May 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2020:0570-1: moderate: Recommended update for google-compute-engine
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for google-compute-engine ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0570-1 Rating: moderate References: #1167810 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for google-compute-engine fixes the following issues: - Rename the sysctl file that applies the GCE network settings, so it is run after the default config and adjusts net.ipv4.conf.all.rp_filter correctly. (bsc#1167810) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-570=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): google-compute-engine-debugsource-20190801-lp151.2.19.1 google-compute-engine-oslogin-20190801-lp151.2.19.1 google-compute-engine-oslogin-debuginfo-20190801-lp151.2.19.1 - openSUSE Leap 15.1 (x86_64): google-compute-engine-oslogin-32bit-20190801-lp151.2.19.1 google-compute-engine-oslogin-32bit-debuginfo-20190801-lp151.2.19.1 - openSUSE Leap 15.1 (noarch): google-compute-engine-init-20190801-lp151.2.19.1 References: https://bugzilla.suse.com/1167810

1 0

openSUSE-RU-2020:0583-1: moderate: Recommended update for python-pycups
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for python-pycups ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0583-1 Rating: moderate References: #735865 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-pycups fixes the following issues: - add BuildRequires: python-cups to printer driver packages. (bsc#735865) Package /usr/lib/rpm/postscriptdriver.prov again, in the new "cups-rpm-helper" subpackage. The file hasn't been packaged any more after the switch from python-cups to python-pycups. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-583=1 Package List: - openSUSE Leap 15.1 (x86_64): cups-rpm-helper-1.9.74-lp151.3.3.1 python-pycups-debuginfo-1.9.74-lp151.3.3.1 python-pycups-debugsource-1.9.74-lp151.3.3.1 python2-pycups-1.9.74-lp151.3.3.1 python2-pycups-debuginfo-1.9.74-lp151.3.3.1 python3-pycups-1.9.74-lp151.3.3.1 python3-pycups-debuginfo-1.9.74-lp151.3.3.1 References: https://bugzilla.suse.com/735865

1 0

openSUSE-RU-2020:0569-1: moderate: Recommended update for lxd
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for lxd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0569-1 Rating: moderate References: #1170404 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for lxd fixes the following issues: Update to LXD 4.0.1. (boo#1170404) The full upstream changelog is available from: https://discuss.linuxcontainers.org/t/lxd-4-0-1-lts-has-been-released/7515 * Tweaked and improved the resources API * Added lxd cluster remove-raft-node disaster recovery function * Implemented ceph rbd/fs disk devices can now be attached to virtual machines * Fixed some data migration issues for users of < 3.0 upgrading to 4.0 directly * Fixed file descriptor leakage in exec Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-569=1 Package List: - openSUSE Leap 15.1 (noarch): lxd-bash-completion-4.0.1-lp151.36.1 - openSUSE Leap 15.1 (x86_64): lxd-4.0.1-lp151.36.1 References: https://bugzilla.suse.com/1170404

1 0

openSUSE-SU-2020:0567-1: Security update for python-typed-ast
by opensuse-security＠opensuse.org 01 May '20

01 May '20

openSUSE Security Update: Security update for python-typed-ast ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0567-1 Rating: low References: #1161562 #1161563 #1163532 Cross-References: CVE-2019-19274 CVE-2019-19275 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for python-typed-ast fixes the following issues: python-typed-ast was reverted to version 1.3.1 because it broke another package (bsc#1163532). Security issues fixed: - CVE-2019-19274: Fixed an out-of-bounds read (bsc#1161562). - CVE-2019-19275: Fixed an out-of-bounds read (bsc#1161563). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-567=1 Package List: - openSUSE Leap 15.1 (x86_64): python-typed-ast-debugsource-1.3.1-lp151.2.6.1 python3-typed-ast-1.3.1-lp151.2.6.1 python3-typed-ast-debuginfo-1.3.1-lp151.2.6.1 References: https://www.suse.com/security/cve/CVE-2019-19274.html https://www.suse.com/security/cve/CVE-2019-19275.html https://bugzilla.suse.com/1161562 https://bugzilla.suse.com/1161563 https://bugzilla.suse.com/1163532

1 0

openSUSE-SU-2020:0566-1: critical: Security update for chromium
by opensuse-security＠opensuse.org 01 May '20

01 May '20

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0566-1 Rating: critical References: #1169729 Cross-References: CVE-2020-6457 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for chromium fixes the following issues: Chromium was updated to 81.0.4044.113 (boo#1169729): - CVE-2020-6457: Fixed a use after free in speech recognizer This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-566=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 x86_64): chromedriver-81.0.4044.113-bp151.3.70.1 chromium-81.0.4044.113-bp151.3.70.1 References: https://www.suse.com/security/cve/CVE-2020-6457.html https://bugzilla.suse.com/1169729

1 0