May 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2020:0699-1: moderate: Recommended update for konqueror
by maintenance＠opensuse.org 23 May '20

23 May '20

openSUSE Recommended Update: Recommended update for konqueror ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0699-1 Rating: moderate References: #1075663 Affected Products: openSUSE Leap 15.1 openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for konqueror fixes the following issues: - Fixed konqueror to not open a window if it is closed and started a second time (boo#1075663, kde#388333) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-699=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-699=1 Package List: - openSUSE Leap 15.1 (x86_64): konqueror-18.12.3-lp151.2.4.1 konqueror-debuginfo-18.12.3-lp151.2.4.1 konqueror-debugsource-18.12.3-lp151.2.4.1 konqueror-devel-18.12.3-lp151.2.4.1 konqueror-plugins-18.12.3-lp151.2.4.1 konqueror-plugins-debuginfo-18.12.3-lp151.2.4.1 webenginepart-18.12.3-lp151.2.4.1 webenginepart-debuginfo-18.12.3-lp151.2.4.1 - openSUSE Leap 15.1 (noarch): konqueror-lang-18.12.3-lp151.2.4.1 - openSUSE Backports SLE-15-SP1 (aarch64 x86_64): konqueror-18.12.3-bp151.3.3.1 konqueror-devel-18.12.3-bp151.3.3.1 konqueror-plugins-18.12.3-bp151.3.3.1 webenginepart-18.12.3-bp151.3.3.1 - openSUSE Backports SLE-15-SP1 (noarch): konqueror-lang-18.12.3-bp151.3.3.1 References: https://bugzilla.suse.com/1075663

1 0

openSUSE-SU-2020:0698-1: moderate: Security update for pdns-recursor
by opensuse-security＠opensuse.org 23 May '20

23 May '20

openSUSE Security Update: Security update for pdns-recursor ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0698-1 Rating: moderate References: #1171553 Cross-References: CVE-2020-10030 CVE-2020-10995 CVE-2020-12244 Affected Products: openSUSE Leap 15.1 openSUSE Backports SLE-15-SP1 SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for pdns-recursor fixes the following issues: - update to 4.1.16 * fixes an issue where records in the answer section of a NXDOMAIN response lacking an SOA were not properly validated (CVE-2020-12244, boo#1171553) * fixes an issue where invalid hostname on the server can result in disclosure of invalid memory (CVE-2020-10030, boo#1171553) * fixes an issue in the DNS protocol has been found that allows malicious parties to use recursive DNS services to attack third party authoritative name servers (CVE-2020-10995, boo#1171553) For details see https://doc.powerdns.com/recursor/changelog/4.1.html#change-4.1.16 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-698=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-698=1 - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2020-698=1 Package List: - openSUSE Leap 15.1 (x86_64): pdns-recursor-4.1.12-lp151.3.3.1 pdns-recursor-debuginfo-4.1.12-lp151.3.3.1 pdns-recursor-debugsource-4.1.12-lp151.3.3.1 - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): pdns-recursor-4.1.12-bp151.4.3.1 pdns-recursor-debuginfo-4.1.12-bp151.4.3.1 pdns-recursor-debugsource-4.1.12-bp151.4.3.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): pdns-recursor-4.1.16-19.1 References: https://www.suse.com/security/cve/CVE-2020-10030.html https://www.suse.com/security/cve/CVE-2020-10995.html https://www.suse.com/security/cve/CVE-2020-12244.html https://bugzilla.suse.com/1171553

1 0

openSUSE-SU-2020:0698-1: moderate: Security update for pdns-recursor
by opensuse-security＠opensuse.org 23 May '20

23 May '20

openSUSE Security Update: Security update for pdns-recursor ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0698-1 Rating: moderate References: #1171553 Cross-References: CVE-2020-10030 CVE-2020-10995 CVE-2020-12244 Affected Products: openSUSE Leap 15.1 openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for pdns-recursor fixes the following issues: - update to 4.1.16 * fixes an issue where records in the answer section of a NXDOMAIN response lacking an SOA were not properly validated (CVE-2020-12244, boo#1171553) * fixes an issue where invalid hostname on the server can result in disclosure of invalid memory (CVE-2020-10030, boo#1171553) * fixes an issue in the DNS protocol has been found that allows malicious parties to use recursive DNS services to attack third party authoritative name servers (CVE-2020-10995, boo#1171553) For details see https://doc.powerdns.com/recursor/changelog/4.1.html#change-4.1.16 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-698=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-698=1 Package List: - openSUSE Leap 15.1 (x86_64): pdns-recursor-4.1.12-lp151.3.3.1 pdns-recursor-debuginfo-4.1.12-lp151.3.3.1 pdns-recursor-debugsource-4.1.12-lp151.3.3.1 - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): pdns-recursor-4.1.12-bp151.4.3.1 pdns-recursor-debuginfo-4.1.12-bp151.4.3.1 pdns-recursor-debugsource-4.1.12-bp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2020-10030.html https://www.suse.com/security/cve/CVE-2020-10995.html https://www.suse.com/security/cve/CVE-2020-12244.html https://bugzilla.suse.com/1171553

