May 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2020:0749-1: Recommended update for python-requests
by maintenance＠opensuse.org 31 May '20

31 May '20

openSUSE Recommended Update: Recommended update for python-requests ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0749-1 Rating: low References: #1170175 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-requests fixes the following issues: - Fix for warnings 'test fails to build' for python http. (bsc#1170175) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-749=1 Package List: - openSUSE Leap 15.1 (noarch): python2-requests-2.20.1-lp151.2.6.1 python2-requests-test-2.20.1-lp151.2.6.1 python3-requests-2.20.1-lp151.2.6.1 python3-requests-test-2.20.1-lp151.2.6.1 References: https://bugzilla.suse.com/1170175

1 0

openSUSE-SU-2020:0746-1: Security update for libmspack
by opensuse-security＠opensuse.org 31 May '20

31 May '20

openSUSE Security Update: Security update for libmspack ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0746-1 Rating: low References: #1130489 #1141680 Cross-References: CVE-2019-1010305 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for libmspack fixes the following issues: Security issue fixed: - CVE-2019-1010305: Fixed a buffer overflow triggered by a crafted chm file which could have led to information disclosure (bsc#1141680). Other issue addressed: - Enable build-time tests (bsc#1130489) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-746=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libmspack-debugsource-0.6-lp151.4.3.1 libmspack-devel-0.6-lp151.4.3.1 libmspack0-0.6-lp151.4.3.1 libmspack0-debuginfo-0.6-lp151.4.3.1 mspack-tools-0.6-lp151.4.3.1 mspack-tools-debuginfo-0.6-lp151.4.3.1 - openSUSE Leap 15.1 (x86_64): libmspack0-32bit-0.6-lp151.4.3.1 libmspack0-32bit-debuginfo-0.6-lp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2019-1010305.html https://bugzilla.suse.com/1130489 https://bugzilla.suse.com/1141680

1 0

openSUSE-RU-2020:0748-1: moderate: Recommended update for dehydrated
by maintenance＠opensuse.org 31 May '20

31 May '20

openSUSE Recommended Update: Recommended update for dehydrated ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0748-1 Rating: moderate References: #1169834 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for dehydrated provides the following fixes: - Fix the lighttpd config file provided with the package. (bsc#1169834) - Provide nginx sub-package for SLE 15+. (jsc#SLE-11727) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-748=1 Package List: - openSUSE Leap 15.1 (noarch): dehydrated-0.6.5-lp151.3.6.1 dehydrated-apache2-0.6.5-lp151.3.6.1 dehydrated-lighttpd-0.6.5-lp151.3.6.1 dehydrated-nginx-0.6.5-lp151.3.6.1 References: https://bugzilla.suse.com/1169834

1 0

openSUSE-RU-2020:0747-1: moderate: Recommended update for python-rpm-macros
by maintenance＠opensuse.org 31 May '20

31 May '20

openSUSE Recommended Update: Recommended update for python-rpm-macros ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0747-1 Rating: moderate References: #1171561 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-rpm-macros fixes the following issue: - Update to version 20200207.5feb6c1 (bsc#1171561) * Do not write .pyc files for tests This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-747=1 Package List: - openSUSE Leap 15.1 (noarch): python-rpm-generators-20200207.5feb6c1-lp151.2.6.1 python-rpm-macros-20200207.5feb6c1-lp151.2.6.1 References: https://bugzilla.suse.com/1171561

1 0

openSUSE-RU-2020:0745-1: moderate: Recommended update for go1.12
by maintenance＠opensuse.org 30 May '20

30 May '20

openSUSE Recommended Update: Recommended update for go1.12 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0745-1 Rating: moderate References: #1170826 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for go1.12 fixes the following issues: - Add 'binutils-gold' as a dependency for arm and aarch64 architectures. (bsc#1170826) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-745=1 Package List: - openSUSE Leap 15.1 (x86_64): go1.11-1.11.13-lp151.2.18.1 go1.11-doc-1.11.13-lp151.2.18.1 go1.11-race-1.11.13-lp151.2.18.1 References: https://bugzilla.suse.com/1170826

1 0

openSUSE-SU-2020:0741-1: moderate: Security update for freetds
by opensuse-security＠opensuse.org 29 May '20

29 May '20

openSUSE Security Update: Security update for freetds ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0741-1 Rating: moderate References: #1141132 Cross-References: CVE-2019-13508 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for freetds to 1.1.36 fixes the following issues: Security issue fixed: - CVE-2019-13508: Fixed a heap overflow that could have been caused by malicious servers sending UDT types over protocol version 5.0 (bsc#1141132). Non-security issues fixed: - Enabled Kerberos support - Version update to 1.1.36: * Default TDS protocol version is now "auto" * Improved UTF-8 performances * TDS Pool Server is enabled * MARS support is enabled * NTLMv2 is enabled * See NEWS and ChangeLog for a complete list of changes This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-741=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): freetds-config-1.1.36-lp151.3.3.1 freetds-debuginfo-1.1.36-lp151.3.3.1 freetds-debugsource-1.1.36-lp151.3.3.1 freetds-devel-1.1.36-lp151.3.3.1 freetds-doc-1.1.36-lp151.3.3.1 freetds-tools-1.1.36-lp151.3.3.1 freetds-tools-debuginfo-1.1.36-lp151.3.3.1 libct4-1.1.36-lp151.3.3.1 libct4-debuginfo-1.1.36-lp151.3.3.1 libsybdb5-1.1.36-lp151.3.3.1 libsybdb5-debuginfo-1.1.36-lp151.3.3.1 libtdsodbc0-1.1.36-lp151.3.3.1 libtdsodbc0-debuginfo-1.1.36-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2019-13508.html https://bugzilla.suse.com/1141132

1 0

openSUSE-RU-2020:0743-1: moderate: Recommended update for tigervnc
by maintenance＠opensuse.org 29 May '20

29 May '20

openSUSE Recommended Update: Recommended update for tigervnc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0743-1 Rating: moderate References: #1171519 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for tigervnc fixes the following issue: - Fixes crash in free() when using "-f" option of vncpasswd command. (bsc#1171519) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-743=1 Package List: - openSUSE Leap 15.1 (noarch): tigervnc-x11vnc-1.9.0-lp151.4.6.1 xorg-x11-Xvnc-java-1.9.0-lp151.4.6.1 xorg-x11-Xvnc-novnc-1.9.0-lp151.4.6.1 - openSUSE Leap 15.1 (x86_64): libXvnc-devel-1.9.0-lp151.4.6.1 libXvnc1-1.9.0-lp151.4.6.1 libXvnc1-debuginfo-1.9.0-lp151.4.6.1 tigervnc-1.9.0-lp151.4.6.1 tigervnc-debuginfo-1.9.0-lp151.4.6.1 tigervnc-debugsource-1.9.0-lp151.4.6.1 xorg-x11-Xvnc-1.9.0-lp151.4.6.1 xorg-x11-Xvnc-debuginfo-1.9.0-lp151.4.6.1 xorg-x11-Xvnc-module-1.9.0-lp151.4.6.1 xorg-x11-Xvnc-module-debuginfo-1.9.0-lp151.4.6.1 References: https://bugzilla.suse.com/1171519

1 0

openSUSE-RU-2020:0742-1: moderate: Recommended update for libguestfs
by maintenance＠opensuse.org 29 May '20

29 May '20

openSUSE Recommended Update: Recommended update for libguestfs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0742-1 Rating: moderate References: #1167131 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libguestfs fixes the following issue: - virt-v2v fails importing Ubuntu 18.04 LTS ova. (bsc#1167131) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-742=1 Package List: - openSUSE Leap 15.1 (x86_64): guestfs-data-1.38.0-lp151.4.9.1 guestfs-tools-1.38.0-lp151.4.9.1 guestfs-tools-debuginfo-1.38.0-lp151.4.9.1 guestfsd-1.38.0-lp151.4.9.1 guestfsd-debuginfo-1.38.0-lp151.4.9.1 libguestfs-debugsource-1.38.0-lp151.4.9.1 libguestfs-devel-1.38.0-lp151.4.9.1 libguestfs-test-1.38.0-lp151.4.9.1 libguestfs0-1.38.0-lp151.4.9.1 libguestfs0-debuginfo-1.38.0-lp151.4.9.1 lua-libguestfs-1.38.0-lp151.4.9.1 lua-libguestfs-debuginfo-1.38.0-lp151.4.9.1 ocaml-libguestfs-1.38.0-lp151.4.9.1 ocaml-libguestfs-debuginfo-1.38.0-lp151.4.9.1 ocaml-libguestfs-devel-1.38.0-lp151.4.9.1 perl-Sys-Guestfs-1.38.0-lp151.4.9.1 perl-Sys-Guestfs-debuginfo-1.38.0-lp151.4.9.1 python2-libguestfs-1.38.0-lp151.4.9.1 python2-libguestfs-debuginfo-1.38.0-lp151.4.9.1 python3-libguestfs-1.38.0-lp151.4.9.1 python3-libguestfs-debuginfo-1.38.0-lp151.4.9.1 rubygem-libguestfs-1.38.0-lp151.4.9.1 rubygem-libguestfs-debuginfo-1.38.0-lp151.4.9.1 virt-v2v-1.38.0-lp151.4.9.1 virt-v2v-debuginfo-1.38.0-lp151.4.9.1 References: https://bugzilla.suse.com/1167131

1 0

openSUSE-SU-2020:0744-1: moderate: Security update for trousers
by opensuse-security＠opensuse.org 29 May '20

29 May '20

openSUSE Security Update: Security update for trousers ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0744-1 Rating: moderate References: #1157651 Cross-References: CVE-2019-18898 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for trousers fixes the following issues: - CVE-2019-18898: Fixed a local symlink attack where a rogue tss user could have gain ownership of arbitrary files in the system during installation/update of the trousers package (bsc#1157651). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-744=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libtspi1-0.3.14-lp151.4.6.1 libtspi1-debuginfo-0.3.14-lp151.4.6.1 trousers-0.3.14-lp151.4.6.1 trousers-debuginfo-0.3.14-lp151.4.6.1 trousers-debugsource-0.3.14-lp151.4.6.1 trousers-devel-0.3.14-lp151.4.6.1 - openSUSE Leap 15.1 (x86_64): libtspi1-32bit-0.3.14-lp151.4.6.1 libtspi1-32bit-debuginfo-0.3.14-lp151.4.6.1 References: https://www.suse.com/security/cve/CVE-2019-18898.html https://bugzilla.suse.com/1157651

1 0

openSUSE-RU-2020:0740-1: moderate: Recommended update for gdb
by maintenance＠opensuse.org 29 May '20

29 May '20

openSUSE Recommended Update: Recommended update for gdb ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0740-1 Rating: moderate References: #1168394 #1169368 #1169495 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for gdb fixes the following issues: - Fix .debug_types problems. (bsc#1168394) This will solve a range loop index in find_method and will fix toplevel types when a program is compiled with -fdebug-types-section - Fix python 3.8 warning. (bsc#1169495) Fix incorrect use of 'is' operator for comparison in python/lib/gdb/command/prompt.py The 'is' operator is not meant to be used for comparisons - Fix build with gcc 10 improving endianess detection. (bsc#1169368) - Fix hang after SIGKILL This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-740=1 Package List: - openSUSE Leap 15.1 (x86_64): gdb-8.3.1-lp151.4.9.1 gdb-debuginfo-8.3.1-lp151.4.9.1 gdb-debugsource-8.3.1-lp151.4.9.1 gdb-testresults-8.3.1-lp151.4.9.1 gdbserver-8.3.1-lp151.4.9.1 gdbserver-debuginfo-8.3.1-lp151.4.9.1 References: https://bugzilla.suse.com/1168394 https://bugzilla.suse.com/1169368 https://bugzilla.suse.com/1169495

1 0

openSUSE-RU-2020:0739-1: moderate: Recommended update for python-boto
by maintenance＠opensuse.org 29 May '20

29 May '20

openSUSE Recommended Update: Recommended update for python-boto ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0739-1 Rating: moderate References: #1171769 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-boto fixes the following issues: - Update in SLE-15: (bsc#1171769) - Fix build under python3.8 by skipping more tests that break with previous release. - Skip the tests for the flavors not being built - Remove old comment - Fix breakages caused by removing boto.cacerts module which is imported elsewhere in the package. The file boto/cacerts/cacerts.txt is removed instead, and boto-no-builtin-certs.patch is trimmed. - Activate the test suite, adding many build dependencies with versions. 11 failing Cloudfront signings tests are skipped only on Python 3. - Add versions to runtime dependencies. - python-rsa is added as a Recommends as it is needed for Cloudfront. - python-requests is added as a Recommends as it is needed for Cloudsearch. - python-requests is added as a Suggests as it is used for contrib ymlmessage. This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-739=1 Package List: - openSUSE Leap 15.1 (noarch): python2-boto-2.49.0-lp151.2.6.1 python3-boto-2.49.0-lp151.2.6.1 References: https://bugzilla.suse.com/1171769

1 0

openSUSE-SU-2020:0734-1: Security update for jasper
by opensuse-security＠opensuse.org 29 May '20

29 May '20

openSUSE Security Update: Security update for jasper ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0734-1 Rating: low References: #1092115 Cross-References: CVE-2018-9154 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for jasper fixes the following issues: - CVE-2018-9154: Fixed a potential denial of service in jpc_dec_process_sot() (bsc#1092115). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-734=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): jasper-2.0.14-lp151.4.6.1 jasper-debuginfo-2.0.14-lp151.4.6.1 jasper-debugsource-2.0.14-lp151.4.6.1 libjasper-devel-2.0.14-lp151.4.6.1 libjasper4-2.0.14-lp151.4.6.1 libjasper4-debuginfo-2.0.14-lp151.4.6.1 - openSUSE Leap 15.1 (x86_64): libjasper4-32bit-2.0.14-lp151.4.6.1 libjasper4-32bit-debuginfo-2.0.14-lp151.4.6.1 References: https://www.suse.com/security/cve/CVE-2018-9154.html https://bugzilla.suse.com/1092115

1 0

openSUSE-SU-2020:0738-1: important: Security update for mariadb-connector-c
by opensuse-security＠opensuse.org 29 May '20

29 May '20

openSUSE Security Update: Security update for mariadb-connector-c ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0738-1 Rating: important References: #1171550 Cross-References: CVE-2020-13249 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for mariadb-connector-c fixes the following issues: Security issue fixed: - CVE-2020-13249: Fixed an improper validation of OK packets received from clients (bsc#1171550). Non-security issues fixed: - Update to release 3.1.8 (bsc#1171550) * CONC-304: Rename the static library to libmariadb.a and other libmariadb files in a consistent manner * CONC-441: Default user name for C/C is wrong if login user is different from effective user * CONC-449: Check $MARIADB_HOME/my.cnf in addition to $MYSQL_HOME/my.cnf * CONC-457: mysql_list_processes crashes in unpack_fields * CONC-458: mysql_get_timeout_value crashes when used improper * CONC-464: Fix static build for auth_gssapi_client plugin This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-738=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libmariadb-devel-3.1.8-lp151.3.12.1 libmariadb-devel-debuginfo-3.1.8-lp151.3.12.1 libmariadb3-3.1.8-lp151.3.12.1 libmariadb3-debuginfo-3.1.8-lp151.3.12.1 libmariadb_plugins-3.1.8-lp151.3.12.1 libmariadb_plugins-debuginfo-3.1.8-lp151.3.12.1 libmariadbprivate-3.1.8-lp151.3.12.1 libmariadbprivate-debuginfo-3.1.8-lp151.3.12.1 mariadb-connector-c-debugsource-3.1.8-lp151.3.12.1 - openSUSE Leap 15.1 (x86_64): libmariadb3-32bit-3.1.8-lp151.3.12.1 libmariadb3-32bit-debuginfo-3.1.8-lp151.3.12.1 References: https://www.suse.com/security/cve/CVE-2020-13249.html https://bugzilla.suse.com/1171550

1 0

openSUSE-RU-2020:0735-1: moderate: Recommended update for mdadm
by maintenance＠opensuse.org 29 May '20

29 May '20

openSUSE Recommended Update: Recommended update for mdadm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0735-1 Rating: moderate References: #1106078 #1111960 #1115407 #1123814 #1126975 #1127526 #1129900 #1139709 #1153258 #1156040 #1162479 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 11 recommended fixes can now be installed. Description: This update for mdadm fixes the following issues: - Fix for issue to avoid unexpected switching from raid0 to raid4 by using option '--grow'. (bsc#1129900) - Add support for RAID0 layouts. (bsc#1162479) - Enable mdadm to scan more than 6 operation ROMs. (bsc#1156040) - Fix for finishing recovery when drive with rebuild fails. (bsc#1126975) - Migrate cron jobs to system timer and implement systemd unit files. (bsc#1115407) - Install mdadm environment script to 'usr/lib' (bsc#1111960) - Fix for symlinks that may break MD RAID autorebuild. (bsc#1106078) - Add '--no-devices' option for calling mdadm. (bsc#1139709) - Fix for ignoring option 'MDADM_CHECK_DURATION' in systemd configuration. (bsc#1153258) - Update SLE15-SP1 mdadm code base to 4.1. (bsc#1111960, jsc#SLE-10078, jsc#SLE-9348) - Fix for md monitor that can corrupt metadata during reboot within OS installation (bsc#1127526) - Fix for displaying wrong names in device names in listing. (bsc#1123814) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-735=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): mdadm-4.1-lp151.4.9.1 mdadm-debuginfo-4.1-lp151.4.9.1 mdadm-debugsource-4.1-lp151.4.9.1 References: https://bugzilla.suse.com/1106078 https://bugzilla.suse.com/1111960 https://bugzilla.suse.com/1115407 https://bugzilla.suse.com/1123814 https://bugzilla.suse.com/1126975 https://bugzilla.suse.com/1127526 https://bugzilla.suse.com/1129900 https://bugzilla.suse.com/1139709 https://bugzilla.suse.com/1153258 https://bugzilla.suse.com/1156040 https://bugzilla.suse.com/1162479

1 0

openSUSE-RU-2020:0737-1: moderate: Recommended update for docker-runc
by maintenance＠opensuse.org 29 May '20

29 May '20

openSUSE Recommended Update: Recommended update for docker-runc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0737-1 Rating: moderate References: #1168481 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for docker-runc contains the following fixes: - Backport upstream fix that enable access to /dev/null in containers. Resolves many issues with the implementation of the runc devices cgroup code. Removes some of the disruptive aspects of "runc update". (bsc#1168481) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-737=1 Package List: - openSUSE Leap 15.1 (x86_64): docker-runc-1.0.0rc8+gitr3917_3e425f80a8c9-lp151.3.18.1 docker-runc-debuginfo-1.0.0rc8+gitr3917_3e425f80a8c9-lp151.3.18.1 References: https://bugzilla.suse.com/1168481

1 0

openSUSE-SU-2020:0736-1: Security update for sysstat
by opensuse-security＠opensuse.org 29 May '20

29 May '20

openSUSE Security Update: Security update for sysstat ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0736-1 Rating: low References: #1159104 Cross-References: CVE-2019-19725 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for sysstat fixes the following issues: - CVE-2019-19725: Fixed double free in check_file_actlst in sa_common.c (bsc#1159104). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-736=1 Package List: - openSUSE Leap 15.1 (x86_64): sysstat-12.0.2-lp151.3.15.1 sysstat-debuginfo-12.0.2-lp151.3.15.1 sysstat-debugsource-12.0.2-lp151.3.15.1 sysstat-isag-12.0.2-lp151.3.15.1 References: https://www.suse.com/security/cve/CVE-2019-19725.html https://bugzilla.suse.com/1159104

1 0

openSUSE-RU-2020:0732-1: moderate: Recommended update for glibc
by maintenance＠opensuse.org 29 May '20

29 May '20

openSUSE Recommended Update: Recommended update for glibc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0732-1 Rating: moderate References: #1162930 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for glibc fixes the following issues: - nptl: wait for pending setxid request also in detached thread. (bsc#1162930) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-732=1 Package List: - openSUSE Leap 15.1 (i586 i686 x86_64): glibc-2.26-lp151.19.15.1 glibc-debuginfo-2.26-lp151.19.15.1 glibc-debugsource-2.26-lp151.19.15.1 glibc-devel-2.26-lp151.19.15.1 glibc-devel-debuginfo-2.26-lp151.19.15.1 glibc-devel-static-2.26-lp151.19.15.1 glibc-locale-2.26-lp151.19.15.1 glibc-locale-base-2.26-lp151.19.15.1 glibc-locale-base-debuginfo-2.26-lp151.19.15.1 glibc-profile-2.26-lp151.19.15.1 - openSUSE Leap 15.1 (i586 x86_64): glibc-extra-2.26-lp151.19.15.1 glibc-extra-debuginfo-2.26-lp151.19.15.1 glibc-utils-2.26-lp151.19.15.1 glibc-utils-debuginfo-2.26-lp151.19.15.1 glibc-utils-src-debugsource-2.26-lp151.19.15.1 nscd-2.26-lp151.19.15.1 nscd-debuginfo-2.26-lp151.19.15.1 - openSUSE Leap 15.1 (noarch): glibc-html-2.26-lp151.19.15.1 glibc-i18ndata-2.26-lp151.19.15.1 glibc-info-2.26-lp151.19.15.1 - openSUSE Leap 15.1 (x86_64): glibc-32bit-2.26-lp151.19.15.1 glibc-32bit-debuginfo-2.26-lp151.19.15.1 glibc-devel-32bit-2.26-lp151.19.15.1 glibc-devel-32bit-debuginfo-2.26-lp151.19.15.1 glibc-devel-static-32bit-2.26-lp151.19.15.1 glibc-locale-base-32bit-2.26-lp151.19.15.1 glibc-locale-base-32bit-debuginfo-2.26-lp151.19.15.1 glibc-profile-32bit-2.26-lp151.19.15.1 glibc-utils-32bit-2.26-lp151.19.15.1 glibc-utils-32bit-debuginfo-2.26-lp151.19.15.1 References: https://bugzilla.suse.com/1162930

1 0

openSUSE-RU-2020:0733-1: moderate: Recommended update for vncmanager
by maintenance＠opensuse.org 29 May '20

29 May '20

openSUSE Recommended Update: Recommended update for vncmanager ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0733-1 Rating: moderate References: #1169732 #1171344 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for vncmanager fixes the following issues: - Fix tight compression decoder on big-endian systems. (bsc#1171344) - Fix tight decoder with 888 pixel encodings. (bsc#1169732) - Fix PixelFormat::ntoh() and PixelFormat::hton(). (bsc#1169732) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-733=1 Package List: - openSUSE Leap 15.1 (x86_64): vncmanager-1.0.2-lp151.5.3.1 vncmanager-debuginfo-1.0.2-lp151.5.3.1 vncmanager-debugsource-1.0.2-lp151.5.3.1 References: https://bugzilla.suse.com/1169732 https://bugzilla.suse.com/1171344

1 0

openSUSE-RU-2020:0729-1: moderate: Recommended update for mrsh
by maintenance＠opensuse.org 28 May '20

28 May '20

openSUSE Recommended Update: Recommended update for mrsh ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0729-1 Rating: moderate References: #1144051 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for mrsh fixes the following issues: - Use systemd_ordering instead of systemd_requires: systemd is never a strict requirement; but in case the system is scheduled for installation together with systemd, we want systemd to be installed prior to mrsh. - Add pam_keyinit.so to /etc/pam.d/mrsh|mrlogind. (bsc#1144051) To fully support the use of kernel keyrings by systemd the mrsh package must include the pam_keyinit.so module in its mrsh and mrlogin configuration files. - Add README.SUSE: Describe the steps required to set up and run mrshd/mrlogind. - Add missing services in pre/post/preun/postun scripts. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-729=1 Package List: - openSUSE Leap 15.1 (x86_64): mrsh-2.12-lp151.4.3.1 mrsh-debuginfo-2.12-lp151.4.3.1 mrsh-debugsource-2.12-lp151.4.3.1 mrsh-rsh-compat-2.12-lp151.4.3.1 mrsh-rsh-server-compat-2.12-lp151.4.3.1 mrsh-server-2.12-lp151.4.3.1 mrsh-server-debuginfo-2.12-lp151.4.3.1 References: https://bugzilla.suse.com/1144051

1 0

openSUSE-RU-2020:0730-1: moderate: Recommended update for zlib
by maintenance＠opensuse.org 28 May '20

28 May '20

openSUSE Recommended Update: Recommended update for zlib ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0730-1 Rating: moderate References: #1138793 #1166260 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for zlib fixes the following issues: - Including the latest fixes from IBM (bsc#1166260) IBM Z mainframes starting from version z15 provide DFLTCC instruction, which implements deflate algorithm in hardware with estimated compression and decompression performance orders of magnitude faster than the current zlib and ratio comparable with that of level 1. - Add SUSE specific fix to solve bsc#1138793. The fix will avoid to test if the app was linked with exactly same version of zlib like the one that is present on the runtime. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-730=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libminizip1-1.2.11-lp151.5.6.1 libminizip1-debuginfo-1.2.11-lp151.5.6.1 libz1-1.2.11-lp151.5.6.1 libz1-debuginfo-1.2.11-lp151.5.6.1 minizip-devel-1.2.11-lp151.5.6.1 zlib-debugsource-1.2.11-lp151.5.6.1 zlib-devel-1.2.11-lp151.5.6.1 zlib-devel-static-1.2.11-lp151.5.6.1 - openSUSE Leap 15.1 (x86_64): libminizip1-32bit-1.2.11-lp151.5.6.1 libminizip1-32bit-debuginfo-1.2.11-lp151.5.6.1 libz1-32bit-1.2.11-lp151.5.6.1 libz1-32bit-debuginfo-1.2.11-lp151.5.6.1 zlib-devel-32bit-1.2.11-lp151.5.6.1 zlib-devel-static-32bit-1.2.11-lp151.5.6.1 References: https://bugzilla.suse.com/1138793 https://bugzilla.suse.com/1166260

1 0

openSUSE-SU-2020:0731-1: moderate: Security update for libxslt
by opensuse-security＠opensuse.org 28 May '20

28 May '20

openSUSE Security Update: Security update for libxslt ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0731-1 Rating: moderate References: #1140095 #1140101 #1154609 Cross-References: CVE-2019-13117 CVE-2019-13118 CVE-2019-18197 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for libxslt fixes the following issues: Security issues fixed: - CVE-2019-13118: Fixed a read of uninitialized stack data (bsc#1140101). - CVE-2019-13117: Fixed a uninitialized read which allowed to discern whether a byte on the stack contains certain special characters (bsc#1140095). - CVE-2019-18197: Fixed a dangling pointer in xsltCopyText which may have led to information disclosure (bsc#1154609). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-731=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libxslt-debugsource-1.1.32-lp151.3.6.1 libxslt-devel-1.1.32-lp151.3.6.1 libxslt-tools-1.1.32-lp151.3.6.1 libxslt-tools-debuginfo-1.1.32-lp151.3.6.1 libxslt1-1.1.32-lp151.3.6.1 libxslt1-debuginfo-1.1.32-lp151.3.6.1 - openSUSE Leap 15.1 (x86_64): libxslt-devel-32bit-1.1.32-lp151.3.6.1 libxslt-python-1.1.32-lp151.3.6.1 libxslt-python-debuginfo-1.1.32-lp151.3.6.1 libxslt-python-debugsource-1.1.32-lp151.3.6.1 libxslt1-32bit-1.1.32-lp151.3.6.1 libxslt1-32bit-debuginfo-1.1.32-lp151.3.6.1 References: https://www.suse.com/security/cve/CVE-2019-13117.html https://www.suse.com/security/cve/CVE-2019-13118.html https://www.suse.com/security/cve/CVE-2019-18197.html https://bugzilla.suse.com/1140095 https://bugzilla.suse.com/1140101 https://bugzilla.suse.com/1154609

1 0

openSUSE-RU-2020:0728-1: moderate: Recommended update for amazon-ssm-agent
by maintenance＠opensuse.org 28 May '20

28 May '20

openSUSE Recommended Update: Recommended update for amazon-ssm-agent ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0728-1 Rating: moderate References: #1085670 #1108265 #1170935 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for amazon-ssm-agent fixes the following issues: - Update to 2.3.978.0 (2020-04-08) (bsc#1170935) + Stop pty on receiving TerminateSession request + Add support for Debian arm64 architecture + Refactoring session log generation logic - Update to 2.3.930.0 (2020-03-17) + Bug fix for CloudWatch agent version showing twice in Inventory console + Bug fix for retrieving minor version for CentOS7 + Add snap appData collection for inventory in ubuntu 18 + Add validation for contents of os release files + Add retry for fingerprint generation - Update to 2.3.871.0 (2020-02-20) + Various bug fix for SSM Agent - Update to 2.3.842.0 (2020-01-29) + Bug fix for updating document state file prior agent reboot + Add support to restart agent after SIGPIPE exit status - Update to 2.3.814.0 (2020-01-16) + Bug fix for metadata service V2 + Update Golang version 1.12 for travis + Optimize session manager retry logic - Update to 2.3.786.0 (2019-12-19) + Add support for Oracle Linux v7.5 and v7.7 + Bug fix for Inventory data provider to support special characters + Bug fix for SSM MDS service name - Update to 2.3.772.0 (2019-12-13) + Upgrade AWS SDK + Add logging for fingerprint generation - Update to 2.3.760.0 (2019-11-15) + Session manager supports handling of Task metadata - Update to 2.3.758.0 (2019-11-11) + Add support to update SSM Distributor packages in place - Update to 2.3.756.0 (2019-11-05) + Terminate port forwarding session on receiving TerminateSession flag + Bug fix to reload SSM client if region has not been initialize correctly + Bug fix for retrieval of user groups on Linux - Update to 2.3.722.0 (2019-10-11) + Bug fix for the delay when registering non-EC2 on-prem instances + Bug fix for missing ACL when uploading logs to S3 buckets + Upgrade GoLang version from 1.9 to 1.12 - Update to 2.3.714.0 (2019-09-26) + For port forwarding session, close server connection when client drops it's connection + Bug fix for missing condition of rules from inventory registry + Update service domain information fetch logic from EC2 Metadata - Update to 2.3.707.0 (2019-09-11) + Bug fix for characters dropping from session manager shell output + Bug fix for session manager freezing caused by non utf8 character + Switch the request protocol order for getting S3 Header + Keep port forwarding session open until session is terminated - Update to 2.3.701.0 (2019-08-21) + Send platform type information in controlChannel input - Update to 2.3.687.0 (2019-08-05) + Bug fix for runPowershellScript plugin on linux platform + Add support for document 2.x version to ssm-cli - Update to 2.3.680.0 (2019-07-24) + Added a new Inventory gatherer AWS:BillingInfo which will gather the billing product ids for LicenseIncluded and Marketplace instance - Update to 2.3.672.0 (2019-07-09) + Add Port plugin for SSH/SCP + Add support for Session Manager RunAs functionality on Linux platform - Update to 2.3.668.0 (2019-07-01) + Add Session Manager InteractiveCommands plugin + Bug fix for log formatting issue for session manager - Update to 2.3.662.0 (2019-06-19) + Bug fix for Session Manager when handling line endings on Windows platform + Bug fix for token validation for aws:downloadContent plugin + Check if log group exists before uploading Session Manager logs to CloudWatch + Bug fix for broken S3 urls when using custom documents - Update to 2.3.634.0 (2019-05-28) + Disable appconfig to load credential from specific profile path, add EC2 credentials as the default fallback + Remove sudoers file creation logic if ssm-user already exists + Enable supplementary groups for ssm-user on Linux - Update to 2.3.612.0 (2019-05-08) + Bug fix for UTF-8 encoded issue caused by locale activation on Ubuntu 16.04 instance + Refactor ssm-user creation logic + Bug fix for reporting IP address with wrong network interface + Update configure package document arn pattern - Update to 2.3.542.0 (2019-04-18) + Bug fix for on-premises instance registration in CN region - Update to 2.3.539.0 (2019-04-04) + Add support for further encryption of session data using AWS KMS + Bug fix for excessive instance-id fetching by document workers - Update to 2.3.479.0 (2019-03-06) + Bug fix for downloading content failure caused by wrong S3 endpoint + Bug fix for reboot failure caused by session manager panic + Bug fix for session manager shell output dropping character + Bug fix for mgs endpoint configuration consistency - Update to 2.3.444.0 (2019-02-10) + Updates to UpdateInstanceInformation call, Windows initialization - Update to 2.3.415.0 (2019-01-25) + Bug fix addressing issues in Distributor package upgrade - Update to 2.3.372.0 (2019-01-08) + Bug fix to allow installation of Distributor packages that do not have a version name. + Bug fix for agent crash with message "WaitGroup is reused before previous Wait has returned". - Update to 2.3.344.0 (2018-12-14) + Add frequent collector to detect changed inventory types and upload it to SSM service between two scheduled collections. + Change AWS Systems Manager Distributor to reduce calls to GetDocument by calling DescribeDocument. + Add exit code when ssm-cli execution fails. + Create ssm-user only after the control channel has been successfully created. - Update to 2.3.274.0 (2018-11-26) + Enabled AWS Systems Manager Distributor that lets you securely distribute and install software packages. + Add support for the arm64 architecture on Amazon Linux 2, Ubuntu 16.04/18.04, and RHEL 7.6 to support EC2 A1 instances. - Update to 2.3.235.0 (2018-10-23) + Bug fix for session manager logging on Windows + Bug fix for ConfigureCloudWatch plugin + Bug fix for update SSM agent occasionally failing due to SSM agent service stuck in starting state - Update to 2.3.193.0 (2018-10-23) + Bug fix for past sessions occasionally stuck in terminating state + Darwin masquerades as Linux to bypass OS validation on the backend until official support can be added - Update to 2.3.169.0 (2018-10-23) + Update managed instance role token more frequently - Update to 2.3.136.0 (2018-10-09) + Bug fix for issue that GatherInventory throw out error when there is no Windows Update in instance + Add more filters when getting the Windows event logs at startup to improve performance + Add random jitter before call PutInventory in inventory datauploader - Update to 2.3.117.0 (2018-10-02) + Bug fix for issues during process termination on instances where IAM policy does not grant ssmmessages permissions. - Update to 2.3.101.0 (2018-10-02) + Bug fix to prevent defunct processes when creating the local user ssm-user. + Bug fix for sudoersFile permission to avoid "sudo" command warnings in Session Manager. + Disable hibernation on Windows platform if Cloudwatch configuration is present. - Update to 2.3.68.0 (2018-09-17) + Enables the Session Manager capability that lets you manage your Amazon EC2 instance through an interactive one-click browser-based shell or through the AWS CLI. + Beginning this agent version, SSM Agent will create a local user "ssm-user" and either add it to /etc/sudoers (Linux) or to the Administrators group (Windows) every time the agent starts. The ssm-user is the default OS user when a Session Manager session is started, and the password for this user is reset on every session. You can change the permissions by moving the ssm-user to a less-privileged group or by changing the sudoers file. The ssm-user is not removed from the system when SSM Agent is uninstalled. - Add patch to remove unused import + remove-unused-import.patch - Build-Depend on pkgconfig(systemd) instead of systemd + Allows OBS to depend on the -mini flavors - Refresh patches for new version + fix-version.patch - Update to 2.3.50.0 2018-09-12 (bsc#1108265) + Enables the Session Manager capability that lets you manage your Amazon EC2 instance through an interactive one-click browser-based shell or through the AWS CLI. + Beginning this agent version, SSM Agent will create a local user "ssm-user" and either add it to /etc/sudoers (Linux) or to the Administrators group (Windows) every time the agent starts. The ssm-user is the default OS user when a Session Manager session is started, and the password for this user is reset on every session. You can change the permissions by moving the ssm-user to a less-privileged group or by changing the sudoers file. The ssm-user is not removed from the system when SSM Agent is uninstalled. - Update to 2.3.13.0 2018-08-16 + Bug fix for the SSM Agent service remaining in "Starting" state on Windows when unable to authenticate to the Systems Manager service. - Update to 2.2.916.0 2018-08-02 + NOTE: This build should not be installed for Windows since the SSM Agent service may remain in starting status if unable to authenticate to the Systems Manager service, which is fixed in the latest release. + Bug fix for missing cloudwatch.exe seen in SSM Agent version 2.2.902.0 - Update to 2.2.902.0 2018-07-31 + NOTE: This build should not be installed for Windows since you might see the error - "Encountered error while starting the plugin: Unable to locate cloudwatch.exe" for Cloudwatch plugin. This bug has been fixed in SSM Agent version 2.2.916.0. Also SSM Agent service may remain in starting status if unable to authenticate to the Systems Manager service, which is fixed in the latest release. + Initial support for developer builds on macOS + Retry sending Run Command execution results for up to 2 hours + More detailed error messages are returned for inventory plugin failures during State Manager association executions - Update to 2.2.800.0 2018-06-26 + Bug fix to clean the orchestration directory + Streaming AWS Systems Manager Run Command output to CloudWatch Logs + Reducing number of retries for serial port opening + Add retry logic to installation verification - Update to 2.2.619.0 2018-05-29 + Various bug fixes - Update to 2.2.607.0 2018-05-23 + Various bug fixes - Update to 2.2.546.0 2018-05-07 + Bug fix to retry sending document results if they couldn't reach the service - Update to 2.2.493.0 2018-04-25 + NOTE: Downgrade to this version using AWS-UpdateSSMAgent is not permitted for agent installed using snap + Added support for Ubuntu Snap packaging + Bug fix so that aws:downloadContent does not change permissions of directories + Bug fix to Cloudwatch plugin where StartType has duplicated Enabled value - Update to 2.2.392.0 2018-03-27 + Added support for agent hibernation so that Agent backs off or enters hibernation mode if it does not have access to the service + Various bug fixes - Update to 2.2.355.0 2018-03-16 + Fix S3Download to download from cross regions. + Various bug fixes - Refresh patches for new version + fix-config.patch + fix-version.patch - Update to 2.2.325.0 2018-03-07 (bsc#1085670) + Bug fix to change sourceHashType to be default sha256 on psmodule. - Update to 2.2.257.0 2018-02-23 + Bug fix to address an issue that can prevent the agent from processing associations after a restart. - Update to 2.2.160.0 2018-01-15 + Execute "pwsh" on linux when using runPowershellScript plugin. - Update to 2.2.93.0 2017-11-14 + Update to latest AWS SDK. - Update to 2.2.58.0 2017-10-23 + Switching to use Birdwatcher distribution service for AWS packages. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-728=1 Package List: - openSUSE Leap 15.1 (x86_64): amazon-ssm-agent-2.3.978.0-lp151.5.3.1 References: https://bugzilla.suse.com/1085670 https://bugzilla.suse.com/1108265 https://bugzilla.suse.com/1170935

1 0

openSUSE-RU-2020:0727-1: moderate: Recommended update for go1.12
by maintenance＠opensuse.org 28 May '20

28 May '20

openSUSE Recommended Update: Recommended update for go1.12 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0727-1 Rating: moderate References: #1170826 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for go1.12 fixes the following issues: - Add 'binutils-gold' as a dependency for arm and aarch64 architectures. (bsc#1170826) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-727=1 Package List: - openSUSE Leap 15.1 (x86_64): go1.12-1.12.17-lp151.2.33.2 go1.12-doc-1.12.17-lp151.2.33.2 go1.12-race-1.12.17-lp151.2.33.2 References: https://bugzilla.suse.com/1170826

1 0

openSUSE-RU-2020:0726-1: moderate: Recommended update for paho-mqtt-c
by maintenance＠opensuse.org 26 May '20

26 May '20

openSUSE Recommended Update: Recommended update for paho-mqtt-c ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0726-1 Rating: moderate References: Affected Products: openSUSE Leap 15.1 openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for paho-mqtt-c fixes the following issues: - Initial packaging of paho-mqtt-c v1.3.1 for opensuse leap 15.1 [jsc#ECO-1126] Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-726=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-726=1 Package List: - openSUSE Leap 15.1 (x86_64): libpaho-mqtt-devel-1.3.1-lp151.2.1 libpaho-mqtt-devel-debuginfo-1.3.1-lp151.2.1 libpaho-mqtt1-1.3.1-lp151.2.1 libpaho-mqtt1-debuginfo-1.3.1-lp151.2.1 paho-mqtt-c-debuginfo-1.3.1-lp151.2.1 paho-mqtt-c-debugsource-1.3.1-lp151.2.1 - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): libpaho-mqtt-devel-1.3.1-bp151.2.1 libpaho-mqtt-devel-debuginfo-1.3.1-bp151.2.1 libpaho-mqtt1-1.3.1-bp151.2.1 libpaho-mqtt1-debuginfo-1.3.1-bp151.2.1 paho-mqtt-c-debuginfo-1.3.1-bp151.2.1 paho-mqtt-c-debugsource-1.3.1-bp151.2.1 References:

1 0

openSUSE-RU-2020:0724-1: moderate: Recommended update for yast2-installation
by maintenance＠opensuse.org 26 May '20

26 May '20

openSUSE Recommended Update: Recommended update for yast2-installation ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0724-1 Rating: moderate References: #1168123 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-installation fixes the following issues: - Restore missing icons for ssh import and image deployment for auto clients. (bsc#1168123) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-724=1 Package List: - openSUSE Leap 15.1 (noarch): yast2-installation-4.1.50-lp151.2.15.1 References: https://bugzilla.suse.com/1168123

1 0

openSUSE-SU-2020:0719-1: important: Security update for dom4j
by opensuse-security＠opensuse.org 26 May '20

26 May '20

openSUSE Security Update: Security update for dom4j ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0719-1 Rating: important References: #1169760 Cross-References: CVE-2020-10683 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for dom4j fixes the following issues: - CVE-2020-10683: Fixed an XML External Entity vulnerability in default SAX parser (bsc#1169760). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-719=1 Package List: - openSUSE Leap 15.1 (noarch): dom4j-1.6.1-lp151.6.3.1 dom4j-demo-1.6.1-lp151.6.3.1 dom4j-javadoc-1.6.1-lp151.6.3.1 dom4j-manual-1.6.1-lp151.6.3.1 References: https://www.suse.com/security/cve/CVE-2020-10683.html https://bugzilla.suse.com/1169760

1 0

openSUSE-RU-2020:0718-1: moderate: Recommended update for go1.9
by maintenance＠opensuse.org 26 May '20

26 May '20

openSUSE Recommended Update: Recommended update for go1.9 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0718-1 Rating: moderate References: #1082409 #1119634 #1121397 #974800 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for go1.9 fixes the following issues: - Fix for bootstrap to work gcc other than gcc9 at armv7l. (bsc#974800) - Fix for build failures with gcc7. (bsc#1121397) - Set GOPATH automatically and removes go.sh and GOROOT, in order to make switching between versions no longer break. (bsc#1119634) - Fix for an issue in build when symlinks pointing to versions that were never installed at all. (bsc#1082409) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-718=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): go1.9-1.9.7-lp151.2.3.1 go1.9-doc-1.9.7-lp151.2.3.1 - openSUSE Leap 15.1 (x86_64): go1.9-race-1.9.7-lp151.2.3.1 References: https://bugzilla.suse.com/1082409 https://bugzilla.suse.com/1119634 https://bugzilla.suse.com/1121397 https://bugzilla.suse.com/974800

1 0

openSUSE-RU-2020:0723-1: moderate: Recommended update for libstorage-ng
by maintenance＠opensuse.org 26 May '20

26 May '20

openSUSE Recommended Update: Recommended update for libstorage-ng ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0723-1 Rating: moderate References: #1168615 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libstorage-ng fixes the following issues: - Fix for 'umount/swapoff' failure pop-up notification that stops automated installations. (bsc#1168615) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-723=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libstorage-ng-debuginfo-4.1.111-lp151.3.25.1 libstorage-ng-debugsource-4.1.111-lp151.3.25.1 libstorage-ng-devel-4.1.111-lp151.3.25.1 libstorage-ng-integration-tests-4.1.111-lp151.3.25.1 libstorage-ng-python3-4.1.111-lp151.3.25.1 libstorage-ng-python3-debuginfo-4.1.111-lp151.3.25.1 libstorage-ng-ruby-4.1.111-lp151.3.25.1 libstorage-ng-ruby-debuginfo-4.1.111-lp151.3.25.1 libstorage-ng-utils-4.1.111-lp151.3.25.1 libstorage-ng-utils-debuginfo-4.1.111-lp151.3.25.1 libstorage-ng1-4.1.111-lp151.3.25.1 libstorage-ng1-debuginfo-4.1.111-lp151.3.25.1 - openSUSE Leap 15.1 (noarch): libstorage-ng-lang-4.1.111-lp151.3.25.1 References: https://bugzilla.suse.com/1168615

1 0

openSUSE-RU-2020:0722-1: moderate: Recommended update for golang-packaging
by maintenance＠opensuse.org 26 May '20

26 May '20

openSUSE Recommended Update: Recommended update for golang-packaging ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0722-1 Rating: moderate References: #776058 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for golang-packaging fixes the following issues: - Fix for an issue when go installation fails due missing permissions. (bsc#776058) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-722=1 Package List: - openSUSE Leap 15.1 (noarch): golang-packaging-15.0.12-lp151.2.3.1 References: https://bugzilla.suse.com/776058

1 0

openSUSE-RU-2020:0717-1: moderate: Recommended update for go1.14
by maintenance＠opensuse.org 26 May '20

26 May '20

openSUSE Recommended Update: Recommended update for go1.14 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0717-1 Rating: moderate References: #1164903 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for go1.14 fixes the following issues: go1.14.2 (released 2020-04-08) includes fixes to cgo, the go command, the runtime, os/exec, and testing packages. (bsc#1164903 ECO-1484) * go#38156 doc: BuildNameToCertificate deprecated in go 1.14 not mentioned in the release notes * go#38118 runtime/pprof: lostProfileEvent stack breaks gentraceback guarantee * go#38083 cmd/go/internal/test: data race in (*runCache).builderRunTest * go#38072 runtime: timer self-deadlock due to preemption point * go#38051 runtime: loops forever on sched_yield sometimes(timer related) * go#38005 runtime: "pipe failed with -89" at program startup(mipsle only), timer related netpoll init. * go#37970 runtime/pprof: panic: runtime error: index out of range [-1] * go#37968 runtime: fatal error: found bad pointer in Go heap (incorrect use of unsafe or cgo?) * go#37959 testing: data race between parallel panicking and normal subtest * go#37931 cmd/go: explain automatic vendoring in 'go help modules' * go#37928 runtime: GC pacing exhibits strange behavior with a low GOGC * go#37800 cmd/go: 'Access is denied' when renaming module cache directory * go#37699 PowerRegisterSuspendResumeNotification error on Azure App Services with go 1.13.7 * go#37622 cmd/cgo: fails to generate certain types with Go 1.14 * go#37480 runtime: "fatal error: unexpected signal" 0xC0000005 on Windows for a small program with a large allocation * go#37471 os/exec: environForSysProcAttr is never called as sysattr.Env is never nil go1.14.1 (released 2020-03-19) includes fixes to the go command, tools, and the runtime. * go#37905 cmd/compile: -d=checkptr should not reject unaligned pointers to non-pointer data * go#37833 runtime: sometimes 100% CPU spin during init phase in Go 1.14 with preemptive scheduler * go#37822 cmd/go: module's "go" version should be included in cache key * go#37807 runtime: mlock of signal stack failed: 12 * go#37782 runtime: crash on 1.14 with unexpected return pc, fatal error: unknown caller pc * go#37721 reflect: MakeMap() and not native map type wrong behavior * go#37671 cmd/go: tests that panic or exit are marked as passing when -json flag is used * go#37667 runtime: asyncPreempt should not try to save floating-point context for softfloat MIPS targets * go#37630 doc: missing documentation of quoting the URL of url.Errors in go1.14 release notes * go#37613 runtime: Go 1.14.rc1 3-5% performance regression from 1.13 during protobuf marshalling * go#37494 time: racy Timer access should either work or throw, not panic * go#37478 SIGILL: illegal instruction on any go tool under macOS * go#37447 runtime/pprof: inline frames may not use combined location * go#37343 cmd/trace: requires HTML imports, which doesn't work on any major browser anymore This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-717=1 Package List: - openSUSE Leap 15.1 (x86_64): go1.14-1.14.2-lp151.10.1 go1.14-doc-1.14.2-lp151.10.1 go1.14-race-1.14.2-lp151.10.1 References: https://bugzilla.suse.com/1164903

1 0

openSUSE-RU-2020:0725-1: moderate: Recommended update for NetworkManager-openvpn
by maintenance＠opensuse.org 26 May '20

26 May '20

openSUSE Recommended Update: Recommended update for NetworkManager-openvpn ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0725-1 Rating: moderate References: #1127794 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for NetworkManager-openvpn fixes the following issues: - Fix for Network Manager for proper termination in openVPN when waiting for processes to exit. (bsc#1127794) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-725=1 Package List: - openSUSE Leap 15.1 (x86_64): NetworkManager-openvpn-1.8.2-lp151.4.6.1 NetworkManager-openvpn-debuginfo-1.8.2-lp151.4.6.1 NetworkManager-openvpn-debugsource-1.8.2-lp151.4.6.1 NetworkManager-openvpn-gnome-1.8.2-lp151.4.6.1 NetworkManager-openvpn-gnome-debuginfo-1.8.2-lp151.4.6.1 - openSUSE Leap 15.1 (noarch): NetworkManager-openvpn-lang-1.8.2-lp151.4.6.1 References: https://bugzilla.suse.com/1127794

1 0

openSUSE-SU-2020:0721-1: moderate: Security update for memcached
by opensuse-security＠opensuse.org 26 May '20

26 May '20

openSUSE Security Update: Security update for memcached ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0721-1 Rating: moderate References: #1133817 #1149110 Cross-References: CVE-2019-11596 CVE-2019-15026 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for memcached fixes the following issues: Security issue fixed: - CVE-2019-11596: Fixed a NULL pointer dereference in process_lru_command (bsc#1133817). - CVE-2019-15026: Fixed a stack-based buffer over-read (bsc#1149110). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-721=1 Package List: - openSUSE Leap 15.1 (x86_64): memcached-1.5.6-lp151.4.3.1 memcached-debuginfo-1.5.6-lp151.4.3.1 memcached-debugsource-1.5.6-lp151.4.3.1 memcached-devel-1.5.6-lp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2019-11596.html https://www.suse.com/security/cve/CVE-2019-15026.html https://bugzilla.suse.com/1133817 https://bugzilla.suse.com/1149110

1 0

openSUSE-SU-2020:0720-1: important: Security update for dovecot23
by opensuse-security＠opensuse.org 26 May '20

26 May '20

openSUSE Security Update: Security update for dovecot23 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0720-1 Rating: important References: #1171456 #1171457 #1171458 Cross-References: CVE-2020-10957 CVE-2020-10958 CVE-2020-10967 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for dovecot23 to 2.3.10 fixes the following issues: Security issues fixed: - CVE-2020-10957: Fixed a crash caused by malformed NOOP commands (bsc#1171457). - CVE-2020-10958: Fixed a use-after-free when receiving too many newlines (bsc#1171458). - CVE-2020-10967: Fixed a crash in the lmtp and submission components caused by mails with empty quoted localparts (bsc#1171456). Non-security issues fixed: - The update to 2.3.10 fixes several bugs. Please refer to https://dovecot.org/doc/NEWS for a complete list of changes. This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-720=1 Package List: - openSUSE Leap 15.1 (x86_64): dovecot23-2.3.10-lp151.2.9.1 dovecot23-backend-mysql-2.3.10-lp151.2.9.1 dovecot23-backend-mysql-debuginfo-2.3.10-lp151.2.9.1 dovecot23-backend-pgsql-2.3.10-lp151.2.9.1 dovecot23-backend-pgsql-debuginfo-2.3.10-lp151.2.9.1 dovecot23-backend-sqlite-2.3.10-lp151.2.9.1 dovecot23-backend-sqlite-debuginfo-2.3.10-lp151.2.9.1 dovecot23-debuginfo-2.3.10-lp151.2.9.1 dovecot23-debugsource-2.3.10-lp151.2.9.1 dovecot23-devel-2.3.10-lp151.2.9.1 dovecot23-fts-2.3.10-lp151.2.9.1 dovecot23-fts-debuginfo-2.3.10-lp151.2.9.1 dovecot23-fts-lucene-2.3.10-lp151.2.9.1 dovecot23-fts-lucene-debuginfo-2.3.10-lp151.2.9.1 dovecot23-fts-solr-2.3.10-lp151.2.9.1 dovecot23-fts-solr-debuginfo-2.3.10-lp151.2.9.1 dovecot23-fts-squat-2.3.10-lp151.2.9.1 dovecot23-fts-squat-debuginfo-2.3.10-lp151.2.9.1 References: https://www.suse.com/security/cve/CVE-2020-10957.html https://www.suse.com/security/cve/CVE-2020-10958.html https://www.suse.com/security/cve/CVE-2020-10967.html https://bugzilla.suse.com/1171456 https://bugzilla.suse.com/1171457 https://bugzilla.suse.com/1171458

1 0

openSUSE-SU-2020:0716-1: moderate: Security update for gcc9
by opensuse-security＠opensuse.org 26 May '20

