May 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2020:0671-1: moderate: Recommended update for ocr
by maintenance＠opensuse.org 22 May '20

22 May '20

openSUSE Recommended Update: Recommended update for ocr ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0671-1 Rating: moderate References: #1171636 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ocr fixes the following issues: - Enable openmpi3 build for all SLE versions. (bsc#1171636) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-671=1 Package List: - openSUSE Leap 15.1 (x86_64): ocr_1_0_1-gnu-hpc-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-hpc-debuginfo-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-hpc-debugsource-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-hpc-devel-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-hpc-doc-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-hpc-examples-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-mpich-hpc-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-mpich-hpc-debuginfo-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-mpich-hpc-debugsource-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-mpich-hpc-devel-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-mpich-hpc-doc-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-mpich-hpc-examples-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-mvapich2-hpc-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-mvapich2-hpc-debuginfo-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-mvapich2-hpc-debugsource-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-mvapich2-hpc-devel-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-mvapich2-hpc-doc-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-mvapich2-hpc-examples-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-openmpi1-hpc-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-openmpi1-hpc-debuginfo-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-openmpi1-hpc-debugsource-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-openmpi1-hpc-devel-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-openmpi1-hpc-doc-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-openmpi1-hpc-examples-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-openmpi2-hpc-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-openmpi2-hpc-debuginfo-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-openmpi2-hpc-debugsource-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-openmpi2-hpc-devel-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-openmpi2-hpc-doc-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-openmpi2-hpc-examples-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-openmpi3-hpc-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-openmpi3-hpc-debuginfo-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-openmpi3-hpc-debugsource-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-openmpi3-hpc-devel-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-openmpi3-hpc-doc-1.0.1-lp151.2.6.1 ocr_1_0_1-gnu-openmpi3-hpc-examples-1.0.1-lp151.2.6.1 - openSUSE Leap 15.1 (noarch): ocr-gnu-hpc-1.0.1-lp151.2.6.1 ocr-gnu-hpc-devel-1.0.1-lp151.2.6.1 ocr-gnu-hpc-doc-1.0.1-lp151.2.6.1 ocr-gnu-hpc-examples-1.0.1-lp151.2.6.1 ocr-gnu-mpich-hpc-1.0.1-lp151.2.6.1 ocr-gnu-mpich-hpc-devel-1.0.1-lp151.2.6.1 ocr-gnu-mpich-hpc-doc-1.0.1-lp151.2.6.1 ocr-gnu-mpich-hpc-examples-1.0.1-lp151.2.6.1 ocr-gnu-mvapich2-hpc-1.0.1-lp151.2.6.1 ocr-gnu-mvapich2-hpc-devel-1.0.1-lp151.2.6.1 ocr-gnu-mvapich2-hpc-doc-1.0.1-lp151.2.6.1 ocr-gnu-mvapich2-hpc-examples-1.0.1-lp151.2.6.1 ocr-gnu-openmpi1-hpc-1.0.1-lp151.2.6.1 ocr-gnu-openmpi1-hpc-devel-1.0.1-lp151.2.6.1 ocr-gnu-openmpi1-hpc-doc-1.0.1-lp151.2.6.1 ocr-gnu-openmpi1-hpc-examples-1.0.1-lp151.2.6.1 ocr-gnu-openmpi2-hpc-1.0.1-lp151.2.6.1 ocr-gnu-openmpi2-hpc-devel-1.0.1-lp151.2.6.1 ocr-gnu-openmpi2-hpc-doc-1.0.1-lp151.2.6.1 ocr-gnu-openmpi2-hpc-examples-1.0.1-lp151.2.6.1 ocr-gnu-openmpi3-hpc-1.0.1-lp151.2.6.1 ocr-gnu-openmpi3-hpc-devel-1.0.1-lp151.2.6.1 ocr-gnu-openmpi3-hpc-doc-1.0.1-lp151.2.6.1 ocr-gnu-openmpi3-hpc-examples-1.0.1-lp151.2.6.1 References: https://bugzilla.suse.com/1171636

1 0

openSUSE-SU-2020:0668-1: moderate: Security update for nextcloud
by opensuse-security＠opensuse.org 17 May '20