1 0

openSUSE-SU-2020:0682-1: moderate: Security update for openexr
by opensuse-security＠opensuse.org 22 May '20

22 May '20

openSUSE Security Update: Security update for openexr ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0682-1 Rating: moderate References: #1146648 #1169549 #1169573 #1169574 #1169575 #1169576 #1169578 #1169580 Cross-References: CVE-2020-11758 CVE-2020-11760 CVE-2020-11761 CVE-2020-11762 CVE-2020-11763 CVE-2020-11764 CVE-2020-11765 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves 7 vulnerabilities and has one errata is now available. Description: This update for openexr provides the following fix: Security issues fixed: - CVE-2020-11765: Fixed an off-by-one error in use of the ImfXdr.h read function by DwaCompressor:Classifier:Classifier (bsc#1169575). - CVE-2020-11764: Fixed an out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp (bsc#1169574). - CVE-2020-11763: Fixed an out-of-bounds read and write, as demonstrated by ImfTileOffsets.cpp (bsc#1169576). - CVE-2020-11762: Fixed an out-of-bounds read and write in DwaCompressor:uncompress in ImfDwaCompressor.cpp when handling the UNKNOWN compression case (bsc#1169549). - CVE-2020-11761: Fixed an out-of-bounds read during Huffman uncompression, as demonstrated by FastHufDecoder:refill in ImfFastHuf.cpp (bsc#1169578). - CVE-2020-11760: Fixed an out-of-bounds read during RLE uncompression in rleUncompress in ImfRle.cpp (bsc#1169580). - CVE-2020-11758: Fixed an out-of-bounds read in ImfOptimizedPixelReading.h (bsc#1169573). Non-security issue fixed: - Enable tests when building the package on x86_64. (bsc#1146648) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-682=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libIlmImf-2_2-23-2.2.1-lp151.4.9.1 libIlmImf-2_2-23-debuginfo-2.2.1-lp151.4.9.1 libIlmImfUtil-2_2-23-2.2.1-lp151.4.9.1 libIlmImfUtil-2_2-23-debuginfo-2.2.1-lp151.4.9.1 openexr-2.2.1-lp151.4.9.1 openexr-debuginfo-2.2.1-lp151.4.9.1 openexr-debugsource-2.2.1-lp151.4.9.1 openexr-devel-2.2.1-lp151.4.9.1 openexr-doc-2.2.1-lp151.4.9.1 - openSUSE Leap 15.1 (x86_64): libIlmImf-2_2-23-32bit-2.2.1-lp151.4.9.1 libIlmImf-2_2-23-32bit-debuginfo-2.2.1-lp151.4.9.1 libIlmImfUtil-2_2-23-32bit-2.2.1-lp151.4.9.1 libIlmImfUtil-2_2-23-32bit-debuginfo-2.2.1-lp151.4.9.1 References: https://www.suse.com/security/cve/CVE-2020-11758.html https://www.suse.com/security/cve/CVE-2020-11760.html https://www.suse.com/security/cve/CVE-2020-11761.html https://www.suse.com/security/cve/CVE-2020-11762.html https://www.suse.com/security/cve/CVE-2020-11763.html https://www.suse.com/security/cve/CVE-2020-11764.html https://www.suse.com/security/cve/CVE-2020-11765.html https://bugzilla.suse.com/1146648 https://bugzilla.suse.com/1169549 https://bugzilla.suse.com/1169573 https://bugzilla.suse.com/1169574 https://bugzilla.suse.com/1169575 https://bugzilla.suse.com/1169576 https://bugzilla.suse.com/1169578 https://bugzilla.suse.com/1169580

1 0

openSUSE-SU-2020:0676-1: moderate: Security update for autoyast2
by opensuse-security＠opensuse.org 22 May '20

22 May '20

openSUSE Security Update: Security update for autoyast2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0676-1 Rating: moderate References: #1109310 #1133045 #1140711 #1164105 #1168123 #1168281 #1170082 Cross-References: CVE-2019-18905 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves one vulnerability and has 6 fixes is now available. Description: This update for autoyast2 to version 4.1.15 fixes the following issues: Security issue fixed: - CVE-2019-18905: Removed all "--gpg-auto-import-keys" options from zypper commands (bsc#1140711). Non-security issue fixed: - Fix desktop files updating some icons and groups (bsc#1168123). - Restored some missing icons (bsc#1168123, bsc#1109310 and bsc#1168281). - Service for init scripts: Try to start "network-online.target" before starting the autoyast init scripts in order to get a working network (bsc#1164105). - Always re-probe storage after pre-scripts (bsc#1170082, bsc#1133045). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-676=1 Package List: - openSUSE Leap 15.1 (noarch): autoyast2-4.1.15-lp151.2.12.1 autoyast2-installation-4.1.15-lp151.2.12.1 References: https://www.suse.com/security/cve/CVE-2019-18905.html https://bugzilla.suse.com/1109310 https://bugzilla.suse.com/1133045 https://bugzilla.suse.com/1140711 https://bugzilla.suse.com/1164105 https://bugzilla.suse.com/1168123 https://bugzilla.suse.com/1168281 https://bugzilla.suse.com/1170082