26 May '20

openSUSE Security Update: Security update for gcc9 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0716-1 Rating: moderate References: #1114592 #1135254 #1141897 #1142649 #1142654 #1148517 #1149145 #1149995 #1152590 #1167898 Cross-References: CVE-2019-14250 CVE-2019-15847 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves two vulnerabilities and has 8 fixes is now available. Description: This update includes the GNU Compiler Collection 9. This update ships the GCC 9.3 release. A full changelog is provided by the GCC team on: https://www.gnu.org/software/gcc/gcc-9/changes.html The base system compiler libraries libgcc_s1, libstdc++6 and others are now built by the gcc 9 packages. To use it, install "gcc9" or "gcc9-c++" or other compiler brands and use CC=gcc-9 / CXX=g++-9 during configuration for using it. Security issues fixed: - CVE-2019-15847: Fixed a miscompilation in the POWER9 back end, that optimized multiple calls of the __builtin_darn intrinsic into a single call. (bsc#1149145) - CVE-2019-14250: Fixed a heap overflow in the LTO linker. (bsc#1142649) Non-security issues fixed: - Split out libstdc++ pretty-printers into a separate package supplementing gdb and the installed runtime. (bsc#1135254) - Fixed miscompilation for vector shift on s390. (bsc#1141897) - Includes a fix for Internal compiler error when building HepMC (bsc#1167898) - Includes fix for binutils version parsing - Add libstdc++6-pp provides and conflicts to avoid file conflicts with same minor version of libstdc++6-pp from gcc10. - Add gcc9 autodetect -g at lto link (bsc#1149995) - Install go tool buildid for bootstrapping go Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-716=1 Package List: - openSUSE Leap 15.1 (noarch): gcc9-info-9.3.1+git1296-lp151.2.2 - openSUSE Leap 15.1 (x86_64): cpp9-9.3.1+git1296-lp151.2.2 cpp9-debuginfo-9.3.1+git1296-lp151.2.2 cross-nvptx-gcc9-9.3.1+git1296-lp151.2.1 cross-nvptx-gcc9-debuginfo-9.3.1+git1296-lp151.2.1 cross-nvptx-gcc9-debugsource-9.3.1+git1296-lp151.2.1 cross-nvptx-newlib9-devel-9.3.1+git1296-lp151.2.1 gcc9-32bit-9.3.1+git1296-lp151.2.2 gcc9-9.3.1+git1296-lp151.2.2 gcc9-ada-32bit-9.3.1+git1296-lp151.2.2 gcc9-ada-9.3.1+git1296-lp151.2.2 gcc9-ada-debuginfo-9.3.1+git1296-lp151.2.2 gcc9-c++-32bit-9.3.1+git1296-lp151.2.2 gcc9-c++-9.3.1+git1296-lp151.2.2 gcc9-c++-debuginfo-9.3.1+git1296-lp151.2.2 gcc9-debuginfo-9.3.1+git1296-lp151.2.2 gcc9-debugsource-9.3.1+git1296-lp151.2.2 gcc9-fortran-32bit-9.3.1+git1296-lp151.2.2 gcc9-fortran-9.3.1+git1296-lp151.2.2 gcc9-fortran-debuginfo-9.3.1+git1296-lp151.2.2 gcc9-go-32bit-9.3.1+git1296-lp151.2.2 gcc9-go-9.3.1+git1296-lp151.2.2 gcc9-go-debuginfo-9.3.1+git1296-lp151.2.2 gcc9-locale-9.3.1+git1296-lp151.2.2 libada9-32bit-9.3.1+git1296-lp151.2.2 libada9-32bit-debuginfo-9.3.1+git1296-lp151.2.2 libada9-9.3.1+git1296-lp151.2.2 libada9-debuginfo-9.3.1+git1296-lp151.2.2 libasan5-32bit-9.3.1+git1296-lp151.2.2 libasan5-32bit-debuginfo-9.3.1+git1296-lp151.2.2 libasan5-9.3.1+git1296-lp151.2.2 libasan5-debuginfo-9.3.1+git1296-lp151.2.2 libatomic1-32bit-9.3.1+git1296-lp151.2.2 libatomic1-32bit-debuginfo-9.3.1+git1296-lp151.2.2 libatomic1-9.3.1+git1296-lp151.2.2 libatomic1-debuginfo-9.3.1+git1296-lp151.2.2 libgcc_s1-32bit-9.3.1+git1296-lp151.2.2 libgcc_s1-32bit-debuginfo-9.3.1+git1296-lp151.2.2 libgcc_s1-9.3.1+git1296-lp151.2.2 libgcc_s1-debuginfo-9.3.1+git1296-lp151.2.2 libgfortran5-32bit-9.3.1+git1296-lp151.2.2 libgfortran5-32bit-debuginfo-9.3.1+git1296-lp151.2.2 libgfortran5-9.3.1+git1296-lp151.2.2 libgfortran5-debuginfo-9.3.1+git1296-lp151.2.2 libgo14-32bit-9.3.1+git1296-lp151.2.2 libgo14-32bit-debuginfo-9.3.1+git1296-lp151.2.2 libgo14-9.3.1+git1296-lp151.2.2 libgo14-debuginfo-9.3.1+git1296-lp151.2.2 libgomp1-32bit-9.3.1+git1296-lp151.2.2 libgomp1-32bit-debuginfo-9.3.1+git1296-lp151.2.2 libgomp1-9.3.1+git1296-lp151.2.2 libgomp1-debuginfo-9.3.1+git1296-lp151.2.2 libitm1-32bit-9.3.1+git1296-lp151.2.2 libitm1-32bit-debuginfo-9.3.1+git1296-lp151.2.2 libitm1-9.3.1+git1296-lp151.2.2 libitm1-debuginfo-9.3.1+git1296-lp151.2.2 liblsan0-9.3.1+git1296-lp151.2.2 liblsan0-debuginfo-9.3.1+git1296-lp151.2.2 libquadmath0-32bit-9.3.1+git1296-lp151.2.2 libquadmath0-32bit-debuginfo-9.3.1+git1296-lp151.2.2 libquadmath0-9.3.1+git1296-lp151.2.2 libquadmath0-debuginfo-9.3.1+git1296-lp151.2.2 libstdc++6-32bit-9.3.1+git1296-lp151.2.2 libstdc++6-32bit-debuginfo-9.3.1+git1296-lp151.2.2 libstdc++6-9.3.1+git1296-lp151.2.2 libstdc++6-debuginfo-9.3.1+git1296-lp151.2.2 libstdc++6-devel-gcc9-32bit-9.3.1+git1296-lp151.2.2 libstdc++6-devel-gcc9-9.3.1+git1296-lp151.2.2 libstdc++6-locale-9.3.1+git1296-lp151.2.2 libstdc++6-pp-gcc9-32bit-9.3.1+git1296-lp151.2.2 libstdc++6-pp-gcc9-9.3.1+git1296-lp151.2.2 libtsan0-9.3.1+git1296-lp151.2.2 libtsan0-debuginfo-9.3.1+git1296-lp151.2.2 libubsan1-32bit-9.3.1+git1296-lp151.2.2 libubsan1-32bit-debuginfo-9.3.1+git1296-lp151.2.2 libubsan1-9.3.1+git1296-lp151.2.2 libubsan1-debuginfo-9.3.1+git1296-lp151.2.2 References: https://www.suse.com/security/cve/CVE-2019-14250.html https://www.suse.com/security/cve/CVE-2019-15847.html https://bugzilla.suse.com/1114592 https://bugzilla.suse.com/1135254 https://bugzilla.suse.com/1141897 https://bugzilla.suse.com/1142649 https://bugzilla.suse.com/1142654 https://bugzilla.suse.com/1148517 https://bugzilla.suse.com/1149145 https://bugzilla.suse.com/1149995 https://bugzilla.suse.com/1152590 https://bugzilla.suse.com/1167898

1 0

openSUSE-RU-2020:0714-1: moderate: Recommended update for go1.10
by maintenance＠opensuse.org 25 May '20

25 May '20

openSUSE Recommended Update: Recommended update for go1.10 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0714-1 Rating: moderate References: #1170826 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for go1.10 fixes the following issues: - Add 'binutils-gold' as a dependency for arm and aarch64 architectures. (bsc#1170826) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-714=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): go1.10-1.10.8-lp151.2.6.1 go1.10-doc-1.10.8-lp151.2.6.1 - openSUSE Leap 15.1 (x86_64): go1.10-race-1.10.8-lp151.2.6.1 References: https://bugzilla.suse.com/1170826

1 0

openSUSE-RU-2020:0715-1: moderate: Recommended update for google-compute-engine
by maintenance＠opensuse.org 25 May '20

25 May '20

openSUSE Recommended Update: Recommended update for google-compute-engine ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0715-1 Rating: moderate References: #1170719 #1170720 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for google-compute-engine contain the following fix: - Do not add the created user to the adm, docker, or lxd groups if they exist. (bsc#1170719, bsc#1170720) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-715=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): google-compute-engine-debugsource-20190801-lp151.2.22.1 google-compute-engine-oslogin-20190801-lp151.2.22.1 google-compute-engine-oslogin-debuginfo-20190801-lp151.2.22.1 - openSUSE Leap 15.1 (x86_64): google-compute-engine-oslogin-32bit-20190801-lp151.2.22.1 google-compute-engine-oslogin-32bit-debuginfo-20190801-lp151.2.22.1 - openSUSE Leap 15.1 (noarch): google-compute-engine-init-20190801-lp151.2.22.1 References: https://bugzilla.suse.com/1170719 https://bugzilla.suse.com/1170720

1 0

openSUSE-SU-2020:0711-1: important: Security update for tomcat
by opensuse-security＠opensuse.org 25 May '20

25 May '20

openSUSE Security Update: Security update for tomcat ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0711-1 Rating: important References: #1171928 Cross-References: CVE-2020-9484 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for tomcat fixes the following issues: - Update to Tomcat 9.0.35. See changelog at http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.35_(markt ) * CVE-2020-9484 (bsc#1171928) Apache Tomcat Remote Code Execution via session persistence If an attacker was able to control the contents and name of a file on a server configured to use the PersistenceManager, then the attacker could have triggered a remote code execution via deserialization of the file under their control. This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-711=1 Package List: - openSUSE Leap 15.1 (noarch): tomcat-9.0.35-lp151.3.18.1 tomcat-admin-webapps-9.0.35-lp151.3.18.1 tomcat-docs-webapp-9.0.35-lp151.3.18.1 tomcat-el-3_0-api-9.0.35-lp151.3.18.1 tomcat-embed-9.0.35-lp151.3.18.1 tomcat-javadoc-9.0.35-lp151.3.18.1 tomcat-jsp-2_3-api-9.0.35-lp151.3.18.1 tomcat-jsvc-9.0.35-lp151.3.18.1 tomcat-lib-9.0.35-lp151.3.18.1 tomcat-servlet-4_0-api-9.0.35-lp151.3.18.1 tomcat-webapps-9.0.35-lp151.3.18.1 References: https://www.suse.com/security/cve/CVE-2020-9484.html https://bugzilla.suse.com/1171928

1 0

openSUSE-RU-2020:0713-1: moderate: Recommended update for mokutil
by maintenance＠opensuse.org 25 May '20

25 May '20

openSUSE Recommended Update: Recommended update for mokutil ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0713-1 Rating: moderate References: #1170889 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for mokutil fixes the following issues: - Fix for 'mokutil' to check the error number when listing keys. (bsc#1170889) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-713=1 Package List: - openSUSE Leap 15.1 (x86_64): mokutil-0.3.0-lp151.6.4.1 mokutil-debuginfo-0.3.0-lp151.6.4.1 mokutil-debugsource-0.3.0-lp151.6.4.1 References: https://bugzilla.suse.com/1170889

1 0

openSUSE-RU-2020:0712-1: moderate: Recommended update for bsf
by maintenance＠opensuse.org 25 May '20

25 May '20

openSUSE Recommended Update: Recommended update for bsf ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0712-1 Rating: moderate References: #1134000 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for bsf fixes the following issues: - Add missing Java classes that required for Bean Scripting Framework. (bsc#1134000) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-712=1 Package List: - openSUSE Leap 15.1 (noarch): bsf-2.4.0-lp151.5.3.1 bsf-javadoc-2.4.0-lp151.5.3.1 References: https://bugzilla.suse.com/1134000

1 0

openSUSE-RU-2020:0710-1: moderate: Recommended update for libgcrypt
by maintenance＠opensuse.org 24 May '20

24 May '20

openSUSE Recommended Update: Recommended update for libgcrypt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0710-1 Rating: moderate References: #1171872 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libgcrypt fixes the following issues: - FIPS: RSA/DSA/ECC test_keys() print out debug messages only in debug mode (bsc#1171872) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-710=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libgcrypt-cavs-1.8.2-lp151.9.25.1 libgcrypt-cavs-debuginfo-1.8.2-lp151.9.25.1 libgcrypt-debugsource-1.8.2-lp151.9.25.1 libgcrypt-devel-1.8.2-lp151.9.25.1 libgcrypt-devel-debuginfo-1.8.2-lp151.9.25.1 libgcrypt20-1.8.2-lp151.9.25.1 libgcrypt20-debuginfo-1.8.2-lp151.9.25.1 libgcrypt20-hmac-1.8.2-lp151.9.25.1 - openSUSE Leap 15.1 (x86_64): libgcrypt-devel-32bit-1.8.2-lp151.9.25.1 libgcrypt-devel-32bit-debuginfo-1.8.2-lp151.9.25.1 libgcrypt20-32bit-1.8.2-lp151.9.25.1 libgcrypt20-32bit-debuginfo-1.8.2-lp151.9.25.1 libgcrypt20-hmac-32bit-1.8.2-lp151.9.25.1 References: https://bugzilla.suse.com/1171872

1 0

openSUSE-RU-2020:0708-1: moderate: Recommended update for git
by maintenance＠opensuse.org 24 May '20

24 May '20

openSUSE Recommended Update: Recommended update for git ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0708-1 Rating: moderate References: #1149792 #1169786 #1169936 #1170302 #1170741 #1170939 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 6 recommended fixes can now be installed. Description: This update for git to version 2.26.2 fixes the following issues: - Fixed git-daemon not starting after conversion from sysvinit to systemd service (bsc#1169605). - Enabled access for git-daemon in firewall configuration (bsc#1170302). - Fixed problems with recent switch to protocol v2, which caused fetches transferring unreasonable amount of data (bsc#1170741). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-708=1 Package List: - openSUSE Leap 15.1 (x86_64): git-2.26.2-lp151.4.12.1 git-arch-2.26.2-lp151.4.12.1 git-core-2.26.2-lp151.4.12.1 git-core-debuginfo-2.26.2-lp151.4.12.1 git-credential-gnome-keyring-2.26.2-lp151.4.12.1 git-credential-gnome-keyring-debuginfo-2.26.2-lp151.4.12.1 git-credential-libsecret-2.26.2-lp151.4.12.1 git-credential-libsecret-debuginfo-2.26.2-lp151.4.12.1 git-cvs-2.26.2-lp151.4.12.1 git-daemon-2.26.2-lp151.4.12.1 git-daemon-debuginfo-2.26.2-lp151.4.12.1 git-debuginfo-2.26.2-lp151.4.12.1 git-debugsource-2.26.2-lp151.4.12.1 git-email-2.26.2-lp151.4.12.1 git-gui-2.26.2-lp151.4.12.1 git-p4-2.26.2-lp151.4.12.1 git-svn-2.26.2-lp151.4.12.1 git-svn-debuginfo-2.26.2-lp151.4.12.1 git-web-2.26.2-lp151.4.12.1 gitk-2.26.2-lp151.4.12.1 - openSUSE Leap 15.1 (noarch): git-doc-2.26.2-lp151.4.12.1 References: https://bugzilla.suse.com/1149792 https://bugzilla.suse.com/1169786 https://bugzilla.suse.com/1169936 https://bugzilla.suse.com/1170302 https://bugzilla.suse.com/1170741 https://bugzilla.suse.com/1170939

1 0

openSUSE-SU-2020:0709-1: important: Security update for opera
by opensuse-security＠opensuse.org 24 May '20

24 May '20

openSUSE Security Update: Security update for opera ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0709-1 Rating: important References: Cross-References: CVE-2020-6464 CVE-2020-6831 Affected Products: openSUSE Leap 15.1:NonFree ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for opera fixes the following issues: Opera was updated to version 68.0.3618.104 - CHR-7909 Update chromium on desktop-stable-81-3618 to 81.0.4044.138 - CVE-2020-6831, CVE-2020-6464 - DNA-85609 [Mac] Tabs shrinking & disappearing - DNA-85629 Crash at opera::DownloadButtonPanel::ShouldShowCancelButton() - DNA-85669 Add mocking of AddressDropdownModel in AddressBarControllerTest - DNA-85678 Wrong badge icon on pages with mixed content on desktop-stable-81-3618 - DNA-85820 Flags are blue in default [D] state after restart - DNA-85822 Full screen snap on pkobp.pl - DNA-86077 Problem to upload .JPG file as an wallpaper - DNA-86165 Downloads list doesn’t returns to its original state after clearing search filter - DNA-86236 [Mac] Plus button click area too small - DNA-86241 X tab button is not visible - DNA-86217 Fix performance issue with Background Worker Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1:NonFree: zypper in -t patch openSUSE-2020-709=1 Package List: - openSUSE Leap 15.1:NonFree (x86_64): opera-68.0.3618.104-lp151.2.18.1 References: https://www.suse.com/security/cve/CVE-2020-6464.html https://www.suse.com/security/cve/CVE-2020-6831.html

1 0

openSUSE-RU-2020:0707-1: moderate: Recommended update for man-pages
by maintenance＠opensuse.org 24 May '20

24 May '20

openSUSE Recommended Update: Recommended update for man-pages ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0707-1 Rating: moderate References: #1160568 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for man-pages fixes the following issues: - Move 'man.7' and 'mdoc.7' into separate directories to avoid conflicts with mandoc which is a light-weight man alternative for small systems. (bsc#1160568). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-707=1 Package List: - openSUSE Leap 15.1 (noarch): man-pages-4.16-lp151.4.6.1 References: https://bugzilla.suse.com/1160568

1 0

openSUSE-SU-2020:0703-1: moderate: Security update for ant
by opensuse-security＠opensuse.org 23 May '20

23 May '20

openSUSE Security Update: Security update for ant ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0703-1 Rating: moderate References: #1100053 #1133997 #1134001 Cross-References: CVE-2018-10886 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update for ant fixes the following issues: Security issue fixed: - CVE-2018-10886: Fixed a path traversal vulnerability in malformed zip file paths, which allowed arbitrary file writes and could potentially lead to code execution (bsc#1100053). Non-security issues fixed: - Add rhino to the ant-apache-bsf optional tasks (bsc#1134001). - Remove jakarta-commons-logging dependencies (bsc#1133997). - Use apache-commons-logging in optional tasks This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-703=1 Package List: - openSUSE Leap 15.1 (noarch): ant-1.9.10-lp151.4.3.1 ant-antlr-1.9.10-lp151.4.3.1 ant-apache-bcel-1.9.10-lp151.4.3.1 ant-apache-bsf-1.9.10-lp151.4.3.1 ant-apache-log4j-1.9.10-lp151.4.3.1 ant-apache-oro-1.9.10-lp151.4.3.1 ant-apache-regexp-1.9.10-lp151.4.3.1 ant-apache-resolver-1.9.10-lp151.4.3.1 ant-apache-xalan2-1.9.10-lp151.4.3.1 ant-commons-logging-1.9.10-lp151.4.3.1 ant-commons-net-1.9.10-lp151.4.3.1 ant-javamail-1.9.10-lp151.4.3.1 ant-jdepend-1.9.10-lp151.4.3.1 ant-jmf-1.9.10-lp151.4.3.1 ant-jsch-1.9.10-lp151.4.3.1 ant-junit-1.9.10-lp151.4.3.1 ant-manual-1.9.10-lp151.4.3.1 ant-scripts-1.9.10-lp151.4.3.1 ant-swing-1.9.10-lp151.4.3.1 ant-testutil-1.9.10-lp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2018-10886.html https://bugzilla.suse.com/1100053 https://bugzilla.suse.com/1133997 https://bugzilla.suse.com/1134001

1 0

openSUSE-RU-2020:0702-1: important: Recommended update for permissions
by maintenance＠opensuse.org 23 May '20

23 May '20

openSUSE Recommended Update: Recommended update for permissions ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0702-1 Rating: important References: #1171173 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for permissions fixes the following issues: - Remove setuid bit for newgidmap and newuidmap in paranoid profile. (bsc#1171173) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-702=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): permissions-20181116-lp151.4.21.1 permissions-debuginfo-20181116-lp151.4.21.1 permissions-debugsource-20181116-lp151.4.21.1 - openSUSE Leap 15.1 (noarch): permissions-zypp-plugin-20181116-lp151.4.21.1 References: https://bugzilla.suse.com/1171173

1 0

openSUSE-RU-2020:0706-1: moderate: Recommended update for strawberry
by maintenance＠opensuse.org 23 May '20

23 May '20

openSUSE Recommended Update: Recommended update for strawberry ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0706-1 Rating: moderate References: Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for strawberry fixes the following issues: - Update to version 0.6.11: * Bugfixes: + Fixed MPRIS missing art url when playing albums with embedded cover. + Fixed updating local non collection songs when manually unsetting cover. + Fixed infinite loop and preceding crash when CSS background-color was set in qt5ct. + Fixed UI freeze when updating the database from a large Subsonic or Tidal collection. + Fixed crash when CD loading fails in devices. + Fixed CD devices showing up with having 0 songs after loading. + Fixed the album cover loading indicator being stuck if no cover providers were available. + Fixed the playing widget not updating artist, album or title after metadata has changed for a song when no album cover was loaded. * Enhancements: + Sort songs in collection by song title instead of track if previous grouping is not the album. + Added option to switch on/off automatically searching for album covers to context settings. + Reset last played song when playlist is finished. + Checking content type of received HTTP request for image when receiving album covers. + Added option to scrobbler setting for turning off login error popup. + Made MusicBrainz and Discogs cover providers respect rate limiting. * New features: + Added option to show/hide sidebar. + Added settings for selecting album cover and lyrics providers. + Added album covers from Musixmatch and Spotify. + Added lyrics from Genius, Musixmatch and ChartLyrics. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-706=1 Package List: - openSUSE Leap 15.1 (x86_64): strawberry-0.6.11-lp151.2.21.1 strawberry-debuginfo-0.6.11-lp151.2.21.1 strawberry-debugsource-0.6.11-lp151.2.21.1 References:

1 0

openSUSE-RU-2020:0705-1: moderate: Recommended update for inkscape
by maintenance＠opensuse.org 23 May '20

23 May '20

openSUSE Recommended Update: Recommended update for inkscape ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0705-1 Rating: moderate References: #1171258 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for inkscape fixes the following issue: - Remove inkscape-extension-skencil completely for Leap 15.2 by now. (jsc#SLE-12254, bsc#1171258) The extension was built only on openSUSE in the past, nowadays: * Tumbleweed does not build it since skencil does not support python 3. * SLE has never built and shipped the extension. Hence this submission actually disables the extension on Leap 15.2 and above to keep it consistent with SLE and TW. The stub for packaging the extension is still kept in the spec for future needs when we bring skencil back to the release. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-705=1 Package List: - openSUSE Leap 15.1 (x86_64): inkscape-0.92.2-lp151.6.6.1 inkscape-debuginfo-0.92.2-lp151.6.6.1 inkscape-debugsource-0.92.2-lp151.6.6.1 inkscape-extensions-dia-0.92.2-lp151.6.6.1 inkscape-extensions-extra-0.92.2-lp151.6.6.1 inkscape-extensions-fig-0.92.2-lp151.6.6.1 inkscape-extensions-gimp-0.92.2-lp151.6.6.1 inkscape-extensions-skencil-0.92.2-lp151.6.6.1 - openSUSE Leap 15.1 (noarch): inkscape-lang-0.92.2-lp151.6.6.1 References: https://bugzilla.suse.com/1171258

1 0

openSUSE-SU-2020:0704-1: moderate: Security update for freetype2
by opensuse-security＠opensuse.org 23 May '20

23 May '20

openSUSE Security Update: Security update for freetype2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0704-1 Rating: moderate References: #1079603 #1091109 Cross-References: CVE-2018-6942 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for freetype2 to version 2.10.1 fixes the following issues: Security issue fixed: - CVE-2018-6942: Fixed a NULL pointer dereference within ttinerp.c (bsc#1079603). Non-security issues fixed: - Update to version 2.10.1 * The bytecode hinting of OpenType variation fonts was flawed, since the data in the `CVAR' table wasn't correctly applied. * Auto-hinter support for Mongolian. * The handling of the default character in PCF fonts as introduced in version 2.10.0 was partially broken, causing premature abortion of charmap iteration for many fonts. * If `FT_Set_Named_Instance' was called with the same arguments twice in a row, the function returned an incorrect error code the second time. * Direct rendering using FT_RASTER_FLAG_DIRECT crashed (bug introduced in version 2.10.0). * Increased precision while computing OpenType font variation instances. * The flattening algorithm of cubic Bezier curves was slightly changed to make it faster. This can cause very subtle rendering changes, which aren't noticeable by the eye, however. * The auto-hinter now disables hinting if there are blue zones defined for a `style' (i.e., a certain combination of a script and its related typographic features) but the font doesn't contain any characters needed to set up at least one blue zone. - Add tarball signatures and freetype2.keyring - Update to version 2.10.0 * A bunch of new functions has been added to access and process COLR/CPAL data of OpenType fonts with color-layered glyphs. * As a GSoC 2018 project, Nikhil Ramakrishnan completely overhauled and modernized the API reference. * The logic for computing the global ascender, descender, and height of OpenType fonts has been slightly adjusted for consistency. * `TT_Set_MM_Blend' could fail if called repeatedly with the same arguments. * The precision of handling deltas in Variation Fonts has been increased.The problem did only show up with multidimensional designspaces. * New function `FT_Library_SetLcdGeometry' to set up the geometry of LCD subpixels. * FreeType now uses the `defaultChar' property of PCF fonts to set the glyph for the undefined character at glyph index 0 (as FreeType already does for all other supported font formats). As a consequence, the order of glyphs of a PCF font if accessed with FreeType can be different now compared to previous versions. This change doesn't affect PCF font access with cmaps. * `FT_Select_Charmap' has been changed to allow parameter value `FT_ENCODING_NONE', which is valid for BDF, PCF, and Windows FNT formats to access built-in cmaps that don't have a predefined `FT_Encoding' value. * A previously reserved field in the `FT_GlyphSlotRec' structure now holds the glyph index. * The usual round of fuzzer bug fixes to better reject malformed fonts. * `FT_Outline_New_Internal' and `FT_Outline_Done_Internal' have been removed.These two functions were public by oversight only and were never documented. * A new function `FT_Error_String' returns descriptions of error codes if configuration macro FT_CONFIG_OPTION_ERROR_STRINGS is defined. * `FT_Set_MM_WeightVector' and `FT_Get_MM_WeightVector' are new functions limited to Adobe MultiMaster fonts to directly set and get the weight vector. - Enable subpixel rendering with infinality config: - Re-enable freetype-config, there is just too many fallouts. - Update to version 2.9.1 * Type 1 fonts containing flex features were not rendered correctly (bug introduced in version 2.9). * CVE-2018-6942: Older FreeType versions can crash with certain malformed variation fonts. * Bug fix: Multiple calls to `FT_Get_MM_Var' returned garbage. * Emboldening of bitmaps didn't work correctly sometimes, showing various artifacts (bug introduced in version 2.8.1). * The auto-hinter script ranges have been updated for Unicode 11. No support for new scripts have been added, however, with the exception of Georgian Mtavruli. - freetype-config is now deprecated by upstream and not enabled by default. - Update to version 2.10.1 * The `ftmulti' demo program now supports multiple hidden axes with the same name tag. * `ftview', `ftstring', and `ftgrid' got a `-k' command line option to emulate a sequence of keystrokes at start-up. * `ftview', `ftstring', and `ftgrid' now support screen dumping to a PNG file. * The bytecode debugger, `ttdebug', now supports variation TrueType fonts; a variation font instance can be selected with the new `-d' command line option. - Add tarball signatures and freetype2.keyring - Update to version 2.10.0 * The `ftdump' demo program has new options `-c' and `-C' to display charmaps in compact and detailed format, respectively. Option `-V' has been removed. * The `ftview', `ftstring', and `ftgrid' demo programs use a new command line option `-d' to specify the program window's width, height, and color depth. * The `ftview' demo program now displays red boxes for zero-width glyphs. * `ftglyph' has limited support to display fonts with color-layered glyphs.This will be improved later on. * `ftgrid' can now display bitmap fonts also. * The `ttdebug' demo program has a new option `-f' to select a member of a TrueType collection (TTC). * Other various improvements to the demo programs. - Remove "Supplements: fonts-config" to avoid accidentally pulling in Qt dependencies on some non-Qt based desktops.(bsc#1091109) fonts-config is fundamental but ft2demos seldom installs by end users. only fonts-config maintainers/debuggers may use ft2demos along to debug some issues. - Update to version 2.9.1 * No changelog upstream. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-704=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): freetype2-debugsource-2.10.1-lp151.4.3.1 freetype2-devel-2.10.1-lp151.4.3.1 libfreetype6-2.10.1-lp151.4.3.1 libfreetype6-debuginfo-2.10.1-lp151.4.3.1 - openSUSE Leap 15.1 (x86_64): freetype2-devel-32bit-2.10.1-lp151.4.3.1 ft2demos-2.10.1-lp151.4.3.1 ftbench-2.10.1-lp151.4.3.1 ftdiff-2.10.1-lp151.4.3.1 ftdump-2.10.1-lp151.4.3.1 ftgamma-2.10.1-lp151.4.3.1 ftgrid-2.10.1-lp151.4.3.1 ftinspect-2.10.1-lp151.4.3.1 ftlint-2.10.1-lp151.4.3.1 ftmulti-2.10.1-lp151.4.3.1 ftstring-2.10.1-lp151.4.3.1 ftvalid-2.10.1-lp151.4.3.1 ftview-2.10.1-lp151.4.3.1 libfreetype6-32bit-2.10.1-lp151.4.3.1 libfreetype6-32bit-debuginfo-2.10.1-lp151.4.3.1 - openSUSE Leap 15.1 (noarch): freetype2-profile-tti35-2.10.1-lp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2018-6942.html https://bugzilla.suse.com/1079603 https://bugzilla.suse.com/1091109

1 0

openSUSE-RU-2020:0701-1: moderate: Recommended update for mozilla-nss
by maintenance＠opensuse.org 23 May '20

23 May '20

openSUSE Recommended Update: Recommended update for mozilla-nss ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0701-1 Rating: moderate References: #1170908 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for mozilla-nss fixes the following issues: The following issues are fixed: - Add AES Keywrap POST. - Accept EACCES in lieu of ENOENT when trying to access /proc/sys/crypto/fips_enabled (bsc#1170908). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-701=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libfreebl3-3.47.1-lp151.2.20.1 libfreebl3-debuginfo-3.47.1-lp151.2.20.1 libfreebl3-hmac-3.47.1-lp151.2.20.1 libsoftokn3-3.47.1-lp151.2.20.1 libsoftokn3-debuginfo-3.47.1-lp151.2.20.1 libsoftokn3-hmac-3.47.1-lp151.2.20.1 mozilla-nss-3.47.1-lp151.2.20.1 mozilla-nss-certs-3.47.1-lp151.2.20.1 mozilla-nss-certs-debuginfo-3.47.1-lp151.2.20.1 mozilla-nss-debuginfo-3.47.1-lp151.2.20.1 mozilla-nss-debugsource-3.47.1-lp151.2.20.1 mozilla-nss-devel-3.47.1-lp151.2.20.1 mozilla-nss-sysinit-3.47.1-lp151.2.20.1 mozilla-nss-sysinit-debuginfo-3.47.1-lp151.2.20.1 mozilla-nss-tools-3.47.1-lp151.2.20.1 mozilla-nss-tools-debuginfo-3.47.1-lp151.2.20.1 - openSUSE Leap 15.1 (x86_64): libfreebl3-32bit-3.47.1-lp151.2.20.1 libfreebl3-32bit-debuginfo-3.47.1-lp151.2.20.1 libfreebl3-hmac-32bit-3.47.1-lp151.2.20.1 libsoftokn3-32bit-3.47.1-lp151.2.20.1 libsoftokn3-32bit-debuginfo-3.47.1-lp151.2.20.1 libsoftokn3-hmac-32bit-3.47.1-lp151.2.20.1 mozilla-nss-32bit-3.47.1-lp151.2.20.1 mozilla-nss-32bit-debuginfo-3.47.1-lp151.2.20.1 mozilla-nss-certs-32bit-3.47.1-lp151.2.20.1 mozilla-nss-certs-32bit-debuginfo-3.47.1-lp151.2.20.1 mozilla-nss-sysinit-32bit-3.47.1-lp151.2.20.1 mozilla-nss-sysinit-32bit-debuginfo-3.47.1-lp151.2.20.1 References: https://bugzilla.suse.com/1170908

1 0

openSUSE-RU-2020:0700-1: moderate: Recommended update for syslog-ng
by maintenance＠opensuse.org 23 May '20

23 May '20

openSUSE Recommended Update: Recommended update for syslog-ng ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0700-1 Rating: moderate References: #1169385 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for syslog-ng fixes the following issues: - removed creating news log files from the RPM %post section. Added syslog-ng.conf options to create files/directories automatically, and commenting the relevant part out. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-700=1 Package List: - openSUSE Leap 15.1 (x86_64): libevtlog-3_19-0-3.19.1-lp151.3.6.1 libevtlog-3_19-0-debuginfo-3.19.1-lp151.3.6.1 syslog-ng-3.19.1-lp151.3.6.1 syslog-ng-curl-3.19.1-lp151.3.6.1 syslog-ng-curl-debuginfo-3.19.1-lp151.3.6.1 syslog-ng-debuginfo-3.19.1-lp151.3.6.1 syslog-ng-debugsource-3.19.1-lp151.3.6.1 syslog-ng-devel-3.19.1-lp151.3.6.1 syslog-ng-geoip-3.19.1-lp151.3.6.1 syslog-ng-geoip-debuginfo-3.19.1-lp151.3.6.1 syslog-ng-java-3.19.1-lp151.3.6.1 syslog-ng-java-debuginfo-3.19.1-lp151.3.6.1 syslog-ng-python-3.19.1-lp151.3.6.1 syslog-ng-python-debuginfo-3.19.1-lp151.3.6.1 syslog-ng-redis-3.19.1-lp151.3.6.1 syslog-ng-redis-debuginfo-3.19.1-lp151.3.6.1 syslog-ng-smtp-3.19.1-lp151.3.6.1 syslog-ng-smtp-debuginfo-3.19.1-lp151.3.6.1 syslog-ng-sql-3.19.1-lp151.3.6.1 syslog-ng-sql-debuginfo-3.19.1-lp151.3.6.1 References: https://bugzilla.suse.com/1169385

1 0

openSUSE-RU-2020:0699-1: moderate: Recommended update for konqueror
by maintenance＠opensuse.org 23 May '20

23 May '20

openSUSE Recommended Update: Recommended update for konqueror ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0699-1 Rating: moderate References: #1075663 Affected Products: openSUSE Leap 15.1 openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for konqueror fixes the following issues: - Fixed konqueror to not open a window if it is closed and started a second time (boo#1075663, kde#388333) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-699=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-699=1 Package List: - openSUSE Leap 15.1 (x86_64): konqueror-18.12.3-lp151.2.4.1 konqueror-debuginfo-18.12.3-lp151.2.4.1 konqueror-debugsource-18.12.3-lp151.2.4.1 konqueror-devel-18.12.3-lp151.2.4.1 konqueror-plugins-18.12.3-lp151.2.4.1 konqueror-plugins-debuginfo-18.12.3-lp151.2.4.1 webenginepart-18.12.3-lp151.2.4.1 webenginepart-debuginfo-18.12.3-lp151.2.4.1 - openSUSE Leap 15.1 (noarch): konqueror-lang-18.12.3-lp151.2.4.1 - openSUSE Backports SLE-15-SP1 (aarch64 x86_64): konqueror-18.12.3-bp151.3.3.1 konqueror-devel-18.12.3-bp151.3.3.1 konqueror-plugins-18.12.3-bp151.3.3.1 webenginepart-18.12.3-bp151.3.3.1 - openSUSE Backports SLE-15-SP1 (noarch): konqueror-lang-18.12.3-bp151.3.3.1 References: https://bugzilla.suse.com/1075663

1 0

openSUSE-SU-2020:0698-1: moderate: Security update for pdns-recursor
by opensuse-security＠opensuse.org 23 May '20

23 May '20

openSUSE Security Update: Security update for pdns-recursor ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0698-1 Rating: moderate References: #1171553 Cross-References: CVE-2020-10030 CVE-2020-10995 CVE-2020-12244 Affected Products: openSUSE Leap 15.1 openSUSE Backports SLE-15-SP1 SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for pdns-recursor fixes the following issues: - update to 4.1.16 * fixes an issue where records in the answer section of a NXDOMAIN response lacking an SOA were not properly validated (CVE-2020-12244, boo#1171553) * fixes an issue where invalid hostname on the server can result in disclosure of invalid memory (CVE-2020-10030, boo#1171553) * fixes an issue in the DNS protocol has been found that allows malicious parties to use recursive DNS services to attack third party authoritative name servers (CVE-2020-10995, boo#1171553) For details see https://doc.powerdns.com/recursor/changelog/4.1.html#change-4.1.16 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-698=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-698=1 - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2020-698=1 Package List: - openSUSE Leap 15.1 (x86_64): pdns-recursor-4.1.12-lp151.3.3.1 pdns-recursor-debuginfo-4.1.12-lp151.3.3.1 pdns-recursor-debugsource-4.1.12-lp151.3.3.1 - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): pdns-recursor-4.1.12-bp151.4.3.1 pdns-recursor-debuginfo-4.1.12-bp151.4.3.1 pdns-recursor-debugsource-4.1.12-bp151.4.3.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): pdns-recursor-4.1.16-19.1 References: https://www.suse.com/security/cve/CVE-2020-10030.html https://www.suse.com/security/cve/CVE-2020-10995.html https://www.suse.com/security/cve/CVE-2020-12244.html https://bugzilla.suse.com/1171553

1 0

openSUSE-SU-2020:0698-1: moderate: Security update for pdns-recursor
by opensuse-security＠opensuse.org 23 May '20

23 May '20

openSUSE Security Update: Security update for pdns-recursor ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0698-1 Rating: moderate References: #1171553 Cross-References: CVE-2020-10030 CVE-2020-10995 CVE-2020-12244 Affected Products: openSUSE Leap 15.1 openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for pdns-recursor fixes the following issues: - update to 4.1.16 * fixes an issue where records in the answer section of a NXDOMAIN response lacking an SOA were not properly validated (CVE-2020-12244, boo#1171553) * fixes an issue where invalid hostname on the server can result in disclosure of invalid memory (CVE-2020-10030, boo#1171553) * fixes an issue in the DNS protocol has been found that allows malicious parties to use recursive DNS services to attack third party authoritative name servers (CVE-2020-10995, boo#1171553) For details see https://doc.powerdns.com/recursor/changelog/4.1.html#change-4.1.16 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-698=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-698=1 Package List: - openSUSE Leap 15.1 (x86_64): pdns-recursor-4.1.12-lp151.3.3.1 pdns-recursor-debuginfo-4.1.12-lp151.3.3.1 pdns-recursor-debugsource-4.1.12-lp151.3.3.1 - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): pdns-recursor-4.1.12-bp151.4.3.1 pdns-recursor-debuginfo-4.1.12-bp151.4.3.1 pdns-recursor-debugsource-4.1.12-bp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2020-10030.html https://www.suse.com/security/cve/CVE-2020-10995.html https://www.suse.com/security/cve/CVE-2020-12244.html https://bugzilla.suse.com/1171553

1 0

openSUSE-SU-2020:0682-1: moderate: Security update for openexr
by opensuse-security＠opensuse.org 22 May '20

22 May '20

openSUSE Security Update: Security update for openexr ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0682-1 Rating: moderate References: #1146648 #1169549 #1169573 #1169574 #1169575 #1169576 #1169578 #1169580 Cross-References: CVE-2020-11758 CVE-2020-11760 CVE-2020-11761 CVE-2020-11762 CVE-2020-11763 CVE-2020-11764 CVE-2020-11765 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves 7 vulnerabilities and has one errata is now available. Description: This update for openexr provides the following fix: Security issues fixed: - CVE-2020-11765: Fixed an off-by-one error in use of the ImfXdr.h read function by DwaCompressor:Classifier:Classifier (bsc#1169575). - CVE-2020-11764: Fixed an out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp (bsc#1169574). - CVE-2020-11763: Fixed an out-of-bounds read and write, as demonstrated by ImfTileOffsets.cpp (bsc#1169576). - CVE-2020-11762: Fixed an out-of-bounds read and write in DwaCompressor:uncompress in ImfDwaCompressor.cpp when handling the UNKNOWN compression case (bsc#1169549). - CVE-2020-11761: Fixed an out-of-bounds read during Huffman uncompression, as demonstrated by FastHufDecoder:refill in ImfFastHuf.cpp (bsc#1169578). - CVE-2020-11760: Fixed an out-of-bounds read during RLE uncompression in rleUncompress in ImfRle.cpp (bsc#1169580). - CVE-2020-11758: Fixed an out-of-bounds read in ImfOptimizedPixelReading.h (bsc#1169573). Non-security issue fixed: - Enable tests when building the package on x86_64. (bsc#1146648) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-682=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libIlmImf-2_2-23-2.2.1-lp151.4.9.1 libIlmImf-2_2-23-debuginfo-2.2.1-lp151.4.9.1 libIlmImfUtil-2_2-23-2.2.1-lp151.4.9.1 libIlmImfUtil-2_2-23-debuginfo-2.2.1-lp151.4.9.1 openexr-2.2.1-lp151.4.9.1 openexr-debuginfo-2.2.1-lp151.4.9.1 openexr-debugsource-2.2.1-lp151.4.9.1 openexr-devel-2.2.1-lp151.4.9.1 openexr-doc-2.2.1-lp151.4.9.1 - openSUSE Leap 15.1 (x86_64): libIlmImf-2_2-23-32bit-2.2.1-lp151.4.9.1 libIlmImf-2_2-23-32bit-debuginfo-2.2.1-lp151.4.9.1 libIlmImfUtil-2_2-23-32bit-2.2.1-lp151.4.9.1 libIlmImfUtil-2_2-23-32bit-debuginfo-2.2.1-lp151.4.9.1 References: https://www.suse.com/security/cve/CVE-2020-11758.html https://www.suse.com/security/cve/CVE-2020-11760.html https://www.suse.com/security/cve/CVE-2020-11761.html https://www.suse.com/security/cve/CVE-2020-11762.html https://www.suse.com/security/cve/CVE-2020-11763.html https://www.suse.com/security/cve/CVE-2020-11764.html https://www.suse.com/security/cve/CVE-2020-11765.html https://bugzilla.suse.com/1146648 https://bugzilla.suse.com/1169549 https://bugzilla.suse.com/1169573 https://bugzilla.suse.com/1169574 https://bugzilla.suse.com/1169575 https://bugzilla.suse.com/1169576 https://bugzilla.suse.com/1169578 https://bugzilla.suse.com/1169580

1 0

openSUSE-SU-2020:0676-1: moderate: Security update for autoyast2
by opensuse-security＠opensuse.org 22 May '20

22 May '20

openSUSE Security Update: Security update for autoyast2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0676-1 Rating: moderate References: #1109310 #1133045 #1140711 #1164105 #1168123 #1168281 #1170082 Cross-References: CVE-2019-18905 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves one vulnerability and has 6 fixes is now available. Description: This update for autoyast2 to version 4.1.15 fixes the following issues: Security issue fixed: - CVE-2019-18905: Removed all "--gpg-auto-import-keys" options from zypper commands (bsc#1140711). Non-security issue fixed: - Fix desktop files updating some icons and groups (bsc#1168123). - Restored some missing icons (bsc#1168123, bsc#1109310 and bsc#1168281). - Service for init scripts: Try to start "network-online.target" before starting the autoyast init scripts in order to get a working network (bsc#1164105). - Always re-probe storage after pre-scripts (bsc#1170082, bsc#1133045). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-676=1 Package List: - openSUSE Leap 15.1 (noarch): autoyast2-4.1.15-lp151.2.12.1 autoyast2-installation-4.1.15-lp151.2.12.1 References: https://www.suse.com/security/cve/CVE-2019-18905.html https://bugzilla.suse.com/1109310 https://bugzilla.suse.com/1133045 https://bugzilla.suse.com/1140711 https://bugzilla.suse.com/1164105 https://bugzilla.suse.com/1168123 https://bugzilla.suse.com/1168281 https://bugzilla.suse.com/1170082

1 0

openSUSE-SU-2020:0678-1: important: Security update for gstreamer-plugins-base
by opensuse-security＠opensuse.org 22 May '20

22 May '20

openSUSE Security Update: Security update for gstreamer-plugins-base ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0678-1 Rating: important References: #1133375 Cross-References: CVE-2019-9928 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for gstreamer-plugins-base fixes the following issue: Security issue fixed: - CVE-2019-9928: Fixed a heap-based overflow in the rtsp connection parser (bsc#1133375). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-678=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): gstreamer-plugins-base-1.12.5-lp151.3.3.1 gstreamer-plugins-base-debuginfo-1.12.5-lp151.3.3.1 gstreamer-plugins-base-debugsource-1.12.5-lp151.3.3.1 gstreamer-plugins-base-devel-1.12.5-lp151.3.3.1 gstreamer-plugins-base-doc-1.12.5-lp151.3.3.1 libgstallocators-1_0-0-1.12.5-lp151.3.3.1 libgstallocators-1_0-0-debuginfo-1.12.5-lp151.3.3.1 libgstapp-1_0-0-1.12.5-lp151.3.3.1 libgstapp-1_0-0-debuginfo-1.12.5-lp151.3.3.1 libgstaudio-1_0-0-1.12.5-lp151.3.3.1 libgstaudio-1_0-0-debuginfo-1.12.5-lp151.3.3.1 libgstfft-1_0-0-1.12.5-lp151.3.3.1 libgstfft-1_0-0-debuginfo-1.12.5-lp151.3.3.1 libgstpbutils-1_0-0-1.12.5-lp151.3.3.1 libgstpbutils-1_0-0-debuginfo-1.12.5-lp151.3.3.1 libgstriff-1_0-0-1.12.5-lp151.3.3.1 libgstriff-1_0-0-debuginfo-1.12.5-lp151.3.3.1 libgstrtp-1_0-0-1.12.5-lp151.3.3.1 libgstrtp-1_0-0-debuginfo-1.12.5-lp151.3.3.1 libgstrtsp-1_0-0-1.12.5-lp151.3.3.1 libgstrtsp-1_0-0-debuginfo-1.12.5-lp151.3.3.1 libgstsdp-1_0-0-1.12.5-lp151.3.3.1 libgstsdp-1_0-0-debuginfo-1.12.5-lp151.3.3.1 libgsttag-1_0-0-1.12.5-lp151.3.3.1 libgsttag-1_0-0-debuginfo-1.12.5-lp151.3.3.1 libgstvideo-1_0-0-1.12.5-lp151.3.3.1 libgstvideo-1_0-0-debuginfo-1.12.5-lp151.3.3.1 typelib-1_0-GstAllocators-1_0-1.12.5-lp151.3.3.1 typelib-1_0-GstApp-1_0-1.12.5-lp151.3.3.1 typelib-1_0-GstAudio-1_0-1.12.5-lp151.3.3.1 typelib-1_0-GstFft-1_0-1.12.5-lp151.3.3.1 typelib-1_0-GstPbutils-1_0-1.12.5-lp151.3.3.1 typelib-1_0-GstRtp-1_0-1.12.5-lp151.3.3.1 typelib-1_0-GstRtsp-1_0-1.12.5-lp151.3.3.1 typelib-1_0-GstSdp-1_0-1.12.5-lp151.3.3.1 typelib-1_0-GstTag-1_0-1.12.5-lp151.3.3.1 typelib-1_0-GstVideo-1_0-1.12.5-lp151.3.3.1 - openSUSE Leap 15.1 (noarch): gstreamer-plugins-base-lang-1.12.5-lp151.3.3.1 - openSUSE Leap 15.1 (x86_64): gstreamer-plugins-base-32bit-1.12.5-lp151.3.3.1 gstreamer-plugins-base-32bit-debuginfo-1.12.5-lp151.3.3.1 gstreamer-plugins-base-devel-32bit-1.12.5-lp151.3.3.1 libgstallocators-1_0-0-32bit-1.12.5-lp151.3.3.1 libgstallocators-1_0-0-32bit-debuginfo-1.12.5-lp151.3.3.1 libgstapp-1_0-0-32bit-1.12.5-lp151.3.3.1 libgstapp-1_0-0-32bit-debuginfo-1.12.5-lp151.3.3.1 libgstaudio-1_0-0-32bit-1.12.5-lp151.3.3.1 libgstaudio-1_0-0-32bit-debuginfo-1.12.5-lp151.3.3.1 libgstfft-1_0-0-32bit-1.12.5-lp151.3.3.1 libgstfft-1_0-0-32bit-debuginfo-1.12.5-lp151.3.3.1 libgstpbutils-1_0-0-32bit-1.12.5-lp151.3.3.1 libgstpbutils-1_0-0-32bit-debuginfo-1.12.5-lp151.3.3.1 libgstriff-1_0-0-32bit-1.12.5-lp151.3.3.1 libgstriff-1_0-0-32bit-debuginfo-1.12.5-lp151.3.3.1 libgstrtp-1_0-0-32bit-1.12.5-lp151.3.3.1 libgstrtp-1_0-0-32bit-debuginfo-1.12.5-lp151.3.3.1 libgstrtsp-1_0-0-32bit-1.12.5-lp151.3.3.1 libgstrtsp-1_0-0-32bit-debuginfo-1.12.5-lp151.3.3.1 libgstsdp-1_0-0-32bit-1.12.5-lp151.3.3.1 libgstsdp-1_0-0-32bit-debuginfo-1.12.5-lp151.3.3.1 libgsttag-1_0-0-32bit-1.12.5-lp151.3.3.1 libgsttag-1_0-0-32bit-debuginfo-1.12.5-lp151.3.3.1 libgstvideo-1_0-0-32bit-1.12.5-lp151.3.3.1 libgstvideo-1_0-0-32bit-debuginfo-1.12.5-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2019-9928.html https://bugzilla.suse.com/1133375

1 0

openSUSE-RU-2020:0688-1: moderate: Recommended update for hwinfo
by maintenance＠opensuse.org 22 May '20

22 May '20

openSUSE Recommended Update: Recommended update for hwinfo ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0688-1 Rating: moderate References: #1136475 #1167561 #1169682 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for hwinfo fixes the following issues: - Update the hardware detection library from version 21.66 to 21.70 (bsc#1169682) - Fix xen detection. (bsc#1167561) - Remove the /sbin/udevadm compat symlink that it's not provided anymore - Use FAT LTO objects in order to provide proper static library. - Fix Direct Access Storage Device (DASD) detection (bsc#1136475) - Don't include bcache devices in the regular disk list This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-688=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): hwinfo-21.70-lp151.2.6.1 hwinfo-debuginfo-21.70-lp151.2.6.1 hwinfo-debugsource-21.70-lp151.2.6.1 hwinfo-devel-21.70-lp151.2.6.1 hwinfo-devel-debuginfo-21.70-lp151.2.6.1 References: https://bugzilla.suse.com/1136475 https://bugzilla.suse.com/1167561 https://bugzilla.suse.com/1169682

1 0

openSUSE-RU-2020:0689-1: moderate: Recommended update for openCryptoki
by maintenance＠opensuse.org 22 May '20

22 May '20

openSUSE Recommended Update: Recommended update for openCryptoki ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0689-1 Rating: moderate References: #1157205 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for openCryptoki fixes the following issue: - Solve issues with the crypto function when testing multithreaded code. (bsc#1157205) The update will provide better API lock against concurrent use from other threads and cross-process lock against threads. This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-689=1 Package List: - openSUSE Leap 15.1 (x86_64): openCryptoki-3.11.1-lp151.3.6.1 openCryptoki-64bit-3.11.1-lp151.3.6.1 openCryptoki-64bit-debuginfo-3.11.1-lp151.3.6.1 openCryptoki-debuginfo-3.11.1-lp151.3.6.1 openCryptoki-debugsource-3.11.1-lp151.3.6.1 openCryptoki-devel-3.11.1-lp151.3.6.1 References: https://bugzilla.suse.com/1157205

1 0

openSUSE-SU-2020:0680-1: moderate: Security update for libvpx
by opensuse-security＠opensuse.org 22 May '20

22 May '20

openSUSE Security Update: Security update for libvpx ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0680-1 Rating: moderate References: #1166066 Cross-References: CVE-2020-0034 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libvpx fixes the following issues: - CVE-2020-0034: Fixed an out-of-bounds read on truncated key frames (bsc#1166066). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-680=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libvpx-debugsource-1.6.1-lp151.5.6.1 libvpx-devel-1.6.1-lp151.5.6.1 libvpx4-1.6.1-lp151.5.6.1 libvpx4-debuginfo-1.6.1-lp151.5.6.1 vpx-tools-1.6.1-lp151.5.6.1 vpx-tools-debuginfo-1.6.1-lp151.5.6.1 - openSUSE Leap 15.1 (x86_64): libvpx4-32bit-1.6.1-lp151.5.6.1 libvpx4-32bit-debuginfo-1.6.1-lp151.5.6.1 References: https://www.suse.com/security/cve/CVE-2020-0034.html https://bugzilla.suse.com/1166066

1 0

openSUSE-RU-2020:0675-1: moderate: Recommended update for nfsidmap
by maintenance＠opensuse.org 22 May '20

22 May '20

openSUSE Recommended Update: Recommended update for nfsidmap ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0675-1 Rating: moderate References: #1098217 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for nfsidmap fixes the following issues: - Improve support for SAMBA with Active Directory. (bsc#1098217) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-675=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): nfsidmap-0.26-lp151.4.3.1 nfsidmap-debuginfo-0.26-lp151.4.3.1 nfsidmap-debugsource-0.26-lp151.4.3.1 nfsidmap-devel-0.26-lp151.4.3.1 References: https://bugzilla.suse.com/1098217

1 0

openSUSE-SU-2020:0681-1: moderate: Security update for libxml2
by opensuse-security＠opensuse.org 22 May '20

22 May '20

openSUSE Security Update: Security update for libxml2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0681-1 Rating: moderate References: #1159928 #1161517 #1161521 Cross-References: CVE-2019-19956 CVE-2019-20388 CVE-2020-7595 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for libxml2 fixes the following issues: - CVE-2019-20388: Fixed a memory leak in xmlSchemaPreRun (bsc#1161521). - CVE-2019-19956: Fixed a memory leak (bsc#1159928). - CVE-2020-7595: Fixed an infinite loop in an EOF situation (bsc#1161517). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-681=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libxml2-2-2.9.7-lp151.5.9.1 libxml2-2-debuginfo-2.9.7-lp151.5.9.1 libxml2-debugsource-2.9.7-lp151.5.9.1 libxml2-devel-2.9.7-lp151.5.9.1 libxml2-tools-2.9.7-lp151.5.9.1 libxml2-tools-debuginfo-2.9.7-lp151.5.9.1 python-libxml2-python-debugsource-2.9.7-lp151.5.9.1 python2-libxml2-python-2.9.7-lp151.5.9.1 python2-libxml2-python-debuginfo-2.9.7-lp151.5.9.1 python3-libxml2-python-2.9.7-lp151.5.9.1 python3-libxml2-python-debuginfo-2.9.7-lp151.5.9.1 - openSUSE Leap 15.1 (x86_64): libxml2-2-32bit-2.9.7-lp151.5.9.1 libxml2-2-32bit-debuginfo-2.9.7-lp151.5.9.1 libxml2-devel-32bit-2.9.7-lp151.5.9.1 - openSUSE Leap 15.1 (noarch): libxml2-doc-2.9.7-lp151.5.9.1 References: https://www.suse.com/security/cve/CVE-2019-19956.html https://www.suse.com/security/cve/CVE-2019-20388.html https://www.suse.com/security/cve/CVE-2020-7595.html https://bugzilla.suse.com/1159928 https://bugzilla.suse.com/1161517 https://bugzilla.suse.com/1161521

1 0

openSUSE-RU-2020:0692-1: moderate: Recommended update for grep
by maintenance＠opensuse.org 22 May '20

22 May '20

openSUSE Recommended Update: Recommended update for grep ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0692-1 Rating: moderate References: #1155271 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for grep fixes the following issues: - Update testsuite expectations, no functional changes (bsc#1155271) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-692=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): grep-3.1-lp151.4.3.1 grep-debuginfo-3.1-lp151.4.3.1 grep-debugsource-3.1-lp151.4.3.1 - openSUSE Leap 15.1 (noarch): grep-lang-3.1-lp151.4.3.1 References: https://bugzilla.suse.com/1155271

1 0

openSUSE-SU-2020:0685-1: moderate: Security update for python-rpyc
by opensuse-security＠opensuse.org 22 May '20

22 May '20

openSUSE Security Update: Security update for python-rpyc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0685-1 Rating: moderate References: #1152987 Cross-References: CVE-2019-16328 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-rpyc to 4.1.5 fixes the following issues: Security issue fixed: - CVE-2019-16328: Fixed a missing protocol security check that could have led to code execution (boo#1152987). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-685=1 Package List: - openSUSE Leap 15.1 (noarch): python2-rpyc-4.1.5-lp151.3.3.1 python3-rpyc-4.1.5-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2019-16328.html https://bugzilla.suse.com/1152987

1 0

openSUSE-SU-2020:0693-1: moderate: Security update for dpdk
by opensuse-security＠opensuse.org 22 May '20

