May 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2020:0651-1: moderate: Security update for python-markdown2
by opensuse-security＠opensuse.org 11 May '20

11 May '20

openSUSE Security Update: Security update for python-markdown2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0651-1 Rating: moderate References: #1171379 Cross-References: CVE-2020-11888 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-markdown2 fixes the following issues: - CVE-2020-11888: Fixed unsanitized input for cross-site scripting (boo#1171379) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-651=1 Package List: - openSUSE Leap 15.1 (noarch): python2-markdown2-2.3.7-lp151.2.3.1 python3-markdown2-2.3.7-lp151.2.3.1 References: https://www.suse.com/security/cve/CVE-2020-11888.html https://bugzilla.suse.com/1171379

1 0

openSUSE-RU-2020:0649-1: moderate: Recommended update for paraview
by maintenance＠opensuse.org 11 May '20

11 May '20

openSUSE Recommended Update: Recommended update for paraview ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0649-1 Rating: moderate References: #1171061 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for paraview fixes the following issues: Update to version 5.6.3 (boo#1171061): * Bug-fix release: No changelog available from upstream. Changes from version 5.6.1: * See https://blog.kitware.com/paraview-5-6-1-release-notes/ Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-649=1 Package List: - openSUSE Leap 15.1 (x86_64): paraview-5.6.3-lp151.2.3.1 paraview-debuginfo-5.6.3-lp151.2.3.1 paraview-debugsource-5.6.3-lp151.2.3.1 paraview-devel-5.6.3-lp151.2.3.1 paraview-devel-debuginfo-5.6.3-lp151.2.3.1 References: https://bugzilla.suse.com/1171061

1 0

openSUSE-SU-2020:0648-1: important: Security update for chromium
by opensuse-security＠opensuse.org 11 May '20

11 May '20

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0648-1 Rating: important References: #1171247 Cross-References: CVE-2020-6464 CVE-2020-6831 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for chromium fixes the following issues: Update to 81.0.4044.138 (boo#1171247): - CVE-2020-6831: Stack buffer overflow in SCTP - CVE-2020-6464: Type Confusion in Blink This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-648=1 Package List: - openSUSE Backports SLE-15-SP1 (x86_64): chromedriver-81.0.4044.138-bp151.3.82.2 chromium-81.0.4044.138-bp151.3.82.2 References: https://www.suse.com/security/cve/CVE-2020-6464.html https://www.suse.com/security/cve/CVE-2020-6831.html https://bugzilla.suse.com/1171247

1 0

openSUSE-SU-2020:0620-1: important: Security update for chromium
by opensuse-security＠opensuse.org 11 May '20

11 May '20

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0620-1 Rating: important References: #1171247 Cross-References: CVE-2020-6464 CVE-2020-6831 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for chromium fixes the following issues: Update to 81.0.4044.138 (boo#1171247): - CVE-2020-6831: Stack buffer overflow in SCTP - CVE-2020-6464: Type Confusion in Blink Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-620=1 Package List: - openSUSE Leap 15.1 (x86_64): chromedriver-81.0.4044.138-lp151.2.88.1 chromedriver-debuginfo-81.0.4044.138-lp151.2.88.1 chromium-81.0.4044.138-lp151.2.88.1 chromium-debuginfo-81.0.4044.138-lp151.2.88.1 chromium-debugsource-81.0.4044.138-lp151.2.88.1 References: https://www.suse.com/security/cve/CVE-2020-6464.html https://www.suse.com/security/cve/CVE-2020-6831.html https://bugzilla.suse.com/1171247

1 0

openSUSE-SU-2020:0635-1: important: Security update for opera
by opensuse-security＠opensuse.org 11 May '20