1 0

openSUSE-SU-2020:0678-1: important: Security update for gstreamer-plugins-base
by opensuse-security＠opensuse.org 22 May '20

22 May '20

openSUSE Security Update: Security update for gstreamer-plugins-base ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0678-1 Rating: important References: #1133375 Cross-References: CVE-2019-9928 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for gstreamer-plugins-base fixes the following issue: Security issue fixed: - CVE-2019-9928: Fixed a heap-based overflow in the rtsp connection parser (bsc#1133375). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-678=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): gstreamer-plugins-base-1.12.5-lp151.3.3.1 gstreamer-plugins-base-debuginfo-1.12.5-lp151.3.3.1 gstreamer-plugins-base-debugsource-1.12.5-lp151.3.3.1 gstreamer-plugins-base-devel-1.12.5-lp151.3.3.1 gstreamer-plugins-base-doc-1.12.5-lp151.3.3.1 libgstallocators-1_0-0-1.12.5-lp151.3.3.1 libgstallocators-1_0-0-debuginfo-1.12.5-lp151.3.3.1 libgstapp-1_0-0-1.12.5-lp151.3.3.1 libgstapp-1_0-0-debuginfo-1.12.5-lp151.3.3.1 libgstaudio-1_0-0-1.12.5-lp151.3.3.1 libgstaudio-1_0-0-debuginfo-1.12.5-lp151.3.3.1 libgstfft-1_0-0-1.12.5-lp151.3.3.1 libgstfft-1_0-0-debuginfo-1.12.5-lp151.3.3.1 libgstpbutils-1_0-0-1.12.5-lp151.3.3.1 libgstpbutils-1_0-0-debuginfo-1.12.5-lp151.3.3.1 libgstriff-1_0-0-1.12.5-lp151.3.3.1 libgstriff-1_0-0-debuginfo-1.12.5-lp151.3.3.1 libgstrtp-1_0-0-1.12.5-lp151.3.3.1 libgstrtp-1_0-0-debuginfo-1.12.5-lp151.3.3.1 libgstrtsp-1_0-0-1.12.5-lp151.3.3.1 libgstrtsp-1_0-0-debuginfo-1.12.5-lp151.3.3.1 libgstsdp-1_0-0-1.12.5-lp151.3.3.1 libgstsdp-1_0-0-debuginfo-1.12.5-lp151.3.3.1 libgsttag-1_0-0-1.12.5-lp151.3.3.1 libgsttag-1_0-0-debuginfo-1.12.5-lp151.3.3.1 libgstvideo-1_0-0-1.12.5-lp151.3.3.1 libgstvideo-1_0-0-debuginfo-1.12.5-lp151.3.3.1 typelib-1_0-GstAllocators-1_0-1.12.5-lp151.3.3.1 typelib-1_0-GstApp-1_0-1.12.5-lp151.3.3.1 typelib-1_0-GstAudio-1_0-1.12.5-lp151.3.3.1 typelib-1_0-GstFft-1_0-1.12.5-lp151.3.3.1 typelib-1_0-GstPbutils-1_0-1.12.5-lp151.3.3.1 typelib-1_0-GstRtp-1_0-1.12.5-lp151.3.3.1 typelib-1_0-GstRtsp-1_0-1.12.5-lp151.3.3.1 typelib-1_0-GstSdp-1_0-1.12.5-lp151.3.3.1 typelib-1_0-GstTag-1_0-1.12.5-lp151.3.3.1 typelib-1_0-GstVideo-1_0-1.12.5-lp151.3.3.1 - openSUSE Leap 15.1 (noarch): gstreamer-plugins-base-lang-1.12.5-lp151.3.3.1 - openSUSE Leap 15.1 (x86_64): gstreamer-plugins-base-32bit-1.12.5-lp151.3.3.1 gstreamer-plugins-base-32bit-debuginfo-1.12.5-lp151.3.3.1 gstreamer-plugins-base-devel-32bit-1.12.5-lp151.3.3.1 libgstallocators-1_0-0-32bit-1.12.5-lp151.3.3.1 libgstallocators-1_0-0-32bit-debuginfo-1.12.5-lp151.3.3.1 libgstapp-1_0-0-32bit-1.12.5-lp151.3.3.1 libgstapp-1_0-0-32bit-debuginfo-1.12.5-lp151.3.3.1 libgstaudio-1_0-0-32bit-1.12.5-lp151.3.3.1 libgstaudio-1_0-0-32bit-debuginfo-1.12.5-lp151.3.3.1 libgstfft-1_0-0-32bit-1.12.5-lp151.3.3.1 libgstfft-1_0-0-32bit-debuginfo-1.12.5-lp151.3.3.1 libgstpbutils-1_0-0-32bit-1.12.5-lp151.3.3.1 libgstpbutils-1_0-0-32bit-debuginfo-1.12.5-lp151.3.3.1 libgstriff-1_0-0-32bit-1.12.5-lp151.3.3.1 libgstriff-1_0-0-32bit-debuginfo-1.12.5-lp151.3.3.1 libgstrtp-1_0-0-32bit-1.12.5-lp151.3.3.1 libgstrtp-1_0-0-32bit-debuginfo-1.12.5-lp151.3.3.1 libgstrtsp-1_0-0-32bit-1.12.5-lp151.3.3.1 libgstrtsp-1_0-0-32bit-debuginfo-1.12.5-lp151.3.3.1 libgstsdp-1_0-0-32bit-1.12.5-lp151.3.3.1 libgstsdp-1_0-0-32bit-debuginfo-1.12.5-lp151.3.3.1 libgsttag-1_0-0-32bit-1.12.5-lp151.3.3.1 libgsttag-1_0-0-32bit-debuginfo-1.12.5-lp151.3.3.1 libgstvideo-1_0-0-32bit-1.12.5-lp151.3.3.1 libgstvideo-1_0-0-32bit-debuginfo-1.12.5-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2019-9928.html https://bugzilla.suse.com/1133375

