June 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2020:0814-1: moderate: Recommended update for chrony
by maintenance＠opensuse.org 16 Jun '20

16 Jun '20

openSUSE Recommended Update: Recommended update for chrony ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0814-1 Rating: moderate References: #1172113 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for chrony fixes the following issue: - Use iburst in the default pool statements to speed up initial synchronization. (bsc#1172113) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-814=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): chrony-3.2-lp151.9.9.1 chrony-debuginfo-3.2-lp151.9.9.1 chrony-debugsource-3.2-lp151.9.9.1 - openSUSE Leap 15.1 (noarch): chrony-pool-empty-3.2-lp151.9.9.1 chrony-pool-openSUSE-3.2-lp151.9.9.1 chrony-pool-suse-3.2-lp151.9.9.1 References: https://bugzilla.suse.com/1172113

1 0

openSUSE-RU-2020:0811-1: moderate: Recommended update for autoyast2
by maintenance＠opensuse.org 16 Jun '20

16 Jun '20

openSUSE Recommended Update: Recommended update for autoyast2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0811-1 Rating: moderate References: #1136454 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for autoyast2 fixes the following issues: - Fix an issue to avoid detecting block cache as a volume group. (bsc#1136454) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-811=1 Package List: - openSUSE Leap 15.1 (noarch): autoyast2-4.1.16-lp151.2.15.1 autoyast2-installation-4.1.16-lp151.2.15.1 References: https://bugzilla.suse.com/1136454

1 0

openSUSE-SU-2020:0821-1: moderate: Security update for libupnp
by opensuse-security＠opensuse.org 16 Jun '20

16 Jun '20

openSUSE Security Update: Security update for libupnp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0821-1 Rating: moderate References: #1172625 Cross-References: CVE-2020-13848 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libupnp fixes the following issues: - CVE-2020-13848: A NULL ptr denial of service via crafted SSDP message was fixed (boo#1172625) This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-821=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): libupnp-devel-1.6.25-bp151.4.3.1 libupnp6-1.6.25-bp151.4.3.1 - openSUSE Backports SLE-15-SP1 (aarch64_ilp32): libupnp6-64bit-1.6.25-bp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2020-13848.html https://bugzilla.suse.com/1172625

1 0

openSUSE-SU-2020:0816-1: moderate: Security update for libntlm
by opensuse-security＠opensuse.org 16 Jun '20

16 Jun '20

openSUSE Security Update: Security update for libntlm ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0816-1 Rating: moderate References: #1153669 Cross-References: CVE-2019-17455 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libntlm fixes the following issues: Update to release 1.6: * CVE-2019-17455: Fixed a buffer overflow in buildSmbNtlmAuth* function. (boo#1153669) This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-816=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): libntlm-devel-1.6-bp151.4.3.1 libntlm0-1.6-bp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2019-17455.html https://bugzilla.suse.com/1153669

1 0

openSUSE-RU-2020:0809-1: moderate: Recommended update for python-limnoria
by maintenance＠opensuse.org 16 Jun '20

