May 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2020:0681-1: moderate: Security update for libxml2
by opensuse-security＠opensuse.org 22 May '20

22 May '20

openSUSE Security Update: Security update for libxml2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0681-1 Rating: moderate References: #1159928 #1161517 #1161521 Cross-References: CVE-2019-19956 CVE-2019-20388 CVE-2020-7595 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for libxml2 fixes the following issues: - CVE-2019-20388: Fixed a memory leak in xmlSchemaPreRun (bsc#1161521). - CVE-2019-19956: Fixed a memory leak (bsc#1159928). - CVE-2020-7595: Fixed an infinite loop in an EOF situation (bsc#1161517). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-681=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libxml2-2-2.9.7-lp151.5.9.1 libxml2-2-debuginfo-2.9.7-lp151.5.9.1 libxml2-debugsource-2.9.7-lp151.5.9.1 libxml2-devel-2.9.7-lp151.5.9.1 libxml2-tools-2.9.7-lp151.5.9.1 libxml2-tools-debuginfo-2.9.7-lp151.5.9.1 python-libxml2-python-debugsource-2.9.7-lp151.5.9.1 python2-libxml2-python-2.9.7-lp151.5.9.1 python2-libxml2-python-debuginfo-2.9.7-lp151.5.9.1 python3-libxml2-python-2.9.7-lp151.5.9.1 python3-libxml2-python-debuginfo-2.9.7-lp151.5.9.1 - openSUSE Leap 15.1 (x86_64): libxml2-2-32bit-2.9.7-lp151.5.9.1 libxml2-2-32bit-debuginfo-2.9.7-lp151.5.9.1 libxml2-devel-32bit-2.9.7-lp151.5.9.1 - openSUSE Leap 15.1 (noarch): libxml2-doc-2.9.7-lp151.5.9.1 References: https://www.suse.com/security/cve/CVE-2019-19956.html https://www.suse.com/security/cve/CVE-2019-20388.html https://www.suse.com/security/cve/CVE-2020-7595.html https://bugzilla.suse.com/1159928 https://bugzilla.suse.com/1161517 https://bugzilla.suse.com/1161521

1 0

openSUSE-RU-2020:0692-1: moderate: Recommended update for grep
by maintenance＠opensuse.org 22 May '20

22 May '20

openSUSE Recommended Update: Recommended update for grep ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0692-1 Rating: moderate References: #1155271 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for grep fixes the following issues: - Update testsuite expectations, no functional changes (bsc#1155271) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-692=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): grep-3.1-lp151.4.3.1 grep-debuginfo-3.1-lp151.4.3.1 grep-debugsource-3.1-lp151.4.3.1 - openSUSE Leap 15.1 (noarch): grep-lang-3.1-lp151.4.3.1 References: https://bugzilla.suse.com/1155271

1 0

openSUSE-SU-2020:0685-1: moderate: Security update for python-rpyc
by opensuse-security＠opensuse.org 22 May '20

22 May '20

openSUSE Security Update: Security update for python-rpyc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0685-1 Rating: moderate References: #1152987 Cross-References: CVE-2019-16328 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-rpyc to 4.1.5 fixes the following issues: Security issue fixed: - CVE-2019-16328: Fixed a missing protocol security check that could have led to code execution (boo#1152987). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-685=1 Package List: - openSUSE Leap 15.1 (noarch): python2-rpyc-4.1.5-lp151.3.3.1 python3-rpyc-4.1.5-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2019-16328.html https://bugzilla.suse.com/1152987

1 0

openSUSE-SU-2020:0693-1: moderate: Security update for dpdk
by opensuse-security＠opensuse.org 22 May '20