22 May '20

openSUSE Security Update: Security update for dpdk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0693-1 Rating: moderate References: #1171477 Cross-References: CVE-2020-10722 CVE-2020-10723 CVE-2020-10724 CVE-2020-10725 CVE-2020-10726 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for dpdk fixes the following issues: Security issues fixed: - CVE-2020-10722: Fixed an integer overflow in vhost_user_set_log_base() (bsc#1171477). - CVE-2020-10723: Fixed an integer truncation in vhost_user_check_and_alloc_queue_pair() (bsc#1171477). - CVE-2020-10724: Fixed a missing inputs validation in Vhost-crypto (bsc#1171477). - CVE-2020-10725: Fixed a segfault caused by invalid virtio descriptors sent from a malicious guest (bsc#1171477). - CVE-2020-10726: Fixed a denial-of-service caused by VHOST_USER_GET_INFLIGHT_FD message flooding (bsc#1171477). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-693=1 Package List: - openSUSE Leap 15.1 (x86_64): dpdk-18.11.3-lp151.3.4.1 dpdk-debuginfo-18.11.3-lp151.3.4.1 dpdk-debugsource-18.11.3-lp151.3.4.1 dpdk-devel-18.11.3-lp151.3.4.1 dpdk-devel-debuginfo-18.11.3-lp151.3.4.1 dpdk-examples-18.11.3-lp151.3.4.1 dpdk-examples-debuginfo-18.11.3-lp151.3.4.1 dpdk-kmp-default-18.11.3_k4.12.14_lp151.28.48-lp151.3.4.1 dpdk-kmp-default-debuginfo-18.11.3_k4.12.14_lp151.28.48-lp151.3.4.1 dpdk-tools-18.11.3-lp151.3.4.1 dpdk-tools-debuginfo-18.11.3-lp151.3.4.1 libdpdk-18_11-18.11.3-lp151.3.4.1 libdpdk-18_11-debuginfo-18.11.3-lp151.3.4.1 - openSUSE Leap 15.1 (noarch): dpdk-doc-18.11.3-lp151.3.4.1 References: https://www.suse.com/security/cve/CVE-2020-10722.html https://www.suse.com/security/cve/CVE-2020-10723.html https://www.suse.com/security/cve/CVE-2020-10724.html https://www.suse.com/security/cve/CVE-2020-10725.html https://www.suse.com/security/cve/CVE-2020-10726.html https://bugzilla.suse.com/1171477

1 0

openSUSE-RU-2020:0687-1: moderate: Recommended update for gnome-themes-standard
by maintenance＠opensuse.org 22 May '20

22 May '20

openSUSE Recommended Update: Recommended update for gnome-themes-standard ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0687-1 Rating: moderate References: #1170757 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gnome-themes-standard fixes the following issue: - Remove the is_opensuse tag to close the gap between Leap and SLE (bsc#1170757, jsc#SLE-11890). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-687=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): gnome-themes-standard-debugsource-3.22.3-lp151.4.3.1 gtk2-theming-engine-adwaita-3.22.3-lp151.4.3.1 gtk2-theming-engine-adwaita-debuginfo-3.22.3-lp151.4.3.1 - openSUSE Leap 15.1 (noarch): gnome-themes-accessibility-3.22.3-lp151.4.3.1 gnome-themes-accessibility-gtk2-3.22.3-lp151.4.3.1 gtk2-metatheme-adwaita-3.22.3-lp151.4.3.1 gtk3-metatheme-adwaita-3.22.3-lp151.4.3.1 metatheme-adwaita-common-3.22.3-lp151.4.3.1 - openSUSE Leap 15.1 (x86_64): gtk2-theming-engine-adwaita-32bit-3.22.3-lp151.4.3.1 gtk2-theming-engine-adwaita-32bit-debuginfo-3.22.3-lp151.4.3.1 References: https://bugzilla.suse.com/1170757

1 0

openSUSE-RU-2020:0683-1: moderate: Recommended update for resource-agents
by maintenance＠opensuse.org 22 May '20

22 May '20

openSUSE Recommended Update: Recommended update for resource-agents ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0683-1 Rating: moderate References: #1136928 #1160121 #1169852 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for resource-agents fixes the following issues: - Disable cache discovery for "gcp-vpc-move-route" resource agent. (bsc#1169852) - Can not manually call the check operation for a resource. (bsc#1136928) - LVM-activate RA: should report monitor fail when VG disappear upon iscsi disconnected. (bsc#1160121) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-683=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): ldirectord-4.3.0184.6ee15eb2-lp151.3.21.1 resource-agents-4.3.0184.6ee15eb2-lp151.3.21.1 resource-agents-debuginfo-4.3.0184.6ee15eb2-lp151.3.21.1 resource-agents-debugsource-4.3.0184.6ee15eb2-lp151.3.21.1 - openSUSE Leap 15.1 (noarch): monitoring-plugins-metadata-4.3.0184.6ee15eb2-lp151.3.21.1 References: https://bugzilla.suse.com/1136928 https://bugzilla.suse.com/1160121 https://bugzilla.suse.com/1169852

1 0

openSUSE-RU-2020:0686-1: moderate: Recommended update for eiciel
by maintenance＠opensuse.org 22 May '20

22 May '20

openSUSE Recommended Update: Recommended update for eiciel ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0686-1 Rating: moderate References: #1170756 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for eiciel fixes the following issue: - Enable translation-update-upstream for both SLE and openSUSE. (bsc#1170756, jsc#SLE-11889) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-686=1 Package List: - openSUSE Leap 15.1 (noarch): eiciel-lang-0.9.12.1-lp151.3.3.1 - openSUSE Leap 15.1 (x86_64): eiciel-0.9.12.1-lp151.3.3.1 eiciel-debuginfo-0.9.12.1-lp151.3.3.1 eiciel-debugsource-0.9.12.1-lp151.3.3.1 nautilus-eiciel-0.9.12.1-lp151.3.3.1 nautilus-eiciel-debuginfo-0.9.12.1-lp151.3.3.1 References: https://bugzilla.suse.com/1170756

1 0

openSUSE-SU-2020:0677-1: moderate: Security update for file
by opensuse-security＠opensuse.org 22 May '20

22 May '20

openSUSE Security Update: Security update for file ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0677-1 Rating: moderate References: #1154661 #1169512 Cross-References: CVE-2019-18218 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for file fixes the following issues: Security issues fixed: - CVE-2019-18218: Fixed a heap-based buffer overflow in cdf_read_property_info() (bsc#1154661). Non-security issue fixed: - Fixed broken '--help' output (bsc#1169512). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-677=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): file-5.32-lp151.8.3.1 file-debuginfo-5.32-lp151.8.3.1 file-debugsource-5.32-lp151.8.3.1 file-devel-5.32-lp151.8.3.1 libmagic1-5.32-lp151.8.3.1 libmagic1-debuginfo-5.32-lp151.8.3.1 python2-magic-5.32-lp151.8.3.1 python3-magic-5.32-lp151.8.3.1 - openSUSE Leap 15.1 (x86_64): file-devel-32bit-5.32-lp151.8.3.1 libmagic1-32bit-5.32-lp151.8.3.1 libmagic1-32bit-debuginfo-5.32-lp151.8.3.1 - openSUSE Leap 15.1 (noarch): file-magic-5.32-lp151.8.3.1 References: https://www.suse.com/security/cve/CVE-2019-18218.html https://bugzilla.suse.com/1154661 https://bugzilla.suse.com/1169512

1 0

openSUSE-RU-2020:0672-1: moderate: Recommended update for cdrtools
by maintenance＠opensuse.org 22 May '20

22 May '20

openSUSE Recommended Update: Recommended update for cdrtools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0672-1 Rating: moderate References: #1169420 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for cdrtools fixes the following issues: - Fix for an issue when 'mediacheck' fails if ISO sizes are larger than 4GB. (bsc#1169420) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-672=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): btcflash-3.02~a09-lp151.4.3.1 btcflash-debuginfo-3.02~a09-lp151.4.3.1 cdda2wav-3.02~a09-lp151.4.3.1 cdda2wav-debuginfo-3.02~a09-lp151.4.3.1 cdrecord-3.02~a09-lp151.4.3.1 cdrecord-debuginfo-3.02~a09-lp151.4.3.1 cdrtools-3.02~a09-lp151.4.3.1 cdrtools-debuginfo-3.02~a09-lp151.4.3.1 cdrtools-debugsource-3.02~a09-lp151.4.3.1 libscg-devel-3.02~a09-lp151.4.3.1 libscg1_0-3.02~a09-lp151.4.3.1 libscg1_0-debuginfo-3.02~a09-lp151.4.3.1 libschily-devel-3.02~a09-lp151.4.3.1 libschily-devel-doc-3.02~a09-lp151.4.3.1 libschily1_0-3.02~a09-lp151.4.3.1 libschily1_0-debuginfo-3.02~a09-lp151.4.3.1 mkisofs-3.02~a09-lp151.4.3.1 mkisofs-debuginfo-3.02~a09-lp151.4.3.1 schily-libs-debuginfo-3.02~a09-lp151.4.3.1 schily-libs-debugsource-3.02~a09-lp151.4.3.1 References: https://bugzilla.suse.com/1169420

1 0

openSUSE-RU-2020:0684-1: moderate: Recommended update for timezone
by maintenance＠opensuse.org 22 May '20

22 May '20

openSUSE Recommended Update: Recommended update for timezone ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0684-1 Rating: moderate References: #1169582 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for timezone fixes the following issues: - timezone update 2020a. (bsc#1169582) * Morocco springs forward on 2020-05-31, not 2020-05-24. * Canada's Yukon advanced to -07 year-round on 2020-03-08. * America/Nuuk renamed from America/Godthab. * zic now supports expiration dates for leap second lists. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-684=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): timezone-2020a-lp151.2.9.1 timezone-debuginfo-2020a-lp151.2.9.1 timezone-debugsource-2020a-lp151.2.9.1 - openSUSE Leap 15.1 (noarch): timezone-java-2020a-lp151.2.9.1 References: https://bugzilla.suse.com/1169582

1 0

openSUSE-SU-2020:0679-1: moderate: Security update for libbsd
by opensuse-security＠opensuse.org 22 May '20

22 May '20

openSUSE Security Update: Security update for libbsd ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0679-1 Rating: moderate References: #1160551 Cross-References: CVE-2019-20367 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libbsd fixes the following issues: - CVE-2019-20367: Fixed an out-of-bounds read during a comparison for a symbol names from the string table (bsc#1160551). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-679=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libbsd-ctor-static-0.8.7-lp151.3.3.1 libbsd-debugsource-0.8.7-lp151.3.3.1 libbsd-devel-0.8.7-lp151.3.3.1 libbsd0-0.8.7-lp151.3.3.1 libbsd0-debuginfo-0.8.7-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2019-20367.html https://bugzilla.suse.com/1160551

1 0

openSUSE-RU-2020:0691-1: moderate: Recommended update for tcsh
by maintenance＠opensuse.org 22 May '20

22 May '20

openSUSE Recommended Update: Recommended update for tcsh ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0691-1 Rating: moderate References: #1170527 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for tcsh fixes the following issues: - Fix for an issue when Midnight Commander freezes changing directory using tcsh shell. (bsc#1170527) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-691=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): tcsh-6.20.00-lp151.3.12.1 tcsh-debuginfo-6.20.00-lp151.3.12.1 tcsh-debugsource-6.20.00-lp151.3.12.1 - openSUSE Leap 15.1 (noarch): tcsh-lang-6.20.00-lp151.3.12.1 References: https://bugzilla.suse.com/1170527

1 0

openSUSE-RU-2020:0697-1: moderate: Recommended update for python3
by maintenance＠opensuse.org 22 May '20

22 May '20

openSUSE Recommended Update: Recommended update for python3 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0697-1 Rating: moderate References: #1149955 #1165894 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for python3 fixes the following issues: - Changed the name of idle3 icons to idle3.png to avoid collision with Python 2 version (bsc#1165894). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-697=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libpython3_6m1_0-3.6.10-lp151.6.18.1 libpython3_6m1_0-debuginfo-3.6.10-lp151.6.18.1 python3-3.6.10-lp151.6.18.1 python3-base-3.6.10-lp151.6.18.1 python3-base-debuginfo-3.6.10-lp151.6.18.1 python3-base-debugsource-3.6.10-lp151.6.18.1 python3-curses-3.6.10-lp151.6.18.1 python3-curses-debuginfo-3.6.10-lp151.6.18.1 python3-dbm-3.6.10-lp151.6.18.1 python3-dbm-debuginfo-3.6.10-lp151.6.18.1 python3-debuginfo-3.6.10-lp151.6.18.1 python3-debugsource-3.6.10-lp151.6.18.1 python3-devel-3.6.10-lp151.6.18.1 python3-devel-debuginfo-3.6.10-lp151.6.18.1 python3-idle-3.6.10-lp151.6.18.1 python3-testsuite-3.6.10-lp151.6.18.1 python3-testsuite-debuginfo-3.6.10-lp151.6.18.1 python3-tk-3.6.10-lp151.6.18.1 python3-tk-debuginfo-3.6.10-lp151.6.18.1 python3-tools-3.6.10-lp151.6.18.1 - openSUSE Leap 15.1 (x86_64): libpython3_6m1_0-32bit-3.6.10-lp151.6.18.1 libpython3_6m1_0-32bit-debuginfo-3.6.10-lp151.6.18.1 python3-32bit-3.6.10-lp151.6.18.1 python3-32bit-debuginfo-3.6.10-lp151.6.18.1 python3-base-32bit-3.6.10-lp151.6.18.1 python3-base-32bit-debuginfo-3.6.10-lp151.6.18.1 References: https://www.suse.com/security/cve/CVE-2019-16056.html https://bugzilla.suse.com/1149955 https://bugzilla.suse.com/1165894

1 0

openSUSE-RU-2020:0674-1: moderate: Recommended update for gnutls
by maintenance＠opensuse.org 22 May '20

22 May '20

openSUSE Recommended Update: Recommended update for gnutls ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0674-1 Rating: moderate References: #1171422 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gnutls fixes the following issues: - Add RSA 4096 key generation support in FIPS mode (bsc#1171422) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-674=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): gnutls-3.6.7-lp151.2.15.1 gnutls-debuginfo-3.6.7-lp151.2.15.1 gnutls-debugsource-3.6.7-lp151.2.15.1 gnutls-guile-3.6.7-lp151.2.15.1 gnutls-guile-debuginfo-3.6.7-lp151.2.15.1 libgnutls-dane-devel-3.6.7-lp151.2.15.1 libgnutls-dane0-3.6.7-lp151.2.15.1 libgnutls-dane0-debuginfo-3.6.7-lp151.2.15.1 libgnutls-devel-3.6.7-lp151.2.15.1 libgnutls30-3.6.7-lp151.2.15.1 libgnutls30-debuginfo-3.6.7-lp151.2.15.1 libgnutls30-hmac-3.6.7-lp151.2.15.1 libgnutlsxx-devel-3.6.7-lp151.2.15.1 libgnutlsxx28-3.6.7-lp151.2.15.1 libgnutlsxx28-debuginfo-3.6.7-lp151.2.15.1 - openSUSE Leap 15.1 (x86_64): libgnutls-devel-32bit-3.6.7-lp151.2.15.1 libgnutls30-32bit-3.6.7-lp151.2.15.1 libgnutls30-32bit-debuginfo-3.6.7-lp151.2.15.1 libgnutls30-hmac-32bit-3.6.7-lp151.2.15.1 References: https://bugzilla.suse.com/1171422

1 0

openSUSE-SU-2020:0673-1: moderate: Security update for imapfilter
by opensuse-security＠opensuse.org 22 May '20

22 May '20

openSUSE Security Update: Security update for imapfilter ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0673-1 Rating: moderate References: #1149931 Cross-References: CVE-2016-10937 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for imapfilter fixes the following issues: Imapfilter was updated to version 2.6.16 including the following security issue: - CVE-2016-10937: Added Support for SSL hostname validation (boo#1149931). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-673=1 Package List: - openSUSE Leap 15.1 (x86_64): imapfilter-2.6.16-lp151.3.3.1 imapfilter-debuginfo-2.6.16-lp151.3.3.1 imapfilter-debugsource-2.6.16-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2016-10937.html https://bugzilla.suse.com/1149931

1 0

openSUSE-SU-2020:0696-1: moderate: Security update for python
by opensuse-security＠opensuse.org 22 May '20

22 May '20

openSUSE Security Update: Security update for python ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0696-1 Rating: moderate References: #1155094 #1162825 Cross-References: CVE-2019-18348 CVE-2019-9674 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for python fixes the following issues: Security issues fixed: - CVE-2019-18348: Fixed a CRLF injection via the host part of the url passed to urlopen(). Now an InvalidURL exception is raised (bsc#1155094). - CVE-2019-9674: Improved the documentation to reflect the dangers of zip-bombs (bsc#1162825). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-696=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libpython2_7-1_0-2.7.17-lp151.10.17.1 libpython2_7-1_0-debuginfo-2.7.17-lp151.10.17.1 python-2.7.17-lp151.10.17.1 python-base-2.7.17-lp151.10.17.1 python-base-debuginfo-2.7.17-lp151.10.17.1 python-base-debugsource-2.7.17-lp151.10.17.1 python-curses-2.7.17-lp151.10.17.1 python-curses-debuginfo-2.7.17-lp151.10.17.1 python-debuginfo-2.7.17-lp151.10.17.1 python-debugsource-2.7.17-lp151.10.17.1 python-demo-2.7.17-lp151.10.17.1 python-devel-2.7.17-lp151.10.17.1 python-gdbm-2.7.17-lp151.10.17.1 python-gdbm-debuginfo-2.7.17-lp151.10.17.1 python-idle-2.7.17-lp151.10.17.1 python-tk-2.7.17-lp151.10.17.1 python-tk-debuginfo-2.7.17-lp151.10.17.1 python-xml-2.7.17-lp151.10.17.1 python-xml-debuginfo-2.7.17-lp151.10.17.1 - openSUSE Leap 15.1 (x86_64): libpython2_7-1_0-32bit-2.7.17-lp151.10.17.1 libpython2_7-1_0-32bit-debuginfo-2.7.17-lp151.10.17.1 python-32bit-2.7.17-lp151.10.17.1 python-32bit-debuginfo-2.7.17-lp151.10.17.1 python-base-32bit-2.7.17-lp151.10.17.1 python-base-32bit-debuginfo-2.7.17-lp151.10.17.1 - openSUSE Leap 15.1 (noarch): python-doc-2.7.17-lp151.10.17.1 python-doc-pdf-2.7.17-lp151.10.17.1 References: https://www.suse.com/security/cve/CVE-2019-18348.html https://www.suse.com/security/cve/CVE-2019-9674.html https://bugzilla.suse.com/1155094 https://bugzilla.suse.com/1162825

1 0

openSUSE-RU-2020:0695-1: moderate: Recommended update for shorewall
by maintenance＠opensuse.org 22 May '20

22 May '20

openSUSE Recommended Update: Recommended update for shorewall ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0695-1 Rating: moderate References: #1047218 #1166114 #833999 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for shorewall to 5.2.4.4 fixes the following issues: - Update to bugfix version 5.2.4.4 + When DYNAMIC_BLACKLIST=ipset... or when SAVE_IPSETS=Yes in shorewall[6].conf, 'shorewall[6] start' could hang. Fixed. + 'shorewall[6] start' would not automatically create dynamic blacklisting ipsets. That has been corrected. - Update to version 5.2.4.2 https://shorewall.org/pub/shorewall/5.2/shorewall-5.2.4/releasenotes.txt - Update to version 5.2.4.1 + Fixes for openSUSE shorewall-init will now ignore 'start' and 'stop' commands, for running firewalls + Spurious messages have been removed - To fix boo#1166114 never restart shorewall-init.service macro service_del_postun is replaced by simpler systemd_postun - Remove conflict between main and lite package. A managing station need main to build configuration and can use -lite to execute it. Users are in charge of choosing which service has to be started and used. - Update to version 5.2.4 https://shorewall.org/pub/shorewall/5.2/shorewall-5.2.4/releasenotes.txt + Previously, when a Shorewall6 firewall was placed into the 'stopped' state, ICMP6 packets required by RFC 4890 were not automatically accepted by the generated ruleset. Beginning with this release, those packets are automatically accepted. + Previously, the output of 'shorewall[6] help' displayed the superseded 'load' command. That text has been deleted. + The QOSExample.html file in the documentation and on the web site previously showed tcrules content for the /etc/shorewall/mangle file (recall that 'mangle' superseded 'tcrules'). That page has been corrected. + The 'Starting and Stopping' and 'Configuration file basics' documents have been updated to align them with the current product behavior. + The 'ipsets' document has been updated to clarify the use of ipsets in the stoppedrules file. - Packaging + shorewall-init package has a removed %service_del_postun macro to close bug boo#1166114 Restarting this service can lock down admin out of the system. + shorewall(6) and shorewall(6)-lite conflict has they shouldn't be installed together on the same system. - Add version to requires in -lite version - Update to minor bugfix version 5.2.3.7 + When DOCKER=Yes, if both the DOCKER-ISOLATE and DOCKER-ISOLATE-STAGE-1 existed then the DOCKER-ISOLATE-STAGE-* chains were not preserved through shorewall state changes. That has been corrected so that both chains are preserved if present. + Previously, the compiler always detected the OLD_CONNTRACK_MATCH capability as being available in IPv6. When OLD_CONNTRACK_MATCH was available, the compiler also mishandled inversion ('!') in the ORIGDEST columns, leading to an assertion failure. Both the incorrect capability detection and the mishandled inversion have been corrected. + During 'enable' processing, if address variables associated with the interface have values different than those when the firewall was last started/restarted/reloaded, then a 'reload' is performed rather than a simple 'enable'. The logic that checks for those changes was incorrect in some configurations, leading to unneeded reload operations. That has been corrected. + When MANGLE_ENABLED=No in shorewall[6].conf, some features requiring use of the mangle table can be allowed, even though the mangle table is not updated. That has been corrected such that use of such features will raise an error. + When the IfEvent(...,reset) action was invoked, the compiler previously emitted a spurious "Resetting..." message. That message has been suppressed. - Packaging + Introduce define conf_need_update to track when we activate the post update warning for users when there's minor or major version update of shorewall boo#1166114 - Update to bugfix minor 5.2.3.6 + Fix for possible start failure when both Docker containers and Libvirt VMs were in use. - Update to bugfix minor 5.2.3.5 + A typo in the FTP documentation has been corrected. + The recommended mss setting when using IPSec with ipcomp has been corrected. + A number of incorrect links in the manpages have been corrected. + The 'bypass' option is now allowed when specifying an NFQUEUE policy. Previously, specifying that option resulted in an error. + Corrected IPv6 Address Range parsing. + Previously, such ranges were required to be of the form [<addr1>-<addr2>] rather than the more standard form [<addr1>]-[<addr2>]. In the snat file (and in nat actions), the latter form was actually flagged as an error while in other contexts, it resulted in a less obvious error being raised. + The manpages have been updated to refer to https://shorewall.org rather than http://www.shorewall.org. - Refresh spec file - Update to bugfix minor 5.2.3.4 + Update release documents. + Correct handling of multi-queue NFQUEUE as a policy. + Correct handling of multi-queue NFQUEUE as a macro parameter. + Correct the description of the 'bypass' NFQUEUE option in shorewall-rules(5). - Update to bugfix minor 5.2.3.3 Previously, if an ipset was specified in an SPORT column, the compiler would raise an error similar to: ERROR: Invalid ipset name () /etc/shorewall/rules (line 44) - Update to bugfix minor 5.2.3.2 Shorewall 5.2 automatically converts an existing 'masq' file to an equivalent 'snat' file. Regrettably, Shorewall 5.2.3 broke that automatic update, such that the following error message was issued: Use of uninitialized value $Shorewall::Nat::raw::currentline in pattern match (m//) at /usr/share/shorewall/Shorewall/Nat.pm line 511, <$currentfile> line nnn. and the generated 'masq' file contains only initial comments. That has been corrected. - Update to bugfix minor 5.2.3.1 release + An issue in the implementation of policy file zone exclusion, released in 5.2.3 has been resolved. In the original release, if more than one zone was excluded then the following error was raised: ERROR: 'all' is not allowed in a source zone list etc/shorewall/policy (line ...) - Update to new 5.2.3 bugfix release http://www.shorewall.net/pub/shorewall/5.2/shorewall-5.2.3/releasenotes.txt This is the retirement of Tom Eastep see. https://sourceforge.net/p/shorewall/mailman/message/36589782/ - Removed module* in file section - Clean-up changes and spec (trailing slashes) - Update to new 5.2.2 bugfix release http://www.shorewall.net/pub/shorewall/5.2/shorewall-5.2.2/releasenotes.txt - Packaging: + As seen with upstream recommend running shorewall update on all version update - Update to major version 5.2.1.4 A lot of changes occurs since last package please consult http://www.shorewall.net/pub/shorewall/5.2/shorewall-5.2.1/releasenotes.txt and the know problem list at http://www.shorewall.net/pub/shorewall/5.2/shorewall-5.2.1/known_problems.t xt - Update your configuration shorewall update Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-695=1 Package List: - openSUSE Leap 15.1 (noarch): shorewall-5.2.4.4-lp151.3.3.1 shorewall-core-5.2.4.4-lp151.3.3.1 shorewall-docs-5.2.4.4-lp151.3.3.1 shorewall-init-5.2.4.4-lp151.3.3.1 shorewall-lite-5.2.4.4-lp151.3.3.1 shorewall6-5.2.4.4-lp151.3.3.1 shorewall6-lite-5.2.4.4-lp151.3.3.1 References: https://bugzilla.suse.com/1047218 https://bugzilla.suse.com/1166114 https://bugzilla.suse.com/833999

1 0

openSUSE-RU-2020:0690-1: moderate: Recommended update for psmisc
by maintenance＠opensuse.org 22 May '20

22 May '20

openSUSE Recommended Update: Recommended update for psmisc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0690-1 Rating: moderate References: #1170247 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for psmisc fixes the following issues: - Allow not unique mounts as well as not unique mountpoint. (bsc#1170247) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-690=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): psmisc-23.0-lp151.7.4.1 psmisc-debuginfo-23.0-lp151.7.4.1 psmisc-debugsource-23.0-lp151.7.4.1 - openSUSE Leap 15.1 (noarch): psmisc-lang-23.0-lp151.7.4.1 References: https://bugzilla.suse.com/1170247

1 0

openSUSE-SU-2020:0670-1: moderate: Security update for nextcloud
by opensuse-security＠opensuse.org 22 May '20

22 May '20

openSUSE Security Update: Security update for nextcloud ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0670-1 Rating: moderate References: #1171572 #1171579 Cross-References: CVE-2020-8154 CVE-2020-8155 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for nextcloud to 18.0.4 fixes the following issues: Security issues fixed: - CVE-2020-8154: Fixed an XSS vulnerability when opening malicious PDFs (NC-SA-2020-018 boo#1171579). - CVE-2020-8155: Fixed a direct object reference vulnerability that allowed attackers to remotely wipe devices of other users (NC-SA-2020-019 boo#1171572). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-670=1 Package List: - openSUSE Leap 15.1 (noarch): nextcloud-18.0.4-lp151.2.6.1 References: https://www.suse.com/security/cve/CVE-2020-8154.html https://www.suse.com/security/cve/CVE-2020-8155.html https://bugzilla.suse.com/1171572 https://bugzilla.suse.com/1171579

1 0

openSUSE-SU-2020:0694-1: moderate: Security update for openconnect
by opensuse-security＠opensuse.org 22 May '20

22 May '20

openSUSE Security Update: Security update for openconnect ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0694-1 Rating: moderate References: #1170452 Cross-References: CVE-2020-12105 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for openconnect fixes the following issues: Security issue fixed: - CVE-2020-12105: Fixed the improper handling of negative return values from X509_check_ function calls that might have allowed MITM attacks (bsc#1170452). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-694=1 Package List: - openSUSE Leap 15.1 (noarch): openconnect-lang-7.08-lp151.6.6.1 - openSUSE Leap 15.1 (x86_64): openconnect-7.08-lp151.6.6.1 openconnect-debuginfo-7.08-lp151.6.6.1 openconnect-debugsource-7.08-lp151.6.6.1 openconnect-devel-7.08-lp151.6.6.1 openconnect-doc-7.08-lp151.6.6.1 References: https://www.suse.com/security/cve/CVE-2020-12105.html https://bugzilla.suse.com/1170452

1 0

openSUSE-RU-2020:0671-1: moderate: Recommended update for ocr
by maintenance＠opensuse.org 22 May '20

22 May '20

openSUSE Recommended Update: Recommended update for ocr ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0671-1 Rating: moderate References: #1171636 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ocr fixes the following issues: - Enable openmpi3 build for all SLE versions. (bsc#1171636) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-671=1 Package List: - openSUSE Leap 15.1 (x86_64): ocr_1_0_1-gnu-hpc-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-hpc-debuginfo-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-hpc-debugsource-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-hpc-devel-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-hpc-doc-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-hpc-examples-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-mpich-hpc-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-mpich-hpc-debuginfo-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-mpich-hpc-debugsource-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-mpich-hpc-devel-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-mpich-hpc-doc-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-mpich-hpc-examples-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-mvapich2-hpc-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-mvapich2-hpc-debuginfo-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-mvapich2-hpc-debugsource-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-mvapich2-hpc-devel-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-mvapich2-hpc-doc-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-mvapich2-hpc-examples-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-openmpi1-hpc-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-openmpi1-hpc-debuginfo-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-openmpi1-hpc-debugsource-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-openmpi1-hpc-devel-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-openmpi1-hpc-doc-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-openmpi1-hpc-examples-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-openmpi2-hpc-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-openmpi2-hpc-debuginfo-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-openmpi2-hpc-debugsource-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-openmpi2-hpc-devel-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-openmpi2-hpc-doc-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-openmpi2-hpc-examples-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-openmpi3-hpc-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-openmpi3-hpc-debuginfo-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-openmpi3-hpc-debugsource-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-openmpi3-hpc-devel-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-openmpi3-hpc-doc-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-openmpi3-hpc-examples-1.0.1-lp151.2.6.1 - openSUSE Leap 15.1 (noarch): ocr-gnu-hpc-1.0.1-lp151.2.6.1 ocr-gnu-hpc-devel-1.0.1-lp151.2.6.1 ocr-gnu-hpc-doc-1.0.1-lp151.2.6.1 ocr-gnu-hpc-examples-1.0.1-lp151.2.6.1 ocr-gnu-mpich-hpc-1.0.1-lp151.2.6.1 ocr-gnu-mpich-hpc-devel-1.0.1-lp151.2.6.1 ocr-gnu-mpich-hpc-doc-1.0.1-lp151.2.6.1 ocr-gnu-mpich-hpc-examples-1.0.1-lp151.2.6.1 ocr-gnu-mvapich2-hpc-1.0.1-lp151.2.6.1 ocr-gnu-mvapich2-hpc-devel-1.0.1-lp151.2.6.1 ocr-gnu-mvapich2-hpc-doc-1.0.1-lp151.2.6.1 ocr-gnu-mvapich2-hpc-examples-1.0.1-lp151.2.6.1 ocr-gnu-openmpi1-hpc-1.0.1-lp151.2.6.1 ocr-gnu-openmpi1-hpc-devel-1.0.1-lp151.2.6.1 ocr-gnu-openmpi1-hpc-doc-1.0.1-lp151.2.6.1 ocr-gnu-openmpi1-hpc-examples-1.0.1-lp151.2.6.1 ocr-gnu-openmpi2-hpc-1.0.1-lp151.2.6.1 ocr-gnu-openmpi2-hpc-devel-1.0.1-lp151.2.6.1 ocr-gnu-openmpi2-hpc-doc-1.0.1-lp151.2.6.1 ocr-gnu-openmpi2-hpc-examples-1.0.1-lp151.2.6.1 ocr-gnu-openmpi3-hpc-1.0.1-lp151.2.6.1 ocr-gnu-openmpi3-hpc-devel-1.0.1-lp151.2.6.1 ocr-gnu-openmpi3-hpc-doc-1.0.1-lp151.2.6.1 ocr-gnu-openmpi3-hpc-examples-1.0.1-lp151.2.6.1 References: https://bugzilla.suse.com/1171636

1 0

openSUSE-SU-2020:0668-1: moderate: Security update for nextcloud
by opensuse-security＠opensuse.org 17 May '20

17 May '20

openSUSE Security Update: Security update for nextcloud ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0668-1 Rating: moderate References: #1171572 #1171579 Cross-References: CVE-2020-8154 CVE-2020-8155 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for nextcloud to 18.0.4 fixes the following issues: Security issues fixed: - CVE-2020-8154: Fixed an XSS vulnerability when opening malicious PDFs (NC-SA-2020-018 boo#1171579). - CVE-2020-8155: Fixed a direct object reference vulnerability that allowed attackers to remotely wipe devices of other users (NC-SA-2020-019 boo#1171572). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-668=1 Package List: - openSUSE Backports SLE-15-SP1 (noarch): nextcloud-18.0.4-bp151.3.9.1 References: https://www.suse.com/security/cve/CVE-2020-8154.html https://www.suse.com/security/cve/CVE-2020-8155.html https://bugzilla.suse.com/1171572 https://bugzilla.suse.com/1171579

1 0

openSUSE-SU-2020:0667-1: moderate: Security update for nextcloud
by opensuse-security＠opensuse.org 17 May '20

17 May '20

openSUSE Security Update: Security update for nextcloud ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0667-1 Rating: moderate References: #1084320 #1171572 #1171579 Cross-References: CVE-2020-8154 CVE-2020-8155 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for nextcloud to 18.0.4 fixes the following issues: Security issues fixed: - CVE-2020-8154: Fixed an XSS vulnerability when opening malicious PDFs (NC-SA-2020-018 boo#1171579). - CVE-2020-8155: Fixed a direct object reference vulnerability that allowed attackers to remotely wipe devices of other users (NC-SA-2020-019 boo#1171572). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2020-667=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): nextcloud-18.0.4-22.1 References: https://www.suse.com/security/cve/CVE-2020-8154.html https://www.suse.com/security/cve/CVE-2020-8155.html https://bugzilla.suse.com/1084320 https://bugzilla.suse.com/1171572 https://bugzilla.suse.com/1171579

1 0

openSUSE-RU-2020:0666-1: moderate: Recommended update for paraview
by maintenance＠opensuse.org 17 May '20

17 May '20

openSUSE Recommended Update: Recommended update for paraview ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0666-1 Rating: moderate References: #1171061 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for paraview fixes the following issues: Update to version 5.6.3 (boo#1171061): * Bug-fix release: No changelog available from upstream. Changes from version 5.6.1: * See https://blog.kitware.com/paraview-5-6-1-release-notes/ This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-666=1 Package List: - openSUSE Backports SLE-15-SP1 (ppc64le s390x x86_64): paraview-5.6.3-bp151.3.3.1 paraview-devel-5.6.3-bp151.3.3.1 References: https://bugzilla.suse.com/1171061

1 0

openSUSE-RU-2020:0665-1: moderate: Recommended update for dracut
by maintenance＠opensuse.org 16 May '20

16 May '20

openSUSE Recommended Update: Recommended update for dracut ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0665-1 Rating: moderate References: #1165024 #1167656 #1169030 #1169997 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for dracut fixes the following issues: - Solve bringing up network interface prematurely. (bsc#1169030) - shutdown: guard against read-only /run (bsc#1167656) - dracut-init: when is it not possible to load a module, prompt a warning message for dracut instead of a fatal error. (bsc#1169997) - Backport upstream typo fix in dmsquash-live-root.sh so that FSIMG variable is correctly set. (bsc#1165024) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-665=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): dracut-044.2-lp151.2.15.1 dracut-debuginfo-044.2-lp151.2.15.1 dracut-debugsource-044.2-lp151.2.15.1 dracut-fips-044.2-lp151.2.15.1 dracut-ima-044.2-lp151.2.15.1 dracut-tools-044.2-lp151.2.15.1 References: https://bugzilla.suse.com/1165024 https://bugzilla.suse.com/1167656 https://bugzilla.suse.com/1169030 https://bugzilla.suse.com/1169997

1 0

openSUSE-RU-2020:0664-1: moderate: Recommended update for jq
by maintenance＠opensuse.org 16 May '20

16 May '20

openSUSE Recommended Update: Recommended update for jq ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0664-1 Rating: moderate References: #1170838 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for jq fixes the following issues: jq was updated to version 1.6: * Destructuring Alternation * many new builtins (see docs) * Add support for ASAN and UBSAN * Make it easier to use jq with shebangs * Add $ENV builtin variable to access environment * Add JQ_COLORS env var for configuring the output colors * change: Calling jq without a program argument now always assumes "." for the program, regardless of stdin/stdout * fix: Make sorting stable regardless of qsort. - Make jq depend on libjq1, so upgrading jq upgrades both This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-664=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): jq-1.6-lp151.3.3.1 jq-debuginfo-1.6-lp151.3.3.1 jq-debugsource-1.6-lp151.3.3.1 libjq-devel-1.6-lp151.3.3.1 libjq1-1.6-lp151.3.3.1 libjq1-debuginfo-1.6-lp151.3.3.1 References: https://bugzilla.suse.com/1170838

1 0

openSUSE-RU-2020:0663-1: moderate: Recommended update for hawk2
by maintenance＠opensuse.org 16 May '20

16 May '20

openSUSE Recommended Update: Recommended update for hawk2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0663-1 Rating: moderate References: #1054027 #1068942 #1069217 #1069296 #1071481 #1074856 #1076421 #1080439 #1085318 #1085343 #1085515 #1089709 #1089802 #1090562 #1090657 #1090667 #1092108 #1092122 #1093420 #1098637 #1137891 #1158681 #1162221 #1165587 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 24 recommended fixes can now be installed. Description: This update for hawk2 fixes the following issues: WIP * Implement mechanism to switch binaries in case (bsc#1165587) * Work around the removal of Dir::Tmpname#make_tmpname (bsc#1162221) * Fix cib.xml parsing for acl_version (bsc#1158681) * Fix mime type issue in MS windows (bsc#1098637) * Fix nameless cluster display (bsc#1137891) * High: Set secure flag to enforce https (bsc#1090657) * Medium: Improve hawk-server side cookie handling (bsc#1090667) * Medium: Set Symmetrical to False when score is Serialize (bsc#1085515) * Medium: Make resource stop/start icon dependent on target-role (bsc#1076421) * Api: Add advance resource type(group|clone|master|bundle) in resource route(fate#323437) * Api: return nil if elem is nil(fate#323437) in some case, param in determine_online_status_fencing is nil, this will cause NoMethodError * Medium: Fix acl_version check (bsc#1089802) * High: Fetch correct meta data (bsc#1092122) * Medium: Fix history explorer views (bsc#1093420) * High: Update links to release notes and documentation (bsc#1089709) * High: Return after redirect in reports (bsc#1090562) * Medium: Comply routes' id with resources' ID (bsc#1092108) * Api: Add registration route (fate#323437) * High: Calculate guest node state correctly (bsc#1074856) * Use Promotable etc. (bsc#1085318) (bsc#1085343) * High: Fix remote nodes iteration (bsc#1080439) * High: Support guest nodes (bsc#1074856) * Ensure certificate/key is group readable (bsc#1071481) * Test: Add test suit for (bsc#1069296) * Dev: Fix acl_enabled? (bsc#1069296) * Dev: Dev: Handle redirection correctly after renaming resources (bsc#1068942) * Dev: Handle redirection correctly after renaming constraints (bsc#1068942) * Dev: Dev: split rename action for constraints to edit/update (bsc#1068942) * Dev: Refactor resouces.js (bsc#1068942) * Dev: Change the rename path for resources (#bsc#1068942) * Dev: split rename action to edit/update (bsc#1068942) * Fix node/resource event injection in simulator (bsc#1069217) * Show descriptions in cluster config (bsc#1054027) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-663=1 Package List: - openSUSE Leap 15.1 (x86_64): hawk2-2.1.1+git.1585238036.fab19246-lp151.2.9.1 hawk2-debuginfo-2.1.1+git.1585238036.fab19246-lp151.2.9.1 hawk2-debugsource-2.1.1+git.1585238036.fab19246-lp151.2.9.1 References: https://bugzilla.suse.com/1054027 https://bugzilla.suse.com/1068942 https://bugzilla.suse.com/1069217 https://bugzilla.suse.com/1069296 https://bugzilla.suse.com/1071481 https://bugzilla.suse.com/1074856 https://bugzilla.suse.com/1076421 https://bugzilla.suse.com/1080439 https://bugzilla.suse.com/1085318 https://bugzilla.suse.com/1085343 https://bugzilla.suse.com/1085515 https://bugzilla.suse.com/1089709 https://bugzilla.suse.com/1089802 https://bugzilla.suse.com/1090562 https://bugzilla.suse.com/1090657 https://bugzilla.suse.com/1090667 https://bugzilla.suse.com/1092108 https://bugzilla.suse.com/1092122 https://bugzilla.suse.com/1093420 https://bugzilla.suse.com/1098637 https://bugzilla.suse.com/1137891 https://bugzilla.suse.com/1158681 https://bugzilla.suse.com/1162221 https://bugzilla.suse.com/1165587

1 0

openSUSE-RU-2020:0662-1: moderate: Recommended update for hwdata
by maintenance＠opensuse.org 16 May '20

16 May '20

openSUSE Recommended Update: Recommended update for hwdata ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0662-1 Rating: moderate References: #1168806 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for hwdata fixes the following issues: Update from version 0.320 to version 0.324 (bsc#1168806) - Updated pci, usb and vendor ids. - Replace pciutils-ids package providing compatibility symbolic link This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-662=1 Package List: - openSUSE Leap 15.1 (noarch): hwdata-0.334-lp151.2.3.1 References: https://bugzilla.suse.com/1168806

1 0

openSUSE-SU-2020:0661-1: moderate: Security update for mailman
by opensuse-security＠opensuse.org 15 May '20

15 May '20

openSUSE Security Update: Security update for mailman ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0661-1 Rating: moderate References: #1171363 #682920 Cross-References: CVE-2020-12108 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for mailman fixes the following issues: Security issue fixed: - CVE-2020-12108: Fixed a content injection bug (boo#1171363). Non-security issue fixed: - Don't default to invalid hosts for DEFAULT_EMAIL_HOST (boo#682920) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-661=1 Package List: - openSUSE Leap 15.1 (x86_64): mailman-2.1.29-lp151.3.11.1 mailman-debuginfo-2.1.29-lp151.3.11.1 mailman-debugsource-2.1.29-lp151.3.11.1 References: https://www.suse.com/security/cve/CVE-2020-12108.html https://bugzilla.suse.com/1171363 https://bugzilla.suse.com/682920

1 0

openSUSE-RU-2020:0660-1: moderate: Recommended update for salt
by maintenance＠opensuse.org 14 May '20

14 May '20

openSUSE Recommended Update: Recommended update for salt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0660-1 Rating: moderate References: #1138952 #1167556 #1169800 #1170042 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for salt fixes the following issues: - Fix partition.mkpart to work without fstype. (bsc#1169800) - Fix typo in 'minion_runner' for AESFuncs exposed methods. - Avoid "NameError: name '__salt_system_encoding__' is not defined". (bsc#1138952) - Fix load cached grain "osrelease_info" to prevent exceptions on "pkg.info_installed" on Debian and Ubuntu minion. (bsc#1170042) - Add new custom SUSE capability for saltutil state module. - Backport saltutil state module to 2019.2 codebase. (bsc#1167556) - virt._get_domain: don't raise an exception if there is no VM. This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-660=1 Package List: - openSUSE Leap 15.1 (x86_64): python2-salt-2019.2.0-lp151.5.18.1 python3-salt-2019.2.0-lp151.5.18.1 salt-2019.2.0-lp151.5.18.1 salt-api-2019.2.0-lp151.5.18.1 salt-cloud-2019.2.0-lp151.5.18.1 salt-doc-2019.2.0-lp151.5.18.1 salt-master-2019.2.0-lp151.5.18.1 salt-minion-2019.2.0-lp151.5.18.1 salt-proxy-2019.2.0-lp151.5.18.1 salt-ssh-2019.2.0-lp151.5.18.1 salt-standalone-formulas-configuration-2019.2.0-lp151.5.18.1 salt-syndic-2019.2.0-lp151.5.18.1 - openSUSE Leap 15.1 (noarch): salt-bash-completion-2019.2.0-lp151.5.18.1 salt-fish-completion-2019.2.0-lp151.5.18.1 salt-zsh-completion-2019.2.0-lp151.5.18.1 References: https://bugzilla.suse.com/1138952 https://bugzilla.suse.com/1167556 https://bugzilla.suse.com/1169800 https://bugzilla.suse.com/1170042

1 0

openSUSE-RU-2020:0659-1: moderate: Recommended update for yast2
by maintenance＠opensuse.org 14 May '20

14 May '20

openSUSE Recommended Update: Recommended update for yast2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0659-1 Rating: moderate References: #1146020 #1166778 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for yast2 fixes the following issues: - Fix for removing ip aliases that were marked to be deleted from the interface configuration files. (bsc#1146020) - Reread network interfaces configuration after writing it avoiding wrong values when reopen network configuration dialog during an installation. (bsc#1166778) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-659=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): yast2-4.1.77-lp151.2.19.1 yast2-logs-4.1.77-lp151.2.19.1 References: https://bugzilla.suse.com/1146020 https://bugzilla.suse.com/1166778

1 0

openSUSE-RU-2020:0658-1: moderate: Recommended update for go1.10
by maintenance＠opensuse.org 14 May '20

14 May '20

openSUSE Recommended Update: Recommended update for go1.10 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0658-1 Rating: moderate References: #1098017 #1113978 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for go1.10 fixes the following issues: - Fix build error with gcc on ppc64le. (bsc#1113978, bsc#1098017) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-658=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): go1.10-1.10.8-lp151.2.3.1 go1.10-doc-1.10.8-lp151.2.3.1 - openSUSE Leap 15.1 (x86_64): go1.10-race-1.10.8-lp151.2.3.1 References: https://bugzilla.suse.com/1098017 https://bugzilla.suse.com/1113978

1 0

openSUSE-RU-2020:0657-1: moderate: Recommended update for strawberry
by maintenance＠opensuse.org 13 May '20

13 May '20

openSUSE Recommended Update: Recommended update for strawberry ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0657-1 Rating: moderate References: Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for strawberry fixes the following issues: strawberry was updated to version 0.6.10: * Bugfixes: + Fixed Subsonic album covers not working for albums with non ASCII charcters. + Fixed reading date and genre from individual tracks in CUE sheets. + Fixed resume playback on startup for CUE songs. + Fixed album cover manager not showing complete album titles in the list of album covers. + Fixed save album cover to file saving "no cover" image instead of actual album cover. + Fixed device state text color in devices not being visible when using a dark theme. + Fixed engine and device in context using too large icons when icons were loaded from the system theme. + Fixed "Secure connection setup failed" problem on Windows when playing streams. + Fixed margin for song title text in context. + Fixed UNC paths with non ASCII charcters not working. * Enhancements: + Allowing all characters except slash and backslash when organising music unless options to strip characters is checked. + New option in organising music to remove problematic filename characters that removes less characters than the FAT option. + General improvements to the album cover loader and album cover providers code. + Fixed loading album cover images from album directory for songs added to the playlist from outside of the collection. + Made automatic album cover search work for songs outside of the collection and for streams. + Made album cover search work based on artist + title if album title is not present for providers supporting song/track search. + Update art manual in playlist for local files, devices and CDDA to avoid loading covers multiple times. + Made lyrics search work for streams. + Added "add stream" to menu. + Only showing song length in context when available. + Sort album cover search results by score and pick the best 3 first before trying others to improve album cover search speed. + Make scrobbler work for streams. + Added search for lyrics as a seperate option in context. + Made font and font sizes in context configurable. + Splitting artist and song title to the relevant metadata when artist and song title is sent as title seperated by a dash in streams. + Added label to show collection pixmap disk cache used in settings. + Icreased default collection pixmap disk cache to 360. * New features: + Added back Tidal streaming support. + Added Qobuz album cover provider. * Removed features: + Removed Phonon engine support. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-657=1 Package List: - openSUSE Leap 15.1 (x86_64): strawberry-0.6.10-lp151.2.18.1 strawberry-debuginfo-0.6.10-lp151.2.18.1 strawberry-debugsource-0.6.10-lp151.2.18.1 References:

1 0

openSUSE-RU-2020:0655-1: moderate: Recommended update for cluster-glue
by maintenance＠opensuse.org 12 May '20

12 May '20

openSUSE Recommended Update: Recommended update for cluster-glue ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0655-1 Rating: moderate References: #1131545 #1169784 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for cluster-glue fixes the following issues: - Fix for profile parameter handling EC2 stonith plugin to avoid possible cluster resource failures. (bsc#1169784) - Fix for handling in 'stonith' command by creating '/var/run/heartbeat/rsctmp' directory. (bsc#1131545) This update was imported from the SUSE:SLE-15:Update update project. This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-655=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): cluster-glue-1.0.12+v1.git.1587474580.a5fda2bc-bp151.2.6.1 libglue-devel-1.0.12+v1.git.1587474580.a5fda2bc-bp151.2.6.1 libglue2-1.0.12+v1.git.1587474580.a5fda2bc-bp151.2.6.1 - openSUSE Backports SLE-15-SP1 (aarch64_ilp32): libglue-devel-64bit-1.0.12+v1.git.1587474580.a5fda2bc-bp151.2.6.1 libglue2-64bit-1.0.12+v1.git.1587474580.a5fda2bc-bp151.2.6.1 References: https://bugzilla.suse.com/1131545 https://bugzilla.suse.com/1169784

1 0

openSUSE-SU-2020:0656-1: moderate: Security update for python-markdown2
by opensuse-security＠opensuse.org 12 May '20

12 May '20

openSUSE Security Update: Security update for python-markdown2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0656-1 Rating: moderate References: #1171379 Cross-References: CVE-2020-11888 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-markdown2 fixes the following issues: - CVE-2020-11888: Fixed unsanitized input for cross-site scripting (boo#1171379) This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-656=1 Package List: - openSUSE Backports SLE-15-SP1 (noarch): python2-markdown2-2.3.7-bp151.2.3.1 python3-markdown2-2.3.7-bp151.2.3.1 References: https://www.suse.com/security/cve/CVE-2020-11888.html https://bugzilla.suse.com/1171379

1 0

openSUSE-SU-2020:0653-1: important: Security update for ghostscript
by opensuse-security＠opensuse.org 11 May '20

11 May '20

openSUSE Security Update: Security update for ghostscript ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0653-1 Rating: important References: #1170603 Cross-References: CVE-2020-12268 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for ghostscript to version 9.52 fixes the following issues: - CVE-2020-12268: Fixed a heap-based buffer overflow in jbig2_image_compose (bsc#1170603). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-653=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): ghostscript-9.52-lp151.3.12.1 ghostscript-debuginfo-9.52-lp151.3.12.1 ghostscript-debugsource-9.52-lp151.3.12.1 ghostscript-devel-9.52-lp151.3.12.1 ghostscript-mini-9.52-lp151.3.12.1 ghostscript-mini-debuginfo-9.52-lp151.3.12.1 ghostscript-mini-debugsource-9.52-lp151.3.12.1 ghostscript-mini-devel-9.52-lp151.3.12.1 ghostscript-x11-9.52-lp151.3.12.1 ghostscript-x11-debuginfo-9.52-lp151.3.12.1 - openSUSE Leap 15.1 (x86_64): libspectre-debugsource-0.2.8-lp151.3.3.1 libspectre-devel-0.2.8-lp151.3.3.1 libspectre1-0.2.8-lp151.3.3.1 libspectre1-debuginfo-0.2.8-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2020-12268.html https://bugzilla.suse.com/1170603

1 0

openSUSE-SU-2020:0654-1: moderate: Security update for cacti, cacti-spine
by opensuse-security＠opensuse.org 11 May '20

11 May '20

openSUSE Security Update: Security update for cacti, cacti-spine ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0654-1 Rating: moderate References: #1163749 Cross-References: CVE-2020-7106 Affected Products: openSUSE Leap 15.1 openSUSE Backports SLE-15-SP1 SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for cacti, cacti-spine fixes the following issues: cacti-spine and cacti were updated to 1.2.12: cacti fixes: * CVE-2020-7106: Lack of escaping of color items can lead to XSS exposure (boo#1163749) * Fix multiple graphing bugs and web UI issues * Fix multiple warnings, PHP Exceptions and errors * Content-Security-Policy prevents External Links from being opened * Prevent runtime memory issues by increasing memory limit * Improve SNMPv3 handling cacti-spine fixes: * Failed host lookup causes spine to crash Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-654=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-654=1 - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2020-654=1 Package List: - openSUSE Leap 15.1 (noarch): cacti-1.2.12-lp151.3.9.1 - openSUSE Leap 15.1 (x86_64): cacti-spine-1.2.12-lp151.3.9.1 cacti-spine-debuginfo-1.2.12-lp151.3.9.1 cacti-spine-debugsource-1.2.12-lp151.3.9.1 - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): cacti-spine-1.2.12-bp151.4.9.1 - openSUSE Backports SLE-15-SP1 (noarch): cacti-1.2.12-bp151.4.9.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): cacti-spine-1.2.12-5.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): cacti-1.2.12-8.1 References: https://www.suse.com/security/cve/CVE-2020-7106.html https://bugzilla.suse.com/1163749

1 0

openSUSE-RU-2020:0652-1: moderate: Recommended update for aws-cli, python-boto3, python-botocore, python-s3transfer, python-aws-sam-translator, python-cfn-lint, python-nose2, python-parameterized
by maintenance＠opensuse.org 11 May '20