11 May '20

openSUSE Security Update: Security update for opera ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0635-1 Rating: important References: Cross-References: CVE-2020-6457 CVE-2020-6458 CVE-2020-6459 CVE-2020-6460 CVE-2020-6461 CVE-2020-6462 Affected Products: openSUSE Leap 15.1:NonFree ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update for opera fixes the following issues: Opera was updated to version 68.0.3618.63 - CHR-7889 Update chromium on desktop-stable-81-3618 to 81.0.4044.122 - CHR-7896 Update chromium on desktop-stable-81-3618 to 81.0.4044.129 - DNA-85287 Set standard spacing for Yandex prompt - DNA-85416 [Mac] Animation of tab insert is glitchy on slow machines - DNA-85568 Verify API for triggering “unread” mode with Instagram. - DNA-86027 Present Now not working in google meet after canceling it once - DNA-86028 Add a back and forward button in the Instagram panel - DNA-86029 Investigate and implement re-freshing of the instagram panel content - Update chromium to 81.0.4044.122 fixes CVE-2020-6458, CVE-2020-6459, CVE-2020-6460 - Update chromium to 81.0.4044.129 fixes CVE-2020-6461, CVE-2020-6462 Update to version 68.0.3618.56 - DNA-85256 [Win] Cookies section on site pages is white in dark mode - DNA-85474 [Mac] Dragging tabs to the left with hidden sidebar is broken - DNA-85771 DNS-over-HTTPS example in settings is wrong - DNA-85976 Change page display time when navigating from opera:startpage - CHR-7878 Update chromium on desktop-stable-81-3618 to 81.0.4044.113 (CVE-2020-6457) - DNA-78158 PATCH-1272 should be removed - DNA-84721 Weather widget is overlapped when ‘Use bigger tiles’ - DNA-85246 Implement 0-state dialog and onboarding - DNA-85354 O-menu is misplaced when opened with maximized opera - DNA-85405 Add link to Privacy Policy on the 0-state dialog - DNA-85409 Ask for geolocation EULA once - DNA-85426 Crash at opera::DownloadActionButton::Update() - DNA-85454 Add id’s to elements for testing - DNA-85493 Add “Show Weather” toggle to “Start Page” section in Easy Setup - DNA-85501 Set timestamps in geolocation exception record - DNA-85514 Add fallback when geolocation fails - DNA-85713 Report consent for geolocation on start page - DNA-85753 Fetch news configuration from new endpoint - DNA-85798 Incorrect padding in Search in Tabs window - DNA-85801 Disable notification on instagram panel - DNA-85809 Update instagram icon in the Sidebar Setup - DNA-85854 Change Instagram panel size, to fit desktop version - Complete Opera 68.0 changelog at: https://blogs.opera.com/desktop/changelog-for-68/ Update to version 67.0.3575.137 - CHR-7852 Update chromium on desktop-stable-80-3575 to 80.0.3987.163 - DNA-82540 Crash at remote_cocoa::NativeWidgetNSWindowBridge:: SetVisibilityState(remote_cocoa::mojom::WindowVisibilityState) - DNA-84951 New PiP is completely black for some 2 GPU setups - DNA-85284 Chrome “Open link in same tab, pop-up as tab [Free]” extension is no longer working in Opera - DNA-85415 [Mac] Inspect Popup not working - DNA-85530 Create API for displaying and triggering “unread” mode for messengers from in-app - DNA-85537 Let addons.opera.com interact with sidebar messengers Update to version 67.0.3575.115 - CHR-7833 Update chromium on desktop-stable-80-3575 to 80.0.3987.149 - DNA-74423 [Mac] Search/Copy popup stuck on top left of screen - DNA-82975 Crash at blink::DocumentLifecycle::EnsureStateAtMost (blink::DocumentLifecycle::LifecycleState) - DNA-83834 Crash at base::MessagePumpNSApplication:: DoRun (base::MessagePump::Delegate*) - DNA-84632 macOS 10.15.2 fail on creating testlist.json - DNA-84713 Switching through tabs broken when using workspaces Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1:NonFree: zypper in -t patch openSUSE-2020-635=1 Package List: - openSUSE Leap 15.1:NonFree (x86_64): opera-68.0.3618.63-lp151.2.15.1 References: https://www.suse.com/security/cve/CVE-2020-6457.html https://www.suse.com/security/cve/CVE-2020-6458.html https://www.suse.com/security/cve/CVE-2020-6459.html https://www.suse.com/security/cve/CVE-2020-6460.html https://www.suse.com/security/cve/CVE-2020-6461.html https://www.suse.com/security/cve/CVE-2020-6462.html

1 0

openSUSE-SU-2020:0624-1: important: Security update for LibVNCServer
by opensuse-security＠opensuse.org 11 May '20

