May 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2020:0651-1: moderate: Security update for python-markdown2
by opensuse-security＠opensuse.org 11 May '20

11 May '20

openSUSE Security Update: Security update for python-markdown2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0651-1 Rating: moderate References: #1171379 Cross-References: CVE-2020-11888 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-markdown2 fixes the following issues: - CVE-2020-11888: Fixed unsanitized input for cross-site scripting (boo#1171379) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-651=1 Package List: - openSUSE Leap 15.1 (noarch): python2-markdown2-2.3.7-lp151.2.3.1 python3-markdown2-2.3.7-lp151.2.3.1 References: https://www.suse.com/security/cve/CVE-2020-11888.html https://bugzilla.suse.com/1171379

1 0

openSUSE-RU-2020:0649-1: moderate: Recommended update for paraview
by maintenance＠opensuse.org 11 May '20

11 May '20

openSUSE Recommended Update: Recommended update for paraview ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0649-1 Rating: moderate References: #1171061 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for paraview fixes the following issues: Update to version 5.6.3 (boo#1171061): * Bug-fix release: No changelog available from upstream. Changes from version 5.6.1: * See https://blog.kitware.com/paraview-5-6-1-release-notes/ Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-649=1 Package List: - openSUSE Leap 15.1 (x86_64): paraview-5.6.3-lp151.2.3.1 paraview-debuginfo-5.6.3-lp151.2.3.1 paraview-debugsource-5.6.3-lp151.2.3.1 paraview-devel-5.6.3-lp151.2.3.1 paraview-devel-debuginfo-5.6.3-lp151.2.3.1 References: https://bugzilla.suse.com/1171061

1 0

openSUSE-SU-2020:0648-1: important: Security update for chromium
by opensuse-security＠opensuse.org 11 May '20

11 May '20

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0648-1 Rating: important References: #1171247 Cross-References: CVE-2020-6464 CVE-2020-6831 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for chromium fixes the following issues: Update to 81.0.4044.138 (boo#1171247): - CVE-2020-6831: Stack buffer overflow in SCTP - CVE-2020-6464: Type Confusion in Blink This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-648=1 Package List: - openSUSE Backports SLE-15-SP1 (x86_64): chromedriver-81.0.4044.138-bp151.3.82.2 chromium-81.0.4044.138-bp151.3.82.2 References: https://www.suse.com/security/cve/CVE-2020-6464.html https://www.suse.com/security/cve/CVE-2020-6831.html https://bugzilla.suse.com/1171247

1 0

openSUSE-SU-2020:0620-1: important: Security update for chromium
by opensuse-security＠opensuse.org 11 May '20

11 May '20

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0620-1 Rating: important References: #1171247 Cross-References: CVE-2020-6464 CVE-2020-6831 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for chromium fixes the following issues: Update to 81.0.4044.138 (boo#1171247): - CVE-2020-6831: Stack buffer overflow in SCTP - CVE-2020-6464: Type Confusion in Blink Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-620=1 Package List: - openSUSE Leap 15.1 (x86_64): chromedriver-81.0.4044.138-lp151.2.88.1 chromedriver-debuginfo-81.0.4044.138-lp151.2.88.1 chromium-81.0.4044.138-lp151.2.88.1 chromium-debuginfo-81.0.4044.138-lp151.2.88.1 chromium-debugsource-81.0.4044.138-lp151.2.88.1 References: https://www.suse.com/security/cve/CVE-2020-6464.html https://www.suse.com/security/cve/CVE-2020-6831.html https://bugzilla.suse.com/1171247

1 0

openSUSE-SU-2020:0635-1: important: Security update for opera
by opensuse-security＠opensuse.org 11 May '20

11 May '20

openSUSE Security Update: Security update for opera ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0635-1 Rating: important References: Cross-References: CVE-2020-6457 CVE-2020-6458 CVE-2020-6459 CVE-2020-6460 CVE-2020-6461 CVE-2020-6462 Affected Products: openSUSE Leap 15.1:NonFree ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update for opera fixes the following issues: Opera was updated to version 68.0.3618.63 - CHR-7889 Update chromium on desktop-stable-81-3618 to 81.0.4044.122 - CHR-7896 Update chromium on desktop-stable-81-3618 to 81.0.4044.129 - DNA-85287 Set standard spacing for Yandex prompt - DNA-85416 [Mac] Animation of tab insert is glitchy on slow machines - DNA-85568 Verify API for triggering “unread” mode with Instagram. - DNA-86027 Present Now not working in google meet after canceling it once - DNA-86028 Add a back and forward button in the Instagram panel - DNA-86029 Investigate and implement re-freshing of the instagram panel content - Update chromium to 81.0.4044.122 fixes CVE-2020-6458, CVE-2020-6459, CVE-2020-6460 - Update chromium to 81.0.4044.129 fixes CVE-2020-6461, CVE-2020-6462 Update to version 68.0.3618.56 - DNA-85256 [Win] Cookies section on site pages is white in dark mode - DNA-85474 [Mac] Dragging tabs to the left with hidden sidebar is broken - DNA-85771 DNS-over-HTTPS example in settings is wrong - DNA-85976 Change page display time when navigating from opera:startpage - CHR-7878 Update chromium on desktop-stable-81-3618 to 81.0.4044.113 (CVE-2020-6457) - DNA-78158 PATCH-1272 should be removed - DNA-84721 Weather widget is overlapped when ‘Use bigger tiles’ - DNA-85246 Implement 0-state dialog and onboarding - DNA-85354 O-menu is misplaced when opened with maximized opera - DNA-85405 Add link to Privacy Policy on the 0-state dialog - DNA-85409 Ask for geolocation EULA once - DNA-85426 Crash at opera::DownloadActionButton::Update() - DNA-85454 Add id’s to elements for testing - DNA-85493 Add “Show Weather” toggle to “Start Page” section in Easy Setup - DNA-85501 Set timestamps in geolocation exception record - DNA-85514 Add fallback when geolocation fails - DNA-85713 Report consent for geolocation on start page - DNA-85753 Fetch news configuration from new endpoint - DNA-85798 Incorrect padding in Search in Tabs window - DNA-85801 Disable notification on instagram panel - DNA-85809 Update instagram icon in the Sidebar Setup - DNA-85854 Change Instagram panel size, to fit desktop version - Complete Opera 68.0 changelog at: https://blogs.opera.com/desktop/changelog-for-68/ Update to version 67.0.3575.137 - CHR-7852 Update chromium on desktop-stable-80-3575 to 80.0.3987.163 - DNA-82540 Crash at remote_cocoa::NativeWidgetNSWindowBridge:: SetVisibilityState(remote_cocoa::mojom::WindowVisibilityState) - DNA-84951 New PiP is completely black for some 2 GPU setups - DNA-85284 Chrome “Open link in same tab, pop-up as tab [Free]” extension is no longer working in Opera - DNA-85415 [Mac] Inspect Popup not working - DNA-85530 Create API for displaying and triggering “unread” mode for messengers from in-app - DNA-85537 Let addons.opera.com interact with sidebar messengers Update to version 67.0.3575.115 - CHR-7833 Update chromium on desktop-stable-80-3575 to 80.0.3987.149 - DNA-74423 [Mac] Search/Copy popup stuck on top left of screen - DNA-82975 Crash at blink::DocumentLifecycle::EnsureStateAtMost (blink::DocumentLifecycle::LifecycleState) - DNA-83834 Crash at base::MessagePumpNSApplication:: DoRun (base::MessagePump::Delegate*) - DNA-84632 macOS 10.15.2 fail on creating testlist.json - DNA-84713 Switching through tabs broken when using workspaces Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1:NonFree: zypper in -t patch openSUSE-2020-635=1 Package List: - openSUSE Leap 15.1:NonFree (x86_64): opera-68.0.3618.63-lp151.2.15.1 References: https://www.suse.com/security/cve/CVE-2020-6457.html https://www.suse.com/security/cve/CVE-2020-6458.html https://www.suse.com/security/cve/CVE-2020-6459.html https://www.suse.com/security/cve/CVE-2020-6460.html https://www.suse.com/security/cve/CVE-2020-6461.html https://www.suse.com/security/cve/CVE-2020-6462.html

1 0

openSUSE-SU-2020:0624-1: important: Security update for LibVNCServer
by opensuse-security＠opensuse.org 11 May '20

11 May '20

openSUSE Security Update: Security update for LibVNCServer ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0624-1 Rating: important References: #1155419 #1160471 #1170441 Cross-References: CVE-2019-15681 CVE-2019-15690 CVE-2019-20788 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for LibVNCServer fixes the following issues: - CVE-2019-15690: Fixed a heap buffer overflow (bsc#1160471). - CVE-2019-15681: Fixed a memory leak which could have allowed to a remote attacker to read stack memory (bsc#1155419). - CVE-2019-20788: Fixed a integer overflow and heap-based buffer overflow via a large height or width value (bsc#1170441). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-624=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): LibVNCServer-debugsource-0.9.10-lp151.7.3.1 LibVNCServer-devel-0.9.10-lp151.7.3.1 libvncclient0-0.9.10-lp151.7.3.1 libvncclient0-debuginfo-0.9.10-lp151.7.3.1 libvncserver0-0.9.10-lp151.7.3.1 libvncserver0-debuginfo-0.9.10-lp151.7.3.1 References: https://www.suse.com/security/cve/CVE-2019-15681.html https://www.suse.com/security/cve/CVE-2019-15690.html https://www.suse.com/security/cve/CVE-2019-20788.html https://bugzilla.suse.com/1155419 https://bugzilla.suse.com/1160471 https://bugzilla.suse.com/1170441

1 0

openSUSE-RU-2020:0633-1: moderate: Recommended update for haproxy
by maintenance＠opensuse.org 11 May '20

11 May '20

openSUSE Recommended Update: Recommended update for haproxy ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0633-1 Rating: moderate References: #1169457 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for haproxy fixes the following issues: - Update from version 2.0.10+git0.ac198b92 to version 2.0.14. (bsc#1169457) * BUG/CRITICAL: hpack: never index a header into the headroom after wrapping * BUG/MAJOR: dns: add minimalist error processing on the Rx path * BUG/MAJOR: hashes: fix the signedness of the hash inputs * BUG/MAJOR: http-ana: Always abort the request when a tarpit is triggered * BUG/MAJOR: list: fix invalid element address calculation * BUG/MAJOR: memory: Don't forget to unlock the rwlock if the pool is empty. * BUG/MAJOR: proxy_protocol: Properly validate TLV lengths * BUG/MAJOR: task: add a new TASK_SHARED_WQ flag to fix foreing requeuing * BUG/MEDIUM: 0rtt: Only consider the SSL handshake. * BUG/MEDIUM: cache/filters: Fix loop on HTX blocks caching the response payload * BUG/MEDIUM: checks: Make sure we set the task affinity just before connecting. * BUG/MEDIUM: checks: Only attempt to do handshakes if the connection is ready. * BUG/MEDIUM: cli: _getsocks must send the peers sockets * BUG/MEDIUM: compression/filters: Fix loop on HTX blocks compressing the payload * BUG/MEDIUM: connection: add a mux flag to indicate splice usability * BUG/MEDIUM: connections: Don't forget to unlock when killing a connection. * BUG/MEDIUM: connections: Hold the lock when wanting to kill a connection. * BUG/MEDIUM: debug: make the debug_handler check for the thread in threads_to_dump * BUG/MEDIUM: ebtree: don't set attribute packed without unaligned access support * BUG/MEDIUM: fd/threads: fix a concurrency issue between add and rm on the same fd * BUG/MEDIUM: http-ana: Truncate the response when a redirect rule is applied * BUG/MEDIUM: kqueue: Make sure we report read events even when no data. * BUG/MEDIUM: listener/thread: fix a race when pausing a listener * BUG/MEDIUM: listener/threads: fix a remaining race in the listener's accept() * BUG/MEDIUM: listener: only consider running threads when resuming listeners * BUG/MEDIUM: memory: Add a rwlock before freeing memory. * BUG/MEDIUM: memory_pool: Update the seq number in pool_flush(). * BUG/MEDIUM: mux-h1: Never reuse H1 connection if a shutw is pending * BUG/MEDIUM: mux-h2: don't stop sending when crossing a buffer boundary * BUG/MEDIUM: mux-h2: fix missing test on sending_list in previous patch * BUG/MEDIUM: mux-h2: make sure we don't emit TE headers with anything but "trailers" * BUG/MEDIUM: mux_h1: Don't call h1_send if we subscribed(). * BUG/MEDIUM: muxes: Use the right argument when calling the destroy method. * BUG/MEDIUM: mworker: remain in mworker mode during reload * BUG/MEDIUM: peers: resync ended with RESYNC_PARTIAL in wrong cases. * BUG/MEDIUM: pipe: fix a use-after-free in case of pipe creation error * BUG/MEDIUM: proto_udp/threads: recv() and send() must not be exclusive. * BUG/MEDIUM: random: align the state on 2*64 bits for ARM64 * BUG/MEDIUM: random: implement a thread-safe and process-safe PRNG * BUG/MEDIUM: random: initialize the random pool a bit better * BUG/MEDIUM: session: do not report a failure when rejecting a session * BUG/MEDIUM: shctx: make sure to keep all blocks aligned * BUG/MEDIUM: ssl: Don't forget to free ctx->ssl on failure. * BUG/MEDIUM: ssl: Don't set the max early data we can receive too early. * BUG/MEDIUM: ssl: Revamp the way early data are handled. * BUG/MEDIUM: ssl: fix several bad pointer aliases in a few sample fetch functions * BUG/MEDIUM: stream-int: don't subscribed for recv when we're trying to flush data * BUG/MEDIUM: stream: Be sure to never assign a TCP backend to an HTX stream * BUG/MEDIUM: tasks: Make sure we switch wait queues in task_set_affinity(). * BUG/MEDIUM: wdt: Don't ignore WDTSIG and DEBUGSIG in __signal_process_queue(). * BUG/MINOR: 51d: Fix bug when HTX is enabled * BUG/MINOR: cache: Fix leak of cache name in error path * BUG/MINOR: channel: inject output data at the end of output * BUG/MINOR: checks/threads: use ha_random() and not rand() * BUG/MINOR: checks: refine which errno values are really errors. * BUG/MINOR: cli/mworker: can't start haproxy with 2 programs * BUG/MINOR: connection: fix ip6 dst_port copy in make_proxy_line_v2 * BUG/MINOR: connection: make sure to correctly tag local PROXY connections * BUG/MINOR: connections: Make sure we free the connection on failure. * BUG/MINOR: contrib/prometheus-exporter: Use HTX errors and not legacy ones * BUG/MINOR: contrib/prometheus-exporter: decode parameter and value only * BUG/MINOR: dns: Make dns_query_id_seed unsigned * BUG/MINOR: dns: allow 63 char in hostname * BUG/MINOR: dns: allow srv record weight set to 0 * BUG/MINOR: dns: ignore trailing dot * BUG/MINOR: filters: Count HTTP headers as filtered data but don't forward them * BUG/MINOR: filters: Forward everything if no data filters are called * BUG/MINOR: filters: Use filter offset to decude the amount of forwarded data * BUG/MINOR: h1: Report the right error position when a header value is invalid * BUG/MINOR: haproxy/threads: close a possible race in soft-stop detection * BUG/MINOR: haproxy/threads: try to make all threads leave together * BUG/MINOR: haproxy: always initialize sleeping_thread_mask * BUG/MINOR: http-ana/filters: Wait end of the http_end callback for all filters * BUG/MINOR: http-ana: Matching on monitor-uri should be case-sensitive * BUG/MINOR: http-ana: Reset request analysers on a response side error * BUG/MINOR: http-ana: Reset request analysers on error when waiting for response * BUG/MINOR: http-htx: Don't make http_find_header() fail if the value is empty * BUG/MINOR: http-rules: Fix a typo in the reject action function * BUG/MINOR: http-rules: Preserve FLT_END analyzers on reject action * BUG/MINOR: http-rules: Remove buggy deinit functions for HTTP rules * BUG/MINOR: http: http-request replace-path duplicates the query string * BUG/MINOR: http_act: don't check capture id in backend * BUG/MINOR: http_ana: make sure redirect flags don't have overlapping bits * BUG/MINOR: init: make the automatic maxconn consider the max of soft/hard limits * BUG/MINOR: listener/mq: do not dispatch connections to remote threads when stopping * BUG/MINOR: listener/threads: always use atomic ops to clear the FD events * BUG/MINOR: listener: also clear the error flag on a paused listener * BUG/MINOR: listener: do not immediately resume on transient error * BUG/MINOR: listener: enforce all_threads_mask on bind_thread on init * BUG/MINOR: listener: fix off-by-one in state name check * BUG/MINOR: log: fix minor resource leaks on logformat error path * BUG/MINOR: lua: Ignore the reserve to know if a channel is full or not * BUG/MINOR: mux-h1: Be sure to set CS_FL_WANT_ROOM when EOM can't be added * BUG/MINOR: mux-h1: Don't rely on CO_FL_SOCK_RD_SH to set H1C_F_CS_SHUTDOWN * BUG/MINOR: mux-h1: Fix conditions to know whether or not we may receive data * BUG/MINOR: mux-h2: use a safe list_for_each_entry in h2_send() * BUG/MINOR: mworker: properly pass SIGTTOU/SIGTTIN to workers * BUG/MINOR: namespace: avoid closing fd when socket failed in my_socketat * BUG/MINOR: pattern: Do not pass len = 0 to calloc() * BUG/MINOR: pattern: handle errors from fgets when trying to load patterns * BUG/MINOR: peers: Use after free of "peers" section. * BUG/MINOR: peers: avoid an infinite loop with peers_fe is NULL * BUG/MINOR: peers: init bind_proc to 1 if it wasn't initialized * BUG/MINOR: proxy: Fix input data copy when an error is captured * BUG/MINOR: proxy: make soft_stop() also close FDs in LI_PAUSED state * BUG/MINOR: rules: Increment be_counters if backend is assigned for a silent-drop * BUG/MINOR: rules: Preserve FLT_END analyzers on silent-drop action * BUG/MINOR: sample: Make sure to return stable IDs in the unique-id fetch * BUG/MINOR: sample: always check converters' arguments * BUG/MINOR: sample: fix the closing bracket and LF in the debug converter * BUG/MINOR: sample: fix the json converter's endian-sensitivity * BUG/MINOR: server: make "agent-addr" work on default-server line * BUG/MINOR: ssl: Possible memleak when allowing the 0RTT data buffer. * BUG/MINOR: ssl: certificate choice can be unexpected with openssl >= 1.1.1 * BUG/MINOR: ssl: openssl-compat: Fix getm_ defines * BUG/MINOR: ssl: we may only ignore the first 64 errors * BUG/MINOR: stats: Fix color of draining servers on stats page * BUG/MINOR: stick-table: Use MAX_SESS_STKCTR as the max track ID during parsing * BUG/MINOR: stktable: report the current proxy name in error messages * BUG/MINOR: stream-int: Don't trigger L7 retry if max retries is already reached * BUG/MINOR: stream-int: avoid calling rcv_buf() when splicing is still possible * BUG/MINOR: stream: don't mistake match rules for store-request rules * BUG/MINOR: stream: init variables when the list is empty * BUG/MINOR: tasks: only requeue a task if it was already in the queue * BUG/MINOR: tcp-rules: Fix memory releases on error path during action parsing * BUG/MINOR: tcp: avoid closing fd when socket failed in tcp_bind_listener * BUG/MINOR: tcp: don't try to set defaultmss when value is negative * BUG/MINOR: tcpchecks: fix the connect() flags regarding delayed ack * BUG/MINOR: unix: better catch situations where the unix socket path length is close to the limit * BUG/MINOR: wdt: do not return an error when the watchdog couldn't be enabled * CONTRIB: debug: add missing flags SF_HTX and SF_MUX * CONTRIB: debug: add the possibility to decode the value as certain types only * CONTRIB: debug: also support reading values from stdin * CONTRIB: debug: support reporting multiple values at once * DOC: Clarify behavior of server maxconn in HTTP mode * DOC: Improve documentation of http-re(quest|sponse) replace-(header|value|uri) * DOC: assorted typo fixes in the documentation * DOC: assorted typo fixes in the documentation and Makefile * DOC: clarify matching strings on binary fetches * DOC: clarify the fact that replace-uri works on a full URI * DOC: configuration.txt: fix various typos * DOC: document the listener state transitions * DOC: fix incorrect indentation of http_auth_* * DOC: fix typo about no-tls-tickets * DOC: improve description of no-tls-tickets * DOC: internals: Fix spelling errors in filters.txt * DOC: listeners: add a few missing transitions * DOC: move the "group" keyword at the right place * DOC: proxies: HAProxy only supports 3 connection modes * DOC: proxy_protocol: Reserve TLV type 0x05 as PP2_TYPE_UNIQUE_ID * DOC: remove references to the outdated architecture.txt * DOC: ssl: clarify security implications of TLS tickets * DOC: word converter ignores delimiters at the start or end of input string * MINOR: acl: Warn when an ACL is named 'or' * MINOR: backend: use a single call to ha_random32() for the random LB algo * MINOR: build: add linux-glibc-legacy build TARGET * MINOR: compiler: add new alignment macros * MINOR: compiler: move CPU capabilities definition from config.h and complete them * MINOR: config: disable busy polling on old processes * MINOR: contrib/prometheus-exporter: Add heathcheck status/code in server metrics * MINOR: contrib/prometheus-exporter: Add the last heathcheck duration metric * MINOR: debug: report the task handler's pointer relative to main * MINOR: fd/threads: make _GET_NEXT()/_GET_PREV() use the volatile attribute * MINOR: filters: Forward data only if the last filter forwards something * MINOR: haproxy: export main to ease access from debugger * MINOR: http-htx: Add a function to retrieve the headers size of an HTX message * MINOR: http-rules: Add a flag on redirect rules to know the rule direction * MINOR: http-rules: Handle the rule direction when a redirect is evaluated * MINOR: http: add a new "replace-path" action * MINOR: htx: Add a function to return a block at a specific offset * MINOR: ist: add an iststop() function * MINOR: listener: add so_name sample fetch * MINOR: memory: Change the flush_lock to a spinlock, and don't get it in alloc. * MINOR: memory: Only init the pool spinlock once. * MINOR: proxy/http-ana: Add support of extra attributes for the cookie directive * MINOR: ssl: Remove unused variable "need_out". * MINOR: task: only check TASK_WOKEN_ANY to decide to requeue a task * MINOR: tools: add 64-bit rotate operators * MINOR: wdt: Move the definitions of WDTSIG and DEBUGSIG into types/signal.h. * OPTIM: startup: fast unique_id allocation for acl. * SCRIPTS: announce-release: allow the user to force to overwrite old files * SCRIPTS: announce-release: place the send command in the mail's header * SCRIPTS: announce-release: use mutt -H instead of -i to include the draft * SCRIPTS: make announce-release executable again This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-633=1 Package List: - openSUSE Leap 15.1 (x86_64): haproxy-2.0.14-lp151.2.12.1 haproxy-debuginfo-2.0.14-lp151.2.12.1 haproxy-debugsource-2.0.14-lp151.2.12.1 References: https://bugzilla.suse.com/1169457

1 0

openSUSE-SU-2020:0628-1: important: Security update for sqliteodbc
by opensuse-security＠opensuse.org 11 May '20

11 May '20

openSUSE Security Update: Security update for sqliteodbc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0628-1 Rating: important References: #1171041 Cross-References: CVE-2020-12050 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for sqliteodbc fixes the following issues: Security issue fixed: - CVE-2020-12050: Fixed a privilege escalation vulnerability (boo#1171041). Non-security issues fixed: - Update to version 0.9996 * update to SQLite 3.22.0 * fixes in handling DDL in SQLExecDirect() et.al., thanks Andre Mikulec for testing * cleanup utf8/unicode conversion functions Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-628=1 Package List: - openSUSE Leap 15.1 (x86_64): sqliteodbc-0.9996-lp151.3.3.1 sqliteodbc-debuginfo-0.9996-lp151.3.3.1 sqliteodbc-debugsource-0.9996-lp151.3.3.1 sqliteodbc-doc-0.9996-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2020-12050.html https://bugzilla.suse.com/1171041

1 0

openSUSE-SU-2020:0642-1: moderate: Security update for php7
by opensuse-security＠opensuse.org 11 May '20

11 May '20

openSUSE Security Update: Security update for php7 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0642-1 Rating: moderate References: #1168326 #1168352 Cross-References: CVE-2020-7064 CVE-2020-7066 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for php7 fixes the following issues: - CVE-2020-7064: Fixed a one byte read of uninitialized memory in exif_read_data() (bsc#1168326). - CVE-2020-7066: Fixed URL truncation get_headers() if the URL contains zero (\0) character (bsc#1168352). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-642=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): apache2-mod_php7-7.2.5-lp151.6.25.1 apache2-mod_php7-debuginfo-7.2.5-lp151.6.25.1 libtidy-devel-5.4.0-lp151.3.3.1 libtidy5-5.4.0-lp151.3.3.1 libtidy5-debuginfo-5.4.0-lp151.3.3.1 php7-7.2.5-lp151.6.25.1 php7-bcmath-7.2.5-lp151.6.25.1 php7-bcmath-debuginfo-7.2.5-lp151.6.25.1 php7-bz2-7.2.5-lp151.6.25.1 php7-bz2-debuginfo-7.2.5-lp151.6.25.1 php7-calendar-7.2.5-lp151.6.25.1 php7-calendar-debuginfo-7.2.5-lp151.6.25.1 php7-ctype-7.2.5-lp151.6.25.1 php7-ctype-debuginfo-7.2.5-lp151.6.25.1 php7-curl-7.2.5-lp151.6.25.1 php7-curl-debuginfo-7.2.5-lp151.6.25.1 php7-dba-7.2.5-lp151.6.25.1 php7-dba-debuginfo-7.2.5-lp151.6.25.1 php7-debuginfo-7.2.5-lp151.6.25.1 php7-debugsource-7.2.5-lp151.6.25.1 php7-devel-7.2.5-lp151.6.25.1 php7-dom-7.2.5-lp151.6.25.1 php7-dom-debuginfo-7.2.5-lp151.6.25.1 php7-embed-7.2.5-lp151.6.25.1 php7-embed-debuginfo-7.2.5-lp151.6.25.1 php7-enchant-7.2.5-lp151.6.25.1 php7-enchant-debuginfo-7.2.5-lp151.6.25.1 php7-exif-7.2.5-lp151.6.25.1 php7-exif-debuginfo-7.2.5-lp151.6.25.1 php7-fastcgi-7.2.5-lp151.6.25.1 php7-fastcgi-debuginfo-7.2.5-lp151.6.25.1 php7-fileinfo-7.2.5-lp151.6.25.1 php7-fileinfo-debuginfo-7.2.5-lp151.6.25.1 php7-firebird-7.2.5-lp151.6.25.1 php7-firebird-debuginfo-7.2.5-lp151.6.25.1 php7-fpm-7.2.5-lp151.6.25.1 php7-fpm-debuginfo-7.2.5-lp151.6.25.1 php7-ftp-7.2.5-lp151.6.25.1 php7-ftp-debuginfo-7.2.5-lp151.6.25.1 php7-gd-7.2.5-lp151.6.25.1 php7-gd-debuginfo-7.2.5-lp151.6.25.1 php7-gettext-7.2.5-lp151.6.25.1 php7-gettext-debuginfo-7.2.5-lp151.6.25.1 php7-gmp-7.2.5-lp151.6.25.1 php7-gmp-debuginfo-7.2.5-lp151.6.25.1 php7-iconv-7.2.5-lp151.6.25.1 php7-iconv-debuginfo-7.2.5-lp151.6.25.1 php7-intl-7.2.5-lp151.6.25.1 php7-intl-debuginfo-7.2.5-lp151.6.25.1 php7-json-7.2.5-lp151.6.25.1 php7-json-debuginfo-7.2.5-lp151.6.25.1 php7-ldap-7.2.5-lp151.6.25.1 php7-ldap-debuginfo-7.2.5-lp151.6.25.1 php7-mbstring-7.2.5-lp151.6.25.1 php7-mbstring-debuginfo-7.2.5-lp151.6.25.1 php7-mysql-7.2.5-lp151.6.25.1 php7-mysql-debuginfo-7.2.5-lp151.6.25.1 php7-odbc-7.2.5-lp151.6.25.1 php7-odbc-debuginfo-7.2.5-lp151.6.25.1 php7-opcache-7.2.5-lp151.6.25.1 php7-opcache-debuginfo-7.2.5-lp151.6.25.1 php7-openssl-7.2.5-lp151.6.25.1 php7-openssl-debuginfo-7.2.5-lp151.6.25.1 php7-pcntl-7.2.5-lp151.6.25.1 php7-pcntl-debuginfo-7.2.5-lp151.6.25.1 php7-pdo-7.2.5-lp151.6.25.1 php7-pdo-debuginfo-7.2.5-lp151.6.25.1 php7-pgsql-7.2.5-lp151.6.25.1 php7-pgsql-debuginfo-7.2.5-lp151.6.25.1 php7-phar-7.2.5-lp151.6.25.1 php7-phar-debuginfo-7.2.5-lp151.6.25.1 php7-posix-7.2.5-lp151.6.25.1 php7-posix-debuginfo-7.2.5-lp151.6.25.1 php7-readline-7.2.5-lp151.6.25.1 php7-readline-debuginfo-7.2.5-lp151.6.25.1 php7-shmop-7.2.5-lp151.6.25.1 php7-shmop-debuginfo-7.2.5-lp151.6.25.1 php7-snmp-7.2.5-lp151.6.25.1 php7-snmp-debuginfo-7.2.5-lp151.6.25.1 php7-soap-7.2.5-lp151.6.25.1 php7-soap-debuginfo-7.2.5-lp151.6.25.1 php7-sockets-7.2.5-lp151.6.25.1 php7-sockets-debuginfo-7.2.5-lp151.6.25.1 php7-sodium-7.2.5-lp151.6.25.1 php7-sodium-debuginfo-7.2.5-lp151.6.25.1 php7-sqlite-7.2.5-lp151.6.25.1 php7-sqlite-debuginfo-7.2.5-lp151.6.25.1 php7-sysvmsg-7.2.5-lp151.6.25.1 php7-sysvmsg-debuginfo-7.2.5-lp151.6.25.1 php7-sysvsem-7.2.5-lp151.6.25.1 php7-sysvsem-debuginfo-7.2.5-lp151.6.25.1 php7-sysvshm-7.2.5-lp151.6.25.1 php7-sysvshm-debuginfo-7.2.5-lp151.6.25.1 php7-test-7.2.5-lp151.6.25.1 php7-tidy-7.2.5-lp151.6.25.1 php7-tidy-debuginfo-7.2.5-lp151.6.25.1 php7-tokenizer-7.2.5-lp151.6.25.1 php7-tokenizer-debuginfo-7.2.5-lp151.6.25.1 php7-wddx-7.2.5-lp151.6.25.1 php7-wddx-debuginfo-7.2.5-lp151.6.25.1 php7-xmlreader-7.2.5-lp151.6.25.1 php7-xmlreader-debuginfo-7.2.5-lp151.6.25.1 php7-xmlrpc-7.2.5-lp151.6.25.1 php7-xmlrpc-debuginfo-7.2.5-lp151.6.25.1 php7-xmlwriter-7.2.5-lp151.6.25.1 php7-xmlwriter-debuginfo-7.2.5-lp151.6.25.1 php7-xsl-7.2.5-lp151.6.25.1 php7-xsl-debuginfo-7.2.5-lp151.6.25.1 php7-zip-7.2.5-lp151.6.25.1 php7-zip-debuginfo-7.2.5-lp151.6.25.1 php7-zlib-7.2.5-lp151.6.25.1 php7-zlib-debuginfo-7.2.5-lp151.6.25.1 tidy-5.4.0-lp151.3.3.1 tidy-debuginfo-5.4.0-lp151.3.3.1 tidy-debugsource-5.4.0-lp151.3.3.1 - openSUSE Leap 15.1 (noarch): php7-pear-7.2.5-lp151.6.25.1 php7-pear-Archive_Tar-7.2.5-lp151.6.25.1 tidy-doc-5.4.0-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2020-7064.html https://www.suse.com/security/cve/CVE-2020-7066.html https://bugzilla.suse.com/1168326 https://bugzilla.suse.com/1168352

1 0

openSUSE-RU-2020:0640-1: moderate: Recommended update for chrony
by maintenance＠opensuse.org 11 May '20