17 May '20

openSUSE Security Update: Security update for nextcloud ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0668-1 Rating: moderate References: #1171572 #1171579 Cross-References: CVE-2020-8154 CVE-2020-8155 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for nextcloud to 18.0.4 fixes the following issues: Security issues fixed: - CVE-2020-8154: Fixed an XSS vulnerability when opening malicious PDFs (NC-SA-2020-018 boo#1171579). - CVE-2020-8155: Fixed a direct object reference vulnerability that allowed attackers to remotely wipe devices of other users (NC-SA-2020-019 boo#1171572). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-668=1 Package List: - openSUSE Backports SLE-15-SP1 (noarch): nextcloud-18.0.4-bp151.3.9.1 References: https://www.suse.com/security/cve/CVE-2020-8154.html https://www.suse.com/security/cve/CVE-2020-8155.html https://bugzilla.suse.com/1171572 https://bugzilla.suse.com/1171579

1 0

openSUSE-SU-2020:0667-1: moderate: Security update for nextcloud
by opensuse-security＠opensuse.org 17 May '20

17 May '20

openSUSE Security Update: Security update for nextcloud ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0667-1 Rating: moderate References: #1084320 #1171572 #1171579 Cross-References: CVE-2020-8154 CVE-2020-8155 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for nextcloud to 18.0.4 fixes the following issues: Security issues fixed: - CVE-2020-8154: Fixed an XSS vulnerability when opening malicious PDFs (NC-SA-2020-018 boo#1171579). - CVE-2020-8155: Fixed a direct object reference vulnerability that allowed attackers to remotely wipe devices of other users (NC-SA-2020-019 boo#1171572). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2020-667=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): nextcloud-18.0.4-22.1 References: https://www.suse.com/security/cve/CVE-2020-8154.html https://www.suse.com/security/cve/CVE-2020-8155.html https://bugzilla.suse.com/1084320 https://bugzilla.suse.com/1171572 https://bugzilla.suse.com/1171579

1 0

openSUSE-RU-2020:0666-1: moderate: Recommended update for paraview
by maintenance＠opensuse.org 17 May '20

17 May '20

openSUSE Recommended Update: Recommended update for paraview ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0666-1 Rating: moderate References: #1171061 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for paraview fixes the following issues: Update to version 5.6.3 (boo#1171061): * Bug-fix release: No changelog available from upstream. Changes from version 5.6.1: * See https://blog.kitware.com/paraview-5-6-1-release-notes/ This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-666=1 Package List: - openSUSE Backports SLE-15-SP1 (ppc64le s390x x86_64): paraview-5.6.3-bp151.3.3.1 paraview-devel-5.6.3-bp151.3.3.1 References: https://bugzilla.suse.com/1171061

1 0

openSUSE-RU-2020:0665-1: moderate: Recommended update for dracut
by maintenance＠opensuse.org 16 May '20

16 May '20

openSUSE Recommended Update: Recommended update for dracut ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0665-1 Rating: moderate References: #1165024 #1167656 #1169030 #1169997 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for dracut fixes the following issues: - Solve bringing up network interface prematurely. (bsc#1169030) - shutdown: guard against read-only /run (bsc#1167656) - dracut-init: when is it not possible to load a module, prompt a warning message for dracut instead of a fatal error. (bsc#1169997) - Backport upstream typo fix in dmsquash-live-root.sh so that FSIMG variable is correctly set. (bsc#1165024) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-665=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): dracut-044.2-lp151.2.15.1 dracut-debuginfo-044.2-lp151.2.15.1 dracut-debugsource-044.2-lp151.2.15.1 dracut-fips-044.2-lp151.2.15.1 dracut-ima-044.2-lp151.2.15.1 dracut-tools-044.2-lp151.2.15.1 References: https://bugzilla.suse.com/1165024 https://bugzilla.suse.com/1167656 https://bugzilla.suse.com/1169030 https://bugzilla.suse.com/1169997

1 0

openSUSE-RU-2020:0664-1: moderate: Recommended update for jq
by maintenance＠opensuse.org 16 May '20