11 May '20

openSUSE Security Update: Security update for LibVNCServer ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0624-1 Rating: important References: #1155419 #1160471 #1170441 Cross-References: CVE-2019-15681 CVE-2019-15690 CVE-2019-20788 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for LibVNCServer fixes the following issues: - CVE-2019-15690: Fixed a heap buffer overflow (bsc#1160471). - CVE-2019-15681: Fixed a memory leak which could have allowed to a remote attacker to read stack memory (bsc#1155419). - CVE-2019-20788: Fixed a integer overflow and heap-based buffer overflow via a large height or width value (bsc#1170441). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-624=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): LibVNCServer-debugsource-0.9.10-lp151.7.3.1 LibVNCServer-devel-0.9.10-lp151.7.3.1 libvncclient0-0.9.10-lp151.7.3.1 libvncclient0-debuginfo-0.9.10-lp151.7.3.1 libvncserver0-0.9.10-lp151.7.3.1 libvncserver0-debuginfo-0.9.10-lp151.7.3.1 References: https://www.suse.com/security/cve/CVE-2019-15681.html https://www.suse.com/security/cve/CVE-2019-15690.html https://www.suse.com/security/cve/CVE-2019-20788.html https://bugzilla.suse.com/1155419 https://bugzilla.suse.com/1160471 https://bugzilla.suse.com/1170441

1 0

openSUSE-RU-2020:0633-1: moderate: Recommended update for haproxy
by maintenance＠opensuse.org 11 May '20

