4.9.1 perl-Sys-Guestfs-1.38.0-lp151.4.9.1 perl-Sys-Guestfs-debuginfo-1.38.0-lp151.4.9.1 python2-libguestfs-1.38.0-lp151.4.9.1 python2-libguestfs-debuginfo-1.38.0-lp151.4.9.1 python3-libguestfs-1.38.0-lp151.4.9.1 python3-libguestfs-debuginfo-1.38.0-lp151.4.9.1 rubygem-libguestfs-1.38.0-lp151.4.9.1 rubygem-libguestfs-debuginfo-1.38.0-lp151.4.9.1 virt-v2v-1.38.0-lp151.4.9.1 virt-v2v-debuginfo-1.38.0-lp151.4.9.1 References: https://bugzilla.suse.com/1167131

1 0

openSUSE-SU-2020:0744-1: moderate: Security update for trousers
by opensuse-security＠opensuse.org 29 May '20

29 May '20

openSUSE Security Update: Security update for trousers ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0744-1 Rating: moderate References: #1157651 Cross-References: CVE-2019-18898 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for trousers fixes the following issues: - CVE-2019-18898: Fixed a local symlink attack where a rogue tss user could have gain ownership of arbitrary files in the system during installation/update of the trousers package (bsc#1157651). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-744=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libtspi1-0.3.14-lp151.4.6.1 libtspi1-debuginfo-0.3.14-lp151.4.6.1 trousers-0.3.14-lp151.4.6.1 trousers-debuginfo-0.3.14-lp151.4.6.1 trousers-debugsource-0.3.14-lp151.4.6.1 trousers-devel-0.3.14-lp151.4.6.1 - openSUSE Leap 15.1 (x86_64): libtspi1-32bit-0.3.14-lp151.4.6.1 libtspi1-32bit-debuginfo-0.3.14-lp151.4.6.1 References: https://www.suse.com/security/cve/CVE-2019-18898.html https://bugzilla.suse.com/1157651

1 0

openSUSE-RU-2020:0740-1: moderate: Recommended update for gdb
by maintenance＠opensuse.org 29 May '20

29 May '20

openSUSE Recommended Update: Recommended update for gdb ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0740-1 Rating: moderate References: #1168394 #1169368 #1169495 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for gdb fixes the following issues: - Fix .debug_types problems. (bsc#1168394) This will solve a range loop index in find_method and will fix toplevel types when a program is compiled with -fdebug-types-section - Fix python 3.8 warning. (bsc#1169495) Fix incorrect use of 'is' operator for comparison in python/lib/gdb/command/prompt.py The 'is' operator is not meant to be used for comparisons - Fix build with gcc 10 improving endianess detection. (bsc#1169368) - Fix hang after SIGKILL This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-740=1 Package List: - openSUSE Leap 15.1 (x86_64): gdb-8.3.1-lp151.4.9.1 gdb-debuginfo-8.3.1-lp151.4.9.1 gdb-debugsource-8.3.1-lp151.4.9.1 gdb-testresults-8.3.1-lp151.4.9.1 gdbserver-8.3.1-lp151.4.9.1 gdbserver-debuginfo-8.3.1-lp151.4.9.1 References: https://bugzilla.suse.com/1168394 https://bugzilla.suse.com/1169368 https://bugzilla.suse.com/1169495

1 0