11 May '20

openSUSE Recommended Update: Recommended update for aws-cli, python-boto3, python-botocore, python-s3transfer, python-aws-sam-translator, python-cfn-lint, python-nose2, python-parameterized ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0652-1 Rating: moderate References: #1122669 #1136184 #1146853 #1146854 #1159018 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: This update for aws-cli, python-aws-sam-translator, python-cfn-lint, python-nose2, python-parameterized, python-boto3, python-botocore, python-s3transfer fixes the following issues: python-aws-sam-translator was updated to 1.11.0 (bsc#1159018, jsc#PM-1507): Upgrade to 1.11.0: * Add ReservedConcurrentExecutions to globals * Fix ElasticsearchHttpPostPolicy resource reference * Support using AWS::Region in Ref and Sub * Documentation and examples updates * Add VersionDescription property to Serverless::Function * Update ServerlessRepoReadWriteAccessPolicy * Add additional template validation Upgrade to 1.10.0: * Add GSIs to DynamoDBReadPolicy and DynamoDBCrudPolicy * Add DynamoDBReconfigurePolicy * Add CostExplorerReadOnlyPolicy and OrganizationsListAccountsPolicy * Add EKSDescribePolicy * Add SESBulkTemplatedCrudPolicy * Add FilterLogEventsPolicy * Add SSMParameterReadPolicy * Add SESEmailTemplateCrudPolicy * Add s3:PutObjectAcl to S3CrudPolicy * Add allow_credentials CORS option * Add support for AccessLogSetting and CanarySetting Serverless::Api properties * Add support for X-Ray in Serverless::Api * Add support for MinimumCompressionSize in Serverless::Api * Add Auth to Serverless::Api globals * Remove trailing slashes from APIGW permissions * Add SNS FilterPolicy and an example application * Add Enabled property to Serverless::Function event sources * Add support for PermissionsBoundary in Serverless::Function * Fix boto3 client initialization * Add PublicAccessBlockConfiguration property to S3 bucket resource * Make PAY_PER_REQUEST default mode for Serverless::SimpleTable * Add limited support for resolving intrinsics in Serverless::LayerVersion * SAM now uses Flake8 * Add example application for S3 Events written in Go * Updated several example applications python-cfn-lint was added in version 0.21.4: - Add upstream patch to fix EOL dates for lambda runtimes - Add upstream patch to fix test_config_expand_paths test - Rename to python-cfn-lint. This package has a python API, which is required by python-moto. Update to version 0.21.4: + Features * Include more resource types in W3037 + CloudFormation Specifications * Add Resource Type `AWS::CDK::Metadata` + Fixes * Uncap requests dependency in setup.py * Check Join functions have lists in the correct sections * Pass a parameter value for AutoPublishAlias when doing a Transform * Show usage examples when displaying the help Update to version 0.21.3 + Fixes * Support dumping strings for datetime objects when doing a Transform Update to version 0.21.2 + CloudFormation Specifications * Update CloudFormation specs to 3.3.0 * Update instance types from pricing API as of 2019.05.23 Update to version 0.21.1 + Features * Add `Info` logging capability and set the default logging to `NotSet` + Fixes * Only do rule logging (start/stop/time) when the rule is going to be called * Update rule E1019 to allow `Fn::Transform` inside a `Fn::Sub` * Update rule W2001 to not break when `Fn::Transform` inside a `Fn::Sub` * Update rule E2503 to allow conditions to be used and to not default to `network` load balancer when an object is used for the Load Balancer type Update to version 0.21.0 + Features * New rule E3038 to check if a Serverless resource includes the appropriate Transform * New rule E2531 to validate a Lambda's runtime against the deprecated dates * New rule W2531 to validate a Lambda's runtime against the EOL dates * Update rule E2541 to include updates to Code Pipeline capabilities * Update rule E2503 to include checking of values for load balancer attributes + CloudFormation Specifications * Update CloudFormation specs to 3.2.0 * Update instance types from pricing API as of 2019.05.20 + Fixes * Include setuptools in setup.py requires Update to version 0.20.3 + CloudFormation Specifications * Update instance types from pricing API as of 2019.05.16 + Fixes * Update E7001 to allow float/doubles for mapping values * Update W1020 to check pre-transformed Fn::Sub(s) to determine if a Sub is needed * Pin requests to be below or equal to 2.21.0 to prevent issues with botocore Update to version 0.20.2 + Features * Add support for List<String> Parameter types + CloudFormation Specifications * Add allowed values for AWS::EC2 EIP, FlowLog, CustomerGateway, DHCPOptions, EC2Fleet * Create new property type for Security Group IDs or Names * Add new Lambda runtime environment for NodeJs 10.x * Move AWS::ServiceDiscovery::Service Health checks from Only One to Exclusive * Update Glue Crawler Role to take an ARN or a name * Remove PrimitiveType from MaintenanceWindowTarget Targets * Add Min/Max values for Load Balancer Ports to be between 1-65535 + Fixes * Include License file in the pypi package to help with downstream projects * Filter out dynamic references from rule E3031 and E3030 * Convert Python linting and Code Coverage from Python 3.6 to 3.7 Update to version 0.20.1 + Fixes * Update rule E8003 to support more functions inside a Fn::Equals Update to version 0.20.0 + Features * Allow a rule's exception to be defined in a resource's metadata * Add rule configuration capabilities * Update rule E3012 to allow for non strict property checking * Add rule E8003 to test Fn::Equals structure and syntax * Add rule E8004 to test Fn::And structure and syntax * Add rule E8005 to test Fn::Not structure and syntax * Add rule E8006 to test Fn::Or structure and syntax * Include Path to error in the JSON output * Update documentation to describe how to install cfn-lint from brew + CloudFormation Specifications * Update CloudFormation specs to version 3.0.0 * Add new region ap-east-1 * Add list min/max and string min/max for CloudWatch Alarm Actions * Add allowed values for EC2::LaunchTemplate * Add allowed values for EC2::Host * Update allowed values for Amazon MQ to include 5.15.9 * Add AWS::Greengrass::ResourceDefinition to GreenGrass supported regions * Add AWS::EC2::VPCEndpointService to all regions * Update AWS::ECS::TaskDefinition ExecutionRoleArn to be a IAM Role ARN * Patch spec files for SSM MaintenanceWindow to look for Target and not Targets * Update ManagedPolicyArns list size to be 20 which is the hard limit. 10 is the soft limit. + Fixes * Fix rule E3033 to check the string size when the string is inside a list * Fix an issue in which AWS::NotificationARNs was not a list * Add AWS::EC2::Volume to rule W3010 * Fix an issue with W2001 where SAM translate would remove the Ref to a parameter causing this error to falsely trigger * Fix rule W3010 to not error when the availability zone is 'all' Update to version 0.19.1 + Fixes * Fix core Condition processing to support direct Condition in another Condition * Fix the W2030 to check numbers against string allowed values Update to version 0.19.0 + Features * Add NS and PTR Route53 record checking to rule E3020 * New rule E3050 to check if a Ref to IAM Role has a Role path of '/' * New rule E3037 to look for duplicates in a list that doesn't support duplicates * New rule I3037 to look for duplicates in a list when duplicates are allowed + CloudFormation Specifications * Add Min/Max values to AWS::ElasticLoadBalancingV2::TargetGroup HealthCheckTimeoutSeconds * Add Max JSON size to AWS::IAM::ManagedPolicy PolicyDocument * Add allowed values for AWS::EC2 SpotFleet, TransitGateway, NetworkAcl NetworkInterface, PlacementGroup, and Volume * Add Min/max values to AWS::Budgets::Budget.Notification Threshold * Update RDS Instance types by database engine and license definitions using the pricing API * Update AWS::CodeBuild::Project ServiceRole to support Role Name or ARN * Update AWS::ECS::Service Role to support Role Name or ARN + Fixes * Update E3025 to support the new structure of data in the RDS instance type json * Update E2540 to remove all nested conditions from the object * Update E3030 to not do strict type checking * Update E3020 to support conditions nested in the record sets * Update E3008 to better handle CloudFormation sub stacks with different GetAtt formats Update to version 0.18.1 + CloudFormation Specifications * Update CloudFormation Specs to 2.30.0 * Fix IAM Regex Path to support more character types * Update AWS::Batch::ComputeEnvironment.ComputeResources InstanceRole to reference an InstanceProfile or GetAtt the InstanceProfile Arn * Allow VPC IDs to Ref a Parameter of type String + Fixes * Fix E3502 to check the size of the property instead of the parent object Update to version 0.18.0 + Features * New rule E3032 to check the size of lists * New rule E3502 to check JSON Object Size using definitions in the spec file * New rule E3033 to test the minimum and maximum length of a string * New rule E3034 to validate the min and max of a number * Remove Ebs Iops check from E2504 and use rule E3034 instead * Remove rule E2509 and use rule E3033 instead * Remove rule E2508 as it replaced by E3032 and E3502 * Update rule E2503 to check that there are at least two 2 Subnets or SubnetMappings for ALBs * SAM requirement upped to minimal version of 1.10.0 + CloudFormation Specifications * Extend specs to include: > `ListMin` and `ListMax` for the minimum and maximum size of a list > `JsonMax` to check the max size of a JSON Object > `StringMin` and `StringMax` to check the minimum and maximum length of a String > `NumberMin` and `NumberMax` to check the minimum and maximum value of a Number, Float, Long * Update State and ExecutionRoleArn to be required on AWS::DLM::LifecyclePolicy * Add AllowedValues for PerformanceInsightsRetentionPeriod for AWS::RDS::Instance * Add AllowedValues for the AWS::GuardDuty Resources * Add AllowedValues for AWS::EC2 VPC and VPN Resources * Switch IAM Instance Profiles for certain resources to the type that only takes the name * Add regex pattern for IAM Instance Profile when a name (not Arn) is used * Add regex pattern for IAM Paths * Add Regex pattern for IAM Role Arn * Update OnlyOne spec to require require at least one of Subnets or SubnetMappings with ELB v2 + Fixes * Fix serverless transform to use DefinitionBody when Auth is in the API definition * Fix rule W2030 to not error when checking SSM or List Parameters Update to version 0.17.1 + Features * Update rule E2503 to make sure NLBs don't have a Security Group configured + CloudFormation Specifications * Add all the allowed values of the `AWS::Glue` Resources * Update OnlyOne check for `AWS::CloudWatch::Alarm` to only `MetricName` or `Metrics` * Update Exclusive check for `AWS::CloudWatch::Alarm` for properties mixed with `Metrics` and `Statistic` * Update CloudFormation specs to 2.29.0 * Fix type with MariaDB in the AllowedValues * Update pricing information for data available on 2018.3.29 + Fixes * Fix rule E1029 to not look for a sub is needed when looking for iot strings in policies * Fix rule E2541 to allow for ActionId Versions of length 1-9 and meets regex `[0-9A-Za-z_-]+` * Fix rule E2532 to allow for `Parameters` inside a `Pass` action * Fix an issue when getting the location of an error in which numbers are causing an attribute error Update to version 0.17.0 + Features * Add new rule E3026 to validate Redis cluster settings including AutomaticFailoverEnabled and NumCacheClusters. Status: Released * Add new rule W3037 to validate IAM resource policies. Status: Experimental * Add new parameter `-e/--include-experimental` to allow for new rules in that aren't ready to be fully released + CloudFormation Specifications * Update Spec files to 2.28.0 * Add all the allowed values of the AWS::Redshift::* Resources * Add all the allowed values of the AWS::Neptune::* Resources * Patch spec to make AWS::CloudFront::Distribution.LambdaFunctionAssociation.LambdaFunctionARN r equired * Patch spec to make AWS::DynamoDB::Table AttributeDefinitions required + Fixes * Remove extra blank lines when there is no errors in the output * Add exception to rule E1029 to have exceptions for EMR CloudWatchAlarmDefinition * Update rule E1029 to allow for literals in a Sub * Remove sub checks from rule E3031 as it won't match in all cases of an allowed pattern regex check * Correct typos for errors in rule W1001 * Switch from parsing a template as Yaml to Json when finding an escape character * Fix an issue with SAM related to transforming templates with Serverless Application and Lambda Layers * Fix an issue with rule E2541 when non strings were used for Stage Names Update to version 0.16.0 + Features * Add rule E3031 to look for regex patterns based on the patched spec file * Remove regex checks from rule E2509 * Add parameter `ignore-templates` to allow the ignoring of templates when doing bulk linting + CloudFormation Specifications * Update Spec files to 2.26.0 * Add all the allowed values of the AWS::DirectoryService::* Resources * Add all the allowed values of the AWS::DynamoDB::* Resources * Added AWS::Route53Resolver resources to the Spec Patches of ap-southeast-2 * Patch the spec file with regex patterns * Add all the allowed values of the AWS::DocDb::* Resources + Fixes * Update rule E2504 to have '20000' as the max value * Update rule E1016 to not allow ImportValue inside of Conditions * Update rule E2508 to check conditions when providing limit checks on managed policies * Convert unicode to strings when in Py 3.4/3.5 and updating specs * Convert from `awslabs` to `aws-cloudformation` organization * Remove suppression of logging that was removed from samtranslator >1.7.0 and incompatibility with samtranslator 1.10.0 Update to version 0.15.0 + Features * Add scaffolding for arbitrary Match attributes, adding attributes for Type checks * Add rule E3024 to validate that ProvisionedThroughput is not specified with BillingMode PAY_PER_REQUEST + CloudFormation Specifications * Update Spec files to 2.24.0 * Update OnlyOne spec to have BlockDeviceMapping to include NoDevice with Ebs and VirtualName * Add all the allowed values of the AWS::CloudFront::* Resources * Add all the allowed values of the AWS::DAX::* Resources + Fixes * Update config parsing to use the builtin Yaml decoder * Add condition support for Inclusive E2521, Exclusive E2520, and AtLeastOne E2522 rules * Update rule E1029 to better check Resource strings inside IAM Policies * Improve the line/column information of a Match with array support Update to version 0.14.1 + CloudFormation Specifications * Update CloudFormation Specs to version 2.23.0 * Add allowed values for AWS::Config::* resources * Add allowed values for AWS::ServiceDiscovery::* resources * Fix allowed values for Apache MQ + Fixes * Update rule E3008 to not error when using a list from a custom resource * Support simple types in the CloudFormation spec * Add tests for the formatters Update to version 0.14.0 + Features * Add rule E3035 to check the values of DeletionPolicy * Add rule E3036 to check the values of UpdateReplacePolicy * Add rule E2014 to check that there are no REFs in the Parameter section * Update rule E2503 to support TLS on NLBs + CloudFormation Specifications * Update CloudFormation spec to version 2.22.0 * Add allowed values for AWS::Cognito::* resources + Fixes * Update rule E3002 to allow GetAtts to Custom Resources under a Condition Update to version 0.13.2 + Features * Introducing the cfn-lint logo! * Update SAM dependency version + Fixes * Fix CloudWatchAlarmComparisonOperator allowed values. * Fix typo resoruce_type_spec in several files * Better support for nested And, Or, and Not when processing Conditions Update to version 0.13.1 + CloudFormation Specifications * Add allowed values for AWS::CloudTrail::Trail resources * Patch spec to have AWS::CodePipeline::CustomActionType Version included + Fixes * Fix conditions logic to use AllowedValues when REFing a Parameter that has AllowedValues specified Update to version 0.13.0 + Features * New rule W1011 to check if a FindInMap is using the correct map name and keys * New rule W1001 to check if a Ref/GetAtt to a resource that exists when Conditions are used * Removed logic in E1011 and moved it to W1011 for validating keys * Add property relationships for AWS::ApplicationAutoScaling::ScalingPolicy into Inclusive, Exclusive, and AtLeastOne * Update rule E2505 to check the netmask bit * Include the ability to update the CloudFormation Specs using the Pricing API + CloudFormation Specifications * Update to version 2.21.0 * Add allowed values for AWS::Budgets::Budget * Add allowed values for AWS::CertificateManager resources * Add allowed values for AWS::CodePipeline resources * Add allowed values for AWS::CodeCommit resources * Add allowed values for EC2 InstanceTypes from pricing API * Add allowed values for RedShift InstanceTypes from pricing API * Add allowed values for MQ InstanceTypes from pricing API * Add allowed values for RDS InstanceTypes from pricing API + Fixes * Fixed README indentation issue with .pre-commit-config.yaml * Fixed rule E2541 to allow for multiple inputs/outputs in a CodeBuild task * Fixed rule E3020 to allow for a period or no period at the end of a ACM registration record * Update rule E3001 to support UpdateReplacePolicy * Fix a cli issue where `--template` wouldn't be used when a .cfnlintrc was in the same folder * Update rule E3002 and E1024 to support packaging of AWS::Lambda::LayerVersion content - Initial build + Version 0.12.1 Update to 0.9.1 * the prof plugin now uses cProfile instead of hotshot for profiling * skipped tests now include the user's reason in junit XML's message field * the prettyassert plugin mishandled multi-line function definitions * Using a plugin's CLI flag when the plugin is already enabled via config no longer errors * nose2.plugins.prettyassert, enabled with --pretty-assert * Cleanup code for EOLed python versions * Dropped support for distutils. * Result reporter respects failure status set by other plugins * JUnit XML plugin now includes the skip reason in its output Upgrade to 0.8.0: - List of changes is too long to show here, see https://github.com/nose-devs/nose2/blob/master/docs/changelog.rst changes between 0.6.5 and 0.8.0 Update to 0.7.0: * Added parameterized_class feature, for parameterizing entire test classes (many thanks to @TobyLL for their suggestions and help testing!) * Fix DeprecationWarning on `inspect.getargs` (thanks @brettdh; https://github.com/wolever/parameterized/issues/67) * Make sure that `setUp` and `tearDown` methods work correctly (#40) * Raise a ValueError when input is empty (thanks @danielbradburn; https://github.com/wolever/parameterized/pull/48) * Fix the order when number of cases exceeds 10 (thanks @ntflc; https://github.com/wolever/parameterized/pull/49) aws-cli was updated to version 1.16.223: For detailed changes see the changes entries: https://github.com/aws/aws-cli/blob/1.16.223/CHANGELOG.rst https://github.com/aws/aws-cli/blob/1.16.189/CHANGELOG.rst https://github.com/aws/aws-cli/blob/1.16.182/CHANGELOG.rst https://github.com/aws/aws-cli/blob/1.16.176/CHANGELOG.rst https://github.com/aws/aws-cli/blob/1.16.103/CHANGELOG.rst https://github.com/aws/aws-cli/blob/1.16.94/CHANGELOG.rst https://github.com/aws/aws-cli/blob/1.16.84/CHANGELOG.rst python-boto3 was updated to 1.9.213, python-botocore was updated to 1.9.188, and python-s3transfer was updated to 1.12.74, fixing lots of bugs and adding features (bsc#1146853, bsc#1146854) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-652=1 Package List: - openSUSE Leap 15.1 (noarch): azure-cli-core-2.0.45-lp151.2.9.1 azure-cli-interactive-0.3.28-lp151.2.9.1 References: https://bugzilla.suse.com/1122669 https://bugzilla.suse.com/1136184 https://bugzilla.suse.com/1146853 https://bugzilla.suse.com/1146854 https://bugzilla.suse.com/1159018

1 0

openSUSE-SU-2020:0654-1: moderate: Security update for cacti, cacti-spine
by opensuse-security＠opensuse.org 11 May '20

11 May '20

openSUSE Security Update: Security update for cacti, cacti-spine ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0654-1 Rating: moderate References: #1163749 Cross-References: CVE-2020-7106 Affected Products: openSUSE Leap 15.1 openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for cacti, cacti-spine fixes the following issues: cacti-spine and cacti were updated to 1.2.12: cacti fixes: * CVE-2020-7106: Lack of escaping of color items can lead to XSS exposure (boo#1163749) * Fix multiple graphing bugs and web UI issues * Fix multiple warnings, PHP Exceptions and errors * Content-Security-Policy prevents External Links from being opened * Prevent runtime memory issues by increasing memory limit * Improve SNMPv3 handling cacti-spine fixes: * Failed host lookup causes spine to crash Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-654=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-654=1 Package List: - openSUSE Leap 15.1 (x86_64): cacti-spine-1.2.12-lp151.3.9.1 cacti-spine-debuginfo-1.2.12-lp151.3.9.1 cacti-spine-debugsource-1.2.12-lp151.3.9.1 - openSUSE Leap 15.1 (noarch): cacti-1.2.12-lp151.3.9.1 - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): cacti-spine-1.2.12-bp151.4.9.1 - openSUSE Backports SLE-15-SP1 (noarch): cacti-1.2.12-bp151.4.9.1 References: https://www.suse.com/security/cve/CVE-2020-7106.html https://bugzilla.suse.com/1163749

1 0

openSUSE-RU-2020:0650-1: moderate: Recommended update for python-azure-agent
by maintenance＠opensuse.org 11 May '20

11 May '20

openSUSE Recommended Update: Recommended update for python-azure-agent ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0650-1 Rating: moderate References: #1167601 #1167602 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for python-azure-agent fixes the following issues: - Set the hostname using hostnamectl to ensure setting is properly applied (bsc#1167601, bsc#1167602) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-650=1 Package List: - openSUSE Leap 15.1 (noarch): python-azure-agent-2.2.45-lp151.2.6.1 python-azure-agent-test-2.2.45-lp151.2.6.1 References: https://bugzilla.suse.com/1167601 https://bugzilla.suse.com/1167602

1 0

openSUSE-SU-2020:0651-1: moderate: Security update for python-markdown2
by opensuse-security＠opensuse.org 11 May '20

11 May '20

openSUSE Security Update: Security update for python-markdown2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0651-1 Rating: moderate References: #1171379 Cross-References: CVE-2020-11888 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-markdown2 fixes the following issues: - CVE-2020-11888: Fixed unsanitized input for cross-site scripting (boo#1171379) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-651=1 Package List: - openSUSE Leap 15.1 (noarch): python2-markdown2-2.3.7-lp151.2.3.1 python3-markdown2-2.3.7-lp151.2.3.1 References: https://www.suse.com/security/cve/CVE-2020-11888.html https://bugzilla.suse.com/1171379

1 0

openSUSE-RU-2020:0649-1: moderate: Recommended update for paraview
by maintenance＠opensuse.org 11 May '20

11 May '20

openSUSE Recommended Update: Recommended update for paraview ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0649-1 Rating: moderate References: #1171061 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for paraview fixes the following issues: Update to version 5.6.3 (boo#1171061): * Bug-fix release: No changelog available from upstream. Changes from version 5.6.1: * See https://blog.kitware.com/paraview-5-6-1-release-notes/ Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-649=1 Package List: - openSUSE Leap 15.1 (x86_64): paraview-5.6.3-lp151.2.3.1 paraview-debuginfo-5.6.3-lp151.2.3.1 paraview-debugsource-5.6.3-lp151.2.3.1 paraview-devel-5.6.3-lp151.2.3.1 paraview-devel-debuginfo-5.6.3-lp151.2.3.1 References: https://bugzilla.suse.com/1171061

1 0

openSUSE-SU-2020:0648-1: important: Security update for chromium
by opensuse-security＠opensuse.org 11 May '20

11 May '20

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0648-1 Rating: important References: #1171247 Cross-References: CVE-2020-6464 CVE-2020-6831 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for chromium fixes the following issues: Update to 81.0.4044.138 (boo#1171247): - CVE-2020-6831: Stack buffer overflow in SCTP - CVE-2020-6464: Type Confusion in Blink This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-648=1 Package List: - openSUSE Backports SLE-15-SP1 (x86_64): chromedriver-81.0.4044.138-bp151.3.82.2 chromium-81.0.4044.138-bp151.3.82.2 References: https://www.suse.com/security/cve/CVE-2020-6464.html https://www.suse.com/security/cve/CVE-2020-6831.html https://bugzilla.suse.com/1171247

1 0

openSUSE-SU-2020:0620-1: important: Security update for chromium
by opensuse-security＠opensuse.org 11 May '20

11 May '20

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0620-1 Rating: important References: #1171247 Cross-References: CVE-2020-6464 CVE-2020-6831 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for chromium fixes the following issues: Update to 81.0.4044.138 (boo#1171247): - CVE-2020-6831: Stack buffer overflow in SCTP - CVE-2020-6464: Type Confusion in Blink Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-620=1 Package List: - openSUSE Leap 15.1 (x86_64): chromedriver-81.0.4044.138-lp151.2.88.1 chromedriver-debuginfo-81.0.4044.138-lp151.2.88.1 chromium-81.0.4044.138-lp151.2.88.1 chromium-debuginfo-81.0.4044.138-lp151.2.88.1 chromium-debugsource-81.0.4044.138-lp151.2.88.1 References: https://www.suse.com/security/cve/CVE-2020-6464.html https://www.suse.com/security/cve/CVE-2020-6831.html https://bugzilla.suse.com/1171247

1 0

openSUSE-SU-2020:0635-1: important: Security update for opera
by opensuse-security＠opensuse.org 11 May '20

11 May '20

openSUSE Security Update: Security update for opera ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0635-1 Rating: important References: Cross-References: CVE-2020-6457 CVE-2020-6458 CVE-2020-6459 CVE-2020-6460 CVE-2020-6461 CVE-2020-6462 Affected Products: openSUSE Leap 15.1:NonFree ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update for opera fixes the following issues: Opera was updated to version 68.0.3618.63 - CHR-7889 Update chromium on desktop-stable-81-3618 to 81.0.4044.122 - CHR-7896 Update chromium on desktop-stable-81-3618 to 81.0.4044.129 - DNA-85287 Set standard spacing for Yandex prompt - DNA-85416 [Mac] Animation of tab insert is glitchy on slow machines - DNA-85568 Verify API for triggering “unread” mode with Instagram. - DNA-86027 Present Now not working in google meet after canceling it once - DNA-86028 Add a back and forward button in the Instagram panel - DNA-86029 Investigate and implement re-freshing of the instagram panel content - Update chromium to 81.0.4044.122 fixes CVE-2020-6458, CVE-2020-6459, CVE-2020-6460 - Update chromium to 81.0.4044.129 fixes CVE-2020-6461, CVE-2020-6462 Update to version 68.0.3618.56 - DNA-85256 [Win] Cookies section on site pages is white in dark mode - DNA-85474 [Mac] Dragging tabs to the left with hidden sidebar is broken - DNA-85771 DNS-over-HTTPS example in settings is wrong - DNA-85976 Change page display time when navigating from opera:startpage - CHR-7878 Update chromium on desktop-stable-81-3618 to 81.0.4044.113 (CVE-2020-6457) - DNA-78158 PATCH-1272 should be removed - DNA-84721 Weather widget is overlapped when ‘Use bigger tiles’ - DNA-85246 Implement 0-state dialog and onboarding - DNA-85354 O-menu is misplaced when opened with maximized opera - DNA-85405 Add link to Privacy Policy on the 0-state dialog - DNA-85409 Ask for geolocation EULA once - DNA-85426 Crash at opera::DownloadActionButton::Update() - DNA-85454 Add id’s to elements for testing - DNA-85493 Add “Show Weather” toggle to “Start Page” section in Easy Setup - DNA-85501 Set timestamps in geolocation exception record - DNA-85514 Add fallback when geolocation fails - DNA-85713 Report consent for geolocation on start page - DNA-85753 Fetch news configuration from new endpoint - DNA-85798 Incorrect padding in Search in Tabs window - DNA-85801 Disable notification on instagram panel - DNA-85809 Update instagram icon in the Sidebar Setup - DNA-85854 Change Instagram panel size, to fit desktop version - Complete Opera 68.0 changelog at: https://blogs.opera.com/desktop/changelog-for-68/ Update to version 67.0.3575.137 - CHR-7852 Update chromium on desktop-stable-80-3575 to 80.0.3987.163 - DNA-82540 Crash at remote_cocoa::NativeWidgetNSWindowBridge:: SetVisibilityState(remote_cocoa::mojom::WindowVisibilityState) - DNA-84951 New PiP is completely black for some 2 GPU setups - DNA-85284 Chrome “Open link in same tab, pop-up as tab [Free]” extension is no longer working in Opera - DNA-85415 [Mac] Inspect Popup not working - DNA-85530 Create API for displaying and triggering “unread” mode for messengers from in-app - DNA-85537 Let addons.opera.com interact with sidebar messengers Update to version 67.0.3575.115 - CHR-7833 Update chromium on desktop-stable-80-3575 to 80.0.3987.149 - DNA-74423 [Mac] Search/Copy popup stuck on top left of screen - DNA-82975 Crash at blink::DocumentLifecycle::EnsureStateAtMost (blink::DocumentLifecycle::LifecycleState) - DNA-83834 Crash at base::MessagePumpNSApplication:: DoRun (base::MessagePump::Delegate*) - DNA-84632 macOS 10.15.2 fail on creating testlist.json - DNA-84713 Switching through tabs broken when using workspaces Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1:NonFree: zypper in -t patch openSUSE-2020-635=1 Package List: - openSUSE Leap 15.1:NonFree (x86_64): opera-68.0.3618.63-lp151.2.15.1 References: https://www.suse.com/security/cve/CVE-2020-6457.html https://www.suse.com/security/cve/CVE-2020-6458.html https://www.suse.com/security/cve/CVE-2020-6459.html https://www.suse.com/security/cve/CVE-2020-6460.html https://www.suse.com/security/cve/CVE-2020-6461.html https://www.suse.com/security/cve/CVE-2020-6462.html

1 0

openSUSE-SU-2020:0624-1: important: Security update for LibVNCServer
by opensuse-security＠opensuse.org 11 May '20

11 May '20

openSUSE Security Update: Security update for LibVNCServer ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0624-1 Rating: important References: #1155419 #1160471 #1170441 Cross-References: CVE-2019-15681 CVE-2019-15690 CVE-2019-20788 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for LibVNCServer fixes the following issues: - CVE-2019-15690: Fixed a heap buffer overflow (bsc#1160471). - CVE-2019-15681: Fixed a memory leak which could have allowed to a remote attacker to read stack memory (bsc#1155419). - CVE-2019-20788: Fixed a integer overflow and heap-based buffer overflow via a large height or width value (bsc#1170441). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-624=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): LibVNCServer-debugsource-0.9.10-lp151.7.3.1 LibVNCServer-devel-0.9.10-lp151.7.3.1 libvncclient0-0.9.10-lp151.7.3.1 libvncclient0-debuginfo-0.9.10-lp151.7.3.1 libvncserver0-0.9.10-lp151.7.3.1 libvncserver0-debuginfo-0.9.10-lp151.7.3.1 References: https://www.suse.com/security/cve/CVE-2019-15681.html https://www.suse.com/security/cve/CVE-2019-15690.html https://www.suse.com/security/cve/CVE-2019-20788.html https://bugzilla.suse.com/1155419 https://bugzilla.suse.com/1160471 https://bugzilla.suse.com/1170441

1 0

openSUSE-RU-2020:0633-1: moderate: Recommended update for haproxy
by maintenance＠opensuse.org 11 May '20

11 May '20

openSUSE Recommended Update: Recommended update for haproxy ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0633-1 Rating: moderate References: #1169457 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for haproxy fixes the following issues: - Update from version 2.0.10+git0.ac198b92 to version 2.0.14. (bsc#1169457) * BUG/CRITICAL: hpack: never index a header into the headroom after wrapping * BUG/MAJOR: dns: add minimalist error processing on the Rx path * BUG/MAJOR: hashes: fix the signedness of the hash inputs * BUG/MAJOR: http-ana: Always abort the request when a tarpit is triggered * BUG/MAJOR: list: fix invalid element address calculation * BUG/MAJOR: memory: Don't forget to unlock the rwlock if the pool is empty. * BUG/MAJOR: proxy_protocol: Properly validate TLV lengths * BUG/MAJOR: task: add a new TASK_SHARED_WQ flag to fix foreing requeuing * BUG/MEDIUM: 0rtt: Only consider the SSL handshake. * BUG/MEDIUM: cache/filters: Fix loop on HTX blocks caching the response payload * BUG/MEDIUM: checks: Make sure we set the task affinity just before connecting. * BUG/MEDIUM: checks: Only attempt to do handshakes if the connection is ready. * BUG/MEDIUM: cli: _getsocks must send the peers sockets * BUG/MEDIUM: compression/filters: Fix loop on HTX blocks compressing the payload * BUG/MEDIUM: connection: add a mux flag to indicate splice usability * BUG/MEDIUM: connections: Don't forget to unlock when killing a connection. * BUG/MEDIUM: connections: Hold the lock when wanting to kill a connection. * BUG/MEDIUM: debug: make the debug_handler check for the thread in threads_to_dump * BUG/MEDIUM: ebtree: don't set attribute packed without unaligned access support * BUG/MEDIUM: fd/threads: fix a concurrency issue between add and rm on the same fd * BUG/MEDIUM: http-ana: Truncate the response when a redirect rule is applied * BUG/MEDIUM: kqueue: Make sure we report read events even when no data. * BUG/MEDIUM: listener/thread: fix a race when pausing a listener * BUG/MEDIUM: listener/threads: fix a remaining race in the listener's accept() * BUG/MEDIUM: listener: only consider running threads when resuming listeners * BUG/MEDIUM: memory: Add a rwlock before freeing memory. * BUG/MEDIUM: memory_pool: Update the seq number in pool_flush(). * BUG/MEDIUM: mux-h1: Never reuse H1 connection if a shutw is pending * BUG/MEDIUM: mux-h2: don't stop sending when crossing a buffer boundary * BUG/MEDIUM: mux-h2: fix missing test on sending_list in previous patch * BUG/MEDIUM: mux-h2: make sure we don't emit TE headers with anything but "trailers" * BUG/MEDIUM: mux_h1: Don't call h1_send if we subscribed(). * BUG/MEDIUM: muxes: Use the right argument when calling the destroy method. * BUG/MEDIUM: mworker: remain in mworker mode during reload * BUG/MEDIUM: peers: resync ended with RESYNC_PARTIAL in wrong cases. * BUG/MEDIUM: pipe: fix a use-after-free in case of pipe creation error * BUG/MEDIUM: proto_udp/threads: recv() and send() must not be exclusive. * BUG/MEDIUM: random: align the state on 2*64 bits for ARM64 * BUG/MEDIUM: random: implement a thread-safe and process-safe PRNG * BUG/MEDIUM: random: initialize the random pool a bit better * BUG/MEDIUM: session: do not report a failure when rejecting a session * BUG/MEDIUM: shctx: make sure to keep all blocks aligned * BUG/MEDIUM: ssl: Don't forget to free ctx->ssl on failure. * BUG/MEDIUM: ssl: Don't set the max early data we can receive too early. * BUG/MEDIUM: ssl: Revamp the way early data are handled. * BUG/MEDIUM: ssl: fix several bad pointer aliases in a few sample fetch functions * BUG/MEDIUM: stream-int: don't subscribed for recv when we're trying to flush data * BUG/MEDIUM: stream: Be sure to never assign a TCP backend to an HTX stream * BUG/MEDIUM: tasks: Make sure we switch wait queues in task_set_affinity(). * BUG/MEDIUM: wdt: Don't ignore WDTSIG and DEBUGSIG in __signal_process_queue(). * BUG/MINOR: 51d: Fix bug when HTX is enabled * BUG/MINOR: cache: Fix leak of cache name in error path * BUG/MINOR: channel: inject output data at the end of output * BUG/MINOR: checks/threads: use ha_random() and not rand() * BUG/MINOR: checks: refine which errno values are really errors. * BUG/MINOR: cli/mworker: can't start haproxy with 2 programs * BUG/MINOR: connection: fix ip6 dst_port copy in make_proxy_line_v2 * BUG/MINOR: connection: make sure to correctly tag local PROXY connections * BUG/MINOR: connections: Make sure we free the connection on failure. * BUG/MINOR: contrib/prometheus-exporter: Use HTX errors and not legacy ones * BUG/MINOR: contrib/prometheus-exporter: decode parameter and value only * BUG/MINOR: dns: Make dns_query_id_seed unsigned * BUG/MINOR: dns: allow 63 char in hostname * BUG/MINOR: dns: allow srv record weight set to 0 * BUG/MINOR: dns: ignore trailing dot * BUG/MINOR: filters: Count HTTP headers as filtered data but don't forward them * BUG/MINOR: filters: Forward everything if no data filters are called * BUG/MINOR: filters: Use filter offset to decude the amount of forwarded data * BUG/MINOR: h1: Report the right error position when a header value is invalid * BUG/MINOR: haproxy/threads: close a possible race in soft-stop detection * BUG/MINOR: haproxy/threads: try to make all threads leave together * BUG/MINOR: haproxy: always initialize sleeping_thread_mask * BUG/MINOR: http-ana/filters: Wait end of the http_end callback for all filters * BUG/MINOR: http-ana: Matching on monitor-uri should be case-sensitive * BUG/MINOR: http-ana: Reset request analysers on a response side error * BUG/MINOR: http-ana: Reset request analysers on error when waiting for response * BUG/MINOR: http-htx: Don't make http_find_header() fail if the value is empty * BUG/MINOR: http-rules: Fix a typo in the reject action function * BUG/MINOR: http-rules: Preserve FLT_END analyzers on reject action * BUG/MINOR: http-rules: Remove buggy deinit functions for HTTP rules * BUG/MINOR: http: http-request replace-path duplicates the query string * BUG/MINOR: http_act: don't check capture id in backend * BUG/MINOR: http_ana: make sure redirect flags don't have overlapping bits * BUG/MINOR: init: make the automatic maxconn consider the max of soft/hard limits * BUG/MINOR: listener/mq: do not dispatch connections to remote threads when stopping * BUG/MINOR: listener/threads: always use atomic ops to clear the FD events * BUG/MINOR: listener: also clear the error flag on a paused listener * BUG/MINOR: listener: do not immediately resume on transient error * BUG/MINOR: listener: enforce all_threads_mask on bind_thread on init * BUG/MINOR: listener: fix off-by-one in state name check * BUG/MINOR: log: fix minor resource leaks on logformat error path * BUG/MINOR: lua: Ignore the reserve to know if a channel is full or not * BUG/MINOR: mux-h1: Be sure to set CS_FL_WANT_ROOM when EOM can't be added * BUG/MINOR: mux-h1: Don't rely on CO_FL_SOCK_RD_SH to set H1C_F_CS_SHUTDOWN * BUG/MINOR: mux-h1: Fix conditions to know whether or not we may receive data * BUG/MINOR: mux-h2: use a safe list_for_each_entry in h2_send() * BUG/MINOR: mworker: properly pass SIGTTOU/SIGTTIN to workers * BUG/MINOR: namespace: avoid closing fd when socket failed in my_socketat * BUG/MINOR: pattern: Do not pass len = 0 to calloc() * BUG/MINOR: pattern: handle errors from fgets when trying to load patterns * BUG/MINOR: peers: Use after free of "peers" section. * BUG/MINOR: peers: avoid an infinite loop with peers_fe is NULL * BUG/MINOR: peers: init bind_proc to 1 if it wasn't initialized * BUG/MINOR: proxy: Fix input data copy when an error is captured * BUG/MINOR: proxy: make soft_stop() also close FDs in LI_PAUSED state * BUG/MINOR: rules: Increment be_counters if backend is assigned for a silent-drop * BUG/MINOR: rules: Preserve FLT_END analyzers on silent-drop action * BUG/MINOR: sample: Make sure to return stable IDs in the unique-id fetch * BUG/MINOR: sample: always check converters' arguments * BUG/MINOR: sample: fix the closing bracket and LF in the debug converter * BUG/MINOR: sample: fix the json converter's endian-sensitivity * BUG/MINOR: server: make "agent-addr" work on default-server line * BUG/MINOR: ssl: Possible memleak when allowing the 0RTT data buffer. * BUG/MINOR: ssl: certificate choice can be unexpected with openssl >= 1.1.1 * BUG/MINOR: ssl: openssl-compat: Fix getm_ defines * BUG/MINOR: ssl: we may only ignore the first 64 errors * BUG/MINOR: stats: Fix color of draining servers on stats page * BUG/MINOR: stick-table: Use MAX_SESS_STKCTR as the max track ID during parsing * BUG/MINOR: stktable: report the current proxy name in error messages * BUG/MINOR: stream-int: Don't trigger L7 retry if max retries is already reached * BUG/MINOR: stream-int: avoid calling rcv_buf() when splicing is still possible * BUG/MINOR: stream: don't mistake match rules for store-request rules * BUG/MINOR: stream: init variables when the list is empty * BUG/MINOR: tasks: only requeue a task if it was already in the queue * BUG/MINOR: tcp-rules: Fix memory releases on error path during action parsing * BUG/MINOR: tcp: avoid closing fd when socket failed in tcp_bind_listener * BUG/MINOR: tcp: don't try to set defaultmss when value is negative * BUG/MINOR: tcpchecks: fix the connect() flags regarding delayed ack * BUG/MINOR: unix: better catch situations where the unix socket path length is close to the limit * BUG/MINOR: wdt: do not return an error when the watchdog couldn't be enabled * CONTRIB: debug: add missing flags SF_HTX and SF_MUX * CONTRIB: debug: add the possibility to decode the value as certain types only * CONTRIB: debug: also support reading values from stdin * CONTRIB: debug: support reporting multiple values at once * DOC: Clarify behavior of server maxconn in HTTP mode * DOC: Improve documentation of http-re(quest|sponse) replace-(header|value|uri) * DOC: assorted typo fixes in the documentation * DOC: assorted typo fixes in the documentation and Makefile * DOC: clarify matching strings on binary fetches * DOC: clarify the fact that replace-uri works on a full URI * DOC: configuration.txt: fix various typos * DOC: document the listener state transitions * DOC: fix incorrect indentation of http_auth_* * DOC: fix typo about no-tls-tickets * DOC: improve description of no-tls-tickets * DOC: internals: Fix spelling errors in filters.txt * DOC: listeners: add a few missing transitions * DOC: move the "group" keyword at the right place * DOC: proxies: HAProxy only supports 3 connection modes * DOC: proxy_protocol: Reserve TLV type 0x05 as PP2_TYPE_UNIQUE_ID * DOC: remove references to the outdated architecture.txt * DOC: ssl: clarify security implications of TLS tickets * DOC: word converter ignores delimiters at the start or end of input string * MINOR: acl: Warn when an ACL is named 'or' * MINOR: backend: use a single call to ha_random32() for the random LB algo * MINOR: build: add linux-glibc-legacy build TARGET * MINOR: compiler: add new alignment macros * MINOR: compiler: move CPU capabilities definition from config.h and complete them * MINOR: config: disable busy polling on old processes * MINOR: contrib/prometheus-exporter: Add heathcheck status/code in server metrics * MINOR: contrib/prometheus-exporter: Add the last heathcheck duration metric * MINOR: debug: report the task handler's pointer relative to main * MINOR: fd/threads: make _GET_NEXT()/_GET_PREV() use the volatile attribute * MINOR: filters: Forward data only if the last filter forwards something * MINOR: haproxy: export main to ease access from debugger * MINOR: http-htx: Add a function to retrieve the headers size of an HTX message * MINOR: http-rules: Add a flag on redirect rules to know the rule direction * MINOR: http-rules: Handle the rule direction when a redirect is evaluated * MINOR: http: add a new "replace-path" action * MINOR: htx: Add a function to return a block at a specific offset * MINOR: ist: add an iststop() function * MINOR: listener: add so_name sample fetch * MINOR: memory: Change the flush_lock to a spinlock, and don't get it in alloc. * MINOR: memory: Only init the pool spinlock once. * MINOR: proxy/http-ana: Add support of extra attributes for the cookie directive * MINOR: ssl: Remove unused variable "need_out". * MINOR: task: only check TASK_WOKEN_ANY to decide to requeue a task * MINOR: tools: add 64-bit rotate operators * MINOR: wdt: Move the definitions of WDTSIG and DEBUGSIG into types/signal.h. * OPTIM: startup: fast unique_id allocation for acl. * SCRIPTS: announce-release: allow the user to force to overwrite old files * SCRIPTS: announce-release: place the send command in the mail's header * SCRIPTS: announce-release: use mutt -H instead of -i to include the draft * SCRIPTS: make announce-release executable again This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-633=1 Package List: - openSUSE Leap 15.1 (x86_64): haproxy-2.0.14-lp151.2.12.1 haproxy-debuginfo-2.0.14-lp151.2.12.1 haproxy-debugsource-2.0.14-lp151.2.12.1 References: https://bugzilla.suse.com/1169457

1 0

openSUSE-SU-2020:0628-1: important: Security update for sqliteodbc
by opensuse-security＠opensuse.org 11 May '20

11 May '20

openSUSE Security Update: Security update for sqliteodbc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0628-1 Rating: important References: #1171041 Cross-References: CVE-2020-12050 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for sqliteodbc fixes the following issues: Security issue fixed: - CVE-2020-12050: Fixed a privilege escalation vulnerability (boo#1171041). Non-security issues fixed: - Update to version 0.9996 * update to SQLite 3.22.0 * fixes in handling DDL in SQLExecDirect() et.al., thanks Andre Mikulec for testing * cleanup utf8/unicode conversion functions Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-628=1 Package List: - openSUSE Leap 15.1 (x86_64): sqliteodbc-0.9996-lp151.3.3.1 sqliteodbc-debuginfo-0.9996-lp151.3.3.1 sqliteodbc-debugsource-0.9996-lp151.3.3.1 sqliteodbc-doc-0.9996-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2020-12050.html https://bugzilla.suse.com/1171041

1 0

openSUSE-SU-2020:0642-1: moderate: Security update for php7
by opensuse-security＠opensuse.org 11 May '20

11 May '20

openSUSE Security Update: Security update for php7 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0642-1 Rating: moderate References: #1168326 #1168352 Cross-References: CVE-2020-7064 CVE-2020-7066 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for php7 fixes the following issues: - CVE-2020-7064: Fixed a one byte read of uninitialized memory in exif_read_data() (bsc#1168326). - CVE-2020-7066: Fixed URL truncation get_headers() if the URL contains zero (\0) character (bsc#1168352). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-642=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): apache2-mod_php7-7.2.5-lp151.6.25.1 apache2-mod_php7-debuginfo-7.2.5-lp151.6.25.1 libtidy-devel-5.4.0-lp151.3.3.1 libtidy5-5.4.0-lp151.3.3.1 libtidy5-debuginfo-5.4.0-lp151.3.3.1 php7-7.2.5-lp151.6.25.1 php7-bcmath-7.2.5-lp151.6.25.1 php7-bcmath-debuginfo-7.2.5-lp151.6.25.1 php7-bz2-7.2.5-lp151.6.25.1 php7-bz2-debuginfo-7.2.5-lp151.6.25.1 php7-calendar-7.2.5-lp151.6.25.1 php7-calendar-debuginfo-7.2.5-lp151.6.25.1 php7-ctype-7.2.5-lp151.6.25.1 php7-ctype-debuginfo-7.2.5-lp151.6.25.1 php7-curl-7.2.5-lp151.6.25.1 php7-curl-debuginfo-7.2.5-lp151.6.25.1 php7-dba-7.2.5-lp151.6.25.1 php7-dba-debuginfo-7.2.5-lp151.6.25.1 php7-debuginfo-7.2.5-lp151.6.25.1 php7-debugsource-7.2.5-lp151.6.25.1 php7-devel-7.2.5-lp151.6.25.1 php7-dom-7.2.5-lp151.6.25.1 php7-dom-debuginfo-7.2.5-lp151.6.25.1 php7-embed-7.2.5-lp151.6.25.1 php7-embed-debuginfo-7.2.5-lp151.6.25.1 php7-enchant-7.2.5-lp151.6.25.1 php7-enchant-debuginfo-7.2.5-lp151.6.25.1 php7-exif-7.2.5-lp151.6.25.1 php7-exif-debuginfo-7.2.5-lp151.6.25.1 php7-fastcgi-7.2.5-lp151.6.25.1 php7-fastcgi-debuginfo-7.2.5-lp151.6.25.1 php7-fileinfo-7.2.5-lp151.6.25.1 php7-fileinfo-debuginfo-7.2.5-lp151.6.25.1 php7-firebird-7.2.5-lp151.6.25.1 php7-firebird-debuginfo-7.2.5-lp151.6.25.1 php7-fpm-7.2.5-lp151.6.25.1 php7-fpm-debuginfo-7.2.5-lp151.6.25.1 php7-ftp-7.2.5-lp151.6.25.1 php7-ftp-debuginfo-7.2.5-lp151.6.25.1 php7-gd-7.2.5-lp151.6.25.1 php7-gd-debuginfo-7.2.5-lp151.6.25.1 php7-gettext-7.2.5-lp151.6.25.1 php7-gettext-debuginfo-7.2.5-lp151.6.25.1 php7-gmp-7.2.5-lp151.6.25.1 php7-gmp-debuginfo-7.2.5-lp151.6.25.1 php7-iconv-7.2.5-lp151.6.25.1 php7-iconv-debuginfo-7.2.5-lp151.6.25.1 php7-intl-7.2.5-lp151.6.25.1 php7-intl-debuginfo-7.2.5-lp151.6.25.1 php7-json-7.2.5-lp151.6.25.1 php7-json-debuginfo-7.2.5-lp151.6.25.1 php7-ldap-7.2.5-lp151.6.25.1 php7-ldap-debuginfo-7.2.5-lp151.6.25.1 php7-mbstring-7.2.5-lp151.6.25.1 php7-mbstring-debuginfo-7.2.5-lp151.6.25.1 php7-mysql-7.2.5-lp151.6.25.1 php7-mysql-debuginfo-7.2.5-lp151.6.25.1 php7-odbc-7.2.5-lp151.6.25.1 php7-odbc-debuginfo-7.2.5-lp151.6.25.1 php7-opcache-7.2.5-lp151.6.25.1 php7-opcache-debuginfo-7.2.5-lp151.6.25.1 php7-openssl-7.2.5-lp151.6.25.1 php7-openssl-debuginfo-7.2.5-lp151.6.25.1 php7-pcntl-7.2.5-lp151.6.25.1 php7-pcntl-debuginfo-7.2.5-lp151.6.25.1 php7-pdo-7.2.5-lp151.6.25.1 php7-pdo-debuginfo-7.2.5-lp151.6.25.1 php7-pgsql-7.2.5-lp151.6.25.1 php7-pgsql-debuginfo-7.2.5-lp151.6.25.1 php7-phar-7.2.5-lp151.6.25.1 php7-phar-debuginfo-7.2.5-lp151.6.25.1 php7-posix-7.2.5-lp151.6.25.1 php7-posix-debuginfo-7.2.5-lp151.6.25.1 php7-readline-7.2.5-lp151.6.25.1 php7-readline-debuginfo-7.2.5-lp151.6.25.1 php7-shmop-7.2.5-lp151.6.25.1 php7-shmop-debuginfo-7.2.5-lp151.6.25.1 php7-snmp-7.2.5-lp151.6.25.1 php7-snmp-debuginfo-7.2.5-lp151.6.25.1 php7-soap-7.2.5-lp151.6.25.1 php7-soap-debuginfo-7.2.5-lp151.6.25.1 php7-sockets-7.2.5-lp151.6.25.1 php7-sockets-debuginfo-7.2.5-lp151.6.25.1 php7-sodium-7.2.5-lp151.6.25.1 php7-sodium-debuginfo-7.2.5-lp151.6.25.1 php7-sqlite-7.2.5-lp151.6.25.1 php7-sqlite-debuginfo-7.2.5-lp151.6.25.1 php7-sysvmsg-7.2.5-lp151.6.25.1 php7-sysvmsg-debuginfo-7.2.5-lp151.6.25.1 php7-sysvsem-7.2.5-lp151.6.25.1 php7-sysvsem-debuginfo-7.2.5-lp151.6.25.1 php7-sysvshm-7.2.5-lp151.6.25.1 php7-sysvshm-debuginfo-7.2.5-lp151.6.25.1 php7-test-7.2.5-lp151.6.25.1 php7-tidy-7.2.5-lp151.6.25.1 php7-tidy-debuginfo-7.2.5-lp151.6.25.1 php7-tokenizer-7.2.5-lp151.6.25.1 php7-tokenizer-debuginfo-7.2.5-lp151.6.25.1 php7-wddx-7.2.5-lp151.6.25.1 php7-wddx-debuginfo-7.2.5-lp151.6.25.1 php7-xmlreader-7.2.5-lp151.6.25.1 php7-xmlreader-debuginfo-7.2.5-lp151.6.25.1 php7-xmlrpc-7.2.5-lp151.6.25.1 php7-xmlrpc-debuginfo-7.2.5-lp151.6.25.1 php7-xmlwriter-7.2.5-lp151.6.25.1 php7-xmlwriter-debuginfo-7.2.5-lp151.6.25.1 php7-xsl-7.2.5-lp151.6.25.1 php7-xsl-debuginfo-7.2.5-lp151.6.25.1 php7-zip-7.2.5-lp151.6.25.1 php7-zip-debuginfo-7.2.5-lp151.6.25.1 php7-zlib-7.2.5-lp151.6.25.1 php7-zlib-debuginfo-7.2.5-lp151.6.25.1 tidy-5.4.0-lp151.3.3.1 tidy-debuginfo-5.4.0-lp151.3.3.1 tidy-debugsource-5.4.0-lp151.3.3.1 - openSUSE Leap 15.1 (noarch): php7-pear-7.2.5-lp151.6.25.1 php7-pear-Archive_Tar-7.2.5-lp151.6.25.1 tidy-doc-5.4.0-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2020-7064.html https://www.suse.com/security/cve/CVE-2020-7066.html https://bugzilla.suse.com/1168326 https://bugzilla.suse.com/1168352

1 0

openSUSE-RU-2020:0640-1: moderate: Recommended update for chrony
by maintenance＠opensuse.org 11 May '20

11 May '20

openSUSE Recommended Update: Recommended update for chrony ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0640-1 Rating: moderate References: #1099272 #1156884 #1161119 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for chrony fixes the following issues: - Read runtime servers from /var/run/netconfig/chrony.servers (bsc#1099272, bsc#1161119) - Move chrony-helper to /usr/lib/chrony/helper, because there should be no executables in /usr/share. - Add chrony-pool-suse and chrony-pool-openSUSE subpackages that preconfigure chrony to use NTP servers from the respective pools for SUSE and openSUSE. (bsc#1156884, SLE-11424) - Add chrony-pool-empty to still allow installing chrony without preconfigured servers. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-640=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): chrony-3.2-lp151.9.6.1 chrony-debuginfo-3.2-lp151.9.6.1 chrony-debugsource-3.2-lp151.9.6.1 - openSUSE Leap 15.1 (noarch): chrony-pool-empty-3.2-lp151.9.6.1 chrony-pool-openSUSE-3.2-lp151.9.6.1 chrony-pool-suse-3.2-lp151.9.6.1 References: https://bugzilla.suse.com/1099272 https://bugzilla.suse.com/1156884 https://bugzilla.suse.com/1161119

1 0

openSUSE-SU-2020:0643-1: important: Security update for MozillaThunderbird
by opensuse-security＠opensuse.org 11 May '20

11 May '20

openSUSE Security Update: Security update for MozillaThunderbird ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0643-1 Rating: important References: #1171186 Cross-References: CVE-2020-12387 CVE-2020-12392 CVE-2020-12393 CVE-2020-12395 CVE-2020-12397 CVE-2020-6831 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update for MozillaThunderbird fixes the following issues: - Update to 68.8.0 ESR MFSA 2020-18 (bsc#1171186) * CVE-2020-12397 (bmo#1617370) Sender Email Address Spoofing using encoded Unicode characters * CVE-2020-12387 (bmo#1545345) Use-after-free during worker shutdown * CVE-2020-6831 (bmo#1632241) Buffer overflow in SCTP chunk input validation * CVE-2020-12392 (bmo#1614468) Arbitrary local file access with 'Copy as cURL' * CVE-2020-12393 (bmo#1615471) Devtools' 'Copy as cURL' feature did not fully escape website-controlled data, potentially leading to command injection * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704, bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076, bmo#1631508) Memory safety bugs fixed in Thunderbird 68.8.0 This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-643=1 Package List: - openSUSE Leap 15.1 (x86_64): MozillaThunderbird-68.8.0-lp151.2.38.2 MozillaThunderbird-debuginfo-68.8.0-lp151.2.38.2 MozillaThunderbird-debugsource-68.8.0-lp151.2.38.2 MozillaThunderbird-translations-common-68.8.0-lp151.2.38.2 MozillaThunderbird-translations-other-68.8.0-lp151.2.38.2 References: https://www.suse.com/security/cve/CVE-2020-12387.html https://www.suse.com/security/cve/CVE-2020-12392.html https://www.suse.com/security/cve/CVE-2020-12393.html https://www.suse.com/security/cve/CVE-2020-12395.html https://www.suse.com/security/cve/CVE-2020-12397.html https://www.suse.com/security/cve/CVE-2020-6831.html https://bugzilla.suse.com/1171186

1 0

openSUSE-RU-2020:0634-1: moderate: Recommended update for python-paramiko
by maintenance＠opensuse.org 11 May '20

11 May '20

openSUSE Recommended Update: Recommended update for python-paramiko ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0634-1 Rating: moderate References: #1169489 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-paramiko fixes the following issues: - Fixed a problem from the last fix that caused Vorta to fail (bsc#1169489) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-634=1 Package List: - openSUSE Leap 15.1 (noarch): python-paramiko-doc-2.4.2-lp151.2.6.1 python2-paramiko-2.4.2-lp151.2.6.1 python3-paramiko-2.4.2-lp151.2.6.1 References: https://bugzilla.suse.com/1169489

1 0

openSUSE-RU-2020:0632-1: moderate: Recommended update for systemd
by maintenance＠opensuse.org 11 May '20