1 0

openSUSE-RU-2020:0688-1: moderate: Recommended update for hwinfo
by maintenance＠opensuse.org 22 May '20

22 May '20

openSUSE Recommended Update: Recommended update for hwinfo ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0688-1 Rating: moderate References: #1136475 #1167561 #1169682 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for hwinfo fixes the following issues: - Update the hardware detection library from version 21.66 to 21.70 (bsc#1169682) - Fix xen detection. (bsc#1167561) - Remove the /sbin/udevadm compat symlink that it's not provided anymore - Use FAT LTO objects in order to provide proper static library. - Fix Direct Access Storage Device (DASD) detection (bsc#1136475) - Don't include bcache devices in the regular disk list This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-688=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): hwinfo-21.70-lp151.2.6.1 hwinfo-debuginfo-21.70-lp151.2.6.1 hwinfo-debugsource-21.70-lp151.2.6.1 hwinfo-devel-21.70-lp151.2.6.1 hwinfo-devel-debuginfo-21.70-lp151.2.6.1 References: https://bugzilla.suse.com/1136475 https://bugzilla.suse.com/1167561 https://bugzilla.suse.com/1169682

1 0

openSUSE-RU-2020:0689-1: moderate: Recommended update for openCryptoki
by maintenance＠opensuse.org 22 May '20

22 May '20

openSUSE Recommended Update: Recommended update for openCryptoki ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0689-1 Rating: moderate References: #1157205 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for openCryptoki fixes the following issue: - Solve issues with the crypto function when testing multithreaded code. (bsc#1157205) The update will provide better API lock against concurrent use from other threads and cross-process lock against threads. This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-689=1 Package List: - openSUSE Leap 15.1 (x86_64): openCryptoki-3.11.1-lp151.3.6.1 openCryptoki-64bit-3.11.1-lp151.3.6.1 openCryptoki-64bit-debuginfo-3.11.1-lp151.3.6.1 openCryptoki-debuginfo-3.11.1-lp151.3.6.1 openCryptoki-debugsource-3.11.1-lp151.3.6.1 openCryptoki-devel-3.11.1-lp151.3.6.1 References: https://bugzilla.suse.com/1157205

1 0

openSUSE-SU-2020:0680-1: moderate: Security update for libvpx
by opensuse-security＠opensuse.org 22 May '20

22 May '20

openSUSE Security Update: Security update for libvpx ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0680-1 Rating: moderate References: #1166066 Cross-References: CVE-2020-0034 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libvpx fixes the following issues: - CVE-2020-0034: Fixed an out-of-bounds read on truncated key frames (bsc#1166066). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-680=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libvpx-debugsource-1.6.1-lp151.5.6.1 libvpx-devel-1.6.1-lp151.5.6.1 libvpx4-1.6.1-lp151.5.6.1 libvpx4-debuginfo-1.6.1-lp151.5.6.1 vpx-tools-1.6.1-lp151.5.6.1 vpx-tools-debuginfo-1.6.1-lp151.5.6.1 - openSUSE Leap 15.1 (x86_64): libvpx4-32bit-1.6.1-lp151.5.6.1 libvpx4-32bit-debuginfo-1.6.1-lp151.5.6.1 References: https://www.suse.com/security/cve/CVE-2020-0034.html https://bugzilla.suse.com/1166066

1 0

openSUSE-RU-2020:0675-1: moderate: Recommended update for nfsidmap
by maintenance＠opensuse.org 22 May '20

22 May '20

openSUSE Recommended Update: Recommended update for nfsidmap ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0675-1 Rating: moderate References: #1098217 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for nfsidmap fixes the following issues: - Improve support for SAMBA with Active Directory. (bsc#1098217) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-675=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): nfsidmap-0.26-lp151.4.3.1 nfsidmap-debuginfo-0.26-lp151.4.3.1 nfsidmap-debugsource-0.26-lp151.4.3.1 nfsidmap-devel-0.26-lp151.4.3.1 References: https://bugzilla.suse.com/1098217