11 May '20

openSUSE Recommended Update: Recommended update for haproxy ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0633-1 Rating: moderate References: #1169457 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for haproxy fixes the following issues: - Update from version 2.0.10+git0.ac198b92 to version 2.0.14. (bsc#1169457) * BUG/CRITICAL: hpack: never index a header into the headroom after wrapping * BUG/MAJOR: dns: add minimalist error processing on the Rx path * BUG/MAJOR: hashes: fix the signedness of the hash inputs * BUG/MAJOR: http-ana: Always abort the request when a tarpit is triggered * BUG/MAJOR: list: fix invalid element address calculation * BUG/MAJOR: memory: Don't forget to unlock the rwlock if the pool is empty. * BUG/MAJOR: proxy_protocol: Properly validate TLV lengths * BUG/MAJOR: task: add a new TASK_SHARED_WQ flag to fix foreing requeuing * BUG/MEDIUM: 0rtt: Only consider the SSL handshake. * BUG/MEDIUM: cache/filters: Fix loop on HTX blocks caching the response payload * BUG/MEDIUM: checks: Make sure we set the task affinity just before connecting. * BUG/MEDIUM: checks: Only attempt to do handshakes if the connection is ready. * BUG/MEDIUM: cli: _getsocks must send the peers sockets * BUG/MEDIUM: compression/filters: Fix loop on HTX blocks compressing the payload * BUG/MEDIUM: connection: add a mux flag to indicate splice usability * BUG/MEDIUM: connections: Don't forget to unlock when killing a connection. * BUG/MEDIUM: connections: Hold the lock when wanting to kill a connection. * BUG/MEDIUM: debug: make the debug_handler check for the thread in threads_to_dump * BUG/MEDIUM: ebtree: don't set attribute packed without unaligned access support * BUG/MEDIUM: fd/threads: fix a concurrency issue between add and rm on the same fd * BUG/MEDIUM: http-ana: Truncate the response when a redirect rule is applied * BUG/MEDIUM: kqueue: Make sure we report read events even when no data. * BUG/MEDIUM: listener/thread: fix a race when pausing a listener * BUG/MEDIUM: listener/threads: fix a remaining race in the listener's accept() * BUG/MEDIUM: listener: only consider running threads when resuming listeners * BUG/MEDIUM: memory: Add a rwlock before freeing memory. * BUG/MEDIUM: memory_pool: Update the seq number in pool_flush(). * BUG/MEDIUM: mux-h1: Never reuse H1 connection if a shutw is pending * BUG/MEDIUM: mux-h2: don't stop sending when crossing a buffer boundary * BUG/MEDIUM: mux-h2: fix missing test on sending_list in previous patch * BUG/MEDIUM: mux-h2: make sure we don't emit TE headers with anything but "trailers" * BUG/MEDIUM: mux_h1: Don't call h1_send if we subscribed(). * BUG/MEDIUM: muxes: Use the right argument when calling the destroy method. * BUG/MEDIUM: mworker: remain in mworker mode during reload * BUG/MEDIUM: peers: resync ended with RESYNC_PARTIAL in wrong cases. * BUG/MEDIUM: pipe: fix a use-after-free in case of pipe creation error * BUG/MEDIUM: proto_udp/threads: recv() and send() must not be exclusive. * BUG/MEDIUM: random: align the state on 2*64 bits for ARM64 * BUG/MEDIUM: random: implement a thread-safe and process-safe PRNG * BUG/MEDIUM: random: initialize the random pool a bit better * BUG/MEDIUM: session: do not report a failure when rejecting a session * BUG/MEDIUM: shctx: make sure to keep all blocks aligned * BUG/MEDIUM: ssl: Don't forget to free ctx->ssl on failure. * BUG/MEDIUM: ssl: Don't set the max early data we can receive too early. * BUG/MEDIUM: ssl: Revamp the way early data are handled. * BUG/MEDIUM: ssl: fix several bad pointer aliases in a few sample fetch functions * BUG/MEDIUM: stream-int: don't subscribed for recv when we're trying to flush data * BUG/MEDIUM: stream: Be sure to never assign a TCP backend to an HTX stream * BUG/MEDIUM: tasks: Make sure we switch wait queues in task_set_affinity(). * BUG/MEDIUM: wdt: Don't ignore WDTSIG and DEBUGSIG in __signal_process_queue(). * BUG/MINOR: 51d: Fix bug when HTX is enabled * BUG/MINOR: cache: Fix leak of cache name in error path * BUG/MINOR: channel: inject output data at the end of output * BUG/MINOR: checks/threads: use ha_random() and not rand() * BUG/MINOR: checks: refine which errno values are really errors. * BUG/MINOR: cli/mworker: can't start haproxy with 2 programs * BUG/MINOR: connection: fix ip6 dst_port copy in make_proxy_line_v2 * BUG/MINOR: connection: make sure to correctly tag local PROXY connections * BUG/MINOR: connections: Make sure we free the connection on failure. * BUG/MINOR: contrib/prometheus-exporter: Use HTX errors and not legacy ones * BUG/MINOR: contrib/prometheus-exporter: decode parameter and value only * BUG/MINOR: dns: Make dns_query_id_seed unsigned * BUG/MINOR: dns: allow 63 char in hostname * BUG/MINOR: dns: allow srv record weight set to 0 * BUG/MINOR: dns: ignore trailing dot * BUG/MINOR: filters: Count HTTP headers as filtered data but don't forward them * BUG/MINOR: filters: Forward everything if no data filters are called * BUG/MINOR: filters: Use filter offset to decude the amount of forwarded data * BUG/MINOR: h1: Report the right error position when a header value is invalid * BUG/MINOR: haproxy/threads: close a possible race in soft-stop detection * BUG/MINOR: haproxy/threads: try to make all threads leave together * BUG/MINOR: haproxy: always initialize sleeping_thread_mask * BUG/MINOR: http-ana/filters: Wait end of the http_end callback for all filters * BUG/MINOR: http-ana: Matching on monitor-uri should be case-sensitive * BUG/MINOR: http-ana: Reset request analysers on a response side error * BUG/MINOR: http-ana: Reset request analysers on error when waiting for response * BUG/MINOR: http-htx: Don't make http_find_header() fail if the value is empty * BUG/MINOR: http-rules: Fix a typo in the reject action function * BUG/MINOR: http-rules: Preserve FLT_END analyzers on reject action * BUG/MINOR: http-rules: Remove buggy deinit functions for HTTP rules * BUG/MINOR: http: http-request replace-path duplicates the query string * BUG/MINOR: http_act: don't check capture id in backend * BUG/MINOR: http_ana: make sure redirect flags don't have overlapping bits * BUG/MINOR: init: make the automatic maxconn consider the max of soft/hard limits * BUG/MINOR: listener/mq: do not dispatch connections to remote threads when stopping * BUG/MINOR: listener/threads: always use atomic ops to clear the FD events * BUG/MINOR: listener: also clear the error flag on a paused listener * BUG/MINOR: listener: do not immediately resume on transient error * BUG/MINOR: listener: enforce all_threads_mask on bind_thread on init * BUG/MINOR: listener: fix off-by-one in state name check * BUG/MINOR: log: fix minor resource leaks on logformat error path * BUG/MINOR: lua: Ignore the reserve to know if a channel is full or not * BUG/MINOR: mux-h1: Be sure to set CS_FL_WANT_ROOM when EOM can't be added * BUG/MINOR: mux-h1: Don't rely on CO_FL_SOCK_RD_SH to set H1C_F_CS_SHUTDOWN * BUG/MINOR: mux-h1: Fix conditions to know whether or not we may receive data * BUG/MINOR: mux-h2: use a safe list_for_each_entry in h2_send() * BUG/MINOR: mworker: properly pass SIGTTOU/SIGTTIN to workers * BUG/MINOR: namespace: avoid closing fd when socket failed in my_socketat * BUG/MINOR: pattern: Do not pass len = 0 to calloc() * BUG/MINOR: pattern: handle errors from fgets when trying to load patterns * BUG/MINOR: peers: Use after free of "peers" section. * BUG/MINOR: peers: avoid an infinite loop with peers_fe is NULL * BUG/MINOR: peers: init bind_proc to 1 if it wasn't initialized * BUG/MINOR: proxy: Fix input data copy when an error is captured * BUG/MINOR: proxy: make soft_stop() also close FDs in LI_PAUSED state * BUG/MINOR: rules: Increment be_counters if backend is assigned for a silent-drop * BUG/MINOR: rules: Preserve FLT_END analyzers on silent-drop action * BUG/MINOR: sample: Make sure to return stable IDs in the unique-id fetch * BUG/MINOR: sample: always check converters' arguments * BUG/MINOR: sample: fix the closing bracket and LF in the debug converter * BUG/MINOR: sample: fix the json converter's endian-sensitivity * BUG/MINOR: server: make "agent-addr" work on default-server line * BUG/MINOR: ssl: Possible memleak when allowing the 0RTT data buffer. * BUG/MINOR: ssl: certificate choice can be unexpected with openssl >= 1.1.1 * BUG/MINOR: ssl: openssl-compat: Fix getm_ defines * BUG/MINOR: ssl: we may only ignore the first 64 errors * BUG/MINOR: stats: Fix color of draining servers on stats page * BUG/MINOR: stick-table: Use MAX_SESS_STKCTR as the max track ID during parsing * BUG/MINOR: stktable: report the current proxy name in error messages * BUG/MINOR: stream-int: Don't trigger L7 retry if max