11 May '20

openSUSE Recommended Update: Recommended update for systemd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0632-1 Rating: moderate References: #1165011 #1168076 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for systemd fixes the following issues: - Fix check for address to keep interface names stable. (bsc#1168076) - Fix for checking non-normalized WHAT for network FS. (bsc#1165011) - Allow to specify an arbitrary string for when vfs is used. (bsc#1165011) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-632=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libsystemd0-234-lp151.26.16.1 libsystemd0-debuginfo-234-lp151.26.16.1 libsystemd0-mini-234-lp151.26.16.1 libsystemd0-mini-debuginfo-234-lp151.26.16.1 libudev-devel-234-lp151.26.16.1 libudev-mini-devel-234-lp151.26.16.1 libudev-mini1-234-lp151.26.16.1 libudev-mini1-debuginfo-234-lp151.26.16.1 libudev1-234-lp151.26.16.1 libudev1-debuginfo-234-lp151.26.16.1 nss-myhostname-234-lp151.26.16.1 nss-myhostname-debuginfo-234-lp151.26.16.1 nss-mymachines-234-lp151.26.16.1 nss-mymachines-debuginfo-234-lp151.26.16.1 nss-systemd-234-lp151.26.16.1 nss-systemd-debuginfo-234-lp151.26.16.1 systemd-234-lp151.26.16.1 systemd-container-234-lp151.26.16.1 systemd-container-debuginfo-234-lp151.26.16.1 systemd-coredump-234-lp151.26.16.1 systemd-coredump-debuginfo-234-lp151.26.16.1 systemd-debuginfo-234-lp151.26.16.1 systemd-debugsource-234-lp151.26.16.1 systemd-devel-234-lp151.26.16.1 systemd-logger-234-lp151.26.16.1 systemd-mini-234-lp151.26.16.1 systemd-mini-container-mini-234-lp151.26.16.1 systemd-mini-container-mini-debuginfo-234-lp151.26.16.1 systemd-mini-coredump-mini-234-lp151.26.16.1 systemd-mini-coredump-mini-debuginfo-234-lp151.26.16.1 systemd-mini-debuginfo-234-lp151.26.16.1 systemd-mini-debugsource-234-lp151.26.16.1 systemd-mini-devel-234-lp151.26.16.1 systemd-mini-sysvinit-234-lp151.26.16.1 systemd-sysvinit-234-lp151.26.16.1 udev-234-lp151.26.16.1 udev-debuginfo-234-lp151.26.16.1 udev-mini-234-lp151.26.16.1 udev-mini-debuginfo-234-lp151.26.16.1 - openSUSE Leap 15.1 (noarch): systemd-bash-completion-234-lp151.26.16.1 systemd-mini-bash-completion-234-lp151.26.16.1 - openSUSE Leap 15.1 (x86_64): libsystemd0-32bit-234-lp151.26.16.1 libsystemd0-32bit-debuginfo-234-lp151.26.16.1 libudev-devel-32bit-234-lp151.26.16.1 libudev1-32bit-234-lp151.26.16.1 libudev1-32bit-debuginfo-234-lp151.26.16.1 nss-myhostname-32bit-234-lp151.26.16.1 nss-myhostname-32bit-debuginfo-234-lp151.26.16.1 nss-mymachines-32bit-234-lp151.26.16.1 nss-mymachines-32bit-debuginfo-234-lp151.26.16.1 systemd-32bit-234-lp151.26.16.1 systemd-32bit-debuginfo-234-lp151.26.16.1 References: https://bugzilla.suse.com/1165011 https://bugzilla.suse.com/1168076

1 0

openSUSE-RU-2020:0638-1: moderate: Recommended update for geocode-glib
by maintenance＠opensuse.org 11 May '20

11 May '20

openSUSE Recommended Update: Recommended update for geocode-glib ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0638-1 Rating: moderate References: #1169163 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for geocode-glib fixes the following issues: - Fix for a possible crash during custom location caused by missing function. (bsc#1169163) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-638=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): geocode-glib-3.25.4.1-lp151.3.3.1 geocode-glib-debugsource-3.25.4.1-lp151.3.3.1 geocode-glib-devel-3.25.4.1-lp151.3.3.1 libgeocode-glib0-3.25.4.1-lp151.3.3.1 libgeocode-glib0-debuginfo-3.25.4.1-lp151.3.3.1 typelib-1_0-GeocodeGlib-1_0-3.25.4.1-lp151.3.3.1 - openSUSE Leap 15.1 (x86_64): libgeocode-glib0-32bit-3.25.4.1-lp151.3.3.1 libgeocode-glib0-32bit-debuginfo-3.25.4.1-lp151.3.3.1 References: https://bugzilla.suse.com/1169163

1 0

openSUSE-SU-2020:0631-1: moderate: Security update for rpmlint
by opensuse-security＠opensuse.org 11 May '20

11 May '20

openSUSE Security Update: Security update for rpmlint ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0631-1 Rating: moderate References: #1129452 #1169365 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for rpmlint fixes the following issues: - whitelist certmonger (bsc#1169365, bsc#1129452) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-631=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): rpmlint-mini-1.10-lp151.5.13.1 rpmlint-mini-debuginfo-1.10-lp151.5.13.1 rpmlint-mini-debugsource-1.10-lp151.5.13.1 - openSUSE Leap 15.1 (noarch): rpmlint-1.10-lp151.9.6.1 - openSUSE Leap 15.1 (x86_64): rpmlint-tests-debugsource-84.87+git20181018.60e0249-lp151.9.6.1 References: https://bugzilla.suse.com/1129452 https://bugzilla.suse.com/1169365

1 0

openSUSE-RU-2020:0641-1: moderate: Recommended update for pciutils-ids
by maintenance＠opensuse.org 11 May '20

11 May '20

openSUSE Recommended Update: Recommended update for pciutils-ids ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0641-1 Rating: moderate References: #1170160 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for pciutils-ids fixes the following issues: - Update the PCI utilities database to 20200324. (bsc#1170160) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-641=1 Package List: - openSUSE Leap 15.1 (noarch): pciutils-ids-20200324-lp151.3.7.1 References: https://bugzilla.suse.com/1170160

1 0

openSUSE-RU-2020:0639-1: moderate: Recommended update for python-azure-mgmt-compute
by maintenance＠opensuse.org 11 May '20

11 May '20

openSUSE Recommended Update: Recommended update for python-azure-mgmt-compute ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0639-1 Rating: moderate References: #1140565 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-azure-mgmt-compute fixes the following issues: New upstream release 4.6.2 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598): + For detailed information about changes see the HISTORY.txt file provided with this package This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-639=1 Package List: - openSUSE Leap 15.1 (noarch): python2-azure-mgmt-compute-4.6.2-lp151.2.7.1 python3-azure-mgmt-compute-4.6.2-lp151.2.7.1 References: https://bugzilla.suse.com/1140565

1 0

openSUSE-RU-2020:0644-1: moderate: Recommended update for mailman
by maintenance＠opensuse.org 11 May '20

11 May '20

openSUSE Recommended Update: Recommended update for mailman ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0644-1 Rating: moderate References: #1167068 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for mailman fixes the following issues: - Fix rights and ownership on /var/lib/mailman/archives (boo#1167068) This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-644=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): mailman-2.1.29-bp151.5.6.1 References: https://bugzilla.suse.com/1167068

1 0

openSUSE-RU-2020:0626-1: moderate: Recommended update for osc
by maintenance＠opensuse.org 11 May '20

11 May '20

openSUSE Recommended Update: Recommended update for osc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0626-1 Rating: moderate References: #1160446 #1166537 #1168862 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for osc fixes the following issues: Update from version 0.167.2 to 0.168.2 (bsc#1168862) - Use helper method _html_escape to enable python3.8 and python2.* compatibility. (bsc#1166537) - Fix support for python3.8 - Spec: temporary disable tests as they explode under python 3.8 - Spec: fix destination of fish completion file to /usr/share/fish/vendor_completions.d - MR creation honors orev now (bsc#1160446) - Allow "osc r --vertical" for projects - Cleanup old functions and remove python2.6 compatibility code - Support zstd arch linux files in local build - Fix deleterequest for repositories - Append --norootforbuild as default to build command - Fix decoding in interactive request mode - Use signdummy for product builds - Print release project when creating MR - Improve SSLError message for TLSv1 validation - osc maintained --version prints the version of each maintained package - Print web url links after creating requests (New general bool option 'print_web_links' must be set in oscrc) - Fix checkout_no_colon on project level - Handle empty release number of rpm packages in build.py - Handle bytes vs. str error when parsing meta - Custom exception if importing m2crypto fails - Fix missing oscerr import in util.helper - Several fixes for keyring handling - Fix arch zst magic in util.packagequery - Ship fish completion file. This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-626=1 Package List: - openSUSE Leap 15.1 (noarch): osc-0.168.2-lp151.2.12.1 References: https://bugzilla.suse.com/1160446 https://bugzilla.suse.com/1166537 https://bugzilla.suse.com/1168862

1 0

openSUSE-SU-2020:0636-1: important: Security update for slirp4netns
by opensuse-security＠opensuse.org 11 May '20

11 May '20

openSUSE Security Update: Security update for slirp4netns ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0636-1 Rating: important References: #1170940 Cross-References: CVE-2020-1983 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for slirp4netns fixes the following issues: Security issue fixed: - CVE-2020-1983: Fixed a use-after-free in ip_reass (bsc#1170940). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-636=1 Package List: - openSUSE Leap 15.1 (x86_64): slirp4netns-0.4.5-lp151.2.9.1 slirp4netns-debuginfo-0.4.5-lp151.2.9.1 slirp4netns-debugsource-0.4.5-lp151.2.9.1 References: https://www.suse.com/security/cve/CVE-2020-1983.html https://bugzilla.suse.com/1170940

1 0

openSUSE-SU-2020:0621-1: important: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 11 May '20

11 May '20

openSUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0621-1 Rating: important References: #1171186 Cross-References: CVE-2020-12387 CVE-2020-12388 CVE-2020-12389 CVE-2020-12392 CVE-2020-12393 CVE-2020-12395 CVE-2020-6831 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: This update for MozillaFirefox fixes the following issues: Update to version 68.8.0 ESR (bsc#1171186): - CVE-2020-12387: Use-after-free during worker shutdown - CVE-2020-12388: Sandbox escape with improperly guarded Access Tokens - CVE-2020-12389: Sandbox escape with improperly separated process types - CVE-2020-6831: Buffer overflow in SCTP chunk input validation - CVE-2020-12392: Arbitrary local file access with 'Copy as cURL' - CVE-2020-12393: Devtools' 'Copy as cURL' feature did not fully escape website-controlled data, potentially leading to command injection - CVE-2020-12395: Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8 This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-621=1 Package List: - openSUSE Leap 15.1 (x86_64): MozillaFirefox-68.8.0-lp151.2.45.1 MozillaFirefox-branding-upstream-68.8.0-lp151.2.45.1 MozillaFirefox-buildsymbols-68.8.0-lp151.2.45.1 MozillaFirefox-debuginfo-68.8.0-lp151.2.45.1 MozillaFirefox-debugsource-68.8.0-lp151.2.45.1 MozillaFirefox-devel-68.8.0-lp151.2.45.1 MozillaFirefox-translations-common-68.8.0-lp151.2.45.1 MozillaFirefox-translations-other-68.8.0-lp151.2.45.1 References: https://www.suse.com/security/cve/CVE-2020-12387.html https://www.suse.com/security/cve/CVE-2020-12388.html https://www.suse.com/security/cve/CVE-2020-12389.html https://www.suse.com/security/cve/CVE-2020-12392.html https://www.suse.com/security/cve/CVE-2020-12393.html https://www.suse.com/security/cve/CVE-2020-12395.html https://www.suse.com/security/cve/CVE-2020-6831.html https://bugzilla.suse.com/1171186

1 0

openSUSE-SU-2020:0622-1: moderate: Security update for ovmf
by opensuse-security＠opensuse.org 11 May '20

11 May '20

openSUSE Security Update: Security update for ovmf ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0622-1 Rating: moderate References: #1163927 Cross-References: CVE-2019-14559 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for ovmf fixes the following issues: - CVE-2019-14559: Fixed a memory leak in ArpOnFrameRcvdDpc() (bsc#1163927). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-622=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): ovmf-2017+git1510945757.b2662641d5-lp151.11.6.1 ovmf-tools-2017+git1510945757.b2662641d5-lp151.11.6.1 - openSUSE Leap 15.1 (noarch): qemu-ovmf-ia32-2017+git1510945757.b2662641d5-lp151.11.6.1 qemu-ovmf-x86_64-2017+git1510945757.b2662641d5-lp151.11.6.1 - openSUSE Leap 15.1 (x86_64): qemu-ovmf-x86_64-debug-2017+git1510945757.b2662641d5-lp151.11.6.1 References: https://www.suse.com/security/cve/CVE-2019-14559.html https://bugzilla.suse.com/1163927

1 0

openSUSE-SU-2020:0627-1: moderate: Security update for rubygem-actionview-5_1
by opensuse-security＠opensuse.org 11 May '20

11 May '20

openSUSE Security Update: Security update for rubygem-actionview-5_1 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0627-1 Rating: moderate References: #1167240 Cross-References: CVE-2020-5267 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for rubygem-actionview-5_1 fixes the following issues: - CVE-2020-5267: Fixed an XSS vulnerability in ActionView's JavaScript literal escape helpers (bsc#1167240). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-627=1 Package List: - openSUSE Leap 15.1 (x86_64): ruby2.5-rubygem-actionview-5_1-5.1.4-lp151.3.3.1 ruby2.5-rubygem-actionview-doc-5_1-5.1.4-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2020-5267.html https://bugzilla.suse.com/1167240

1 0

openSUSE-RU-2020:0645-1: moderate: Recommended update for libgcrypt
by maintenance＠opensuse.org 11 May '20

11 May '20

openSUSE Recommended Update: Recommended update for libgcrypt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0645-1 Rating: moderate References: #1169944 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libgcrypt fixes the following issues: - FIPS: libgcrypt: Fixed a double free in test_keys() on failed signature verification (bsc#1169944) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-645=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libgcrypt-cavs-1.8.2-lp151.9.22.1 libgcrypt-cavs-debuginfo-1.8.2-lp151.9.22.1 libgcrypt-debugsource-1.8.2-lp151.9.22.1 libgcrypt-devel-1.8.2-lp151.9.22.1 libgcrypt-devel-debuginfo-1.8.2-lp151.9.22.1 libgcrypt20-1.8.2-lp151.9.22.1 libgcrypt20-debuginfo-1.8.2-lp151.9.22.1 libgcrypt20-hmac-1.8.2-lp151.9.22.1 - openSUSE Leap 15.1 (x86_64): libgcrypt-devel-32bit-1.8.2-lp151.9.22.1 libgcrypt-devel-32bit-debuginfo-1.8.2-lp151.9.22.1 libgcrypt20-32bit-1.8.2-lp151.9.22.1 libgcrypt20-32bit-debuginfo-1.8.2-lp151.9.22.1 libgcrypt20-hmac-32bit-1.8.2-lp151.9.22.1 References: https://bugzilla.suse.com/1169944

1 0

openSUSE-SU-2020:0623-1: important: Security update for squid
by opensuse-security＠opensuse.org 11 May '20

11 May '20

openSUSE Security Update: Security update for squid ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0623-1 Rating: important References: #1162689 #1162691 #1167373 #1169659 #1170313 Cross-References: CVE-2019-12519 CVE-2019-12521 CVE-2019-12528 CVE-2019-18860 CVE-2020-11945 CVE-2020-8517 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update for squid to version 4.11 fixes the following issues: - CVE-2020-11945: Fixed a potential remote code execution vulnerability when using HTTP Digest Authentication (bsc#1170313). - CVE-2019-12519, CVE-2019-12521: Fixed incorrect buffer handling that can result in cache poisoning, remote execution, and denial of service attacks when processing ESI responses (bsc#1169659). - CVE-2020-8517: Fixed a possible denial of service caused by incorrect buffer management ext_lm_group_acl when processing NTLM Authentication credentials (bsc#1162691). - CVE-2019-12528: Fixed possible information disclosure when translating FTP server listings into HTTP responses (bsc#1162689). - CVE-2019-18860: Fixed handling of invalid domain names in cachemgr.cgi (bsc#1167373). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-623=1 Package List: - openSUSE Leap 15.1 (x86_64): squid-4.11-lp151.2.15.2 squid-debuginfo-4.11-lp151.2.15.2 squid-debugsource-4.11-lp151.2.15.2 References: https://www.suse.com/security/cve/CVE-2019-12519.html https://www.suse.com/security/cve/CVE-2019-12521.html https://www.suse.com/security/cve/CVE-2019-12528.html https://www.suse.com/security/cve/CVE-2019-18860.html https://www.suse.com/security/cve/CVE-2020-11945.html https://www.suse.com/security/cve/CVE-2020-8517.html https://bugzilla.suse.com/1162689 https://bugzilla.suse.com/1162691 https://bugzilla.suse.com/1167373 https://bugzilla.suse.com/1169659 https://bugzilla.suse.com/1170313

1 0

openSUSE-RU-2020:0629-1: moderate: Recommended update for rmt-server
by maintenance＠opensuse.org 11 May '20

11 May '20

openSUSE Recommended Update: Recommended update for rmt-server ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0629-1 Rating: moderate References: #1162296 #1168554 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for rmt-server to version 2.5.6 fixes the following issues: - Align supported subscription types with SCC (bsc#1168554). - Fix migrations in case adding migration_extra column failed (bsc#1162296). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-629=1 Package List: - openSUSE Leap 15.1 (x86_64): rmt-server-2.5.6-lp151.2.12.1 rmt-server-config-2.5.6-lp151.2.12.1 rmt-server-debuginfo-2.5.6-lp151.2.12.1 rmt-server-debugsource-2.5.6-lp151.2.12.1 rmt-server-pubcloud-2.5.6-lp151.2.12.1 References: https://bugzilla.suse.com/1162296 https://bugzilla.suse.com/1168554

1 0

openSUSE-RU-2020:0637-1: moderate: Recommended update for cluster-glue
by maintenance＠opensuse.org 11 May '20

11 May '20

openSUSE Recommended Update: Recommended update for cluster-glue ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0637-1 Rating: moderate References: #1131545 #1169784 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for cluster-glue fixes the following issues: - Fix for profile parameter handling EC2 stonith plugin to avoid possible cluster resource failures. (bsc#1169784) - Fix for handling in 'stonith' command by creating '/var/run/heartbeat/rsctmp' directory. (bsc#1131545) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-637=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): cluster-glue-1.0.12+v1.git.1587474580.a5fda2bc-lp151.2.6.1 cluster-glue-debuginfo-1.0.12+v1.git.1587474580.a5fda2bc-lp151.2.6.1 cluster-glue-debugsource-1.0.12+v1.git.1587474580.a5fda2bc-lp151.2.6.1 libglue-devel-1.0.12+v1.git.1587474580.a5fda2bc-lp151.2.6.1 libglue-devel-debuginfo-1.0.12+v1.git.1587474580.a5fda2bc-lp151.2.6.1 libglue2-1.0.12+v1.git.1587474580.a5fda2bc-lp151.2.6.1 libglue2-debuginfo-1.0.12+v1.git.1587474580.a5fda2bc-lp151.2.6.1 - openSUSE Leap 15.1 (x86_64): libglue-devel-32bit-1.0.12+v1.git.1587474580.a5fda2bc-lp151.2.6.1 libglue-devel-32bit-debuginfo-1.0.12+v1.git.1587474580.a5fda2bc-lp151.2.6.1 libglue2-32bit-1.0.12+v1.git.1587474580.a5fda2bc-lp151.2.6.1 libglue2-32bit-debuginfo-1.0.12+v1.git.1587474580.a5fda2bc-lp151.2.6.1 References: https://bugzilla.suse.com/1131545 https://bugzilla.suse.com/1169784

1 0

openSUSE-RU-2020:0625-1: moderate: Recommended update for aws-cli, python-boto, python-boto3, python-botocore, python-s3transfer
by maintenance＠opensuse.org 11 May '20