1 0

openSUSE-SU-2020:0681-1: moderate: Security update for libxml2
by opensuse-security＠opensuse.org 22 May '20

22 May '20

openSUSE Security Update: Security update for libxml2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0681-1 Rating: moderate References: #1159928 #1161517 #1161521 Cross-References: CVE-2019-19956 CVE-2019-20388 CVE-2020-7595 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for libxml2 fixes the following issues: - CVE-2019-20388: Fixed a memory leak in xmlSchemaPreRun (bsc#1161521). - CVE-2019-19956: Fixed a memory leak (bsc#1159928). - CVE-2020-7595: Fixed an infinite loop in an EOF situation (bsc#1161517). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-681=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libxml2-2-2.9.7-lp151.5.9.1 libxml2-2-debuginfo-2.9.7-lp151.5.9.1 libxml2-debugsource-2.9.7-lp151.5.9.1 libxml2-devel-2.9.7-lp151.5.9.1 libxml2-tools-2.9.7-lp151.5.9.1 libxml2-tools-debuginfo-2.9.7-lp151.5.9.1 python-libxml2-python-debugsource-2.9.7-lp151.5.9.1 python2-libxml2-python-2.9.7-lp151.5.9.1 python2-libxml2-python-debuginfo-2.9.7-lp151.5.9.1 python3-libxml2-python-2.9.7-lp151.5.9.1 python3-libxml2-python-debuginfo-2.9.7-lp151.5.9.1 - openSUSE Leap 15.1 (x86_64): libxml2-2-32bit-2.9.7-lp151.5.9.1 libxml2-2-32bit-debuginfo-2.9.7-lp151.5.9.1 libxml2-devel-32bit-2.9.7-lp151.5.9.1 - openSUSE Leap 15.1 (noarch): libxml2-doc-2.9.7-lp151.5.9.1 References: https://www.suse.com/security/cve/CVE-2019-19956.html https://www.suse.com/security/cve/CVE-2019-20388.html https://www.suse.com/security/cve/CVE-2020-7595.html https://bugzilla.suse.com/1159928 https://bugzilla.suse.com/1161517 https://bugzilla.suse.com/1161521

1 0

openSUSE-RU-2020:0692-1: moderate: Recommended update for grep
by maintenance＠opensuse.org 22 May '20

22 May '20

openSUSE Recommended Update: Recommended update for grep ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0692-1 Rating: moderate References: #1155271 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for grep fixes the following issues: - Update testsuite expectations, no functional changes (bsc#1155271) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-692=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): grep-3.1-lp151.4.3.1 grep-debuginfo-3.1-lp151.4.3.1 grep-debugsource-3.1-lp151.4.3.1 - openSUSE Leap 15.1 (noarch): grep-lang-3.1-lp151.4.3.1 References: https://bugzilla.suse.com/1155271

1 0

openSUSE-SU-2020:0685-1: moderate: Security update for python-rpyc
by opensuse-security＠opensuse.org 22 May '20

22 May '20

openSUSE Security Update: Security update for python-rpyc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0685-1 Rating: moderate References: #1152987 Cross-References: CVE-2019-16328 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-rpyc to 4.1.5 fixes the following issues: Security issue fixed: - CVE-2019-16328: Fixed a missing protocol security check that could have led to code execution (boo#1152987). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-685=1 Package List: - openSUSE Leap 15.1 (noarch): python2-rpyc-4.1.5-lp151.3.3.1 python3-rpyc-4.1.5-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2019-16328.html https://bugzilla.suse.com/1152987

1 0

openSUSE-SU-2020:0693-1: moderate: Security update for dpdk
by opensuse-security＠opensuse.org 22 May '20

22 May '20

openSUSE Security Update: Security update for dpdk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0693-1 Rating: moderate References: #1171477 Cross-References: CVE-2020-10722 CVE-2020-10723 CVE-2020-10724 CVE-2020-10725 CVE-2020-10726 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for dpdk fixes the following issues: Security issues fixed: - CVE-2020-10722: Fixed an integer overflow in vhost_user_set_log_base() (bsc#1171477). - CVE-2020-10723: Fixed an integer truncation in vhost_user_check_and_alloc_queue_pair() (bsc#1171477). - CVE-2020-10724: Fixed a missing inputs validation in Vhost-crypto (bsc#1171477). - CVE-2020-10725: Fixed a segfault caused by invalid virtio descriptors sent from a malicious guest (bsc#1171477). - CVE-2020-10726: Fixed a denial-of-service caused by VHOST_USER_GET_INFLIGHT_FD message flooding (bsc#1171477). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-693=1 Package List: - openSUSE Leap 15.1 (x86_64): dpdk-18.11.3-lp151.3.4.1 dpdk-debuginfo-18.11.3-lp151.3.4.1 dpdk-debugsource-18.11.3-lp151.3.4.1 dpdk-devel-18.11.3-lp151.3.4.1 dpdk-devel-debuginfo-18.11.3-lp151.3.4.1 dpdk-examples-18.11.3-lp151.3.4.1 dpdk-examples-debuginfo-18.11.3-lp151.3.4.1 dpdk-kmp-default-18.11.3_k4.12.14_lp151.28.48-lp151.3.4.1 dpdk-kmp-default-debuginfo-18.11.3_k4.12.14_lp151.28.48-lp151.3.4.1 dpdk-tools-18.11.3-lp151.3.4.1 dpdk-tools-debuginfo-18.11.3-lp151.3.4.1 libdpdk-18_11-18.11.3-lp151.3.4.1 libdpdk-18_11-debuginfo-18.11.3-lp151.3.4.1 - openSUSE Leap 15.1 (noarch): dpdk-doc-18.11.3-lp151.3.4.1 References: https://www.suse.com/security/cve/CVE-2020-10722.html https://www.suse.com/security/cve/CVE-2020-10723.html https://www.suse.com/security/cve/CVE-2020-10724.html https://www.suse.com/security/cve/CVE-2020-10725.html https://www.suse.com/security/cve/CVE-2020-10726.html https://bugzilla.suse.com/1171477