11 May '20

openSUSE Recommended Update: Recommended update for chrony ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0640-1 Rating: moderate References: #1099272 #1156884 #1161119 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for chrony fixes the following issues: - Read runtime servers from /var/run/netconfig/chrony.servers (bsc#1099272, bsc#1161119) - Move chrony-helper to /usr/lib/chrony/helper, because there should be no executables in /usr/share. - Add chrony-pool-suse and chrony-pool-openSUSE subpackages that preconfigure chrony to use NTP servers from the respective pools for SUSE and openSUSE. (bsc#1156884, SLE-11424) - Add chrony-pool-empty to still allow installing chrony without preconfigured servers. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-640=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): chrony-3.2-lp151.9.6.1 chrony-debuginfo-3.2-lp151.9.6.1 chrony-debugsource-3.2-lp151.9.6.1 - openSUSE Leap 15.1 (noarch): chrony-pool-empty-3.2-lp151.9.6.1 chrony-pool-openSUSE-3.2-lp151.9.6.1 chrony-pool-suse-3.2-lp151.9.6.1 References: https://bugzilla.suse.com/1099272 https://bugzilla.suse.com/1156884 https://bugzilla.suse.com/1161119

1 0

openSUSE-SU-2020:0643-1: important: Security update for MozillaThunderbird
by opensuse-security＠opensuse.org 11 May '20

11 May '20

openSUSE Security Update: Security update for MozillaThunderbird ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0643-1 Rating: important References: #1171186 Cross-References: CVE-2020-12387 CVE-2020-12392 CVE-2020-12393 CVE-2020-12395 CVE-2020-12397 CVE-2020-6831 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update for MozillaThunderbird fixes the following issues: - Update to 68.8.0 ESR MFSA 2020-18 (bsc#1171186) * CVE-2020-12397 (bmo#1617370) Sender Email Address Spoofing using encoded Unicode characters * CVE-2020-12387 (bmo#1545345) Use-after-free during worker shutdown * CVE-2020-6831 (bmo#1632241) Buffer overflow in SCTP chunk input validation * CVE-2020-12392 (bmo#1614468) Arbitrary local file access with 'Copy as cURL' * CVE-2020-12393 (bmo#1615471) Devtools' 'Copy as cURL' feature did not fully escape website-controlled data, potentially leading to command injection * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704, bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076, bmo#1631508) Memory safety bugs fixed in Thunderbird 68.8.0 This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-643=1 Package List: - openSUSE Leap 15.1 (x86_64): MozillaThunderbird-68.8.0-lp151.2.38.2 MozillaThunderbird-debuginfo-68.8.0-lp151.2.38.2 MozillaThunderbird-debugsource-68.8.0-lp151.2.38.2 MozillaThunderbird-translations-common-68.8.0-lp151.2.38.2 MozillaThunderbird-translations-other-68.8.0-lp151.2.38.2 References: https://www.suse.com/security/cve/CVE-2020-12387.html https://www.suse.com/security/cve/CVE-2020-12392.html https://www.suse.com/security/cve/CVE-2020-12393.html https://www.suse.com/security/cve/CVE-2020-12395.html https://www.suse.com/security/cve/CVE-2020-12397.html https://www.suse.com/security/cve/CVE-2020-6831.html https://bugzilla.suse.com/1171186

1 0

openSUSE-RU-2020:0634-1: moderate: Recommended update for python-paramiko
by maintenance＠opensuse.org 11 May '20

11 May '20

openSUSE Recommended Update: Recommended update for python-paramiko ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0634-1 Rating: moderate References: #1169489 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-paramiko fixes the following issues: - Fixed a problem from the last fix that caused Vorta to fail (bsc#1169489) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-634=1 Package List: - openSUSE Leap 15.1 (noarch): python-paramiko-doc-2.4.2-lp151.2.6.1 python2-paramiko-2.4.2-lp151.2.6.1 python3-paramiko-2.4.2-lp151.2.6.1 References: https://bugzilla.suse.com/1169489

1 0

openSUSE-RU-2020:0632-1: moderate: Recommended update for systemd
by maintenance＠opensuse.org 11 May '20

11 May '20

openSUSE Recommended Update: Recommended update for systemd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0632-1 Rating: moderate References: #1165011 #1168076 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for systemd fixes the following issues: - Fix check for address to keep interface names stable. (bsc#1168076) - Fix for checking non-normalized WHAT for network FS. (bsc#1165011) - Allow to specify an arbitrary string for when vfs is used. (bsc#1165011) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-632=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libsystemd0-234-lp151.26.16.1 libsystemd0-debuginfo-234-lp151.26.16.1 libsystemd0-mini-234-lp151.26.16.1 libsystemd0-mini-debuginfo-234-lp151.26.16.1 libudev-devel-234-lp151.26.16.1 libudev-mini-devel-234-lp151.26.16.1 libudev-mini1-234-lp151.26.16.1 libudev-mini1-debuginfo-234-lp151.26.16.1 libudev1-234-lp151.26.16.1 libudev1-debuginfo-234-lp151.26.16.1 nss-myhostname-234-lp151.26.16.1 nss-myhostname-debuginfo-234-lp151.26.16.1 nss-mymachines-234-lp151.26.16.1 nss-mymachines-debuginfo-234-lp151.26.16.1 nss-systemd-234-lp151.26.16.1 nss-systemd-debuginfo-234-lp151.26.16.1 systemd-234-lp151.26.16.1 systemd-container-234-lp151.26.16.1 systemd-container-debuginfo-234-lp151.26.16.1 systemd-coredump-234-lp151.26.16.1 systemd-coredump-debuginfo-234-lp151.26.16.1 systemd-debuginfo-234-lp151.26.16.1 systemd-debugsource-234-lp151.26.16.1 systemd-devel-234-lp151.26.16.1 systemd-logger-234-lp151.26.16.1 systemd-mini-234-lp151.26.16.1 systemd-mini-container-mini-234-lp151.26.16.1 systemd-mini-container-mini-debuginfo-234-lp151.26.16.1 systemd-mini-coredump-mini-234-lp151.26.16.1 systemd-mini-coredump-mini-debuginfo-234-lp151.26.16.1 systemd-mini-debuginfo-234-lp151.26.16.1 systemd-mini-debugsource-234-lp151.26.16.1 systemd-mini-devel-234-lp151.26.16.1 systemd-mini-sysvinit-234-lp151.26.16.1 systemd-sysvinit-234-lp151.26.16.1 udev-234-lp151.26.16.1 udev-debuginfo-234-lp151.26.16.1 udev-mini-234-lp151.26.16.1 udev-mini-debuginfo-234-lp151.26.16.1 - openSUSE Leap 15.1 (noarch): systemd-bash-completion-234-lp151.26.16.1 systemd-mini-bash-completion-234-lp151.26.16.1 - openSUSE Leap 15.1 (x86_64): libsystemd0-32bit-234-lp151.26.16.1 libsystemd0-32bit-debuginfo-234-lp151.26.16.1 libudev-devel-32bit-234-lp151.26.16.1 libudev1-32bit-234-lp151.26.16.1 libudev1-32bit-debuginfo-234-lp151.26.16.1 nss-myhostname-32bit-234-lp151.26.16.1 nss-myhostname-32bit-debuginfo-234-lp151.26.16.1 nss-mymachines-32bit-234-lp151.26.16.1 nss-mymachines-32bit-debuginfo-234-lp151.26.16.1 systemd-32bit-234-lp151.26.16.1 systemd-32bit-debuginfo-234-lp151.26.16.1 References: https://bugzilla.suse.com/1165011 https://bugzilla.suse.com/1168076

1 0

openSUSE-RU-2020:0638-1: moderate: Recommended update for geocode-glib
by maintenance＠opensuse.org 11 May '20

11 May '20

openSUSE Recommended Update: Recommended update for geocode-glib ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0638-1 Rating: moderate References: #1169163 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for geocode-glib fixes the following issues: - Fix for a possible crash during custom location caused by missing function. (bsc#1169163) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-638=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): geocode-glib-3.25.4.1-lp151.3.3.1 geocode-glib-debugsource-3.25.4.1-lp151.3.3.1 geocode-glib-devel-3.25.4.1-lp151.3.3.1 libgeocode-glib0-3.25.4.1-lp151.3.3.1 libgeocode-glib0-debuginfo-3.25.4.1-lp151.3.3.1 typelib-1_0-GeocodeGlib-1_0-3.25.4.1-lp151.3.3.1 - openSUSE Leap 15.1 (x86_64): libgeocode-glib0-32bit-3.25.4.1-lp151.3.3.1 libgeocode-glib0-32bit-debuginfo-3.25.4.1-lp151.3.3.1 References: https://bugzilla.suse.com/1169163

1 0

openSUSE-SU-2020:0631-1: moderate: Security update for rpmlint
by opensuse-security＠opensuse.org 11 May '20

11 May '20

openSUSE Security Update: Security update for rpmlint ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0631-1 Rating: moderate References: #1129452 #1169365 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for rpmlint fixes the following issues: - whitelist certmonger (bsc#1169365, bsc#1129452) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-631=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): rpmlint-mini-1.10-lp151.5.13.1 rpmlint-mini-debuginfo-1.10-lp151.5.13.1 rpmlint-mini-debugsource-1.10-lp151.5.13.1 - openSUSE Leap 15.1 (noarch): rpmlint-1.10-lp151.9.6.1 - openSUSE Leap 15.1 (x86_64): rpmlint-tests-debugsource-84.87+git20181018.60e0249-lp151.9.6.1 References: https://bugzilla.suse.com/1129452 https://bugzilla.suse.com/1169365

1 0

openSUSE-RU-2020:0641-1: moderate: Recommended update for pciutils-ids
by maintenance＠opensuse.org 11 May '20

11 May '20

openSUSE Recommended Update: Recommended update for pciutils-ids ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0641-1 Rating: moderate References: #1170160 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for pciutils-ids fixes the following issues: - Update the PCI utilities database to 20200324. (bsc#1170160) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-641=1 Package List: - openSUSE Leap 15.1 (noarch): pciutils-ids-20200324-lp151.3.7.1 References: https://bugzilla.suse.com/1170160

1 0

openSUSE-RU-2020:0639-1: moderate: Recommended update for python-azure-mgmt-compute
by maintenance＠opensuse.org 11 May '20

11 May '20

openSUSE Recommended Update: Recommended update for python-azure-mgmt-compute ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0639-1 Rating: moderate References: #1140565 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-azure-mgmt-compute fixes the following issues: New upstream release 4.6.2 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598): + For detailed information about changes see the HISTORY.txt file provided with this package This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-639=1 Package List: - openSUSE Leap 15.1 (noarch): python2-azure-mgmt-compute-4.6.2-lp151.2.7.1 python3-azure-mgmt-compute-4.6.2-lp151.2.7.1 References: https://bugzilla.suse.com/1140565

1 0

openSUSE-RU-2020:0644-1: moderate: Recommended update for mailman
by maintenance＠opensuse.org 11 May '20

11 May '20

openSUSE Recommended Update: Recommended update for mailman ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0644-1 Rating: moderate References: #1167068 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for mailman fixes the following issues: - Fix rights and ownership on /var/lib/mailman/archives (boo#1167068) This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-644=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): mailman-2.1.29-bp151.5.6.1 References: https://bugzilla.suse.com/1167068

1 0

openSUSE-RU-2020:0626-1: moderate: Recommended update for osc
by maintenance＠opensuse.org 11 May '20

11 May '20

openSUSE Recommended Update: Recommended update for osc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0626-1 Rating: moderate References: #1160446 #1166537 #1168862 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for osc fixes the following issues: Update from version 0.167.2 to 0.168.2 (bsc#1168862) - Use helper method _html_escape to enable python3.8 and python2.* compatibility. (bsc#1166537) - Fix support for python3.8 - Spec: temporary disable tests as they explode under python 3.8 - Spec: fix destination of fish completion file to /usr/share/fish/vendor_completions.d - MR creation honors orev now (bsc#1160446) - Allow "osc r --vertical" for projects - Cleanup old functions and remove python2.6 compatibility code - Support zstd arch linux files in local build - Fix deleterequest for repositories - Append --norootforbuild as default to build command - Fix decoding in interactive request mode - Use signdummy for product builds - Print release project when creating MR - Improve SSLError message for TLSv1 validation - osc maintained --version prints the version of each maintained package - Print web url links after creating requests (New general bool option 'print_web_links' must be set in oscrc) - Fix checkout_no_colon on project level - Handle empty release number of rpm packages in build.py - Handle bytes vs. str error when parsing meta - Custom exception if importing m2crypto fails - Fix missing oscerr import in util.helper - Several fixes for keyring handling - Fix arch zst magic in util.packagequery - Ship fish completion file. This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-626=1 Package List: - openSUSE Leap 15.1 (noarch): osc-0.168.2-lp151.2.12.1 References: https://bugzilla.suse.com/1160446 https://bugzilla.suse.com/1166537 https://bugzilla.suse.com/1168862

1 0

openSUSE-SU-2020:0636-1: important: Security update for slirp4netns
by opensuse-security＠opensuse.org 11 May '20

11 May '20

openSUSE Security Update: Security update for slirp4netns ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0636-1 Rating: important References: #1170940 Cross-References: CVE-2020-1983 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for slirp4netns fixes the following issues: Security issue fixed: - CVE-2020-1983: Fixed a use-after-free in ip_reass (bsc#1170940). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-636=1 Package List: - openSUSE Leap 15.1 (x86_64): slirp4netns-0.4.5-lp151.2.9.1 slirp4netns-debuginfo-0.4.5-lp151.2.9.1 slirp4netns-debugsource-0.4.5-lp151.2.9.1 References: https://www.suse.com/security/cve/CVE-2020-1983.html https://bugzilla.suse.com/1170940

1 0

openSUSE-SU-2020:0621-1: important: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 11 May '20

11 May '20

openSUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0621-1 Rating: important References: #1171186 Cross-References: CVE-2020-12387 CVE-2020-12388 CVE-2020-12389 CVE-2020-12392 CVE-2020-12393 CVE-2020-12395 CVE-2020-6831 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: This update for MozillaFirefox fixes the following issues: Update to version 68.8.0 ESR (bsc#1171186): - CVE-2020-12387: Use-after-free during worker shutdown - CVE-2020-12388: Sandbox escape with improperly guarded Access Tokens - CVE-2020-12389: Sandbox escape with improperly separated process types - CVE-2020-6831: Buffer overflow in SCTP chunk input validation - CVE-2020-12392: Arbitrary local file access with 'Copy as cURL' - CVE-2020-12393: Devtools' 'Copy as cURL' feature did not fully escape website-controlled data, potentially leading to command injection - CVE-2020-12395: Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8 This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-621=1 Package List: - openSUSE Leap 15.1 (x86_64): MozillaFirefox-68.8.0-lp151.2.45.1 MozillaFirefox-branding-upstream-68.8.0-lp151.2.45.1 MozillaFirefox-buildsymbols-68.8.0-lp151.2.45.1 MozillaFirefox-debuginfo-68.8.0-lp151.2.45.1 MozillaFirefox-debugsource-68.8.0-lp151.2.45.1 MozillaFirefox-devel-68.8.0-lp151.2.45.1 MozillaFirefox-translations-common-68.8.0-lp151.2.45.1 MozillaFirefox-translations-other-68.8.0-lp151.2.45.1 References: https://www.suse.com/security/cve/CVE-2020-12387.html https://www.suse.com/security/cve/CVE-2020-12388.html https://www.suse.com/security/cve/CVE-2020-12389.html https://www.suse.com/security/cve/CVE-2020-12392.html https://www.suse.com/security/cve/CVE-2020-12393.html https://www.suse.com/security/cve/CVE-2020-12395.html https://www.suse.com/security/cve/CVE-2020-6831.html https://bugzilla.suse.com/1171186

1 0

openSUSE-SU-2020:0622-1: moderate: Security update for ovmf
by opensuse-security＠opensuse.org 11 May '20

11 May '20

openSUSE Security Update: Security update for ovmf ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0622-1 Rating: moderate References: #1163927 Cross-References: CVE-2019-14559 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for ovmf fixes the following issues: - CVE-2019-14559: Fixed a memory leak in ArpOnFrameRcvdDpc() (bsc#1163927). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-622=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): ovmf-2017+git1510945757.b2662641d5-lp151.11.6.1 ovmf-tools-2017+git1510945757.b2662641d5-lp151.11.6.1 - openSUSE Leap 15.1 (noarch): qemu-ovmf-ia32-2017+git1510945757.b2662641d5-lp151.11.6.1 qemu-ovmf-x86_64-2017+git1510945757.b2662641d5-lp151.11.6.1 - openSUSE Leap 15.1 (x86_64): qemu-ovmf-x86_64-debug-2017+git1510945757.b2662641d5-lp151.11.6.1 References: https://www.suse.com/security/cve/CVE-2019-14559.html https://bugzilla.suse.com/1163927

1 0

openSUSE-SU-2020:0627-1: moderate: Security update for rubygem-actionview-5_1
by opensuse-security＠opensuse.org 11 May '20

11 May '20

openSUSE Security Update: Security update for rubygem-actionview-5_1 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0627-1 Rating: moderate References: #1167240 Cross-References: CVE-2020-5267 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for rubygem-actionview-5_1 fixes the following issues: - CVE-2020-5267: Fixed an XSS vulnerability in ActionView's JavaScript literal escape helpers (bsc#1167240). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-627=1 Package List: - openSUSE Leap 15.1 (x86_64): ruby2.5-rubygem-actionview-5_1-5.1.4-lp151.3.3.1 ruby2.5-rubygem-actionview-doc-5_1-5.1.4-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2020-5267.html https://bugzilla.suse.com/1167240

1 0

openSUSE-RU-2020:0645-1: moderate: Recommended update for libgcrypt
by maintenance＠opensuse.org 11 May '20

11 May '20

openSUSE Recommended Update: Recommended update for libgcrypt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0645-1 Rating: moderate References: #1169944 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libgcrypt fixes the following issues: - FIPS: libgcrypt: Fixed a double free in test_keys() on failed signature verification (bsc#1169944) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-645=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libgcrypt-cavs-1.8.2-lp151.9.22.1 libgcrypt-cavs-debuginfo-1.8.2-lp151.9.22.1 libgcrypt-debugsource-1.8.2-lp151.9.22.1 libgcrypt-devel-1.8.2-lp151.9.22.1 libgcrypt-devel-debuginfo-1.8.2-lp151.9.22.1 libgcrypt20-1.8.2-lp151.9.22.1 libgcrypt20-debuginfo-1.8.2-lp151.9.22.1 libgcrypt20-hmac-1.8.2-lp151.9.22.1 - openSUSE Leap 15.1 (x86_64): libgcrypt-devel-32bit-1.8.2-lp151.9.22.1 libgcrypt-devel-32bit-debuginfo-1.8.2-lp151.9.22.1 libgcrypt20-32bit-1.8.2-lp151.9.22.1 libgcrypt20-32bit-debuginfo-1.8.2-lp151.9.22.1 libgcrypt20-hmac-32bit-1.8.2-lp151.9.22.1 References: https://bugzilla.suse.com/1169944

1 0

openSUSE-SU-2020:0623-1: important: Security update for squid
by opensuse-security＠opensuse.org 11 May '20

11 May '20

openSUSE Security Update: Security update for squid ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0623-1 Rating: important References: #1162689 #1162691 #1167373 #1169659 #1170313 Cross-References: CVE-2019-12519 CVE-2019-12521 CVE-2019-12528 CVE-2019-18860 CVE-2020-11945 CVE-2020-8517 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update for squid to version 4.11 fixes the following issues: - CVE-2020-11945: Fixed a potential remote code execution vulnerability when using HTTP Digest Authentication (bsc#1170313). - CVE-2019-12519, CVE-2019-12521: Fixed incorrect buffer handling that can result in cache poisoning, remote execution, and denial of service attacks when processing ESI responses (bsc#1169659). - CVE-2020-8517: Fixed a possible denial of service caused by incorrect buffer management ext_lm_group_acl when processing NTLM Authentication credentials (bsc#1162691). - CVE-2019-12528: Fixed possible information disclosure when translating FTP server listings into HTTP responses (bsc#1162689). - CVE-2019-18860: Fixed handling of invalid domain names in cachemgr.cgi (bsc#1167373). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-623=1 Package List: - openSUSE Leap 15.1 (x86_64): squid-4.11-lp151.2.15.2 squid-debuginfo-4.11-lp151.2.15.2 squid-debugsource-4.11-lp151.2.15.2 References: https://www.suse.com/security/cve/CVE-2019-12519.html https://www.suse.com/security/cve/CVE-2019-12521.html https://www.suse.com/security/cve/CVE-2019-12528.html https://www.suse.com/security/cve/CVE-2019-18860.html https://www.suse.com/security/cve/CVE-2020-11945.html https://www.suse.com/security/cve/CVE-2020-8517.html https://bugzilla.suse.com/1162689 https://bugzilla.suse.com/1162691 https://bugzilla.suse.com/1167373 https://bugzilla.suse.com/1169659 https://bugzilla.suse.com/1170313

1 0

openSUSE-RU-2020:0629-1: moderate: Recommended update for rmt-server
by maintenance＠opensuse.org 11 May '20

11 May '20

openSUSE Recommended Update: Recommended update for rmt-server ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0629-1 Rating: moderate References: #1162296 #1168554 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for rmt-server to version 2.5.6 fixes the following issues: - Align supported subscription types with SCC (bsc#1168554). - Fix migrations in case adding migration_extra column failed (bsc#1162296). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-629=1 Package List: - openSUSE Leap 15.1 (x86_64): rmt-server-2.5.6-lp151.2.12.1 rmt-server-config-2.5.6-lp151.2.12.1 rmt-server-debuginfo-2.5.6-lp151.2.12.1 rmt-server-debugsource-2.5.6-lp151.2.12.1 rmt-server-pubcloud-2.5.6-lp151.2.12.1 References: https://bugzilla.suse.com/1162296 https://bugzilla.suse.com/1168554

1 0

openSUSE-RU-2020:0637-1: moderate: Recommended update for cluster-glue
by maintenance＠opensuse.org 11 May '20

11 May '20

openSUSE Recommended Update: Recommended update for cluster-glue ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0637-1 Rating: moderate References: #1131545 #1169784 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for cluster-glue fixes the following issues: - Fix for profile parameter handling EC2 stonith plugin to avoid possible cluster resource failures. (bsc#1169784) - Fix for handling in 'stonith' command by creating '/var/run/heartbeat/rsctmp' directory. (bsc#1131545) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-637=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): cluster-glue-1.0.12+v1.git.1587474580.a5fda2bc-lp151.2.6.1 cluster-glue-debuginfo-1.0.12+v1.git.1587474580.a5fda2bc-lp151.2.6.1 cluster-glue-debugsource-1.0.12+v1.git.1587474580.a5fda2bc-lp151.2.6.1 libglue-devel-1.0.12+v1.git.1587474580.a5fda2bc-lp151.2.6.1 libglue-devel-debuginfo-1.0.12+v1.git.1587474580.a5fda2bc-lp151.2.6.1 libglue2-1.0.12+v1.git.1587474580.a5fda2bc-lp151.2.6.1 libglue2-debuginfo-1.0.12+v1.git.1587474580.a5fda2bc-lp151.2.6.1 - openSUSE Leap 15.1 (x86_64): libglue-devel-32bit-1.0.12+v1.git.1587474580.a5fda2bc-lp151.2.6.1 libglue-devel-32bit-debuginfo-1.0.12+v1.git.1587474580.a5fda2bc-lp151.2.6.1 libglue2-32bit-1.0.12+v1.git.1587474580.a5fda2bc-lp151.2.6.1 libglue2-32bit-debuginfo-1.0.12+v1.git.1587474580.a5fda2bc-lp151.2.6.1 References: https://bugzilla.suse.com/1131545 https://bugzilla.suse.com/1169784

1 0

openSUSE-RU-2020:0625-1: moderate: Recommended update for aws-cli, python-boto, python-boto3, python-botocore, python-s3transfer
by maintenance＠opensuse.org 11 May '20