22 May '20

openSUSE Security Update: Security update for dpdk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0693-1 Rating: moderate References: #1171477 Cross-References: CVE-2020-10722 CVE-2020-10723 CVE-2020-10724 CVE-2020-10725 CVE-2020-10726 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for dpdk fixes the following issues: Security issues fixed: - CVE-2020-10722: Fixed an integer overflow in vhost_user_set_log_base() (bsc#1171477). - CVE-2020-10723: Fixed an integer truncation in vhost_user_check_and_alloc_queue_pair() (bsc#1171477). - CVE-2020-10724: Fixed a missing inputs validation in Vhost-crypto (bsc#1171477). - CVE-2020-10725: Fixed a segfault caused by invalid virtio descriptors sent from a malicious guest (bsc#1171477). - CVE-2020-10726: Fixed a denial-of-service caused by VHOST_USER_GET_INFLIGHT_FD message flooding (bsc#1171477). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-693=1 Package List: - openSUSE Leap 15.1 (x86_64): dpdk-18.11.3-lp151.3.4.1 dpdk-debuginfo-18.11.3-lp151.3.4.1 dpdk-debugsource-18.11.3-lp151.3.4.1 dpdk-devel-18.11.3-lp151.3.4.1 dpdk-devel-debuginfo-18.11.3-lp151.3.4.1 dpdk-examples-18.11.3-lp151.3.4.1 dpdk-examples-debuginfo-18.11.3-lp151.3.4.1 dpdk-kmp-default-18.11.3_k4.12.14_lp151.28.48-lp151.3.4.1 dpdk-kmp-default-debuginfo-18.11.3_k4.12.14_lp151.28.48-lp151.3.4.1 dpdk-tools-18.11.3-lp151.3.4.1 dpdk-tools-debuginfo-18.11.3-lp151.3.4.1 libdpdk-18_11-18.11.3-lp151.3.4.1 libdpdk-18_11-debuginfo-18.11.3-lp151.3.4.1 - openSUSE Leap 15.1 (noarch): dpdk-doc-18.11.3-lp151.3.4.1 References: https://www.suse.com/security/cve/CVE-2020-10722.html https://www.suse.com/security/cve/CVE-2020-10723.html https://www.suse.com/security/cve/CVE-2020-10724.html https://www.suse.com/security/cve/CVE-2020-10725.html https://www.suse.com/security/cve/CVE-2020-10726.html https://bugzilla.suse.com/1171477

1 0

openSUSE-RU-2020:0687-1: moderate: Recommended update for gnome-themes-standard
by maintenance＠opensuse.org 22 May '20

22 May '20

openSUSE Recommended Update: Recommended update for gnome-themes-standard ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0687-1 Rating: moderate References: #1170757 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gnome-themes-standard fixes the following issue: - Remove the is_opensuse tag to close the gap between Leap and SLE (bsc#1170757, jsc#SLE-11890). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-687=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): gnome-themes-standard-debugsource-3.22.3-lp151.4.3.1 gtk2-theming-engine-adwaita-3.22.3-lp151.4.3.1 gtk2-theming-engine-adwaita-debuginfo-3.22.3-lp151.4.3.1 - openSUSE Leap 15.1 (noarch): gnome-themes-accessibility-3.22.3-lp151.4.3.1 gnome-themes-accessibility-gtk2-3.22.3-lp151.4.3.1 gtk2-metatheme-adwaita-3.22.3-lp151.4.3.1 gtk3-metatheme-adwaita-3.22.3-lp151.4.3.1 metatheme-adwaita-common-3.22.3-lp151.4.3.1 - openSUSE Leap 15.1 (x86_64): gtk2-theming-engine-adwaita-32bit-3.22.3-lp151.4.3.1 gtk2-theming-engine-adwaita-32bit-debuginfo-3.22.3-lp151.4.3.1 References: https://bugzilla.suse.com/1170757

1 0

openSUSE-RU-2020:0683-1: moderate: Recommended update for resource-agents
by maintenance＠opensuse.org 22 May '20

22 May '20

openSUSE Recommended Update: Recommended update for resource-agents ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0683-1 Rating: moderate References: #1136928 #1160121 #1169852 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for resource-agents fixes the following issues: - Disable cache discovery for "gcp-vpc-move-route" resource agent. (bsc#1169852) - Can not manually call the check operation for a resource. (bsc#1136928) - LVM-activate RA: should report monitor fail when VG disappear upon iscsi disconnected. (bsc#1160121) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-683=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): ldirectord-4.3.0184.6ee15eb2-lp151.3.21.1 resource-agents-4.3.0184.6ee15eb2-lp151.3.21.1 resource-agents-debuginfo-4.3.0184.6ee15eb2-lp151.3.21.1 resource-agents-debugsource-4.3.0184.6ee15eb2-lp151.3.21.1 - openSUSE Leap 15.1 (noarch): monitoring-plugins-metadata-4.3.0184.6ee15eb2-lp151.3.21.1 References: https://bugzilla.suse.com/1136928 https://bugzilla.suse.com/1160121 https://bugzilla.suse.com/1169852

1 0

openSUSE-RU-2020:0686-1: moderate: Recommended update for eiciel
by maintenance＠opensuse.org 22 May '20

