May 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2020:0593-1: important: Recommended update for yast2-registration
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for yast2-registration ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0593-1 Rating: important References: #1167945 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-registration fixes the following issues: - Fix for offline upgrade that fails the process at the registration due to a missing function. (bsc#1167945) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-593=1 Package List: - openSUSE Leap 15.1 (noarch): yast2-registration-4.1.25-lp151.2.9.1 References: https://bugzilla.suse.com/1167945

1 0

openSUSE-RU-2020:0580-1: moderate: Recommended update for perl-CGI
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for perl-CGI ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0580-1 Rating: moderate References: #1162868 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for perl-CGI fixes the following issues: Update from version 4.38 to 4.46 (bsc#1162868) * Add support for SameSite=None cookies and update the documentation * Replace only use of "base" with "parent" given that CGI already depends on "parent" * Support unquoted multipart/form-data name values * Update the package license from "Artistic-1.0 or GPL-1.0+" to "Artistic-2.0" * Support perls < 5.10.1 and specify CONFIGURE_REQUIRES in Makefile.PL for being more dynamic This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-580=1 Package List: - openSUSE Leap 15.1 (noarch): perl-CGI-4.46-lp151.3.3.1 References: https://bugzilla.suse.com/1162868

1 0

openSUSE-SU-2020:0597-1: important: Security update for apache2
by opensuse-security＠opensuse.org 01 May '20

01 May '20

openSUSE Security Update: Security update for apache2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0597-1 Rating: important References: #1168404 #1168407 #1169066 Cross-References: CVE-2020-1927 CVE-2020-1934 CVE-2020-1938 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for apache2 fixes the following issues: - CVE-2020-1934: mod_proxy_ftp may use uninitialized memory when proxying to a malicious FTP server (bsc#1168404). - CVE-2020-1927: mod_rewrite configurations vulnerable to open redirect (bsc#1168407). - CVE-2020-1938: mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy AJP13 authentication (bsc#1169066). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-597=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): apache2-2.4.33-lp151.8.12.1 apache2-debuginfo-2.4.33-lp151.8.12.1 apache2-debugsource-2.4.33-lp151.8.12.1 apache2-devel-2.4.33-lp151.8.12.1 apache2-event-2.4.33-lp151.8.12.1 apache2-event-debuginfo-2.4.33-lp151.8.12.1 apache2-example-pages-2.4.33-lp151.8.12.1 apache2-prefork-2.4.33-lp151.8.12.1 apache2-prefork-debuginfo-2.4.33-lp151.8.12.1 apache2-utils-2.4.33-lp151.8.12.1 apache2-utils-debuginfo-2.4.33-lp151.8.12.1 apache2-worker-2.4.33-lp151.8.12.1 apache2-worker-debuginfo-2.4.33-lp151.8.12.1 - openSUSE Leap 15.1 (noarch): apache2-doc-2.4.33-lp151.8.12.1 References: https://www.suse.com/security/cve/CVE-2020-1927.html https://www.suse.com/security/cve/CVE-2020-1934.html https://www.suse.com/security/cve/CVE-2020-1938.html https://bugzilla.suse.com/1168404 https://bugzilla.suse.com/1168407 https://bugzilla.suse.com/1169066

1 0

openSUSE-RU-2020:0578-1: moderate: Recommended update for open-iscsi
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for open-iscsi ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0578-1 Rating: moderate References: #1159768 #1164607 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for open-iscsi fixes the following issues: - Avoid logout of iscsi boot session. (bsc#1159768) - Fix iscsi.service so it handles restarts better. (bsc#1164607) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-578=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): iscsiuio-0.7.8.2-lp151.13.9.1 iscsiuio-debuginfo-0.7.8.2-lp151.13.9.1 libopeniscsiusr0_2_0-2.0.876-lp151.13.9.1 libopeniscsiusr0_2_0-debuginfo-2.0.876-lp151.13.9.1 open-iscsi-2.0.876-lp151.13.9.1 open-iscsi-debuginfo-2.0.876-lp151.13.9.1 open-iscsi-debugsource-2.0.876-lp151.13.9.1 open-iscsi-devel-2.0.876-lp151.13.9.1 References: https://bugzilla.suse.com/1159768 https://bugzilla.suse.com/1164607