11 May '20

openSUSE Recommended Update: Recommended update for aws-cli, python-boto, python-boto3, python-botocore, python-s3transfer ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0625-1 Rating: moderate References: #1116204 #1117074 #1122668 #1129696 #1166924 #1168943 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 6 recommended fixes can now be installed. Description: This update for aws-cli, python-boto, python-boto3, python-botocore, python-s3transfer fixes the following issues: aws-cli was updated to version 1.18.38 (bsc#1166924, bsc#1168943): + For detailed changes see https://github.com/aws/aws-cli/blob/1.18.38/CHANGELOG.rst + Forward port hide_py_pckgmgmt.patch + Update Requires in spec file from setup.py Update to version 1.18.35 + For detailed changes see https://github.com/aws/aws-cli/blob/1.18.35/CHANGELOG.rst + Forward port hide_py_pckgmgmt.patch + Update Requires in spec file from setup.py Update to version 1.18.27 + For detailed changes see https://github.com/aws/aws-cli/blob/1.18.27/CHANGELOG.rst + Forward port hide_py_pckgmgmt.patch + Update Requires in spec file from setup.py Update to version 1.18.0 + For detailed changes see https://github.com/aws/aws-cli/blob/1.18.0/CHANGELOG.rst + Forward port hide_py_pckgmgmt.patch + Install aws bash completetion script into system path + Install aws zsh completion script into /etc/zsh_completion.d + Update Requires in spec file from setup.py - make it possible to find the package under the name "awscli" - Add bash command completion capability (bsc#1117074) Update to version 1.17.9 + For detailed changes see https://github.com/aws/aws-cli/blob/1.17.9/CHANGELOG.rst + Forward port hide_py_pckgmgmt.patch + Update Requires in spec file from setup.py Update to version 1.16.297 + For detailed changes see https://github.com/aws/aws-cli/blob/1.16.297/CHANGELOG.rst + Forward port hide_py_pckgmgmt.patch + Update Requires in spec file from setup.py Update to version 1.16.281 + For detailed changes see https://github.com/aws/aws-cli/blob/1.16.281/CHANGELOG.rst + Forward port hide_py_pckgmgmt.patch + Update Requires in spec file from setup.py Update to version 1.16.258 + For detailed changes see https://github.com/aws/aws-cli/blob/1.16.258/CHANGELOG.rst python-boto3 was updated to 1.12.38 (bsc#1166924, bsc#1168943) * api-change:``apigateway``: [``botocore``] Update apigateway client to latest version * api-change:``codeguru-reviewer``: [``botocore``] Update codeguru-reviewer client to latest version * api-change:``mediaconnect``: [``botocore``] Update mediaconnect client to latest version - from version 1.12.37 * api-change:``transcribe``: [``botocore``] Update transcribe client to latest version * api-change:``chime``: [``botocore``] Update chime client to latest version * api-change:``iam``: [``botocore``] Update iam client to latest version * api-change:``elasticbeanstalk``: [``botocore``] Update elasticbeanstalk client to latest version - from version 1.12.36 * api-change:``personalize-runtime``: [``botocore``] Update personalize-runtime client to latest version * api-change:``robomaker``: [``botocore``] Update robomaker client to latest version - Version update 1.12.35 * api-change:``medialive``: [``botocore``] Update medialive client to latest version * api-change:``redshift``: [``botocore``] Update redshift client to latest version * api-change:``gamelift``: [``botocore``] Update gamelift client to latest version * api-change:``cloudwatch``: [``botocore``] Update cloudwatch client to latest version * api-change:``rds``: [``botocore``] Update rds client to latest version - from version 1.12.34 * api-change:``iot``: [``botocore``] Update iot client to latest version * api-change:``mediaconnect``: [``botocore``] Update mediaconnect client to latest version - from version 1.12.33 * api-change:``opsworkscm``: [``botocore``] Update opsworkscm client to latest version * api-change:``wafv2``: [``botocore``] Update wafv2 client to latest version * api-change:``glue``: [``botocore``] Update glue client to latest version * api-change:``elastic-inference``: [``botocore``] Update elastic-inference client to latest version * api-change:``lambda``: [``botocore``] Update lambda client to latest version * api-change:``mediastore``: [``botocore``] Update mediastore client to latest version * api-change:``pinpoint``: [``botocore``] Update pinpoint client to latest version * api-change:``storagegateway``: [``botocore``] Update storagegateway client to latest version * api-change:``rekognition``: [``botocore``] Update rekognition client to latest version * api-change:``fms``: [``botocore``] Update fms client to latest version * api-change:``organizations``: [``botocore``] Update organizations client to latest version * api-change:``detective``: [``botocore``] Update detective client to latest version * api-change:``appconfig``: [``botocore``] Update appconfig client to latest version - from version 1.12.32 * api-change:``accessanalyzer``: [``botocore``] Update accessanalyzer client to latest version - from version 1.12.31 * api-change:``globalaccelerator``: [``botocore``] Update globalaccelerator client to latest version * api-change:``kendra``: [``botocore``] Update kendra client to latest version * api-change:``servicecatalog``: [``botocore``] Update servicecatalog client to latest version - from version 1.12.30 * api-change:``sagemaker``: [``botocore``] Update sagemaker client to latest version * api-change:``fsx``: [``botocore``] Update fsx client to latest version * api-change:``securityhub``: [``botocore``] Update securityhub client to latest version - from version 1.12.29 * api-change:``managedblockchain``: [``botocore``] Update managedblockchain client to latest version * api-change:``ce``: [``botocore``] Update ce client to latest version * api-change:``application-insights``: [``botocore``] Update application-insights client to latest version * api-change:``detective``: [``botocore``] Update detective client to latest version * api-change:``es``: [``botocore``] Update es client to latest version * api-change:``xray``: [``botocore``] Update xray client to latest version - from version 1.12.28 * api-change:``athena``: [``botocore``] Update athena client to latest version * api-change:``rds-data``: [``botocore``] Update rds-data client to latest version * api-change:``eks``: [``botocore``] Update eks client to latest version * api-change:``organizations``: [``botocore``] Update organizations client to latest version - Update BuildRequires and Requires from setup.py - Version update to 1.12.27 * api-change:``apigatewayv2``: [``botocore``] Update apigatewayv2 client to latest version * api-change:``eks``: [``botocore``] Update eks client to latest version * api-change:``route53``: [``botocore``] Update route53 client to latest version - from version 1.12.26 * api-change:``servicecatalog``: [``botocore``] Update servicecatalog client to latest version - from version 1.12.25 * api-change:``outposts``: [``botocore``] Update outposts client to latest version * api-change:``acm``: [``botocore``] Update acm client to latest version - from version 1.12.24 * api-change:``rds``: [``botocore``] Update rds client to latest version * api-change:``mediaconnect``: [``botocore``] Update mediaconnect client to latest version * api-change:``personalize``: [``botocore``] Update personalize client to latest version - from version 1.12.23 * api-change:``mediaconvert``: [``botocore``] Update mediaconvert client to latest version - from version 1.12.22 * api-change:``s3control``: [``botocore``] Update s3control client to latest version * bugfix:Stubber: [``botocore``] fixes `#1884 <https://github.com/boto/botocore/issues/1884>`__ * api-change:``cognito-idp``: [``botocore``] Update cognito-idp client to latest version * api-change:``ssm``: [``botocore``] Update ssm client to latest version * api-change:``ecs``: [``botocore``] Update ecs client to latest version * api-change:``elasticache``: [``botocore``] Update elasticache client to latest version - from version 1.12.21 * api-change:``appconfig``: [``botocore``] Update appconfig client to latest version - from version 1.12.20 * api-change:``lex-models``: [``botocore``] Update lex-models client to latest version * api-change:``securityhub``: [``botocore``] Update securityhub client to latest version * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``apigatewayv2``: [``botocore``] Update apigatewayv2 client to latest version * api-change:``iot``: [``botocore``] Update iot client to latest version - from version 1.12.19 * api-change:``efs``: [``botocore``] Update efs client to latest version * api-change:``redshift``: [``botocore``] Update redshift client to latest version - from version 1.12.18 * api-change:``serverlessrepo``: [``botocore``] Update serverlessrepo client to latest version * api-change:``iotevents``: [``botocore``] Update iotevents client to latest version * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * enhancement:timezones: [``botocore``] Improved timezone parsing for Windows with new fallback method (#1939) * api-change:``marketplacecommerceanalytics``: [``botocore``] Update marketplacecommerceanalytics client to latest version - from version 1.12.17 * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``medialive``: [``botocore``] Update medialive client to latest version * api-change:``dms``: [``botocore``] Update dms client to latest version - from version 1.12.16 * api-change:``signer``: [``botocore``] Update signer client to latest version * api-change:``guardduty``: [``botocore``] Update guardduty client to latest version * api-change:``appmesh``: [``botocore``] Update appmesh client to latest version * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``robomaker``: [``botocore``] Update robomaker client to latest version - from version 1.12.15 * api-change:``eks``: [``botocore``] Update eks client to latest version * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``opsworkscm``: [``botocore``] Update opsworkscm client to latest version * api-change:``guardduty``: [``botocore``] Update guardduty client to latest version - from version 1.12.14 * api-change:``pinpoint``: [``botocore``] Update pinpoint client to latest version - from version 1.12.13 * api-change:``ec2``: [``botocore``] Update ec2 client to latest version - from version 1.12.12 * api-change:``cloudwatch``: [``botocore``] Update cloudwatch client to latest version * api-change:``comprehendmedical``: [``botocore``] Update comprehendmedical client to latest version - from version 1.12.11 * api-change:``config``: [``botocore``] Update config client to latest version - from version 1.12.10 * api-change:``config``: [``botocore``] Update config client to latest version * api-change:``glue``: [``botocore``] Update glue client to latest version * api-change:``sagemaker-a2i-runtime``: [``botocore``] Update sagemaker-a2i-runtime client to latest version * api-change:``appmesh``: [``botocore``] Update appmesh client to latest version * api-change:``elbv2``: [``botocore``] Update elbv2 client to latest version * api-change:``workdocs``: [``botocore``] Update workdocs client to latest version * api-change:``quicksight``: [``botocore``] Update quicksight client to latest version * api-change:``accessanalyzer``: [``botocore``] Update accessanalyzer client to latest version * api-change:``codeguruprofiler``: [``botocore``] Update codeguruprofiler client to latest version - from version 1.12.9 * api-change:``lightsail``: [``botocore``] Update lightsail client to latest version * api-change:``globalaccelerator``: [``botocore``] Update globalaccelerator client to latest version - from version 1.12.8 * api-change:``transcribe``: [``botocore``] Update transcribe client to latest version * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``sagemaker``: [``botocore``] Update sagemaker client to latest version * api-change:``securityhub``: [``botocore``] Update securityhub client to latest version - from version 1.12.7 * api-change:``stepfunctions``: [``botocore``] Update stepfunctions client to latest version * api-change:``kafka``: [``botocore``] Update kafka client to latest version * api-change:``secretsmanager``: [``botocore``] Update secretsmanager client to latest version * api-change:``outposts``: [``botocore``] Update outposts client to latest version - from version 1.12.6 * api-change:``iotevents``: [``botocore``] Update iotevents client to latest version * api-change:``docdb``: [``botocore``] Update docdb client to latest version * api-change:``snowball``: [``botocore``] Update snowball client to latest version * api-change:``fsx``: [``botocore``] Update fsx client to latest version * api-change:``events``: [``botocore``] Update events client to latest version - from version 1.12.5 * api-change:``imagebuilder``: [``botocore``] Update imagebuilder client to latest version * api-change:``wafv2``: [``botocore``] Update wafv2 client to latest version * api-change:``redshift``: [``botocore``] Update redshift client to latest version - from version 1.12.4 * api-change:``savingsplans``: [``botocore``] Update savingsplans client to latest version * api-change:``appconfig``: [``botocore``] Update appconfig client to latest version * api-change:``pinpoint``: [``botocore``] Update pinpoint client to latest version - from version 1.12.3 * api-change:``autoscaling``: [``botocore``] Update autoscaling client to latest version * api-change:``servicecatalog``: [``botocore``] Update servicecatalog client to latest version * api-change:``lambda``: [``botocore``] Update lambda client to latest version - from version 1.12.2 * api-change:``autoscaling``: [``botocore``] Update autoscaling client to latest version * api-change:``chime``: [``botocore``] Update chime client to latest version * api-change:``rds``: [``botocore``] Update rds client to latest version - from version 1.12.1 * api-change:``cloud9``: [``botocore``] Update cloud9 client to latest version * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``dynamodb``: [``botocore``] Update dynamodb client to latest version * api-change:``rekognition``: [``botocore``] Update rekognition client to latest version - Version update to 1.12.0 * feature:retries: [``botocore``] Add support for retry modes, including ``standard`` and ``adaptive`` modes (`#1972 <https://github.com/boto/botocore/issues/1972>`__) * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``mediatailor``: [``botocore``] Update mediatailor client to latest version * api-change:``securityhub``: [``botocore``] Update securityhub client to latest version * api-change:``shield``: [``botocore``] Update shield client to latest version - from version 1.11.17 * api-change:``mediapackage-vod``: [``botocore``] Update mediapackage-vod client to latest version - from version 1.11.16 * api-change:``glue``: [``botocore``] Update glue client to latest version * api-change:``chime``: [``botocore``] Update chime client to latest version * api-change:``workmail``: [``botocore``] Update workmail client to latest version * api-change:``ds``: [``botocore``] Update ds client to latest version * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``es``: [``botocore``] Update es client to latest version * api-change:``neptune``: [``botocore``] Update neptune client to latest version - from version 1.11.15 * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``cognito-idp``: [``botocore``] Update cognito-idp client to latest version * api-change:``cloudformation``: [``botocore``] Update cloudformation client to latest version - from version 1.11.14 * api-change:``docdb``: [``botocore``] Update docdb client to latest version * api-change:``kms``: [``botocore``] Update kms client to latest version - from version 1.11.13 * api-change:``robomaker``: [``botocore``] Update robomaker client to latest version * api-change:``imagebuilder``: [``botocore``] Update imagebuilder client to latest version * api-change:``rds``: [``botocore``] Update rds client to latest version - from version 1.11.12 * api-change:``ebs``: [``botocore``] Update ebs client to latest version * api-change:``appsync``: [``botocore``] Update appsync client to latest version * api-change:``lex-models``: [``botocore``] Update lex-models client to latest version * api-change:``ecr``: [``botocore``] Update ecr client to latest version * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``codebuild``: [``botocore``] Update codebuild client to latest version - from version 1.11.11 * api-change:``groundstation``: [``botocore``] Update groundstation client to latest version * api-change:``mediaconvert``: [``botocore``] Update mediaconvert client to latest version * api-change:``dlm``: [``botocore``] Update dlm client to latest version * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``forecastquery``: [``botocore``] Update forecastquery client to latest version * api-change:``securityhub``: [``botocore``] Update securityhub client to latest version * api-change:``resourcegroupstaggingapi``: [``botocore``] Update resourcegroupstaggingapi client to latest version - from version 1.11.10 * api-change:``workmail``: [``botocore``] Update workmail client to latest version * api-change:``iot``: [``botocore``] Update iot client to latest version * api-change:``cloudfront``: [``botocore``] Update cloudfront client to latest version * api-change:``storagegateway``: [``botocore``] Update storagegateway client to latest version * api-change:``ssm``: [``botocore``] Update ssm client to latest version * api-change:``kafka``: [``botocore``] Update kafka client to latest version * api-change:``ec2``: [``botocore``] Update ec2 client to latest version - Version update to 1.11.9 * api-change:``ecs``: [``botocore``] Update ecs client to latest version * api-change:``opsworkscm``: [``botocore``] Update opsworkscm client to latest version * api-change:``workspaces``: [``botocore``] Update workspaces client to latest version * api-change:``datasync``: [``botocore``] Update datasync client to latest version * api-change:``eks``: [``botocore``] Update eks client to latest version - from version 1.11.8 * api-change:``rds``: [``botocore``] Update rds client to latest version * api-change:``iam``: [``botocore``] Update iam client to latest version - from version 1.11.7 * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``codepipeline``: [``botocore``] Update codepipeline client to latest version * api-change:``discovery``: [``botocore``] Update discovery client to latest version * api-change:``iotevents``: [``botocore``] Update iotevents client to latest version * api-change:``marketplacecommerceanalytics``: [``botocore``] Update marketplacecommerceanalytics client to latest version - from version 1.11.6 * api-change:``lambda``: [``botocore``] Update lambda client to latest version * api-change:``application-insights``: [``botocore``] Update application-insights client to latest version * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``cloudwatch``: [``botocore``] Update cloudwatch client to latest version * api-change:``kms``: [``botocore``] Update kms client to latest version * api-change:``alexaforbusiness``: [``botocore``] Update alexaforbusiness client to latest version - from version 1.11.5 * api-change:``mediaconvert``: [``botocore``] Update mediaconvert client to latest version * api-change:``neptune``: [``botocore``] Update neptune client to latest version * api-change:``cloudhsmv2``: [``botocore``] Update cloudhsmv2 client to latest version * api-change:``redshift``: [``botocore``] Update redshift client to latest version * api-change:``batch``: [``botocore``] Update batch client to latest version * api-change:``ecs``: [``botocore``] Update ecs client to latest version - from version 1.11.4 * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``sagemaker``: [``botocore``] Update sagemaker client to latest version * api-change:``ds``: [``botocore``] Update ds client to latest version - from version 1.11.3 * api-change:``securityhub``: [``botocore``] Update securityhub client to latest version * api-change:``ssm``: [``botocore``] Update ssm client to latest version * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``organizations``: [``botocore``] Update organizations client to latest version - from version 1.11.2 * api-change:``ec2``: [``botocore``] Update ec2 client to latest version - from version 1.11.1 * api-change:``efs``: [``botocore``] Update efs client to latest version * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``backup``: [``botocore``] Update backup client to latest version - from version 1.11.0 * api-change:``sagemaker``: [``botocore``] Update sagemaker client to latest version * feature:Python: Dropped support for Python 2.6 and 3.3. * api-change:``chime``: [``botocore``] Update chime client to latest version * api-change:``transfer``: [``botocore``] Update transfer client to latest version * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * feature:Python: [``botocore``] Dropped support for Python 2.6 and 3.3. * api-change:``workspaces``: [``botocore``] Update workspaces client to latest version * api-change:``rds``: [``botocore``] Update rds client to latest version - from version 1.10.50 * api-change:``logs``: [``botocore``] Update logs client to latest version - from version 1.10.49 * api-change:``fms``: [``botocore``] Update fms client to latest version * api-change:``translate``: [``botocore``] Update translate client to latest version * api-change:``ce``: [``botocore``] Update ce client to latest version - from version 1.10.48 * api-change:``codebuild``: [``botocore``] Update codebuild client to latest version * api-change:``mgh``: [``botocore``] Update mgh client to latest version * api-change:``xray``: [``botocore``] Update xray client to latest version - from version 1.10.47 * api-change:``comprehend``: [``botocore``] Update comprehend client to latest version * api-change:``mediapackage``: [``botocore``] Update mediapackage client to latest version * api-change:``ec2``: [``botocore``] Update ec2 client to latest version - from version 1.10.46 * api-change:``lex-models``: [``botocore``] Update lex-models client to latest version * api-change:``ecr``: [``botocore``] Update ecr client to latest version * api-change:``lightsail``: [``botocore``] Update lightsail client to latest version * api-change:``ce``: [``botocore``] Update ce client to latest version - from version 1.10.45 * api-change:``fsx``: [``botocore``] Update fsx client to latest version * api-change:``health``: [``botocore``] Update health client to latest version * api-change:``detective``: [``botocore``] Update detective client to latest version - from version 1.10.44 * api-change:``transcribe``: [``botocore``] Update transcribe client to latest version * api-change:``eks``: [``botocore``] Update eks client to latest version * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``rds``: [``botocore``] Update rds client to latest version * api-change:``ssm``: [``botocore``] Update ssm client to latest version * api-change:``redshift``: [``botocore``] Update redshift client to latest version * api-change:``pinpoint``: [``botocore``] Update pinpoint client to latest version * api-change:``securityhub``: [``botocore``] Update securityhub client to latest version * api-change:``devicefarm``: [``botocore``] Update devicefarm client to latest version - from version 1.10.43 * api-change:``transcribe``: [``botocore``] Update transcribe client to latest version * api-change:``dlm``: [``botocore``] Update dlm client to latest version * api-change:``lex-models``: [``botocore``] Update lex-models client to latest version * api-change:``personalize-runtime``: [``botocore``] Update personalize-runtime client to latest version * api-change:``ssm``: [``botocore``] Update ssm client to latest version * api-change:``codestar-connections``: [``botocore``] Update codestar-connections client to latest version * api-change:``gamelift``: [``botocore``] Update gamelift client to latest version * api-change:``ec2``: [``botocore``] Update ec2 client to latest version - from version 1.10.42 * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``s3``: [``botocore``] Update s3 client to latest version * api-change:``resourcegroupstaggingapi``: [``botocore``] Update resourcegroupstaggingapi client to latest version * api-change:``cloudfront``: [``botocore``] Update cloudfront client to latest version * api-change:``opsworkscm``: [``botocore``] Update opsworkscm client to latest version - from version 1.10.41 * api-change:``kinesisanalyticsv2``: [``botocore``] Update kinesisanalyticsv2 client to latest version * api-change:``ssm``: [``botocore``] Update ssm client to latest version * api-change:``medialive``: [``botocore``] Update medialive client to latest version * api-change:``iot``: [``botocore``] Update iot client to latest version * api-change:``ecs``: [``botocore``] Update ecs client to latest version * api-change:``ec2``: [``botocore``] Update ec2 client to latest version - from version 1.10.40 * api-change:``mq``: [``botocore``] Update mq client to latest version * api-change:``comprehendmedical``: [``botocore``] Update comprehendmedical client to latest version * api-change:``ec2``: [``botocore``] Update ec2 client to latest version - from version 1.10.39 * api-change:``codebuild``: [``botocore``] Update codebuild client to latest version * api-change:``detective``: [``botocore``] Update detective client to latest version * api-change:``sesv2``: [``botocore``] Update sesv2 client to latest version - from version 1.10.38 * api-change:``accessanalyzer``: [``botocore``] Update accessanalyzer client to latest version - from version 1.10.37 * api-change:``ec2``: [``botocore``] Update ec2 client to latest version - from version 1.10.36 * api-change:``kendra``: [``botocore``] Update kendra client to latest version - from version 1.10.35 * bugfix:s3: [``botocore``] Add stricter validation to s3 control account id parameter. * api-change:``quicksight``: [``botocore``] Update quicksight client to latest version * api-change:``kms``: [``botocore``] Update kms client to latest version * api-change:``ssm``: [``botocore``] Update ssm client to latest version * api-change:``kafka``: [``botocore``] Update kafka client to latest version - from version 1.10.34 * bugfix:s3: [``botocore``] Fixed an issue where the request path was set incorrectly if access point name was present in key path. - Version update to 1.10.33 * api-change:``kinesisvideo``: [``botocore``] Update kinesisvideo client to latest version * api-change:``kinesis-video-signaling``: [``botocore``] Update kinesis-video-signaling client to latest version * api-change:``apigatewayv2``: [``botocore``] Update apigatewayv2 client to latest version - from version 1.10.32 * api-change:``ebs``: [``botocore``] Update ebs client to latest version * api-change:``stepfunctions``: [``botocore``] Update stepfunctions client to latest version * api-change:``application-autoscaling``: [``botocore``] Update application-autoscaling client to latest version * api-change:``lambda``: [``botocore``] Update lambda client to latest version * api-change:``rekognition``: [``botocore``] Update rekognition client to latest version * api-change:``rds``: [``botocore``] Update rds client to latest version * api-change:``sagemaker``: [``botocore``] Update sagemaker client to latest version - from version 1.10.31 * api-change:``textract``: [``botocore``] Update textract client to latest version * api-change:``s3control``: [``botocore``] Update s3control client to latest version * api-change:``ecs``: [``botocore``] Update ecs client to latest version * api-change:``s3``: [``botocore``] Update s3 client to latest version * api-change:``outposts``: [``botocore``] Update outposts client to latest version * api-change:``kendra``: [``botocore``] Update kendra client to latest version * api-change:``eks``: [``botocore``] Update eks client to latest version * api-change:``networkmanager``: [``botocore``] Update networkmanager client to latest version * api-change:``compute-optimizer``: [``botocore``] Update compute-optimizer client to latest version * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``frauddetector``: [``botocore``] Update frauddetector client to latest version * api-change:``sagemaker-a2i-runtime``: [``botocore``] Update sagemaker-a2i-runtime client to latest version * api-change:``codeguru-reviewer``: [``botocore``] Update codeguru-reviewer client to latest version * api-change:``codeguruprofiler``: [``botocore``] Update codeguruprofiler client to latest version * api-change:``es``: [``botocore``] Update es client to latest version - from version 1.10.30 * api-change:``accessanalyzer``: [``botocore``] Update accessanalyzer client to latest version - from version 1.10.29 * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``license-manager``: [``botocore``] Update license-manager client to latest version * api-change:``imagebuilder``: [``botocore``] Update imagebuilder client to latest version * api-change:``schemas``: [``botocore``] Update schemas client to latest version - from version 1.10.28 * api-change:``rds-data``: [``botocore``] Update rds-data client to latest version * api-change:``ds``: [``botocore``] Update ds client to latest version * api-change:``workspaces``: [``botocore``] Update workspaces client to latest version * api-change:``resourcegroupstaggingapi``: [``botocore``] Update resourcegroupstaggingapi client to latest version * api-change:``cognito-idp``: [``botocore``] Update cognito-idp client to latest version * api-change:``dynamodb``: [``botocore``] Update dynamodb client to latest version * api-change:``elastic-inference``: [``botocore``] Update elastic-inference client to latest version * api-change:``organizations``: [``botocore``] Update organizations client to latest version * api-change:``mediatailor``: [``botocore``] Update mediatailor client to latest version * api-change:``quicksight``: [``botocore``] Update quicksight client to latest version * api-change:``serverlessrepo``: [``botocore``] Update serverlessrepo client to latest version - from version 1.10.27 * api-change:``cognito-idp``: [``botocore``] Update cognito-idp client to latest version * api-change:``redshift``: [``botocore``] Update redshift client to latest version * api-change:``elbv2``: [``botocore``] Update elbv2 client to latest version * api-change:``wafv2``: [``botocore``] Update wafv2 client to latest version * api-change:``dlm``: [``botocore``] Update dlm client to latest version * api-change:``iot``: [``botocore``] Update iot client to latest version * api-change:``lex-runtime``: [``botocore``] Update lex-runtime client to latest version * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``athena``: [``botocore``] Update athena client to latest version * api-change:``iotsecuretunneling``: [``botocore``] Update iotsecuretunneling client to latest version * api-change:``ssm``: [``botocore``] Update ssm client to latest version * api-change:``application-insights``: [``botocore``] Update application-insights client to latest version * api-change:``mediapackage-vod``: [``botocore``] Update mediapackage-vod client to latest version * api-change:``appconfig``: [``botocore``] Update appconfig client to latest version * api-change:``mediaconvert``: [``botocore``] Update mediaconvert client to latest version * api-change:``kinesisanalyticsv2``: [``botocore``] Update kinesisanalyticsv2 client to latest version * api-change:``medialive``: [``botocore``] Update medialive client to latest version * api-change:``lambda``: [``botocore``] Update lambda client to latest version * api-change:``cloudwatch``: [``botocore``] Update cloudwatch client to latest version * api-change:``sesv2``: [``botocore``] Update sesv2 client to latest version * api-change:``application-autoscaling``: [``botocore``] Update application-autoscaling client to latest version * api-change:``greengrass``: [``botocore``] Update greengrass client to latest version * api-change:``alexaforbusiness``: [``botocore``] Update alexaforbusiness client to latest version * api-change:``rds``: [``botocore``] Update rds client to latest version * api-change:``ce``: [``botocore``] Update ce client to latest version * api-change:``ram``: [``botocore``] Update ram client to latest version * api-change:``codebuild``: [``botocore``] Update codebuild client to latest version * api-change:``comprehend``: [``botocore``] Update comprehend client to latest version * api-change:``kms``: [``botocore``] Update kms client to latest version - from version 1.10.26 * api-change:``acm``: [``botocore``] Update acm client to latest version * api-change:``autoscaling-plans``: [``botocore``] Update autoscaling-plans client to latest version * api-change:``codebuild``: [``botocore``] Update codebuild client to latest version * api-change:``mediapackage-vod``: [``botocore``] Update mediapackage-vod client to latest version * api-change:``emr``: [``botocore``] Update emr client to latest version * api-change:``sns``: [``botocore``] Update sns client to latest version * api-change:``ssm``: [``botocore``] Update ssm client to latest version * api-change:``application-autoscaling``: [``botocore``] Update application-autoscaling client to latest version * api-change:``sts``: [``botocore``] Update sts client to latest version * api-change:``forecast``: [``botocore``] Update forecast client to latest version * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``rekognition``: [``botocore``] Update rekognition client to latest version - from version 1.10.25 * bugfix:IMDS metadata: [``botocore``] Add 405 case to metadata fetching logic. - from version 1.10.24 * api-change:``glue``: [``botocore``] Update glue client to latest version * api-change:``transcribe``: [``botocore``] Update transcribe client to latest version * api-change:``connectparticipant``: [``botocore``] Update connectparticipant client to latest version * api-change:``dynamodb``: [``botocore``] Update dynamodb client to latest version * api-change:``lex-runtime``: [``botocore``] Update lex-runtime client to latest version * api-change:``connect``: [``botocore``] Update connect client to latest version * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``meteringmarketplace``: [``botocore``] Update meteringmarketplace client to latest version * api-change:``config``: [``botocore``] Update config client to latest version * api-change:``lex-models``: [``botocore``] Update lex-models client to latest version * api-change:``ssm``: [``botocore``] Update ssm client to latest version * api-change:``amplify``: [``botocore``] Update amplify client to latest version * api-change:``appsync``: [``botocore``] Update appsync client to latest version - from version 1.10.23 * api-change:``datasync``: [``botocore``] Update datasync client to latest version * api-change:``dlm``: [``botocore``] Update dlm client to latest version * api-change:``mediastore``: [``botocore``] Update mediastore client to latest version * api-change:``cloudtrail``: [``botocore``] Update cloudtrail client to latest version * api-change:``mgh``: [``botocore``] Update mgh client to latest version * api-change:``storagegateway``: [``botocore``] Update storagegateway client to latest version * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``codecommit``: [``botocore``] Update codecommit client to latest version * api-change:``s3``: [``botocore``] Update s3 client to latest version * api-change:``fsx``: [``botocore``] Update fsx client to latest version * api-change:``migrationhub-config``: [``botocore``] Update migrationhub-config client to latest version * api-change:``firehose``: [``botocore``] Update firehose client to latest version * api-change:``transcribe``: [``botocore``] Update transcribe client to latest version * api-change:``ecs``: [``botocore``] Update ecs client to latest version * api-change:``discovery``: [``botocore``] Update discovery client to latest version * api-change:``chime``: [``botocore``] Update chime client to latest version * api-change:``quicksight``: [``botocore``] Update quicksight client to latest version - from version 1.10.22 * bugfix:IMDS: [``botocore``] Fix regression in IMDS credential resolution. Fixes `#1892 <https://github.com/boto/botocore/issues/1892>`__. - from version 1.10.21 * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``cloudformation``: [``botocore``] Update cloudformation client to latest version * api-change:``elbv2``: [``botocore``] Update elbv2 client to latest version * api-change:``lambda``: [``botocore``] Update lambda client to latest version * api-change:``config``: [``botocore``] Update config client to latest version * api-change:``iam``: [``botocore``] Update iam client to latest version * api-change:``codebuild``: [``botocore``] Update codebuild client to latest version * api-change:``iot``: [``botocore``] Update iot client to latest version * api-change:``autoscaling``: [``botocore``] Update autoscaling client to latest version - from version 1.10.20 * api-change:``cloudformation``: [``botocore``] Update cloudformation client to latest version * api-change:``s3``: [``botocore``] Update s3 client to latest version * api-change:``rds``: [``botocore``] Update rds client to latest version * api-change:``pinpoint``: [``botocore``] Update pinpoint client to latest version * api-change:``sagemaker``: [``botocore``] Update sagemaker client to latest version * api-change:``sagemaker-runtime``: [``botocore``] Update sagemaker-runtime client to latest version * api-change:``ce``: [``botocore``] Update ce client to latest version * api-change:``ssm``: [``botocore``] Update ssm client to latest version - from version 1.10.19 * api-change:``cognito-idp``: [``botocore``] Update cognito-idp client to latest version * api-change:``elbv2``: [``botocore``] Update elbv2 client to latest version * api-change:``workspaces``: [``botocore``] Update workspaces client to latest version * api-change:``ssm``: [``botocore``] Update ssm client to latest version * api-change:``logs``: [``botocore``] Update logs client to latest version * api-change:``guardduty``: [``botocore``] Update guardduty client to latest version * api-change:``emr``: [``botocore``] Update emr client to latest version * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``mediaconvert``: [``botocore``] Update mediaconvert client to latest version * api-change:``eks``: [``botocore``] Update eks client to latest version * api-change:``chime``: [``botocore``] Update chime client to latest version - from version 1.10.18 * api-change:``meteringmarketplace``: [``botocore``] Update meteringmarketplace client to latest version * api-change:``cognito-idp``: [``botocore``] Update cognito-idp client to latest version * api-change:``connect``: [``botocore``] Update connect client to latest version * api-change:``ssm``: [``botocore``] Update ssm client to latest version * api-change:``personalize``: [``botocore``] Update personalize client to latest version - Update BuildRequires and Requires in spec file from setup.py - Version update to 1.10.17 * api-change:``sesv2``: [``botocore``] Update sesv2 client to latest version * api-change:``dataexchange``: [``botocore``] Update dataexchange client to latest version * api-change:``iot``: [``botocore``] Update iot client to latest version * api-change:``cloudsearch``: [``botocore``] Update cloudsearch client to latest version * api-change:``dlm``: [``botocore``] Update dlm client to latest version - from version 1.10.16 * api-change:``transcribe``: [``botocore``] Update transcribe client to latest version * api-change:``marketplace-catalog``: [``botocore``] Update marketplace-catalog client to latest version * api-change:``dynamodb``: [``botocore``] Update dynamodb client to latest version * api-change:``codepipeline``: [``botocore``] Update codepipeline client to latest version * api-change:``elbv2``: [``botocore``] Update elbv2 client to latest version - from version 1.10.15 * api-change:``ce``: [``botocore``] Update ce client to latest version * api-change:``cloudformation``: [``botocore``] Update cloudformation client to latest version - from version 1.10.14 * api-change:``cognito-identity``: [``botocore``] Update cognito-identity client to latest version * api-change:``ecr``: [``botocore``] Update ecr client to latest version - from version 1.10.13 * api-change:``ssm``: [``botocore``] Update ssm client to latest version * api-change:``sso``: [``botocore``] Update sso client to latest version * api-change:``sso-oidc``: [``botocore``] Update sso-oidc client to latest version * api-change:``comprehend``: [``botocore``] Update comprehend client to latest version - from version 1.10.12 * api-change:``savingsplans``: [``botocore``] Update savingsplans client to latest version - from version 1.10.11 * api-change:``codebuild``: [``botocore``] Update codebuild client to latest version * api-change:``budgets``: [``botocore``] Update budgets client to latest version * api-change:``efs``: [``botocore``] Update efs client to latest version * api-change:``ce``: [``botocore``] Update ce client to latest version * api-change:``savingsplans``: [``botocore``] Update savingsplans client to latest version * api-change:``signer``: [``botocore``] Update signer client to latest version - from version 1.10.10 * api-change:``rds``: [``botocore``] Update rds client to latest version * api-change:``codestar-notifications``: [``botocore``] Update codestar-notifications client to latest version - from version 1.10.9 * api-change:``dax``: [``botocore``] Update dax client to latest version * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``robomaker``: [``botocore``] Update robomaker client to latest version - from version 1.10.8 * api-change:``pinpoint``: [``botocore``] Update pinpoint client to latest version * api-change:``cloudtrail``: [``botocore``] Update cloudtrail client to latest version * api-change:``dms``: [``botocore``] Update dms client to latest version - from version 1.10.7 * api-change:``support``: [``botocore``] Update support client to latest version * api-change:``amplify``: [``botocore``] Update amplify client to latest version * api-change:``s3``: [``botocore``] Update s3 client to latest version - from version 1.10.6 * api-change:``elasticache``: [``botocore``] Update elasticache client to latest version - from version 1.10.5 * api-change:``cloud9``: [``botocore``] Update cloud9 client to latest version * api-change:``appstream``: [``botocore``] Update appstream client to latest version - from version 1.10.4 * api-change:``s3``: [``botocore``] Update s3 client to latest version - from version 1.10.3 * api-change:``elasticache``: [``botocore``] Update elasticache client to latest version * api-change:``transfer``: [``botocore``] Update transfer client to latest version * api-change:``ecr``: [``botocore``] Update ecr client to latest version - from version 1.10.2 * api-change:``sagemaker``: [``botocore``] Update sagemaker client to latest version * api-change:``gamelift``: [``botocore``] Update gamelift client to latest version * enhancement:``sts``: [``botocore``] Add support for configuring the use of regional STS endpoints. * api-change:``chime``: [``botocore``] Update chime client to latest version * api-change:``appmesh``: [``botocore``] Update appmesh client to latest version * api-change:``ec2``: [``botocore``] Update ec2 client to latest version - from version 1.10.1 * api-change:``polly``: [``botocore``] Update polly client to latest version * api-change:``connect``: [``botocore``] Update connect client to latest version - from version 1.10.0 * api-change:``opsworkscm``: [``botocore``] Update opsworkscm client to latest version * api-change:``iotevents``: [``botocore``] Update iotevents client to latest version * feature:``botocore.vendored.requests``: [``botocore``] Removed vendored version of ``requests`` (`#1829 <https://github.com/boto/botocore/issues/1829>`__) - from version 1.9.253 * api-change:``cloudwatch``: [``botocore``] Update cloudwatch client to latest version - from version 1.9.252 * api-change:``batch``: [``botocore``] Update batch client to latest version * api-change:``rds``: [``botocore``] Update rds client to latest version - from version 1.9.251 * api-change:``kafka``: [``botocore``] Update kafka client to latest version * api-change:``marketplacecommerceanalytics``: [``botocore``] Update marketplacecommerceanalytics client to latest version * api-change:``robomaker``: [``botocore``] Update robomaker client to latest version - from version 1.9.250 * api-change:``kinesis-video-archived-media``: [``botocore``] Update kinesis-video-archived-media client to latest version - from version 1.9.249 * api-change:``personalize``: [``botocore``] Update personalize client to latest version * api-change:``workspaces``: [``botocore``] Update workspaces client to latest version - Update BuildRequires and Requires in spec file from setup.py - Version update to 1.9.248 * api-change:``greengrass``: [``botocore``] Update greengrass client to latest version - from version 1.9.247 * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``lex-runtime``: [``botocore``] Update lex-runtime client to latest version * api-change:``fms``: [``botocore``] Update fms client to latest version * api-change:``iotanalytics``: [``botocore``] Update iotanalytics client to latest version - from version 1.9.246 * api-change:``kafka``: [``botocore``] Update kafka client to latest version * api-change:``elasticache``: [``botocore``] Update elasticache client to latest version * api-change:``mediaconvert``: [``botocore``] Update mediaconvert client to latest version - from version 1.9.245 * api-change:``organizations``: [``botocore``] Update organizations client to latest version * api-change:``events``: [``botocore``] Update events client to latest version * api-change:``firehose``: [``botocore``] Update firehose client to latest version * api-change:``datasync``: [``botocore``] Update datasync client to latest version - from version 1.9.244 * api-change:``snowball``: [``botocore``] Update snowball client to latest version * api-change:``directconnect``: [``botocore``] Update directconnect client to latest version * api-change:``firehose``: [``botocore``] Update firehose client to latest version * api-change:``pinpoint``: [``botocore``] Update pinpoint client to latest version * api-change:``glue``: [``botocore``] Update glue client to latest version * api-change:``pinpoint-email``: [``botocore``] Update pinpoint-email client to latest version - from version 1.9.243 * api-change:``cognito-idp``: [``botocore``] Update cognito-idp client to latest version * api-change:``mediapackage``: [``botocore``] Update mediapackage client to latest version * api-change:``ssm``: [``botocore``] Update ssm client to latest version - from version 1.9.242 * api-change:``es``: [``botocore``] Update es client to latest version * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``application-autoscaling``: [``botocore``] Update application-autoscaling client to latest version * api-change:``devicefarm``: [``botocore``] Update devicefarm client to latest version - from version 1.9.241 * api-change:``lightsail``: [``botocore``] Update lightsail client to latest version - from version 1.9.240 * api-change:``docdb``: [``botocore``] Update docdb client to latest version - from version 1.9.239 * api-change:``waf``: [``botocore``] Update waf client to latest version * api-change:``rds``: [``botocore``] Update rds client to latest version * api-change:``mq``: [``botocore``] Update mq client to latest version - from version 1.9.238 * api-change:``amplify``: [``botocore``] Update amplify client to latest version * api-change:``ecs``: [``botocore``] Update ecs client to latest version - from version 1.9.237 * api-change:``ssm``: [``botocore``] Update ssm client to latest version * api-change:``codepipeline``: [``botocore``] Update codepipeline client to latest version - from version 1.9.236 * api-change:``globalaccelerator``: [``botocore``] Update globalaccelerator client to latest version * api-change:``dms``: [``botocore``] Update dms client to latest version * api-change:``sagemaker``: [``botocore``] Update sagemaker client to latest version - from version 1.9.235 * api-change:``transcribe``: [``botocore``] Update transcribe client to latest version * api-change:``comprehendmedical``: [``botocore``] Update comprehendmedical client to latest version * api-change:``datasync``: [``botocore``] Update datasync client to latest version - from version 1.9.234 * api-change:``rds-data``: [``botocore``] Update rds-data client to latest version * api-change:``redshift``: [``botocore``] Update redshift client to latest version - from version 1.9.233 * api-change:``workspaces``: [``botocore``] Update workspaces client to latest version * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``greengrass``: [``botocore``] Update greengrass client to latest version * api-change:``rds``: [``botocore``] Update rds client to latest version - from version 1.9.232 * api-change:``mediaconnect``: [``botocore``] Update mediaconnect client to latest version * api-change:``glue``: [``botocore``] Update glue client to latest version * api-change:``ecs``: [``botocore``] Update ecs client to latest version - from version 1.9.231 * api-change:``ram``: [``botocore``] Update ram client to latest version * api-change:``waf-regional``: [``botocore``] Update waf-regional client to latest version * api-change:``apigateway``: [``botocore``] Update apigateway client to latest version - from version 1.9.230 * api-change:``iam``: [``botocore``] Update iam client to latest version * api-change:``athena``: [``botocore``] Update athena client to latest version * api-change:``personalize``: [``botocore``] Update personalize client to latest version - from version 1.9.229 * api-change:``eks``: [``botocore``] Update eks client to latest version * api-change:``mediaconvert``: [``botocore``] Update mediaconvert client to latest version - from version 1.9.228 * api-change:``elbv2``: [``botocore``] Update elbv2 client to latest version * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``workmailmessageflow``: [``botocore``] Update workmailmessageflow client to latest version * api-change:``medialive``: [``botocore``] Update medialive client to latest version - from version 1.9.227 * api-change:``stepfunctions``: [``botocore``] Update stepfunctions client to latest version * api-change:``rds``: [``botocore``] Update rds client to latest version * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``mediaconnect``: [``botocore``] Update mediaconnect client to latest version * api-change:``ses``: [``botocore``] Update ses client to latest version * api-change:``config``: [``botocore``] Update config client to latest version - from version 1.9.226 * api-change:``storagegateway``: [``botocore``] Update storagegateway client to latest version - from version 1.9.225 * api-change:``qldb``: [``botocore``] Update qldb client to latest version * api-change:``marketplacecommerceanalytics``: [``botocore``] Update marketplacecommerceanalytics client to latest version * api-change:``appstream``: [``botocore``] Update appstream client to latest version * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``robomaker``: [``botocore``] Update robomaker client to latest version * api-change:``appmesh``: [``botocore``] Update appmesh client to latest version * api-change:``qldb-session``: [``botocore``] Update qldb-session client to latest version - from version 1.9.224 * api-change:``kinesisanalytics``: [``botocore``] Update kinesisanalytics client to latest version - from version 1.9.223 * api-change:``config``: [``botocore``] Update config client to latest version - from version 1.9.222 * api-change:``stepfunctions``: [``botocore``] Update stepfunctions client to latest version * api-change:``transcribe``: [``botocore``] Update transcribe client to latest version * api-change:``eks``: [``botocore``] Update eks client to latest version - from version 1.9.221 * api-change:``ecs``: [``botocore``] Update ecs client to latest version * api-change:``resourcegroupstaggingapi``: [``botocore``] Update resourcegroupstaggingapi client to latest version * api-change:``gamelift``: [``botocore``] Update gamelift client to latest version - from version 1.9.220 * api-change:``mq``: [``botocore``] Update mq client to latest version * api-change:``apigatewaymanagementapi``: [``botocore``] Update apigatewaymanagementapi client to latest version * api-change:``ecs``: [``botocore``] Update ecs client to latest version - from version 1.9.219 * api-change:``codepipeline``: [``botocore``] Update codepipeline client to latest version * api-change:``application-autoscaling``: [``botocore``] Update application-autoscaling client to latest version * api-change:``elasticache``: [``botocore``] Update elasticache client to latest version * api-change:``lambda``: [``botocore``] Update lambda client to latest version * api-change:``ecs``: [``botocore``] Update ecs client to latest version - from version 1.9.218 * api-change:``sqs``: [``botocore``] Update sqs client to latest version * api-change:``globalaccelerator``: [``botocore``] Update globalaccelerator client to latest version * api-change:``mediaconvert``: [``botocore``] Update mediaconvert client to latest version - from version 1.9.217 * api-change:``organizations``: [``botocore``] Update organizations client to latest version - from version 1.9.216 * api-change:``ssm``: [``botocore``] Update ssm client to latest version * api-change:``securityhub``: [``botocore``] Update securityhub client to latest version - from version 1.9.215 * api-change:``ec2``: [``botocore``] Update ec2 client to latest version * api-change:``mediapackage-vod``: [``botocore``] Update mediapackage-vod client to latest version * api-change:``transcribe``: [``botocore``] Update transcribe client to latest version - from version 1.9.214 * api-change:``datasync``: [``botocore``] Update datasync client to latest version * api-change:``rds``: [``botocore``] Update rds client to latest version python-botocore was updated to 1.15.38 (bsc#1166924, bsc#1168943) * api-change:``apigateway``: Update apigateway client to latest version * api-change:``codeguru-reviewer``: Update codeguru-reviewer client to latest version * api-change:``mediaconnect``: Update mediaconnect client to latest version - from version 1.15.37 * api-change:``transcribe``: Update transcribe client to latest version * api-change:``chime``: Update chime client to latest version * api-change:``iam``: Update iam client to latest version * api-change:``elasticbeanstalk``: Update elasticbeanstalk client to latest version - from version 1.15.36 * api-change:``personalize-runtime``: Update personalize-runtime client to latest version * api-change:``robomaker``: Update robomaker client to latest version - Version update to 1.15.35 * api-change:``medialive``: Update medialive client to latest version * api-change:``redshift``: Update redshift client to latest version * api-change:``gamelift``: Update gamelift client to latest version * api-change:``cloudwatch``: Update cloudwatch client to latest version * api-change:``rds``: Update rds client to latest version - from version 1.15.34 * api-change:``iot``: Update iot client to latest version * api-change:``mediaconnect``: Update mediaconnect client to latest version - from version 1.15.33 * api-change:``opsworkscm``: Update opsworkscm client to latest version * api-change:``wafv2``: Update wafv2 client to latest version * api-change:``glue``: Update glue client to latest version * api-change:``elastic-inference``: Update elastic-inference client to latest version * api-change:``lambda``: Update lambda client to latest version * api-change:``mediastore``: Update mediastore client to latest version * api-change:``pinpoint``: Update pinpoint client to latest version * api-change:``storagegateway``: Update storagegateway client to latest version * api-change:``rekognition``: Update rekognition client to latest version * api-change:``fms``: Update fms client to latest version * api-change:``organizations``: Update organizations client to latest version * api-change:``detective``: Update detective client to latest version * api-change:``appconfig``: Update appconfig client to latest version - from version 1.15.32 * api-change:``accessanalyzer``: Update accessanalyzer client to latest version - from version 1.15.31 * api-change:``globalaccelerator``: Update globalaccelerator client to latest version * api-change:``kendra``: Update kendra client to latest version * api-change:``servicecatalog``: Update servicecatalog client to latest version - from version 1.15.30 * api-change:``sagemaker``: Update sagemaker client to latest version * api-change:``fsx``: Update fsx client to latest version * api-change:``securityhub``: Update securityhub client to latest version - from version 1.15.29 * api-change:``managedblockchain``: Update managedblockchain client to latest version * api-change:``ce``: Update ce client to latest version * api-change:``application-insights``: Update application-insights client to latest version * api-change:``detective``: Update detective client to latest version * api-change:``es``: Update es client to latest version * api-change:``xray``: Update xray client to latest version - from version 1.15.28 * api-change:``athena``: Update athena client to latest version * api-change:``rds-data``: Update rds-data client to latest version * api-change:``eks``: Update eks client to latest version * api-change:``organizations``: Update organizations client to latest version - Version update to 1.15.27 * api-change:``apigatewayv2``: Update apigatewayv2 client to latest version * api-change:``eks``: Update eks client to latest version * api-change:``route53``: Update route53 client to latest version - from version 1.15.26 * api-change:``servicecatalog``: Update servicecatalog client to latest version - from version 1.15.25 * api-change:``outposts``: Update outposts client to latest version * api-change:``acm``: Update acm client to latest version - from version 1.15.24 * api-change:``rds``: Update rds client to latest version * api-change:``mediaconnect``: Update mediaconnect client to latest version * api-change:``personalize``: Update personalize client to latest version - from version 1.15.23 * api-change:``mediaconvert``: Update mediaconvert client to latest version - from version 1.15.22 * api-change:``s3control``: Update s3control client to latest version * bugfix:Stubber: fixes `#1884 <https://github.com/boto/botocore/issues/1884>`__ * api-change:``cognito-idp``: Update cognito-idp client to latest version * api-change:``ssm``: Update ssm client to latest version * api-change:``ecs``: Update ecs client to latest version * api-change:``elasticache``: Update elasticache client to latest version - from version 1.15.21 * api-change:``appconfig``: Update appconfig client to latest version - from version 1.15.20 * api-change:``lex-models``: Update lex-models client to latest version * api-change:``securityhub``: Update securityhub client to latest version * api-change:``ec2``: Update ec2 client to latest version * api-change:``apigatewayv2``: Update apigatewayv2 client to latest version * api-change:``iot``: Update iot client to latest version - from version 1.15.19 * api-change:``efs``: Update efs client to latest version * api-change:``redshift``: Update redshift client to latest version - from version 1.15.18 * api-change:``serverlessrepo``: Update serverlessrepo client to latest version * api-change:``iotevents``: Update iotevents client to latest version * api-change:``ec2``: Update ec2 client to latest version * enhancement:timezones: Improved timezone parsing for Windows with new fallback method (#1939) * api-change:``marketplacecommerceanalytics``: Update marketplacecommerceanalytics client to latest version - from version 1.15.17 * api-change:``ec2``: Update ec2 client to latest version * api-change:``medialive``: Update medialive client to latest version * api-change:``dms``: Update dms client to latest version - from version 1.15.16 * api-change:``signer``: Update signer client to latest version * api-change:``guardduty``: Update guardduty client to latest version * api-change:``appmesh``: Update appmesh client to latest version * api-change:``ec2``: Update ec2 client to latest version * api-change:``robomaker``: Update robomaker client to latest version - from version 1.15.15 * api-change:``eks``: Update eks client to latest version * api-change:``ec2``: Update ec2 client to latest version * api-change:``opsworkscm``: Update opsworkscm client to latest version * api-change:``guardduty``: Update guardduty client to latest version - from version 1.15.14 * api-change:``pinpoint``: Update pinpoint client to latest version - from version 1.15.13 * api-change:``ec2``: Update ec2 client to latest version - from version 1.15.12 * api-change:``cloudwatch``: Update cloudwatch client to latest version * api-change:``comprehendmedical``: Update comprehendmedical client to latest version - from version 1.15.11 * api-change:``config``: Update config client to latest version - from version 1.15.10 * api-change:``config``: Update config client to latest version * api-change:``glue``: Update glue client to latest version * api-change:``sagemaker-a2i-runtime``: Update sagemaker-a2i-runtime client to latest version * api-change:``appmesh``: Update appmesh client to latest version * api-change:``elbv2``: Update elbv2 client to latest version * api-change:``workdocs``: Update workdocs client to latest version * api-change:``quicksight``: Update quicksight client to latest version * api-change:``accessanalyzer``: Update accessanalyzer client to latest version * api-change:``codeguruprofiler``: Update codeguruprofiler client to latest version - from version 1.15.9 * api-change:``lightsail``: Update lightsail client to latest version * api-change:``globalaccelerator``: Update globalaccelerator client to latest version - from version 1.15.8 * api-change:``transcribe``: Update transcribe client to latest version * api-change:``ec2``: Update ec2 client to latest version * api-change:``sagemaker``: Update sagemaker client to latest version * api-change:``securityhub``: Update securityhub client to latest version - from version 1.15.7 * api-change:``stepfunctions``: Update stepfunctions client to latest version * api-change:``kafka``: Update kafka client to latest version * api-change:``secretsmanager``: Update secretsmanager client to latest version * api-change:``outposts``: Update outposts client to latest version - from version 1.15.6 * api-change:``iotevents``: Update iotevents client to latest version * api-change:``docdb``: Update docdb client to latest version * api-change:``snowball``: Update snowball client to latest version * api-change:``fsx``: Update fsx client to latest version * api-change:``events``: Update events client to latest version - from version 1.15.5 * api-change:``imagebuilder``: Update imagebuilder client to latest version * api-change:``wafv2``: Update wafv2 client to latest version * api-change:``redshift``: Update redshift client to latest version - from version 1.15.4 * api-change:``savingsplans``: Update savingsplans client to latest version * api-change:``appconfig``: Update appconfig client to latest version * api-change:``pinpoint``: Update pinpoint client to latest version - from version 1.15.3 * api-change:``autoscaling``: Update autoscaling client to latest version * api-change:``servicecatalog``: Update servicecatalog client to latest version * api-change:``lambda``: Update lambda client to latest version - from version 1.15.2 * api-change:``autoscaling``: Update autoscaling client to latest version * api-change:``chime``: Update chime client to latest version * api-change:``rds``: Update rds client to latest version - from version 1.15.1 * api-change:``cloud9``: Update cloud9 client to latest version * api-change:``ec2``: Update ec2 client to latest version * api-change:``dynamodb``: Update dynamodb client to latest version * api-change:``rekognition``: Update rekognition client to latest version - Version update to 1.15.0 * feature:retries: Add support for retry modes, including ``standard`` and ``adaptive`` modes (`#1972 <https://github.com/boto/botocore/issues/1972>`__) * api-change:``ec2``: Update ec2 client to latest version * api-change:``mediatailor``: Update mediatailor client to latest version * api-change:``securityhub``: Update securityhub client to latest version * api-change:``shield``: Update shield client to latest version - from version 1.14.17 * api-change:``mediapackage-vod``: Update mediapackage-vod client to latest version - from version 1.14.16 * api-change:``glue``: Update glue client to latest version * api-change:``chime``: Update chime client to latest version * api-change:``workmail``: Update workmail client to latest version * api-change:``ds``: Update ds client to latest version * api-change:``ec2``: Update ec2 client to latest version * api-change:``es``: Update es client to latest version * api-change:``neptune``: Update neptune client to latest version - from version 1.14.15 * api-change:``ec2``: Update ec2 client to latest version * api-change:``cognito-idp``: Update cognito-idp client to latest version * api-change:``cloudformation``: Update cloudformation client to latest version - from version 1.14.14 * api-change:``docdb``: Update docdb client to latest version * api-change:``kms``: Update kms client to latest version - from version 1.14.13 * api-change:``robomaker``: Update robomaker client to latest version * api-change:``imagebuilder``: Update imagebuilder client to latest version * api-change:``rds``: Update rds client to latest version - from version 1.14.12 * api-change:``ebs``: Update ebs client to latest version * api-change:``appsync``: Update appsync client to latest version * api-change:``lex-models``: Update lex-models client to latest version * api-change:``ecr``: Update ecr client to latest version * api-change:``ec2``: Update ec2 client to latest version * api-change:``codebuild``: Update codebuild client to latest version - from version 1.14.11 * api-change:``groundstation``: Update groundstation client to latest version * api-change:``mediaconvert``: Update mediaconvert client to latest version * api-change:``dlm``: Update dlm client to latest version * api-change:``ec2``: Update ec2 client to latest version * api-change:``forecastquery``: Update forecastquery client to latest version * api-change:``securityhub``: Update securityhub client to latest version * api-change:``resourcegroupstaggingapi``: Update resourcegroupstaggingapi client to latest version - from version 1.14.10 * api-change:``workmail``: Update workmail client to latest version * api-change:``iot``: Update iot client to latest version * api-change:``cloudfront``: Update cloudfront client to latest version * api-change:``storagegateway``: Update storagegateway client to latest version * api-change:``ssm``: Update ssm client to latest version * api-change:``kafka``: Update kafka client to latest version * api-change:``ec2``: Update ec2 client to latest version - Refresh patches for new version + hide_py_pckgmgmt.patch - Version update to 1.14.9 * api-change:``ecs``: Update ecs client to latest version * api-change:``opsworkscm``: Update opsworkscm client to latest version * api-change:``workspaces``: Update workspaces client to latest version * api-change:``datasync``: Update datasync client to latest version * api-change:``eks``: Update eks client to latest version - from version 1.14.8 * api-change:``rds``: Update rds client to latest version * api-change:``iam``: Update iam client to latest version - from version 1.14.7 * api-change:``ec2``: Update ec2 client to latest version * api-change:``codepipeline``: Update codepipeline client to latest version * api-change:``discovery``: Update discovery client to latest version * api-change:``iotevents``: Update iotevents client to latest version * api-change:``marketplacecommerceanalytics``: Update marketplacecommerceanalytics client to latest version - from version 1.14.6 * api-change:``lambda``: Update lambda client to latest version * api-change:``application-insights``: Update application-insights client to latest version * api-change:``ec2``: Update ec2 client to latest version * api-change:``cloudwatch``: Update cloudwatch client to latest version * api-change:``kms``: Update kms client to latest version * api-change:``alexaforbusiness``: Update alexaforbusiness client to latest version - from version 1.14.5 * api-change:``mediaconvert``: Update mediaconvert client to latest version * api-change:``neptune``: Update neptune client to latest version * api-change:``cloudhsmv2``: Update cloudhsmv2 client to latest version * api-change:``redshift``: Update redshift client to latest version * api-change:``batch``: Update batch client to latest version * api-change:``ecs``: Update ecs client to latest version - from version 1.14.4 * api-change:``ec2``: Update ec2 client to latest version * api-change:``sagemaker``: Update sagemaker client to latest version * api-change:``ds``: Update ds client to latest version - from version 1.14.3 * api-change:``securityhub``: Update securityhub client to latest version * api-change:``ssm``: Update ssm client to latest version * api-change:``ec2``: Update ec2 client to latest version * api-change:``organizations``: Update organizations client to latest version - from version 1.14.2 * api-change:``ec2``: Update ec2 client to latest version - from version 1.14.1 * api-change:``efs``: Update efs client to latest version * api-change:``ec2``: Update ec2 client to latest version * api-change:``backup``: Update backup client to latest version - from version 1.14.0 * api-change:``sagemaker``: Update sagemaker client to latest version * api-change:``chime``: Update chime client to latest version * api-change:``transfer``: Update transfer client to latest version * api-change:``ec2``: Update ec2 client to latest version * feature:Python: Dropped support for Python 2.6 and 3.3. * api-change:``workspaces``: Update workspaces client to latest version * api-change:``rds``: Update rds client to latest version - from version 1.13.50 * api-change:``logs``: Update logs client to latest version - from version 1.13.49 * api-change:``fms``: Update fms client to latest version * api-change:``translate``: Update translate client to latest version * api-change:``ce``: Update ce client to latest version - from version 1.13.48 * api-change:``codebuild``: Update codebuild client to latest version * api-change:``mgh``: Update mgh client to latest version * api-change:``xray``: Update xray client to latest version - from version 1.13.47 * api-change:``comprehend``: Update comprehend client to latest version * api-change:``mediapackage``: Update mediapackage client to latest version * api-change:``ec2``: Update ec2 client to latest version - from version 1.13.46 * api-change:``lex-models``: Update lex-models client to latest version * api-change:``ecr``: Update ecr client to latest version * api-change:``lightsail``: Update lightsail client to latest version * api-change:``ce``: Update ce client to latest version - from version 1.13.45 * api-change:``fsx``: Update fsx client to latest version * api-change:``health``: Update health client to latest version * api-change:``detective``: Update detective client to latest version - from version 1.13.44 * api-change:``transcribe``: Update transcribe client to latest version * api-change:``eks``: Update eks client to latest version * api-change:``ec2``: Update ec2 client to latest version * api-change:``rds``: Update rds client to latest version * api-change:``ssm``: Update ssm client to latest version * api-change:``redshift``: Update redshift client to latest version * api-change:``pinpoint``: Update pinpoint client to latest version * api-change:``securityhub``: Update securityhub client to latest version * api-change:``devicefarm``: Update devicefarm client to latest version - from version 1.13.43 * api-change:``transcribe``: Update transcribe client to latest version * api-change:``dlm``: Update dlm client to latest version * api-change:``lex-models``: Update lex-models client to latest version * api-change:``personalize-runtime``: Update personalize-runtime client to latest version * api-change:``ssm``: Update ssm client to latest version * api-change:``codestar-connections``: Update codestar-connections client to latest version * api-change:``gamelift``: Update gamelift client to latest version * api-change:``ec2``: Update ec2 client to latest version - from version 1.13.42 * api-change:``ec2``: Update ec2 client to latest version * api-change:``s3``: Update s3 client to latest version * api-change:``resourcegroupstaggingapi``: Update resourcegroupstaggingapi client to latest version * api-change:``cloudfront``: Update cloudfront client to latest version * enhancement:``s3``: Add support for opting into using the us-east-1 regional endpoint. * api-change:``opsworkscm``: Update opsworkscm client to latest version - from version 1.13.41 * api-change:``kinesisanalyticsv2``: Update kinesisanalyticsv2 client to latest version * api-change:``ssm``: Update ssm client to latest version * api-change:``medialive``: Update medialive client to latest version * api-change:``iot``: Update iot client to latest version * api-change:``ecs``: Update ecs client to latest version * api-change:``ec2``: Update ec2 client to latest version - from version 1.13.40 * api-change:``mq``: Update mq client to latest version * api-change:``comprehendmedical``: Update comprehendmedical client to latest version * api-change:``ec2``: Update ec2 client to latest version - from version 1.13.39 * api-change:``codebuild``: Update codebuild client to latest version * api-change:``detective``: Update detective client to latest version * api-change:``sesv2``: Update sesv2 client to latest version - from version 1.13.38 * api-change:``accessanalyzer``: Update accessanalyzer client to latest version - from version 1.13.37 * api-change:``ec2``: Update ec2 client to latest version - from version 1.13.36 * api-change:``kendra``: Update kendra client to latest version - from version 1.13.35 * bugfix:s3: Add stricter validation to s3 control account id parameter. * api-change:``quicksight``: Update quicksight client to latest version * api-change:``kms``: Update kms client to latest version * api-change:``ssm``: Update ssm client to latest version * api-change:``kafka``: Update kafka client to latest version - from version 1.13.34 * bugfix:s3: Fixed an issue where the request path was set incorrectly if access point name was present in key path. - Version update to 1.13.33 * api-change:``kinesisvideo``: Update kinesisvideo client to latest version * api-change:``kinesis-video-signaling``: Update kinesis-video-signaling client to latest version * api-change:``apigatewayv2``: Update apigatewayv2 client to latest version - from version 1.13.32 * api-change:``ebs``: Update ebs client to latest version * api-change:``stepfunctions``: Update stepfunctions client to latest version * api-change:``application-autoscaling``: Update application-autoscaling client to latest version * api-change:``lambda``: Update lambda client to latest version * api-change:``rekognition``: Update rekognition client to latest version * api-change:``rds``: Update rds client to latest version * api-change:``sagemaker``: Update sagemaker client to latest version - from version 1.13.31 * api-change:``textract``: Update textract client to latest version * api-change:``s3control``: Update s3control client to latest version * api-change:``ecs``: Update ecs client to latest version * api-change:``s3``: Update s3 client to latest version * api-change:``outposts``: Update outposts client to latest version * api-change:``kendra``: Update kendra client to latest version * api-change:``eks``: Update eks client to latest version * api-change:``networkmanager``: Update networkmanager client to latest version * api-change:``compute-optimizer``: Update compute-optimizer client to latest version * api-change:``ec2``: Update ec2 client to latest version * api-change:``frauddetector``: Update frauddetector client to latest version * api-change:``sagemaker-a2i-runtime``: Update sagemaker-a2i-runtime client to latest version * api-change:``codeguru-reviewer``: Update codeguru-reviewer client to latest version * api-change:``codeguruprofiler``: Update codeguruprofiler client to latest version * api-change:``es``: Update es client to latest version - from version 1.13.30 * api-change:``accessanalyzer``: Update accessanalyzer client to latest version - from version 1.13.29 * api-change:``ec2``: Update ec2 client to latest version * api-change:``license-manager``: Update license-manager client to latest version * api-change:``imagebuilder``: Update imagebuilder client to latest version * api-change:``schemas``: Update schemas client to latest version - from version 1.13.28 * api-change:``rds-data``: Update rds-data client to latest version * api-change:``ds``: Update ds client to latest version * api-change:``workspaces``: Update workspaces client to latest version * api-change:``resourcegroupstaggingapi``: Update resourcegroupstaggingapi client to latest version * api-change:``cognito-idp``: Update cognito-idp client to latest version * api-change:``dynamodb``: Update dynamodb client to latest version * api-change:``elastic-inference``: Update elastic-inference client to latest version * api-change:``organizations``: Update organizations client to latest version * api-change:``mediatailor``: Update mediatailor client to latest version * api-change:``quicksight``: Update quicksight client to latest version * api-change:``serverlessrepo``: Update serverlessrepo client to latest version - from version 1.13.27 * api-change:``cognito-idp``: Update cognito-idp client to latest version * api-change:``redshift``: Update redshift client to latest version * api-change:``elbv2``: Update elbv2 client to latest version * api-change:``wafv2``: Update wafv2 client to latest version * api-change:``dlm``: Update dlm client to latest version * api-change:``iot``: Update iot client to latest version * api-change:``lex-runtime``: Update lex-runtime client to latest version * api-change:``ec2``: Update ec2 client to latest version * api-change:``athena``: Update athena client to latest version * api-change:``iotsecuretunneling``: Update iotsecuretunneling client to latest version * api-change:``ssm``: Update ssm client to latest version * api-change:``application-insights``: Update application-insights client to latest version * api-change:``mediapackage-vod``: Update mediapackage-vod client to latest version * api-change:``appconfig``: Update appconfig client to latest version * api-change:``mediaconvert``: Update mediaconvert client to latest version * api-change:``kinesisanalyticsv2``: Update kinesisanalyticsv2 client to latest version * api-change:``medialive``: Update medialive client to latest version * api-change:``lambda``: Update lambda client to latest version * api-change:``cloudwatch``: Update cloudwatch client to latest version * api-change:``sesv2``: Update sesv2 client to latest version * api-change:``application-autoscaling``: Update application-autoscaling client to latest version * api-change:``greengrass``: Update greengrass client to latest version * api-change:``alexaforbusiness``: Update alexaforbusiness client to latest version * api-change:``rds``: Update rds client to latest version * api-change:``ce``: Update ce client to latest version * api-change:``ram``: Update ram client to latest version * api-change:``codebuild``: Update codebuild client to latest version * api-change:``comprehend``: Update comprehend client to latest version * api-change:``kms``: Update kms client to latest version - from version 1.13.26 * api-change:``acm``: Update acm client to latest version * api-change:``autoscaling-plans``: Update autoscaling-plans client to latest version * api-change:``codebuild``: Update codebuild client to latest version * api-change:``mediapackage-vod``: Update mediapackage-vod client to latest version * api-change:``emr``: Update emr client to latest version * api-change:``sns``: Update sns client to latest version * api-change:``ssm``: Update ssm client to latest version * api-change:``application-autoscaling``: Update application-autoscaling client to latest version * api-change:``sts``: Update sts client to latest version * api-change:``forecast``: Update forecast client to latest version * api-change:``ec2``: Update ec2 client to latest version * api-change:``rekognition``: Update rekognition client to latest version - from version 1.13.25 * bugfix:IMDS metadata: Add 405 case to metadata fetching logic. - from version 1.13.24 * api-change:``glue``: Update glue client to latest version * api-change:``transcribe``: Update transcribe client to latest version * api-change:``connectparticipant``: Update connectparticipant client to latest version * api-change:``dynamodb``: Update dynamodb client to latest version * api-change:``lex-runtime``: Update lex-runtime client to latest version * api-change:``connect``: Update connect client to latest version * api-change:``ec2``: Update ec2 client to latest version * api-change:``meteringmarketplace``: Update meteringmarketplace client to latest version * api-change:``config``: Update config client to latest version * api-change:``lex-models``: Update lex-models client to latest version * api-change:``ssm``: Update ssm client to latest version * api-change:``amplify``: Update amplify client to latest version * api-change:``appsync``: Update appsync client to latest version - from version 1.13.23 * api-change:``datasync``: Update datasync client to latest version * api-change:``dlm``: Update dlm client to latest version * api-change:``mediastore``: Update mediastore client to latest version * api-change:``cloudtrail``: Update cloudtrail client to latest version * api-change:``mgh``: Update mgh client to latest version * api-change:``storagegateway``: Update storagegateway client to latest version * api-change:``ec2``: Update ec2 client to latest version * api-change:``codecommit``: Update codecommit client to latest version * api-change:``s3``: Update s3 client to latest version * api-change:``fsx``: Update fsx client to latest version * api-change:``migrationhub-config``: Update migrationhub-config client to latest version * api-change:``firehose``: Update firehose client to latest version * api-change:``transcribe``: Update transcribe client to latest version * api-change:``ecs``: Update ecs client to latest version * api-change:``discovery``: Update discovery client to latest version * api-change:``chime``: Update chime client to latest version * api-change:``quicksight``: Update quicksight client to latest version - from version 1.13.22 * bugfix:IMDS: Fix regression in IMDS credential resolution. Fixes `#1892 <https://github.com/boto/botocore/issues/1892>`__. - from version 1.13.21 * api-change:``ec2``: Update ec2 client to latest version * api-change:``cloudformation``: Update cloudformation client to latest version * api-change:``elbv2``: Update elbv2 client to latest version * api-change:``lambda``: Update lambda client to latest version * api-change:``config``: Update config client to latest version * api-change:``iam``: Update iam client to latest version * api-change:``codebuild``: Update codebuild client to latest version * api-change:``iot``: Update iot client to latest version * api-change:``autoscaling``: Update autoscaling client to latest version - from version 1.13.20 * api-change:``cloudformation``: Update cloudformation client to latest version * api-change:``s3``: Update s3 client to latest version * api-change:``rds``: Update rds client to latest version * api-change:``pinpoint``: Update pinpoint client to latest version * api-change:``sagemaker``: Update sagemaker client to latest version * api-change:``sagemaker-runtime``: Update sagemaker-runtime client to latest version * api-change:``ce``: Update ce client to latest version * api-change:``ssm``: Update ssm client to latest version - from version 1.13.19 * api-change:``cognito-idp``: Update cognito-idp client to latest version * api-change:``elbv2``: Update elbv2 client to latest version * api-change:``workspaces``: Update workspaces client to latest version * api-change:``ssm``: Update ssm client to latest version * api-change:``logs``: Update logs client to latest version * api-change:``guardduty``: Update guardduty client to latest version * api-change:``emr``: Update emr client to latest version * api-change:``ec2``: Update ec2 client to latest version * api-change:``mediaconvert``: Update mediaconvert client to latest version * api-change:``eks``: Update eks client to latest version * api-change:``chime``: Update chime client to latest version - from version 1.13.18 * api-change:``meteringmarketplace``: Update meteringmarketplace client to latest version * api-change:``cognito-idp``: Update cognito-idp client to latest version * api-change:``connect``: Update connect client to latest version * api-change:``ssm``: Update ssm client to latest version * api-change:``personalize``: Update personalize client to latest version - Version update to 1.13.17 (bsc#1129696) * api-change:``sesv2``: Update sesv2 client to latest version * api-change:``dataexchange``: Update dataexchange client to latest version * api-change:``iot``: Update iot client to latest version * api-change:``cloudsearch``: Update cloudsearch client to latest version * api-change:``dlm``: Update dlm client to latest version - from version 1.13.16 * api-change:``transcribe``: Update transcribe client to latest version * api-change:``marketplace-catalog``: Update marketplace-catalog client to latest version * api-change:``dynamodb``: Update dynamodb client to latest version * api-change:``codepipeline``: Update codepipeline client to latest version * api-change:``elbv2``: Update elbv2 client to latest version - from version 1.13.15 * api-change:``ce``: Update ce client to latest version * api-change:``cloudformation``: Update cloudformation client to latest version - from version 1.13.14 * api-change:``cognito-identity``: Update cognito-identity client to latest version * api-change:``ecr``: Update ecr client to latest version - from version 1.13.13 * api-change:``ssm``: Update ssm client to latest version * api-change:``sso``: Update sso client to latest version * api-change:``sso-oidc``: Update sso-oidc client to latest version * api-change:``comprehend``: Update comprehend client to latest version - from version 1.13.12 * api-change:``savingsplans``: Update savingsplans client to latest version - from version 1.13.11 * api-change:``codebuild``: Update codebuild client to latest version * api-change:``budgets``: Update budgets client to latest version * api-change:``efs``: Update efs client to latest version * api-change:``ce``: Update ce client to latest version * api-change:``savingsplans``: Update savingsplans client to latest version * api-change:``signer``: Update signer client to latest version - from version 1.13.10 * api-change:``rds``: Update rds client to latest version * api-change:``codestar-notifications``: Update codestar-notifications client to latest version - from version 1.13.9 * api-change:``dax``: Update dax client to latest version * api-change:``ec2``: Update ec2 client to latest version * api-change:``robomaker``: Update robomaker client to latest version - from version 1.13.8 * api-change:``pinpoint``: Update pinpoint client to latest version * api-change:``cloudtrail``: Update cloudtrail client to latest version * api-change:``dms``: Update dms client to latest version - from version 1.13.7 * api-change:``support``: Update support client to latest version * api-change:``amplify``: Update amplify client to latest version * api-change:``s3``: Update s3 client to latest version - from version 1.13.6 * api-change:``elasticache``: Update elasticache client to latest version - from version 1.13.5 * api-change:``cloud9``: Update cloud9 client to latest version * api-change:``appstream``: Update appstream client to latest version - from version 1.13.4 * api-change:``s3``: Update s3 client to latest version - from version 1.13.3 * api-change:``elasticache``: Update elasticache client to latest version * api-change:``transfer``: Update transfer client to latest version * api-change:``ecr``: Update ecr client to latest version - from version 1.13.2 * api-change:``sagemaker``: Update sagemaker client to latest version * api-change:``gamelift``: Update gamelift client to latest version * enhancement:``sts``: Add support for configuring the use of regional STS endpoints. * api-change:``chime``: Update chime client to latest version * api-change:``appmesh``: Update appmesh client to latest version * api-change:``ec2``: Update ec2 client to latest version - from version 1.13.1 * api-change:``polly``: Update polly client to latest version * api-change:``connect``: Update connect client to latest version - from version 1.13.0 * api-change:``opsworkscm``: Update opsworkscm client to latest version * api-change:``iotevents``: Update iotevents client to latest version * feature:``botocore.vendored.requests``: Removed vendored version of ``requests`` (`#1829 <https://github.com/boto/botocore/issues/1829>`__) - from version 1.12.253 * api-change:``cloudwatch``: Update cloudwatch client to latest version - from version 1.12.252 * api-change:``batch``: Update batch client to latest version * api-change:``rds``: Update rds client to latest version - from version 1.12.251 * api-change:``kafka``: Update kafka client to latest version * api-change:``marketplacecommerceanalytics``: Update marketplacecommerceanalytics client to latest version * api-change:``robomaker``: Update robomaker client to latest version - from version 1.12.250 * api-change:``kinesis-video-archived-media``: Update kinesis-video-archived-media client to latest version - from version 1.12.249 * api-change:``personalize``: Update personalize client to latest version * api-change:``workspaces``: Update workspaces client to latest version - Refresh patches for new version + hide_py_pckgmgmt.patch - Version update to 1.12.248 * api-change:``greengrass``: Update greengrass client to latest version - from version 1.12.247 * api-change:``ec2``: Update ec2 client to latest version * api-change:``lex-runtime``: Update lex-runtime client to latest version * api-change:``fms``: Update fms client to latest version * api-change:``iotanalytics``: Update iotanalytics client to latest version - from version 1.12.246 * api-change:``kafka``: Update kafka client to latest version * api-change:``elasticache``: Update elasticache client to latest version * api-change:``mediaconvert``: Update mediaconvert client to latest version - from version 1.12.245 * api-change:``organizations``: Update organizations client to latest version * api-change:``events``: Update events client to latest version * api-change:``firehose``: Update firehose client to latest version * api-change:``datasync``: Update datasync client to latest version - from version 1.12.244 * api-change:``snowball``: Update snowball client to latest version * api-change:``directconnect``: Update directconnect client to latest version * api-change:``firehose``: Update firehose client to latest version * api-change:``pinpoint``: Update pinpoint client to latest version * api-change:``glue``: Update glue client to latest version * api-change:``pinpoint-email``: Update pinpoint-email client to latest version - from version 1.12.243 * api-change:``cognito-idp``: Update cognito-idp client to latest version * api-change:``mediapackage``: Update mediapackage client to latest version * api-change:``ssm``: Update ssm client to latest version - from version 1.12.242 * api-change:``es``: Update es client to latest version * api-change:``ec2``: Update ec2 client to latest version * api-change:``application-autoscaling``: Update application-autoscaling client to latest version * api-change:``devicefarm``: Update devicefarm client to latest version - from version 1.12.241 * api-change:``lightsail``: Update lightsail client to latest version - from version 1.12.240 * api-change:``docdb``: Update docdb client to latest version - from version 1.12.239 * api-change:``waf``: Update waf client to latest version * api-change:``rds``: Update rds client to latest version * api-change:``mq``: Update mq client to latest version - from version 1.12.238 * api-change:``amplify``: Update amplify client to latest version * api-change:``ecs``: Update ecs client to latest version - from version 1.12.237 * api-change:``ssm``: Update ssm client to latest version * api-change:``codepipeline``: Update codepipeline client to latest version - from version 1.12.236 * api-change:``globalaccelerator``: Update globalaccelerator client to latest version * api-change:``dms``: Update dms client to latest version * api-change:``sagemaker``: Update sagemaker client to latest version - from version 1.12.235 * api-change:``transcribe``: Update transcribe client to latest version * api-change:``comprehendmedical``: Update comprehendmedical client to latest version * api-change:``datasync``: Update datasync client to latest version - from version 1.12.234 * api-change:``rds-data``: Update rds-data client to latest version * api-change:``redshift``: Update redshift client to latest version - from version 1.12.233 * api-change:``workspaces``: Update workspaces client to latest version * api-change:``ec2``: Update ec2 client to latest version * api-change:``greengrass``: Update greengrass client to latest version * api-change:``rds``: Update rds client to latest version - from version 1.12.232 * api-change:``mediaconnect``: Update mediaconnect client to latest version * api-change:``glue``: Update glue client to latest version * api-change:``ecs``: Update ecs client to latest version - from version 1.12.231 * api-change:``ram``: Update ram client to latest version * api-change:``waf-regional``: Update waf-regional client to latest version * api-change:``apigateway``: Update apigateway client to latest version - from version 1.12.230 * api-change:``iam``: Update iam client to latest version * api-change:``athena``: Update athena client to latest version * api-change:``personalize``: Update personalize client to latest version - from version 1.12.229 * api-change:``eks``: Update eks client to latest version * api-change:``mediaconvert``: Update mediaconvert client to latest version - from version 1.12.228 * api-change:``elbv2``: Update elbv2 client to latest version * api-change:``ec2``: Update ec2 client to latest version * api-change:``workmailmessageflow``: Update workmailmessageflow client to latest version * api-change:``medialive``: Update medialive client to latest version - from version 1.12.227 * api-change:``stepfunctions``: Update stepfunctions client to latest version * api-change:``rds``: Update rds client to latest version * api-change:``ec2``: Update ec2 client to latest version * api-change:``mediaconnect``: Update mediaconnect client to latest version * api-change:``ses``: Update ses client to latest version * api-change:``config``: Update config client to latest version - from version 1.12.226 * api-change:``storagegateway``: Update storagegateway client to latest version - from version 1.12.225 * api-change:``qldb``: Update qldb client to latest version * api-change:``marketplacecommerceanalytics``: Update marketplacecommerceanalytics client to latest version * api-change:``appstream``: Update appstream client to latest version * api-change:``ec2``: Update ec2 client to latest version * api-change:``robomaker``: Update robomaker client to latest version * api-change:``appmesh``: Update appmesh client to latest version * api-change:``qldb-session``: Update qldb-session client to latest version - from version 1.12.224 * api-change:``kinesisanalytics``: Update kinesisanalytics client to latest version - from version 1.12.223 * api-change:``config``: Update config client to latest version - from version 1.12.222 * api-change:``stepfunctions``: Update stepfunctions client to latest version * api-change:``transcribe``: Update transcribe client to latest version * api-change:``eks``: Update eks client to latest version - from version 1.12.221 * api-change:``ecs``: Update ecs client to latest version * api-change:``resourcegroupstaggingapi``: Update resourcegroupstaggingapi client to latest version * api-change:``gamelift``: Update gamelift client to latest version - from version 1.12.220 * api-change:``mq``: Update mq client to latest version * api-change:``apigatewaymanagementapi``: Update apigatewaymanagementapi client to latest version * api-change:``ecs``: Update ecs client to latest version - from version 1.12.219 * api-change:``codepipeline``: Update codepipeline client to latest version * api-change:``application-autoscaling``: Update application-autoscaling client to latest version * api-change:``elasticache``: Update elasticache client to latest version * api-change:``lambda``: Update lambda client to latest version * api-change:``ecs``: Update ecs client to latest version - from version 1.12.218 * api-change:``sqs``: Update sqs client to latest version * api-change:``globalaccelerator``: Update globalaccelerator client to latest version * api-change:``mediaconvert``: Update mediaconvert client to latest version - from version 1.12.217 * api-change:``organizations``: Update organizations client to latest version - from version 1.12.216 * api-change:``ssm``: Update ssm client to latest version * api-change:``securityhub``: Update securityhub client to latest version - from version 1.12.215 * api-change:``ec2``: Update ec2 client to latest version * api-change:``mediapackage-vod``: Update mediapackage-vod client to latest version * api-change:``transcribe``: Update transcribe client to latest version - from version 1.12.214 * api-change:``datasync``: Update datasync client to latest version * api-change:``rds``: Update rds client to latest version python-s3transfer was updated to 0.3.3: * bugfix:dependency: Updated botocore version range Update to version 0.3.2 * bugfix:s3: Fixes boto/botocore`#1916 <https://github.com/boto/botocore/issues/1916>`__ from version 0.3.1 * enhancement:TransferManager: Expose client and config properties * enhancement:Tags: Add support for Tagging and TaggingDirective from version 0.3.0 * feature:Python: Dropped support for Python 2.6 and 3.3. python-boto was updated to fix: * Removed the upstream builtin root certificate data for trusted CAs, as SUSE ships them seperately. (bsc#1116204) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-625=1 Package List: - openSUSE Leap 15.1 (noarch): aws-cli-1.18.38-lp151.2.6.1 python2-boto-2.49.0-lp151.2.3.1 python2-boto3-1.12.38-lp151.2.6.1 python2-botocore-1.15.38-lp151.2.6.1 python2-s3transfer-0.3.3-lp151.2.6.1 python3-boto-2.49.0-lp151.2.3.1 python3-boto3-1.12.38-lp151.2.6.1 python3-botocore-1.15.38-lp151.2.6.1 python3-s3transfer-0.3.3-lp151.2.6.1 References: https://bugzilla.suse.com/1116204 https://bugzilla.suse.com/1117074 https://bugzilla.suse.com/1122668 https://bugzilla.suse.com/1129696 https://bugzilla.suse.com/1166924 https://bugzilla.suse.com/1168943

1 0

openSUSE-SU-2020:0630-1: important: Security update for python-PyYAML
by opensuse-security＠opensuse.org 11 May '20

11 May '20

openSUSE Security Update: Security update for python-PyYAML ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0630-1 Rating: important References: #1165439 Cross-References: CVE-2020-1747 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-PyYAML fixes the following issues: - CVE-2020-1747: Fixed an arbitrary code execution when YAML files are parsed by FullLoader (bsc#1165439). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-630=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): python-PyYAML-debuginfo-5.1.2-lp151.2.13.1 python-PyYAML-debugsource-5.1.2-lp151.2.13.1 python2-PyYAML-5.1.2-lp151.2.13.1 python2-PyYAML-debuginfo-5.1.2-lp151.2.13.1 python3-PyYAML-5.1.2-lp151.2.13.1 python3-PyYAML-debuginfo-5.1.2-lp151.2.13.1 References: https://www.suse.com/security/cve/CVE-2020-1747.html https://bugzilla.suse.com/1165439

1 0

openSUSE-SU-2020:0647-1: important: Security update for openldap2
by opensuse-security＠opensuse.org 11 May '20

11 May '20

openSUSE Security Update: Security update for openldap2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0647-1 Rating: important References: #1170771 Cross-References: CVE-2020-12243 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for openldap2 fixes the following issues: - CVE-2020-12243: Fixed a denial of service related to recursive filters (bsc#1170771). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-647=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libldap-2_4-2-2.4.46-lp151.10.9.1 libldap-2_4-2-debuginfo-2.4.46-lp151.10.9.1 openldap2-2.4.46-lp151.10.9.1 openldap2-back-meta-2.4.46-lp151.10.9.1 openldap2-back-meta-debuginfo-2.4.46-lp151.10.9.1 openldap2-back-perl-2.4.46-lp151.10.9.1 openldap2-back-perl-debuginfo-2.4.46-lp151.10.9.1 openldap2-back-sock-2.4.46-lp151.10.9.1 openldap2-back-sock-debuginfo-2.4.46-lp151.10.9.1 openldap2-back-sql-2.4.46-lp151.10.9.1 openldap2-back-sql-debuginfo-2.4.46-lp151.10.9.1 openldap2-client-2.4.46-lp151.10.9.1 openldap2-client-debuginfo-2.4.46-lp151.10.9.1 openldap2-contrib-2.4.46-lp151.10.9.1 openldap2-contrib-debuginfo-2.4.46-lp151.10.9.1 openldap2-debuginfo-2.4.46-lp151.10.9.1 openldap2-debugsource-2.4.46-lp151.10.9.1 openldap2-devel-2.4.46-lp151.10.9.1 openldap2-devel-static-2.4.46-lp151.10.9.1 openldap2-ppolicy-check-password-1.2-lp151.10.9.1 openldap2-ppolicy-check-password-debuginfo-1.2-lp151.10.9.1 - openSUSE Leap 15.1 (x86_64): libldap-2_4-2-32bit-2.4.46-lp151.10.9.1 libldap-2_4-2-32bit-debuginfo-2.4.46-lp151.10.9.1 openldap2-devel-32bit-2.4.46-lp151.10.9.1 - openSUSE Leap 15.1 (noarch): libldap-data-2.4.46-lp151.10.9.1 openldap2-doc-2.4.46-lp151.10.9.1 References: https://www.suse.com/security/cve/CVE-2020-12243.html https://bugzilla.suse.com/1170771

1 0

openSUSE-SU-2020:0646-1: important: Security update for webkit2gtk3
by opensuse-security＠opensuse.org 11 May '20

11 May '20

openSUSE Security Update: Security update for webkit2gtk3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0646-1 Rating: important References: #1170643 Cross-References: CVE-2020-3899 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for webkit2gtk3 fixes the following issues: Security issue fixed: - CVE-2020-3899: Fixed a memory consumption issue that could have led to remote code execution (bsc#1170643). Non-security issues fixed: - Update to version 2.28.2 (bsc#1170643): + Fix excessive CPU usage due to GdkFrameClock not being stopped. + Fix UI process crash when EGL_WL_bind_wayland_display extension is not available. + Fix position of select popup menus in X11. + Fix playing of Youtube 'live stream'/H264 URLs. + Fix a crash under X11 when cairo uses xcb. + Fix several crashes and rendering issues. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-646=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libjavascriptcoregtk-4_0-18-2.28.2-lp151.2.18.1 libjavascriptcoregtk-4_0-18-debuginfo-2.28.2-lp151.2.18.1 libwebkit2gtk-4_0-37-2.28.2-lp151.2.18.1 libwebkit2gtk-4_0-37-debuginfo-2.28.2-lp151.2.18.1 typelib-1_0-JavaScriptCore-4_0-2.28.2-lp151.2.18.1 typelib-1_0-WebKit2-4_0-2.28.2-lp151.2.18.1 typelib-1_0-WebKit2WebExtension-4_0-2.28.2-lp151.2.18.1 webkit-jsc-4-2.28.2-lp151.2.18.1 webkit-jsc-4-debuginfo-2.28.2-lp151.2.18.1 webkit2gtk-4_0-injected-bundles-2.28.2-lp151.2.18.1 webkit2gtk-4_0-injected-bundles-debuginfo-2.28.2-lp151.2.18.1 webkit2gtk3-debugsource-2.28.2-lp151.2.18.1 webkit2gtk3-devel-2.28.2-lp151.2.18.1 webkit2gtk3-minibrowser-2.28.2-lp151.2.18.1 webkit2gtk3-minibrowser-debuginfo-2.28.2-lp151.2.18.1 - openSUSE Leap 15.1 (x86_64): libjavascriptcoregtk-4_0-18-32bit-2.28.2-lp151.2.18.1 libjavascriptcoregtk-4_0-18-32bit-debuginfo-2.28.2-lp151.2.18.1 libwebkit2gtk-4_0-37-32bit-2.28.2-lp151.2.18.1 libwebkit2gtk-4_0-37-32bit-debuginfo-2.28.2-lp151.2.18.1 - openSUSE Leap 15.1 (noarch): libwebkit2gtk3-lang-2.28.2-lp151.2.18.1 References: https://www.suse.com/security/cve/CVE-2020-3899.html https://bugzilla.suse.com/1170643

1 0

openSUSE-RU-2020:0619-1: moderate: Recommended update for 389-ds
by maintenance＠opensuse.org 07 May '20