11 May '20

openSUSE Recommended Update: Recommended update for aws-cli, python-boto, python-boto3, python-botocore, python-s3transfer ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0625-1 Rating: moderate References: #1116204 #1117074 #1122668 #1129696 #1166924 #1168943 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 6 recommended fixes can now be installed. Description: This update for aws-cli, python-boto, python-boto3, python-botocore, python-s3transfer fixes the following issues: aws-cli was updated to version 1.18.38 (bsc#1166924, bsc#1168943): + For detailed changes see https://github.com/aws/aws-cli/blob/1.18.38/CHANGELOG.rst + Forward port hide_py_pckgmgmt.patch + Update Requires in spec file from setup.py Update to version 1.18.35 + For detailed changes see https://github.com/aws/aws-cli/blob/1.18.35/CHANGELOG.rst + Forward port hide_py_pckgmgmt.patch + Update Requires in spec file from setup.py Update to version 1.18.27 + For detailed changes see https://github.com/aws/aws-cli/blob/1.18.27/CHANGELOG.rst + Forward port hide_py_pckgmgmt.patch + Update Requires in spec file from setup.py Update to version 1.18.0 + For detailed changes see https://github.com/aws/aws-cli/blob/1.18.0/CHANGELOG.rst + Forward port hide_py_pckgmgmt.patch + Install aws bash completetion script into system path + Install aws zsh completion script into /etc/zsh_completion.d + Update Requires in spec file from setup.py - make it possible to find the package under the name "awscli" - Add bash command completion capability (bsc#1117074) Update to version 1.17.9 + For detailed changes see https://github.com/aws/aws-cli/blob/1.17.9/CHANGELOG.rst + Forward port hide_py_pckgmgmt.patch + Update Requires in spec file from setup.py Update to version 1.16.297 + For detailed changes see https://github.com/aws/aws-cli/blob/1.16.297/CHANGELOG.rst + Forward port hide_py_pckgmgmt.patch + Update Requires in spec file from setup.py Update to version 1.16.281 + For detailed changes see https://github.com/aws/aws-cli/blob/1.16.281/CHANGELOG.rst + Forward port hide_py_pckgmgmt.patch + Update Requires in spec file from setup.py Update to version 1.16.258 + For detailed changes see https://github.com/aws/aws-cli/blob/1.16.258/CHANGELOG.rst python-boto3 was updated to 1.12.38 (bsc#1166924, bsc#1168943) * api-change:``apigateway``: [``botocore``] Update apigateway client to latest version * api-change:``codeguru-reviewer``: [``botocore``] Update codeguru-reviewer client to latest version * api-change:``mediaconnect``: [``botocore``] Update mediaconnect client to latest version - from version 1.12.37 * api-change:``transcribe``: [``botocore``] Update transcribe client to latest version * api-change:``chime``: [``botocore``] Update chime client to latest version * api-change:``iam``: [``botocore``] Update iam client to latest version * api-change:``elasticbeanstalk``: [``botocore``] Update elasticbeanstalk client to latest version - from version 1.12.36 * api-change:``personalize-runtime``: [``botocore``] Update personalize-runtime client to latest version * api-change:``robomaker``: [``botocore``] Update robomaker client to latest version - Version update 1.12.35 * api-change:``medialive``: [``botocore``] Update medialive client to latest version * api-change:``redshift``: [``botocore``] Update redshift client to latest version * api-change:``gamelift``: [``botocore``] Update gamelift client to latest version * api-change:``cloudwatch``: [``botocore``] Update cloudwatch client to latest version * api-change:``rds``: [``botocore``] Update rds client to latest version - from version 1.12.34 * api-change:``iot``: [``botocore``] Update iot client to latest version * api-change:``mediaconnect``: [``botocore``] Update mediaconnect client to latest version - from version 1.12.33 * api-change:``opsworkscm``: [``botocore``] Update opsworkscm client to latest version * api-change:``wafv2``: [``botocore``] Update wafv2 client to latest version * api-change:``glue``: [``botocore``] Update glue client to latest version * api-change:``elastic-inference``: [``botocore``] Update elastic-inference client to latest version * api-change:``lambda``: [``botocore``] Update lambda client to latest version * api-change:``mediastore``: [``botocore``] Update mediastore client to latest version * api-change:``pinpoint``: [``botocore``] Update pinpoint client to latest version * api-change:``storagegateway``: [``botocore``] Update storagegateway client to latest version * api-change:``rekognition``: [``botocore``] Update rekognition client to latest version * api-change:``fms``: [``botocore``] Update fms client to latest version * api-change:``organizations``: [``botocore``] Update organizations client to latest version * api-change:``detective``: [``botocore``] Update detective client to latest version * api-change:``appconfig``: [``botocore``] Update appconfig client to latest version - from version 1.12.32 * api-change:``accessanalyzer``: [``botocore``] Update accessanalyzer client to latest version - from version 1.12.31 * api-change:``globalaccelerator``: [``botocore``] Update globalaccelerator client to latest version * api-change:``kendra``: [``botocore``] Update kendra client to latest version * api-change:``servicecatalog``: [``botocore``] Update servicecatalog client to latest version - from version 1.12.30 * api-change:``sagemaker``: [``botocore``] Update sagemaker client to latest version * api-change:``fsx``: [``botocore``] Update fsx client to latest version * api-change:``securityhub``: [``botocore``] Update securityhub client to latest version - from version 1.12.29 * api-change:``managedblockchain``: [``botocore``] Update managedblockchain client to latest version * api-change:``ce``: [``botocore``] Update ce client to latest version * api-change:``application-insights``: [``botocore``] Update application-insights client to latest version * api-change:``detective``: [``botocore``] Update detective client to latest version * api-change:``es``: [``botocore``] Update es client to latest version * api-change:``xray``: [``botocore``] Update xray client to latest version - from version 1.12.28 * api-change:``athena``: [``botocore``] Update athena client to latest version * api-change:``rds-data``: [``botocore``] Update rds-data client to latest version * api-change:``eks``: [``botocore``] Update eks client to latest version * api-change:``organizations``: [``botocore``] Update organizations client to latest version - Update BuildRequires and Requires from setup.py - Version update to 1.12.27 * api-change:``apigatewayv2``: [``botocore``] Update apigatewayv2 client to latest version * api-change:``eks``: [``botocore``] Update eks client to latest version * api-change:``route53``: [``botocore``] Update route53 client to latest version - from version 1.12.26 * api-change:``servicecatalog``: [``botocore``] Update servicecatalog client to latest version - from version 1.12.25 * api-change:``outposts``: [``botocore``] Update outposts client to latest version * api-change:``acm``: [``botocore``] Update acm client to latest version - from version 1.12.24 * api-change:``rds``: [``botocore``] Update rds client to latest version * api-change:``mediaconnect``: [``botocore``] Update mediaconnect client to latest version * api-change:``personalize``: [``botocore``] Update personalize client to latest version - from version 1.12.23 * api-change:``mediaconvert``: [``botocore``] Update mediaconvert client to latest version - from version 1.12.22 * api-change:``s3control``: [``botocore``] Update s3control client to latest version * bugfix:Stubber: [``botocore``] fixes `#1884 <https://github.com/boto/botocore/issues/1884>`__ * api-change:``cognito-idp``: [``botocore``] Update cognito-idp client to latest version * api-change:``ssm``: [``botocore``] Update ssm client to latest version * api-change:``ecs``: [``botocore``] Update ecs client to latest version * api-change:``elasticache``: [``botocore``] Update elasticache client to latest version - from version 1.12.21 * api-change:``appconfig``: [``botocore``] Update appconfig client to latest version - from version 1.12.20 * api-change:``lex-models``: [``botocore``] Update lex-models client to latest version * api-change:``securityhub``: [``botocore``] Update securityhub client to latest version * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``apigatewayv2``: [``botocore``] Update apigatewayv2 client to latest version * api-change:``iot``: [``botocore``] Update iot client to latest version - from version 1.12.19 * api-change:``efs``: [``botocore``] Update efs client to latest version * api-change:``redshift``: [``botocore``] Update redshift client to latest version - from version 1.12.18 * api-change:``serverlessrepo``: [``botocore``] Update serverlessrepo client to latest version * api-change:``iotevents``: [``botocore``] Update iotevents client to latest version * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * enhancement:timezones: [``botocore``] Improved timezone parsing for Windows with new fallback method (#1939) * api-change:``marketplacecommerceanalytics``: [``botocore``] Update marketplacecommerceanalytics client to latest version - from version 1.12.17 * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``medialive``: [``botocore``] Update medialive client to latest version * api-change:``dms``: [``botocore``] Update dms client to latest version - from version 1.12.16 * api-change:``signer``: [``botocore``] Update signer client to latest version * api-change:``guardduty``: [``botocore``] Update guardduty client to latest version * api-change:``appmesh``: [``botocore``] Update appmesh client to latest version * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``robomaker``: [``botocore``] Update robomaker client to latest version - from version 1.12.15 * api-change:``eks``: [``botocore``] Update eks client to latest version * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``opsworkscm``: [``botocore``] Update opsworkscm client to latest version * api-change:``guardduty``: [``botocore``] Update guardduty client to latest version - from version 1.12.14 * api-change:``pinpoint``: [``botocore``] Update pinpoint client to latest version - from version 1.12.13 * api-change:``ec2``: [``botocore``] Update ec2 client to latest version - from version 1.12.12 * api-change:``cloudwatch``: [``botocore``] Update cloudwatch client to latest version * api-change:``comprehendmedical``: [``botocore``] Update comprehendmedical client to latest version - from version 1.12.11 * api-change:``config``: [``botocore``] Update config client to latest version - from version 1.12.10 * api-change:``config``: [``botocore``] Update config client to latest version * api-change:``glue``: [``botocore``] Update glue client to latest version * api-change:``sagemaker-a2i-runtime``: [``botocore``] Update sagemaker-a2i-runtime client to latest version * api-change:``appmesh``: [``botocore``] Update appmesh client to latest version * api-change:``elbv2``: [``botocore``] Update elbv2 client to latest version * api-change:``workdocs``: [``botocore``] Update workdocs client to latest version * api-change:``quicksight``: [``botocore``] Update quicksight client to latest version * api-change:``accessanalyzer``: [``botocore``] Update accessanalyzer client to latest version * api-change:``codeguruprofiler``: [``botocore``] Update codeguruprofiler client to latest version - from version 1.12.9 * api-change:``lightsail``: [``botocore``] Update lightsail client to latest version * api-change:``globalaccelerator``: [``botocore``] Update globalaccelerator client to latest version - from version 1.12.8 * api-change:``transcribe``: [``botocore``] Update transcribe client to latest version * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``sagemaker``: [``botocore``] Update sagemaker client to latest version * api-change:``securityhub``: [``botocore``] Update securityhub client to latest version - from version 1.12.7 * api-change:``stepfunctions``: [``botocore``] Update stepfunctions client to latest version * api-change:``kafka``: [``botocore``] Update kafka client to latest version * api-change:``secretsmanager``: [``botocore``] Update secretsmanager client to latest version * api-change:``outposts``: [``botocore``] Update outposts client to latest version - from version 1.12.6 * api-change:``iotevents``: [``botocore``] Update iotevents client to latest version * api-change:``docdb``: [``botocore``] Update docdb client to latest version * api-change:``snowball``: [``botocore``] Update snowball client to latest version * api-change:``fsx``: [``botocore``] Update fsx client to latest version * api-change:``events``: [``botocore``] Update events client to latest version - from version 1.12.5 * api-change:``imagebuilder``: [``botocore``] Update imagebuilder client to latest version * api-change:``wafv2``: [``botocore``] Update wafv2 client to latest version * api-change:``redshift``: [``botocore``] Update redshift client to latest version - from version 1.12.4 * api-change:``savingsplans``: [``botocore``] Update savingsplans client to latest version * api-change:``appconfig``: [``botocore``] Update appconfig client to latest version * api-change:``pinpoint``: [``botocore``] Update pinpoint client to latest version - from version 1.12.3 * api-change:``autoscaling``: [``botocore``] Update autoscaling client to latest version * api-change:``servicecatalog``: [``botocore``] Update servicecatalog client to latest version * api-change:``lambda``: [``botocore``] Update lambda client to latest version - from version 1.12.2 * api-change:``autoscaling``: [``botocore``] Update autoscaling client to latest version * api-change:``chime``: [``botocore``] Update chime client to latest version * api-change:``rds``: [``botocore``] Update rds client to latest version - from version 1.12.1 * api-change:``cloud9``: [``botocore``] Update cloud9 client to latest version * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``dynamodb``: [``botocore``] Update dynamodb client to latest version * api-change:``rekognition``: [``botocore``] Update rekognition client to latest version - Version update to 1.12.0 * feature:retries: [``botocore``] Add support for retry modes, including ``standard`` and ``adaptive`` modes (`#1972 <https://github.com/boto/botocore/issues/1972>`__) * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``mediatailor``: [``botocore``] Update mediatailor client to latest version * api-change:``securityhub``: [``botocore``] Update securityhub client to latest version * api-change:``shield``: [``botocore``] Update shield client to latest version - from version 1.11.17 * api-change:``mediapackage-vod``: [``botocore``] Update mediapackage-vod client to latest version - from version 1.11.16 * api-change:``glue``: [``botocore``] Update glue client to latest version * api-change:``chime``: [``botocore``] Update chime client to latest version * api-change:``workmail``: [``botocore``] Update workmail client to latest version * api-change:``ds``: [``botocore``] Update ds client to latest version * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``es``: [``botocore``] Update es client to latest version * api-change:``neptune``: [``botocore``] Update neptune client to latest version - from version 1.11.15 * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``cognito-idp``: [``botocore``] Update cognito-idp client to latest version * api-change:``cloudformation``: [``botocore``] Update cloudformation client to latest version - from version 1.11.14 * api-change:``docdb``: [``botocore``] Update docdb client to latest version * api-change:``kms``: [``botocore``] Update kms client to latest version - from version 1.11.13 * api-change:``robomaker``: [``botocore``] Update robomaker client to latest version * api-change:``imagebuilder``: [``botocore``] Update imagebuilder client to latest version * api-change:``rds``: [``botocore``] Update rds client to latest version - from version 1.11.12 * api-change:``ebs``: [``botocore``] Update ebs client to latest version * api-change:``appsync``: [``botocore``] Update appsync client to latest version * api-change:``lex-models``: [``botocore``] Update lex-models client to latest version * api-change:``ecr``: [``botocore``] Update ecr client to latest version * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``codebuild``: [``botocore``] Update codebuild client to latest version - from version 1.11.11 * api-change:``groundstation``: [``botocore``] Update groundstation client to latest version * api-change:``mediaconvert``: [``botocore``] Update mediaconvert client to latest version * api-change:``dlm``: [``botocore``] Update dlm client to latest version * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``forecastquery``: [``botocore``] Update forecastquery client to latest version * api-change:``securityhub``: [``botocore``] Update securityhub client to latest version * api-change:``resourcegroupstaggingapi``: [``botocore``] Update resourcegroupstaggingapi client to latest version - from version 1.11.10 * api-change:``workmail``: [``botocore``] Update workmail client to latest version * api-change:``iot``: [``botocore``] Update iot client to latest version * api-change:``cloudfront``: [``botocore``] Update cloudfront client to latest version * api-change:``storagegateway``: [``botocore``] Update storagegateway client to latest version * api-change:``ssm``: [``botocore``] Update ssm client to latest version * api-change:``kafka``: [``botocore``] Update kafka client to latest version * api-change:``ec2``: [``botocore``] Update ec2 client to latest version - Version update to 1.11.9 * api-change:``ecs``: [``botocore``] Update ecs client to latest version * api-change:``opsworkscm``: [``botocore``] Update opsworkscm client to latest version * api-change:``workspaces``: [``botocore``] Update workspaces client to latest version * api-change:``datasync``: [``botocore``] Update datasync client to latest version * api-change:``eks``: [``botocore``] Update eks client to latest version - from version 1.11.8 * api-change:``rds``: [``botocore``] Update rds client to latest version * api-change:``iam``: [``botocore``] Update iam client to latest version - from version 1.11.7 * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``codepipeline``: [``botocore``] Update codepipeline client to latest version * api-change:``discovery``: [``botocore``] Update discovery client to latest version * api-change:``iotevents``: [``botocore``] Update iotevents client to latest version * api-change:``marketplacecommerceanalytics``: [``botocore``] Update marketplacecommerceanalytics client to latest version - from version 1.11.6 * api-change:``lambda``: [``botocore``] Update lambda client to latest version * api-change:``application-insights``: [``botocore``] Update application-insights client to latest version * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``cloudwatch``: [``botocore``] Update cloudwatch client to latest version * api-change:``kms``: [``botocore``] Update kms client to latest version * api-change:``alexaforbusiness``: [``botocore``] Update alexaforbusiness client to latest version - from version 1.11.5 * api-change:``mediaconvert``: [``botocore``] Update mediaconvert client to latest version * api-change:``neptune``: [``botocore``] Update neptune client to latest version * api-change:``cloudhsmv2``: [``botocore``] Update cloudhsmv2 client to latest version * api-change:``redshift``: [``botocore``] Update redshift client to latest version * api-change:``batch``: [``botocore``] Update batch client to latest version * api-change:``ecs``: [``botocore``] Update ecs client to latest version - from version 1.11.4 * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``sagemaker``: [``botocore``] Update sagemaker client to latest version * api-change:``ds``: [``botocore``] Update ds client to latest version - from version 1.11.3 * api-change:``securityhub``: [``botocore``] Update securityhub client to latest version * api-change:``ssm``: [``botocore``] Update ssm client to latest version * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``organizations``: [``botocore``] Update organizations client to latest version - from version 1.11.2 * api-change:``ec2``: [``botocore``] Update ec2 client to latest version - from version 1.11.1 * api-change:``efs``: [``botocore``] Update efs client to latest version * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``backup``: [``botocore``] Update backup client to latest version - from version 1.11.0 * api-change:``sagemaker``: [``botocore``] Update sagemaker client to latest version * feature:Python: Dropped support for Python 2.6 and 3.3. * api-change:``chime``: [``botocore``] Update chime client to latest version * api-change:``transfer``: [``botocore``] Update transfer client to latest version * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * feature:Python: [``botocore``] Dropped support for Python 2.6 and 3.3. * api-change:``workspaces``: [``botocore``] Update workspaces client to latest version * api-change:``rds``: [``botocore``] Update rds client to latest version - from version 1.10.50 * api-change:``logs``: [``botocore``] Update logs client to latest version - from version 1.10.49 * api-change:``fms``: [``botocore``] Update fms client to latest version * api-change:``translate``: [``botocore``] Update translate client to latest version * api-change:``ce``: [``botocore``] Update ce client to latest version - from version 1.10.48 * api-change:``codebuild``: [``botocore``] Update codebuild client to latest version * api-change:``mgh``: [``botocore``] Update mgh client to latest version * api-change:``xray``: [``botocore``] Update xray client to latest version - from version 1.10.47 * api-change:``comprehend``: [``botocore``] Update comprehend client to latest version * api-change:``mediapackage``: [``botocore``] Update mediapackage client to latest version * api-change:``ec2``: [``botocore``] Update ec2 client to latest version - from version 1.10.46 * api-change:``lex-models``: [``botocore``] Update lex-models client to latest version * api-change:``ecr``: [``botocore``] Update ecr client to latest version * api-change:``lightsail``: [``botocore``] Update lightsail client to latest version * api-change:``ce``: [``botocore``] Update ce client to latest version - from version 1.10.45 * api-change:``fsx``: [``botocore``] Update fsx client to latest version * api-change:``health``: [``botocore``] Update health client to latest version * api-change:``detective``: [``botocore``] Update detective client to latest version - from version 1.10.44 * api-change:``transcribe``: [``botocore``] Update transcribe client to latest version * api-change:``eks``: [``botocore``] Update eks client to latest version * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``rds``: [``botocore``] Update rds client to latest version * api-change:``ssm``: [``botocore``] Update ssm client to latest version * api-change:``redshift``: [``botocore``] Update redshift client to latest version * api-change:``pinpoint``: [``botocore``] Update pinpoint client to latest version * api-change:``securityhub``: [``botocore``] Update securityhub client to latest version * api-change:``devicefarm``: [``botocore``] Update devicefarm client to latest version - from version 1.10.43 * api-change:``transcribe``: [``botocore``] Update transcribe client to latest version * api-change:``dlm``: [``botocore``] Update dlm client to latest version * api-change:``lex-models``: [``botocore``] Update lex-models client to latest version * api-change:``personalize-runtime``: [``botocore``] Update personalize-runtime client to latest version * api-change:``ssm``: [``botocore``] Update ssm client to latest version * api-change:``codestar-connections``: [``botocore``] Update codestar-connections client to latest version * api-change:``gamelift``: [``botocore``] Update gamelift client to latest version * api-change:``ec2``: [``botocore``] Update ec2 client to latest version - from version 1.10.42 * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``s3``: [``botocore``] Update s3 client to latest version * api-change:``resourcegroupstaggingapi``: [``botocore``] Update resourcegroupstaggingapi client to latest version * api-change:``cloudfront``: [``botocore``] Update cloudfront client to latest version * api-change:``opsworkscm``: [``botocore``] Update opsworkscm client to latest version - from version 1.10.41 * api-change:``kinesisanalyticsv2``: [``botocore``] Update kinesisanalyticsv2 client to latest version * api-change:``ssm``: [``botocore``] Update ssm client to latest version * api-change:``medialive``: [``botocore``] Update medialive client to latest version * api-change:``iot``: [``botocore``] Update iot client to latest version * api-change:``ecs``: [``botocore``] Update ecs client to latest version * api-change:``ec2``: [``botocore``] Update ec2 client to latest version - from version 1.10.40 * api-change:``mq``: [``botocore``] Update mq client to latest version * api-change:``comprehendmedical``: [``botocore``] Update comprehendmedical client to latest version * api-change:``ec2``: [``botocore``] Update ec2 client to latest version - from version 1.10.39 * api-change:``codebuild``: [``botocore``] Update codebuild client to latest version * api-change:``detective``: [``botocore``] Update detective client to latest version * api-change:``sesv2``: [``botocore``] Update sesv2 client to latest version - from version 1.10.38 * api-change:``accessanalyzer``: [``botocore``] Update accessanalyzer client to latest version - from version 1.10.37 * api-change:``ec2``: [``botocore``] Update ec2 client to latest version - from version 1.10.36 * api-change:``kendra``: [``botocore``] Update kendra client to latest version - from version 1.10.35 * bugfix:s3: [``botocore``] Add stricter validation to s3 control account id parameter. * api-change:``quicksight``: [``botocore``] Update quicksight client to latest version * api-change:``kms``: [``botocore``] Update kms client to latest version * api-change:``ssm``: [``botocore``] Update ssm client to latest version * api-change:``kafka``: [``botocore``] Update kafka client to latest version - from version 1.10.34 * bugfix:s3: [``botocore``] Fixed an issue where the request path was set incorrectly if access point name was present in key path. - Version update to 1.10.33 * api-change:``kinesisvideo``: [``botocore``] Update kinesisvideo client to latest version * api-change:``kinesis-video-signaling``: [``botocore``] Update kinesis-video-signaling client to latest version * api-change:``apigatewayv2``: [``botocore``] Update apigatewayv2 client to latest version - from version 1.10.32 * api-change:``ebs``: [``botocore``] Update ebs client to latest version * api-change:``stepfunctions``: [``botocore``] Update stepfunctions client to latest version * api-change:``application-autoscaling``: [``botocore``] Update application-autoscaling client to latest version * api-change:``lambda``: [``botocore``] Update lambda client to latest version * api-change:``rekognition``: [``botocore``] Update rekognition client to latest version * api-change:``rds``: [``botocore``] Update rds client to latest version * api-change:``sagemaker``: [``botocore``] Update sagemaker client to latest version - from version 1.10.31 * api-change:``textract``: [``botocore``] Update textract client to latest version * api-change:``s3control``: [``botocore``] Update s3control client to latest version * api-change:``ecs``: [``botocore``] Update ecs client to latest version * api-change:``s3``: [``botocore``] Update s3 client to latest version * api-change:``outposts``: [``botocore``] Update outposts client to latest version * api-change:``kendra``: [``botocore``] Update kendra client to latest version * api-change:``eks``: [``botocore``] Update eks client to latest version * api-change:``networkmanager``: [``botocore``] Update networkmanager client to latest version * api-change:``compute-optimizer``: [``botocore``] Update compute-optimizer client to latest version * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``frauddetector``: [``botocore``] Update frauddetector client to latest version * api-change:``sagemaker-a2i-runtime``: [``botocore``] Update sagemaker-a2i-runtime client to latest version * api-change:``codeguru-reviewer``: [``botocore``] Update codeguru-reviewer client to latest version * api-change:``codeguruprofiler``: [``botocore``] Update codeguruprofiler client to latest version * api-change:``es``: [``botocore``] Update es client to latest version - from version 1.10.30 * api-change:``accessanalyzer``: [``botocore``] Update accessanalyzer client to latest version - from version 1.10.29 * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``license-manager``: [``botocore``] Update license-manager client to latest version * api-change:``imagebuilder``: [``botocore``] Update imagebuilder client to latest version * api-change:``schemas``: [``botocore``] Update schemas client to latest version - from version 1.10.28 * api-change:``rds-data``: [``botocore``] Update rds-data client to latest version * api-change:``ds``: [``botocore``] Update ds client to latest version * api-change:``workspaces``: [``botocore``] Update workspaces client to latest version * api-change:``resourcegroupstaggingapi``: [``botocore``] Update resourcegroupstaggingapi client to latest version * api-change:``cognito-idp``: [``botocore``] Update cognito-idp client to latest version * api-change:``dynamodb``: [``botocore``] Update dynamodb client to latest version * api-change:``elastic-inference``: [``botocore``] Update elastic-inference client to latest version * api-change:``organizations``: [``botocore``] Update organizations client to latest version * api-change:``mediatailor``: [``botocore``] Update mediatailor client to latest version * api-change:``quicksight``: [``botocore``] Update quicksight client to latest version * api-change:``serverlessrepo``: [``botocore``] Update serverlessrepo client to latest version - from version 1.10.27 * api-change:``cognito-idp``: [``botocore``] Update cognito-idp client to latest version * api-change:``redshift``: [``botocore``] Update redshift client to latest version * api-change:``elbv2``: [``botocore``] Update elbv2 client to latest version * api-change:``wafv2``: [``botocore``] Update wafv2 client to latest version * api-change:``dlm``: [``botocore``] Update dlm client to latest version * api-change:``iot``: [``botocore``] Update iot client to latest version * api-change:``lex-runtime``: [``botocore``] Update lex-runtime client to latest version * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``athena``: [``botocore``] Update athena client to latest version * api-change:``iotsecuretunneling``: [``botocore``] Update iotsecuretunneling client to latest version * api-change:``ssm``: [``botocore``] Update ssm client to latest version * api-change:``application-insights``: [``botocore``] Update application-insights client to latest version * api-change:``mediapackage-vod``: [``botocore``] Update mediapackage-vod client to latest version * api-change:``appconfig``: [``botocore``] Update appconfig client to latest version * api-change:``mediaconvert``: [``botocore``] Update mediaconvert client to latest version * api-change:``kinesisanalyticsv2``: [``botocore``] Update kinesisanalyticsv2 client to latest version * api-change:``medialive``: [``botocore``] Update medialive client to latest version * api-change:``lambda``: [``botocore``] Update lambda client to latest version * api-change:``cloudwatch``: [``botocore``] Update cloudwatch client to latest version * api-change:``sesv2``: [``botocore``] Update sesv2 client to latest version * api-change:``application-autoscaling``: [``botocore``] Update application-autoscaling client to latest version * api-change:``greengrass``: [``botocore``] Update greengrass client to latest version * api-change:``alexaforbusiness``: [``botocore``] Update alexaforbusiness client to latest version * api-change:``rds``: [``botocore``] Update rds client to latest version * api-change:``ce``: [``botocore``] Update ce client to latest version * api-change:``ram``: [``botocore``] Update ram client to latest version * api-change:``codebuild``: [``botocore``] Update codebuild client to latest version * api-change:``comprehend``: [``botocore``] Update comprehend client to latest version * api-change:``kms``: [``botocore``] Update kms client to latest version - from version 1.10.26 * api-change:``acm``: [``botocore``] Update acm client to latest version * api-change:``autoscaling-plans``: [``botocore``] Update autoscaling-plans client to latest version * api-change:``codebuild``: [``botocore``] Update codebuild client to latest version * api-change:``mediapackage-vod``: [``botocore``] Update mediapackage-vod client to latest version * api-change:``emr``: [``botocore``] Update emr client to latest version * api-change:``sns``: [``botocore``] Update sns client to latest version * api-change:``ssm``: [``botocore``] Update ssm client to latest version * api-change:``application-autoscaling``: [``botocore``] Update application-autoscaling client to latest version * api-change:``sts``: [``botocore``] Update sts client to latest version * api-change:``forecast``: [``botocore``] Update forecast client to latest version * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``rekognition``: [``botocore``] Update rekognition client to latest version - from version 1.10.25 * bugfix:IMDS metadata: [``botocore``] Add 405 case to metadata fetching logic. - from version 1.10.24 * api-change:``glue``: [``botocore``] Update glue client to latest version * api-change:``transcribe``: [``botocore``] Update transcribe client to latest version * api-change:``connectparticipant``: [``botocore``] Update connectparticipant client to latest version * api-change:``dynamodb``: [``botocore``] Update dynamodb client to latest version * api-change:``lex-runtime``: [``botocore``] Update lex-runtime client to latest version * api-change:``connect``: [``botocore``] Update connect client to latest version * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``meteringmarketplace``: [``botocore``] Update meteringmarketplace client to latest version * api-change:``config``: [``botocore``] Update config client to latest version * api-change:``lex-models``: [``botocore``] Update lex-models client to latest version * api-change:``ssm``: [``botocore``] Update ssm client to latest version * api-change:``amplify``: [``botocore``] Update amplify client to latest version * api-change:``appsync``: [``botocore``] Update appsync client to latest version - from version 1.10.23 * api-change:``datasync``: [``botocore``] Update datasync client to latest version * api-change:``dlm``: [``botocore``] Update dlm client to latest version * api-change:``mediastore``: [``botocore``] Update mediastore client to latest version * api-change:``cloudtrail``: [``botocore``] Update cloudtrail client to latest version * api-change:``mgh``: [``botocore``] Update mgh client to latest version * api-change:``storagegateway``: [``botocore``] Update storagegateway client to latest version * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``codecommit``: [``botocore``] Update codecommit client to latest version * api-change:``s3``: [``botocore``] Update s3 client to latest version * api-change:``fsx``: [``botocore``] Update fsx client to latest version * api-change:``migrationhub-config``: [``botocore``] Update migrationhub-config client to latest version * api-change:``firehose``: [``botocore``] Update firehose client to latest version * api-change:``transcribe``: [``botocore``] Update transcribe client to latest version * api-change:``ecs``: [``botocore``] Update ecs client to latest version * api-change:``discovery``: [``botocore``] Update discovery client to latest version * api-change:``chime``: [``botocore``] Update chime client to latest version * api-change:``quicksight``: [``botocore``] Update quicksight client to latest version - from version 1.10.22 * bugfix:IMDS: [``botocore``] Fix regression in IMDS credential resolution. Fixes `#1892 <https://github.com/boto/botocore/issues/1892>`__. - from version 1.10.21 * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``cloudformation``: [``botocore``] Update cloudformation client to latest version * api-change:``elbv2``: [``botocore``] Update elbv2 client to latest version * api-change:``lambda``: [``botocore``] Update lambda client to latest version * api-change:``config``: [``botocore``] Update config client to latest version * api-change:``iam``: [``botocore``] Update iam client to latest version * api-change:``codebuild``: [``botocore``] Update codebuild client to latest version * api-change:``iot``: [``botocore``] Update iot client to latest version * api-change:``autoscaling``: [``botocore``] Update autoscaling client to latest version - from version 1.10.20 * api-change:``cloudformation``: [``botocore``] Update cloudformation client to latest version * api-change:``s3``: [``botocore``] Update s3 client to latest version * api-change:``rds``: [``botocore``] Update rds client to latest version * api-change:``pinpoint``: [``botocore``] Update pinpoint client to latest version * api-change:``sagemaker``: [``botocore``] Update sagemaker client to latest version * api-change:``sagemaker-runtime``: [``botocore``] Update sagemaker-runtime client to latest version * api-change:``ce``: [``botocore``] Update ce client to latest version * api-change:``ssm``: [``botocore``] Update ssm client to latest version - from version 1.10.19 * api-change:``cognito-idp``: [``botocore``] Update cognito-idp client to latest version * api-change:``elbv2``: [``botocore``] Update elbv2 client to latest version * api-change:``workspaces``: [``botocore``] Update workspaces client to latest version * api-change:``ssm``: [``botocore``] Update ssm client to latest version * api-change:``logs``: [``botocore``] Update logs client to latest version * api-change:``guardduty``: [``botocore``] Update guardduty client to latest version * api-change:``emr``: [``botocore``] Update emr client to latest version * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``mediaconvert``: [``botocore``] Update mediaconvert client to latest version * api-change:``eks``: [``botocore``] Update eks client to latest version * api-change:``chime``: [``botocore``] Update chime client to latest version - from version 1.10.18 * api-change:``meteringmarketplace``: [``botocore``] Update meteringmarketplace client to latest version * api-change:``cognito-idp``: [``botocore``] Update cognito-idp client to latest version * api-change:``connect``: [``botocore``] Update connect client to latest version * api-change:``ssm``: [``botocore``] Update ssm client to latest version * api-change:``personalize``: [``botocore``] Update personalize client to latest version - Update BuildRequires and Requires in spec file from setup.py - Version update to 1.10.17 * api-change:``sesv2``: [``botocore``] Update sesv2 client to latest version * api-change:``dataexchange``: [``botocore``] Update dataexchange client to latest version * api-change:``iot``: [``botocore``] Update iot client to latest version * api-change:``cloudsearch``: [``botocore``] Update cloudsearch client to latest version * api-change:``dlm``: [``botocore``] Update dlm client to latest version - from version 1.10.16 * api-change:``transcribe``: [``botocore``] Update transcribe client to latest version * api-change:``marketplace-catalog``: [``botocore``] Update marketplace-catalog client to latest version * api-change:``dynamodb``: [``botocore``] Update dynamodb client to latest version * api-change:``codepipeline``: [``botocore``] Update codepipeline client to latest version * api-change:``elbv2``: [``botocore``] Update elbv2 client to latest version - from version 1.10.15 * api-change:``ce``: [``botocore``] Update ce client to latest version * api-change:``cloudformation``: [``botocore``] Update cloudformation client to latest version - from version 1.10.14 * api-change:``cognito-identity``: [``botocore``] Update cognito-identity client to latest version * api-change:``ecr``: [``botocore``] Update ecr client to latest version - from version 1.10.13 * api-change:``ssm``: [``botocore``] Update ssm client to latest version * api-change:``sso``: [``botocore``] Update sso client to latest version * api-change:``sso-oidc``: [``botocore``] Update sso-oidc client to latest version * api-change:``comprehend``: [``botocore``] Update comprehend client to latest version - from version 1.10.12 * api-change:``savingsplans``: [``botocore``] Update savingsplans client to latest version - from version 1.10.11 * api-change:``codebuild``: [``botocore``] Update codebuild client to latest version * api-change:``budgets``: [``botocore``] Update budgets client to latest version * api-change:``efs``: [``botocore``] Update efs client to latest version * api-change:``ce``: [``botocore``] Update ce client to latest version * api-change:``savingsplans``: [``botocore``] Update savingsplans client to latest version * api-change:``signer``: [``botocore``] Update signer client to latest version - from version 1.10.10 * api-change:``rds``: [``botocore``] Update rds client to latest version * api-change:``codestar-notifications``: [``botocore``] Update codestar-notifications client to latest version - from version 1.10.9 * api-change:``dax``: [``botocore``] Update dax client to latest version * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``robomaker``: [``botocore``] Update robomaker client to latest version - from version 1.10.8 * api-change:``pinpoint``: [``botocore``] Update pinpoint client to latest version * api-change:``cloudtrail``: [``botocore``] Update cloudtrail client to latest version * api-change:``dms``: [``botocore``] Update dms client to latest version - from version 1.10.7 * api-change:``support``: [``botocore``] Update support client to latest version * api-change:``amplify``: [``botocore``] Update amplify client to latest version * api-change:``s3``: [``botocore``] Update s3 client to latest version - from version 1.10.6 * api-change:``elasticache``: [``botocore``] Update elasticache client to latest version - from version 1.10.5 * api-change:``cloud9``: [``botocore``] Update cloud9 client to latest version * api-change:``appstream``: [``botocore``] Update appstream client to latest version - from version 1.10.4 * api-change:``s3``: [``botocore``] Update s3 client to latest version - from version 1.10.3 * api-change:``elasticache``: [``botocore``] Update elasticache client to latest version * api-change:``transfer``: [``botocore``] Update transfer client to latest version * api-change:``ecr``: [``botocore``] Update ecr client to latest version - from version 1.10.2 * api-change:``sagemaker``: [``botocore``] Update sagemaker client to latest version * api-change:``gamelift``: [``botocore``] Update gamelift client to latest version * enhancement:``sts``: [``botocore``] Add support for configuring the use of regional STS endpoints. * api-change:``chime``: [``botocore``] Update chime client to latest version * api-change:``appmesh``: [``botocore``] Update appmesh client to latest version * api-change:``ec2``: [``botocore``] Update ec2 client to latest version - from version 1.10.1 * api-change:``polly``: [``botocore``] Update polly client to latest version * api-change:``connect``: [``botocore``] Update connect client to latest version - from version 1.10.0 * api-change:``opsworkscm``: [``botocore``] Update opsworkscm client to latest version * api-change:``iotevents``: [``botocore``] Update iotevents client to latest version * feature:``botocore.vendored.requests``: [``botocore``] Removed vendored version of ``requests`` (`#1829 <https://github.com/boto/botocore/issues/1829>`__) - from version 1.9.253 * api-change:``cloudwatch``: [``botocore``] Update cloudwatch client to latest version - from version 1.9.252 * api-change:``batch``: [``botocore``] Update batch client to latest version * api-change:``rds``: [``botocore``] Update rds client to latest version - from version 1.9.251 * api-change:``kafka``: [``botocore``] Update kafka client to latest version * api-change:``marketplacecommerceanalytics``: [``botocore``] Update marketplacecommerceanalytics client to latest version * api-change:``robomaker``: [``botocore``] Update robomaker client to latest version - from version 1.9.250 * api-change:``kinesis-video-archived-media``: [``botocore``] Update kinesis-video-archived-media client to latest version - from version 1.9.249 * api-change:``personalize``: [``botocore``] Update personalize client to latest version * api-change:``workspaces``: [``botocore``] Update workspaces client to latest version - Update BuildRequires and Requires in spec file from setup.py - Version update to 1.9.248 * api-change:``greengrass``: [``botocore``] Update greengrass client to latest version - from version 1.9.247 * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``lex-runtime``: [``botocore``] Update lex-runtime client to latest version * api-change:``fms``: [``botocore``] Update fms client to latest version * api-change:``iotanalytics``: [``botocore``] Update iotanalytics client to latest version - from version 1.9.246 * api-change:``kafka``: [``botocore``] Update kafka client to latest version * api-change:``elasticache``: [``botocore``] Update elasticache client to latest version * api-change:``mediaconvert``: [``botocore``] Update mediaconvert client to latest version - from version 1.9.245 * api-change:``organizations``: [``botocore``] Update organizations client to latest version * api-change:``events``: [``botocore``] Update events client to latest version * api-change:``firehose``: [``botocore``] Update firehose client to latest version * api-change:``datasync``: [``botocore``] Update datasync client to latest version - from version 1.9.244 * api-change:``snowball``: [``botocore``] Update snowball client to latest version * api-change:``directconnect``: [``botocore``] Update directconnect client to latest version * api-change:``firehose``: [``botocore``] Update firehose client to latest version * api-change:``pinpoint``: [``botocore``] Update pinpoint client to latest version * api-change:``glue``: [``botocore``] Update glue client to latest version * api-change:``pinpoint-email``: [``botocore``] Update pinpoint-email client to latest version - from version 1.9.243 * api-change:``cognito-idp``: [``botocore``] Update cognito-idp client to latest version * api-change:``mediapackage``: [``botocore``] Update mediapackage client to latest version * api-change:``ssm``: [``botocore``] Update ssm client to latest version - from version 1.9.242 * api-change:``es``: [``botocore``] Update es client to latest version * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``application-autoscaling``: [``botocore``] Update application-autoscaling client to latest version * api-change:``devicefarm``: [``botocore``] Update devicefarm client to latest version - from version 1.9.241 * api-change:``lightsail``: [``botocore``] Update lightsail client to latest version - from version 1.9.240 * api-change:``docdb``: [``botocore``] Update docdb client to latest version - from version 1.9.239 * api-change:``waf``: [``botocore``] Update waf client to latest version * api-change:``rds``: [``botocore``] Update rds client to latest version * api-change:``mq``: [``botocore``] Update mq client to latest version - from version 1.9.238 * api-change:``amplify``: [``botocore``] Update amplify client to latest version * api-change:``ecs``: [``botocore``] Update ecs client to latest version - from version 1.9.237 * api-change:``ssm``: [``botocore``] Update ssm client to latest version * api-change:``codepipeline``: [``botocore``] Update codepipeline client to latest version - from version 1.9.236 * api-change:``globalaccelerator``: [``botocore``] Update globalaccelerator client to latest version * api-change:``dms``: [``botocore``] Update dms client to latest version * api-change:``sagemaker``: [``botocore``] Update sagemaker client to latest version - from version 1.9.235 * api-change:``transcribe``: [``botocore``] Update transcribe client to latest version * api-change:``comprehendmedical``: [``botocore``] Update comprehendmedical client to latest version * api-change:``datasync``: [``botocore``] Update datasync client to latest version - from version 1.9.234 * api-change:``rds-data``: [``botocore``] Update rds-data client to latest version * api-change:``redshift``: [``botocore``] Update redshift client to latest version - from version 1.9.233 * api-change:``workspaces``: [``botocore``] Update workspaces client to latest version * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``greengrass``: [``botocore``] Update greengrass client to latest version * api-change:``rds``: [``botocore``] Update rds client to latest version - from version 1.9.232 * api-change:``mediaconnect``: [``botocore``] Update mediaconnect client to latest version * api-change:``glue``: [``botocore``] Update glue client to latest version * api-change:``ecs``: [``botocore``] Update ecs client to latest version - from version 1.9.231 * api-change:``ram``: [``botocore``] Update ram client to latest version * api-change:``waf-regional``: [``botocore``] Update waf-regional client to latest version * api-change:``apigateway``: [``botocore``] Update apigateway client to latest version - from version 1.9.230 * api-change:``iam``: [``botocore``] Update iam client to latest version * api-change:``athena``: [``botocore``] Update athena client to latest version * api-change:``personalize``: [``botocore``] Update personalize client to latest version - from version 1.9.229 * api-change:``eks``: [``botocore``] Update eks client to latest version * api-change:``mediaconvert``: [``botocore``] Update mediaconvert client to latest version - from version 1.9.228 * api-change:``elbv2``: [``botocore``] Update elbv2 client to latest version * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``workmailmessageflow``: [``botocore``] Update workmailmessageflow client to latest version * api-change:``medialive``: [``botocore``] Update medialive client to latest version - from version 1.9.227 * api-change:``stepfunctions``: [``botocore``] Update stepfunctions client to latest version * api-change:``rds``: [``botocore``] Update rds client to latest version * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``mediaconnect``: [``botocore``] Update mediaconnect client to latest version * api-change:``ses``: [``botocore``] Update ses client to latest version * api-change:``config``: [``botocore``] Update config client to latest version - from version 1.9.226 * api-change:``storagegateway``: [``botocore``] Update storagegateway client to latest version - from version 1.9.225 * api-change:``qldb``: [``botocore``] Update qldb client to latest version * api-change:``marketplacecommerceanalytics``: [``botocore``] Update marketplacecommerceanalytics client to latest version * api-change:``appstream``: [``botocore``] Update appstream client to latest version * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``robomaker``: [``botocore``] Update robomaker client to latest version * api-change:``appmesh``: [``botocore``] Update appmesh client to latest version * api-change:``qldb-session``: [``botocore``] Update qldb-session client to latest version - from version 1.9.224 * api-change:``kinesisanalytics``: [``botocore``] Update kinesisanalytics client to latest version - from version 1.9.223 * api-change:``config``: [``botocore``] Update config client to latest version - from version 1.9.222 * api-change:``stepfunctions``: [``botocore``] Update stepfunctions client to latest version * api-change:``transcribe``: [``botocore``] Update transcribe client to latest version * api-change:``eks``: [``botocore``] Update eks client to latest version - from version 1.9.221 * api-change:``ecs``: [``botocore``] Update ecs client to latest version * api-change:``resourcegroupstaggingapi``: [``botocore``] Update resourcegroupstaggingapi client to latest version * api-change:``gamelift``: [``botocore``] Update gamelift client to latest version - from version 1.9.220 * api-change:``mq``: [``botocore``] Update mq client to latest version * api-change:``apigatewaymanagementapi``: [``botocore``] Update apigatewaymanagementapi client to latest version * api-change:``ecs``: [``botocore``] Update ecs client to latest version - from version 1.9.219 * api-change:``codepipeline``: [``botocore``] Update codepipeline client to latest version * api-change:``application-autoscaling``: [``botocore``] Update application-autoscaling client to latest version * api-change:``elasticache``: [``botocore``] Update elasticache client to latest version * api-change:``lambda``: [``botocore``] Update lambda client to latest version * api-change:``ecs``: [``botocore``] Update ecs client to latest version - from version 1.9.218 * api-change:``sqs``: [``botocore``] Update sqs client to latest version * api-change:``globalaccelerator``: [``botocore``] Update globalaccelerator client to latest version * api-change:``mediaconvert``: [``botocore``] Update mediaconvert client to latest version - from version 1.9.217 * api-change:``organizations``: [``botocore``] Update organizations client to latest version - from version 1.9.216 * api-change:``ssm``: [``botocore``] Update ssm client to latest version * api-change:``securityhub``: [``botocore``] Update securityhub client to latest version - from version 1.9.215 * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``mediapackage-vod``: [``botocore``] Update mediapackage-vod client to latest version * api-change:``transcribe``: [``botocore``] Update transcribe client to latest version - from version 1.9.214 * api-change:``datasync``: [``botocore``] Update datasync client to latest version * api-change:``rds``: [``botocore``] Update rds client to latest version python-botocore was updated to 1.15.38 (bsc#1166924, bsc#1168943) * api-change:``apigateway``: Update apigateway client to latest version * api-change:``codeguru-reviewer``: Update codeguru-reviewer client to latest version * api-change:``mediaconnect``: Update mediaconnect client to latest version - from version 1.15.37 * api-change:``transcribe``: Update transcribe client to latest version * api-change:``chime``: Update chime client to latest version * api-change:``iam``: Update iam client to latest version * api-change:``elasticbeanstalk``: Update elasticbeanstalk client to latest version - from version 1.15.36 * api-change:``personalize-runtime``: Update personalize-runtime client to latest version * api-change:``robomaker``: Update robomaker client to latest version - Version update to 1.15.35 * api-change:``medialive``: Update medialive client to latest version * api-change:``redshift``: Update redshift client to latest version * api-change:``gamelift``: Update gamelift client to latest version * api-change:``cloudwatch``: Update cloudwatch client to latest version * api-change:``rds``: Update rds client to latest version - from version 1.15.34 * api-change:``iot``: Update iot client to latest version * api-change:``mediaconnect``: Update mediaconnect client to latest version - from version 1.15.33 * api-change:``opsworkscm``: Update opsworkscm client to latest version * api-change:``wafv2``: Update wafv2 client to latest version * api-change:``glue``: Update glue client to latest version * api-change:``elastic-inference``: Update elastic-inference client to latest version * api-change:``lambda``: Update lambda client to latest version * api-change:``mediastore``: Update mediastore client to latest version * api-change:``pinpoint``: Update pinpoint client to latest version * api-change:``storagegateway``: Update storagegateway client to latest version * api-change:``rekognition``: Update rekognition client to latest version * api-change:``fms``: Update fms client to latest version * api-change:``organizations``: Update organizations client to latest version * api-change:``detective``: Update detective client to latest version * api-change:``appconfig``: Update appconfig client to latest version - from version 1.15.32 * api-change:``accessanalyzer``: Update accessanalyzer client to latest version - from version 1.15.31 * api-change:``globalaccelerator``: Update globalaccelerator client to latest version * api-change:``kendra``: Update kendra client to latest version * api-change:``servicecatalog``: Update servicecatalog client to latest version - from version 1.15.30 * api-change:``sagemaker``: Update sagemaker client to latest version * api-change:``fsx``: Update fsx client to latest version * api-change:``securityhub``: Update securityhub client to latest version - from version 1.15.29 * api-change:``managedblockchain``: Update managedblockchain client to latest version * api-change:``ce``: Update ce client to latest version * api-change:``application-insights``: Update application-insights client to latest version * api-change:``detective``: Update detective client to latest version * api-change:``es``: Update es client to latest version * api-change:``xray``: Update xray client to latest version - from version 1.15.28 * api-change:``athena``: Update athena client to latest version * api-change:``rds-data``: Update rds-data client to latest version * api-change:``eks``: Update eks client to latest version * api-change:``organizations``: Update organizations client to latest version - Version update to 1.15.27 * api-change:``apigatewayv2``: Update apigatewayv2 client to latest version * api-change:``eks``: Update eks client to latest version * api-change:``route53``: Update route53 client to latest version - from version 1.15.26 * api-change:``servicecatalog``: Update servicecatalog client to latest version - from version 1.15.25 * api-change:``outposts``: Update outposts client to latest version * api-change:``acm``: Update acm client to latest version - from version 1.15.24 * api-change:``rds``: Update rds client to latest version * api-change:``mediaconnect``: Update mediaconnect client to latest version * api-change:``personalize``: Update personalize client to latest version - from version 1.15.23 * api-change:``mediaconvert``: Update mediaconvert client to latest version - from version 1.15.22 * api-change:``s3control``: Update s3control client to latest version * bugfix:Stubber: fixes `#1884 <https://github.com/boto/botocore/issues/1884>`__ * api-change:``cognito-idp``: Update cognito-idp client to latest version * api-change:``ssm``: Update ssm client to latest version * api-change:``ecs``: Update ecs client to latest version * api-change:``elasticache``: Update elasticache client to latest version - from version 1.15.21 * api-change:``appconfig``: Update appconfig client to latest version - from version 1.15.20 * api-change:``lex-models``: Update lex-models client to latest version * api-change:``securityhub``: Update securityhub client to latest version * api-change:``ec2``: Update ec2 client to latest version * api-change:``apigatewayv2``: Update apigatewayv2 client to latest version * api-change:``iot``: Update iot client to latest version - from version 1.15.19 * api-change:``efs``: Update efs client to latest version * api-change:``redshift``: Update redshift client to latest version - from version 1.15.18 * api-change:``serverlessrepo``: Update serverlessrepo client to latest version * api-change:``iotevents``: Update iotevents client to latest version * api-change:``ec2``: Update ec2 client to latest version * enhancement:timezones: Improved timezone parsing for Windows with new fallback method (#1939) * api-change:``marketplacecommerceanalytics``: Update marketplacecommerceanalytics client to latest version - from version 1.15.17 * api-change:``ec2``: Update ec2 client to latest version * api-change:``medialive``: Update medialive client to latest version * api-change:``dms``: Update dms client to latest version - from version 1.15.16 * api-change:``signer``: Update signer client to latest version * api-change:``guardduty``: Update guardduty client to latest version * api-change:``appmesh``: Update appmesh client to latest version * api-change:``ec2``: Update ec2 client to latest version * api-change:``robomaker``: Update robomaker client to latest version - from version 1.15.15 * api-change:``eks``: Update eks client to latest version * api-change:``ec2``: Update ec2 client to latest version * api-change:``opsworkscm``: Update opsworkscm client to latest version * api-change:``guardduty``: Update guardduty client to latest version - from version 1.15.14 * api-change:``pinpoint``: Update pinpoint client to latest version - from version 1.15.13 * api-change:``ec2``: Update ec2 client to latest version - from version 1.15.12 * api-change:``cloudwatch``: Update cloudwatch client to latest version * api-change:``comprehendmedical``: Update comprehendmedical client to latest version - from version 1.15.11 * api-change:``config``: Update config client to latest version - from version 1.15.10 * api-change:``config``: Update config client to latest version * api-change:``glue``: Update glue client to latest version * api-change:``sagemaker-a2i-runtime``: Update sagemaker-a2i-runtime client to latest version * api-change:``appmesh``: Update appmesh client to latest version * api-change:``elbv2``: Update elbv2 client to latest version * api-change:``workdocs``: Update workdocs client to latest version * api-change:``quicksight``: Update quicksight client to latest version * api-change:``accessanalyzer``: Update accessanalyzer client to latest version * api-change:``codeguruprofiler``: Update codeguruprofiler client to latest version - from version 1.15.9 * api-change:``lightsail``: Update lightsail client to latest version * api-change:``globalaccelerator``: Update globalaccelerator client to latest version - from version 1.15.8 * api-change:``transcribe``: Update transcribe client to latest version * api-change:``ec2``: Update ec2 client to latest version * api-change:``sagemaker``: Update sagemaker client to latest version * api-change:``securityhub``: Update securityhub client to latest version - from version 1.15.7 * api-change:``stepfunctions``: Update stepfunctions client to latest version * api-change:``kafka``: Update kafka client to latest version * api-change:``secretsmanager``: Update secretsmanager client to latest version * api-change:``outposts``: Update outposts client to latest version - from version 1.15.6 * api-change:``iotevents``: Update iotevents client to latest version * api-change:``docdb``: Update docdb client to latest version * api-change:``snowball``: Update snowball client to latest version * api-change:``fsx``: Update fsx client to latest version * api-change:``events``: Update events client to latest version - from version 1.15.5 * api-change:``imagebuilder``: Update imagebuilder client to latest version * api-change:``wafv2``: Update wafv2 client to latest version * api-change:``redshift``: Update redshift client to latest version - from version 1.15.4 * api-change:``savingsplans``: Update savingsplans client to latest version * api-change:``appconfig``: Update appconfig client to latest version * api-change:``pinpoint``: Update pinpoint client to latest version - from version 1.15.3 * api-change:``autoscaling``: Update autoscaling client to latest version * api-change:``servicecatalog``: Update servicecatalog client to latest version * api-change:``lambda``: Update lambda client to latest version - from version 1.15.2 * api-change:``autoscaling``: Update autoscaling client to latest version * api-change:``chime``: Update chime client to latest version * api-change:``rds``: Update rds client to latest version - from version 1.15.1 * api-change:``cloud9``: Update cloud9 client to latest version * api-change:``ec2``: Update ec2 client to latest version * api-change:``dynamodb``: Update dynamodb client to latest version * api-change:``rekognition``: Update rekognition client to latest version - Version update to 1.15.0 * feature:retries: Add support for retry modes, including ``standard`` and ``adaptive`` modes (`#1972 <https://github.com/boto/botocore/issues/1972>`__) * api-change:``ec2``: Update ec2 client to latest version * api-change:``mediatailor``: Update mediatailor client to latest version * api-change:``securityhub``: Update securityhub client to latest version * api-change:``shield``: Update shield client to latest version - from version 1.14.17 * api-change:``mediapackage-vod``: Update mediapackage-vod client to latest version - from version 1.14.16 * api-change:``glue``: Update glue client to latest version * api-change:``chime``: Update chime client to latest version * api-change:``workmail``: Update workmail client to latest version * api-change:``ds``: Update ds client to latest version * api-change:``ec2``: Update ec2 client to latest version * api-change:``es``: Update es client to latest version * api-change:``neptune``: Update neptune client to latest version - from version 1.14.15 * api-change:``ec2``: Update ec2 client to latest version * api-change:``cognito-idp``: Update cognito-idp client to latest version * api-change:``cloudformation``: Update cloudformation client to latest version - from version 1.14.14 * api-change:``docdb``: Update docdb client to latest version * api-change:``kms``: Update kms client to latest version - from version 1.14.13 * api-change:``robomaker``: Update robomaker client to latest version * api-change:``imagebuilder``: Update imagebuilder client to latest version * api-change:``rds``: Update rds client to latest version - from version 1.14.12 * api-change:``ebs``: Update ebs client to latest version * api-change:``appsync``: Update appsync client to latest version * api-change:``lex-models``: Update lex-models client to latest version * api-change:``ecr``: Update ecr client to latest version * api-change:``ec2``: Update ec2 client to latest version * api-change:``codebuild``: Update codebuild client to latest version - from version 1.14.11 * api-change:``groundstation``: Update groundstation client to latest version * api-change:``mediaconvert``: Update mediaconvert client to latest version * api-change:``dlm``: Update dlm client to latest version * api-change:``ec2``: Update ec2 client to latest version * api-change:``forecastquery``: Update forecastquery client to latest version * api-change:``securityhub``: Update securityhub client to latest version * api-change:``resourcegroupstaggingapi``: Update resourcegroupstaggingapi client to latest version - from version 1.14.10 * api-change:``workmail``: Update workmail client to latest version * api-change:``iot``: Update iot client to latest version * api-change:``cloudfront``: Update cloudfront client to latest version * api-change:``storagegateway``: Update storagegateway client to latest version * api-change:``ssm``: Update ssm client to latest version * api-change:``kafka``: Update kafka client to latest version * api-change:``ec2``: Update ec2 client to latest version - Refresh patches for new version + hide_py_pckgmgmt.patch - Version update to 1.14.9 * api-change:``ecs``: Update ecs client to latest version * api-change:``opsworkscm``: Update opsworkscm client to latest version * api-change:``workspaces``: Update workspaces client to latest version * api-change:``datasync``: Update datasync client to latest version * api-change:``eks``: Update eks client to latest version - from version 1.14.8 * api-change:``rds``: Update rds client to latest version * api-change:``iam``: Update iam client to latest version - from version 1.14.7 * api-change:``ec2``: Update ec2 client to latest version * api-change:``codepipeline``: Update codepipeline client to latest version * api-change:``discovery``: Update discovery client to latest version * api-change:``iotevents``: Update iotevents client to latest version * api-change:``marketplacecommerceanalytics``: Update marketplacecommerceanalytics client to latest version - from version 1.14.6 * api-change:``lambda``: Update lambda client to latest version * api-change:``application-insights``: Update application-insights client to latest version * api-change:``ec2``: Update ec2 client to latest version * api-change:``cloudwatch``: Update cloudwatch client to latest version * api-change:``kms``: Update kms client to latest version * api-change:``alexaforbusiness``: Update alexaforbusiness client to latest version - from version 1.14.5 * api-change:``mediaconvert``: Update mediaconvert client to latest version * api-change:``neptune``: Update neptune client to latest version * api-change:``cloudhsmv2``: Update cloudhsmv2 client to latest version * api-change:``redshift``: Update redshift client to latest version * api-change:``batch``: Update batch client to latest version * api-change:``ecs``: Update ecs client to latest version - from version 1.14.4 * api-change:``ec2``: Update ec2 client to latest version * api-change:``sagemaker``: Update sagemaker client to latest version * api-change:``ds``: Update ds client to latest version - from version 1.14.3 * api-change:``securityhub``: Update securityhub client to latest version * api-change:``ssm``: Update ssm client to latest version * api-change:``ec2``: Update ec2 client to latest version * api-change:``organizations``: Update organizations client to latest version - from version 1.14.2 * api-change:``ec2``: Update ec2 client to latest version - from version 1.14.1 * api-change:``efs``: Update efs client to latest version * api-change:``ec2``: Update ec2 client to latest version * api-change:``backup``: Update backup client to latest version - from version 1.14.0 * api-change:``sagemaker``: Update sagemaker client to latest version * api-change:``chime``: Update chime client to latest version * api-change:``transfer``: Update transfer client to latest version * api-change:``ec2``: Update ec2 client to latest version * feature:Python: Dropped support for Python 2.6 and 3.3. * api-change:``workspaces``: Update workspaces client to latest version * api-change:``rds``: Update rds client to latest version - from version 1.13.50 * api-change:``logs``: Update logs client to latest version - from version 1.13.49 * api-change:``fms``: Update fms client to latest version * api-change:``translate``: Update translate client to latest version * api-change:``ce``: Update ce client to latest version - from version 1.13.48 * api-change:``codebuild``: Update codebuild client to latest version * api-change:``mgh``: Update mgh client to latest version * api-change:``xray``: Update xray client to latest version - from version 1.13.47 * api-change:``comprehend``: Update comprehend client to latest version * api-change:``mediapackage``: Update mediapackage client to latest version * api-change:``ec2``: Update ec2 client to latest version - from version 1.13.46 * api-change:``lex-models``: Update lex-models client to latest version * api-change:``ecr``: Update ecr client to latest version * api-change:``lightsail``: Update lightsail client to latest version * api-change:``ce``: Update ce client to latest version - from version 1.13.45 * api-change:``fsx``: Update fsx client to latest version * api-change:``health``: Update health client to latest version * api-change:``detective``: Update detective client to latest version - from version 1.13.44 * api-change:``transcribe``: Update transcribe client to latest version * api-change:``eks``: Update eks client to latest version * api-change:``ec2``: Update ec2 client to latest version * api-change:``rds``: Update rds client to latest version * api-change:``ssm``: Update ssm client to latest version * api-change:``redshift``: Update redshift client to latest version * api-change:``pinpoint``: Update pinpoint client to latest version * api-change:``securityhub``: Update securityhub client to latest version * api-change:``devicefarm``: Update devicefarm client to latest version - from version 1.13.43 * api-change:``transcribe``: Update transcribe client to latest version * api-change:``dlm``: Update dlm client to latest version * api-change:``lex-models``: Update lex-models client to latest version * api-change:``personalize-runtime``: Update personalize-runtime client to latest version * api-change:``ssm``: Update ssm client to latest version * api-change:``codestar-connections``: Update codestar-connections client to latest version * api-change:``gamelift``: Update gamelift client to latest version * api-change:``ec2``: Update ec2 client to latest version - from version 1.13.42 * api-change:``ec2``: Update ec2 client to latest version * api-change:``s3``: Update s3 client to latest version * api-change:``resourcegroupstaggingapi``: Update resourcegroupstaggingapi client to latest version * api-change:``cloudfront``: Update cloudfront client to latest version * enhancement:``s3``: Add support for opting into using the us-east-1 regional endpoint. * api-change:``opsworkscm``: Update opsworkscm client to latest version - from version 1.13.41 * api-change:``kinesisanalyticsv2``: Update kinesisanalyticsv2 client to latest version * api-change:``ssm``: Update ssm client to latest version * api-change:``medialive``: Update medialive client to latest version * api-change:``iot``: Update iot client to latest version * api-change:``ecs``: Update ecs client to latest version * api-change:``ec2``: Update ec2 client to latest version - from version 1.13.40 * api-change:``mq``: Update mq client to latest version * api-change:``comprehendmedical``: Update comprehendmedical client to latest version * api-change:``ec2``: Update ec2 client to latest version - from version 1.13.39 * api-change:``codebuild``: Update codebuild client to latest version * api-change:``detective``: Update detective client to latest version * api-change:``sesv2``: Update sesv2 client to latest version - from version 1.13.38 * api-change:``accessanalyzer``: Update accessanalyzer client to latest version - from version 1.13.37 * api-change:``ec2``: Update ec2 client to latest version - from version 1.13.36 * api-change:``kendra``: Update kendra client to latest version - from version 1.13.35 * bugfix:s3: Add stricter validation to s3 control account id parameter. * api-change:``quicksight``: Update quicksight client to latest version * api-change:``kms``: Update kms client to latest version * api-change:``ssm``: Update ssm client to latest version * api-change:``kafka``: Update kafka client to latest version - from version 1.13.34 * bugfix:s3: Fixed an issue where the request path was set incorrectly if access point name was present in key path. - Version update to 1.13.33 * api-change:``kinesisvideo``: Update kinesisvideo client to latest version * api-change:``kinesis-video-signaling``: Update kinesis-video-signaling client to latest version * api-change:``apigatewayv2``: Update apigatewayv2 client to latest version - from version 1.13.32 * api-change:``ebs``: Update ebs client to latest version * api-change:``stepfunctions``: Update stepfunctions client to latest version * api-change:``application-autoscaling``: Update application-autoscaling client to latest version * api-change:``lambda``: Update lambda client to latest version * api-change:``rekognition``: Update rekognition client to latest version * api-change:``rds``: Update rds client to latest version * api-change:``sagemaker``: Update sagemaker client to latest version - from version 1.13.31 * api-change:``textract``: Update textract client to latest version * api-change:``s3control``: Update s3control client to latest version * api-change:``ecs``: Update ecs client to latest version * api-change:``s3``: Update s3 client to latest version * api-change:``outposts``: Update outposts client to latest version * api-change:``kendra``: Update kendra client to latest version * api-change:``eks``: Update eks client to latest version * api-change:``networkmanager``: Update networkmanager client to latest version * api-change:``compute-optimizer``: Update compute-optimizer client to latest version * api-change:``ec2``: Update ec2 client to latest version * api-change:``frauddetector``: Update frauddetector client to latest version * api-change:``sagemaker-a2i-runtime``: Update sagemaker-a2i-runtime client to latest version * api-change:``codeguru-reviewer``: Update codeguru-reviewer client to latest version * api-change:``codeguruprofiler``: Update codeguruprofiler client to latest version * api-change:``es``: Update es client to latest version - from version 1.13.30 * api-change:``accessanalyzer``: Update accessanalyzer client to latest version - from version 1.13.29 * api-change:``ec2``: Update ec2 client to latest version * api-change:``license-manager``: Update license-manager client to latest version * api-change:``imagebuilder``: Update imagebuilder client to latest version * api-change:``schemas``: Update schemas client to latest version - from version 1.13.28 * api-change:``rds-data``: Update rds-data client to latest version * api-change:``ds``: Update ds client to latest version * api-change:``workspaces``: Update workspaces client to latest version * api-change:``resourcegroupstaggingapi``: Update resourcegroupstaggingapi client to latest version * api-change:``cognito-idp``: Update cognito-idp client to latest version * api-change:``dynamodb``: Update dynamodb client to latest version * api-change:``elastic-inference``: Update elastic-inference client to latest version * api-change:``organizations``: Update organizations client to latest version * api-change:``mediatailor``: Update mediatailor client to latest version * api-change:``quicksight``: Update quicksight client to latest version * api-change:``serverlessrepo``: Update serverlessrepo client to latest version - from version 1.13.27 * api-change:``cognito-idp``: Update cognito-idp client to latest version * api-change:``redshift``: Update redshift client to latest version * api-change:``elbv2``: Update elbv2 client to latest version * api-change:``wafv2``: Update wafv2 client to latest version * api-change:``dlm``: Update dlm client to latest version * api-change:``iot``: Update iot client to latest version * api-change:``lex-runtime``: Update lex-runtime client to latest version * api-change:``ec2``: Update ec2 client to latest version * api-change:``athena``: Update athena client to latest version * api-change:``iotsecuretunneling``: Update iotsecuretunneling client to latest version * api-change:``ssm``: Update ssm client to latest version * api-change:``application-insights``: Update application-insights client to latest version * api-change:``mediapackage-vod``: Update mediapackage-vod client to latest version * api-change:``appconfig``: Update appconfig client to latest version * api-change:``mediaconvert``: Update mediaconvert client to latest version * api-change:``kinesisanalyticsv2``: Update kinesisanalyticsv2 client to latest version * api-change:``medialive``: Update medialive client to latest version * api-change:``lambda``: Update lambda client to latest version * api-change:``cloudwatch``: Update cloudwatch client to latest version * api-change:``sesv2``: Update sesv2 client to latest version * api-change:``application-autoscaling``: Update application-autoscaling client to latest version * api-change:``greengrass``: Update greengrass client to latest version * api-change:``alexaforbusiness``: Update alexaforbusiness client to latest version * api-change:``rds``: Update rds client to latest version * api-change:``ce``: Update ce client to latest version * api-change:``ram``: Update ram client to latest version * api-change:``codebuild``: Update codebuild client to latest version * api-change:``comprehend``: Update comprehend client to latest version * api-change:``kms``: Update kms client to latest version - from version 1.13.26 * api-change:``acm``: Update acm client to latest version * api-change:``autoscaling-plans``: Update autoscaling-plans client to latest version * api-change:``codebuild``: Update codebuild client to latest version * api-change:``mediapackage-vod``: Update mediapackage-vod client to latest version * api-change:``emr``: Update emr client to latest version * api-change:``sns``: Update sns client to latest version * api-change:``ssm``: Update ssm client to latest version * api-change:``application-autoscaling``: Update application-autoscaling client to latest version * api-change:``sts``: Update sts client to latest version * api-change:``forecast``: Update forecast client to latest version * api-change:``ec2``: Update ec2 client to latest version * api-change:``rekognition``: Update rekognition client to latest version - from version 1.13.25 * bugfix:IMDS metadata: Add 405 case to metadata fetching logic. - from version 1.13.24 * api-change:``glue``: Update glue client to latest version * api-change:``transcribe``: Update transcribe client to latest version * api-change:``connectparticipant``: Update connectparticipant client to latest version * api-change:``dynamodb``: Update dynamodb client to latest version * api-change:``lex-runtime``: Update lex-runtime client to latest version * api-change:``connect``: Update connect client to latest version * api-change:``ec2``: Update ec2 client to latest version * api-change:``meteringmarketplace``: Update meteringmarketplace client to latest version * api-change:``config``: Update config client to latest version * api-change:``lex-models``: Update lex-models client to latest version * api-change:``ssm``: Update ssm client to latest version * api-change:``amplify``: Update amplify client to latest version * api-change:``appsync``: Update appsync client to latest version - from version 1.13.23 * api-change:``datasync``: Update datasync client to latest version * api-change:``dlm``: Update dlm client to latest version * api-change:``mediastore``: Update mediastore client to latest version * api-change:``cloudtrail``: Update cloudtrail client to latest version * api-change:``mgh``: Update mgh client to latest version * api-change:``storagegateway``: Update storagegateway client to latest version * api-change:``ec2``: Update ec2 client to latest version * api-change:``codecommit``: Update codecommit client to latest version * api-change:``s3``: Update s3 client to latest version * api-change:``fsx``: Update fsx client to latest version * api-change:``migrationhub-config``: Update migrationhub-config client to latest version * api-change:``firehose``: Update firehose client to latest version * api-change:``transcribe``: Update transcribe client to latest version * api-change:``ecs``: Update ecs client to latest version * api-change:``discovery``: Update discovery client to latest version * api-change:``chime``: Update chime client to latest version * api-change:``quicksight``: Update quicksight client to latest version - from version 1.13.22 * bugfix:IMDS: Fix regression in IMDS credential resolution. Fixes `#1892 <https://github.com/boto/botocore/issues/1892>`__. - from version 1.13.21 * api-change:``ec2``: Update ec2 client to latest version * api-change:``cloudformation``: Update cloudformation client to latest version * api-change:``elbv2``: Update elbv2 client to latest version * api-change:``lambda``: Update lambda client to latest version * api-change:``config``: Update config client to latest version * api-change:``iam``: Update iam client to latest version * api-change:``codebuild``: Update codebuild client to latest version * api-change:``iot``: Update iot client to latest version * api-change:``autoscaling``: Update autoscaling client to latest version - from version 1.13.20 * api-change:``cloudformation``: Update cloudformation client to latest version * api-change:``s3``: Update s3 client to latest version * api-change:``rds``: Update rds client to latest version * api-change:``pinpoint``: Update pinpoint client to latest version * api-change:``sagemaker``: Update sagemaker client to latest version * api-change:``sagemaker-runtime``: Update sagemaker-runtime client to latest version * api-change:``ce``: Update ce client to latest version * api-change:``ssm``: Update ssm client to latest version - from version 1.13.19 * api-change:``cognito-idp``: Update cognito-idp client to latest version * api-change:``elbv2``: Update elbv2 client to latest version * api-change:``workspaces``: Update workspaces client to latest version * api-change:``ssm``: Update ssm client to latest version * api-change:``logs``: Update logs client to latest version * api-change:``guardduty``: Update guardduty client to latest version * api-change:``emr``: Update emr client to latest version * api-change:``ec2``: Update ec2 client to latest version * api-change:``mediaconvert``: Update mediaconvert client to latest version * api-change:``eks``: Update eks client to latest version * api-change:``chime``: Update chime client to latest version - from version 1.13.18 * api-change:``meteringmarketplace``: Update meteringmarketplace client to latest version * api-change:``cognito-idp``: Update cognito-idp client to latest version * api-change:``connect``: Update connect client to latest version * api-change:``ssm``: Update ssm client to latest version * api-change:``personalize``: Update personalize client to latest version - Version update to 1.13.17 (bsc#1129696) * api-change:``sesv2``: Update sesv2 client to latest version * api-change:``dataexchange``: Update dataexchange client to latest version * api-change:``iot``: Update iot client to latest version * api-change:``cloudsearch``: Update cloudsearch client to latest version * api-change:``dlm``: Update dlm client to latest version - from version 1.13.16 * api-change:``transcribe``: Update transcribe client to latest version * api-change:``marketplace-catalog``: Update marketplace-catalog client to latest version * api-change:``dynamodb``: Update dynamodb client to latest version * api-change:``codepipeline``: Update codepipeline client to latest version * api-change:``elbv2``: Update elbv2 client to latest version - from version 1.13.15 * api-change:``ce``: Update ce client to latest version * api-change:``cloudformation``: Update cloudformation client to latest version - from version 1.13.14 * api-change:``cognito-identity``: Update cognito-identity client to latest version * api-change:``ecr``: Update ecr client to latest version - from version 1.13.13 * api-change:``ssm``: Update ssm client to latest version * api-change:``sso``: Update sso client to latest version * api-change:``sso-oidc``: Update sso-oidc client to latest version * api-change:``comprehend``: Update comprehend client to latest version - from version 1.13.12 * api-change:``savingsplans``: Update savingsplans client to latest version - from version 1.13.11 * api-change:``codebuild``: Update codebuild client to latest version * api-change:``budgets``: Update budgets client to latest version * api-change:``efs``: Update efs client to latest version * api-change:``ce``: Update ce client to latest version * api-change:``savingsplans``: Update savingsplans client to latest version * api-change:``signer``: Update signer client to latest version - from version 1.13.10 * api-change:``rds``: Update rds client to latest version * api-change:``codestar-notifications``: Update codestar-notifications client to latest version - from version 1.13.9 * api-change:``dax``: Update dax client to latest version * api-change:``ec2``: Update ec2 client to latest version * api-change:``robomaker``: Update robomaker client to latest version - from version 1.13.8 * api-change:``pinpoint``: Update pinpoint client to latest version * api-change:``cloudtrail``: Update cloudtrail client to latest version * api-change:``dms``: Update dms client to latest version - from version 1.13.7 * api-change:``support``: Update support client to latest version * api-change:``amplify``: Update amplify client to latest version * api-change:``s3``: Update s3 client to latest version - from version 1.13.6 * api-change:``elasticache``: Update elasticache client to latest version - from version 1.13.5 * api-change:``cloud9``: Update cloud9 client to latest version * api-change:``appstream``: Update appstream client to latest version - from version 1.13.4 * api-change:``s3``: Update s3 client to latest version - from version 1.13.3 * api-change:``elasticache``: Update elasticache client to latest version * api-change:``transfer``: Update transfer client to latest version * api-change:``ecr``: Update ecr client to latest version - from version 1.13.2 * api-change:``sagemaker``: Update sagemaker client to latest version * api-change:``gamelift``: Update gamelift client to latest version * enhancement:``sts``: Add support for configuring the use of regional STS endpoints. * api-change:``chime``: Update chime client to latest version * api-change:``appmesh``: Update appmesh client to latest version * api-change:``ec2``: Update ec2 client to latest version - from version 1.13.1 * api-change:``polly``: Update polly client to latest version * api-change:``connect``: Update connect client to latest version - from version 1.13.0 * api-change:``opsworkscm``: Update opsworkscm client to latest version * api-change:``iotevents``: Update iotevents client to latest version * feature:``botocore.vendored.requests``: Removed vendored version of ``requests`` (`#1829 <https://github.com/boto/botocore/issues/1829>`__) - from version 1.12.253 * api-change:``cloudwatch``: Update cloudwatch client to latest version - from version 1.12.252 * api-change:``batch``: Update batch client to latest version * api-change:``rds``: Update rds client to latest version - from version 1.12.251 * api-change:``kafka``: Update kafka client to latest version * api-change:``marketplacecommerceanalytics``: Update marketplacecommerceanalytics client to latest version * api-change:``robomaker``: Update robomaker client to latest version - from version 1.12.250 * api-change:``kinesis-video-archived-media``: Update kinesis-video-archived-media client to latest version - from version 1.12.249 * api-change:``personalize``: Update personalize client to latest version * api-change:``workspaces``: Update workspaces client to latest version - Refresh patches for new version + hide_py_pckgmgmt.patch - Version update to 1.12.248 * api-change:``greengrass``: Update greengrass client to latest version - from version 1.12.247 * api-change:``ec2``: Update ec2 client to latest version * api-change:``lex-runtime``: Update lex-runtime client to latest version * api-change:``fms``: Update fms client to latest version * api-change:``iotanalytics``: Update iotanalytics client to latest version - from version 1.12.246 * api-change:``kafka``: Update kafka client to latest version * api-change:``elasticache``: Update elasticache client to latest version * api-change:``mediaconvert``: Update mediaconvert client to latest version - from version 1.12.245 * api-change:``organizations``: Update organizations client to latest version * api-change:``events``: Update events client to latest version * api-change:``firehose``: Update firehose client to latest version * api-change:``datasync``: Update datasync client to latest version - from version 1.12.244 * api-change:``snowball``: Update snowball client to latest version * api-change:``directconnect``: Update directconnect client to latest version * api-change:``firehose``: Update firehose client to latest version * api-change:``pinpoint``: Update pinpoint client to latest version * api-change:``glue``: Update glue client to latest version * api-change:``pinpoint-email``: Update pinpoint-email client to latest version - from version 1.12.243 * api-change:``cognito-idp``: Update cognito-idp client to latest version * api-change:``mediapackage``: Update mediapackage client to latest version * api-change:``ssm``: Update ssm client to latest version - from version 1.12.242 * api-change:``es``: Update es client to latest version * api-change:``ec2``: Update ec2 client to latest version * api-change:``application-autoscaling``: Update application-autoscaling client to latest version * api-change:``devicefarm``: Update devicefarm client to latest version - from version 1.12.241 * api-change:``lightsail``: Update lightsail client to latest version - from version 1.12.240 * api-change:``docdb``: Update docdb client to latest version - from version 1.12.239 * api-change:``waf``: Update waf client to latest version * api-change:``rds``: Update rds client to latest version * api-change:``mq``: Update mq client to latest version - from version 1.12.238 * api-change:``amplify``: Update amplify client to latest version * api-change:``ecs``: Update ecs client to latest version - from version 1.12.237 * api-change:``ssm``: Update ssm client to latest version * api-change:``codepipeline``: Update codepipeline client to latest version - from version 1.12.236 * api-change:``globalaccelerator``: Update globalaccelerator client to latest version * api-change:``dms``: Update dms client to latest version * api-change:``sagemaker``: Update sagemaker client to latest version - from version 1.12.235 * api-change:``transcribe``: Update transcribe client to latest version * api-change:``comprehendmedical``: Update comprehendmedical client to latest version * api-change:``datasync``: Update datasync client to latest version - from version 1.12.234 * api-change:``rds-data``: Update rds-data client to latest version * api-change:``redshift``: Update redshift client to latest version - from version 1.12.233 * api-change:``workspaces``: Update workspaces client to latest version * api-change:``ec2``: Update ec2 client to latest version * api-change:``greengrass``: Update greengrass client to latest version * api-change:``rds``: Update rds client to latest version - from version 1.12.232 * api-change:``mediaconnect``: Update mediaconnect client to latest version * api-change:``glue``: Update glue client to latest version * api-change:``ecs``: Update ecs client to latest version - from version 1.12.231 * api-change:``ram``: Update ram client to latest version * api-change:``waf-regional``: Update waf-regional client to latest version * api-change:``apigateway``: Update apigateway client to latest version - from version 1.12.230 * api-change:``iam``: Update iam client to latest version * api-change:``athena``: Update athena client to latest version * api-change:``personalize``: Update personalize client to latest version - from version 1.12.229 * api-change:``eks``: Update eks client to latest version * api-change:``mediaconvert``: Update mediaconvert client to latest version - from version 1.12.228 * api-change:``elbv2``: Update elbv2 client to latest version * api-change:``ec2``: Update ec2 client to latest version * api-change:``workmailmessageflow``: Update workmailmessageflow client to latest version * api-change:``medialive``: Update medialive client to latest version - from version 1.12.227 * api-change:``stepfunctions``: Update stepfunctions client to latest version * api-change:``rds``: Update rds client to latest version * api-change:``ec2``: Update ec2 client to latest version * api-change:``mediaconnect``: Update mediaconnect client to latest version * api-change:``ses``: Update ses client to latest version * api-change:``config``: Update config client to latest version - from version 1.12.226 * api-change:``storagegateway``: Update storagegateway client to latest version - from version 1.12.225 * api-change:``qldb``: Update qldb client to latest version * api-change:``marketplacecommerceanalytics``: Update marketplacecommerceanalytics client to latest version * api-change:``appstream``: Update appstream client to latest version * api-change:``ec2``: Update ec2 client to latest version * api-change:``robomaker``: Update robomaker client to latest version * api-change:``appmesh``: Update appmesh client to latest version * api-change:``qldb-session``: Update qldb-session client to latest version - from version 1.12.224 * api-change:``kinesisanalytics``: Update kinesisanalytics client to latest version - from version 1.12.223 * api-change:``config``: Update config client to latest version - from version 1.12.222 * api-change:``stepfunctions``: Update stepfunctions client to latest version * api-change:``transcribe``: Update transcribe client to latest version * api-change:``eks``: Update eks client to latest version - from version 1.12.221 * api-change:``ecs``: Update ecs client to latest version * api-change:``resourcegroupstaggingapi``: Update resourcegroupstaggingapi client to latest version * api-change:``gamelift``: Update gamelift client to latest version - from version 1.12.220 * api-change:``mq``: Update mq client to latest version * api-change:``apigatewaymanagementapi``: Update apigatewaymanagementapi client to latest version * api-change:``ecs``: Update ecs client to latest version - from version 1.12.219 * api-change:``codepipeline``: Update codepipeline client to latest version * api-change:``application-autoscaling``: Update application-autoscaling client to latest version * api-change:``elasticache``: Update elasticache client to latest version * api-change:``lambda``: Update lambda client to latest version * api-change:``ecs``: Update ecs client to latest version - from version 1.12.218 * api-change:``sqs``: Update sqs client to latest version * api-change:``globalaccelerator``: Update globalaccelerator client to latest version * api-change:``mediaconvert``: Update mediaconvert client to latest version - from version 1.12.217 * api-change:``organizations``: Update organizations client to latest version - from version 1.12.216 * api-change:``ssm``: Update ssm client to latest version * api-change:``securityhub``: Update securityhub client to latest version - from version 1.12.215 * api-change:``ec2``: Update ec2 client to latest version * api-change:``mediapackage-vod``: Update mediapackage-vod client to latest version * api-change:``transcribe``: Update transcribe client to latest version - from version 1.12.214 * api-change:``datasync``: Update datasync client to latest version * api-change:``rds``: Update rds client to latest version python-s3transfer was updated to 0.3.3: * bugfix:dependency: Updated botocore version range Update to version 0.3.2 * bugfix:s3: Fixes boto/botocore`#1916 <https://github.com/boto/botocore/issues/1916>`__ from version 0.3.1 * enhancement:TransferManager: Expose client and config properties * enhancement:Tags: Add support for Tagging and TaggingDirective from version 0.3.0 * feature:Python: Dropped support for Python 2.6 and 3.3. python-boto was updated to fix: * Removed the upstream builtin root certificate data for trusted CAs, as SUSE ships them seperately. (bsc#1116204) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-625=1 Package List: - openSUSE Leap 15.1 (noarch): aws-cli-1.18.38-lp151.2.6.1 python2-boto-2.49.0-lp151.2.3.1 python2-boto3-1.12.38-lp151.2.6.1 python2-botocore-1.15.38-lp151.2.6.1 python2-s3transfer-0.3.3-lp151.2.6.1 python3-boto-2.49.0-lp151.2.3.1 python3-boto3-1.12.38-lp151.2.6.1 python3-botocore-1.15.38-lp151.2.6.1 python3-s3transfer-0.3.3-lp151.2.6.1 References: https://bugzilla.suse.com/1116204 https://bugzilla.suse.com/1117074 https://bugzilla.suse.com/1122668 https://bugzilla.suse.com/1129696 https://bugzilla.suse.com/1166924 https://bugzilla.suse.com/1168943