16 Jun '20

openSUSE Recommended Update: Recommended update for python-limnoria ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0809-1 Rating: moderate References: Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for python-limnoria fixes the following issues: python-limnoria was updated: to version 2020-05-01: * Fix extra arguments to irc.reply() being ignored by messages returned by '@more' (gh#ProgVal/Limnoria#1405). Update to version 2020-03-19: * Update links to the documentation. * Updated translations. Update to version 2020-01-31: + RSS: If ids are missing, use <link> as id. + RSS: Show a meaningful error in case '@rss' is called with a non-URL/… + ChannelStats: Use the safe math evaluator. + core/Math: Move the math evaluator to src/utils/. + Math: Fix log/log10 return type. + Aka, Google, String: fix more DeprecationWarning in tests (#1328) + AutoMode, Channel, Nickometer: fix invalid escape sequence Deprecatio… + plugins: use r'' strings to fix DeprecationWarning in test cases (#1328) + Aka, Debug: cleanup imports + Use importlib instead of imp. + Replace failUnless/failIf with assertTrue/assertFalse. + Socket: Don't add instances twice in cls._instances. + Socket: use a proper lock instead of a boolean. + Add subcommand dispatching for CAP/FAIL/WARN/NOTE. + Rename doAuthenticate* functions to not conflict with callback names. + Make irc.error do nothing is no string is given as argument. + Call super().setValue() before defaultHttpHeaders. + Deduplicate setting Accept-Language HTTP header. + Web: Implement protocols.http.requestLanguage + Add supybot.protocols.http.requestLanguage + Fix getSpecific usage + Import MutableMapping and MutableSet from collections.abc. + setup.py: migrate shebang to Python 3 + setup.py: remove obsolete version_info conditionals + scripts: remove obsolete conditionals for Python 2 + scripts: migrate shebangs and version checks to Python 3 + Be less hostile to users in --allow-root help + Readd Limnoria name to default part & quit messages + SedRegex: skip testReDoSTimeout if multiprocessing is disabled + SedRegex: update plugin metadata + SedRegex: spawn a single process to handle the whole history. + SedRegex: add test for ReDoS timeout + SedRegex: abort when a search times out + SedRegex: test case normalization of channel names + SedRegex: match channel names case insensitively + SedRegex: log all errors, always display the not found mesage + SedRegex: reuse processTimeout in the sub() process too + SedRegex: README: specifically mention that /s is specific to this plugin + SedRegex: make the regexp process timeout configurable + SedRegex: remove compatibility workaround for Python 2.7.6 and lower + SedRegex: skip testBoldReplacement on Python 2 + SedRegex: remove a duplicate test + SedRegex: use self.__class__ instead of __class__ in tests (Python 2 … + SedRegex: add a bunch of test cases + SedRegex: bump copyright year to 2017 + SedRegex: fix some replacement queries not working + SedRegex: also catch errors in the regexp_wrapper() step + SedRegex: log the exact error name instead of "SedRegex error" + SedRegex: require ending delimiter to prevent overzealous matching of… + SedRegex: work around "nothing to replace" errors on < Python 2.7.6 a… + SedRegex: fix flag matching + SedRegex: add configuration / usage instructions + SedRegex: implement 's' regex flag to only match the caller's message + SedRegex: allow free form flags and return them in _unpack_sed() + SedRegex: sanitize against \n\r\t in output + SedRegex: only operate on messages from the current network + SedRegex: work around "nothing to repeat" errors on Python < 2.7.6 Update to version 2020-01-01: + Skip irctest when optional dependencies are not installed. Update to version 2019-12-21: + Add config supybot.reply.format.list.maximumItems to limit the size o… + Add fallback if getting supybot.language from registry cache failed. + All plugins: set Limnoria contributors as maintainer + Better formatting in supybot.Author if some fields are missing + Get locale name on startup from registry cache instead of parsing con… + Make getLocaleFromRegistryCache reload existing locales. + Math: Fix test on Pypy. + Math: Display a nicer error in case of MemoryError. + MoobotFactoids: Fix support of commands sent in private. + Nicer error message in getChannel/makeChannelFilename when channel is… + Plugin: support showing __maintainer__ field in the 'author' command + Plugin: accept author name in 'contributors' command + QuoteGrabs: fix SyntaxWarning (#1391) + Remove dead code from Group that belongs in Value. + Request msgid capability. + RSS: Register feed config in config.py instead of plugin.py. + Scheduler: Use assertRegexp instead of assertNotRegexp in tests. + Scheduler: Use default timeout for assertResponse. + Scheduler: Use mocking to make tests faster. + Services: Fix typo in doInvite() (#1394) + Update core fr translation. + Update supybot-plugin-doc to work with current version of the registry. + Web: Lower log level when title could not be found. + Web: Remove leading space if the prefix is empty. + Web: Add early returns on exception when snarfing titles. + src/callbacks.py: use network-specific values. + test: Don't overwrite the main Schedule in the driver list. + test: Mock calls to time.sleep() + test: choose a random free port for tests using the HTTP server Update to version 2019-11-09: + Fix log on SASL failure. + Math: Rewrite calc functions with a proper evaluator. + Log SASL mechanism on failure. Closes GH-1014. + Config: Add : prefix to network-specific values listed by 'config list'. + Web: Catch more errors in getTitle. + Split 'CAP REQ' commands to not exceed 512 bytes. + Reset capability set state on reconnection. + Fix conditional on CTCP in urlSnarfer + Use a real invalid email in supybot.authors.unknown + Don't repeat nick in supybot.Author if nick and name are the same + regexp_wrapper: return None instead of False when search times out Update to version 2019-09-08: * Interpret empty server tag values as missing tag values. As required by https://ircv3.net/specs/extensions/message-tags Changes from version 2019-08-25: * Config: Prevent accidental leak of private values on public channels. Changes from version 2019-07-17: * Google: Update for Google's new HTML layout. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-809=1 Package List: - openSUSE Leap 15.1 (noarch): python3-limnoria-2020.05.01-lp151.2.3.1 References:

1 0

openSUSE-RU-2020:0812-1: Recommended update for ipmctl
by maintenance＠opensuse.org 16 Jun '20

16 Jun '20

openSUSE Recommended Update: Recommended update for ipmctl ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0812-1 Rating: low References: #1158619 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ipmctl adds man pages to this package. (bsc#1158619) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-812=1 Package List: - openSUSE Leap 15.1 (x86_64): ipmctl-01.00.00.3440-lp151.2.3.1 ipmctl-debuginfo-01.00.00.3440-lp151.2.3.1 ipmctl-debugsource-01.00.00.3440-lp151.2.3.1 ipmctl-devel-01.00.00.3440-lp151.2.3.1 ipmctl-monitor-01.00.00.3440-lp151.2.3.1 ipmctl-monitor-debuginfo-01.00.00.3440-lp151.2.3.1 References: https://bugzilla.suse.com/1158619

1 0

openSUSE-SU-2020:0820-1: moderate: Security update for prboom-plus
by opensuse-security＠opensuse.org 16 Jun '20

16 Jun '20

openSUSE Security Update: Security update for prboom-plus ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0820-1 Rating: moderate References: #1171974 Cross-References: CVE-2019-20797 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for prboom-plus fixes the following issues: - CVE-2019-20797: Fixed a buffer overflow in client and server code responsible for handling received UDP packets (boo#1171974) This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-820=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): prboom-plus-2.5.1.4-bp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2019-20797.html https://bugzilla.suse.com/1171974

1 0

openSUSE-SU-2020:0807-1: moderate: Security update for prboom-plus
by opensuse-security＠opensuse.org 16 Jun '20

16 Jun '20

openSUSE Security Update: Security update for prboom-plus ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0807-1 Rating: moderate References: #1171974 Cross-References: CVE-2019-20797 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for prboom-plus fixes the following issues: - CVE-2019-20797: Fixed a buffer overflow in client and server code responsible for handling received UDP packets (boo#1171974) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-807=1 Package List: - openSUSE Leap 15.1 (x86_64): prboom-plus-2.5.1.4-lp151.3.3.1 prboom-plus-debuginfo-2.5.1.4-lp151.3.3.1 prboom-plus-debugsource-2.5.1.4-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2019-20797.html https://bugzilla.suse.com/1171974

1 0

openSUSE-RU-2020:0813-1: moderate: Recommended update for mpiP, openmpi3
by maintenance＠opensuse.org 16 Jun '20