1 0

openSUSE-RU-2020:0687-1: moderate: Recommended update for gnome-themes-standard
by maintenance＠opensuse.org 22 May '20

22 May '20

openSUSE Recommended Update: Recommended update for gnome-themes-standard ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0687-1 Rating: moderate References: #1170757 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gnome-themes-standard fixes the following issue: - Remove the is_opensuse tag to close the gap between Leap and SLE (bsc#1170757, jsc#SLE-11890). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-687=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): gnome-themes-standard-debugsource-3.22.3-lp151.4.3.1 gtk2-theming-engine-adwaita-3.22.3-lp151.4.3.1 gtk2-theming-engine-adwaita-debuginfo-3.22.3-lp151.4.3.1 - openSUSE Leap 15.1 (noarch): gnome-themes-accessibility-3.22.3-lp151.4.3.1 gnome-themes-accessibility-gtk2-3.22.3-lp151.4.3.1 gtk2-metatheme-adwaita-3.22.3-lp151.4.3.1 gtk3-metatheme-adwaita-3.22.3-lp151.4.3.1 metatheme-adwaita-common-3.22.3-lp151.4.3.1 - openSUSE Leap 15.1 (x86_64): gtk2-theming-engine-adwaita-32bit-3.22.3-lp151.4.3.1 gtk2-theming-engine-adwaita-32bit-debuginfo-3.22.3-lp151.4.3.1 References: https://bugzilla.suse.com/1170757

1 0

openSUSE-RU-2020:0683-1: moderate: Recommended update for resource-agents
by maintenance＠opensuse.org 22 May '20

22 May '20

openSUSE Recommended Update: Recommended update for resource-agents ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0683-1 Rating: moderate References: #1136928 #1160121 #1169852 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for resource-agents fixes the following issues: - Disable cache discovery for "gcp-vpc-move-route" resource agent. (bsc#1169852) - Can not manually call the check operation for a resource. (bsc#1136928) - LVM-activate RA: should report monitor fail when VG disappear upon iscsi disconnected. (bsc#1160121) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-683=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): ldirectord-4.3.0184.6ee15eb2-lp151.3.21.1 resource-agents-4.3.0184.6ee15eb2-lp151.3.21.1 resource-agents-debuginfo-4.3.0184.6ee15eb2-lp151.3.21.1 resource-agents-debugsource-4.3.0184.6ee15eb2-lp151.3.21.1 - openSUSE Leap 15.1 (noarch): monitoring-plugins-metadata-4.3.0184.6ee15eb2-lp151.3.21.1 References: https://bugzilla.suse.com/1136928 https://bugzilla.suse.com/1160121 https://bugzilla.suse.com/1169852

1 0

openSUSE-RU-2020:0686-1: moderate: Recommended update for eiciel
by maintenance＠opensuse.org 22 May '20

22 May '20

openSUSE Recommended Update: Recommended update for eiciel ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0686-1 Rating: moderate References: #1170756 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for eiciel fixes the following issue: - Enable translation-update-upstream for both SLE and openSUSE. (bsc#1170756, jsc#SLE-11889) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-686=1 Package List: - openSUSE Leap 15.1 (noarch): eiciel-lang-0.9.12.1-lp151.3.3.1 - openSUSE Leap 15.1 (x86_64): eiciel-0.9.12.1-lp151.3.3.1 eiciel-debuginfo-0.9.12.1-lp151.3.3.1 eiciel-debugsource-0.9.12.1-lp151.3.3.1 nautilus-eiciel-0.9.12.1-lp151.3.3.1 nautilus-eiciel-debuginfo-0.9.12.1-lp151.3.3.1 References: https://bugzilla.suse.com/1170756

1 0

openSUSE-SU-2020:0677-1: moderate: Security update for file
by opensuse-security＠opensuse.org 22 May '20