1 0

openSUSE-SU-2020:0630-1: important: Security update for python-PyYAML
by opensuse-security＠opensuse.org 11 May '20

11 May '20

openSUSE Security Update: Security update for python-PyYAML ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0630-1 Rating: important References: #1165439 Cross-References: CVE-2020-1747 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-PyYAML fixes the following issues: - CVE-2020-1747: Fixed an arbitrary code execution when YAML files are parsed by FullLoader (bsc#1165439). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-630=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): python-PyYAML-debuginfo-5.1.2-lp151.2.13.1 python-PyYAML-debugsource-5.1.2-lp151.2.13.1 python2-PyYAML-5.1.2-lp151.2.13.1 python2-PyYAML-debuginfo-5.1.2-lp151.2.13.1 python3-PyYAML-5.1.2-lp151.2.13.1 python3-PyYAML-debuginfo-5.1.2-lp151.2.13.1 References: https://www.suse.com/security/cve/CVE-2020-1747.html https://bugzilla.suse.com/1165439

1 0

openSUSE-SU-2020:0647-1: important: Security update for openldap2
by opensuse-security＠opensuse.org 11 May '20

11 May '20

openSUSE Security Update: Security update for openldap2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0647-1 Rating: important References: #1170771 Cross-References: CVE-2020-12243 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for openldap2 fixes the following issues: - CVE-2020-12243: Fixed a denial of service related to recursive filters (bsc#1170771). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-647=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libldap-2_4-2-2.4.46-lp151.10.9.1 libldap-2_4-2-debuginfo-2.4.46-lp151.10.9.1 openldap2-2.4.46-lp151.10.9.1 openldap2-back-meta-2.4.46-lp151.10.9.1 openldap2-back-meta-debuginfo-2.4.46-lp151.10.9.1 openldap2-back-perl-2.4.46-lp151.10.9.1 openldap2-back-perl-debuginfo-2.4.46-lp151.10.9.1 openldap2-back-sock-2.4.46-lp151.10.9.1 openldap2-back-sock-debuginfo-2.4.46-lp151.10.9.1 openldap2-back-sql-2.4.46-lp151.10.9.1 openldap2-back-sql-debuginfo-2.4.46-lp151.10.9.1 openldap2-client-2.4.46-lp151.10.9.1 openldap2-client-debuginfo-2.4.46-lp151.10.9.1 openldap2-contrib-2.4.46-lp151.10.9.1 openldap2-contrib-debuginfo-2.4.46-lp151.10.9.1 openldap2-debuginfo-2.4.46-lp151.10.9.1 openldap2-debugsource-2.4.46-lp151.10.9.1 openldap2-devel-2.4.46-lp151.10.9.1 openldap2-devel-static-2.4.46-lp151.10.9.1 openldap2-ppolicy-check-password-1.2-lp151.10.9.1 openldap2-ppolicy-check-password-debuginfo-1.2-lp151.10.9.1 - openSUSE Leap 15.1 (x86_64): libldap-2_4-2-32bit-2.4.46-lp151.10.9.1 libldap-2_4-2-32bit-debuginfo-2.4.46-lp151.10.9.1 openldap2-devel-32bit-2.4.46-lp151.10.9.1 - openSUSE Leap 15.1 (noarch): libldap-data-2.4.46-lp151.10.9.1 openldap2-doc-2.4.46-lp151.10.9.1 References: https://www.suse.com/security/cve/CVE-2020-12243.html https://bugzilla.suse.com/1170771

1 0

openSUSE-SU-2020:0646-1: important: Security update for webkit2gtk3
by opensuse-security＠opensuse.org 11 May '20

11 May '20

openSUSE Security Update: Security update for webkit2gtk3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0646-1 Rating: important References: #1170643 Cross-References: CVE-2020-3899 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for webkit2gtk3 fixes the following issues: Security issue fixed: - CVE-2020-3899: Fixed a memory consumption issue that could have led to remote code execution (bsc#1170643). Non-security issues fixed: - Update to version 2.28.2 (bsc#1170643): + Fix excessive CPU usage due to GdkFrameClock not being stopped. + Fix UI process crash when EGL_WL_bind_wayland_display extension is not available. + Fix position of select popup menus in X11. + Fix playing of Youtube 'live stream'/H264 URLs. + Fix a crash under X11 when cairo uses xcb. + Fix several crashes and rendering issues. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-646=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libjavascriptcoregtk-4_0-18-2.28.2-lp151.2.18.1 libjavascriptcoregtk-4_0-18-debuginfo-2.28.2-lp151.2.18.1 libwebkit2gtk-4_0-37-2.28.2-lp151.2.18.1 libwebkit2gtk-4_0-37-debuginfo-2.28.2-lp151.2.18.1 typelib-1_0-JavaScriptCore-4_0-2.28.2-lp151.2.18.1 typelib-1_0-WebKit2-4_0-2.28.2-lp151.2.18.1 typelib-1_0-WebKit2WebExtension-4_0-2.28.2-lp151.2.18.1 webkit-jsc-4-2.28.2-lp151.2.18.1 webkit-jsc-4-debuginfo-2.28.2-lp151.2.18.1 webkit2gtk-4_0-injected-bundles-2.28.2-lp151.2.18.1 webkit2gtk-4_0-injected-bundles-debuginfo-2.28.2-lp151.2.18.1 webkit2gtk3-debugsource-2.28.2-lp151.2.18.1 webkit2gtk3-devel-2.28.2-lp151.2.18.1 webkit2gtk3-minibrowser-2.28.2-lp151.2.18.1 webkit2gtk3-minibrowser-debuginfo-2.28.2-lp151.2.18.1 - openSUSE Leap 15.1 (x86_64): libjavascriptcoregtk-4_0-18-32bit-2.28.2-lp151.2.18.1 libjavascriptcoregtk-4_0-18-32bit-debuginfo-2.28.2-lp151.2.18.1 libwebkit2gtk-4_0-37-32bit-2.28.2-lp151.2.18.1 libwebkit2gtk-4_0-37-32bit-debuginfo-2.28.2-lp151.2.18.1 - openSUSE Leap 15.1 (noarch): libwebkit2gtk3-lang-2.28.2-lp151.2.18.1 References: https://www.suse.com/security/cve/CVE-2020-3899.html https://bugzilla.suse.com/1170643

1 0

openSUSE-RU-2020:0619-1: moderate: Recommended update for 389-ds
by maintenance＠opensuse.org 07 May '20

07 May '20

openSUSE Recommended Update: Recommended update for 389-ds ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0619-1 Rating: moderate References: #1169364 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for 389-ds fixes the following issues: - Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will not exist in containers with systemd users. Update to version 1.4.2.12~git0.b11942c36: * Issue 50337 - Replace exec() with setattr() * Issue 50545 - the check for the ds version for the backend config was broken * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code * Ticket 51014 - slapi_pal.c possible static buffer overflow * Issue 50545 - remove dbmon "incr" option from arg parser * Issue 50545 - Port dbmon.sh to dsconf * Ticket 50905 - intermittent SSL hang with rhds * Issue 50952 - SSCA lacks basicConstraint:CA * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value Update to version 1.4.2.11~git0.aff1a2831: (bsc#1169364) * Issue 50994 - Fix latest UI bugs found by QE * Issue 50337 - Replace exec() with setattr() * Issue 50984 - Memory leaks in disk monitoring * Issue 50975 - Revise UI branding with new minimized build * Issue 49437 - Fix memory leak with indirect COS * Issue 50976 - Clean up Web UI source directory from unused files * Issue 50744 - -n option of dbverify does not work * Issue 50952- SSCA lacks basicConstraint:CA * Bump version to 1.4.2.10 * Issue 50966 - UI - Database indexes not using typeAhead correctly * Issue 50974 - UI - wrong title in "Delete Suffix" popup * Issue 50972 - Fix cockpit plugin build * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted * Issue 50963 - We should bundle *.min.js files of Console * Bump version to 1.4.2.9 * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory * Issue 50937 - Update CLI for new backend split configuration * Issue 50499 - Fix npm audit issues * Issue 50884 - Health check tool DSEldif check fails * Issue 50926 - Remove dual spinner and other UI fixes * Issue 49845 - Remove pkgconfig check for libasan * Issue 50758 - Only Recommend bash-completion, not Require * Issue 50928 - Unable to create a suffix with countryName * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code * Issue 50919 - Backend delete fails using dsconf * Issue 50872 - dsconf can't create GSSAPI replication agreements * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before * Ticket 50618 - support cgroupv2 * Ticket 50898 - ldclt core dumped when run with -e genldif option * Bump version to 1.4.2.8 * Issue 50855 - remove unused file from UI * Issue 50855 - UI: Port Server Tab to React * Issue 49845 - README does not contain complete information on building * Ticket - 49623-cont cenotaph errors on modrdn operations * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled * Issue 50886 - Typo in the replication debug message * Issue 50873 - Fix healthcheck and virtual attr check * Issue 50873 - Fix issues with healthcheck tool * Ticket 50857 - Memory leak in ACI using IP subject * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache * Issue 50850 - Fix dsctl healthcheck for python36 * Issue 49990 - Need to enforce a hard maximum limit for file descriptors * Bump version to 1.4.2.7 * Issue 49254 - Fix compiler failures and warnings * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown * Issue 50836 - Port Schema UI tab to React * Issue 50842 - Decrease 389-console Cockpit component size * Ticket 50790 - Add result text when filter is invalid * Issue 50834 - Incorrectly setting the NSS default SSL version max * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10 * Issue 50599 - Fix memory leak when removing db region files * Issue 49395 - Set the default TLS version min to TLS1.2 * Issue 50818 - dsconf pwdpolicy get error * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined" * Issue 50599 - Remove db region files prior to db recovery * Issue 50812 - dscontainer executable should be placed under /usr/libexec/dirsrv/ * Issue 50816 - dsconf allows the root password to be set to nothing * Issue 50798 - incorrect bytes in format string(fix import issue) - resolve a warning found in static analysis in OBS (upstream #51014) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-619=1 Package List: - openSUSE Leap 15.1 (x86_64): 389-ds-1.4.2.12~git0.b11942c36-lp151.5.6.1 389-ds-debuginfo-1.4.2.12~git0.b11942c36-lp151.5.6.1 389-ds-debugsource-1.4.2.12~git0.b11942c36-lp151.5.6.1 389-ds-devel-1.4.2.12~git0.b11942c36-lp151.5.6.1 389-ds-snmp-1.4.2.12~git0.b11942c36-lp151.5.6.1 389-ds-snmp-debuginfo-1.4.2.12~git0.b11942c36-lp151.5.6.1 lib389-1.4.2.12~git0.b11942c36-lp151.5.6.1 libsvrcore0-1.4.2.12~git0.b11942c36-lp151.5.6.1 libsvrcore0-debuginfo-1.4.2.12~git0.b11942c36-lp151.5.6.1 References: https://bugzilla.suse.com/1169364

1 0

openSUSE-RU-2020:0617-1: moderate: Recommended update for go1.12
by maintenance＠opensuse.org 06 May '20

06 May '20

openSUSE Recommended Update: Recommended update for go1.12 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0617-1 Rating: moderate References: #1141689 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for go1.12 fixes the following issues: - Fix for certificate validation in parsing. (bsc#1141689) - Fix for "fatal error: PowerRegisterSuspendResumeNotification failure" when running in Windows docker containers. (bsc#1141689) - Fixes for an issue on macOS 10.15 Catalina where the non-notarized installer and binaries were being rejected by Gatekeeper. (bsc#1141689) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-617=1 Package List: - openSUSE Leap 15.1 (x86_64): go1.12-1.12.17-lp151.2.29.1 go1.12-doc-1.12.17-lp151.2.29.1 go1.12-race-1.12.17-lp151.2.29.1 References: https://bugzilla.suse.com/1141689

1 0

openSUSE-RU-2020:0618-1: moderate: Recommended update for mailman
by maintenance＠opensuse.org 06 May '20

06 May '20

openSUSE Recommended Update: Recommended update for mailman ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0618-1 Rating: moderate References: #1167068 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for mailman fixes the following issues: - Fix rights and ownership on /var/lib/mailman/archives (boo#1167068) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-618=1 Package List: - openSUSE Leap 15.1 (x86_64): mailman-2.1.29-lp151.3.6.1 mailman-debuginfo-2.1.29-lp151.3.6.1 mailman-debugsource-2.1.29-lp151.3.6.1 References: https://bugzilla.suse.com/1167068

1 0

openSUSE-RU-2020:0616-1: moderate: Recommended update for azure-cli tools, python-adal, python-applicationinsights, python-azure modules, python-msrest, python-msrestazure, python-pydocumentdb, python-uamqp, python-vsts-cd-manager
by maintenance＠opensuse.org 06 May '20