16 Jun '20

openSUSE Recommended Update: Recommended update for mpiP, openmpi3 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0813-1 Rating: moderate References: #1169824 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for mpiP, openmpi3 fixes the following issues: - Enable openmpi3 build for all SLE versions. (bsc#1169824) - Add missing openmpi2 build for gcc7. - Add support for gcc8 and gcc9. (jsc#SLE-7766, jsc#SLE-8604) - Disable openmpi1 builds for SLE/Leap > 15.1. - Enable openmpi3 builds for Leap and SLE > 15.1. (jsc#SLE-7773) - Fix LTO support in archive files - created version independent doc package This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-813=1 Package List: - openSUSE Leap 15.1 (noarch): mpiP-gnu-mpich-hpc-3.4.1-lp151.6.3.1 mpiP-gnu-mpich-hpc-doc-3.4.1-lp151.6.3.1 mpiP-gnu-mvapich2-hpc-3.4.1-lp151.6.3.1 mpiP-gnu-mvapich2-hpc-doc-3.4.1-lp151.6.3.1 mpiP-gnu-openmpi1-hpc-3.4.1-lp151.6.3.1 mpiP-gnu-openmpi1-hpc-doc-3.4.1-lp151.6.3.1 mpiP-gnu-openmpi2-hpc-3.4.1-lp151.6.3.1 mpiP-gnu-openmpi2-hpc-doc-3.4.1-lp151.6.3.1 mpiP-gnu-openmpi3-hpc-3.4.1-lp151.6.3.2 mpiP-gnu-openmpi3-hpc-doc-3.4.1-lp151.6.3.2 openmpi3-gnu-hpc-devel-3.1.4-lp151.7.3.1 openmpi3-gnu-hpc-docs-3.1.4-lp151.7.3.1 openmpi3-gnu-hpc-macros-devel-3.1.4-lp151.7.3.1 openmpi3-testsuite-3.1.4-lp151.7.3.1 openmpi_3_1_4-gnu-hpc-testsuite-3.1.4-lp151.7.3.1 - openSUSE Leap 15.1 (x86_64): libopenmpi3-gnu-hpc-3.1.4-lp151.7.3.1 libopenmpi_3_1_4-gnu-hpc-3.1.4-lp151.7.3.1 libopenmpi_3_1_4-gnu-hpc-debuginfo-3.1.4-lp151.7.3.1 mpiP_3_4_1-gnu-mpich-hpc-3.4.1-lp151.6.3.1 mpiP_3_4_1-gnu-mpich-hpc-debuginfo-3.4.1-lp151.6.3.1 mpiP_3_4_1-gnu-mpich-hpc-debugsource-3.4.1-lp151.6.3.1 mpiP_3_4_1-gnu-mpich-hpc-devel-static-3.4.1-lp151.6.3.1 mpiP_3_4_1-gnu-mpich-hpc-doc-3.4.1-lp151.6.3.1 mpiP_3_4_1-gnu-mvapich2-hpc-3.4.1-lp151.6.3.1 mpiP_3_4_1-gnu-mvapich2-hpc-debuginfo-3.4.1-lp151.6.3.1 mpiP_3_4_1-gnu-mvapich2-hpc-debugsource-3.4.1-lp151.6.3.1 mpiP_3_4_1-gnu-mvapich2-hpc-devel-static-3.4.1-lp151.6.3.1 mpiP_3_4_1-gnu-mvapich2-hpc-doc-3.4.1-lp151.6.3.1 mpiP_3_4_1-gnu-openmpi1-hpc-3.4.1-lp151.6.3.1 mpiP_3_4_1-gnu-openmpi1-hpc-debuginfo-3.4.1-lp151.6.3.1 mpiP_3_4_1-gnu-openmpi1-hpc-debugsource-3.4.1-lp151.6.3.1 mpiP_3_4_1-gnu-openmpi1-hpc-devel-static-3.4.1-lp151.6.3.1 mpiP_3_4_1-gnu-openmpi1-hpc-doc-3.4.1-lp151.6.3.1 mpiP_3_4_1-gnu-openmpi2-hpc-3.4.1-lp151.6.3.1 mpiP_3_4_1-gnu-openmpi2-hpc-debuginfo-3.4.1-lp151.6.3.1 mpiP_3_4_1-gnu-openmpi2-hpc-debugsource-3.4.1-lp151.6.3.1 mpiP_3_4_1-gnu-openmpi2-hpc-devel-static-3.4.1-lp151.6.3.1 mpiP_3_4_1-gnu-openmpi2-hpc-doc-3.4.1-lp151.6.3.1 mpiP_3_4_1-gnu-openmpi3-hpc-3.4.1-lp151.6.3.2 mpiP_3_4_1-gnu-openmpi3-hpc-debuginfo-3.4.1-lp151.6.3.2 mpiP_3_4_1-gnu-openmpi3-hpc-debugsource-3.4.1-lp151.6.3.2 mpiP_3_4_1-gnu-openmpi3-hpc-devel-static-3.4.1-lp151.6.3.2 mpiP_3_4_1-gnu-openmpi3-hpc-doc-3.4.1-lp151.6.3.2 openmpi3-3.1.4-lp151.7.3.1 openmpi3-config-3.1.4-lp151.7.3.1 openmpi3-debuginfo-3.1.4-lp151.7.3.1 openmpi3-debugsource-3.1.4-lp151.7.3.1 openmpi3-devel-3.1.4-lp151.7.3.1 openmpi3-devel-debuginfo-3.1.4-lp151.7.3.1 openmpi3-docs-3.1.4-lp151.7.3.1 openmpi3-gnu-hpc-3.1.4-lp151.7.3.1 openmpi3-gnu-hpc-devel-static-3.1.4-lp151.7.3.1 openmpi3-libs-3.1.4-lp151.7.3.1 openmpi3-libs-debuginfo-3.1.4-lp151.7.3.1 openmpi3-macros-devel-3.1.4-lp151.7.3.1 openmpi_3_1_4-gnu-hpc-3.1.4-lp151.7.3.1 openmpi_3_1_4-gnu-hpc-debuginfo-3.1.4-lp151.7.3.1 openmpi_3_1_4-gnu-hpc-debugsource-3.1.4-lp151.7.3.1 openmpi_3_1_4-gnu-hpc-devel-3.1.4-lp151.7.3.1 openmpi_3_1_4-gnu-hpc-devel-debuginfo-3.1.4-lp151.7.3.1 openmpi_3_1_4-gnu-hpc-devel-static-3.1.4-lp151.7.3.1 openmpi_3_1_4-gnu-hpc-docs-3.1.4-lp151.7.3.1 openmpi_3_1_4-gnu-hpc-macros-devel-3.1.4-lp151.7.3.1 References: https://bugzilla.suse.com/1169824