07 May '20

openSUSE Recommended Update: Recommended update for 389-ds ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0619-1 Rating: moderate References: #1169364 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for 389-ds fixes the following issues: - Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will not exist in containers with systemd users. Update to version 1.4.2.12~git0.b11942c36: * Issue 50337 - Replace exec() with setattr() * Issue 50545 - the check for the ds version for the backend config was broken * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code * Ticket 51014 - slapi_pal.c possible static buffer overflow * Issue 50545 - remove dbmon "incr" option from arg parser * Issue 50545 - Port dbmon.sh to dsconf * Ticket 50905 - intermittent SSL hang with rhds * Issue 50952 - SSCA lacks basicConstraint:CA * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value Update to version 1.4.2.11~git0.aff1a2831: (bsc#1169364) * Issue 50994 - Fix latest UI bugs found by QE * Issue 50337 - Replace exec() with setattr() * Issue 50984 - Memory leaks in disk monitoring * Issue 50975 - Revise UI branding with new minimized build * Issue 49437 - Fix memory leak with indirect COS * Issue 50976 - Clean up Web UI source directory from unused files * Issue 50744 - -n option of dbverify does not work * Issue 50952- SSCA lacks basicConstraint:CA * Bump version to 1.4.2.10 * Issue 50966 - UI - Database indexes not using typeAhead correctly * Issue 50974 - UI - wrong title in "Delete Suffix" popup * Issue 50972 - Fix cockpit plugin build * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted * Issue 50963 - We should bundle *.min.js files of Console * Bump version to 1.4.2.9 * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory * Issue 50937 - Update CLI for new backend split configuration * Issue 50499 - Fix npm audit issues * Issue 50884 - Health check tool DSEldif check fails * Issue 50926 - Remove dual spinner and other UI fixes * Issue 49845 - Remove pkgconfig check for libasan * Issue 50758 - Only Recommend bash-completion, not Require * Issue 50928 - Unable to create a suffix with countryName * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code * Issue 50919 - Backend delete fails using dsconf * Issue 50872 - dsconf can't create GSSAPI replication agreements * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before * Ticket 50618 - support cgroupv2 * Ticket 50898 - ldclt core dumped when run with -e genldif option * Bump version to 1.4.2.8 * Issue 50855 - remove unused file from UI * Issue 50855 - UI: Port Server Tab to React * Issue 49845 - README does not contain complete information on building * Ticket - 49623-cont cenotaph errors on modrdn operations * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled * Issue 50886 - Typo in the replication debug message * Issue 50873 - Fix healthcheck and virtual attr check * Issue 50873 - Fix issues with healthcheck tool * Ticket 50857 - Memory leak in ACI using IP subject * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache * Issue 50850 - Fix dsctl healthcheck for python36 * Issue 49990 - Need to enforce a hard maximum limit for file descriptors * Bump version to 1.4.2.7 * Issue 49254 - Fix compiler failures and warnings * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown * Issue 50836 - Port Schema UI tab to React * Issue 50842 - Decrease 389-console Cockpit component size * Ticket 50790 - Add result text when filter is invalid * Issue 50834 - Incorrectly setting the NSS default SSL version max * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10 * Issue 50599 - Fix memory leak when removing db region files * Issue 49395 - Set the default TLS version min to TLS1.2 * Issue 50818 - dsconf pwdpolicy get error * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined" * Issue 50599 - Remove db region files prior to db recovery * Issue 50812 - dscontainer executable should be placed under /usr/libexec/dirsrv/ * Issue 50816 - dsconf allows the root password to be set to nothing * Issue 50798 - incorrect bytes in format string(fix import issue) - resolve a warning found in static analysis in OBS (upstream #51014) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-619=1 Package List: - openSUSE Leap 15.1 (x86_64): 389-ds-1.4.2.12~git0.b11942c36-lp151.5.6.1 389-ds-debuginfo-1.4.2.12~git0.b11942c36-lp151.5.6.1 389-ds-debugsource-1.4.2.12~git0.b11942c36-lp151.5.6.1 389-ds-devel-1.4.2.12~git0.b11942c36-lp151.5.6.1 389-ds-snmp-1.4.2.12~git0.b11942c36-lp151.5.6.1 389-ds-snmp-debuginfo-1.4.2.12~git0.b11942c36-lp151.5.6.1 lib389-1.4.2.12~git0.b11942c36-lp151.5.6.1 libsvrcore0-1.4.2.12~git0.b11942c36-lp151.5.6.1 libsvrcore0-debuginfo-1.4.2.12~git0.b11942c36-lp151.5.6.1 References: https://bugzilla.suse.com/1169364

1 0

openSUSE-RU-2020:0617-1: moderate: Recommended update for go1.12
by maintenance＠opensuse.org 06 May '20

06 May '20

openSUSE Recommended Update: Recommended update for go1.12 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0617-1 Rating: moderate References: #1141689 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for go1.12 fixes the following issues: - Fix for certificate validation in parsing. (bsc#1141689) - Fix for "fatal error: PowerRegisterSuspendResumeNotification failure" when running in Windows docker containers. (bsc#1141689) - Fixes for an issue on macOS 10.15 Catalina where the non-notarized installer and binaries were being rejected by Gatekeeper. (bsc#1141689) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-617=1 Package List: - openSUSE Leap 15.1 (x86_64): go1.12-1.12.17-lp151.2.29.1 go1.12-doc-1.12.17-lp151.2.29.1 go1.12-race-1.12.17-lp151.2.29.1 References: https://bugzilla.suse.com/1141689

1 0

openSUSE-RU-2020:0618-1: moderate: Recommended update for mailman
by maintenance＠opensuse.org 06 May '20

06 May '20

openSUSE Recommended Update: Recommended update for mailman ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0618-1 Rating: moderate References: #1167068 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for mailman fixes the following issues: - Fix rights and ownership on /var/lib/mailman/archives (boo#1167068) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-618=1 Package List: - openSUSE Leap 15.1 (x86_64): mailman-2.1.29-lp151.3.6.1 mailman-debuginfo-2.1.29-lp151.3.6.1 mailman-debugsource-2.1.29-lp151.3.6.1 References: https://bugzilla.suse.com/1167068

1 0

openSUSE-RU-2020:0616-1: moderate: Recommended update for azure-cli tools, python-adal, python-applicationinsights, python-azure modules, python-msrest, python-msrestazure, python-pydocumentdb, python-uamqp, python-vsts-cd-manager
by maintenance＠opensuse.org 06 May '20

06 May '20

openSUSE Recommended Update: Recommended update for azure-cli tools, python-adal, python-applicationinsights, python-azure modules, python-msrest, python-msrestazure, python-pydocumentdb, python-uamqp, python-vsts-cd-manager ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0616-1 Rating: moderate References: #1014478 #1054413 #1140565 #982804 #999200 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: This update for azure-cli tools, python-adal, python-applicationinsights, python-azure modules, python-msrest, python-msrestazure, python-pydocumentdb, python-uamqp, python-vsts-cd-manager fixes the following issues: The Azure python modules and client tool stack was updated to the 2020 state. Various other python modules were added and updated. - python-PyYAML was updated to 5.1.2. - python-humanfriendly was updated 4.16.1. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-616=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): python-PyYAML-debuginfo-5.1.2-lp151.2.9.1 python-PyYAML-debugsource-5.1.2-lp151.2.9.1 python2-PyYAML-5.1.2-lp151.2.9.1 python2-PyYAML-debuginfo-5.1.2-lp151.2.9.1 python3-PyYAML-5.1.2-lp151.2.9.1 python3-PyYAML-debuginfo-5.1.2-lp151.2.9.1 - openSUSE Leap 15.1 (noarch): azure-cli-2.0.45-lp151.2.3.1 azure-cli-acr-2.1.4-lp151.2.3.1 azure-cli-acs-2.3.2-lp151.2.3.1 azure-cli-advisor-0.6.0-lp151.2.3.1 azure-cli-ams-0.2.3-lp151.2.3.1 azure-cli-appservice-0.2.3-lp151.2.3.1 azure-cli-backup-1.2.1-lp151.2.3.1 azure-cli-batch-3.3.3-lp151.2.3.1 azure-cli-batchai-0.4.2-lp151.2.3.1 azure-cli-billing-0.2.0-lp151.2.3.1 azure-cli-cdn-0.1.1-lp151.2.3.1 azure-cli-cloud-2.1.0-lp151.2.3.1 azure-cli-cognitiveservices-0.2.1-lp151.2.3.1 azure-cli-command-modules-nspkg-2.0.1-lp151.3.3.1 azure-cli-component-2.0.7-lp151.3.3.1 azure-cli-configure-2.0.18-lp151.2.3.1 azure-cli-consumption-0.4.0-lp151.2.3.1 azure-cli-container-0.3.3-lp151.2.3.1 azure-cli-core-2.0.45-lp151.2.6.1 azure-cli-cosmosdb-0.2.1-lp151.2.3.1 azure-cli-dla-0.2.2-lp151.2.3.1 azure-cli-dls-0.1.1-lp151.2.3.1 azure-cli-dms-0.1.0-lp151.2.3.1 azure-cli-eventgrid-0.2.0-lp151.2.3.1 azure-cli-eventhubs-0.2.3-lp151.2.3.1 azure-cli-extension-0.2.1-lp151.2.3.1 azure-cli-feedback-2.1.4-lp151.2.3.1 azure-cli-find-0.2.12-lp151.2.3.1 azure-cli-interactive-0.3.28-lp151.2.6.1 azure-cli-iot-0.3.1-lp151.2.3.1 azure-cli-keyvault-2.2.2-lp151.2.3.1 azure-cli-lab-0.1.1-lp151.2.3.1 azure-cli-monitor-0.2.3-lp151.2.3.1 azure-cli-network-2.2.4-lp151.2.3.1 azure-cli-nspkg-3.0.2-lp151.2.3.1 azure-cli-profile-2.1.1-lp151.2.3.1 azure-cli-rdbms-0.3.1-lp151.2.3.1 azure-cli-redis-0.3.2-lp151.2.3.1 azure-cli-reservations-0.3.2-lp151.2.3.1 azure-cli-resource-2.1.3-lp151.2.3.1 azure-cli-role-2.1.4-lp151.2.3.1 azure-cli-search-0.1.1-lp151.2.3.1 azure-cli-servicebus-0.2.2-lp151.2.3.1 azure-cli-servicefabric-0.1.2-lp151.2.3.1 azure-cli-sql-2.1.3-lp151.2.3.1 azure-cli-storage-2.2.1-lp151.2.3.1 azure-cli-taskhelp-0.1.7-lp151.3.3.1 azure-cli-telemetry-1.0.0-lp151.2.3.1 azure-cli-vm-2.2.2-lp151.2.3.1 python-Whoosh-doc-2.7.4-lp151.3.3.1 python-azure-sdk-4.0.0-lp151.2.3.1 python2-Whoosh-2.7.4-lp151.3.3.1 python2-adal-1.0.2-lp151.3.3.1 python2-applicationinsights-0.11.6-lp151.2.3.1 python2-azure-applicationinsights-0.1.0-lp151.2.3.1 python2-azure-batch-5.0.0-lp151.2.3.1 python2-azure-cognitiveservices-language-luis-0.1.0-lp151.2.3.1 python2-azure-cognitiveservices-language-nspkg-2.0.0-lp151.4.3.1 python2-azure-cognitiveservices-language-spellcheck-1.0.0-lp151.2.3.1 python2-azure-cognitiveservices-language-textanalytics-0.1.0-lp151.2.3.1 python2-azure-cognitiveservices-nspkg-2.0.0-lp151.4.3.1 python2-azure-cognitiveservices-search-autosuggest-0.1.0-lp151.2.3.1 python2-azure-cognitiveservices-search-customsearch-0.1.0-lp151.2.3.1 python2-azure-cognitiveservices-search-entitysearch-1.0.0-lp151.2.3.1 python2-azure-cognitiveservices-search-imagesearch-1.0.0-lp151.2.3.1 python2-azure-cognitiveservices-search-newssearch-1.0.0-lp151.2.3.1 python2-azure-cognitiveservices-search-nspkg-2.0.0-lp151.4.3.1 python2-azure-cognitiveservices-search-videosearch-1.0.0-lp151.2.3.1 python2-azure-cognitiveservices-search-visualsearch-0.1.1-lp151.2.3.1 python2-azure-cognitiveservices-search-websearch-1.0.0-lp151.2.3.1 python2-azure-cognitiveservices-vision-computervision-0.2.0-lp151.2.3.1 python2-azure-cognitiveservices-vision-contentmoderator-0.1.0-lp151.2.3.1 python2-azure-cognitiveservices-vision-customvision-0.3.0-lp151.2.3.1 python2-azure-cognitiveservices-vision-nspkg-2.0.0-lp151.4.3.1 python2-azure-common-1.1.14-lp151.2.3.1 python2-azure-datalake-store-0.0.30-lp151.2.3.1 python2-azure-eventgrid-1.2.0-lp151.2.3.1 python2-azure-graphrbac-0.40.0-lp151.2.3.1 python2-azure-keyvault-1.1.0-lp151.2.3.1 python2-azure-loganalytics-0.1.0-lp151.2.3.1 python2-azure-mgmt-4.0.0-lp151.2.3.1 python2-azure-mgmt-advisor-1.0.1-lp151.2.3.1 python2-azure-mgmt-applicationinsights-0.1.1-lp151.2.3.1 python2-azure-mgmt-authorization-0.50.0-lp151.2.3.1 python2-azure-mgmt-batch-5.0.1-lp151.2.3.1 python2-azure-mgmt-batchai-2.0.0-lp151.2.3.1 python2-azure-mgmt-billing-0.2.0-lp151.2.3.1 python2-azure-mgmt-botservice-0.1.0-lp151.2.3.1 python2-azure-mgmt-cdn-3.0.0-lp151.2.3.1 python2-azure-mgmt-cognitiveservices-3.0.0-lp151.2.3.1 python2-azure-mgmt-commerce-1.0.1-lp151.2.3.1 python2-azure-mgmt-compute-4.6.2-lp151.2.4.2 python2-azure-mgmt-consumption-2.0.0-lp151.2.3.1 python2-azure-mgmt-containerinstance-1.0.0-lp151.2.3.1 python2-azure-mgmt-containerregistry-2.1.0-lp151.2.3.1 python2-azure-mgmt-containerservice-4.2.2-lp151.2.3.1 python2-azure-mgmt-cosmosdb-0.4.1-lp151.2.3.1 python2-azure-mgmt-datafactory-0.6.0-lp151.2.3.1 python2-azure-mgmt-datalake-analytics-0.6.0-lp151.2.3.1 python2-azure-mgmt-datalake-nspkg-2.0.0-lp151.4.3.1 python2-azure-mgmt-datalake-store-0.5.0-lp151.2.3.1 python2-azure-mgmt-datamigration-1.0.0-lp151.2.3.1 python2-azure-mgmt-devspaces-0.1.0-lp151.2.3.1 python2-azure-mgmt-devtestlabs-2.2.0-lp151.2.3.1 python2-azure-mgmt-dns-2.0.0-lp151.2.3.1 python2-azure-mgmt-documentdb-0.1.3-lp151.4.3.1 python2-azure-mgmt-eventgrid-2.0.0rc1-lp151.2.3.1 python2-azure-mgmt-eventhub-2.1.0-lp151.2.3.1 python2-azure-mgmt-hanaonazure-0.2.1-lp151.2.3.1 python2-azure-mgmt-hdinsight-0.1.0-lp151.2.3.1 python2-azure-mgmt-iotcentral-0.2.0-lp151.2.3.1 python2-azure-mgmt-iothub-0.6.0-lp151.2.3.1 python2-azure-mgmt-iothubprovisioningservices-0.2.0-lp151.2.3.1 python2-azure-mgmt-keyvault-1.1.0-lp151.2.3.1 python2-azure-mgmt-kusto-0.1.0-lp151.2.3.1 python2-azure-mgmt-loganalytics-0.2.0-lp151.2.3.1 python2-azure-mgmt-logic-3.0.0-lp151.2.3.1 python2-azure-mgmt-machinelearningcompute-0.4.1-lp151.2.3.1 python2-azure-mgmt-managementgroups-0.1.0-lp151.2.3.1 python2-azure-mgmt-managementpartner-0.1.0-lp151.2.3.1 python2-azure-mgmt-maps-0.1.0-lp151.2.3.1 python2-azure-mgmt-marketplaceordering-0.1.0-lp151.2.3.1 python2-azure-mgmt-media-1.0.0rc2-lp151.2.3.1 python2-azure-mgmt-monitor-0.5.2-lp151.2.3.1 python2-azure-mgmt-msi-0.2.0-lp151.2.3.1 python2-azure-mgmt-network-2.1.0-lp151.2.3.1 python2-azure-mgmt-notificationhubs-2.0.0-lp151.2.3.1 python2-azure-mgmt-nspkg-2.0.0-lp151.4.3.1 python2-azure-mgmt-policyinsights-0.1.0-lp151.2.3.1 python2-azure-mgmt-powerbiembedded-2.0.0-lp151.2.3.1 python2-azure-mgmt-rdbms-1.2.0-lp151.2.3.1 python2-azure-mgmt-recoveryservices-0.3.0-lp151.2.3.1 python2-azure-mgmt-recoveryservicesbackup-0.3.0-lp151.2.3.1 python2-azure-mgmt-redis-5.0.0-lp151.2.3.1 python2-azure-mgmt-relay-0.1.0-lp151.2.3.1 python2-azure-mgmt-reservations-0.3.0-lp151.2.3.1 python2-azure-mgmt-resource-2.0.0-lp151.2.3.1 python2-azure-mgmt-scheduler-2.0.0-lp151.2.3.1 python2-azure-mgmt-search-2.0.0-lp151.2.3.1 python2-azure-mgmt-servermanager-2.0.0-lp151.2.3.1 python2-azure-mgmt-servicebus-0.5.1-lp151.2.3.1 python2-azure-mgmt-servicefabric-0.2.0-lp151.2.3.1 python2-azure-mgmt-signalr-0.1.0-lp151.2.3.1 python2-azure-mgmt-sql-0.9.1-lp151.2.3.2 python2-azure-mgmt-storage-2.0.0-lp151.2.3.2 python2-azure-mgmt-subscription-0.2.0-lp151.2.3.1 python2-azure-mgmt-trafficmanager-0.50.0-lp151.2.3.1 python2-azure-mgmt-web-0.40.0-lp151.2.3.2 python2-azure-monitor-0.3.0-lp151.5.3.1 python2-azure-multiapi-storage-0.2.2-lp151.2.3.1 python2-azure-nspkg-2.0.0-lp151.4.3.1 python2-azure-servicebus-0.21.1-lp151.5.3.1 python2-azure-servicefabric-6.3.0.0-lp151.2.3.1 python2-azure-servicemanagement-legacy-0.20.6-lp151.5.3.1 python2-azure-storage-blob-1.3.1-lp151.2.3.1 python2-azure-storage-common-1.3.0-lp151.2.3.1 python2-azure-storage-file-1.3.1-lp151.2.3.1 python2-azure-storage-nspkg-3.0.0-lp151.2.3.1 python2-azure-storage-queue-1.3.0-lp151.2.3.1 python2-capturer-2.4-lp151.2.3.1 python2-coloredlogs-10.0-lp151.2.3.1 python2-humanfriendly-4.16.1-lp151.2.3.1 python2-humanfriendly-test-4.16.1-lp151.2.3.1 python2-knack-0.4.3-lp151.2.3.1 python2-msrest-0.5.5-lp151.2.3.1 python2-msrestazure-0.5.0-lp151.2.3.1 python2-pydocumentdb-2.3.2-lp151.2.3.1 python2-sshtunnel-0.1.4-lp151.2.3.1 python2-verboselogs-1.7-lp151.2.3.1 python2-websocket-client-0.44.0-lp151.4.3.1 python3-Whoosh-2.7.4-lp151.3.3.1 python3-adal-1.0.2-lp151.3.3.1 python3-applicationinsights-0.11.6-lp151.2.3.1 python3-azure-applicationinsights-0.1.0-lp151.2.3.1 python3-azure-batch-5.0.0-lp151.2.3.1 python3-azure-cognitiveservices-language-luis-0.1.0-lp151.2.3.1 python3-azure-cognitiveservices-language-nspkg-2.0.0-lp151.4.3.1 python3-azure-cognitiveservices-language-spellcheck-1.0.0-lp151.2.3.1 python3-azure-cognitiveservices-language-textanalytics-0.1.0-lp151.2.3.1 python3-azure-cognitiveservices-nspkg-2.0.0-lp151.4.3.1 python3-azure-cognitiveservices-search-autosuggest-0.1.0-lp151.2.3.1 python3-azure-cognitiveservices-search-customsearch-0.1.0-lp151.2.3.1 python3-azure-cognitiveservices-search-entitysearch-1.0.0-lp151.2.3.1 python3-azure-cognitiveservices-search-imagesearch-1.0.0-lp151.2.3.1 python3-azure-cognitiveservices-search-newssearch-1.0.0-lp151.2.3.1 python3-azure-cognitiveservices-search-nspkg-2.0.0-lp151.4.3.1 python3-azure-cognitiveservices-search-videosearch-1.0.0-lp151.2.3.1 python3-azure-cognitiveservices-search-visualsearch-0.1.1-lp151.2.3.1 python3-azure-cognitiveservices-search-websearch-1.0.0-lp151.2.3.1 python3-azure-cognitiveservices-vision-computervision-0.2.0-lp151.2.3.1 python3-azure-cognitiveservices-vision-contentmoderator-0.1.0-lp151.2.3.1 python3-azure-cognitiveservices-vision-customvision-0.3.0-lp151.2.3.1 python3-azure-cognitiveservices-vision-nspkg-2.0.0-lp151.4.3.1 python3-azure-common-1.1.14-lp151.2.3.1 python3-azure-datalake-store-0.0.30-lp151.2.3.1 python3-azure-eventgrid-1.2.0-lp151.2.3.1 python3-azure-graphrbac-0.40.0-lp151.2.3.1 python3-azure-keyvault-1.1.0-lp151.2.3.1 python3-azure-loganalytics-0.1.0-lp151.2.3.1 python3-azure-mgmt-4.0.0-lp151.2.3.1 python3-azure-mgmt-advisor-1.0.1-lp151.2.3.1 python3-azure-mgmt-applicationinsights-0.1.1-lp151.2.3.1 python3-azure-mgmt-authorization-0.50.0-lp151.2.3.1 python3-azure-mgmt-batch-5.0.1-lp151.2.3.1 python3-azure-mgmt-batchai-2.0.0-lp151.2.3.1 python3-azure-mgmt-billing-0.2.0-lp151.2.3.1 python3-azure-mgmt-botservice-0.1.0-lp151.2.3.1 python3-azure-mgmt-cdn-3.0.0-lp151.2.3.1 python3-azure-mgmt-cognitiveservices-3.0.0-lp151.2.3.1 python3-azure-mgmt-commerce-1.0.1-lp151.2.3.1 python3-azure-mgmt-compute-4.6.2-lp151.2.4.2 python3-azure-mgmt-consumption-2.0.0-lp151.2.3.1 python3-azure-mgmt-containerinstance-1.0.0-lp151.2.3.1 python3-azure-mgmt-containerregistry-2.1.0-lp151.2.3.1 python3-azure-mgmt-containerservice-4.2.2-lp151.2.3.1 python3-azure-mgmt-cosmosdb-0.4.1-lp151.2.3.1 python3-azure-mgmt-datafactory-0.6.0-lp151.2.3.1 python3-azure-mgmt-datalake-analytics-0.6.0-lp151.2.3.1 python3-azure-mgmt-datalake-nspkg-2.0.0-lp151.4.3.1 python3-azure-mgmt-datalake-store-0.5.0-lp151.2.3.1 python3-azure-mgmt-datamigration-1.0.0-lp151.2.3.1 python3-azure-mgmt-devspaces-0.1.0-lp151.2.3.1 python3-azure-mgmt-devtestlabs-2.2.0-lp151.2.3.1 python3-azure-mgmt-dns-2.0.0-lp151.2.3.1 python3-azure-mgmt-documentdb-0.1.3-lp151.4.3.1 python3-azure-mgmt-eventgrid-2.0.0rc1-lp151.2.3.1 python3-azure-mgmt-eventhub-2.1.0-lp151.2.3.1 python3-azure-mgmt-hanaonazure-0.2.1-lp151.2.3.1 python3-azure-mgmt-hdinsight-0.1.0-lp151.2.3.1 python3-azure-mgmt-iotcentral-0.2.0-lp151.2.3.1 python3-azure-mgmt-iothub-0.6.0-lp151.2.3.1 python3-azure-mgmt-iothubprovisioningservices-0.2.0-lp151.2.3.1 python3-azure-mgmt-keyvault-1.1.0-lp151.2.3.1 python3-azure-mgmt-kusto-0.1.0-lp151.2.3.1 python3-azure-mgmt-loganalytics-0.2.0-lp151.2.3.1 python3-azure-mgmt-logic-3.0.0-lp151.2.3.1 python3-azure-mgmt-machinelearningcompute-0.4.1-lp151.2.3.1 python3-azure-mgmt-managementgroups-0.1.0-lp151.2.3.1 python3-azure-mgmt-managementpartner-0.1.0-lp151.2.3.1 python3-azure-mgmt-maps-0.1.0-lp151.2.3.1 python3-azure-mgmt-marketplaceordering-0.1.0-lp151.2.3.1 python3-azure-mgmt-media-1.0.0rc2-lp151.2.3.1 python3-azure-mgmt-monitor-0.5.2-lp151.2.3.1 python3-azure-mgmt-msi-0.2.0-lp151.2.3.1 python3-azure-mgmt-network-2.1.0-lp151.2.3.1 python3-azure-mgmt-notificationhubs-2.0.0-lp151.2.3.1 python3-azure-mgmt-nspkg-2.0.0-lp151.4.3.1 python3-azure-mgmt-policyinsights-0.1.0-lp151.2.3.1 python3-azure-mgmt-powerbiembedded-2.0.0-lp151.2.3.1 python3-azure-mgmt-rdbms-1.2.0-lp151.2.3.1 python3-azure-mgmt-recoveryservices-0.3.0-lp151.2.3.1 python3-azure-mgmt-recoveryservicesbackup-0.3.0-lp151.2.3.1 python3-azure-mgmt-redis-5.0.0-lp151.2.3.1 python3-azure-mgmt-relay-0.1.0-lp151.2.3.1 python3-azure-mgmt-reservations-0.3.0-lp151.2.3.1 python3-azure-mgmt-resource-2.0.0-lp151.2.3.1 python3-azure-mgmt-scheduler-2.0.0-lp151.2.3.1 python3-azure-mgmt-search-2.0.0-lp151.2.3.1 python3-azure-mgmt-servermanager-2.0.0-lp151.2.3.1 python3-azure-mgmt-servicebus-0.5.1-lp151.2.3.1 python3-azure-mgmt-servicefabric-0.2.0-lp151.2.3.1 python3-azure-mgmt-signalr-0.1.0-lp151.2.3.1 python3-azure-mgmt-sql-0.9.1-lp151.2.3.2 python3-azure-mgmt-storage-2.0.0-lp151.2.3.2 python3-azure-mgmt-subscription-0.2.0-lp151.2.3.1 python3-azure-mgmt-trafficmanager-0.50.0-lp151.2.3.1 python3-azure-mgmt-web-0.40.0-lp151.2.3.2 python3-azure-monitor-0.3.0-lp151.5.3.1 python3-azure-multiapi-storage-0.2.2-lp151.2.3.1 python3-azure-nspkg-2.0.0-lp151.4.3.1 python3-azure-sdk-4.0.0-lp151.2.3.1 python3-azure-servicebus-0.21.1-lp151.5.3.1 python3-azure-servicefabric-6.3.0.0-lp151.2.3.1 python3-azure-servicemanagement-legacy-0.20.6-lp151.5.3.1 python3-azure-storage-blob-1.3.1-lp151.2.3.1 python3-azure-storage-common-1.3.0-lp151.2.3.1 python3-azure-storage-file-1.3.1-lp151.2.3.1 python3-azure-storage-nspkg-3.0.0-lp151.2.3.1 python3-azure-storage-queue-1.3.0-lp151.2.3.1 python3-capturer-2.4-lp151.2.3.1 python3-coloredlogs-10.0-lp151.2.3.1 python3-humanfriendly-4.16.1-lp151.2.3.1 python3-humanfriendly-test-4.16.1-lp151.2.3.1 python3-knack-0.4.3-lp151.2.3.1 python3-msrest-0.5.5-lp151.2.3.1 python3-msrestazure-0.5.0-lp151.2.3.1 python3-pydocumentdb-2.3.2-lp151.2.3.1 python3-sshtunnel-0.1.4-lp151.2.3.1 python3-verboselogs-1.7-lp151.2.3.1 python3-websocket-client-0.44.0-lp151.4.3.1 References: https://bugzilla.suse.com/1014478 https://bugzilla.suse.com/1054413 https://bugzilla.suse.com/1140565 https://bugzilla.suse.com/982804 https://bugzilla.suse.com/999200

1 0

openSUSE-SU-2020:0615-1: important: Security update for chromium
by opensuse-security＠opensuse.org 06 May '20

06 May '20

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0615-1 Rating: important References: #1170107 Cross-References: CVE-2020-0561 CVE-2020-6458 CVE-2020-6459 CVE-2020-6460 CVE-2020-6462 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for chromium fixes the following issues: Chromium was updated to 81.0.4044.129 (boo#1170107): - CVE-2020-0561: Fixed a use after free in storage - CVE-2020-6462: Fixed a use after free in task scheduling - CVE-2020-6459: Fixed a use after free in payments - CVE-2020-6460: Fixed an insufficient data validation in URL formatting - CVE-2020-6458: Fixed an out of bounds read and write in PDFium This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-615=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 x86_64): chromedriver-81.0.4044.129-bp151.3.79.1 chromium-81.0.4044.129-bp151.3.79.1 References: https://www.suse.com/security/cve/CVE-2020-0561.html https://www.suse.com/security/cve/CVE-2020-6458.html https://www.suse.com/security/cve/CVE-2020-6459.html https://www.suse.com/security/cve/CVE-2020-6460.html https://www.suse.com/security/cve/CVE-2020-6462.html https://bugzilla.suse.com/1170107

1 0

openSUSE-RU-2020:0614-1: Recommended update for python-pytest
by maintenance＠opensuse.org 06 May '20

06 May '20

openSUSE Recommended Update: Recommended update for python-pytest ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0614-1 Rating: low References: #1002895 #1107105 #1138666 #1167732 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update fixes the following issues: New python-pytest versions are provided. In Basesystem: - python3-pexpect: updated to 4.8.0 - python3-py: updated to 1.8.1 - python3-zipp: shipped as dependency in version 0.6.0 In Python2: - python2-pexpect: updated to 4.8.0 - python2-py: updated to 1.8.1 This update was imported from the SUSE:SLE-15-SP1:Update update project. This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-614=1 Package List: - openSUSE Backports SLE-15-SP1 (noarch): python2-filelock-3.0.12-bp151.2.3.1 python2-pytest-3.10.1-bp151.2.3.1 python2-pytest-isort-0.3.1-bp151.2.3.1 python2-pytest-localserver-0.5.0-bp151.2.3.1 python2-wcwidth-0.1.8-bp151.4.3.1 python3-filelock-3.0.12-bp151.2.3.1 python3-pytest-3.10.1-bp151.2.3.1 python3-pytest-isort-0.3.1-bp151.2.3.1 python3-pytest-localserver-0.5.0-bp151.2.3.1 python3-wcwidth-0.1.8-bp151.4.3.1 References: https://bugzilla.suse.com/1002895 https://bugzilla.suse.com/1107105 https://bugzilla.suse.com/1138666 https://bugzilla.suse.com/1167732

1 0

openSUSE-RU-2020:0613-1: Recommended update for python-pytest
by maintenance＠opensuse.org 05 May '20

05 May '20

openSUSE Recommended Update: Recommended update for python-pytest ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0613-1 Rating: low References: #1002895 #1107105 #1138666 #1167732 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update fixes the following issues: New python-pytest versions are provided. In Basesystem: - python3-pexpect: updated to 4.8.0 - python3-py: updated to 1.8.1 - python3-zipp: shipped as dependency in version 0.6.0 In Python2: - python2-pexpect: updated to 4.8.0 - python2-py: updated to 1.8.1 This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-613=1 Package List: - openSUSE Leap 15.1 (noarch): python-contextlib2-0.5.5-lp151.3.2.1 python2-SecretStorage-2.3.1-lp151.4.2.1 python2-apipkg-1.4-lp151.3.2.1 python2-cov-core-1.15.0-lp151.3.2.1 python2-execnet-1.7.1-lp151.3.3.1 python2-fields-5.0.0-lp151.2.1 python2-filelock-3.0.12-lp151.2.3.1 python2-importlib-metadata-1.5.0-lp151.2.1 python2-importlib_resources-1.0.2-lp151.2.1 python2-keyring-10.5.0-lp151.4.2.1 python2-more-itertools-4.2.0-lp151.2.3.1 python2-pexpect-4.8.0-lp151.3.3.1 python2-pluggy-0.13.1-lp151.2.3.1 python2-process-tests-1.2.2-lp151.3.2.1 python2-py-1.8.1-lp151.3.3.1 python2-pyfakefs-3.4.3-lp151.2.2.1 python2-pygments-ansi-color-0.0.3-lp151.2.1 python2-pygments-pytest-1.3.1-lp151.2.1 python2-pytest-3.10.1-lp151.3.3.1 python2-pytest-cov-2.8.1-lp151.3.3.1 python2-pytest-expect-1.1.0-lp151.3.3.1 python2-pytest-forked-1.1.3-lp151.3.3.1 python2-pytest-httpbin-1.0.0-lp151.3.3.3 python2-pytest-isort-0.3.1-lp151.2.3.1 python2-pytest-localserver-0.5.0-lp151.3.3.1 python2-pytest-mock-2.0.0-lp151.4.3.1 python2-pytest-relaxed-1.1.5-lp151.3.3.3 python2-pytest-xdist-1.27.0-lp151.3.3.4 python2-pytest4-4.6.9-lp151.2.1 python2-pyxdg-0.25-lp151.3.2.1 python2-wcwidth-0.1.8-lp151.3.3.1 python2-wheel-0.32.3-lp151.2.5.1 python2-zipp-0.6.0-lp151.2.1 python3-SecretStorage-2.3.1-lp151.4.2.1 python3-apipkg-1.4-lp151.3.2.1 python3-cov-core-1.15.0-lp151.3.2.1 python3-elementpath-1.4.1-lp151.2.1 python3-execnet-1.7.1-lp151.3.3.1 python3-fields-5.0.0-lp151.2.1 python3-filelock-3.0.12-lp151.2.3.1 python3-importlib-metadata-1.5.0-lp151.2.1 python3-importlib_resources-1.0.2-lp151.2.1 python3-keyring-10.5.0-lp151.4.2.1 python3-more-itertools-4.2.0-lp151.2.3.1 python3-pexpect-4.8.0-lp151.3.3.1 python3-pluggy-0.13.1-lp151.2.3.1 python3-process-tests-1.2.2-lp151.3.2.1 python3-py-1.8.1-lp151.3.3.1 python3-pyfakefs-3.4.3-lp151.2.2.1 python3-pygments-ansi-color-0.0.3-lp151.2.1 python3-pygments-pytest-1.3.1-lp151.2.1 python3-pytest-3.10.1-lp151.3.3.1 python3-pytest-cov-2.8.1-lp151.3.3.1 python3-pytest-expect-1.1.0-lp151.3.3.1 python3-pytest-forked-1.1.3-lp151.3.3.1 python3-pytest-httpbin-1.0.0-lp151.3.3.3 python3-pytest-isort-0.3.1-lp151.2.3.1 python3-pytest-localserver-0.5.0-lp151.3.3.1 python3-pytest-mock-2.0.0-lp151.4.3.1 python3-pytest-relaxed-1.1.5-lp151.3.3.3 python3-pytest-xdist-1.27.0-lp151.3.3.4 python3-pytest4-4.6.9-lp151.2.1 python3-pytest5-5.3.5-lp151.2.1 python3-pyxdg-0.25-lp151.3.2.1 python3-wcwidth-0.1.8-lp151.3.3.1 python3-wheel-0.32.3-lp151.2.5.1 python3-xmlschema-1.1.1-lp151.2.1 python3-zipp-0.6.0-lp151.2.1 References: https://bugzilla.suse.com/1002895 https://bugzilla.suse.com/1107105 https://bugzilla.suse.com/1138666 https://bugzilla.suse.com/1167732

1 0

openSUSE-SU-2020:0612-1: important: Security update for sqliteodbc
by opensuse-security＠opensuse.org 05 May '20

05 May '20

openSUSE Security Update: Security update for sqliteodbc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0612-1 Rating: important References: #1171041 Cross-References: CVE-2020-12050 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for sqliteodbc fixes the following issues: Security issue fixed: - CVE-2020-12050: Fixed a privilege escalation vulnerability (boo#1171041). Non-security issues fixed: - Update to version 0.9996 * update to SQLite 3.22.0 * fixes in handling DDL in SQLExecDirect() et.al., thanks Andre Mikulec for testing * cleanup utf8/unicode conversion functions Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-612=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): sqliteodbc-0.9996-bp151.4.3.1 sqliteodbc-doc-0.9996-bp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2020-12050.html https://bugzilla.suse.com/1171041

1 0

openSUSE-RU-2020:0611-1: moderate: Recommended update for sar2
by maintenance＠opensuse.org 05 May '20

05 May '20

openSUSE Recommended Update: Recommended update for sar2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0611-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for sar2 fixes the following issues: Update to version 2.4.0: * Improvements to the Joystick system, adding new Rudder+Brakes mode, moving to libSDL2 and cleaning up unused menu settings. * Fix lagging when aircraft is landed. * Honor wheel brake coefficient. This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-611=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): sar2-2.4.0-bp151.4.3.1 - openSUSE Backports SLE-15-SP1 (noarch): sar2-data-2.4.0-bp151.4.3.1 References:

1 0

openSUSE-RU-2020:0610-1: moderate: Recommended update for inxi
by maintenance＠opensuse.org 05 May '20

05 May '20

openSUSE Recommended Update: Recommended update for inxi ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0610-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for inxi fixes the following issues: inxi was update to version 3.1.00: * See /usr/share/doc/packages/inxi/inxi.changelog This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-610=1 Package List: - openSUSE Backports SLE-15-SP1 (noarch): inxi-3.1.00-bp151.4.6.1 References:

1 0

openSUSE-SU-2020:0609-1: Security update for python-typed-ast
by opensuse-security＠opensuse.org 04 May '20

04 May '20

openSUSE Security Update: Security update for python-typed-ast ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0609-1 Rating: low References: #1161562 #1161563 #1163532 Cross-References: CVE-2019-19274 CVE-2019-19275 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for python-typed-ast fixes the following issues: python-typed-ast was reverted to version 1.3.1 because it broke another package (bsc#1163532). Security issues fixed: - CVE-2019-19274: Fixed an out-of-bounds read (bsc#1161562). - CVE-2019-19275: Fixed an out-of-bounds read (bsc#1161563). This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-609=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): python3-typed-ast-1.3.1-bp151.2.6.1 References: https://www.suse.com/security/cve/CVE-2019-19274.html https://www.suse.com/security/cve/CVE-2019-19275.html https://bugzilla.suse.com/1161562 https://bugzilla.suse.com/1161563 https://bugzilla.suse.com/1163532

1 0

openSUSE-RU-2020:0608-1: moderate: Recommended update for mozilla-nss
by maintenance＠opensuse.org 04 May '20

04 May '20

openSUSE Recommended Update: Recommended update for mozilla-nss ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0608-1 Rating: moderate References: #1170571 #1170572 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for mozilla-nss fixes the following issues: - FIPS: Add Softoken POSTs for new DSA and ECDSA hash-and-sign update functions. (bsc#1170571) - FIPS: Add pairwise consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224 checks. - FIPS: Replace bad attempt at unconditional nssdbm checksumming with a dlopen(), so it can be located consistently and perform its own self-tests. - FIPS: This fixes an instance of inverted logic due to a boolean being mistaken for a SECStatus, which caused key derivation to fail when the caller provided a valid subprime. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-608=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libfreebl3-3.47.1-lp151.2.16.1 libfreebl3-debuginfo-3.47.1-lp151.2.16.1 libfreebl3-hmac-3.47.1-lp151.2.16.1 libsoftokn3-3.47.1-lp151.2.16.1 libsoftokn3-debuginfo-3.47.1-lp151.2.16.1 libsoftokn3-hmac-3.47.1-lp151.2.16.1 mozilla-nss-3.47.1-lp151.2.16.1 mozilla-nss-certs-3.47.1-lp151.2.16.1 mozilla-nss-certs-debuginfo-3.47.1-lp151.2.16.1 mozilla-nss-debuginfo-3.47.1-lp151.2.16.1 mozilla-nss-debugsource-3.47.1-lp151.2.16.1 mozilla-nss-devel-3.47.1-lp151.2.16.1 mozilla-nss-sysinit-3.47.1-lp151.2.16.1 mozilla-nss-sysinit-debuginfo-3.47.1-lp151.2.16.1 mozilla-nss-tools-3.47.1-lp151.2.16.1 mozilla-nss-tools-debuginfo-3.47.1-lp151.2.16.1 - openSUSE Leap 15.1 (x86_64): libfreebl3-32bit-3.47.1-lp151.2.16.1 libfreebl3-32bit-debuginfo-3.47.1-lp151.2.16.1 libfreebl3-hmac-32bit-3.47.1-lp151.2.16.1 libsoftokn3-32bit-3.47.1-lp151.2.16.1 libsoftokn3-32bit-debuginfo-3.47.1-lp151.2.16.1 libsoftokn3-hmac-32bit-3.47.1-lp151.2.16.1 mozilla-nss-32bit-3.47.1-lp151.2.16.1 mozilla-nss-32bit-debuginfo-3.47.1-lp151.2.16.1 mozilla-nss-certs-32bit-3.47.1-lp151.2.16.1 mozilla-nss-certs-32bit-debuginfo-3.47.1-lp151.2.16.1 mozilla-nss-sysinit-32bit-3.47.1-lp151.2.16.1 mozilla-nss-sysinit-32bit-debuginfo-3.47.1-lp151.2.16.1 References: https://bugzilla.suse.com/1170571 https://bugzilla.suse.com/1170572

1 0

openSUSE-SU-2020:0607-1: moderate: Security update for bouncycastle
by opensuse-security＠opensuse.org 03 May '20

03 May '20

openSUSE Security Update: Security update for bouncycastle ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0607-1 Rating: moderate References: #1072697 #1100694 Cross-References: CVE-2017-13098 CVE-2018-1000613 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for bouncycastle fixes the following issues: Version update to 1.60: * CVE-2018-1000613: Use of Externally-ControlledInput to Select Classes or Code (boo#1100694) * Release notes: http://www.bouncycastle.org/releasenotes.html Version update to 1.59: * CVE-2017-13098: Fix against Bleichenbacher oracle when not using the lightweight APIs (boo#1072697). * Release notes: http://www.bouncycastle.org/releasenotes.html Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-607=1 Package List: - openSUSE Leap 15.1 (noarch): bouncycastle-1.60-lp151.3.3.1 bouncycastle-javadoc-1.60-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2017-13098.html https://www.suse.com/security/cve/CVE-2018-1000613.html https://bugzilla.suse.com/1072697 https://bugzilla.suse.com/1100694

1 0

openSUSE-SU-2020:0606-1: moderate: Security update for squid
by opensuse-security＠opensuse.org 03 May '20

03 May '20

openSUSE Security Update: Security update for squid ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0606-1 Rating: moderate References: #1162687 #1162689 #1162691 Cross-References: CVE-2019-12528 CVE-2020-8449 CVE-2020-8450 CVE-2020-8517 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for squid to version 4.10 fixes the following issues: Security issues fixed: - CVE-2019-12528: Fixed an information disclosure flaw in the FTP gateway (bsc#1162689). - CVE-2020-8449: Fixed a buffer overflow when squid is acting as reverse-proxy (bsc#1162687). - CVE-2020-8450: Fixed a buffer overflow when squid is acting as reverse-proxy (bsc#1162687). - CVE-2020-8517: Fixed a buffer overflow in ext_lm_group_acl when processing NTLM Authentication credentials (bsc#1162691). Non-security issue fixed: - Improved cache handling with chunked responses. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-606=1 Package List: - openSUSE Leap 15.1 (x86_64): squid-4.10-lp151.2.14.1 squid-debuginfo-4.10-lp151.2.14.1 squid-debugsource-4.10-lp151.2.14.1 References: https://www.suse.com/security/cve/CVE-2019-12528.html https://www.suse.com/security/cve/CVE-2020-8449.html https://www.suse.com/security/cve/CVE-2020-8450.html https://www.suse.com/security/cve/CVE-2020-8517.html https://bugzilla.suse.com/1162687 https://bugzilla.suse.com/1162689 https://bugzilla.suse.com/1162691

1 0

openSUSE-RU-2020:0605-1: moderate: Recommended update for yast2-configuration-management
by maintenance＠opensuse.org 03 May '20

03 May '20

openSUSE Recommended Update: Recommended update for yast2-configuration-management ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0605-1 Rating: moderate References: #1168080 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-configuration-management fixes the following issues: - Fixes an issue where yast2-configuration-management complained about missing formulas even if there are other valid salt states available (bsc#1168080) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-605=1 Package List: - openSUSE Leap 15.1 (noarch): yast2-configuration-management-4.1.8-lp151.2.7.1 References: https://bugzilla.suse.com/1168080

1 0

openSUSE-SU-2020:0604-1: important: Security update for chromium
by opensuse-security＠opensuse.org 03 May '20

03 May '20

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0604-1 Rating: important References: #1170107 Cross-References: CVE-2020-0561 CVE-2020-6458 CVE-2020-6459 CVE-2020-6460 CVE-2020-6462 Affected Products: openSUSE Leap 15.1 openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for chromium fixes the following issues: Chromium was updated to 81.0.4044.129 (boo#1170107): - CVE-2020-0561: Fixed a use after free in storage - CVE-2020-6462: Fixed a use after free in task scheduling - CVE-2020-6459: Fixed a use after free in payments - CVE-2020-6460: Fixed an insufficient data validation in URL formatting - CVE-2020-6458: Fixed an out of bounds read and write in PDFium Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-604=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-604=1 Package List: - openSUSE Leap 15.1 (x86_64): chromedriver-81.0.4044.129-lp151.2.85.1 chromedriver-debuginfo-81.0.4044.129-lp151.2.85.1 chromium-81.0.4044.129-lp151.2.85.1 chromium-debuginfo-81.0.4044.129-lp151.2.85.1 chromium-debugsource-81.0.4044.129-lp151.2.85.1 - openSUSE Backports SLE-15-SP1 (x86_64): chromedriver-81.0.4044.129-bp151.3.75.1 chromedriver-debuginfo-81.0.4044.129-bp151.3.75.1 chromium-81.0.4044.129-bp151.3.75.1 chromium-debuginfo-81.0.4044.129-bp151.3.75.1 chromium-debugsource-81.0.4044.129-bp151.3.75.1 References: https://www.suse.com/security/cve/CVE-2020-0561.html https://www.suse.com/security/cve/CVE-2020-6458.html https://www.suse.com/security/cve/CVE-2020-6459.html https://www.suse.com/security/cve/CVE-2020-6460.html https://www.suse.com/security/cve/CVE-2020-6462.html https://bugzilla.suse.com/1170107

1 0

openSUSE-RU-2020:0603-1: moderate: Recommended update for tpm2.0-abrmd
by maintenance＠opensuse.org 02 May '20

02 May '20

openSUSE Recommended Update: Recommended update for tpm2.0-abrmd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0603-1 Rating: moderate References: #1166936 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for tpm2.0-abrmd fixes the following issue: - Solve a tpm2-tss-engine crash. (bsc#1166936) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-603=1 Package List: - openSUSE Leap 15.1 (x86_64): libtss2-tcti-tabrmd0-2.0.2-lp151.4.6.1 libtss2-tcti-tabrmd0-debuginfo-2.0.2-lp151.4.6.1 tpm2.0-abrmd-2.0.2-lp151.4.6.1 tpm2.0-abrmd-debuginfo-2.0.2-lp151.4.6.1 tpm2.0-abrmd-debugsource-2.0.2-lp151.4.6.1 tpm2.0-abrmd-devel-2.0.2-lp151.4.6.1 References: https://bugzilla.suse.com/1166936

1 0

openSUSE-SU-2020:0602-1: important: Security update for webkit2gtk3
by opensuse-security＠opensuse.org 02 May '20

02 May '20

openSUSE Security Update: Security update for webkit2gtk3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0602-1 Rating: important References: #1165528 #1169658 Cross-References: CVE-2020-10018 CVE-2020-11793 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for webkit2gtk3 to version 2.28.1 fixes the following issues: Security issues fixed: - CVE-2020-10018: Fixed a denial of service because the m_deferredFocusedNodeChange data structure was mishandled (bsc#1165528). - CVE-2020-11793: Fixed a potential arbitrary code execution caused by a use-after-free vulnerability (bsc#1169658). Non-security issues fixed: - Add API to enable Process Swap on (Cross-site) Navigation. - Add user messages API for the communication with the web extension. - Add support for same-site cookies. - Service workers are enabled by default. - Add support for Pointer Lock API. - Add flatpak sandbox support. - Make ondemand hardware acceleration policy never leave accelerated compositing mode. - Always use a light theme for rendering form controls. - Add about:gpu to show information about the graphics stack. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-602=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libjavascriptcoregtk-4_0-18-2.28.1-lp151.2.15.2 libjavascriptcoregtk-4_0-18-debuginfo-2.28.1-lp151.2.15.2 libwebkit2gtk-4_0-37-2.28.1-lp151.2.15.2 libwebkit2gtk-4_0-37-debuginfo-2.28.1-lp151.2.15.2 typelib-1_0-JavaScriptCore-4_0-2.28.1-lp151.2.15.2 typelib-1_0-WebKit2-4_0-2.28.1-lp151.2.15.2 typelib-1_0-WebKit2WebExtension-4_0-2.28.1-lp151.2.15.2 webkit-jsc-4-2.28.1-lp151.2.15.2 webkit-jsc-4-debuginfo-2.28.1-lp151.2.15.2 webkit2gtk-4_0-injected-bundles-2.28.1-lp151.2.15.2 webkit2gtk-4_0-injected-bundles-debuginfo-2.28.1-lp151.2.15.2 webkit2gtk3-debugsource-2.28.1-lp151.2.15.2 webkit2gtk3-devel-2.28.1-lp151.2.15.2 webkit2gtk3-minibrowser-2.28.1-lp151.2.15.2 webkit2gtk3-minibrowser-debuginfo-2.28.1-lp151.2.15.2 - openSUSE Leap 15.1 (noarch): libwebkit2gtk3-lang-2.28.1-lp151.2.15.2 - openSUSE Leap 15.1 (x86_64): libjavascriptcoregtk-4_0-18-32bit-2.28.1-lp151.2.15.2 libjavascriptcoregtk-4_0-18-32bit-debuginfo-2.28.1-lp151.2.15.2 libwebkit2gtk-4_0-37-32bit-2.28.1-lp151.2.15.2 libwebkit2gtk-4_0-37-32bit-debuginfo-2.28.1-lp151.2.15.2 References: https://www.suse.com/security/cve/CVE-2020-10018.html https://www.suse.com/security/cve/CVE-2020-11793.html https://bugzilla.suse.com/1165528 https://bugzilla.suse.com/1169658

1 0

openSUSE-SU-2020:0601-1: important: Security update for samba
by opensuse-security＠opensuse.org 02 May '20

02 May '20

openSUSE Security Update: Security update for samba ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0601-1 Rating: important References: #1167070 #1169473 #1169851 Cross-References: CVE-2020-10704 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update for samba fixes the following issues: Security issue fixed: - CVE-2020-10704: Fixed a stack overflow in the AD DC (C)LDAP server (bsc#1169851). Non-security issues fixed: - Fixed spnego fallback from kerberos to ntlmssp in smbd server (bsc#1169473). - Fixed warning messages for non root users using smbclient (bsc#1167070). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-601=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): ctdb-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 ctdb-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 ctdb-pcp-pmda-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 ctdb-pcp-pmda-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 ctdb-tests-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 ctdb-tests-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libdcerpc-binding0-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libdcerpc-binding0-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libdcerpc-devel-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libdcerpc-samr-devel-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libdcerpc-samr0-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libdcerpc-samr0-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libdcerpc0-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libdcerpc0-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libndr-devel-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libndr-krb5pac-devel-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libndr-krb5pac0-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libndr-krb5pac0-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libndr-nbt-devel-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libndr-nbt0-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libndr-nbt0-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libndr-standard-devel-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libndr-standard0-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libndr-standard0-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libndr0-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libndr0-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libnetapi-devel-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libnetapi0-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libnetapi0-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-credentials-devel-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-credentials0-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-credentials0-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-errors-devel-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-errors0-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-errors0-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-hostconfig-devel-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-hostconfig0-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-hostconfig0-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-passdb-devel-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-passdb0-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-passdb0-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-policy-devel-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-policy-python-devel-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-policy-python3-devel-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-policy0-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-policy0-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-policy0-python3-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-policy0-python3-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-util-devel-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-util0-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-util0-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamdb-devel-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamdb0-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamdb0-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsmbclient-devel-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsmbclient0-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsmbclient0-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsmbconf-devel-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsmbconf0-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsmbconf0-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsmbldap-devel-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsmbldap2-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsmbldap2-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libtevent-util-devel-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libtevent-util0-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libtevent-util0-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libwbclient-devel-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libwbclient0-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libwbclient0-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-ad-dc-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-ad-dc-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-client-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-client-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-core-devel-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-debugsource-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-dsdb-modules-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-dsdb-modules-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-libs-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-libs-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-libs-python-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-libs-python-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-libs-python3-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-libs-python3-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-pidl-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-python-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-python-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-python3-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-python3-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-test-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-test-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-winbind-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-winbind-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 - openSUSE Leap 15.1 (x86_64): libdcerpc-binding0-32bit-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libdcerpc-binding0-32bit-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libdcerpc-samr0-32bit-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libdcerpc-samr0-32bit-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libdcerpc0-32bit-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libdcerpc0-32bit-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libndr-krb5pac0-32bit-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libndr-krb5pac0-32bit-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libndr-nbt0-32bit-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libndr-nbt0-32bit-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libndr-standard0-32bit-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libndr-standard0-32bit-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libndr0-32bit-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libndr0-32bit-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libnetapi0-32bit-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libnetapi0-32bit-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-credentials0-32bit-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-credentials0-32bit-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-errors0-32bit-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-errors0-32bit-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-hostconfig0-32bit-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-hostconfig0-32bit-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-passdb0-32bit-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-passdb0-32bit-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-policy0-32bit-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-policy0-32bit-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-policy0-python3-32bit-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-policy0-python3-32bit-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-util0-32bit-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamba-util0-32bit-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamdb0-32bit-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsamdb0-32bit-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsmbclient0-32bit-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsmbclient0-32bit-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsmbconf0-32bit-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsmbconf0-32bit-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsmbldap2-32bit-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libsmbldap2-32bit-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libtevent-util0-32bit-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libtevent-util0-32bit-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libwbclient0-32bit-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 libwbclient0-32bit-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-ad-dc-32bit-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-ad-dc-32bit-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-ceph-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-ceph-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-client-32bit-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-client-32bit-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-libs-32bit-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-libs-32bit-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-libs-python-32bit-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-libs-python-32bit-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-libs-python3-32bit-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-libs-python3-32bit-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-winbind-32bit-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 samba-winbind-32bit-debuginfo-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 - openSUSE Leap 15.1 (noarch): samba-doc-4.9.5+git.317.6d82fb3918b-lp151.2.24.1 References: https://www.suse.com/security/cve/CVE-2020-10704.html https://bugzilla.suse.com/1167070 https://bugzilla.suse.com/1169473 https://bugzilla.suse.com/1169851

1 0

openSUSE-RU-2020:0579-1: important: Recommended update for pacemaker
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for pacemaker ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0579-1 Rating: important References: #1154881 #1155290 #1160410 #1168771 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for pacemaker fixes the following issues: - libcrmcluster: use uint64_t type for corosync ringid (membership id) when updating node state (bsc#1168771) - get ready for implicit -fno-common with upcoming GCC 10 (bsc#1160410) - attrd: properly declare global variables as extern in header (bsc#1160410) - scheduler: make sure cluster-wide maintenance-mode=true overrides per-resource settings (bsc#1154881) - tools: Clear all prefer constraints when performing a move (bsc#1155290) - tools: Fix moving a resource with a lifetime constraint (bsc#1155290) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-579=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libpacemaker-devel-2.0.1+20190417.13d370ca9-lp151.2.9.2 libpacemaker3-2.0.1+20190417.13d370ca9-lp151.2.9.2 libpacemaker3-debuginfo-2.0.1+20190417.13d370ca9-lp151.2.9.2 pacemaker-2.0.1+20190417.13d370ca9-lp151.2.9.2 pacemaker-cli-2.0.1+20190417.13d370ca9-lp151.2.9.2 pacemaker-cli-debuginfo-2.0.1+20190417.13d370ca9-lp151.2.9.2 pacemaker-debuginfo-2.0.1+20190417.13d370ca9-lp151.2.9.2 pacemaker-debugsource-2.0.1+20190417.13d370ca9-lp151.2.9.2 pacemaker-remote-2.0.1+20190417.13d370ca9-lp151.2.9.2 pacemaker-remote-debuginfo-2.0.1+20190417.13d370ca9-lp151.2.9.2 - openSUSE Leap 15.1 (noarch): pacemaker-cts-2.0.1+20190417.13d370ca9-lp151.2.9.2 References: https://bugzilla.suse.com/1154881 https://bugzilla.suse.com/1155290 https://bugzilla.suse.com/1160410 https://bugzilla.suse.com/1168771