retries is already reached * BUG/MINOR: stream-int: avoid calling rcv_buf() when splicing is still possible * BUG/MINOR: stream: don't mistake match rules for store-request rules * BUG/MINOR: stream: init variables when the list is empty * BUG/MINOR: tasks: only requeue a task if it was already in the queue * BUG/MINOR: tcp-rules: Fix memory releases on error path during action parsing * BUG/MINOR: tcp: avoid closing fd when socket failed in tcp_bind_listener * BUG/MINOR: tcp: don't try to set defaultmss when value is negative * BUG/MINOR: tcpchecks: fix the connect() flags regarding delayed ack * BUG/MINOR: unix: better catch situations where the unix socket path length is close to the limit * BUG/MINOR: wdt: do not return an error when the watchdog couldn't be enabled * CONTRIB: debug: add missing flags SF_HTX and SF_MUX * CONTRIB: debug: add the possibility to decode the value as certain types only * CONTRIB: debug: also support reading values from stdin * CONTRIB: debug: support reporting multiple values at once * DOC: Clarify behavior of server maxconn in HTTP mode * DOC: Improve documentation of http-re(quest|sponse) replace-(header|value|uri) * DOC: assorted typo fixes in the documentation * DOC: assorted typo fixes in the documentation and Makefile * DOC: clarify matching strings on binary fetches * DOC: clarify the fact that replace-uri works on a full URI * DOC: configuration.txt: fix various typos * DOC: document the listener state transitions * DOC: fix incorrect indentation of http_auth_* * DOC: fix typo about no-tls-tickets * DOC: improve description of no-tls-tickets * DOC: internals: Fix spelling errors in filters.txt * DOC: listeners: add a few missing transitions * DOC: move the "group" keyword at the right place * DOC: proxies: HAProxy only supports 3 connection modes * DOC: proxy_protocol: Reserve TLV type 0x05 as PP2_TYPE_UNIQUE_ID * DOC: remove references to the outdated architecture.txt * DOC: ssl: clarify security implications of TLS tickets * DOC: word converter ignores delimiters at the start or end of input string * MINOR: acl: Warn when an ACL is named 'or' * MINOR: backend: use a single call to ha_random32() for the random LB algo * MINOR: build: add linux-glibc-legacy build TARGET * MINOR: compiler: add new alignment macros * MINOR: compiler: move CPU capabilities definition from config.h and complete them * MINOR: config: disable busy polling on old processes * MINOR: contrib/prometheus-exporter: Add heathcheck status/code in server metrics * MINOR: contrib/prometheus-exporter: Add the last heathcheck duration metric * MINOR: debug: report the task handler's pointer relative to main * MINOR: fd/threads: make _GET_NEXT()/_GET_PREV() use the volatile attribute * MINOR: filters: Forward data only if the last filter forwards something * MINOR: haproxy: export main to ease access from debugger * MINOR: http-htx: Add a function to retrieve the headers size of an HTX message * MINOR: http-rules: Add a flag on redirect rules to know the rule direction * MINOR: http-rules: Handle the rule direction when a redirect is evaluated * MINOR: http: add a new "replace-path" action * MINOR: htx: Add a function to return a block at a specific offset * MINOR: ist: add an iststop() function * MINOR: listener: add so_name sample fetch * MINOR: memory: Change the flush_lock to a spinlock, and don't get it in alloc. * MINOR: memory: Only init the pool spinlock once. * MINOR: proxy/http-ana: Add support of extra attributes for the cookie directive * MINOR: ssl: Remove unused variable "need_out". * MINOR: task: only check TASK_WOKEN_ANY to decide to requeue a task * MINOR: tools: add 64-bit rotate operators * MINOR: wdt: Move the definitions of WDTSIG and DEBUGSIG into types/signal.h. * OPTIM: startup: fast unique_id allocation for acl. * SCRIPTS: announce-release: allow the user to force to overwrite old files * SCRIPTS: announce-release: place the send command in the mail's header * SCRIPTS: announce-release: use mutt -H instead of -i to include the draft * SCRIPTS: make announce-release executable again This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-633=1 Package List: - openSUSE Leap 15.1 (x86_64): haproxy-2.0.14-lp151.2.12.1 haproxy-debuginfo-2.0.14-lp151.2.12.1 haproxy-debugsource-2.0.14-lp151.2.12.1 References: https://bugzilla.suse.com/1169457