1 0

openSUSE-SU-2020:0808-1: moderate: Security update for varnish
by opensuse-security＠opensuse.org 16 Jun '20

16 Jun '20

openSUSE Security Update: Security update for varnish ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0808-1 Rating: moderate References: #1169039 #1169040 Cross-References: CVE-2019-20637 CVE-2020-11653 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for varnish fixes the following issues: - CVE-2019-20637: Fixed an information leak when handling one client request and the next on the same connection (boo#1169040) - CVE-2020-11653: Fixed a performance loss due to an assertion failure and daemon restart when communicating with TLS termination proxy that uses PROXY version 2 (boo#1169039) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-808=1 Package List: - openSUSE Leap 15.1 (x86_64): libvarnishapi2-6.2.1-lp151.3.6.1 libvarnishapi2-debuginfo-6.2.1-lp151.3.6.1 varnish-6.2.1-lp151.3.6.1 varnish-debuginfo-6.2.1-lp151.3.6.1 varnish-debugsource-6.2.1-lp151.3.6.1 varnish-devel-6.2.1-lp151.3.6.1 References: https://www.suse.com/security/cve/CVE-2019-20637.html https://www.suse.com/security/cve/CVE-2020-11653.html https://bugzilla.suse.com/1169039 https://bugzilla.suse.com/1169040

1 0