1 0

openSUSE-SU-2020:0599-1: important: Security update for xen
by opensuse-security＠opensuse.org 01 May '20

01 May '20

openSUSE Security Update: Security update for xen ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0599-1 Rating: important References: #1027519 #1134506 #1155200 #1157490 #1160932 #1165206 #1167007 #1167152 #1168140 #1168142 #1168143 #1169392 Cross-References: CVE-2020-11739 CVE-2020-11740 CVE-2020-11741 CVE-2020-11742 CVE-2020-11743 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves 5 vulnerabilities and has 7 fixes is now available. Description: This update for xen fixes the following issues: Security issues fixed: - CVE-2020-11742: Bad continuation handling in GNTTABOP_copy (bsc#1169392). - CVE-2020-11740, CVE-2020-11741: xen: XSA-313 multiple xenoprof issues (bsc#1168140). - CVE-2020-11739: Missing memory barriers in read-write unlock paths (bsc#1168142). - CVE-2020-11743: Bad error path in GNTTABOP_map_grant (bsc#1168143). - arm: a CPU may speculate past the ERET instruction (bsc#1160932). Non-security issues fixed: - Xenstored Crashed during VM install (bsc#1167152) - DomU hang: soft lockup CPU #0 stuck under high load (bsc#1165206, bsc#1134506) - Update API compatibility versions, fixes issues for libvirt. (bsc#1167007, bsc#1157490) - aacraid blocks xen commands (bsc#1155200) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-599=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): xen-debugsource-4.12.2_04-lp151.2.15.1 xen-devel-4.12.2_04-lp151.2.15.1 xen-libs-4.12.2_04-lp151.2.15.1 xen-libs-debuginfo-4.12.2_04-lp151.2.15.1 xen-tools-domU-4.12.2_04-lp151.2.15.1 xen-tools-domU-debuginfo-4.12.2_04-lp151.2.15.1 - openSUSE Leap 15.1 (x86_64): xen-4.12.2_04-lp151.2.15.1 xen-doc-html-4.12.2_04-lp151.2.15.1 xen-libs-32bit-4.12.2_04-lp151.2.15.1 xen-libs-32bit-debuginfo-4.12.2_04-lp151.2.15.1 xen-tools-4.12.2_04-lp151.2.15.1 xen-tools-debuginfo-4.12.2_04-lp151.2.15.1 References: https://www.suse.com/security/cve/CVE-2020-11739.html https://www.suse.com/security/cve/CVE-2020-11740.html https://www.suse.com/security/cve/CVE-2020-11741.html https://www.suse.com/security/cve/CVE-2020-11742.html https://www.suse.com/security/cve/CVE-2020-11743.html https://bugzilla.suse.com/1027519 https://bugzilla.suse.com/1134506 https://bugzilla.suse.com/1155200 https://bugzilla.suse.com/1157490 https://bugzilla.suse.com/1160932 https://bugzilla.suse.com/1165206 https://bugzilla.suse.com/1167007 https://bugzilla.suse.com/1167152 https://bugzilla.suse.com/1168140 https://bugzilla.suse.com/1168142 https://bugzilla.suse.com/1168143 https://bugzilla.suse.com/1169392

1 0

openSUSE-RU-2020:0584-1: moderate: Recommended update for python-scandir
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for python-scandir ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0584-1 Rating: moderate References: #1122668 #1167207 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for python-scandir fixes the following issues: - Include the package in SLE-12 (fate#326950, bsc#1122668, jsc#PM-1447) - Replace %fdupes -s with plain %fdupes using hardlinks instead of softlinks. - Update to 1.10.0: * remove support for pyton 2.6 and <3.3 - Allow building on Python 3.5+. (bsc#1167207) It is useful for testing and it should exist when packages list it as a runtime dependency, and it will add backports of enhancements to scandir since Python 3.5. This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-584=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): python-scandir-debuginfo-1.10.0-lp151.2.3.1 python-scandir-debugsource-1.10.0-lp151.2.3.1 python2-scandir-1.10.0-lp151.2.3.1 python2-scandir-debuginfo-1.10.0-lp151.2.3.1 python3-scandir-1.10.0-lp151.2.3.1 python3-scandir-debuginfo-1.10.0-lp151.2.3.1 References: https://bugzilla.suse.com/1122668 https://bugzilla.suse.com/1167207

1 0

openSUSE-SU-2020:0585-1: important: Security update for resource-agents
by opensuse-security＠opensuse.org 01 May '20

01 May '20

openSUSE Security Update: Security update for resource-agents ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0585-1 Rating: important References: #1021689 #1146687 #1146690 #1146691 #1146692 #1146766 #1146776 #1146784 #1146785 #1146787 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for resource-agents fixes the following issues: - Fixed multiple vulnerabilities related to unsafe tempfile usage. (bsc#1146690 bsc#1146691 bsc#1146692 bsc#1146766 bsc#1146776 bsc#1146784 bsc#1146785 bsc#1146787) - Fixed issues where the ocfmon user was created with a default password (bsc#1021689, bsc#1146687). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-585=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): ldirectord-4.3.0184.6ee15eb2-lp151.3.18.1 resource-agents-4.3.0184.6ee15eb2-lp151.3.18.1 resource-agents-debuginfo-4.3.0184.6ee15eb2-lp151.3.18.1 resource-agents-debugsource-4.3.0184.6ee15eb2-lp151.3.18.1 - openSUSE Leap 15.1 (noarch): monitoring-plugins-metadata-4.3.0184.6ee15eb2-lp151.3.18.1 References: https://bugzilla.suse.com/1021689 https://bugzilla.suse.com/1146687 https://bugzilla.suse.com/1146690 https://bugzilla.suse.com/1146691 https://bugzilla.suse.com/1146692 https://bugzilla.suse.com/1146766 https://bugzilla.suse.com/1146776 https://bugzilla.suse.com/1146784 https://bugzilla.suse.com/1146785 https://bugzilla.suse.com/1146787

1 0

openSUSE-RU-2020:0588-1: moderate: Recommended update for strongswan
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for strongswan ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0588-1 Rating: moderate References: #1164493 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for strongswan fixes the following issue: - Resolve multiple definition of swanctl_dir (bsc#1164493) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-588=1 Package List: - openSUSE Leap 15.1 (noarch): strongswan-doc-5.8.2-lp151.4.9.1 - openSUSE Leap 15.1 (x86_64): strongswan-5.8.2-lp151.4.9.1 strongswan-debuginfo-5.8.2-lp151.4.9.1 strongswan-debugsource-5.8.2-lp151.4.9.1 strongswan-hmac-5.8.2-lp151.4.9.1 strongswan-ipsec-5.8.2-lp151.4.9.1 strongswan-ipsec-debuginfo-5.8.2-lp151.4.9.1 strongswan-libs0-5.8.2-lp151.4.9.1 strongswan-libs0-debuginfo-5.8.2-lp151.4.9.1 strongswan-mysql-5.8.2-lp151.4.9.1 strongswan-mysql-debuginfo-5.8.2-lp151.4.9.1 strongswan-nm-5.8.2-lp151.4.9.1 strongswan-nm-debuginfo-5.8.2-lp151.4.9.1 strongswan-sqlite-5.8.2-lp151.4.9.1 strongswan-sqlite-debuginfo-5.8.2-lp151.4.9.1 References: https://bugzilla.suse.com/1164493

1 0

openSUSE-SU-2020:0586-1: moderate: Security update for ruby2.5
by opensuse-security＠opensuse.org 01 May '20

01 May '20

openSUSE Security Update: Security update for ruby2.5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0586-1 Rating: moderate References: #1167244 #1168938 Cross-References: CVE-2020-10663 CVE-2020-10933 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for ruby2.5 to version 2.5.8 fixes the following issues: - CVE-2020-10663: Unsafe Object Creation Vulnerability in JSON (bsc#1167244). - CVE-2020-10933: Heap exposure vulnerability in the socket library (bsc#1168938). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-586=1 Package List: - openSUSE Leap 15.1 (x86_64): libruby2_5-2_5-2.5.8-lp151.4.9.1 libruby2_5-2_5-debuginfo-2.5.8-lp151.4.9.1 ruby2.5-2.5.8-lp151.4.9.1 ruby2.5-debuginfo-2.5.8-lp151.4.9.1 ruby2.5-debugsource-2.5.8-lp151.4.9.1 ruby2.5-devel-2.5.8-lp151.4.9.1 ruby2.5-devel-extra-2.5.8-lp151.4.9.1 ruby2.5-doc-2.5.8-lp151.4.9.1 ruby2.5-stdlib-2.5.8-lp151.4.9.1 ruby2.5-stdlib-debuginfo-2.5.8-lp151.4.9.1 - openSUSE Leap 15.1 (noarch): ruby2.5-doc-ri-2.5.8-lp151.4.9.1 References: https://www.suse.com/security/cve/CVE-2020-10663.html https://www.suse.com/security/cve/CVE-2020-10933.html https://bugzilla.suse.com/1167244 https://bugzilla.suse.com/1168938

1 0

openSUSE-RU-2020:0568-1: moderate: Recommended update for go1.11
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for go1.11 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0568-1 Rating: moderate References: #1167874 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for go1.11 fixes the following issue: - ARMv7 build hangs with gcc7-go on Leap 15.2, so use go1.4 (bsc#1167874) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-568=1 Package List: - openSUSE Leap 15.1 (x86_64): go1.11-1.11.13-lp151.2.15.1 go1.11-doc-1.11.13-lp151.2.15.1 go1.11-race-1.11.13-lp151.2.15.1 References: https://bugzilla.suse.com/1167874

1 0

openSUSE-RU-2020:0592-1: moderate: Recommended update for ucode-intel
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for ucode-intel ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0592-1 Rating: moderate References: #1169570 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ucode-intel fixes the following issues: - updated Intel Skylake microcode to the current version. (bsc#1169570) - 02000064->02006901 This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-592=1 Package List: - openSUSE Leap 15.1 (x86_64): ucode-intel-20191115-lp151.2.21.1 References: https://bugzilla.suse.com/1169570

1 0

openSUSE-RU-2020:0589-1: important: Recommended update for supportutils
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for supportutils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0589-1 Rating: important References: #1162539 #1165475 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for supportutils fixes the following issues: - Replaced Novell with SUSE FTP servers (bsc#1165475) - Added missed Power collection (bsc#1162539) - Added core file validation (bsc#1166126) - Changed filename prefixes from nts_ to scc_ referencing the SUSE Customer Center (SLE-8702, SLE-6762) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-589=1 Package List: - openSUSE Leap 15.1 (noarch): supportutils-3.1.9-lp151.2.12.1 References: https://bugzilla.suse.com/1162539 https://bugzilla.suse.com/1165475

1 0

openSUSE-RU-2020:0595-1: moderate: Recommended update for inxi
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for inxi ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0595-1 Rating: moderate References: Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for inxi fixes the following issues: inxi was update to version 3.1.00: * See /usr/share/doc/packages/inxi/inxi.changelog Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-595=1 Package List: - openSUSE Leap 15.1 (noarch): inxi-3.1.00-lp151.3.6.1 References:

1 0

openSUSE-RU-2020:0590-1: moderate: Recommended update for suse-build-key
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for suse-build-key ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0590-1 Rating: moderate References: #1170347 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for suse-build-key fixes the following issues: - add a /usr/share/container-keys/ directory for GPG based Container verification. - Add the SUSE build key as "suse-container-key.asc". (PM-1845 bsc#1170347) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-590=1 Package List: - openSUSE Leap 15.1 (noarch): suse-build-key-12.0-lp151.5.6.1 References: https://bugzilla.suse.com/1170347

1 0

openSUSE-RU-2020:0571-1: moderate: Recommended update for grub2
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for grub2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0571-1 Rating: moderate References: #1166409 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for grub2 fixes the following issues: - Implement support searching for specific config files for netboot. (bsc#1166409) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-571=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): grub2-2.02-lp151.21.15.1 grub2-branding-upstream-2.02-lp151.21.15.1 grub2-debuginfo-2.02-lp151.21.15.1 grub2-debugsource-2.02-lp151.21.15.1 - openSUSE Leap 15.1 (noarch): grub2-i386-efi-2.02-lp151.21.15.1 grub2-i386-pc-2.02-lp151.21.15.1 grub2-i386-xen-2.02-lp151.21.15.1 grub2-snapper-plugin-2.02-lp151.21.15.1 grub2-systemd-sleep-plugin-2.02-lp151.21.15.1 grub2-x86_64-efi-2.02-lp151.21.15.1 grub2-x86_64-xen-2.02-lp151.21.15.1 References: https://bugzilla.suse.com/1166409

1 0

openSUSE-RU-2020:0600-1: important: Recommended update for yast2-installation
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for yast2-installation ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0600-1 Rating: important References: #1169017 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-installation fixes the following issues: - Fix for detecting and configuring network with firstboot. (bsc#1169017) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-600=1 Package List: - openSUSE Leap 15.1 (noarch): yast2-installation-4.1.49-lp151.2.12.1 References: https://bugzilla.suse.com/1169017

1 0

openSUSE-RU-2020:0596-1: moderate: Recommended update for sar2
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for sar2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0596-1 Rating: moderate References: Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for sar2 fixes the following issues: Update to version 2.4.0: * Improvements to the Joystick system, adding new Rudder+Brakes mode, moving to libSDL2 and cleaning up unused menu settings. * Fix lagging when aircraft is landed. * Honor wheel brake coefficient. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-596=1 Package List: - openSUSE Leap 15.1 (noarch): sar2-data-2.4.0-lp151.3.3.1 - openSUSE Leap 15.1 (x86_64): sar2-2.4.0-lp151.3.3.1 sar2-debuginfo-2.4.0-lp151.3.3.1 sar2-debugsource-2.4.0-lp151.3.3.1 References:

1 0

openSUSE-RU-2020:0574-1: moderate: Recommended update for munge
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for munge ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0574-1 Rating: moderate References: #1167968 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for munge fixes the following issues: - Update from version 0.5.13 to version 0.5.14 * Added mungekey command for key generation via HKDF. * Added negative caching of user lookups for processing supplementary groups. * Added munged --origin and --stop cmdline opt. * Added unmunge --numeric cmdline opt. * Added several new configuration options. * Added systemd EnvironmentFile to set sysconfig options. * Added systemd RuntimeDirectory to replace tmpfiles.d conf. * Changed logging of non-existent users to only log once for a given user. * Changed default name of munged seedfile. * Fixed pidfile corruption when starting new daemon while socket still in use. * Fixed munged signal handlers to be async-signal-safe. * Fixed "Logging stopped due to error" behavior for transient errors. * Fixed misleading "Lockfile not found" error message. * Fixed conversion-specifier / argument mismatch in error message. * Removed autotools-generated files from version control. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-574=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libmunge2-0.5.14-lp151.4.9.1 libmunge2-debuginfo-0.5.14-lp151.4.9.1 munge-0.5.14-lp151.4.9.1 munge-debuginfo-0.5.14-lp151.4.9.1 munge-debugsource-0.5.14-lp151.4.9.1 munge-devel-0.5.14-lp151.4.9.1 - openSUSE Leap 15.1 (x86_64): libmunge2-32bit-0.5.14-lp151.4.9.1 libmunge2-32bit-debuginfo-0.5.14-lp151.4.9.1 munge-devel-32bit-0.5.14-lp151.4.9.1 References: https://bugzilla.suse.com/1167968

1 0

openSUSE-RU-2020:0572-1: moderate: Recommended update for libgcrypt
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for libgcrypt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0572-1 Rating: moderate References: #1165539 #1169569 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for libgcrypt fixes the following issues: This update for libgcrypt fixes the following issues: - FIPS: Switch the PCT to use the new signature operation (bsc#1165539) - FIPS: Verify that the generated signature and the original input differ in test_keys function for RSA, DSA and ECC (bsc#1165539) - Add zero-padding when qx and qy have different lengths when assembling the Q point from affine coordinates. - Ship the FIPS checksum file in the shared library package and create a separate trigger file for the FIPS selftests (bsc#1169569) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-572=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libgcrypt-cavs-1.8.2-lp151.9.19.1 libgcrypt-cavs-debuginfo-1.8.2-lp151.9.19.1 libgcrypt-debugsource-1.8.2-lp151.9.19.1 libgcrypt-devel-1.8.2-lp151.9.19.1 libgcrypt-devel-debuginfo-1.8.2-lp151.9.19.1 libgcrypt20-1.8.2-lp151.9.19.1 libgcrypt20-debuginfo-1.8.2-lp151.9.19.1 libgcrypt20-hmac-1.8.2-lp151.9.19.1 - openSUSE Leap 15.1 (x86_64): libgcrypt-devel-32bit-1.8.2-lp151.9.19.1 libgcrypt-devel-32bit-debuginfo-1.8.2-lp151.9.19.1 libgcrypt20-32bit-1.8.2-lp151.9.19.1 libgcrypt20-32bit-debuginfo-1.8.2-lp151.9.19.1 libgcrypt20-hmac-32bit-1.8.2-lp151.9.19.1 References: https://bugzilla.suse.com/1165539 https://bugzilla.suse.com/1169569

1 0

openSUSE-SU-2020:0598-1: moderate: Security update for git
by opensuse-security＠opensuse.org 01 May '20

01 May '20

openSUSE Security Update: Security update for git ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0598-1 Rating: moderate References: #1063412 #1095218 #1095219 #1110949 #1112230 #1114225 #1132350 #1149792 #1156651 #1158785 #1158787 #1158788 #1158789 #1158790 #1158791 #1158792 #1158793 #1158795 #1167890 #1168930 #1169605 #1169786 #1169936 Cross-References: CVE-2017-15298 CVE-2018-11233 CVE-2018-11235 CVE-2018-17456 CVE-2019-1348 CVE-2019-1349 CVE-2019-1350 CVE-2019-1351 CVE-2019-1352 CVE-2019-1353 CVE-2019-1354 CVE-2019-1387 CVE-2019-19604 CVE-2020-11008 CVE-2020-5260 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves 15 vulnerabilities and has 8 fixes is now available. Description: This update for git fixes the following issues: Security issues fixed: * CVE-2020-11008: Specially crafted URLs may have tricked the credentials helper to providing credential information that is not appropriate for the protocol in use and host being contacted (bsc#1169936) git was updated to 2.26.1 (bsc#1169786, jsc#ECO-1628, bsc#1149792) - Fix git-daemon not starting after conversion from sysvinit to systemd service (bsc#1169605). * CVE-2020-5260: Specially crafted URLs with newline characters could have been used to make the Git client to send credential information for a wrong host to the attacker's site bsc#1168930 git 2.26.0 (bsc#1167890, jsc#SLE-11608): * "git rebase" now uses a different backend that is based on the 'merge' machinery by default. The 'rebase.backend' configuration variable reverts to old behaviour when set to 'apply' * Improved handling of sparse checkouts * Improvements to many commands and internal features git 2.25.2: * bug fixes to various subcommands in specific operations git 2.25.1: * "git commit" now honors advise.statusHints * various updates, bug fixes and documentation updates git 2.25.0 * The branch description ("git branch --edit-description") has been used to fill the body of the cover letters by the format-patch command; this has been enhanced so that the subject can also be filled. * A few commands learned to take the pathspec from the standard input or a named file, instead of taking it as the command line arguments, with the "--pathspec-from-file" option. * Test updates to prepare for SHA-2 transition continues. * Redo "git name-rev" to avoid recursive calls. * When all files from some subdirectory were renamed to the root directory, the directory rename heuristics would fail to detect that as a rename/merge of the subdirectory to the root directory, which has been corrected. * HTTP transport had possible allocator/deallocator mismatch, which has been corrected. git 2.24.1: * CVE-2019-1348: The --export-marks option of fast-import is exposed also via the in-stream command feature export-marks=... and it allows overwriting arbitrary paths (bsc#1158785) * CVE-2019-1349: on Windows, when submodules are cloned recursively, under certain circumstances Git could be fooled into using the same Git directory twice (bsc#1158787) * CVE-2019-1350: Incorrect quoting of command-line arguments allowed remote code execution during a recursive clone in conjunction with SSH URLs (bsc#1158788) * CVE-2019-1351: on Windows mistakes drive letters outside of the US-English alphabet as relative paths (bsc#1158789) * CVE-2019-1352: on Windows was unaware of NTFS Alternate Data Streams (bsc#1158790) * CVE-2019-1353: when run in the Windows Subsystem for Linux while accessing a working directory on a regular Windows drive, none of the NTFS protections were active (bsc#1158791) * CVE-2019-1354: on Windows refuses to write tracked files with filenames that contain backslashes (bsc#1158792) * CVE-2019-1387: Recursive clones vulnerability that is caused by too-lax validation of submodule names, allowing very targeted attacks via remote code execution in recursive clones (bsc#1158793) * CVE-2019-19604: a recursive clone followed by a submodule update could execute code contained within the repository without the user explicitly having asked for that (bsc#1158795) git 2.24.0 * The command line parser learned "--end-of-options" notation. * A mechanism to affect the default setting for a (related) group of configuration variables is introduced. * "git fetch" learned "--set-upstream" option to help those who first clone from their private fork they intend to push to, add the true upstream via "git remote add" and then "git fetch" from it. * fixes and improvements to UI, workflow and features, bash completion fixes git 2.23.0: * The "--base" option of "format-patch" computed the patch-ids for prerequisite patches in an unstable way, which has been updated to compute in a way that is compatible with "git patch-id --stable". * The "git log" command by default behaves as if the --mailmap option was given. * fixes and improvements to UI, workflow and features git 2.22.1 * A relative pathname given to "git init --template=<path> <repo>" ought to be relative to the directory "git init" gets invoked in, but it instead was made relative to the repository, which has been corrected. * "git worktree add" used to fail when another worktree connected to the same repository was corrupt, which has been corrected. * "git am -i --resolved" segfaulted after trying to see a commit as if it were a tree, which has been corrected. * "git merge --squash" is designed to update the working tree and the index without creating the commit, and this cannot be countermanded by adding the "--commit" option; the command now refuses to work when both options are given. * Update to Unicode 12.1 width table. * "git request-pull" learned to warn when the ref we ask them to pull from in the local repository and in the published repository are different. * "git fetch" into a lazy clone forgot to fetch base objects that are necessary to complete delta in a thin packfile, which has been corrected. * The URL decoding code has been updated to avoid going past the end of the string while parsing %-<hex>-<hex> sequence. * "git clean" silently skipped a path when it cannot lstat() it; now it gives a warning. * "git rm" to resolve a conflicted path leaked an internal message "needs merge" before actually removing the path, which was confusing. This has been corrected. * Many more bugfixes and code cleanups. - removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by firewalld. - partial fix for git instaweb giving 500 error (bsc#1112230) git 2.22.0 * The filter specification "--filter=sparse:path=<path>" used to create a lazy/partial clone has been removed. Using a blob that is part of the project as sparse specification is still supported with the "--filter=sparse:oid=<blob>" option * "git checkout --no-overlay" can be used to trigger a new mode of checking out paths out of the tree-ish, that allows paths that match the pathspec that are in the current index and working tree and are not in the tree-ish. * Four new configuration variables {author,committer}.{name,email} have been introduced to override user.{name,email} in more specific cases. * "git branch" learned a new subcommand "--show-current". * The command line completion (in contrib/) has been taught to complete more subcommand parameters. * The completion helper code now pays attention to repository-local configuration (when available), which allows --list-cmds to honour a repository specific setting of completion.commands, for example. * The list of conflicted paths shown in the editor while concluding a conflicted merge was shown above the scissors line when the clean-up mode is set to "scissors", even though it was commented out just like the list of updated paths and other information to help the user explain the merge better. * "git rebase" that was reimplemented in C did not set ORIG_HEAD correctly, which has been corrected. * "git worktree add" used to do a "find an available name with stat and then mkdir", which is race-prone. This has been fixed by using mkdir and reacting to EEXIST in a loop. - Move to DocBook 5.x. Asciidoctor 2.x no longer supports the legacy DocBook 4.5 format. - update git-web AppArmor profile for bash and tar usrMerge (bsc#1132350) git 2.21.0 * Historically, the "-m" (mainline) option can only be used for "git cherry-pick" and "git revert" when working with a merge commit. This version of Git no longer warns or errors out when working with a single-parent commit, as long as the argument to the "-m" option is 1 (i.e. it has only one parent, and the request is to pick or revert relative to that first parent). Scripts that relied on the behaviour may get broken with this change. * Small fixes and features for fast-export and fast-import. * The "http.version" configuration variable can be used with recent enough versions of cURL library to force the version of HTTP used to talk when fetching and pushing. * "git push $there $src:$dst" rejects when $dst is not a fully qualified refname and it is not clear what the end user meant. * Update "git multimail" from the upstream. * A new date format "--date=human" that morphs its output depending on how far the time is from the current time has been introduced. "--date=auto:human" can be used to use this new format (or any existing format) when the output is going to the pager or to the terminal, and otherwise the default format. - Fix worktree creation race (bsc#1114225). - add shadow build dependency to the -daemon subpackage. git 2.20.1: * portability fixes * "git help -a" did not work well when an overly long alias was defined * no longer squelched an error message when the run_command API failed to run a missing command git 2.20.0 * "git help -a" now gives verbose output (same as "git help -av"). Those who want the old output may say "git help --no-verbose -a".. * "git send-email" learned to grab address-looking string on any trailer whose name ends with "-by". * "git format-patch" learned new "--interdiff" and "--range-diff" options to explain the difference between this version and the previous attempt in the cover letter (or after the three-dashes as a comment). * Developer builds now use -Wunused-function compilation option. * Fix a bug in which the same path could be registered under multiple worktree entries if the path was missing (for instance, was removed manually). Also, as a convenience, expand the number of cases in which --force is applicable. * The overly large Documentation/config.txt file have been split into million little pieces. This potentially allows each individual piece to be included into the manual page of the command it affects more easily. * Malformed or crafted data in packstream can make our code attempt to read or write past the allocated buffer and abort, instead of reporting an error, which has been fixed. * Fix for a long-standing bug that leaves the index file corrupt when it shrinks during a partial commit. * "git merge" and "git pull" that merges into an unborn branch used to completely ignore "--verify-signatures", which has been corrected. * ...and much more features and fixes git 2.19.2: * various bug fixes for multiple subcommands and operations git 2.19.1: * CVE-2018-17456: Specially crafted .gitmodules files may have allowed arbitrary code execution when the repository is cloned with --recurse-submodules (bsc#1110949) git 2.19.0: * "git diff" compares the index and the working tree. For paths added with intent-to-add bit, the command shows the full contents of them as added, but the paths themselves were not marked as new files. They are now shown as new by default. * "git apply" learned the "--intent-to-add" option so that an otherwise working-tree-only application of a patch will add new paths to the index marked with the "intent-to-add" bit. * "git grep" learned the "--column" option that gives not just the line number but the column number of the hit. * The "-l" option in "git branch -l" is an unfortunate short-hand for "--create-reflog", but many users, both old and new, somehow expect it to be something else, perhaps "--list". This step warns when "-l" is used as a short-hand for "--create-reflog" and warns about the future repurposing of the it when it is used. * The userdiff pattern for .php has been updated. * The content-transfer-encoding of the message "git send-email" sends out by default was 8bit, which can cause trouble when there is an overlong line to bust RFC 5322/2822 limit. A new option 'auto' to automatically switch to quoted-printable when there is such a line in the payload has been introduced and is made the default. * "git checkout" and "git worktree add" learned to honor checkout.defaultRemote when auto-vivifying a local branch out of a remote tracking branch in a repository with multiple remotes that have tracking branches that share the same names. (merge 8d7b558bae ab/checkout-default-remote later to maint). * "git grep" learned the "--only-matching" option. * "git rebase --rebase-merges" mode now handles octopus merges as well. * Add a server-side knob to skip commits in exponential/fibbonacci stride in an attempt to cover wider swath of history with a smaller number of iterations, potentially accepting a larger packfile transfer, instead of going back one commit a time during common ancestor discovery during the "git fetch" transaction. (merge 42cc7485a2 jt/fetch-negotiator-skipping later to maint). * A new configuration variable core.usereplacerefs has been added, primarily to help server installations that want to ignore the replace mechanism altogether. * Teach "git tag -s" etc. a few configuration variables (gpg.format that can be set to "openpgp" or "x509", and gpg.<format>.program that is used to specify what program to use to deal with the format) to allow x.509 certs with CMS via "gpgsm" to be used instead of openpgp via "gnupg". * Many more strings are prepared for l10n. * "git p4 submit" learns to ask its own pre-submit hook if it should continue with submitting. * The test performed at the receiving end of "git push" to prevent bad objects from entering repository can be customized via receive.fsck.* configuration variables; we now have gained a counterpart to do the same on the "git fetch" side, with fetch.fsck.* configuration variables. * "git pull --rebase=interactive" learned "i" as a short-hand for "interactive". * "git instaweb" has been adjusted to run better with newer Apache on RedHat based distros. * "git range-diff" is a reimplementation of "git tbdiff" that lets us compare individual patches in two iterations of a topic. * The sideband code learned to optionally paint selected keywords at the beginning of incoming lines on the receiving end. * "git branch --list" learned to take the default sort order from the 'branch.sort' configuration variable, just like "git tag --list" pays attention to 'tag.sort'. * "git worktree" command learned "--quiet" option to make it less verbose. git 2.18.0: * improvements to rename detection logic * When built with more recent cURL, GIT_SSL_VERSION can now specify "tlsv1.3" as its value. * "git mergetools" learned talking to guiffy. * various other workflow improvements and fixes * performance improvements and other developer visible fixes git 2.17.1 * Submodule "names" come from the untrusted .gitmodules file, but we blindly append them to $GIT_DIR/modules to create our on-disk repo paths. This means you can do bad things by putting "../" into the name. We now enforce some rules for submodule names which will cause Git to ignore these malicious names (CVE-2018-11235, bsc#1095219) * It was possible to trick the code that sanity-checks paths on NTFS into reading random piece of memory (CVE-2018-11233, bsc#1095218) * Support on the server side to reject pushes to repositories that attempt to create such problematic .gitmodules file etc. as tracked contents, to help hosting sites protect their customers by preventing malicious contents from spreading. git 2.17.0: * "diff" family of commands learned "--find-object=<object-id>" option to limit the findings to changes that involve the named object. * "git format-patch" learned to give 72-cols to diffstat, which is consistent with other line length limits the subcommand uses for its output meant for e-mails. * The log from "git daemon" can be redirected with a new option; one relevant use case is to send the log to standard error (instead of syslog) when running it from inetd. * "git rebase" learned to take "--allow-empty-message" option. * "git am" has learned the "--quit" option, in addition to the existing "--abort" option; having the pair mirrors a few other commands like "rebase" and "cherry-pick". * "git worktree add" learned to run the post-checkout hook, just like "git clone" runs it upon the initial checkout. * "git tag" learned an explicit "--edit" option that allows the message given via "-m" and "-F" to be further edited. * "git fetch --prune-tags" may be used as a handy short-hand for getting rid of stale tags that are locally held. * The new "--show-current-patch" option gives an end-user facing way to get the diff being applied when "git rebase" (and "git am") stops with a conflict. * "git add -p" used to offer "/" (look for a matching hunk) as a choice, even there was only one hunk, which has been corrected. Also the single-key help is now given only for keys that are enabled (e.g. help for '/' won't be shown when there is only one hunk). * Since Git 1.7.9, "git merge" defaulted to --no-ff (i.e. even when the side branch being merged is a descendant of the current commit, create a merge commit instead of fast-forwarding) when merging a tag object. This was appropriate default for integrators who pull signed tags from their downstream contributors, but caused an unnecessary merges when used by downstream contributors who habitually "catch up" their topic branches with tagged releases from the upstream. Update "git merge" to default to --no-ff only when merging a tag object that does *not* sit at its usual place in refs/tags/ hierarchy, and allow fast-forwarding otherwise, to mitigate the problem. * "git status" can spend a lot of cycles to compute the relation between the current branch and its upstream, which can now be disabled with "--no-ahead-behind" option. * "git diff" and friends learned funcname patterns for Go language source files. * "git send-email" learned "--reply-to=<address>" option. * Funcname pattern used for C# now recognizes "async" keyword. * In a way similar to how "git tag" learned to honor the pager setting only in the list mode, "git config" learned to ignore the pager setting when it is used for setting values (i.e. when the purpose of the operation is not to "show"). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-598=1 Package List: - openSUSE Leap 15.1 (x86_64): git-2.26.1-lp151.4.9.1 git-arch-2.26.1-lp151.4.9.1 git-core-2.26.1-lp151.4.9.1 git-core-debuginfo-2.26.1-lp151.4.9.1 git-credential-gnome-keyring-2.26.1-lp151.4.9.1 git-credential-gnome-keyring-debuginfo-2.26.1-lp151.4.9.1 git-credential-libsecret-2.26.1-lp151.4.9.1 git-credential-libsecret-debuginfo-2.26.1-lp151.4.9.1 git-cvs-2.26.1-lp151.4.9.1 git-daemon-2.26.1-lp151.4.9.1 git-daemon-debuginfo-2.26.1-lp151.4.9.1 git-debuginfo-2.26.1-lp151.4.9.1 git-debugsource-2.26.1-lp151.4.9.1 git-email-2.26.1-lp151.4.9.1 git-gui-2.26.1-lp151.4.9.1 git-p4-2.26.1-lp151.4.9.1 git-svn-2.26.1-lp151.4.9.1 git-svn-debuginfo-2.26.1-lp151.4.9.1 git-web-2.26.1-lp151.4.9.1 gitk-2.26.1-lp151.4.9.1 - openSUSE Leap 15.1 (noarch): git-doc-2.26.1-lp151.4.9.1 References: https://www.suse.com/security/cve/CVE-2017-15298.html https://www.suse.com/security/cve/CVE-2018-11233.html https://www.suse.com/security/cve/CVE-2018-11235.html https://www.suse.com/security/cve/CVE-2018-17456.html https://www.suse.com/security/cve/CVE-2019-1348.html https://www.suse.com/security/cve/CVE-2019-1349.html https://www.suse.com/security/cve/CVE-2019-1350.html https://www.suse.com/security/cve/CVE-2019-1351.html https://www.suse.com/security/cve/CVE-2019-1352.html https://www.suse.com/security/cve/CVE-2019-1353.html https://www.suse.com/security/cve/CVE-2019-1354.html https://www.suse.com/security/cve/CVE-2019-1387.html https://www.suse.com/security/cve/CVE-2019-19604.html https://www.suse.com/security/cve/CVE-2020-11008.html https://www.suse.com/security/cve/CVE-2020-5260.html https://bugzilla.suse.com/1063412 https://bugzilla.suse.com/1095218 https://bugzilla.suse.com/1095219 https://bugzilla.suse.com/1110949 https://bugzilla.suse.com/1112230 https://bugzilla.suse.com/1114225 https://bugzilla.suse.com/1132350 https://bugzilla.suse.com/1149792 https://bugzilla.suse.com/1156651 https://bugzilla.suse.com/1158785 https://bugzilla.suse.com/1158787 https://bugzilla.suse.com/1158788 https://bugzilla.suse.com/1158789 https://bugzilla.suse.com/1158790 https://bugzilla.suse.com/1158791 https://bugzilla.suse.com/1158792 https://bugzilla.suse.com/1158793 https://bugzilla.suse.com/1158795 https://bugzilla.suse.com/1167890 https://bugzilla.suse.com/1168930 https://bugzilla.suse.com/1169605 https://bugzilla.suse.com/1169786 https://bugzilla.suse.com/1169936

1 0

openSUSE-RU-2020:0594-1: moderate: Recommended update for ypbind
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for ypbind ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0594-1 Rating: moderate References: #1163252 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ypbind fixes the following issues: - Fix for setting domain name by waiting that network becomes online, so it can be properly configured in sysconfig. (bsc#1163252) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-594=1 Package List: - openSUSE Leap 15.1 (x86_64): ypbind-2.6-lp151.2.3.1 ypbind-debuginfo-2.6-lp151.2.3.1 ypbind-debugsource-2.6-lp151.2.3.1 References: https://bugzilla.suse.com/1163252

1 0

openSUSE-RU-2020:0577-1: moderate: Recommended update for nginx
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for nginx ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0577-1 Rating: moderate References: #1150711 #1155690 #1156202 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for nginx fixes the following issues: nginx was updated to 1.16.1 (jsc#ECO-1401) - Added TLS 1.3 support (jsc#SLE-9295, bsc#1150711) - Replaced obsolete GeoIP module with MaxMinDB-based GeoIP2 (jsc#SLE-11184, bsc#1156202) - Started nginx after network is online (bsc#1155690) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-577=1 Package List: - openSUSE Leap 15.1 (noarch): nginx-source-1.16.1-lp151.4.9.1 vim-plugin-nginx-1.16.1-lp151.4.9.1 - openSUSE Leap 15.1 (x86_64): nginx-1.16.1-lp151.4.9.1 nginx-debuginfo-1.16.1-lp151.4.9.1 nginx-debugsource-1.16.1-lp151.4.9.1 References: https://bugzilla.suse.com/1150711 https://bugzilla.suse.com/1155690 https://bugzilla.suse.com/1156202

1 0

openSUSE-RU-2020:0591-1: moderate: Recommended update for tomcat
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for tomcat ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0591-1 Rating: moderate References: #1161083 #1167438 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for tomcat fixes the following issue: Update from Tomcat 9.0.31 to Tomcat 9.0.33. - Regression in HTTP header parsing. (bsc#1167438) The update improves the validation of the HTTP header parsing causing requests to be incorrectly treated as invalid if a CRLF sequence was split between TCP packets. Has been also improved the validation of request lines, including for HTTP/0.9 requests. - Fix NoSuchMethodError in the HTTP APR connector when using openjdk 1.8. (bsc#1161083) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-591=1 Package List: - openSUSE Leap 15.1 (noarch): tomcat-9.0.33-lp151.3.15.1 tomcat-admin-webapps-9.0.33-lp151.3.15.1 tomcat-docs-webapp-9.0.33-lp151.3.15.1 tomcat-el-3_0-api-9.0.33-lp151.3.15.1 tomcat-embed-9.0.33-lp151.3.15.1 tomcat-javadoc-9.0.33-lp151.3.15.1 tomcat-jsp-2_3-api-9.0.33-lp151.3.15.1 tomcat-jsvc-9.0.33-lp151.3.15.1 tomcat-lib-9.0.33-lp151.3.15.1 tomcat-servlet-4_0-api-9.0.33-lp151.3.15.1 tomcat-webapps-9.0.33-lp151.3.15.1 References: https://bugzilla.suse.com/1161083 https://bugzilla.suse.com/1167438

1 0

openSUSE-RU-2020:0593-1: important: Recommended update for yast2-registration
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for yast2-registration ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0593-1 Rating: important References: #1167945 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-registration fixes the following issues: - Fix for offline upgrade that fails the process at the registration due to a missing function. (bsc#1167945) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-593=1 Package List: - openSUSE Leap 15.1 (noarch): yast2-registration-4.1.25-lp151.2.9.1 References: https://bugzilla.suse.com/1167945

1 0

openSUSE-RU-2020:0580-1: moderate: Recommended update for perl-CGI
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for perl-CGI ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0580-1 Rating: moderate References: #1162868 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for perl-CGI fixes the following issues: Update from version 4.38 to 4.46 (bsc#1162868) * Add support for SameSite=None cookies and update the documentation * Replace only use of "base" with "parent" given that CGI already depends on "parent" * Support unquoted multipart/form-data name values * Update the package license from "Artistic-1.0 or GPL-1.0+" to "Artistic-2.0" * Support perls < 5.10.1 and specify CONFIGURE_REQUIRES in Makefile.PL for being more dynamic This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-580=1 Package List: - openSUSE Leap 15.1 (noarch): perl-CGI-4.46-lp151.3.3.1 References: https://bugzilla.suse.com/1162868

1 0

openSUSE-SU-2020:0597-1: important: Security update for apache2
by opensuse-security＠opensuse.org 01 May '20

01 May '20

openSUSE Security Update: Security update for apache2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0597-1 Rating: important References: #1168404 #1168407 #1169066 Cross-References: CVE-2020-1927 CVE-2020-1934 CVE-2020-1938 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for apache2 fixes the following issues: - CVE-2020-1934: mod_proxy_ftp may use uninitialized memory when proxying to a malicious FTP server (bsc#1168404). - CVE-2020-1927: mod_rewrite configurations vulnerable to open redirect (bsc#1168407). - CVE-2020-1938: mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy AJP13 authentication (bsc#1169066). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-597=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): apache2-2.4.33-lp151.8.12.1 apache2-debuginfo-2.4.33-lp151.8.12.1 apache2-debugsource-2.4.33-lp151.8.12.1 apache2-devel-2.4.33-lp151.8.12.1 apache2-event-2.4.33-lp151.8.12.1 apache2-event-debuginfo-2.4.33-lp151.8.12.1 apache2-example-pages-2.4.33-lp151.8.12.1 apache2-prefork-2.4.33-lp151.8.12.1 apache2-prefork-debuginfo-2.4.33-lp151.8.12.1 apache2-utils-2.4.33-lp151.8.12.1 apache2-utils-debuginfo-2.4.33-lp151.8.12.1 apache2-worker-2.4.33-lp151.8.12.1 apache2-worker-debuginfo-2.4.33-lp151.8.12.1 - openSUSE Leap 15.1 (noarch): apache2-doc-2.4.33-lp151.8.12.1 References: https://www.suse.com/security/cve/CVE-2020-1927.html https://www.suse.com/security/cve/CVE-2020-1934.html https://www.suse.com/security/cve/CVE-2020-1938.html https://bugzilla.suse.com/1168404 https://bugzilla.suse.com/1168407 https://bugzilla.suse.com/1169066

1 0

openSUSE-RU-2020:0578-1: moderate: Recommended update for open-iscsi
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for open-iscsi ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0578-1 Rating: moderate References: #1159768 #1164607 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for open-iscsi fixes the following issues: - Avoid logout of iscsi boot session. (bsc#1159768) - Fix iscsi.service so it handles restarts better. (bsc#1164607) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-578=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): iscsiuio-0.7.8.2-lp151.13.9.1 iscsiuio-debuginfo-0.7.8.2-lp151.13.9.1 libopeniscsiusr0_2_0-2.0.876-lp151.13.9.1 libopeniscsiusr0_2_0-debuginfo-2.0.876-lp151.13.9.1 open-iscsi-2.0.876-lp151.13.9.1 open-iscsi-debuginfo-2.0.876-lp151.13.9.1 open-iscsi-debugsource-2.0.876-lp151.13.9.1 open-iscsi-devel-2.0.876-lp151.13.9.1 References: https://bugzilla.suse.com/1159768 https://bugzilla.suse.com/1164607

1 0

openSUSE-RU-2020:0587-1: moderate: Recommended update for seccheck
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for seccheck ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0587-1 Rating: moderate References: #1132919 #985802 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for seccheck fixes the following issues: - adapt WantedBy so the timers are actually started at boot time when enabled (#1132919) - correct indentation of SECCHK_FROM (#985802) for the weekly and monthly mails so that the mail header lines are recognised by the receiving mail client This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-587=1 Package List: - openSUSE Leap 15.1 (noarch): seccheck-3.0-lp151.5.3.1 References: https://bugzilla.suse.com/1132919 https://bugzilla.suse.com/985802

1 0

openSUSE-RU-2020:0582-1: moderate: Recommended update for python-google-api-python-client
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for python-google-api-python-client ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0582-1 Rating: moderate References: #1088358 #1160933 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for python-google-api-python-client fixes the following issues: - Fix dependencies to use google-auth instead of deprecated oauth2client (bsc#1160933, jsc#ECO-1148) python-cachetools 2.0.1 is shipped to the Public Cloud Module. python-google-auth 1.5.1 is shipped to the Public Cloud Module. python-google-api-python-client was updated to: - Upgrade to 1.7.4: just series of minor bugfixes - Fix check for error text on Python 3.7. (#278) - Use new Auth URIs. (#281) - Add code-of-conduct document. (#270) - Fix some typos in test_urllib3.py (#268) - Warn when using user credentials from the Cloud SDK (#266) - Add compute engine-based IDTokenCredentials (#236) - Corrected some typos (#265) Update to 1.4.2: - Raise a helpful exception when trying to refresh credentials without a refresh token. (#262) - Fix links to README and CONTRIBUTING in docs/index.rst. (#260) - Fix a typo in credentials.py. (#256) - Use pytest instead of py.test per upstream recommendation, #dropthedot. (#255) - Fix typo on exemple of jwt usage (#245) New upstream release 1.4.1 (bsc#1088358) - Added a check for the cryptography version before attempting to use it. + From version 1.4.0 - Added `cryptography`-based RSA signer and verifier. - Added `google.oauth2.service_account.IDTokenCredentials`. - Improved documentation around ID Tokens + From version 1.3.0 - Added ``google.oauth2.credentials.Credentials.from_authorized_user_file``. - Dropped direct pyasn1 dependency in favor of letting ``pyasn1-modules`` specify the right version. - ``default()`` now checks for the project ID environment var before warning about missing project ID. - Fixed the docstrings for ``has_scopes()`` and ``with_scopes()``. - Fixed example in docstring for ``ReadOnlyScoped``. - Made ``transport.requests`` use timeouts and retries to improve reliability. This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-582=1 Package List: - openSUSE Leap 15.1 (noarch): python2-cachetools-2.0.1-lp151.3.3.1 python2-google-api-python-client-1.7.4-lp151.2.3.1 python2-google-auth-1.5.1-lp151.2.3.1 python2-google-auth-httplib2-0.0.3-lp151.2.1 python3-cachetools-2.0.1-lp151.3.3.1 python3-google-api-python-client-1.7.4-lp151.2.3.1 python3-google-auth-1.5.1-lp151.2.3.1 python3-google-auth-httplib2-0.0.3-lp151.2.1 References: https://bugzilla.suse.com/1088358 https://bugzilla.suse.com/1160933

1 0

openSUSE-RU-2020:0575-1: moderate: Recommended update for ndctl
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for ndctl ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0575-1 Rating: moderate References: #1165509 #1167861 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for ndctl fixes the following issues: - Fixed an issue where namespaces were not correctly destroyed (bsc#1167861) - Fixed an issue where 'enable-namespace' tried to enable idled namespaces (bsc#1165509) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-575=1 Package List: - openSUSE Leap 15.1 (x86_64): libndctl-devel-64.1-lp151.2.12.1 libndctl6-64.1-lp151.2.12.1 libndctl6-debuginfo-64.1-lp151.2.12.1 ndctl-64.1-lp151.2.12.1 ndctl-debuginfo-64.1-lp151.2.12.1 ndctl-debugsource-64.1-lp151.2.12.1 References: https://bugzilla.suse.com/1165509 https://bugzilla.suse.com/1167861

1 0

openSUSE-RU-2020:0581-1: moderate: Recommended update for psqlODBC
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for psqlODBC ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0581-1 Rating: moderate References: #1166821 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for psqlODBC fixes the following issue: - Fix build with PostgreSQL 11 and newer. (bsc#1166821) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-581=1 Package List: - openSUSE Leap 15.1 (x86_64): psqlODBC-10.01.0000-lp151.3.3.1 psqlODBC-debuginfo-10.01.0000-lp151.3.3.1 psqlODBC-debugsource-10.01.0000-lp151.3.3.1 References: https://bugzilla.suse.com/1166821

1 0

openSUSE-RU-2020:0573-1: moderate: Recommended update for libsolv
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for libsolv ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0573-1 Rating: moderate References: #1159314 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libsolv fixes the following issues: libsolv was updated to version 0.7.11: - fix solv_zchunk decoding error if large chunks are used (bsc#1159314) - treat retracted pathes as irrelevant - made add_update_target work with multiversion installs This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-573=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libsolv-debuginfo-0.7.11-lp151.2.13.1 libsolv-debugsource-0.7.11-lp151.2.13.1 libsolv-demo-0.7.11-lp151.2.13.1 libsolv-demo-debuginfo-0.7.11-lp151.2.13.1 libsolv-devel-0.7.11-lp151.2.13.1 libsolv-devel-debuginfo-0.7.11-lp151.2.13.1 libsolv-tools-0.7.11-lp151.2.13.1 libsolv-tools-debuginfo-0.7.11-lp151.2.13.1 libzypp-17.19.0-lp151.2.13.1 libzypp-debuginfo-17.19.0-lp151.2.13.1 libzypp-debugsource-17.19.0-lp151.2.13.1 libzypp-devel-17.19.0-lp151.2.13.1 libzypp-devel-doc-17.19.0-lp151.2.13.1 perl-solv-0.7.11-lp151.2.13.1 perl-solv-debuginfo-0.7.11-lp151.2.13.1 python-solv-0.7.11-lp151.2.13.1 python-solv-debuginfo-0.7.11-lp151.2.13.1 python3-solv-0.7.11-lp151.2.13.1 python3-solv-debuginfo-0.7.11-lp151.2.13.1 ruby-solv-0.7.11-lp151.2.13.1 ruby-solv-debuginfo-0.7.11-lp151.2.13.1 References: https://bugzilla.suse.com/1159314

1 0

openSUSE-RU-2020:0576-1: moderate: Recommended update for netcontrol
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for netcontrol ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0576-1 Rating: moderate References: #1027736 #1029201 #1132794 #1148646 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for netcontrol fixes the following issues: - bonding: prevent alarms when using unknown options. (bsc#1132794) The update will provide warnings and also error messages when using unknown options. - udev: use correct udev rule (write) lock directory - sysconfig: solve segfault on missed end-quote. (bsc#1027736) - solve segfault on invalid check in route creation. (bsc#1148646) - solve virsh iface-list not working as expected. (bsc#1029201) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-576=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libnetcontrol-devel-0.3.1-lp151.3.3.1 libnetcontrol0-0.3.1-lp151.3.3.1 libnetcontrol0-debuginfo-0.3.1-lp151.3.3.1 netcontrol-debugsource-0.3.1-lp151.3.3.1 - openSUSE Leap 15.1 (x86_64): libnetcontrol0-32bit-0.3.1-lp151.3.3.1 libnetcontrol0-32bit-debuginfo-0.3.1-lp151.3.3.1 References: https://bugzilla.suse.com/1027736 https://bugzilla.suse.com/1029201 https://bugzilla.suse.com/1132794 https://bugzilla.suse.com/1148646

1 0

openSUSE-RU-2020:0570-1: moderate: Recommended update for google-compute-engine
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for google-compute-engine ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0570-1 Rating: moderate References: #1167810 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for google-compute-engine fixes the following issues: - Rename the sysctl file that applies the GCE network settings, so it is run after the default config and adjusts net.ipv4.conf.all.rp_filter correctly. (bsc#1167810) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-570=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): google-compute-engine-debugsource-20190801-lp151.2.19.1 google-compute-engine-oslogin-20190801-lp151.2.19.1 google-compute-engine-oslogin-debuginfo-20190801-lp151.2.19.1 - openSUSE Leap 15.1 (x86_64): google-compute-engine-oslogin-32bit-20190801-lp151.2.19.1 google-compute-engine-oslogin-32bit-debuginfo-20190801-lp151.2.19.1 - openSUSE Leap 15.1 (noarch): google-compute-engine-init-20190801-lp151.2.19.1 References: https://bugzilla.suse.com/1167810

1 0

openSUSE-RU-2020:0583-1: moderate: Recommended update for python-pycups
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for python-pycups ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0583-1 Rating: moderate References: #735865 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-pycups fixes the following issues: - add BuildRequires: python-cups to printer driver packages. (bsc#735865) Package /usr/lib/rpm/postscriptdriver.prov again, in the new "cups-rpm-helper" subpackage. The file hasn't been packaged any more after the switch from python-cups to python-pycups. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-583=1 Package List: - openSUSE Leap 15.1 (x86_64): cups-rpm-helper-1.9.74-lp151.3.3.1 python-pycups-debuginfo-1.9.74-lp151.3.3.1 python-pycups-debugsource-1.9.74-lp151.3.3.1 python2-pycups-1.9.74-lp151.3.3.1 python2-pycups-debuginfo-1.9.74-lp151.3.3.1 python3-pycups-1.9.74-lp151.3.3.1 python3-pycups-debuginfo-1.9.74-lp151.3.3.1 References: https://bugzilla.suse.com/735865

1 0

openSUSE-RU-2020:0569-1: moderate: Recommended update for lxd
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for lxd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0569-1 Rating: moderate References: #1170404 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for lxd fixes the following issues: Update to LXD 4.0.1. (boo#1170404) The full upstream changelog is available from: https://discuss.linuxcontainers.org/t/lxd-4-0-1-lts-has-been-released/7515 * Tweaked and improved the resources API * Added lxd cluster remove-raft-node disaster recovery function * Implemented ceph rbd/fs disk devices can now be attached to virtual machines * Fixed some data migration issues for users of < 3.0 upgrading to 4.0 directly * Fixed file descriptor leakage in exec Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-569=1 Package List: - openSUSE Leap 15.1 (noarch): lxd-bash-completion-4.0.1-lp151.36.1 - openSUSE Leap 15.1 (x86_64): lxd-4.0.1-lp151.36.1 References: https://bugzilla.suse.com/1170404

1 0

openSUSE-SU-2020:0567-1: Security update for python-typed-ast
by opensuse-security＠opensuse.org 01 May '20

01 May '20

openSUSE Security Update: Security update for python-typed-ast ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0567-1 Rating: low References: #1161562 #1161563 #1163532 Cross-References: CVE-2019-19274 CVE-2019-19275 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for python-typed-ast fixes the following issues: python-typed-ast was reverted to version 1.3.1 because it broke another package (bsc#1163532). Security issues fixed: - CVE-2019-19274: Fixed an out-of-bounds read (bsc#1161562). - CVE-2019-19275: Fixed an out-of-bounds read (bsc#1161563). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-567=1 Package List: - openSUSE Leap 15.1 (x86_64): python-typed-ast-debugsource-1.3.1-lp151.2.6.1 python3-typed-ast-1.3.1-lp151.2.6.1 python3-typed-ast-debuginfo-1.3.1-lp151.2.6.1 References: https://www.suse.com/security/cve/CVE-2019-19274.html https://www.suse.com/security/cve/CVE-2019-19275.html https://bugzilla.suse.com/1161562 https://bugzilla.suse.com/1161563 https://bugzilla.suse.com/1163532

1 0

openSUSE-SU-2020:0566-1: critical: Security update for chromium
by opensuse-security＠opensuse.org 01 May '20

01 May '20

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0566-1 Rating: critical References: #1169729 Cross-References: CVE-2020-6457 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for chromium fixes the following issues: Chromium was updated to 81.0.4044.113 (boo#1169729): - CVE-2020-6457: Fixed a use after free in speech recognizer This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-566=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 x86_64): chromedriver-81.0.4044.113-bp151.3.70.1 chromium-81.0.4044.113-bp151.3.70.1 References: https://www.suse.com/security/cve/CVE-2020-6457.html https://bugzilla.suse.com/1169729

1 0