22 May '20

openSUSE Security Update: Security update for file ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0677-1 Rating: moderate References: #1154661 #1169512 Cross-References: CVE-2019-18218 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for file fixes the following issues: Security issues fixed: - CVE-2019-18218: Fixed a heap-based buffer overflow in cdf_read_property_info() (bsc#1154661). Non-security issue fixed: - Fixed broken '--help' output (bsc#1169512). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-677=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): file-5.32-lp151.8.3.1 file-debuginfo-5.32-lp151.8.3.1 file-debugsource-5.32-lp151.8.3.1 file-devel-5.32-lp151.8.3.1 libmagic1-5.32-lp151.8.3.1 libmagic1-debuginfo-5.32-lp151.8.3.1 python2-magic-5.32-lp151.8.3.1 python3-magic-5.32-lp151.8.3.1 - openSUSE Leap 15.1 (x86_64): file-devel-32bit-5.32-lp151.8.3.1 libmagic1-32bit-5.32-lp151.8.3.1 libmagic1-32bit-debuginfo-5.32-lp151.8.3.1 - openSUSE Leap 15.1 (noarch): file-magic-5.32-lp151.8.3.1 References: https://www.suse.com/security/cve/CVE-2019-18218.html https://bugzilla.suse.com/1154661 https://bugzilla.suse.com/1169512

1 0

openSUSE-RU-2020:0672-1: moderate: Recommended update for cdrtools
by maintenance＠opensuse.org 22 May '20

22 May '20

openSUSE Recommended Update: Recommended update for cdrtools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0672-1 Rating: moderate References: #1169420 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for cdrtools fixes the following issues: - Fix for an issue when 'mediacheck' fails if ISO sizes are larger than 4GB. (bsc#1169420) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-672=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): btcflash-3.02~a09-lp151.4.3.1 btcflash-debuginfo-3.02~a09-lp151.4.3.1 cdda2wav-3.02~a09-lp151.4.3.1 cdda2wav-debuginfo-3.02~a09-lp151.4.3.1 cdrecord-3.02~a09-lp151.4.3.1 cdrecord-debuginfo-3.02~a09-lp151.4.3.1 cdrtools-3.02~a09-lp151.4.3.1 cdrtools-debuginfo-3.02~a09-lp151.4.3.1 cdrtools-debugsource-3.02~a09-lp151.4.3.1 libscg-devel-3.02~a09-lp151.4.3.1 libscg1_0-3.02~a09-lp151.4.3.1 libscg1_0-debuginfo-3.02~a09-lp151.4.3.1 libschily-devel-3.02~a09-lp151.4.3.1 libschily-devel-doc-3.02~a09-lp151.4.3.1 libschily1_0-3.02~a09-lp151.4.3.1 libschily1_0-debuginfo-3.02~a09-lp151.4.3.1 mkisofs-3.02~a09-lp151.4.3.1 mkisofs-debuginfo-3.02~a09-lp151.4.3.1 schily-libs-debuginfo-3.02~a09-lp151.4.3.1 schily-libs-debugsource-3.02~a09-lp151.4.3.1 References: https://bugzilla.suse.com/1169420

1 0

openSUSE-RU-2020:0684-1: moderate: Recommended update for timezone
by maintenance＠opensuse.org 22 May '20

22 May '20

openSUSE Recommended Update: Recommended update for timezone ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0684-1 Rating: moderate References: #1169582 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for timezone fixes the following issues: - timezone update 2020a. (bsc#1169582) * Morocco springs forward on 2020-05-31, not 2020-05-24. * Canada's Yukon advanced to -07 year-round on 2020-03-08. * America/Nuuk renamed from America/Godthab. * zic now supports expiration dates for leap second lists. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-684=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): timezone-2020a-lp151.2.9.1 timezone-debuginfo-2020a-lp151.2.9.1 timezone-debugsource-2020a-lp151.2.9.1 - openSUSE Leap 15.1 (noarch): timezone-java-2020a-lp151.2.9.1 References: https://bugzilla.suse.com/1169582

1 0

openSUSE-SU-2020:0679-1: moderate: Security update for libbsd
by opensuse-security＠opensuse.org 22 May '20

22 May '20

openSUSE Security Update: Security update for libbsd ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0679-1 Rating: moderate References: #1160551 Cross-References: CVE-2019-20367 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libbsd fixes the following issues: - CVE-2019-20367: Fixed an out-of-bounds read during a comparison for a symbol names from the string table (bsc#1160551). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-679=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libbsd-ctor-static-0.8.7-lp151.3.3.1 libbsd-debugsource-0.8.7-lp151.3.3.1 libbsd-devel-0.8.7-lp151.3.3.1 libbsd0-0.8.7-lp151.3.3.1 libbsd0-debuginfo-0.8.7-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2019-20367.html https://bugzilla.suse.com/1160551

1 0

openSUSE-RU-2020:0691-1: moderate: Recommended update for tcsh
by maintenance＠opensuse.org 22 May '20

22 May '20

openSUSE Recommended Update: Recommended update for tcsh ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0691-1 Rating: moderate References: #1170527 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for tcsh fixes the following issues: - Fix for an issue when Midnight Commander freezes changing directory using tcsh shell. (bsc#1170527) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-691=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): tcsh-6.20.00-lp151.3.12.1 tcsh-debuginfo-6.20.00-lp151.3.12.1 tcsh-debugsource-6.20.00-lp151.3.12.1 - openSUSE Leap 15.1 (noarch): tcsh-lang-6.20.00-lp151.3.12.1 References: https://bugzilla.suse.com/1170527