06 May '20

openSUSE Recommended Update: Recommended update for azure-cli tools, python-adal, python-applicationinsights, python-azure modules, python-msrest, python-msrestazure, python-pydocumentdb, python-uamqp, python-vsts-cd-manager ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0616-1 Rating: moderate References: #1014478 #1054413 #1140565 #982804 #999200 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: This update for azure-cli tools, python-adal, python-applicationinsights, python-azure modules, python-msrest, python-msrestazure, python-pydocumentdb, python-uamqp, python-vsts-cd-manager fixes the following issues: The Azure python modules and client tool stack was updated to the 2020 state. Various other python modules were added and updated. - python-PyYAML was updated to 5.1.2. - python-humanfriendly was updated 4.16.1. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-616=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): python-PyYAML-debuginfo-5.1.2-lp151.2.9.1 python-PyYAML-debugsource-5.1.2-lp151.2.9.1 python2-PyYAML-5.1.2-lp151.2.9.1 python2-PyYAML-debuginfo-5.1.2-lp151.2.9.1 python3-PyYAML-5.1.2-lp151.2.9.1 python3-PyYAML-debuginfo-5.1.2-lp151.2.9.1 - openSUSE Leap 15.1 (noarch): azure-cli-2.0.45-lp151.2.3.1 azure-cli-acr-2.1.4-lp151.2.3.1 azure-cli-acs-2.3.2-lp151.2.3.1 azure-cli-advisor-0.6.0-lp151.2.3.1 azure-cli-ams-0.2.3-lp151.2.3.1 azure-cli-appservice-0.2.3-lp151.2.3.1 azure-cli-backup-1.2.1-lp151.2.3.1 azure-cli-batch-3.3.3-lp151.2.3.1 azure-cli-batchai-0.4.2-lp151.2.3.1 azure-cli-billing-0.2.0-lp151.2.3.1 azure-cli-cdn-0.1.1-lp151.2.3.1 azure-cli-cloud-2.1.0-lp151.2.3.1 azure-cli-cognitiveservices-0.2.1-lp151.2.3.1 azure-cli-command-modules-nspkg-2.0.1-lp151.3.3.1 azure-cli-component-2.0.7-lp151.3.3.1 azure-cli-configure-2.0.18-lp151.2.3.1 azure-cli-consumption-0.4.0-lp151.2.3.1 azure-cli-container-0.3.3-lp151.2.3.1 azure-cli-core-2.0.45-lp151.2.6.1 azure-cli-cosmosdb-0.2.1-lp151.2.3.1 azure-cli-dla-0.2.2-lp151.2.3.1 azure-cli-dls-0.1.1-lp151.2.3.1 azure-cli-dms-0.1.0-lp151.2.3.1 azure-cli-eventgrid-0.2.0-lp151.2.3.1 azure-cli-eventhubs-0.2.3-lp151.2.3.1 azure-cli-extension-0.2.1-lp151.2.3.1 azure-cli-feedback-2.1.4-lp151.2.3.1 azure-cli-find-0.2.12-lp151.2.3.1 azure-cli-interactive-0.3.28-lp151.2.6.1 azure-cli-iot-0.3.1-lp151.2.3.1 azure-cli-keyvault-2.2.2-lp151.2.3.1 azure-cli-lab-0.1.1-lp151.2.3.1 azure-cli-monitor-0.2.3-lp151.2.3.1 azure-cli-network-2.2.4-lp151.2.3.1 azure-cli-nspkg-3.0.2-lp151.2.3.1 azure-cli-profile-2.1.1-lp151.2.3.1 azure-cli-rdbms-0.3.1-lp151.2.3.1 azure-cli-redis-0.3.2-lp151.2.3.1 azure-cli-reservations-0.3.2-lp151.2.3.1 azure-cli-resource-2.1.3-lp151.2.3.1 azure-cli-role-2.1.4-lp151.2.3.1 azure-cli-search-0.1.1-lp151.2.3.1 azure-cli-servicebus-0.2.2-lp151.2.3.1 azure-cli-servicefabric-0.1.2-lp151.2.3.1 azure-cli-sql-2.1.3-lp151.2.3.1 azure-cli-storage-2.2.1-lp151.2.3.1 azure-cli-taskhelp-0.1.7-lp151.3.3.1 azure-cli-telemetry-1.0.0-lp151.2.3.1 azure-cli-vm-2.2.2-lp151.2.3.1 python-Whoosh-doc-2.7.4-lp151.3.3.1 python-azure-sdk-4.0.0-lp151.2.3.1 python2-Whoosh-2.7.4-lp151.3.3.1 python2-adal-1.0.2-lp151.3.3.1 python2-applicationinsights-0.11.6-lp151.2.3.1 python2-azure-applicationinsights-0.1.0-lp151.2.3.1 python2-azure-batch-5.0.0-lp151.2.3.1 python2-azure-cognitiveservices-language-luis-0.1.0-lp151.2.3.1 python2-azure-cognitiveservices-language-nspkg-2.0.0-lp151.4.3.1 python2-azure-cognitiveservices-language-spellcheck-1.0.0-lp151.2.3.1 python2-azure-cognitiveservices-language-textanalytics-0.1.0-lp151.2.3.1 python2-azure-cognitiveservices-nspkg-2.0.0-lp151.4.3.1 python2-azure-cognitiveservices-search-autosuggest-0.1.0-lp151.2.3.1 python2-azure-cognitiveservices-search-customsearch-0.1.0-lp151.2.3.1 python2-azure-cognitiveservices-search-entitysearch-1.0.0-lp151.2.3.1 python2-azure-cognitiveservices-search-imagesearch-1.0.0-lp151.2.3.1 python2-azure-cognitiveservices-search-newssearch-1.0.0-lp151.2.3.1 python2-azure-cognitiveservices-search-nspkg-2.0.0-lp151.4.3.1 python2-azure-cognitiveservices-search-videosearch-1.0.0-lp151.2.3.1 python2-azure-cognitiveservices-search-visualsearch-0.1.1-lp151.2.3.1 python2-azure-cognitiveservices-search-websearch-1.0.0-lp151.2.3.1 python2-azure-cognitiveservices-vision-computervision-0.2.0-lp151.2.3.1 python2-azure-cognitiveservices-vision-contentmoderator-0.1.0-lp151.2.3.1 python2-azure-cognitiveservices-vision-customvision-0.3.0-lp151.2.3.1 python2-azure-cognitiveservices-vision-nspkg-2.0.0-lp151.4.3.1 python2-azure-common-1.1.14-lp151.2.3.1 python2-azure-datalake-store-0.0.30-lp151.2.3.1 python2-azure-eventgrid-1.2.0-lp151.2.3.1 python2-azure-graphrbac-0.40.0-lp151.2.3.1 python2-azure-keyvault-1.1.0-lp151.2.3.1 python2-azure-loganalytics-0.1.0-lp151.2.3.1 python2-azure-mgmt-4.0.0-lp151.2.3.1 python2-azure-mgmt-advisor-1.0.1-lp151.2.3.1 python2-azure-mgmt-applicationinsights-0.1.1-lp151.2.3.1 python2-azure-mgmt-authorization-0.50.0-lp151.2.3.1 python2-azure-mgmt-batch-5.0.1-lp151.2.3.1 python2-azure-mgmt-batchai-2.0.0-lp151.2.3.1 python2-azure-mgmt-billing-0.2.0-lp151.2.3.1 python2-azure-mgmt-botservice-0.1.0-lp151.2.3.1 python2-azure-mgmt-cdn-3.0.0-lp151.2.3.1 python2-azure-mgmt-cognitiveservices-3.0.0-lp151.2.3.1 python2-azure-mgmt-commerce-1.0.1-lp151.2.3.1 python2-azure-mgmt-compute-4.6.2-lp151.2.4.2 python2-azure-mgmt-consumption-2.0.0-lp151.2.3.1 python2-azure-mgmt-containerinstance-1.0.0-lp151.2.3.1 python2-azure-mgmt-containerregistry-2.1.0-lp151.2.3.1 python2-azure-mgmt-containerservice-4.2.2-lp151.2.3.1 python2-azure-mgmt-cosmosdb-0.4.1-lp151.2.3.1 python2-azure-mgmt-datafactory-0.6.0-lp151.2.3.1 python2-azure-mgmt-datalake-analytics-0.6.0-lp151.2.3.1 python2-azure-mgmt-datalake-nspkg-2.0.0-lp151.4.3.1 python2-azure-mgmt-datalake-store-0.5.0-lp151.2.3.1 python2-azure-mgmt-datamigration-1.0.0-lp151.2.3.1 python2-azure-mgmt-devspaces-0.1.0-lp151.2.3.1 python2-azure-mgmt-devtestlabs-2.2.0-lp151.2.3.1 python2-azure-mgmt-dns-2.0.0-lp151.2.3.1 python2-azure-mgmt-documentdb-0.1.3-lp151.4.3.1 python2-azure-mgmt-eventgrid-2.0.0rc1-lp151.2.3.1 python2-azure-mgmt-eventhub-2.1.0-lp151.2.3.1 python2-azure-mgmt-hanaonazure-0.2.1-lp151.2.3.1 python2-azure-mgmt-hdinsight-0.1.0-lp151.2.3.1 python2-azure-mgmt-iotcentral-0.2.0-lp151.2.3.1 python2-azure-mgmt-iothub-0.6.0-lp151.2.3.1 python2-azure-mgmt-iothubprovisioningservices-0.2.0-lp151.2.3.1 python2-azure-mgmt-keyvault-1.1.0-lp151.2.3.1 python2-azure-mgmt-kusto-0.1.0-lp151.2.3.1 python2-azure-mgmt-loganalytics-0.2.0-lp151.2.3.1 python2-azure-mgmt-logic-3.0.0-lp151.2.3.1 python2-azure-mgmt-machinelearningcompute-0.4.1-lp151.2.3.1 python2-azure-mgmt-managementgroups-0.1.0-lp151.2.3.1 python2-azure-mgmt-managementpartner-0.1.0-lp151.2.3.1 python2-azure-mgmt-maps-0.1.0-lp151.2.3.1 python2-azure-mgmt-marketplaceordering-0.1.0-lp151.2.3.1 python2-azure-mgmt-media-1.0.0rc2-lp151.2.3.1 python2-azure-mgmt-monitor-0.5.2-lp151.2.3.1 python2-azure-mgmt-msi-0.2.0-lp151.2.3.1 python2-azure-mgmt-network-2.1.0-lp151.2.3.1 python2-azure-mgmt-notificationhubs-2.0.0-lp151.2.3.1 python2-azure-mgmt-nspkg-2.0.0-lp151.4.3.1 python2-azure-mgmt-policyinsights-0.1.0-lp151.2.3.1 python2-azure-mgmt-powerbiembedded-2.0.0-lp151.2.3.1 python2-azure-mgmt-rdbms-1.2.0-lp151.2.3.1 python2-azure-mgmt-recoveryservices-0.3.0-lp151.2.3.1 python2-azure-mgmt-recoveryservicesbackup-0.3.0-lp151.2.3.1 python2-azure-mgmt-redis-5.0.0-lp151.2.3.1 python2-azure-mgmt-relay-0.1.0-lp151.2.3.1 python2-azure-mgmt-reservations-0.3.0-lp151.2.3.1 python2-azure-mgmt-resource-2.0.0-lp151.2.3.1 python2-azure-mgmt-scheduler-2.0.0-lp151.2.3.1 python2-azure-mgmt-search-2.0.0-lp151.2.3.1 python2-azure-mgmt-servermanager-2.0.0-lp151.2.3.1 python2-azure-mgmt-servicebus-0.5.1-lp151.2.3.1 python2-azure-mgmt-servicefabric-0.2.0-lp151.2.3.1 python2-azure-mgmt-signalr-0.1.0-lp151.2.3.1 python2-azure-mgmt-sql-0.9.1-lp151.2.3.2 python2-azure-mgmt-storage-2.0.0-lp151.2.3.2 python2-azure-mgmt-subscription-0.2.0-lp151.2.3.1 python2-azure-mgmt-trafficmanager-0.50.0-lp151.2.3.1 python2-azure-mgmt-web-0.40.0-lp151.2.3.2 python2-azure-monitor-0.3.0-lp151.5.3.1 python2-azure-multiapi-storage-0.2.2-lp151.2.3.1 python2-azure-nspkg-2.0.0-lp151.4.3.1 python2-azure-servicebus-0.21.1-lp151.5.3.1 python2-azure-servicefabric-6.3.0.0-lp151.2.3.1 python2-azure-servicemanagement-legacy-0.20.6-lp151.5.3.1 python2-azure-storage-blob-1.3.1-lp151.2.3.1 python2-azure-storage-common-1.3.0-lp151.2.3.1 python2-azure-storage-file-1.3.1-lp151.2.3.1 python2-azure-storage-nspkg-3.0.0-lp151.2.3.1 python2-azure-storage-queue-1.3.0-lp151.2.3.1 python2-capturer-2.4-lp151.2.3.1 python2-coloredlogs-10.0-lp151.2.3.1 python2-humanfriendly-4.16.1-lp151.2.3.1 python2-humanfriendly-test-4.16.1-lp151.2.3.1 python2-knack-0.4.3-lp151.2.3.1 python2-msrest-0.5.5-lp151.2.3.1 python2-msrestazure-0.5.0-lp151.2.3.1 python2-pydocumentdb-2.3.2-lp151.2.3.1 python2-sshtunnel-0.1.4-lp151.2.3.1 python2-verboselogs-1.7-lp151.2.3.1 python2-websocket-client-0.44.0-lp151.4.3.1 python3-Whoosh-2.7.4-lp151.3.3.1 python3-adal-1.0.2-lp151.3.3.1 python3-applicationinsights-0.11.6-lp151.2.3.1 python3-azure-applicationinsights-0.1.0-lp151.2.3.1 python3-azure-batch-5.0.0-lp151.2.3.1 python3-azure-cognitiveservices-language-luis-0.1.0-lp151.2.3.1 python3-azure-cognitiveservices-language-nspkg-2.0.0-lp151.4.3.1 python3-azure-cognitiveservices-language-spellcheck-1.0.0-lp151.2.3.1 python3-azure-cognitiveservices-language-textanalytics-0.1.0-lp151.2.3.1 python3-azure-cognitiveservices-nspkg-2.0.0-lp151.4.3.1 python3-azure-cognitiveservices-search-autosuggest-0.1.0-lp151.2.3.1 python3-azure-cognitiveservices-search-customsearch-0.1.0-lp151.2.3.1 python3-azure-cognitiveservices-search-entitysearch-1.0.0-lp151.2.3.1 python3-azure-cognitiveservices-search-imagesearch-1.0.0-lp151.2.3.1 python3-azure-cognitiveservices-search-newssearch-1.0.0-lp151.2.3.1 python3-azure-cognitiveservices-search-nspkg-2.0.0-lp151.4.3.1 python3-azure-cognitiveservices-search-videosearch-1.0.0-lp151.2.3.1 python3-azure-cognitiveservices-search-visualsearch-0.1.1-lp151.2.3.1 python3-azure-cognitiveservices-search-websearch-1.0.0-lp151.2.3.1 python3-azure-cognitiveservices-vision-computervision-0.2.0-lp151.2.3.1 python3-azure-cognitiveservices-vision-contentmoderator-0.1.0-lp151.2.3.1 python3-azure-cognitiveservices-vision-customvision-0.3.0-lp151.2.3.1 python3-azure-cognitiveservices-vision-nspkg-2.0.0-lp151.4.3.1 python3-azure-common-1.1.14-lp151.2.3.1 python3-azure-datalake-store-0.0.30-lp151.2.3.1 python3-azure-eventgrid-1.2.0-lp151.2.3.1 python3-azure-graphrbac-0.40.0-lp151.2.3.1 python3-azure-keyvault-1.1.0-lp151.2.3.1 python3-azure-loganalytics-0.1.0-lp151.2.3.1 python3-azure-mgmt-4.0.0-lp151.2.3.1 python3-azure-mgmt-advisor-1.0.1-lp151.2.3.1 python3-azure-mgmt-applicationinsights-0.1.1-lp151.2.3.1 python3-azure-mgmt-authorization-0.50.0-lp151.2.3.1 python3-azure-mgmt-batch-5.0.1-lp151.2.3.1 python3-azure-mgmt-batchai-2.0.0-lp151.2.3.1 python3-azure-mgmt-billing-0.2.0-lp151.2.3.1 python3-azure-mgmt-botservice-0.1.0-lp151.2.3.1 python3-azure-mgmt-cdn-3.0.0-lp151.2.3.1 python3-azure-mgmt-cognitiveservices-3.0.0-lp151.2.3.1 python3-azure-mgmt-commerce-1.0.1-lp151.2.3.1 python3-azure-mgmt-compute-4.6.2-lp151.2.4.2 python3-azure-mgmt-consumption-2.0.0-lp151.2.3.1 python3-azure-mgmt-containerinstance-1.0.0-lp151.2.3.1 python3-azure-mgmt-containerregistry-2.1.0-lp151.2.3.1 python3-azure-mgmt-containerservice-4.2.2-lp151.2.3.1 python3-azure-mgmt-cosmosdb-0.4.1-lp151.2.3.1 python3-azure-mgmt-datafactory-0.6.0-lp151.2.3.1 python3-azure-mgmt-datalake-analytics-0.6.0-lp151.2.3.1 python3-azure-mgmt-datalake-nspkg-2.0.0-lp151.4.3.1 python3-azure-mgmt-datalake-store-0.5.0-lp151.2.3.1 python3-azure-mgmt-datamigration-1.0.0-lp151.2.3.1 python3-azure-mgmt-devspaces-0.1.0-lp151.2.3.1 python3-azure-mgmt-devtestlabs-2.2.0-lp151.2.3.1 python3-azure-mgmt-dns-2.0.0-lp151.2.3.1 python3-azure-mgmt-documentdb-0.1.3-lp151.4.3.1 python3-azure-mgmt-eventgrid-2.0.0rc1-lp151.2.3.1 python3-azure-mgmt-eventhub-2.1.0-lp151.2.3.1 python3-azure-mgmt-hanaonazure-0.2.1-lp151.2.3.1 python3-azure-mgmt-hdinsight-0.1.0-lp151.2.3.1 python3-azure-mgmt-iotcentral-0.2.0-lp151.2.3.1 python3-azure-mgmt-iothub-0.6.0-lp151.2.3.1 python3-azure-mgmt-iothubprovisioningservices-0.2.0-lp151.2.3.1 python3-azure-mgmt-keyvault-1.1.0-lp151.2.3.1 python3-azure-mgmt-kusto-0.1.0-lp151.2.3.1 python3-azure-mgmt-loganalytics-0.2.0-lp151.2.3.1 python3-azure-mgmt-logic-3.0.0-lp151.2.3.1 python3-azure-mgmt-machinelearningcompute-0.4.1-lp151.2.3.1 python3-azure-mgmt-managementgroups-0.1.0-lp151.2.3.1 python3-azure-mgmt-managementpartner-0.1.0-lp151.2.3.1 python3-azure-mgmt-maps-0.1.0-lp151.2.3.1 python3-azure-mgmt-marketplaceordering-0.1.0-lp151.2.3.1 python3-azure-mgmt-media-1.0.0rc2-lp151.2.3.1 python3-azure-mgmt-monitor-0.5.2-lp151.2.3.1 python3-azure-mgmt-msi-0.2.0-lp151.2.3.1 python3-azure-mgmt-network-2.1.0-lp151.2.3.1 python3-azure-mgmt-notificationhubs-2.0.0-lp151.2.3.1 python3-azure-mgmt-nspkg-2.0.0-lp151.4.3.1 python3-azure-mgmt-policyinsights-0.1.0-lp151.2.3.1 python3-azure-mgmt-powerbiembedded-2.0.0-lp151.2.3.1 python3-azure-mgmt-rdbms-1.2.0-lp151.2.3.1 python3-azure-mgmt-recoveryservices-0.3.0-lp151.2.3.1 python3-azure-mgmt-recoveryservicesbackup-0.3.0-lp151.2.3.1 python3-azure-mgmt-redis-5.0.0-lp151.2.3.1 python3-azure-mgmt-relay-0.1.0-lp151.2.3.1 python3-azure-mgmt-reservations-0.3.0-lp151.2.3.1 python3-azure-mgmt-resource-2.0.0-lp151.2.3.1 python3-azure-mgmt-scheduler-2.0.0-lp151.2.3.1 python3-azure-mgmt-search-2.0.0-lp151.2.3.1 python3-azure-mgmt-servermanager-2.0.0-lp151.2.3.1 python3-azure-mgmt-servicebus-0.5.1-lp151.2.3.1 python3-azure-mgmt-servicefabric-0.2.0-lp151.2.3.1 python3-azure-mgmt-signalr-0.1.0-lp151.2.3.1 python3-azure-mgmt-sql-0.9.1-lp151.2.3.2 python3-azure-mgmt-storage-2.0.0-lp151.2.3.2 python3-azure-mgmt-subscription-0.2.0-lp151.2.3.1 python3-azure-mgmt-trafficmanager-0.50.0-lp151.2.3.1 python3-azure-mgmt-web-0.40.0-lp151.2.3.2 python3-azure-monitor-0.3.0-lp151.5.3.1 python3-azure-multiapi-storage-0.2.2-lp151.2.3.1 python3-azure-nspkg-2.0.0-lp151.4.3.1 python3-azure-sdk-4.0.0-lp151.2.3.1 python3-azure-servicebus-0.21.1-lp151.5.3.1 python3-azure-servicefabric-6.3.0.0-lp151.2.3.1 python3-azure-servicemanagement-legacy-0.20.6-lp151.5.3.1 python3-azure-storage-blob-1.3.1-lp151.2.3.1 python3-azure-storage-common-1.3.0-lp151.2.3.1 python3-azure-storage-file-1.3.1-lp151.2.3.1 python3-azure-storage-nspkg-3.0.0-lp151.2.3.1 python3-azure-storage-queue-1.3.0-lp151.2.3.1 python3-capturer-2.4-lp151.2.3.1 python3-coloredlogs-10.0-lp151.2.3.1 python3-humanfriendly-4.16.1-lp151.2.3.1 python3-humanfriendly-test-4.16.1-lp151.2.3.1 python3-knack-0.4.3-lp151.2.3.1 python3-msrest-0.5.5-lp151.2.3.1 python3-msrestazure-0.5.0-lp151.2.3.1 python3-pydocumentdb-2.3.2-lp151.2.3.1 python3-sshtunnel-0.1.4-lp151.2.3.1 python3-verboselogs-1.7-lp151.2.3.1 python3-websocket-client-0.44.0-lp151.4.3.1 References: https://bugzilla.suse.com/1014478 https://bugzilla.suse.com/1054413 https://bugzilla.suse.com/1140565 https://bugzilla.suse.com/982804 https://bugzilla.suse.com/999200

1 0

openSUSE-SU-2020:0615-1: important: Security update for chromium
by opensuse-security＠opensuse.org 06 May '20

06 May '20

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0615-1 Rating: important References: #1170107 Cross-References: CVE-2020-0561 CVE-2020-6458 CVE-2020-6459 CVE-2020-6460 CVE-2020-6462 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for chromium fixes the following issues: Chromium was updated to 81.0.4044.129 (boo#1170107): - CVE-2020-0561: Fixed a use after free in storage - CVE-2020-6462: Fixed a use after free in task scheduling - CVE-2020-6459: Fixed a use after free in payments - CVE-2020-6460: Fixed an insufficient data validation in URL formatting - CVE-2020-6458: Fixed an out of bounds read and write in PDFium This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-615=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 x86_64): chromedriver-81.0.4044.129-bp151.3.79.1 chromium-81.0.4044.129-bp151.3.79.1 References: https://www.suse.com/security/cve/CVE-2020-0561.html https://www.suse.com/security/cve/CVE-2020-6458.html https://www.suse.com/security/cve/CVE-2020-6459.html https://www.suse.com/security/cve/CVE-2020-6460.html https://www.suse.com/security/cve/CVE-2020-6462.html https://bugzilla.suse.com/1170107

1 0

openSUSE-RU-2020:0614-1: Recommended update for python-pytest
by maintenance＠opensuse.org 06 May '20

06 May '20

openSUSE Recommended Update: Recommended update for python-pytest ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0614-1 Rating: low References: #1002895 #1107105 #1138666 #1167732 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update fixes the following issues: New python-pytest versions are provided. In Basesystem: - python3-pexpect: updated to 4.8.0 - python3-py: updated to 1.8.1 - python3-zipp: shipped as dependency in version 0.6.0 In Python2: - python2-pexpect: updated to 4.8.0 - python2-py: updated to 1.8.1 This update was imported from the SUSE:SLE-15-SP1:Update update project. This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-614=1 Package List: - openSUSE Backports SLE-15-SP1 (noarch): python2-filelock-3.0.12-bp151.2.3.1 python2-pytest-3.10.1-bp151.2.3.1 python2-pytest-isort-0.3.1-bp151.2.3.1 python2-pytest-localserver-0.5.0-bp151.2.3.1 python2-wcwidth-0.1.8-bp151.4.3.1 python3-filelock-3.0.12-bp151.2.3.1 python3-pytest-3.10.1-bp151.2.3.1 python3-pytest-isort-0.3.1-bp151.2.3.1 python3-pytest-localserver-0.5.0-bp151.2.3.1 python3-wcwidth-0.1.8-bp151.4.3.1 References: https://bugzilla.suse.com/1002895 https://bugzilla.suse.com/1107105 https://bugzilla.suse.com/1138666 https://bugzilla.suse.com/1167732

1 0

openSUSE-RU-2020:0613-1: Recommended update for python-pytest
by maintenance＠opensuse.org 05 May '20

05 May '20

openSUSE Recommended Update: Recommended update for python-pytest ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0613-1 Rating: low References: #1002895 #1107105 #1138666 #1167732 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update fixes the following issues: New python-pytest versions are provided. In Basesystem: - python3-pexpect: updated to 4.8.0 - python3-py: updated to 1.8.1 - python3-zipp: shipped as dependency in version 0.6.0 In Python2: - python2-pexpect: updated to 4.8.0 - python2-py: updated to 1.8.1 This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-613=1 Package List: - openSUSE Leap 15.1 (noarch): python-contextlib2-0.5.5-lp151.3.2.1 python2-SecretStorage-2.3.1-lp151.4.2.1 python2-apipkg-1.4-lp151.3.2.1 python2-cov-core-1.15.0-lp151.3.2.1 python2-execnet-1.7.1-lp151.3.3.1 python2-fields-5.0.0-lp151.2.1 python2-filelock-3.0.12-lp151.2.3.1 python2-importlib-metadata-1.5.0-lp151.2.1 python2-importlib_resources-1.0.2-lp151.2.1 python2-keyring-10.5.0-lp151.4.2.1 python2-more-itertools-4.2.0-lp151.2.3.1 python2-pexpect-4.8.0-lp151.3.3.1 python2-pluggy-0.13.1-lp151.2.3.1 python2-process-tests-1.2.2-lp151.3.2.1 python2-py-1.8.1-lp151.3.3.1 python2-pyfakefs-3.4.3-lp151.2.2.1 python2-pygments-ansi-color-0.0.3-lp151.2.1 python2-pygments-pytest-1.3.1-lp151.2.1 python2-pytest-3.10.1-lp151.3.3.1 python2-pytest-cov-2.8.1-lp151.3.3.1 python2-pytest-expect-1.1.0-lp151.3.3.1 python2-pytest-forked-1.1.3-lp151.3.3.1 python2-pytest-httpbin-1.0.0-lp151.3.3.3 python2-pytest-isort-0.3.1-lp151.2.3.1 python2-pytest-localserver-0.5.0-lp151.3.3.1 python2-pytest-mock-2.0.0-lp151.4.3.1 python2-pytest-relaxed-1.1.5-lp151.3.3.3 python2-pytest-xdist-1.27.0-lp151.3.3.4 python2-pytest4-4.6.9-lp151.2.1 python2-pyxdg-0.25-lp151.3.2.1 python2-wcwidth-0.1.8-lp151.3.3.1 python2-wheel-0.32.3-lp151.2.5.1 python2-zipp-0.6.0-lp151.2.1 python3-SecretStorage-2.3.1-lp151.4.2.1 python3-apipkg-1.4-lp151.3.2.1 python3-cov-core-1.15.0-lp151.3.2.1 python3-elementpath-1.4.1-lp151.2.1 python3-execnet-1.7.1-lp151.3.3.1 python3-fields-5.0.0-lp151.2.1 python3-filelock-3.0.12-lp151.2.3.1 python3-importlib-metadata-1.5.0-lp151.2.1 python3-importlib_resources-1.0.2-lp151.2.1 python3-keyring-10.5.0-lp151.4.2.1 python3-more-itertools-4.2.0-lp151.2.3.1 python3-pexpect-4.8.0-lp151.3.3.1 python3-pluggy-0.13.1-lp151.2.3.1 python3-process-tests-1.2.2-lp151.3.2.1 python3-py-1.8.1-lp151.3.3.1 python3-pyfakefs-3.4.3-lp151.2.2.1 python3-pygments-ansi-color-0.0.3-lp151.2.1 python3-pygments-pytest-1.3.1-lp151.2.1 python3-pytest-3.10.1-lp151.3.3.1 python3-pytest-cov-2.8.1-lp151.3.3.1 python3-pytest-expect-1.1.0-lp151.3.3.1 python3-pytest-forked-1.1.3-lp151.3.3.1 python3-pytest-httpbin-1.0.0-lp151.3.3.3 python3-pytest-isort-0.3.1-lp151.2.3.1 python3-pytest-localserver-0.5.0-lp151.3.3.1 python3-pytest-mock-2.0.0-lp151.4.3.1 python3-pytest-relaxed-1.1.5-lp151.3.3.3 python3-pytest-xdist-1.27.0-lp151.3.3.4 python3-pytest4-4.6.9-lp151.2.1 python3-pytest5-5.3.5-lp151.2.1 python3-pyxdg-0.25-lp151.3.2.1 python3-wcwidth-0.1.8-lp151.3.3.1 python3-wheel-0.32.3-lp151.2.5.1 python3-xmlschema-1.1.1-lp151.2.1 python3-zipp-0.6.0-lp151.2.1 References: https://bugzilla.suse.com/1002895 https://bugzilla.suse.com/1107105 https://bugzilla.suse.com/1138666 https://bugzilla.suse.com/1167732

1 0

openSUSE-SU-2020:0612-1: important: Security update for sqliteodbc
by opensuse-security＠opensuse.org 05 May '20

05 May '20

openSUSE Security Update: Security update for sqliteodbc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0612-1 Rating: important References: #1171041 Cross-References: CVE-2020-12050 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for sqliteodbc fixes the following issues: Security issue fixed: - CVE-2020-12050: Fixed a privilege escalation vulnerability (boo#1171041). Non-security issues fixed: - Update to version 0.9996 * update to SQLite 3.22.0 * fixes in handling DDL in SQLExecDirect() et.al., thanks Andre Mikulec for testing * cleanup utf8/unicode conversion functions Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-612=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): sqliteodbc-0.9996-bp151.4.3.1 sqliteodbc-doc-0.9996-bp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2020-12050.html https://bugzilla.suse.com/1171041

1 0

openSUSE-RU-2020:0611-1: moderate: Recommended update for sar2
by maintenance＠opensuse.org 05 May '20

05 May '20

openSUSE Recommended Update: Recommended update for sar2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0611-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for sar2 fixes the following issues: Update to version 2.4.0: * Improvements to the Joystick system, adding new Rudder+Brakes mode, moving to libSDL2 and cleaning up unused menu settings. * Fix lagging when aircraft is landed. * Honor wheel brake coefficient. This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-611=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): sar2-2.4.0-bp151.4.3.1 - openSUSE Backports SLE-15-SP1 (noarch): sar2-data-2.4.0-bp151.4.3.1 References:

1 0

openSUSE-RU-2020:0610-1: moderate: Recommended update for inxi
by maintenance＠opensuse.org 05 May '20

05 May '20

openSUSE Recommended Update: Recommended update for inxi ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0610-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for inxi fixes the following issues: inxi was update to version 3.1.00: * See /usr/share/doc/packages/inxi/inxi.changelog This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-610=1 Package List: - openSUSE Backports SLE-15-SP1 (noarch): inxi-3.1.00-bp151.4.6.1 References:

1 0

openSUSE-SU-2020:0609-1: Security update for python-typed-ast
by opensuse-security＠opensuse.org 04 May '20

04 May '20

openSUSE Security Update: Security update for python-typed-ast ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0609-1 Rating: low References: #1161562 #1161563 #1163532 Cross-References: CVE-2019-19274 CVE-2019-19275 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for python-typed-ast fixes the following issues: python-typed-ast was reverted to version 1.3.1 because it broke another package (bsc#1163532). Security issues fixed: - CVE-2019-19274: Fixed an out-of-bounds read (bsc#1161562). - CVE-2019-19275: Fixed an out-of-bounds read (bsc#1161563). This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-609=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): python3-typed-ast-1.3.1-bp151.2.6.1 References: https://www.suse.com/security/cve/CVE-2019-19274.html https://www.suse.com/security/cve/CVE-2019-19275.html https://bugzilla.suse.com/1161562 https://bugzilla.suse.com/1161563 https://bugzilla.suse.com/1163532

1 0

openSUSE-RU-2020:0608-1: moderate: Recommended update for mozilla-nss
by maintenance＠opensuse.org 04 May '20

04 May '20

openSUSE Recommended Update: Recommended update for mozilla-nss ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0608-1 Rating: moderate References: #1170571 #1170572 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for mozilla-nss fixes the following issues: - FIPS: Add Softoken POSTs for new DSA and ECDSA hash-and-sign update functions. (bsc#1170571) - FIPS: Add pairwise consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224 checks. - FIPS: Replace bad attempt at unconditional nssdbm checksumming with a dlopen(), so it can be located consistently and perform its own self-tests. - FIPS: This fixes an instance of inverted logic due to a boolean being mistaken for a SECStatus, which caused key derivation to fail when the caller provided a valid subprime. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-608=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libfreebl3-3.47.1-lp151.2.16.1 libfreebl3-debuginfo-3.47.1-lp151.2.16.1 libfreebl3-hmac-3.47.1-lp151.2.16.1 libsoftokn3-3.47.1-lp151.2.16.1 libsoftokn3-debuginfo-3.47.1-lp151.2.16.1 libsoftokn3-hmac-3.47.1-lp151.2.16.1 mozilla-nss-3.47.1-lp151.2.16.1 mozilla-nss-certs-3.47.1-lp151.2.16.1 mozilla-nss-certs-debuginfo-3.47.1-lp151.2.16.1 mozilla-nss-debuginfo-3.47.1-lp151.2.16.1 mozilla-nss-debugsource-3.47.1-lp151.2.16.1 mozilla-nss-devel-3.47.1-lp151.2.16.1 mozilla-nss-sysinit-3.47.1-lp151.2.16.1 mozilla-nss-sysinit-debuginfo-3.47.1-lp151.2.16.1 mozilla-nss-tools-3.47.1-lp151.2.16.1 mozilla-nss-tools-debuginfo-3.47.1-lp151.2.16.1 - openSUSE Leap 15.1 (x86_64): libfreebl3-32bit-3.47.1-lp151.2.16.1 libfreebl3-32bit-debuginfo-3.47.1-lp151.2.16.1 libfreebl3-hmac-32bit-3.47.1-lp151.2.16.1 libsoftokn3-32bit-3.47.1-lp151.2.16.1 libsoftokn3-32bit-debuginfo-3.47.1-lp151.2.16.1 libsoftokn3-hmac-32bit-3.47.1-lp151.2.16.1 mozilla-nss-32bit-3.47.1-lp151.2.16.1 mozilla-nss-32bit-debuginfo-3.47.1-lp151.2.16.1 mozilla-nss-certs-32bit-3.47.1-lp151.2.16.1 mozilla-nss-certs-32bit-debuginfo-3.47.1-lp151.2.16.1 mozilla-nss-sysinit-32bit-3.47.1-lp151.2.16.1 mozilla-nss-sysinit-32bit-debuginfo-3.47.1-lp151.2.16.1 References: https://bugzilla.suse.com/1170571 https://bugzilla.suse.com/1170572

1 0

openSUSE-SU-2020:0607-1: moderate: Security update for bouncycastle
by opensuse-security＠opensuse.org 03 May '20

03 May '20

openSUSE Security Update: Security update for bouncycastle ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0607-1 Rating: moderate References: #1072697 #1100694 Cross-References: CVE-2017-13098 CVE-2018-1000613 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for bouncycastle fixes the following issues: Version update to 1.60: * CVE-2018-1000613: Use of Externally-ControlledInput to Select Classes or Code (boo#1100694) * Release notes: http://www.bouncycastle.org/releasenotes.html Version update to 1.59: * CVE-2017-13098: Fix against Bleichenbacher oracle when not using the lightweight APIs (boo#1072697). * Release notes: http://www.bouncycastle.org/releasenotes.html Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-607=1 Package List: - openSUSE Leap 15.1 (noarch): bouncycastle-1.60-lp151.3.3.1 bouncycastle-javadoc-1.60-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2017-13098.html https://www.suse.com/security/cve/CVE-2018-1000613.html https://bugzilla.suse.com/1072697 https://bugzilla.suse.com/1100694

1 0

openSUSE-SU-2020:0606-1: moderate: Security update for squid
by opensuse-security＠opensuse.org 03 May '20

03 May '20

openSUSE Security Update: Security update for squid ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0606-1 Rating: moderate References: #1162687 #1162689 #1162691 Cross-References: CVE-2019-12528 CVE-2020-8449 CVE-2020-8450 CVE-2020-8517 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for squid to version 4.10 fixes the following issues: Security issues fixed: - CVE-2019-12528: Fixed an information disclosure flaw in the FTP gateway (bsc#1162689). - CVE-2020-8449: Fixed a buffer overflow when squid is acting as reverse-proxy (bsc#1162687). - CVE-2020-8450: Fixed a buffer overflow when squid is acting as reverse-proxy (bsc#1162687). - CVE-2020-8517: Fixed a buffer overflow in ext_lm_group_acl when processing NTLM Authentication credentials (bsc#1162691). Non-security issue fixed: - Improved cache handling with chunked responses. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-606=1 Package List: - openSUSE Leap 15.1 (x86_64): squid-4.10-lp151.2.14.1 squid-debuginfo-4.10-lp151.2.14.1 squid-debugsource-4.10-lp151.2.14.1 References: https://www.suse.com/security/cve/CVE-2019-12528.html https://www.suse.com/security/cve/CVE-2020-8449.html https://www.suse.com/security/cve/CVE-2020-8450.html https://www.suse.com/security/cve/CVE-2020-8517.html https://bugzilla.suse.com/1162687 https://bugzilla.suse.com/1162689 https://bugzilla.suse.com/1162691

1 0

openSUSE-RU-2020:0605-1: moderate: Recommended update for yast2-configuration-management
by maintenance＠opensuse.org 03 May '20

03 May '20

openSUSE Recommended Update: Recommended update for yast2-configuration-management ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0605-1 Rating: moderate References: #1168080 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-configuration-management fixes the following issues: - Fixes an issue where yast2-configuration-management complained about missing formulas even if there are other valid salt states available (bsc#1168080) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-605=1 Package List: - openSUSE Leap 15.1 (noarch): yast2-configuration-management-4.1.8-lp151.2.7.1 References: https://bugzilla.suse.com/1168080

1 0

openSUSE-SU-2020:0604-1: important: Security update for chromium
by opensuse-security＠opensuse.org 03 May '20

03 May '20

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0604-1 Rating: important References: #1170107 Cross-References: CVE-2020-0561 CVE-2020-6458 CVE-2020-6459 CVE-2020-6460 CVE-2020-6462 Affected Products: openSUSE Leap 15.1 openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for chromium fixes the following issues: Chromium was updated to 81.0.4044.129 (boo#1170107): - CVE-2020-0561: Fixed a use after free in storage - CVE-2020-6462: Fixed a use after free in task scheduling - CVE-2020-6459: Fixed a use after free in payments - CVE-2020-6460: Fixed an insufficient data validation in URL formatting - CVE-2020-6458: Fixed an out of bounds read and write in PDFium Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-604=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-604=1 Package List: - openSUSE Leap 15.1 (x86_64): chromedriver-81.0.4044.129-lp151.2.85.1 chromedriver-debuginfo-81.0.4044.129-lp151.2.85.1 chromium-81.0.4044.129-lp151.2.85.1 chromium-debuginfo-81.0.4044.129-lp151.2.85.1 chromium-debugsource-81.0.4044.129-lp151.2.85.1 - openSUSE Backports SLE-15-SP1 (x86_64): chromedriver-81.0.4044.129-bp151.3.75.1 chromedriver-debuginfo-81.0.4044.129-bp151.3.75.1 chromium-81.0.4044.129-bp151.3.75.1 chromium-debuginfo-81.0.4044.129-bp151.3.75.1 chromium-debugsource-81.0.4044.129-bp151.3.75.1 References: https://www.suse.com/security/cve/CVE-2020-0561.html https://www.suse.com/security/cve/CVE-2020-6458.html https://www.suse.com/security/cve/CVE-2020-6459.html https://www.suse.com/security/cve/CVE-2020-6460.html https://www.suse.com/security/cve/CVE-2020-6462.html https://bugzilla.suse.com/1170107

1 0

openSUSE-RU-2020:0603-1: moderate: Recommended update for tpm2.0-abrmd
by maintenance＠opensuse.org 02 May '20