16 May '20

openSUSE Recommended Update: Recommended update for jq ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0664-1 Rating: moderate References: #1170838 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for jq fixes the following issues: jq was updated to version 1.6: * Destructuring Alternation * many new builtins (see docs) * Add support for ASAN and UBSAN * Make it easier to use jq with shebangs * Add $ENV builtin variable to access environment * Add JQ_COLORS env var for configuring the output colors * change: Calling jq without a program argument now always assumes "." for the program, regardless of stdin/stdout * fix: Make sorting stable regardless of qsort. - Make jq depend on libjq1, so upgrading jq upgrades both This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-664=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): jq-1.6-lp151.3.3.1 jq-debuginfo-1.6-lp151.3.3.1 jq-debugsource-1.6-lp151.3.3.1 libjq-devel-1.6-lp151.3.3.1 libjq1-1.6-lp151.3.3.1 libjq1-debuginfo-1.6-lp151.3.3.1 References: https://bugzilla.suse.com/1170838

1 0

openSUSE-RU-2020:0663-1: moderate: Recommended update for hawk2
by maintenance＠opensuse.org 16 May '20

16 May '20

openSUSE Recommended Update: Recommended update for hawk2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0663-1 Rating: moderate References: #1054027 #1068942 #1069217 #1069296 #1071481 #1074856 #1076421 #1080439 #1085318 #1085343 #1085515 #1089709 #1089802 #1090562 #1090657 #1090667 #1092108 #1092122 #1093420 #1098637 #1137891 #1158681 #1162221 #1165587 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 24 recommended fixes can now be installed. Description: This update for hawk2 fixes the following issues: WIP * Implement mechanism to switch binaries in case (bsc#1165587) * Work around the removal of Dir::Tmpname#make_tmpname (bsc#1162221) * Fix cib.xml parsing for acl_version (bsc#1158681) * Fix mime type issue in MS windows (bsc#1098637) * Fix nameless cluster display (bsc#1137891) * High: Set secure flag to enforce https (bsc#1090657) * Medium: Improve hawk-server side cookie handling (bsc#1090667) * Medium: Set Symmetrical to False when score is Serialize (bsc#1085515) * Medium: Make resource stop/start icon dependent on target-role (bsc#1076421) * Api: Add advance resource type(group|clone|master|bundle) in resource route(fate#323437) * Api: return nil if elem is nil(fate#323437) in some case, param in determine_online_status_fencing is nil, this will cause NoMethodError * Medium: Fix acl_version check (bsc#1089802) * High: Fetch correct meta data (bsc#1092122) * Medium: Fix history explorer views (bsc#1093420) * High: Update links to release notes and documentation (bsc#1089709) * High: Return after redirect in reports (bsc#1090562) * Medium: Comply routes' id with resources' ID (bsc#1092108) * Api: Add registration route (fate#323437) * High: Calculate guest node state correctly (bsc#1074856) * Use Promotable etc. (bsc#1085318) (bsc#1085343) * High: Fix remote nodes iteration (bsc#1080439) * High: Support guest nodes (bsc#1074856) * Ensure certificate/key is group readable (bsc#1071481) * Test: Add test suit for (bsc#1069296) * Dev: Fix acl_enabled? (bsc#1069296) * Dev: Dev: Handle redirection correctly after renaming resources (bsc#1068942) * Dev: Handle redirection correctly after renaming constraints (bsc#1068942) * Dev: Dev: split rename action for constraints to edit/update (bsc#1068942) * Dev: Refactor resouces.js (bsc#1068942) * Dev: Change the rename path for resources (#bsc#1068942) * Dev: split rename action to edit/update (bsc#1068942) * Fix node/resource event injection in simulator (bsc#1069217) * Show descriptions in cluster config (bsc#1054027) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-663=1 Package List: - openSUSE Leap 15.1 (x86_64): hawk2-2.1.1+git.1585238036.fab19246-lp151.2.9.1 hawk2-debuginfo-2.1.1+git.1585238036.fab19246-lp151.2.9.1 hawk2-debugsource-2.1.1+git.1585238036.fab19246-lp151.2.9.1 References: https://bugzilla.suse.com/1054027 https://bugzilla.suse.com/1068942 https://bugzilla.suse.com/1069217 https://bugzilla.suse.com/1069296 https://bugzilla.suse.com/1071481 https://bugzilla.suse.com/1074856 https://bugzilla.suse.com/1076421 https://bugzilla.suse.com/1080439 https://bugzilla.suse.com/1085318 https://bugzilla.suse.com/1085343 https://bugzilla.suse.com/1085515 https://bugzilla.suse.com/1089709 https://bugzilla.suse.com/1089802 https://bugzilla.suse.com/1090562 https://bugzilla.suse.com/1090657 https://bugzilla.suse.com/1090667 https://bugzilla.suse.com/1092108 https://bugzilla.suse.com/1092122 https://bugzilla.suse.com/1093420 https://bugzilla.suse.com/1098637 https://bugzilla.suse.com/1137891 https://bugzilla.suse.com/1158681 https://bugzilla.suse.com/1162221 https://bugzilla.suse.com/1165587