1 0

openSUSE-RU-2020:0697-1: moderate: Recommended update for python3
by maintenance＠opensuse.org 22 May '20

22 May '20

openSUSE Recommended Update: Recommended update for python3 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0697-1 Rating: moderate References: #1149955 #1165894 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for python3 fixes the following issues: - Changed the name of idle3 icons to idle3.png to avoid collision with Python 2 version (bsc#1165894). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-697=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libpython3_6m1_0-3.6.10-lp151.6.18.1 libpython3_6m1_0-debuginfo-3.6.10-lp151.6.18.1 python3-3.6.10-lp151.6.18.1 python3-base-3.6.10-lp151.6.18.1 python3-base-debuginfo-3.6.10-lp151.6.18.1 python3-base-debugsource-3.6.10-lp151.6.18.1 python3-curses-3.6.10-lp151.6.18.1 python3-curses-debuginfo-3.6.10-lp151.6.18.1 python3-dbm-3.6.10-lp151.6.18.1 python3-dbm-debuginfo-3.6.10-lp151.6.18.1 python3-debuginfo-3.6.10-lp151.6.18.1 python3-debugsource-3.6.10-lp151.6.18.1 python3-devel-3.6.10-lp151.6.18.1 python3-devel-debuginfo-3.6.10-lp151.6.18.1 python3-idle-3.6.10-lp151.6.18.1 python3-testsuite-3.6.10-lp151.6.18.1 python3-testsuite-debuginfo-3.6.10-lp151.6.18.1 python3-tk-3.6.10-lp151.6.18.1 python3-tk-debuginfo-3.6.10-lp151.6.18.1 python3-tools-3.6.10-lp151.6.18.1 - openSUSE Leap 15.1 (x86_64): libpython3_6m1_0-32bit-3.6.10-lp151.6.18.1 libpython3_6m1_0-32bit-debuginfo-3.6.10-lp151.6.18.1 python3-32bit-3.6.10-lp151.6.18.1 python3-32bit-debuginfo-3.6.10-lp151.6.18.1 python3-base-32bit-3.6.10-lp151.6.18.1 python3-base-32bit-debuginfo-3.6.10-lp151.6.18.1 References: https://www.suse.com/security/cve/CVE-2019-16056.html https://bugzilla.suse.com/1149955 https://bugzilla.suse.com/1165894

1 0

openSUSE-RU-2020:0674-1: moderate: Recommended update for gnutls
by maintenance＠opensuse.org 22 May '20

22 May '20

openSUSE Recommended Update: Recommended update for gnutls ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0674-1 Rating: moderate References: #1171422 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gnutls fixes the following issues: - Add RSA 4096 key generation support in FIPS mode (bsc#1171422) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-674=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): gnutls-3.6.7-lp151.2.15.1 gnutls-debuginfo-3.6.7-lp151.2.15.1 gnutls-debugsource-3.6.7-lp151.2.15.1 gnutls-guile-3.6.7-lp151.2.15.1 gnutls-guile-debuginfo-3.6.7-lp151.2.15.1 libgnutls-dane-devel-3.6.7-lp151.2.15.1 libgnutls-dane0-3.6.7-lp151.2.15.1 libgnutls-dane0-debuginfo-3.6.7-lp151.2.15.1 libgnutls-devel-3.6.7-lp151.2.15.1 libgnutls30-3.6.7-lp151.2.15.1 libgnutls30-debuginfo-3.6.7-lp151.2.15.1 libgnutls30-hmac-3.6.7-lp151.2.15.1 libgnutlsxx-devel-3.6.7-lp151.2.15.1 libgnutlsxx28-3.6.7-lp151.2.15.1 libgnutlsxx28-debuginfo-3.6.7-lp151.2.15.1 - openSUSE Leap 15.1 (x86_64): libgnutls-devel-32bit-3.6.7-lp151.2.15.1 libgnutls30-32bit-3.6.7-lp151.2.15.1 libgnutls30-32bit-debuginfo-3.6.7-lp151.2.15.1 libgnutls30-hmac-32bit-3.6.7-lp151.2.15.1 References: https://bugzilla.suse.com/1171422

1 0

openSUSE-SU-2020:0673-1: moderate: Security update for imapfilter
by opensuse-security＠opensuse.org 22 May '20

22 May '20

openSUSE Security Update: Security update for imapfilter ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0673-1 Rating: moderate References: #1149931 Cross-References: CVE-2016-10937 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for imapfilter fixes the following issues: Imapfilter was updated to version 2.6.16 including the following security issue: - CVE-2016-10937: Added Support for SSL hostname validation (boo#1149931). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-673=1 Package List: - openSUSE Leap 15.1 (x86_64): imapfilter-2.6.16-lp151.3.3.1 imapfilter-debuginfo-2.6.16-lp151.3.3.1 imapfilter-debugsource-2.6.16-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2016-10937.html https://bugzilla.suse.com/1149931

1 0