1 0

openSUSE-RU-2020:0587-1: moderate: Recommended update for seccheck
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for seccheck ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0587-1 Rating: moderate References: #1132919 #985802 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for seccheck fixes the following issues: - adapt WantedBy so the timers are actually started at boot time when enabled (#1132919) - correct indentation of SECCHK_FROM (#985802) for the weekly and monthly mails so that the mail header lines are recognised by the receiving mail client This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-587=1 Package List: - openSUSE Leap 15.1 (noarch): seccheck-3.0-lp151.5.3.1 References: https://bugzilla.suse.com/1132919 https://bugzilla.suse.com/985802

1 0

openSUSE-RU-2020:0582-1: moderate: Recommended update for python-google-api-python-client
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for python-google-api-python-client ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0582-1 Rating: moderate References: #1088358 #1160933 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for python-google-api-python-client fixes the following issues: - Fix dependencies to use google-auth instead of deprecated oauth2client (bsc#1160933, jsc#ECO-1148) python-cachetools 2.0.1 is shipped to the Public Cloud Module. python-google-auth 1.5.1 is shipped to the Public Cloud Module. python-google-api-python-client was updated to: - Upgrade to 1.7.4: just series of minor bugfixes - Fix check for error text on Python 3.7. (#278) - Use new Auth URIs. (#281) - Add code-of-conduct document. (#270) - Fix some typos in test_urllib3.py (#268) - Warn when using user credentials from the Cloud SDK (#266) - Add compute engine-based IDTokenCredentials (#236) - Corrected some typos (#265) Update to 1.4.2: - Raise a helpful exception when trying to refresh credentials without a refresh token. (#262) - Fix links to README and CONTRIBUTING in docs/index.rst. (#260) - Fix a typo in credentials.py. (#256) - Use pytest instead of py.test per upstream recommendation, #dropthedot. (#255) - Fix typo on exemple of jwt usage (#245) New upstream release 1.4.1 (bsc#1088358) - Added a check for the cryptography version before attempting to use it. + From version 1.4.0 - Added `cryptography`-based RSA signer and verifier. - Added `google.oauth2.service_account.IDTokenCredentials`. - Improved documentation around ID Tokens + From version 1.3.0 - Added ``google.oauth2.credentials.Credentials.from_authorized_user_file``. - Dropped direct pyasn1 dependency in favor of letting ``pyasn1-modules`` specify the right version. - ``default()`` now checks for the project ID environment var before warning about missing project ID. - Fixed the docstrings for ``has_scopes()`` and ``with_scopes()``. - Fixed example in docstring for ``ReadOnlyScoped``. - Made ``transport.requests`` use timeouts and retries to improve reliability. This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-582=1 Package List: - openSUSE Leap 15.1 (noarch): python2-cachetools-2.0.1-lp151.3.3.1 python2-google-api-python-client-1.7.4-lp151.2.3.1 python2-google-auth-1.5.1-lp151.2.3.1 python2-google-auth-httplib2-0.0.3-lp151.2.1 python3-cachetools-2.0.1-lp151.3.3.1 python3-google-api-python-client-1.7.4-lp151.2.3.1 python3-google-auth-1.5.1-lp151.2.3.1 python3-google-auth-httplib2-0.0.3-lp151.2.1 References: https://bugzilla.suse.com/1088358 https://bugzilla.suse.com/1160933

1 0

openSUSE-RU-2020:0575-1: moderate: Recommended update for ndctl
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for ndctl ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0575-1 Rating: moderate References: #1165509 #1167861 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for ndctl fixes the following issues: - Fixed an issue where namespaces were not correctly destroyed (bsc#1167861) - Fixed an issue where 'enable-namespace' tried to enable idled namespaces (bsc#1165509) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-575=1 Package List: - openSUSE Leap 15.1 (x86_64): libndctl-devel-64.1-lp151.2.12.1 libndctl6-64.1-lp151.2.12.1 libndctl6-debuginfo-64.1-lp151.2.12.1 ndctl-64.1-lp151.2.12.1 ndctl-debuginfo-64.1-lp151.2.12.1 ndctl-debugsource-64.1-lp151.2.12.1 References: https://bugzilla.suse.com/1165509 https://bugzilla.suse.com/1167861