02 May '20

openSUSE Recommended Update: Recommended update for tpm2.0-abrmd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0603-1 Rating: moderate References: #1166936 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for tpm2.0-abrmd fixes the following issue: - Solve a tpm2-tss-engine crash. (bsc#1166936) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-603=1 Package List: - openSUSE Leap 15.1 (x86_64): libtss2-tcti-tabrmd0-2.0.2-lp151.4.6.1 libtss2-tcti-tabrmd0-debuginfo-2.0.2-lp151.4.6.1 tpm2.0-abrmd-2.0.2-lp151.4.6.1 tpm2.0-abrmd-debuginfo-2.0.2-lp151.4.6.1 tpm2.0-abrmd-debugsource-2.0.2-lp151.4.6.1 tpm2.0-abrmd-devel-2.0.2-lp151.4.6.1 References: https://bugzilla.suse.com/1166936

1 0

openSUSE-SU-2020:0602-1: important: Security update for webkit2gtk3
by opensuse-security＠opensuse.org 02 May '20

02 May '20

openSUSE Security Update: Security update for webkit2gtk3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0602-1 Rating: important References: #1165528 #1169658 Cross-References: CVE-2020-10018 CVE-2020-11793 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for webkit2gtk3 to version 2.28.1 fixes the following issues: Security issues fixed: - CVE-2020-10018: Fixed a denial of service because the m_deferredFocusedNodeChange data structure was mishandled (bsc#1165528). - CVE-2020-11793: Fixed a potential arbitrary code execution caused by a use-after-free vulnerability (bsc#1169658). Non-security issues fixed: - Add API to enable Process Swap on (Cross-site) Navigation. - Add user messages API for the communication with the web extension. - Add support for same-site cookies. - Service workers are enabled by default. - Add support for Pointer Lock API. - Add flatpak sandbox support. - Make ondemand hardware acceleration policy never leave accelerated compositing mode. - Always use a light theme for rendering form controls. - Add about:gpu to show information about the graphics stack. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-602=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libjavascriptcoregtk-4_0-18-2.28.1-lp151.2.15.2 libjavascriptcoregtk-4_0-18-debuginfo-2.28.1-lp151.2.15.2 libwebkit2gtk-4_0-37-2.28.1-lp151.2.15.2 libwebkit2gtk-4_0-37-debuginfo-2.28.1-lp151.2.15.2 typelib-1_0-JavaScriptCore-4_0-2.28.1-lp151.2.15.2 typelib-1_0-WebKit2-4_0-2.28.1-lp151.2.15.2 typelib-1_0-WebKit2WebExtension-4_0-2.28.1-lp151.2.15.2 webkit-jsc-4-2.28.1-lp151.2.15.2 webkit-jsc-4-debuginfo-2.28.1-lp151.2.15.2 webkit2gtk-4_0-injected-bundles-2.28.1-lp151.2.15.2 webkit2gtk-4_0-injected-bundles-debuginfo-2.28.1-lp151.2.15.2 webkit2gtk3-debugsource-2.28.1-lp151.2.15.2 webkit2gtk3-devel-2.28.1-lp151.2.15.2 webkit2gtk3-minibrowser-2.28.1-lp151.2.15.2 webkit2gtk3-minibrowser-debuginfo-2.28.1-lp151.2.15.2 - openSUSE Leap 15.1 (noarch): libwebkit2gtk3-lang-2.28.1-lp151.2.15.2 - openSUSE Leap 15.1 (x86_64): libjavascriptcoregtk-4_0-18-32bit-2.28.1-lp151.2.15.2 libjavascriptcoregtk-4_0-18-32bit-debuginfo-2.28.1-lp151.2.15.2 libwebkit2gtk-4_0-37-32bit-2.28.1-lp151.2.15.2 libwebkit2gtk-4_0-37-32bit-debuginfo-2.28.1-lp151.2.15.2 References: https://www.suse.com/security/cve/CVE-2020-10018.html https://www.suse.com/security/cve/CVE-2020-11793.html https://bugzilla.suse.com/1165528 https://bugzilla.suse.com/1169658

1 0

openSUSE-SU-2020:0601-1: important: Security update for samba
by opensuse-security＠opensuse.org 02 May '20

02 May '20

openSUSE Security Update: Security update for samba ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0601-1 Rating: important References: #1167070 #1169473 #1169851 Cross-References: CVE-2020-10704 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update for samba fixes the following issues: Security issue fixed: - CVE-2020-10704: Fixed a stack overflow in the AD DC (C)LDAP server (bsc#1169851). Non-security issues fixed: - Fixed spnego fallback from kerberos to ntlmssp in smbd server (bsc#1169473). - Fixed warning messages for non root users using smbclient (bsc#1167070). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-601=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): ctdb-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 ctdb-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 ctdb-pcp-pmda-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 ctdb-pcp-pmda-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 ctdb-tests-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 ctdb-tests-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libdcerpc-binding0-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libdcerpc-binding0-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libdcerpc-devel-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libdcerpc-samr-devel-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libdcerpc-samr0-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libdcerpc-samr0-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libdcerpc0-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libdcerpc0-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libndr-devel-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libndr-krb5pac-devel-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libndr-krb5pac0-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libndr-krb5pac0-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libndr-nbt-devel-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libndr-nbt0-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libndr-nbt0-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libndr-standard-devel-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libndr-standard0-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libndr-standard0-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libndr0-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libndr0-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libnetapi-devel-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libnetapi0-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libnetapi0-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-credentials-devel-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-credentials0-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-credentials0-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-errors-devel-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-errors0-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-errors0-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-hostconfig-devel-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-hostconfig0-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-hostconfig0-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-passdb-devel-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-passdb0-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-passdb0-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-policy-devel-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-policy-python-devel-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-policy-python3-devel-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-policy0-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-policy0-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-policy0-python3-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-policy0-python3-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-util-devel-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-util0-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-util0-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamdb-devel-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamdb0-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamdb0-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsmbclient-devel-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsmbclient0-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsmbclient0-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsmbconf-devel-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsmbconf0-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsmbconf0-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsmbldap-devel-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsmbldap2-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsmbldap2-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libtevent-util-devel-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libtevent-util0-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libtevent-util0-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libwbclient-devel-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libwbclient0-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libwbclient0-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-ad-dc-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-ad-dc-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-client-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-client-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-core-devel-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-debugsource-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-dsdb-modules-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-dsdb-modules-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-libs-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-libs-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-libs-python-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-libs-python-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-libs-python3-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-libs-python3-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-pidl-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-python-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-python-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-python3-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-python3-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-test-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-test-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-winbind-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-winbind-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 - openSUSE Leap 15.1 (x86_64): libdcerpc-binding0-32bit-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libdcerpc-binding0-32bit-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libdcerpc-samr0-32bit-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libdcerpc-samr0-32bit-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libdcerpc0-32bit-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libdcerpc0-32bit-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libndr-krb5pac0-32bit-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libndr-krb5pac0-32bit-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libndr-nbt0-32bit-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libndr-nbt0-32bit-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libndr-standard0-32bit-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libndr-standard0-32bit-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libndr0-32bit-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libndr0-32bit-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libnetapi0-32bit-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libnetapi0-32bit-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-credentials0-32bit-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-credentials0-32bit-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-errors0-32bit-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-errors0-32bit-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-hostconfig0-32bit-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-hostconfig0-32bit-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-passdb0-32bit-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-passdb0-32bit-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-policy0-32bit-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-policy0-32bit-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-policy0-python3-32bit-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-policy0-python3-32bit-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-util0-32bit-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-util0-32bit-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamdb0-32bit-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamdb0-32bit-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsmbclient0-32bit-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsmbclient0-32bit-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsmbconf0-32bit-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsmbconf0-32bit-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsmbldap2-32bit-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsmbldap2-32bit-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libtevent-util0-32bit-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libtevent-util0-32bit-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libwbclient0-32bit-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libwbclient0-32bit-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-ad-dc-32bit-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-ad-dc-32bit-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-ceph-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-ceph-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-client-32bit-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-client-32bit-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-libs-32bit-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-libs-32bit-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-libs-python-32bit-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-libs-python-32bit-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-libs-python3-32bit-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-libs-python3-32bit-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-winbind-32bit-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-winbind-32bit-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 - openSUSE Leap 15.1 (noarch): samba-doc-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 References: https://www.suse.com/security/cve/CVE-2020-10704.html https://bugzilla.suse.com/1167070 https://bugzilla.suse.com/1169473 https://bugzilla.suse.com/1169851

1 0

openSUSE-RU-2020:0579-1: important: Recommended update for pacemaker
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for pacemaker ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0579-1 Rating: important References: #1154881 #1155290 #1160410 #1168771 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for pacemaker fixes the following issues: - libcrmcluster: use uint64_t type for corosync ringid (membership id) when updating node state (bsc#1168771) - get ready for implicit -fno-common with upcoming GCC 10 (bsc#1160410) - attrd: properly declare global variables as extern in header (bsc#1160410) - scheduler: make sure cluster-wide maintenance-mode=true overrides per-resource settings (bsc#1154881) - tools: Clear all prefer constraints when performing a move (bsc#1155290) - tools: Fix moving a resource with a lifetime constraint (bsc#1155290) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-579=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libpacemaker-devel-2.0.1+20190417.13d370ca9-lp151.2.9.2 libpacemaker3-2.0.1+20190417.13d370ca9-lp151.2.9.2 libpacemaker3-debuginfo-2.0.1+20190417.13d370ca9-lp151.2.9.2 pacemaker-2.0.1+20190417.13d370ca9-lp151.2.9.2 pacemaker-cli-2.0.1+20190417.13d370ca9-lp151.2.9.2 pacemaker-cli-debuginfo-2.0.1+20190417.13d370ca9-lp151.2.9.2 pacemaker-debuginfo-2.0.1+20190417.13d370ca9-lp151.2.9.2 pacemaker-debugsource-2.0.1+20190417.13d370ca9-lp151.2.9.2 pacemaker-remote-2.0.1+20190417.13d370ca9-lp151.2.9.2 pacemaker-remote-debuginfo-2.0.1+20190417.13d370ca9-lp151.2.9.2 - openSUSE Leap 15.1 (noarch): pacemaker-cts-2.0.1+20190417.13d370ca9-lp151.2.9.2 References: https://bugzilla.suse.com/1154881 https://bugzilla.suse.com/1155290 https://bugzilla.suse.com/1160410 https://bugzilla.suse.com/1168771

1 0

openSUSE-SU-2020:0599-1: important: Security update for xen
by opensuse-security＠opensuse.org 01 May '20

01 May '20

openSUSE Security Update: Security update for xen ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0599-1 Rating: important References: #1027519 #1134506 #1155200 #1157490 #1160932 #1165206 #1167007 #1167152 #1168140 #1168142 #1168143 #1169392 Cross-References: CVE-2020-11739 CVE-2020-11740 CVE-2020-11741 CVE-2020-11742 CVE-2020-11743 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves 5 vulnerabilities and has 7 fixes is now available. Description: This update for xen fixes the following issues: Security issues fixed: - CVE-2020-11742: Bad continuation handling in GNTTABOP_copy (bsc#1169392). - CVE-2020-11740, CVE-2020-11741: xen: XSA-313 multiple xenoprof issues (bsc#1168140). - CVE-2020-11739: Missing memory barriers in read-write unlock paths (bsc#1168142). - CVE-2020-11743: Bad error path in GNTTABOP_map_grant (bsc#1168143). - arm: a CPU may speculate past the ERET instruction (bsc#1160932). Non-security issues fixed: - Xenstored Crashed during VM install (bsc#1167152) - DomU hang: soft lockup CPU #0 stuck under high load (bsc#1165206, bsc#1134506) - Update API compatibility versions, fixes issues for libvirt. (bsc#1167007, bsc#1157490) - aacraid blocks xen commands (bsc#1155200) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-599=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): xen-debugsource-4.12.2_04-lp151.2.15.1 xen-devel-4.12.2_04-lp151.2.15.1 xen-libs-4.12.2_04-lp151.2.15.1 xen-libs-debuginfo-4.12.2_04-lp151.2.15.1 xen-tools-domU-4.12.2_04-lp151.2.15.1 xen-tools-domU-debuginfo-4.12.2_04-lp151.2.15.1 - openSUSE Leap 15.1 (x86_64): xen-4.12.2_04-lp151.2.15.1 xen-doc-html-4.12.2_04-lp151.2.15.1 xen-libs-32bit-4.12.2_04-lp151.2.15.1 xen-libs-32bit-debuginfo-4.12.2_04-lp151.2.15.1 xen-tools-4.12.2_04-lp151.2.15.1 xen-tools-debuginfo-4.12.2_04-lp151.2.15.1 References: https://www.suse.com/security/cve/CVE-2020-11739.html https://www.suse.com/security/cve/CVE-2020-11740.html https://www.suse.com/security/cve/CVE-2020-11741.html https://www.suse.com/security/cve/CVE-2020-11742.html https://www.suse.com/security/cve/CVE-2020-11743.html https://bugzilla.suse.com/1027519 https://bugzilla.suse.com/1134506 https://bugzilla.suse.com/1155200 https://bugzilla.suse.com/1157490 https://bugzilla.suse.com/1160932 https://bugzilla.suse.com/1165206 https://bugzilla.suse.com/1167007 https://bugzilla.suse.com/1167152 https://bugzilla.suse.com/1168140 https://bugzilla.suse.com/1168142 https://bugzilla.suse.com/1168143 https://bugzilla.suse.com/1169392

1 0

openSUSE-RU-2020:0584-1: moderate: Recommended update for python-scandir
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for python-scandir ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0584-1 Rating: moderate References: #1122668 #1167207 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for python-scandir fixes the following issues: - Include the package in SLE-12 (fate#326950, bsc#1122668, jsc#PM-1447) - Replace %fdupes -s with plain %fdupes using hardlinks instead of softlinks. - Update to 1.10.0: * remove support for pyton 2.6 and <3.3 - Allow building on Python 3.5+. (bsc#1167207) It is useful for testing and it should exist when packages list it as a runtime dependency, and it will add backports of enhancements to scandir since Python 3.5. This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-584=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): python-scandir-debuginfo-1.10.0-lp151.2.3.1 python-scandir-debugsource-1.10.0-lp151.2.3.1 python2-scandir-1.10.0-lp151.2.3.1 python2-scandir-debuginfo-1.10.0-lp151.2.3.1 python3-scandir-1.10.0-lp151.2.3.1 python3-scandir-debuginfo-1.10.0-lp151.2.3.1 References: https://bugzilla.suse.com/1122668 https://bugzilla.suse.com/1167207

1 0

openSUSE-SU-2020:0585-1: important: Security update for resource-agents
by opensuse-security＠opensuse.org 01 May '20

01 May '20

openSUSE Security Update: Security update for resource-agents ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0585-1 Rating: important References: #1021689 #1146687 #1146690 #1146691 #1146692 #1146766 #1146776 #1146784 #1146785 #1146787 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for resource-agents fixes the following issues: - Fixed multiple vulnerabilities related to unsafe tempfile usage. (bsc#1146690 bsc#1146691 bsc#1146692 bsc#1146766 bsc#1146776 bsc#1146784 bsc#1146785 bsc#1146787) - Fixed issues where the ocfmon user was created with a default password (bsc#1021689, bsc#1146687). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-585=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): ldirectord-4.3.0184.6ee15eb2-lp151.3.18.1 resource-agents-4.3.0184.6ee15eb2-lp151.3.18.1 resource-agents-debuginfo-4.3.0184.6ee15eb2-lp151.3.18.1 resource-agents-debugsource-4.3.0184.6ee15eb2-lp151.3.18.1 - openSUSE Leap 15.1 (noarch): monitoring-plugins-metadata-4.3.0184.6ee15eb2-lp151.3.18.1 References: https://bugzilla.suse.com/1021689 https://bugzilla.suse.com/1146687 https://bugzilla.suse.com/1146690 https://bugzilla.suse.com/1146691 https://bugzilla.suse.com/1146692 https://bugzilla.suse.com/1146766 https://bugzilla.suse.com/1146776 https://bugzilla.suse.com/1146784 https://bugzilla.suse.com/1146785 https://bugzilla.suse.com/1146787

1 0

openSUSE-RU-2020:0588-1: moderate: Recommended update for strongswan
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for strongswan ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0588-1 Rating: moderate References: #1164493 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for strongswan fixes the following issue: - Resolve multiple definition of swanctl_dir (bsc#1164493) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-588=1 Package List: - openSUSE Leap 15.1 (noarch): strongswan-doc-5.8.2-lp151.4.9.1 - openSUSE Leap 15.1 (x86_64): strongswan-5.8.2-lp151.4.9.1 strongswan-debuginfo-5.8.2-lp151.4.9.1 strongswan-debugsource-5.8.2-lp151.4.9.1 strongswan-hmac-5.8.2-lp151.4.9.1 strongswan-ipsec-5.8.2-lp151.4.9.1 strongswan-ipsec-debuginfo-5.8.2-lp151.4.9.1 strongswan-libs0-5.8.2-lp151.4.9.1 strongswan-libs0-debuginfo-5.8.2-lp151.4.9.1 strongswan-mysql-5.8.2-lp151.4.9.1 strongswan-mysql-debuginfo-5.8.2-lp151.4.9.1 strongswan-nm-5.8.2-lp151.4.9.1 strongswan-nm-debuginfo-5.8.2-lp151.4.9.1 strongswan-sqlite-5.8.2-lp151.4.9.1 strongswan-sqlite-debuginfo-5.8.2-lp151.4.9.1 References: https://bugzilla.suse.com/1164493

1 0

openSUSE-SU-2020:0586-1: moderate: Security update for ruby2.5
by opensuse-security＠opensuse.org 01 May '20

01 May '20

openSUSE Security Update: Security update for ruby2.5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0586-1 Rating: moderate References: #1167244 #1168938 Cross-References: CVE-2020-10663 CVE-2020-10933 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for ruby2.5 to version 2.5.8 fixes the following issues: - CVE-2020-10663: Unsafe Object Creation Vulnerability in JSON (bsc#1167244). - CVE-2020-10933: Heap exposure vulnerability in the socket library (bsc#1168938). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-586=1 Package List: - openSUSE Leap 15.1 (x86_64): libruby2_5-2_5-2.5.8-lp151.4.9.1 libruby2_5-2_5-debuginfo-2.5.8-lp151.4.9.1 ruby2.5-2.5.8-lp151.4.9.1 ruby2.5-debuginfo-2.5.8-lp151.4.9.1 ruby2.5-debugsource-2.5.8-lp151.4.9.1 ruby2.5-devel-2.5.8-lp151.4.9.1 ruby2.5-devel-extra-2.5.8-lp151.4.9.1 ruby2.5-doc-2.5.8-lp151.4.9.1 ruby2.5-stdlib-2.5.8-lp151.4.9.1 ruby2.5-stdlib-debuginfo-2.5.8-lp151.4.9.1 - openSUSE Leap 15.1 (noarch): ruby2.5-doc-ri-2.5.8-lp151.4.9.1 References: https://www.suse.com/security/cve/CVE-2020-10663.html https://www.suse.com/security/cve/CVE-2020-10933.html https://bugzilla.suse.com/1167244 https://bugzilla.suse.com/1168938

1 0

openSUSE-RU-2020:0568-1: moderate: Recommended update for go1.11
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for go1.11 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0568-1 Rating: moderate References: #1167874 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for go1.11 fixes the following issue: - ARMv7 build hangs with gcc7-go on Leap 15.2, so use go1.4 (bsc#1167874) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-568=1 Package List: - openSUSE Leap 15.1 (x86_64): go1.11-1.11.13-lp151.2.15.1 go1.11-doc-1.11.13-lp151.2.15.1 go1.11-race-1.11.13-lp151.2.15.1 References: https://bugzilla.suse.com/1167874

1 0

openSUSE-RU-2020:0592-1: moderate: Recommended update for ucode-intel
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for ucode-intel ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0592-1 Rating: moderate References: #1169570 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ucode-intel fixes the following issues: - updated Intel Skylake microcode to the current version. (bsc#1169570) - 02000064->02006901 This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-592=1 Package List: - openSUSE Leap 15.1 (x86_64): ucode-intel-20191115-lp151.2.21.1 References: https://bugzilla.suse.com/1169570

1 0

openSUSE-RU-2020:0589-1: important: Recommended update for supportutils
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for supportutils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0589-1 Rating: important References: #1162539 #1165475 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for supportutils fixes the following issues: - Replaced Novell with SUSE FTP servers (bsc#1165475) - Added missed Power collection (bsc#1162539) - Added core file validation (bsc#1166126) - Changed filename prefixes from nts_ to scc_ referencing the SUSE Customer Center (SLE-8702, SLE-6762) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-589=1 Package List: - openSUSE Leap 15.1 (noarch): supportutils-3.1.9-lp151.2.12.1 References: https://bugzilla.suse.com/1162539 https://bugzilla.suse.com/1165475

1 0

openSUSE-RU-2020:0595-1: moderate: Recommended update for inxi
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for inxi ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0595-1 Rating: moderate References: Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for inxi fixes the following issues: inxi was update to version 3.1.00: * See /usr/share/doc/packages/inxi/inxi.changelog Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-595=1 Package List: - openSUSE Leap 15.1 (noarch): inxi-3.1.00-lp151.3.6.1 References:

1 0

openSUSE-RU-2020:0590-1: moderate: Recommended update for suse-build-key
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for suse-build-key ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0590-1 Rating: moderate References: #1170347 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for suse-build-key fixes the following issues: - add a /usr/share/container-keys/ directory for GPG based Container verification. - Add the SUSE build key as "suse-container-key.asc". (PM-1845 bsc#1170347) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-590=1 Package List: - openSUSE Leap 15.1 (noarch): suse-build-key-12.0-lp151.5.6.1 References: https://bugzilla.suse.com/1170347

1 0

openSUSE-RU-2020:0571-1: moderate: Recommended update for grub2
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for grub2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0571-1 Rating: moderate References: #1166409 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for grub2 fixes the following issues: - Implement support searching for specific config files for netboot. (bsc#1166409) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-571=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): grub2-2.02-lp151.21.15.1 grub2-branding-upstream-2.02-lp151.21.15.1 grub2-debuginfo-2.02-lp151.21.15.1 grub2-debugsource-2.02-lp151.21.15.1 - openSUSE Leap 15.1 (noarch): grub2-i386-efi-2.02-lp151.21.15.1 grub2-i386-pc-2.02-lp151.21.15.1 grub2-i386-xen-2.02-lp151.21.15.1 grub2-snapper-plugin-2.02-lp151.21.15.1 grub2-systemd-sleep-plugin-2.02-lp151.21.15.1 grub2-x86_64-efi-2.02-lp151.21.15.1 grub2-x86_64-xen-2.02-lp151.21.15.1 References: https://bugzilla.suse.com/1166409

1 0

openSUSE-RU-2020:0600-1: important: Recommended update for yast2-installation
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for yast2-installation ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0600-1 Rating: important References: #1169017 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-installation fixes the following issues: - Fix for detecting and configuring network with firstboot. (bsc#1169017) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-600=1 Package List: - openSUSE Leap 15.1 (noarch): yast2-installation-4.1.49-lp151.2.12.1 References: https://bugzilla.suse.com/1169017

1 0

openSUSE-RU-2020:0596-1: moderate: Recommended update for sar2
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for sar2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0596-1 Rating: moderate References: Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for sar2 fixes the following issues: Update to version 2.4.0: * Improvements to the Joystick system, adding new Rudder+Brakes mode, moving to libSDL2 and cleaning up unused menu settings. * Fix lagging when aircraft is landed. * Honor wheel brake coefficient. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-596=1 Package List: - openSUSE Leap 15.1 (noarch): sar2-data-2.4.0-lp151.3.3.1 - openSUSE Leap 15.1 (x86_64): sar2-2.4.0-lp151.3.3.1 sar2-debuginfo-2.4.0-lp151.3.3.1 sar2-debugsource-2.4.0-lp151.3.3.1 References:

1 0

openSUSE-RU-2020:0574-1: moderate: Recommended update for munge
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for munge ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0574-1 Rating: moderate References: #1167968 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for munge fixes the following issues: - Update from version 0.5.13 to version 0.5.14 * Added mungekey command for key generation via HKDF. * Added negative caching of user lookups for processing supplementary groups. * Added munged --origin and --stop cmdline opt. * Added unmunge --numeric cmdline opt. * Added several new configuration options. * Added systemd EnvironmentFile to set sysconfig options. * Added systemd RuntimeDirectory to replace tmpfiles.d conf. * Changed logging of non-existent users to only log once for a given user. * Changed default name of munged seedfile. * Fixed pidfile corruption when starting new daemon while socket still in use. * Fixed munged signal handlers to be async-signal-safe. * Fixed "Logging stopped due to error" behavior for transient errors. * Fixed misleading "Lockfile not found" error message. * Fixed conversion-specifier / argument mismatch in error message. * Removed autotools-generated files from version control. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-574=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libmunge2-0.5.14-lp151.4.9.1 libmunge2-debuginfo-0.5.14-lp151.4.9.1 munge-0.5.14-lp151.4.9.1 munge-debuginfo-0.5.14-lp151.4.9.1 munge-debugsource-0.5.14-lp151.4.9.1 munge-devel-0.5.14-lp151.4.9.1 - openSUSE Leap 15.1 (x86_64): libmunge2-32bit-0.5.14-lp151.4.9.1 libmunge2-32bit-debuginfo-0.5.14-lp151.4.9.1 munge-devel-32bit-0.5.14-lp151.4.9.1 References: https://bugzilla.suse.com/1167968

1 0

openSUSE-RU-2020:0572-1: moderate: Recommended update for libgcrypt
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for libgcrypt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0572-1 Rating: moderate References: #1165539 #1169569 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for libgcrypt fixes the following issues: This update for libgcrypt fixes the following issues: - FIPS: Switch the PCT to use the new signature operation (bsc#1165539) - FIPS: Verify that the generated signature and the original input differ in test_keys function for RSA, DSA and ECC (bsc#1165539) - Add zero-padding when qx and qy have different lengths when assembling the Q point from affine coordinates. - Ship the FIPS checksum file in the shared library package and create a separate trigger file for the FIPS selftests (bsc#1169569) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-572=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libgcrypt-cavs-1.8.2-lp151.9.19.1 libgcrypt-cavs-debuginfo-1.8.2-lp151.9.19.1 libgcrypt-debugsource-1.8.2-lp151.9.19.1 libgcrypt-devel-1.8.2-lp151.9.19.1 libgcrypt-devel-debuginfo-1.8.2-lp151.9.19.1 libgcrypt20-1.8.2-lp151.9.19.1 libgcrypt20-debuginfo-1.8.2-lp151.9.19.1 libgcrypt20-hmac-1.8.2-lp151.9.19.1 - openSUSE Leap 15.1 (x86_64): libgcrypt-devel-32bit-1.8.2-lp151.9.19.1 libgcrypt-devel-32bit-debuginfo-1.8.2-lp151.9.19.1 libgcrypt20-32bit-1.8.2-lp151.9.19.1 libgcrypt20-32bit-debuginfo-1.8.2-lp151.9.19.1 libgcrypt20-hmac-32bit-1.8.2-lp151.9.19.1 References: https://bugzilla.suse.com/1165539 https://bugzilla.suse.com/1169569

1 0

openSUSE-SU-2020:0598-1: moderate: Security update for git
by opensuse-security＠opensuse.org 01 May '20