1 0

openSUSE-SU-2020:0628-1: important: Security update for sqliteodbc
by opensuse-security＠opensuse.org 11 May '20

11 May '20

openSUSE Security Update: Security update for sqliteodbc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0628-1 Rating: important References: #1171041 Cross-References: CVE-2020-12050 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for sqliteodbc fixes the following issues: Security issue fixed: - CVE-2020-12050: Fixed a privilege escalation vulnerability (boo#1171041). Non-security issues fixed: - Update to version 0.9996 * update to SQLite 3.22.0 * fixes in handling DDL in SQLExecDirect() et.al., thanks Andre Mikulec for testing * cleanup utf8/unicode conversion functions Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-628=1 Package List: - openSUSE Leap 15.1 (x86_64): sqliteodbc-0.9996-lp151.3.3.1 sqliteodbc-debuginfo-0.9996-lp151.3.3.1 sqliteodbc-debugsource-0.9996-lp151.3.3.1 sqliteodbc-doc-0.9996-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2020-12050.html https://bugzilla.suse.com/1171041

1 0

openSUSE-SU-2020:0642-1: moderate: Security update for php7
by opensuse-security＠opensuse.org 11 May '20

11 May '20

openSUSE Security Update: Security update for php7 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0642-1 Rating: moderate References: #1168326 #1168352 Cross-References: CVE-2020-7064 CVE-2020-7066 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for php7 fixes the following issues: - CVE-2020-7064: Fixed a one byte read of uninitialized memory in exif_read_data() (bsc#1168326). - CVE-2020-7066: Fixed URL truncation get_headers() if the URL contains zero (\0) character (bsc#1168352). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-642=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): apache2-mod_php7-7.2.5-lp151.6.25.1 apache2-mod_php7-debuginfo-7.2.5-lp151.6.25.1 libtidy-devel-5.4.0-lp151.3.3.1 libtidy5-5.4.0-lp151.3.3.1 libtidy5-debuginfo-5.4.0-lp151.3.3.1 php7-7.2.5-lp151.6.25.1 php7-bcmath-7.2.5-lp151.6.25.1 php7-bcmath-debuginfo-7.2.5-lp151.6.25.1 php7-bz2-7.2.5-lp151.6.25.1 php7-bz2-debuginfo-7.2.5-lp151.6.25.1 php7-calendar-7.2.5-lp151.6.25.1 php7-calendar-debuginfo-7.2.5-lp151.6.25.1 php7-ctype-7.2.5-lp151.6.25.1 php7-ctype-debuginfo-7.2.5-lp151.6.25.1 php7-curl-7.2.5-lp151.6.25.1 php7-curl-debuginfo-7.2.5-lp151.6.25.1 php7-dba-7.2.5-lp151.6.25.1 php7-dba-debuginfo-7.2.5-lp151.6.25.1 php7-debuginfo-7.2.5-lp151.6.25.1 php7-debugsource-7.2.5-lp151.6.25.1 php7-devel-7.2.5-lp151.6.25.1 php7-dom-7.2.5-lp151.6.25.1 php7-dom-debuginfo-7.2.5-lp151.6.25.1 php7-embed-7.2.5-lp151.6.25.1 php7-embed-debuginfo-7.2.5-lp151.6.25.1 php7-enchant-7.2.5-lp151.6.25.1 php7-enchant-debuginfo-7.2.5-lp151.6.25.1 php7-exif-7.2.5-lp151.6.25.1 php7-exif-debuginfo-7.2.5-lp151.6.25.1 php7-fastcgi-7.2.5-lp151.6.25.1 php7-fastcgi-debuginfo-7.2.5-lp151.6.25.1 php7-fileinfo-7.2.5-lp151.6.25.1 php7-fileinfo-debuginfo-7.2.5-lp151.6.25.1 php7-firebird-7.2.5-lp151.6.25.1 php7-firebird-debuginfo-7.2.5-lp151.6.25.1 php7-fpm-7.2.5-lp151.6.25.1 php7-fpm-debuginfo-7.2.5-lp151.6.25.1 php7-ftp-7.2.5-lp151.6.25.1 php7-ftp-debuginfo-7.2.5-lp151.6.25.1 php7-gd-7.2.5-lp151.6.25.1 php7-gd-debuginfo-7.2.5-lp151.6.25.1 php7-gettext-7.2.5-lp151.6.25.1 php7-gettext-debuginfo-7.2.5-lp151.6.25.1 php7-gmp-7.2.5-lp151.6.25.1 php7-gmp-debuginfo-7.2.5-lp151.6.25.1 php7-iconv-7.2.5-lp151.6.25.1 php7-iconv-debuginfo-7.2.5-lp151.6.25.1 php7-intl-7.2.5-lp151.6.25.1 php7-intl-debuginfo-7.2.5-lp151.6.25.1 php7-json-7.2.5-lp151.6.25.1 php7-json-debuginfo-7.2.5-lp151.6.25.1 php7-ldap-7.2.5-lp151.6.25.1 php7-ldap-debuginfo-7.2.5-lp151.6.25.1 php7-mbstring-7.2.5-lp151.6.25.1 php7-mbstring-debuginfo-7.2.5-lp151.6.25.1 php7-mysql-7.2.5-lp151.6.25.1 php7-mysql-debuginfo-7.2.5-lp151.6.25.1 php7-odbc-7.2.5-lp151.6.25.1 php7-odbc-debuginfo-7.2.5-lp151.6.25.1 php7-opcache-7.2.5-lp151.6.25.1 php7-opcache-debuginfo-7.2.5-lp151.6.25.1 php7-openssl-7.2.5-lp151.6.25.1 php7-openssl-debuginfo-7.2.5-lp151.6.25.1 php7-pcntl-7.2.5-lp151.6.25.1 php7-pcntl-debuginfo-7.2.5-lp151.6.25.1 php7-pdo-7.2.5-lp151.6.25.1 php7-pdo-debuginfo-7.2.5-lp151.6.25.1 php7-pgsql-7.2.5-lp151.6.25.1 php7-pgsql-debuginfo-7.2.5-lp151.6.25.1 php7-phar-7.2.5-lp151.6.25.1 php7-phar-debuginfo-7.2.5-lp151.6.25.1 php7-posix-7.2.5-lp151.6.25.1 php7-posix-debuginfo-7.2.5-lp151.6.25.1 php7-readline-7.2.5-lp151.6.25.1 php7-readline-debuginfo-7.2.5-lp151.6.25.1 php7-shmop-7.2.5-lp151.6.25.1 php7-shmop-debuginfo-7.2.5-lp151.6.25.1 php7-snmp-7.2.5-lp151.6.25.1 php7-snmp-debuginfo-7.2.5-lp151.6.25.1 php7-soap-7.2.5-lp151.6.25.1 php7-soap-debuginfo-7.2.5-lp151.6.25.1 php7-sockets-7.2.5-lp151.6.25.1 php7-sockets-debuginfo-7.2.5-lp151.6.25.1 php7-sodium-7.2.5-lp151.6.25.1 php7-sodium-debuginfo-7.2.5-lp151.6.25.1 php7-sqlite-7.2.5-lp151.6.25.1 php7-sqlite-debuginfo-7.2.5-lp151.6.25.1 php7-sysvmsg-7.2.5-lp151.6.25.1 php7-sysvmsg-debuginfo-7.2.5-lp151.6.25.1 php7-sysvsem-7.2.5-lp151.6.25.1 php7-sysvsem-debuginfo-7.2.5-lp151.6.25.1 php7-sysvshm-7.2.5-lp151.6.25.1 php7-sysvshm-debuginfo-7.2.5-lp151.6.25.1 php7-test-7.2.5-lp151.6.25.1 php7-tidy-7.2.5-lp151.6.25.1 php7-tidy-debuginfo-7.2.5-lp151.6.25.1 php7-tokenizer-7.2.5-lp151.6.25.1 php7-tokenizer-debuginfo-7.2.5-lp151.6.25.1 php7-wddx-7.2.5-lp151.6.25.1 php7-wddx-debuginfo-7.2.5-lp151.6.25.1 php7-xmlreader-7.2.5-lp151.6.25.1 php7-xmlreader-debuginfo-7.2.5-lp151.6.25.1 php7-xmlrpc-7.2.5-lp151.6.25.1 php7-xmlrpc-debuginfo-7.2.5-lp151.6.25.1 php7-xmlwriter-7.2.5-lp151.6.25.1 php7-xmlwriter-debuginfo-7.2.5-lp151.6.25.1 php7-xsl-7.2.5-lp151.6.25.1 php7-xsl-debuginfo-7.2.5-lp151.6.25.1 php7-zip-7.2.5-lp151.6.25.1 php7-zip-debuginfo-7.2.5-lp151.6.25.1 php7-zlib-7.2.5-lp151.6.25.1 php7-zlib-debuginfo-7.2.5-lp151.6.25.1 tidy-5.4.0-lp151.3.3.1 tidy-debuginfo-5.4.0-lp151.3.3.1 tidy-debugsource-5.4.0-lp151.3.3.1 - openSUSE Leap 15.1 (noarch): php7-pear-7.2.5-lp151.6.25.1 php7-pear-Archive_Tar-7.2.5-lp151.6.25.1 tidy-doc-5.4.0-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2020-7064.html https://www.suse.com/security/cve/CVE-2020-7066.html https://bugzilla.suse.com/1168326 https://bugzilla.suse.com/1168352