1 0

openSUSE-RU-2020:0662-1: moderate: Recommended update for hwdata
by maintenance＠opensuse.org 16 May '20

16 May '20

openSUSE Recommended Update: Recommended update for hwdata ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0662-1 Rating: moderate References: #1168806 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for hwdata fixes the following issues: Update from version 0.320 to version 0.324 (bsc#1168806) - Updated pci, usb and vendor ids. - Replace pciutils-ids package providing compatibility symbolic link This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-662=1 Package List: - openSUSE Leap 15.1 (noarch): hwdata-0.334-lp151.2.3.1 References: https://bugzilla.suse.com/1168806

1 0

openSUSE-SU-2020:0661-1: moderate: Security update for mailman
by opensuse-security＠opensuse.org 15 May '20

15 May '20

openSUSE Security Update: Security update for mailman ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0661-1 Rating: moderate References: #1171363 #682920 Cross-References: CVE-2020-12108 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for mailman fixes the following issues: Security issue fixed: - CVE-2020-12108: Fixed a content injection bug (boo#1171363). Non-security issue fixed: - Don't default to invalid hosts for DEFAULT_EMAIL_HOST (boo#682920) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-661=1 Package List: - openSUSE Leap 15.1 (x86_64): mailman-2.1.29-lp151.3.11.1 mailman-debuginfo-2.1.29-lp151.3.11.1 mailman-debugsource-2.1.29-lp151.3.11.1 References: https://www.suse.com/security/cve/CVE-2020-12108.html https://bugzilla.suse.com/1171363 https://bugzilla.suse.com/682920

1 0

openSUSE-RU-2020:0660-1: moderate: Recommended update for salt
by maintenance＠opensuse.org 14 May '20

14 May '20

openSUSE Recommended Update: Recommended update for salt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0660-1 Rating: moderate References: #1138952 #1167556 #1169800 #1170042 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for salt fixes the following issues: - Fix partition.mkpart to work without fstype. (bsc#1169800) - Fix typo in 'minion_runner' for AESFuncs exposed methods. - Avoid "NameError: name '__salt_system_encoding__' is not defined". (bsc#1138952) - Fix load cached grain "osrelease_info" to prevent exceptions on "pkg.info_installed" on Debian and Ubuntu minion. (bsc#1170042) - Add new custom SUSE capability for saltutil state module. - Backport saltutil state module to 2019.2 codebase. (bsc#1167556) - virt._get_domain: don't raise an exception if there is no VM. This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-660=1 Package List: - openSUSE Leap 15.1 (x86_64): python2-salt-2019.2.0-lp151.5.18.1 python3-salt-2019.2.0-lp151.5.18.1 salt-2019.2.0-lp151.5.18.1 salt-api-2019.2.0-lp151.5.18.1 salt-cloud-2019.2.0-lp151.5.18.1 salt-doc-2019.2.0-lp151.5.18.1 salt-master-2019.2.0-lp151.5.18.1 salt-minion-2019.2.0-lp151.5.18.1 salt-proxy-2019.2.0-lp151.5.18.1 salt-ssh-2019.2.0-lp151.5.18.1 salt-standalone-formulas-configuration-2019.2.0-lp151.5.18.1 salt-syndic-2019.2.0-lp151.5.18.1 - openSUSE Leap 15.1 (noarch): salt-bash-completion-2019.2.0-lp151.5.18.1 salt-fish-completion-2019.2.0-lp151.5.18.1 salt-zsh-completion-2019.2.0-lp151.5.18.1 References: https://bugzilla.suse.com/1138952 https://bugzilla.suse.com/1167556 https://bugzilla.suse.com/1169800 https://bugzilla.suse.com/1170042

1 0