22 May '20

openSUSE Recommended Update: Recommended update for eiciel ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0686-1 Rating: moderate References: #1170756 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for eiciel fixes the following issue: - Enable translation-update-upstream for both SLE and openSUSE. (bsc#1170756, jsc#SLE-11889) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-686=1 Package List: - openSUSE Leap 15.1 (noarch): eiciel-lang-0.9.12.1-lp151.3.3.1 - openSUSE Leap 15.1 (x86_64): eiciel-0.9.12.1-lp151.3.3.1 eiciel-debuginfo-0.9.12.1-lp151.3.3.1 eiciel-debugsource-0.9.12.1-lp151.3.3.1 nautilus-eiciel-0.9.12.1-lp151.3.3.1 nautilus-eiciel-debuginfo-0.9.12.1-lp151.3.3.1 References: https://bugzilla.suse.com/1170756

1 0

openSUSE-SU-2020:0677-1: moderate: Security update for file
by opensuse-security＠opensuse.org 22 May '20

22 May '20

openSUSE Security Update: Security update for file ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0677-1 Rating: moderate References: #1154661 #1169512 Cross-References: CVE-2019-18218 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for file fixes the following issues: Security issues fixed: - CVE-2019-18218: Fixed a heap-based buffer overflow in cdf_read_property_info() (bsc#1154661). Non-security issue fixed: - Fixed broken '--help' output (bsc#1169512). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-677=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): file-5.32-lp151.8.3.1 file-debuginfo-5.32-lp151.8.3.1 file-debugsource-5.32-lp151.8.3.1 file-devel-5.32-lp151.8.3.1 libmagic1-5.32-lp151.8.3.1 libmagic1-debuginfo-5.32-lp151.8.3.1 python2-magic-5.32-lp151.8.3.1 python3-magic-5.32-lp151.8.3.1 - openSUSE Leap 15.1 (x86_64): file-devel-32bit-5.32-lp151.8.3.1 libmagic1-32bit-5.32-lp151.8.3.1 libmagic1-32bit-debuginfo-5.32-lp151.8.3.1 - openSUSE Leap 15.1 (noarch): file-magic-5.32-lp151.8.3.1 References: https://www.suse.com/security/cve/CVE-2019-18218.html https://bugzilla.suse.com/1154661 https://bugzilla.suse.com/1169512

1 0

openSUSE-RU-2020:0672-1: moderate: Recommended update for cdrtools
by maintenance＠opensuse.org 22 May '20

22 May '20

openSUSE Recommended Update: Recommended update for cdrtools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0672-1 Rating: moderate References: #1169420 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for cdrtools fixes the following issues: - Fix for an issue when 'mediacheck' fails if ISO sizes are larger than 4GB. (bsc#1169420) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-672=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): btcflash-3.02~a09-lp151.4.3.1 btcflash-debuginfo-3.02~a09-lp151.4.3.1 cdda2wav-3.02~a09-lp151.4.3.1 cdda2wav-debuginfo-3.02~a09-lp151.4.3.1 cdrecord-3.02~a09-lp151.4.3.1 cdrecord-debuginfo-3.02~a09-lp151.4.3.1 cdrtools-3.02~a09-lp151.4.3.1 cdrtools-debuginfo-3.02~a09-lp151.4.3.1 cdrtools-debugsource-3.02~a09-lp151.4.3.1 libscg-devel-3.02~a09-lp151.4.3.1 libscg1_0-3.02~a09-lp151.4.3.1 libscg1_0-debuginfo-3.02~a09-lp151.4.3.1 libschily-devel-3.02~a09-lp151.4.3.1 libschily-devel-doc-3.02~a09-lp151.4.3.1 libschily1_0-3.02~a09-lp151.4.3.1 libschily1_0-debuginfo-3.02~a09-lp151.4.3.1 mkisofs-3.02~a09-lp151.4.3.1 mkisofs-debuginfo-3.02~a09-lp151.4.3.1 schily-libs-debuginfo-3.02~a09-lp151.4.3.1 schily-libs-debugsource-3.02~a09-lp151.4.3.1 References: https://bugzilla.suse.com/1169420

1 0

openSUSE-RU-2020:0684-1: moderate: Recommended update for timezone
by maintenance＠opensuse.org 22 May '20

22 May '20

openSUSE Recommended Update: Recommended update for timezone ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0684-1 Rating: moderate References: #1169582 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for timezone fixes the following issues: - timezone update 2020a. (bsc#1169582) * Morocco springs forward on 2020-05-31, not 2020-05-24. * Canada's Yukon advanced to -07 year-round on 2020-03-08. * America/Nuuk renamed from America/Godthab. * zic now supports expiration dates for leap second lists. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-684=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): timezone-2020a-lp151.2.9.1 timezone-debuginfo-2020a-lp151.2.9.1 timezone-debugsource-2020a-lp151.2.9.1 - openSUSE Leap 15.1 (noarch): timezone-java-2020a-lp151.2.9.1 References: https://bugzilla.suse.com/1169582

1 0