1 0

openSUSE-RU-2020:0640-1: moderate: Recommended update for chrony
by maintenance＠opensuse.org 11 May '20

11 May '20

openSUSE Recommended Update: Recommended update for chrony ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0640-1 Rating: moderate References: #1099272 #1156884 #1161119 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for chrony fixes the following issues: - Read runtime servers from /var/run/netconfig/chrony.servers (bsc#1099272, bsc#1161119) - Move chrony-helper to /usr/lib/chrony/helper, because there should be no executables in /usr/share. - Add chrony-pool-suse and chrony-pool-openSUSE subpackages that preconfigure chrony to use NTP servers from the respective pools for SUSE and openSUSE. (bsc#1156884, SLE-11424) - Add chrony-pool-empty to still allow installing chrony without preconfigured servers. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-640=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): chrony-3.2-lp151.9.6.1 chrony-debuginfo-3.2-lp151.9.6.1 chrony-debugsource-3.2-lp151.9.6.1 - openSUSE Leap 15.1 (noarch): chrony-pool-empty-3.2-lp151.9.6.1 chrony-pool-openSUSE-3.2-lp151.9.6.1 chrony-pool-suse-3.2-lp151.9.6.1 References: https://bugzilla.suse.com/1099272 https://bugzilla.suse.com/1156884 https://bugzilla.suse.com/1161119

1 0