1 0

openSUSE-RU-2020:0581-1: moderate: Recommended update for psqlODBC
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for psqlODBC ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0581-1 Rating: moderate References: #1166821 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for psqlODBC fixes the following issue: - Fix build with PostgreSQL 11 and newer. (bsc#1166821) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-581=1 Package List: - openSUSE Leap 15.1 (x86_64): psqlODBC-10.01.0000-lp151.3.3.1 psqlODBC-debuginfo-10.01.0000-lp151.3.3.1 psqlODBC-debugsource-10.01.0000-lp151.3.3.1 References: https://bugzilla.suse.com/1166821

1 0

openSUSE-RU-2020:0573-1: moderate: Recommended update for libsolv
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for libsolv ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0573-1 Rating: moderate References: #1159314 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libsolv fixes the following issues: libsolv was updated to version 0.7.11: - fix solv_zchunk decoding error if large chunks are used (bsc#1159314) - treat retracted pathes as irrelevant - made add_update_target work with multiversion installs This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-573=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libsolv-debuginfo-0.7.11-lp151.2.13.1 libsolv-debugsource-0.7.11-lp151.2.13.1 libsolv-demo-0.7.11-lp151.2.13.1 libsolv-demo-debuginfo-0.7.11-lp151.2.13.1 libsolv-devel-0.7.11-lp151.2.13.1 libsolv-devel-debuginfo-0.7.11-lp151.2.13.1 libsolv-tools-0.7.11-lp151.2.13.1 libsolv-tools-debuginfo-0.7.11-lp151.2.13.1 libzypp-17.19.0-lp151.2.13.1 libzypp-debuginfo-17.19.0-lp151.2.13.1 libzypp-debugsource-17.19.0-lp151.2.13.1 libzypp-devel-17.19.0-lp151.2.13.1 libzypp-devel-doc-17.19.0-lp151.2.13.1 perl-solv-0.7.11-lp151.2.13.1 perl-solv-debuginfo-0.7.11-lp151.2.13.1 python-solv-0.7.11-lp151.2.13.1 python-solv-debuginfo-0.7.11-lp151.2.13.1 python3-solv-0.7.11-lp151.2.13.1 python3-solv-debuginfo-0.7.11-lp151.2.13.1 ruby-solv-0.7.11-lp151.2.13.1 ruby-solv-debuginfo-0.7.11-lp151.2.13.1 References: https://bugzilla.suse.com/1159314

1 0

openSUSE-RU-2020:0576-1: moderate: Recommended update for netcontrol
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for netcontrol ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0576-1 Rating: moderate References: #1027736 #1029201 #1132794 #1148646 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for netcontrol fixes the following issues: - bonding: prevent alarms when using unknown options. (bsc#1132794) The update will provide warnings and also error messages when using unknown options. - udev: use correct udev rule (write) lock directory - sysconfig: solve segfault on missed end-quote. (bsc#1027736) - solve segfault on invalid check in route creation. (bsc#1148646) - solve virsh iface-list not working as expected. (bsc#1029201) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-576=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libnetcontrol-devel-0.3.1-lp151.3.3.1 libnetcontrol0-0.3.1-lp151.3.3.1 libnetcontrol0-debuginfo-0.3.1-lp151.3.3.1 netcontrol-debugsource-0.3.1-lp151.3.3.1 - openSUSE Leap 15.1 (x86_64): libnetcontrol0-32bit-0.3.1-lp151.3.3.1 libnetcontrol0-32bit-debuginfo-0.3.1-lp151.3.3.1 References: https://bugzilla.suse.com/1027736 https://bugzilla.suse.com/1029201 https://bugzilla.suse.com/1132794 https://bugzilla.suse.com/1148646

1 0