01 May '20

openSUSE Security Update: Security update for git ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0598-1 Rating: moderate References: #1063412 #1095218 #1095219 #1110949 #1112230 #1114225 #1132350 #1149792 #1156651 #1158785 #1158787 #1158788 #1158789 #1158790 #1158791 #1158792 #1158793 #1158795 #1167890 #1168930 #1169605 #1169786 #1169936 Cross-References: CVE-2017-15298 CVE-2018-11233 CVE-2018-11235 CVE-2018-17456 CVE-2019-1348 CVE-2019-1349 CVE-2019-1350 CVE-2019-1351 CVE-2019-1352 CVE-2019-1353 CVE-2019-1354 CVE-2019-1387 CVE-2019-19604 CVE-2020-11008 CVE-2020-5260 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves 15 vulnerabilities and has 8 fixes is now available. Description: This update for git fixes the following issues: Security issues fixed: * CVE-2020-11008: Specially crafted URLs may have tricked the credentials helper to providing credential information that is not appropriate for the protocol in use and host being contacted (bsc#1169936) git was updated to 2.26.1 (bsc#1169786, jsc#ECO-1628, bsc#1149792) - Fix git-daemon not starting after conversion from sysvinit to systemd service (bsc#1169605). * CVE-2020-5260: Specially crafted URLs with newline characters could have been used to make the Git client to send credential information for a wrong host to the attacker's site bsc#1168930 git 2.26.0 (bsc#1167890, jsc#SLE-11608): * "git rebase" now uses a different backend that is based on the 'merge' machinery by default. The 'rebase.backend' configuration variable reverts to old behaviour when set to 'apply' * Improved handling of sparse checkouts * Improvements to many commands and internal features git 2.25.2: * bug fixes to various subcommands in specific operations git 2.25.1: * "git commit" now honors advise.statusHints * various updates, bug fixes and documentation updates git 2.25.0 * The branch description ("git branch --edit-description") has been used to fill the body of the cover letters by the format-patch command; this has been enhanced so that the subject can also be filled. * A few commands learned to take the pathspec from the standard input or a named file, instead of taking it as the command line arguments, with the "--pathspec-from-file" option. * Test updates to prepare for SHA-2 transition continues. * Redo "git name-rev" to avoid recursive calls. * When all files from some subdirectory were renamed to the root directory, the directory rename heuristics would fail to detect that as a rename/merge of the subdirectory to the root directory, which has been corrected. * HTTP transport had possible allocator/deallocator mismatch, which has been corrected. git 2.24.1: * CVE-2019-1348: The --export-marks option of fast-import is exposed also via the in-stream command feature export-marks=... and it allows overwriting arbitrary paths (bsc#1158785) * CVE-2019-1349: on Windows, when submodules are cloned recursively, under certain circumstances Git could be fooled into using the same Git directory twice (bsc#1158787) * CVE-2019-1350: Incorrect quoting of command-line arguments allowed remote code execution during a recursive clone in conjunction with SSH URLs (bsc#1158788) * CVE-2019-1351: on Windows mistakes drive letters outside of the US-English alphabet as relative paths (bsc#1158789) * CVE-2019-1352: on Windows was unaware of NTFS Alternate Data Streams (bsc#1158790) * CVE-2019-1353: when run in the Windows Subsystem for Linux while accessing a working directory on a regular Windows drive, none of the NTFS protections were active (bsc#1158791) * CVE-2019-1354: on Windows refuses to write tracked files with filenames that contain backslashes (bsc#1158792) * CVE-2019-1387: Recursive clones vulnerability that is caused by too-lax validation of submodule names, allowing very targeted attacks via remote code execution in recursive clones (bsc#1158793) * CVE-2019-19604: a recursive clone followed by a submodule update could execute code contained within the repository without the user explicitly having asked for that (bsc#1158795) git 2.24.0 * The command line parser learned "--end-of-options" notation. * A mechanism to affect the default setting for a (related) group of configuration variables is introduced. * "git fetch" learned "--set-upstream" option to help those who first clone from their private fork they intend to push to, add the true upstream via "git remote add" and then "git fetch" from it. * fixes and improvements to UI, workflow and features, bash completion fixes git 2.23.0: * The "--base" option of "format-patch" computed the patch-ids for prerequisite patches in an unstable way, which has been updated to compute in a way that is compatible with "git patch-id --stable". * The "git log" command by default behaves as if the --mailmap option was given. * fixes and improvements to UI, workflow and features git 2.22.1 * A relative pathname given to "git init --template=<path> <repo>" ought to be relative to the directory "git init" gets invoked in, but it instead was made relative to the repository, which has been corrected. * "git worktree add" used to fail when another worktree connected to the same repository was corrupt, which has been corrected. * "git am -i --resolved" segfaulted after trying to see a commit as if it were a tree, which has been corrected. * "git merge --squash" is designed to update the working tree and the index without creating the commit, and this cannot be countermanded by adding the "--commit" option; the command now refuses to work when both options are given. * Update to Unicode 12.1 width table. * "git request-pull" learned to warn when the ref we ask them to pull from in the local repository and in the published repository are different. * "git fetch" into a lazy clone forgot to fetch base objects that are necessary to complete delta in a thin packfile, which has been corrected. * The URL decoding code has been updated to avoid going past the end of the string while parsing %-<hex>-<hex> sequence. * "git clean" silently skipped a path when it cannot lstat() it; now it gives a warning. * "git rm" to resolve a conflicted path leaked an internal message "needs merge" before actually removing the path, which was confusing. This has been corrected. * Many more bugfixes and code cleanups. - removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by firewalld. - partial fix for git instaweb giving 500 error (bsc#1112230) git 2.22.0 * The filter specification "--filter=sparse:path=<path>" used to create a lazy/partial clone has been removed. Using a blob that is part of the project as sparse specification is still supported with the "--filter=sparse:oid=<blob>" option * "git checkout --no-overlay" can be used to trigger a new mode of checking out paths out of the tree-ish, that allows paths that match the pathspec that are in the current index and working tree and are not in the tree-ish. * Four new configuration variables {author,committer}.{name,email} have been introduced to override user.{name,email} in more specific cases. * "git branch" learned a new subcommand "--show-current". * The command line completion (in contrib/) has been taught to complete more subcommand parameters. * The completion helper code now pays attention to repository-local configuration (when available), which allows --list-cmds to honour a repository specific setting of completion.commands, for example. * The list of conflicted paths shown in the editor while concluding a conflicted merge was shown above the scissors line when the clean-up mode is set to "scissors", even though it was commented out just like the list of updated paths and other information to help the user explain the merge better. * "git rebase" that was reimplemented in C did not set ORIG_HEAD correctly, which has been corrected. * "git worktree add" used to do a "find an available name with stat and then mkdir", which is race-prone. This has been fixed by using mkdir and reacting to EEXIST in a loop. - Move to DocBook 5.x. Asciidoctor 2.x no longer supports the legacy DocBook 4.5 format. - update git-web AppArmor profile for bash and tar usrMerge (bsc#1132350) git 2.21.0 * Historically, the "-m" (mainline) option can only be used for "git cherry-pick" and "git revert" when working with a merge commit. This version of Git no longer warns or errors out when working with a single-parent commit, as long as the argument to the "-m" option is 1 (i.e. it has only one parent, and the request is to pick or revert relative to that first parent). Scripts that relied on the behaviour may get broken with this change. * Small fixes and features for fast-export and fast-import. * The "http.version" configuration variable can be used with recent enough versions of cURL library to force the version of HTTP used to talk when fetching and pushing. * "git push $there $src:$dst" rejects when $dst is not a fully qualified refname and it is not clear what the end user meant. * Update "git multimail" from the upstream. * A new date format "--date=human" that morphs its output depending on how far the time is from the current time has been introduced. "--date=auto:human" can be used to use this new format (or any existing format) when the output is going to the pager or to the terminal, and otherwise the default format. - Fix worktree creation race (bsc#1114225). - add shadow build dependency to the -daemon subpackage. git 2.20.1: * portability fixes * "git help -a" did not work well when an overly long alias was defined * no longer squelched an error message when the run_command API failed to run a missing command git 2.20.0 * "git help -a" now gives verbose output (same as "git help -av"). Those who want the old output may say "git help --no-verbose -a".. * "git send-email" learned to grab address-looking string on any trailer whose name ends with "-by". * "git format-patch" learned new "--interdiff" and "--range-diff" options to explain the difference between this version and the previous attempt in the cover letter (or after the three-dashes as a comment). * Developer builds now use -Wunused-function compilation option. * Fix a bug in which the same path could be registered under multiple worktree entries if the path was missing (for instance, was removed manually). Also, as a convenience, expand the number of cases in which --force is applicable. * The overly large Documentation/config.txt file have been split into million little pieces. This potentially allows each individual piece to be included into the manual page of the command it affects more easily. * Malformed or crafted data in packstream can make our code attempt to read or write past the allocated buffer and abort, instead of reporting an error, which has been fixed. * Fix for a long-standing bug that leaves the index file corrupt when it shrinks during a partial commit. * "git merge" and "git pull" that merges into an unborn branch used to completely ignore "--verify-signatures", which has been corrected. * ...and much more features and fixes git 2.19.2: * various bug fixes for multiple subcommands and operations git 2.19.1: * CVE-2018-17456: Specially crafted .gitmodules files may have allowed arbitrary code execution when the repository is cloned with --recurse-submodules (bsc#1110949) git 2.19.0: * "git diff" compares the index and the working tree. For paths added with intent-to-add bit, the command shows the full contents of them as added, but the paths themselves were not marked as new files. They are now shown as new by default. * "git apply" learned the "--intent-to-add" option so that an otherwise working-tree-only application of a patch will add new paths to the index marked with the "intent-to-add" bit. * "git grep" learned the "--column" option that gives not just the line number but the column number of the hit. * The "-l" option in "git branch -l" is an unfortunate short-hand for "--create-reflog", but many users, both old and new, somehow expect it to be something else, perhaps "--list". This step warns when "-l" is used as a short-hand for "--create-reflog" and warns about the future repurposing of the it when it is used. * The userdiff pattern for .php has been updated. * The content-transfer-encoding of the message "git send-email" sends out by default was 8bit, which can cause trouble when there is an overlong line to bust RFC 5322/2822 limit. A new option 'auto' to automatically switch to quoted-printable when there is such a line in the payload has been introduced and is made the default. * "git checkout" and "git worktree add" learned to honor checkout.defaultRemote when auto-vivifying a local branch out of a remote tracking branch in a repository with multiple remotes that have tracking branches that share the same names. (merge 8d7b558bae ab/checkout-default-remote later to maint). * "git grep" learned the "--only-matching" option. * "git rebase --rebase-merges" mode now handles octopus merges as well. * Add a server-side knob to skip commits in exponential/fibbonacci stride in an attempt to cover wider swath of history with a smaller number of iterations, potentially accepting a larger packfile transfer, instead of going back one commit a time during common ancestor discovery during the "git fetch" transaction. (merge 42cc7485a2 jt/fetch-negotiator-skipping later to maint). * A new configuration variable core.usereplacerefs has been added, primarily to help server installations that want to ignore the replace mechanism altogether. * Teach "git tag -s" etc. a few configuration variables (gpg.format that can be set to "openpgp" or "x509", and gpg.<format>.program that is used to specify what program to use to deal with the format) to allow x.509 certs with CMS via "gpgsm" to be used instead of openpgp via "gnupg". * Many more strings are prepared for l10n. * "git p4 submit" learns to ask its own pre-submit hook if it should continue with submitting. * The test performed at the receiving end of "git push" to prevent bad objects from entering repository can be customized via receive.fsck.* configuration variables; we now have gained a counterpart to do the same on the "git fetch" side, with fetch.fsck.* configuration variables. * "git pull --rebase=interactive" learned "i" as a short-hand for "interactive". * "git instaweb" has been adjusted to run better with newer Apache on RedHat based distros. * "git range-diff" is a reimplementation of "git tbdiff" that lets us compare individual patches in two iterations of a topic. * The sideband code learned to optionally paint selected keywords at the beginning of incoming lines on the receiving end. * "git branch --list" learned to take the default sort order from the 'branch.sort' configuration variable, just like "git tag --list" pays attention to 'tag.sort'. * "git worktree" command learned "--quiet" option to make it less verbose. git 2.18.0: * improvements to rename detection logic * When built with more recent cURL, GIT_SSL_VERSION can now specify "tlsv1.3" as its value. * "git mergetools" learned talking to guiffy. * various other workflow improvements and fixes * performance improvements and other developer visible fixes git 2.17.1 * Submodule "names" come from the untrusted .gitmodules file, but we blindly append them to $GIT_DIR/modules to create our on-disk repo paths. This means you can do bad things by putting "../" into the name. We now enforce some rules for submodule names which will cause Git to ignore these malicious names (CVE-2018-11235, bsc#1095219) * It was possible to trick the code that sanity-checks paths on NTFS into reading random piece of memory (CVE-2018-11233, bsc#1095218) * Support on the server side to reject pushes to repositories that attempt to create such problematic .gitmodules file etc. as tracked contents, to help hosting sites protect their customers by preventing malicious contents from spreading. git 2.17.0: * "diff" family of commands learned "--find-object=<object-id>" option to limit the findings to changes that involve the named object. * "git format-patch" learned to give 72-cols to diffstat, which is consistent with other line length limits the subcommand uses for its output meant for e-mails. * The log from "git daemon" can be redirected with a new option; one relevant use case is to send the log to standard error (instead of syslog) when running it from inetd. * "git rebase" learned to take "--allow-empty-message" option. * "git am" has learned the "--quit" option, in addition to the existing "--abort" option; having the pair mirrors a few other commands like "rebase" and "cherry-pick". * "git worktree add" learned to run the post-checkout hook, just like "git clone" runs it upon the initial checkout. * "git tag" learned an explicit "--edit" option that allows the message given via "-m" and "-F" to be further edited. * "git fetch --prune-tags" may be used as a handy short-hand for getting rid of stale tags that are locally held. * The new "--show-current-patch" option gives an end-user facing way to get the diff being applied when "git rebase" (and "git am") stops with a conflict. * "git add -p" used to offer "/" (look for a matching hunk) as a choice, even there was only one hunk, which has been corrected. Also the single-key help is now given only for keys that are enabled (e.g. help for '/' won't be shown when there is only one hunk). * Since Git 1.7.9, "git merge" defaulted to --no-ff (i.e. even when the side branch being merged is a descendant of the current commit, create a merge commit instead of fast-forwarding) when merging a tag object. This was appropriate default for integrators who pull signed tags from their downstream contributors, but caused an unnecessary merges when used by downstream contributors who habitually "catch up" their topic branches with tagged releases from the upstream. Update "git merge" to default to --no-ff only when merging a tag object that does *not* sit at its usual place in refs/tags/ hierarchy, and allow fast-forwarding otherwise, to mitigate the problem. * "git status" can spend a lot of cycles to compute the relation between the current branch and its upstream, which can now be disabled with "--no-ahead-behind" option. * "git diff" and friends learned funcname patterns for Go language source files. * "git send-email" learned "--reply-to=<address>" option. * Funcname pattern used for C# now recognizes "async" keyword. * In a way similar to how "git tag" learned to honor the pager setting only in the list mode, "git config" learned to ignore the pager setting when it is used for setting values (i.e. when the purpose of the operation is not to "show"). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-598=1 Package List: - openSUSE Leap 15.1 (x86_64): git-2.26.1-lp151.4.9.1 git-arch-2.26.1-lp151.4.9.1 git-core-2.26.1-lp151.4.9.1 git-core-debuginfo-2.26.1-lp151.4.9.1 git-credential-gnome-keyring-2.26.1-lp151.4.9.1 git-credential-gnome-keyring-debuginfo-2.26.1-lp151.4.9.1 git-credential-libsecret-2.26.1-lp151.4.9.1 git-credential-libsecret-debuginfo-2.26.1-lp151.4.9.1 git-cvs-2.26.1-lp151.4.9.1 git-daemon-2.26.1-lp151.4.9.1 git-daemon-debuginfo-2.26.1-lp151.4.9.1 git-debuginfo-2.26.1-lp151.4.9.1 git-debugsource-2.26.1-lp151.4.9.1 git-email-2.26.1-lp151.4.9.1 git-gui-2.26.1-lp151.4.9.1 git-p4-2.26.1-lp151.4.9.1 git-svn-2.26.1-lp151.4.9.1 git-svn-debuginfo-2.26.1-lp151.4.9.1 git-web-2.26.1-lp151.4.9.1 gitk-2.26.1-lp151.4.9.1 - openSUSE Leap 15.1 (noarch): git-doc-2.26.1-lp151.4.9.1 References: https://www.suse.com/security/cve/CVE-2017-15298.html https://www.suse.com/security/cve/CVE-2018-11233.html https://www.suse.com/security/cve/CVE-2018-11235.html https://www.suse.com/security/cve/CVE-2018-17456.html https://www.suse.com/security/cve/CVE-2019-1348.html https://www.suse.com/security/cve/CVE-2019-1349.html https://www.suse.com/security/cve/CVE-2019-1350.html https://www.suse.com/security/cve/CVE-2019-1351.html https://www.suse.com/security/cve/CVE-2019-1352.html https://www.suse.com/security/cve/CVE-2019-1353.html https://www.suse.com/security/cve/CVE-2019-1354.html https://www.suse.com/security/cve/CVE-2019-1387.html https://www.suse.com/security/cve/CVE-2019-19604.html https://www.suse.com/security/cve/CVE-2020-11008.html https://www.suse.com/security/cve/CVE-2020-5260.html https://bugzilla.suse.com/1063412 https://bugzilla.suse.com/1095218 https://bugzilla.suse.com/1095219 https://bugzilla.suse.com/1110949 https://bugzilla.suse.com/1112230 https://bugzilla.suse.com/1114225 https://bugzilla.suse.com/1132350 https://bugzilla.suse.com/1149792 https://bugzilla.suse.com/1156651 https://bugzilla.suse.com/1158785 https://bugzilla.suse.com/1158787 https://bugzilla.suse.com/1158788 https://bugzilla.suse.com/1158789 https://bugzilla.suse.com/1158790 https://bugzilla.suse.com/1158791 https://bugzilla.suse.com/1158792 https://bugzilla.suse.com/1158793 https://bugzilla.suse.com/1158795 https://bugzilla.suse.com/1167890 https://bugzilla.suse.com/1168930 https://bugzilla.suse.com/1169605 https://bugzilla.suse.com/1169786 https://bugzilla.suse.com/1169936

1 0

openSUSE-RU-2020:0594-1: moderate: Recommended update for ypbind
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for ypbind ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0594-1 Rating: moderate References: #1163252 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ypbind fixes the following issues: - Fix for setting domain name by waiting that network becomes online, so it can be properly configured in sysconfig. (bsc#1163252) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-594=1 Package List: - openSUSE Leap 15.1 (x86_64): ypbind-2.6-lp151.2.3.1 ypbind-debuginfo-2.6-lp151.2.3.1 ypbind-debugsource-2.6-lp151.2.3.1 References: https://bugzilla.suse.com/1163252

1 0

openSUSE-RU-2020:0577-1: moderate: Recommended update for nginx
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for nginx ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0577-1 Rating: moderate References: #1150711 #1155690 #1156202 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for nginx fixes the following issues: nginx was updated to 1.16.1 (jsc#ECO-1401) - Added TLS 1.3 support (jsc#SLE-9295, bsc#1150711) - Replaced obsolete GeoIP module with MaxMinDB-based GeoIP2 (jsc#SLE-11184, bsc#1156202) - Started nginx after network is online (bsc#1155690) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-577=1 Package List: - openSUSE Leap 15.1 (noarch): nginx-source-1.16.1-lp151.4.9.1 vim-plugin-nginx-1.16.1-lp151.4.9.1 - openSUSE Leap 15.1 (x86_64): nginx-1.16.1-lp151.4.9.1 nginx-debuginfo-1.16.1-lp151.4.9.1 nginx-debugsource-1.16.1-lp151.4.9.1 References: https://bugzilla.suse.com/1150711 https://bugzilla.suse.com/1155690 https://bugzilla.suse.com/1156202

1 0

openSUSE-RU-2020:0591-1: moderate: Recommended update for tomcat
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for tomcat ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0591-1 Rating: moderate References: #1161083 #1167438 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for tomcat fixes the following issue: Update from Tomcat 9.0.31 to Tomcat 9.0.33. - Regression in HTTP header parsing. (bsc#1167438) The update improves the validation of the HTTP header parsing causing requests to be incorrectly treated as invalid if a CRLF sequence was split between TCP packets. Has been also improved the validation of request lines, including for HTTP/0.9 requests. - Fix NoSuchMethodError in the HTTP APR connector when using openjdk 1.8. (bsc#1161083) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-591=1 Package List: - openSUSE Leap 15.1 (noarch): tomcat-9.0.33-lp151.3.15.1 tomcat-admin-webapps-9.0.33-lp151.3.15.1 tomcat-docs-webapp-9.0.33-lp151.3.15.1 tomcat-el-3_0-api-9.0.33-lp151.3.15.1 tomcat-embed-9.0.33-lp151.3.15.1 tomcat-javadoc-9.0.33-lp151.3.15.1 tomcat-jsp-2_3-api-9.0.33-lp151.3.15.1 tomcat-jsvc-9.0.33-lp151.3.15.1 tomcat-lib-9.0.33-lp151.3.15.1 tomcat-servlet-4_0-api-9.0.33-lp151.3.15.1 tomcat-webapps-9.0.33-lp151.3.15.1 References: https://bugzilla.suse.com/1161083 https://bugzilla.suse.com/1167438

1 0

openSUSE-RU-2020:0593-1: important: Recommended update for yast2-registration
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for yast2-registration ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0593-1 Rating: important References: #1167945 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-registration fixes the following issues: - Fix for offline upgrade that fails the process at the registration due to a missing function. (bsc#1167945) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-593=1 Package List: - openSUSE Leap 15.1 (noarch): yast2-registration-4.1.25-lp151.2.9.1 References: https://bugzilla.suse.com/1167945

1 0

openSUSE-RU-2020:0580-1: moderate: Recommended update for perl-CGI
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for perl-CGI ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0580-1 Rating: moderate References: #1162868 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for perl-CGI fixes the following issues: Update from version 4.38 to 4.46 (bsc#1162868) * Add support for SameSite=None cookies and update the documentation * Replace only use of "base" with "parent" given that CGI already depends on "parent" * Support unquoted multipart/form-data name values * Update the package license from "Artistic-1.0 or GPL-1.0+" to "Artistic-2.0" * Support perls < 5.10.1 and specify CONFIGURE_REQUIRES in Makefile.PL for being more dynamic This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-580=1 Package List: - openSUSE Leap 15.1 (noarch): perl-CGI-4.46-lp151.3.3.1 References: https://bugzilla.suse.com/1162868

1 0

openSUSE-SU-2020:0597-1: important: Security update for apache2
by opensuse-security＠opensuse.org 01 May '20

01 May '20

openSUSE Security Update: Security update for apache2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0597-1 Rating: important References: #1168404 #1168407 #1169066 Cross-References: CVE-2020-1927 CVE-2020-1934 CVE-2020-1938 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for apache2 fixes the following issues: - CVE-2020-1934: mod_proxy_ftp may use uninitialized memory when proxying to a malicious FTP server (bsc#1168404). - CVE-2020-1927: mod_rewrite configurations vulnerable to open redirect (bsc#1168407). - CVE-2020-1938: mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy AJP13 authentication (bsc#1169066). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-597=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): apache2-2.4.33-lp151.8.12.1 apache2-debuginfo-2.4.33-lp151.8.12.1 apache2-debugsource-2.4.33-lp151.8.12.1 apache2-devel-2.4.33-lp151.8.12.1 apache2-event-2.4.33-lp151.8.12.1 apache2-event-debuginfo-2.4.33-lp151.8.12.1 apache2-example-pages-2.4.33-lp151.8.12.1 apache2-prefork-2.4.33-lp151.8.12.1 apache2-prefork-debuginfo-2.4.33-lp151.8.12.1 apache2-utils-2.4.33-lp151.8.12.1 apache2-utils-debuginfo-2.4.33-lp151.8.12.1 apache2-worker-2.4.33-lp151.8.12.1 apache2-worker-debuginfo-2.4.33-lp151.8.12.1 - openSUSE Leap 15.1 (noarch): apache2-doc-2.4.33-lp151.8.12.1 References: https://www.suse.com/security/cve/CVE-2020-1927.html https://www.suse.com/security/cve/CVE-2020-1934.html https://www.suse.com/security/cve/CVE-2020-1938.html https://bugzilla.suse.com/1168404 https://bugzilla.suse.com/1168407 https://bugzilla.suse.com/1169066

1 0

openSUSE-RU-2020:0578-1: moderate: Recommended update for open-iscsi
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for open-iscsi ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0578-1 Rating: moderate References: #1159768 #1164607 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for open-iscsi fixes the following issues: - Avoid logout of iscsi boot session. (bsc#1159768) - Fix iscsi.service so it handles restarts better. (bsc#1164607) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-578=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): iscsiuio-0.7.8.2-lp151.13.9.1 iscsiuio-debuginfo-0.7.8.2-lp151.13.9.1 libopeniscsiusr0_2_0-2.0.876-lp151.13.9.1 libopeniscsiusr0_2_0-debuginfo-2.0.876-lp151.13.9.1 open-iscsi-2.0.876-lp151.13.9.1 open-iscsi-debuginfo-2.0.876-lp151.13.9.1 open-iscsi-debugsource-2.0.876-lp151.13.9.1 open-iscsi-devel-2.0.876-lp151.13.9.1 References: https://bugzilla.suse.com/1159768 https://bugzilla.suse.com/1164607

1 0

openSUSE-RU-2020:0587-1: moderate: Recommended update for seccheck
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for seccheck ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0587-1 Rating: moderate References: #1132919 #985802 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for seccheck fixes the following issues: - adapt WantedBy so the timers are actually started at boot time when enabled (#1132919) - correct indentation of SECCHK_FROM (#985802) for the weekly and monthly mails so that the mail header lines are recognised by the receiving mail client This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-587=1 Package List: - openSUSE Leap 15.1 (noarch): seccheck-3.0-lp151.5.3.1 References: https://bugzilla.suse.com/1132919 https://bugzilla.suse.com/985802

1 0

openSUSE-RU-2020:0582-1: moderate: Recommended update for python-google-api-python-client
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for python-google-api-python-client ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0582-1 Rating: moderate References: #1088358 #1160933 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for python-google-api-python-client fixes the following issues: - Fix dependencies to use google-auth instead of deprecated oauth2client (bsc#1160933, jsc#ECO-1148) python-cachetools 2.0.1 is shipped to the Public Cloud Module. python-google-auth 1.5.1 is shipped to the Public Cloud Module. python-google-api-python-client was updated to: - Upgrade to 1.7.4: just series of minor bugfixes - Fix check for error text on Python 3.7. (#278) - Use new Auth URIs. (#281) - Add code-of-conduct document. (#270) - Fix some typos in test_urllib3.py (#268) - Warn when using user credentials from the Cloud SDK (#266) - Add compute engine-based IDTokenCredentials (#236) - Corrected some typos (#265) Update to 1.4.2: - Raise a helpful exception when trying to refresh credentials without a refresh token. (#262) - Fix links to README and CONTRIBUTING in docs/index.rst. (#260) - Fix a typo in credentials.py. (#256) - Use pytest instead of py.test per upstream recommendation, #dropthedot. (#255) - Fix typo on exemple of jwt usage (#245) New upstream release 1.4.1 (bsc#1088358) - Added a check for the cryptography version before attempting to use it. + From version 1.4.0 - Added `cryptography`-based RSA signer and verifier. - Added `google.oauth2.service_account.IDTokenCredentials`. - Improved documentation around ID Tokens + From version 1.3.0 - Added ``google.oauth2.credentials.Credentials.from_authorized_user_file``. - Dropped direct pyasn1 dependency in favor of letting ``pyasn1-modules`` specify the right version. - ``default()`` now checks for the project ID environment var before warning about missing project ID. - Fixed the docstrings for ``has_scopes()`` and ``with_scopes()``. - Fixed example in docstring for ``ReadOnlyScoped``. - Made ``transport.requests`` use timeouts and retries to improve reliability. This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-582=1 Package List: - openSUSE Leap 15.1 (noarch): python2-cachetools-2.0.1-lp151.3.3.1 python2-google-api-python-client-1.7.4-lp151.2.3.1 python2-google-auth-1.5.1-lp151.2.3.1 python2-google-auth-httplib2-0.0.3-lp151.2.1 python3-cachetools-2.0.1-lp151.3.3.1 python3-google-api-python-client-1.7.4-lp151.2.3.1 python3-google-auth-1.5.1-lp151.2.3.1 python3-google-auth-httplib2-0.0.3-lp151.2.1 References: https://bugzilla.suse.com/1088358 https://bugzilla.suse.com/1160933

1 0

openSUSE-RU-2020:0575-1: moderate: Recommended update for ndctl
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for ndctl ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0575-1 Rating: moderate References: #1165509 #1167861 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for ndctl fixes the following issues: - Fixed an issue where namespaces were not correctly destroyed (bsc#1167861) - Fixed an issue where 'enable-namespace' tried to enable idled namespaces (bsc#1165509) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-575=1 Package List: - openSUSE Leap 15.1 (x86_64): libndctl-devel-64.1-lp151.2.12.1 libndctl6-64.1-lp151.2.12.1 libndctl6-debuginfo-64.1-lp151.2.12.1 ndctl-64.1-lp151.2.12.1 ndctl-debuginfo-64.1-lp151.2.12.1 ndctl-debugsource-64.1-lp151.2.12.1 References: https://bugzilla.suse.com/1165509 https://bugzilla.suse.com/1167861

1 0

openSUSE-RU-2020:0581-1: moderate: Recommended update for psqlODBC
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for psqlODBC ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0581-1 Rating: moderate References: #1166821 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for psqlODBC fixes the following issue: - Fix build with PostgreSQL 11 and newer. (bsc#1166821) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-581=1 Package List: - openSUSE Leap 15.1 (x86_64): psqlODBC-10.01.0000-lp151.3.3.1 psqlODBC-debuginfo-10.01.0000-lp151.3.3.1 psqlODBC-debugsource-10.01.0000-lp151.3.3.1 References: https://bugzilla.suse.com/1166821

1 0

openSUSE-RU-2020:0573-1: moderate: Recommended update for libsolv
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for libsolv ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0573-1 Rating: moderate References: #1159314 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libsolv fixes the following issues: libsolv was updated to version 0.7.11: - fix solv_zchunk decoding error if large chunks are used (bsc#1159314) - treat retracted pathes as irrelevant - made add_update_target work with multiversion installs This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-573=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libsolv-debuginfo-0.7.11-lp151.2.13.1 libsolv-debugsource-0.7.11-lp151.2.13.1 libsolv-demo-0.7.11-lp151.2.13.1 libsolv-demo-debuginfo-0.7.11-lp151.2.13.1 libsolv-devel-0.7.11-lp151.2.13.1 libsolv-devel-debuginfo-0.7.11-lp151.2.13.1 libsolv-tools-0.7.11-lp151.2.13.1 libsolv-tools-debuginfo-0.7.11-lp151.2.13.1 libzypp-17.19.0-lp151.2.13.1 libzypp-debuginfo-17.19.0-lp151.2.13.1 libzypp-debugsource-17.19.0-lp151.2.13.1 libzypp-devel-17.19.0-lp151.2.13.1 libzypp-devel-doc-17.19.0-lp151.2.13.1 perl-solv-0.7.11-lp151.2.13.1 perl-solv-debuginfo-0.7.11-lp151.2.13.1 python-solv-0.7.11-lp151.2.13.1 python-solv-debuginfo-0.7.11-lp151.2.13.1 python3-solv-0.7.11-lp151.2.13.1 python3-solv-debuginfo-0.7.11-lp151.2.13.1 ruby-solv-0.7.11-lp151.2.13.1 ruby-solv-debuginfo-0.7.11-lp151.2.13.1 References: https://bugzilla.suse.com/1159314

1 0

openSUSE-RU-2020:0576-1: moderate: Recommended update for netcontrol
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for netcontrol ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0576-1 Rating: moderate References: #1027736 #1029201 #1132794 #1148646 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for netcontrol fixes the following issues: - bonding: prevent alarms when using unknown options. (bsc#1132794) The update will provide warnings and also error messages when using unknown options. - udev: use correct udev rule (write) lock directory - sysconfig: solve segfault on missed end-quote. (bsc#1027736) - solve segfault on invalid check in route creation. (bsc#1148646) - solve virsh iface-list not working as expected. (bsc#1029201) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-576=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libnetcontrol-devel-0.3.1-lp151.3.3.1 libnetcontrol0-0.3.1-lp151.3.3.1 libnetcontrol0-debuginfo-0.3.1-lp151.3.3.1 netcontrol-debugsource-0.3.1-lp151.3.3.1 - openSUSE Leap 15.1 (x86_64): libnetcontrol0-32bit-0.3.1-lp151.3.3.1 libnetcontrol0-32bit-debuginfo-0.3.1-lp151.3.3.1 References: https://bugzilla.suse.com/1027736 https://bugzilla.suse.com/1029201 https://bugzilla.suse.com/1132794 https://bugzilla.suse.com/1148646

1 0

openSUSE-RU-2020:0570-1: moderate: Recommended update for google-compute-engine
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for google-compute-engine ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0570-1 Rating: moderate References: #1167810 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for google-compute-engine fixes the following issues: - Rename the sysctl file that applies the GCE network settings, so it is run after the default config and adjusts net.ipv4.conf.all.rp_filter correctly. (bsc#1167810) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-570=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): google-compute-engine-debugsource-20190801-lp151.2.19.1 google-compute-engine-oslogin-20190801-lp151.2.19.1 google-compute-engine-oslogin-debuginfo-20190801-lp151.2.19.1 - openSUSE Leap 15.1 (x86_64): google-compute-engine-oslogin-32bit-20190801-lp151.2.19.1 google-compute-engine-oslogin-32bit-debuginfo-20190801-lp151.2.19.1 - openSUSE Leap 15.1 (noarch): google-compute-engine-init-20190801-lp151.2.19.1 References: https://bugzilla.suse.com/1167810

1 0

openSUSE-RU-2020:0583-1: moderate: Recommended update for python-pycups
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for python-pycups ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0583-1 Rating: moderate References: #735865 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-pycups fixes the following issues: - add BuildRequires: python-cups to printer driver packages. (bsc#735865) Package /usr/lib/rpm/postscriptdriver.prov again, in the new "cups-rpm-helper" subpackage. The file hasn't been packaged any more after the switch from python-cups to python-pycups. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-583=1 Package List: - openSUSE Leap 15.1 (x86_64): cups-rpm-helper-1.9.74-lp151.3.3.1 python-pycups-debuginfo-1.9.74-lp151.3.3.1 python-pycups-debugsource-1.9.74-lp151.3.3.1 python2-pycups-1.9.74-lp151.3.3.1 python2-pycups-debuginfo-1.9.74-lp151.3.3.1 python3-pycups-1.9.74-lp151.3.3.1 python3-pycups-debuginfo-1.9.74-lp151.3.3.1 References: https://bugzilla.suse.com/735865

1 0

openSUSE-RU-2020:0569-1: moderate: Recommended update for lxd
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for lxd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0569-1 Rating: moderate References: #1170404 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for lxd fixes the following issues: Update to LXD 4.0.1. (boo#1170404) The full upstream changelog is available from: https://discuss.linuxcontainers.org/t/lxd-4-0-1-lts-has-been-released/7515 * Tweaked and improved the resources API * Added lxd cluster remove-raft-node disaster recovery function * Implemented ceph rbd/fs disk devices can now be attached to virtual machines * Fixed some data migration issues for users of < 3.0 upgrading to 4.0 directly * Fixed file descriptor leakage in exec Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-569=1 Package List: - openSUSE Leap 15.1 (noarch): lxd-bash-completion-4.0.1-lp151.36.1 - openSUSE Leap 15.1 (x86_64): lxd-4.0.1-lp151.36.1 References: https://bugzilla.suse.com/1170404

1 0

openSUSE-SU-2020:0567-1: Security update for python-typed-ast
by opensuse-security＠opensuse.org 01 May '20

01 May '20

openSUSE Security Update: Security update for python-typed-ast ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0567-1 Rating: low References: #1161562 #1161563 #1163532 Cross-References: CVE-2019-19274 CVE-2019-19275 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for python-typed-ast fixes the following issues: python-typed-ast was reverted to version 1.3.1 because it broke another package (bsc#1163532). Security issues fixed: - CVE-2019-19274: Fixed an out-of-bounds read (bsc#1161562). - CVE-2019-19275: Fixed an out-of-bounds read (bsc#1161563). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-567=1 Package List: - openSUSE Leap 15.1 (x86_64): python-typed-ast-debugsource-1.3.1-lp151.2.6.1 python3-typed-ast-1.3.1-lp151.2.6.1 python3-typed-ast-debuginfo-1.3.1-lp151.2.6.1 References: https://www.suse.com/security/cve/CVE-2019-19274.html https://www.suse.com/security/cve/CVE-2019-19275.html https://bugzilla.suse.com/1161562 https://bugzilla.suse.com/1161563 https://bugzilla.suse.com/1163532

1 0

openSUSE-SU-2020:0566-1: critical: Security update for chromium
by opensuse-security＠opensuse.org 01 May '20

01 May '20

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0566-1 Rating: critical References: #1169729 Cross-References: CVE-2020-6457 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for chromium fixes the following issues: Chromium was updated to 81.0.4044.113 (boo#1169729): - CVE-2020-6457: Fixed a use after free in speech recognizer This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-566=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 x86_64): chromedriver-81.0.4044.113-bp151.3.70.1 chromium-81.0.4044.113-bp151.3.70.1 References: https://www.suse.com/security/cve/CVE-2020-6457.html https://bugzilla.suse.com/1169729

1 0