June 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2020:0873-1: moderate: Recommended update for python-paramiko
by maintenance＠opensuse.org 26 Jun '20

26 Jun '20

openSUSE Recommended Update: Recommended update for python-paramiko ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0873-1 Rating: moderate References: #1169489 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-paramiko fixes the following issues: - Fixed a problem from the last fix that caused Vorta to fail (bsc#1169489) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-873=1 Package List: - openSUSE Leap 15.2 (noarch): python-paramiko-doc-2.4.2-lp152.3.3.1 python2-paramiko-2.4.2-lp152.3.3.1 python3-paramiko-2.4.2-lp152.3.3.1 References: https://bugzilla.suse.com/1169489

1 0

openSUSE-SU-2020:0872-1: moderate: Security update for bluez
by opensuse-security＠opensuse.org 26 Jun '20

26 Jun '20

openSUSE Security Update: Security update for bluez ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0872-1 Rating: moderate References: #1166751 Cross-References: CVE-2020-0556 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for bluez fixes the following issues: - CVE-2020-0556: Fixed an improper access control which could have allowed an unauthenticated user to potentially enable escalation of privilege and denial of service (bsc#1166751). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-872=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): bluez-5.48-lp152.12.3.1 bluez-cups-5.48-lp152.12.3.1 bluez-cups-debuginfo-5.48-lp152.12.3.1 bluez-debuginfo-5.48-lp152.12.3.1 bluez-debugsource-5.48-lp152.12.3.1 bluez-devel-5.48-lp152.12.3.1 bluez-test-5.48-lp152.12.3.1 bluez-test-debuginfo-5.48-lp152.12.3.1 libbluetooth3-5.48-lp152.12.3.1 libbluetooth3-debuginfo-5.48-lp152.12.3.1 - openSUSE Leap 15.2 (noarch): bluez-auto-enable-devices-5.48-lp152.12.3.1 - openSUSE Leap 15.2 (x86_64): bluez-devel-32bit-5.48-lp152.12.3.1 libbluetooth3-32bit-5.48-lp152.12.3.1 libbluetooth3-32bit-debuginfo-5.48-lp152.12.3.1 References: https://www.suse.com/security/cve/CVE-2020-0556.html https://bugzilla.suse.com/1166751

1 0

openSUSE-RU-2020:0871-1: moderate: Recommended update for sar2
by maintenance＠opensuse.org 26 Jun '20

26 Jun '20

openSUSE Recommended Update: Recommended update for sar2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0871-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for sar2 fixes the following issues: Update to version 2.5.0: * Add preliminary OSX support. * Improve lagging on touch-down event. * Fix crash when loading Free Flight mode. * Add wind support and aerodynamic drag. * Add 2 training missions in windy weather. * Add support for wind gusts. * Rework airplane physics and stalling conditions. * Adjust models for more realistic speed and service ceiling conditions. * Allow a minimum helicopter throotle to 25% (previously it was 50%). * Let smoke be carried by the wind. * Add a switch in simulation options to enable/disable Wind. * Add wind conditions to all Guadarrama missions. * Honor wheel brake coefficient. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-871=1 Package List: - openSUSE Leap 15.2 (x86_64): sar2-2.5.0-lp152.2.3.1 sar2-debuginfo-2.5.0-lp152.2.3.1 sar2-debugsource-2.5.0-lp152.2.3.1 - openSUSE Leap 15.2 (noarch): sar2-data-2.5.0-lp152.2.3.1 References:

1 0

openSUSE-RU-2020:0874-1: moderate: Recommended update for golang-packaging
by maintenance＠opensuse.org 26 Jun '20

26 Jun '20

openSUSE Recommended Update: Recommended update for golang-packaging ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0874-1 Rating: moderate References: #776058 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for golang-packaging fixes the following issues: - Fix for an issue when go installation fails due missing permissions. (bsc#776058) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-874=1 Package List: - openSUSE Leap 15.2 (noarch): golang-packaging-15.0.12-lp152.3.3.1 References: https://bugzilla.suse.com/776058

1 0

openSUSE-SU-2020:0870-1: moderate: Security update for mariadb
by opensuse-security＠opensuse.org 26 Jun '20

26 Jun '20

openSUSE Security Update: Security update for mariadb ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0870-1 Rating: moderate References: #1171550 Cross-References: CVE-2020-13249 CVE-2020-2752 CVE-2020-2760 CVE-2020-2812 CVE-2020-2814 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for mariadb to version 10.2.32 fixes the following issues: mariadb was updated to version 10.2.32 (bsc#1171550) - CVE-2020-2752: Fixed an issue which could have resulted in unauthorized ability to cause denial of service. - CVE-2020-2812: Fixed an issue which could have resulted in unauthorized ability to cause denial of service. - CVE-2020-2814: Fixed an issue which could have resulted in unauthorized ability to cause denial of service. - CVE-2020-2760: Fixed an issue which could have resulted in unauthorized ability to cause denial of service. - CVE-2020-13249: Fixed an improper validation of the content of an OK packet received from a server. Release notes and changelog: - https://mariadb.com/kb/en/library/mariadb-10232-release-notes - https://mariadb.com/kb/en/library/mariadb-10232-changelog This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-870=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libmysqld-devel-10.2.32-lp151.2.15.1 libmysqld19-10.2.32-lp151.2.15.1 libmysqld19-debuginfo-10.2.32-lp151.2.15.1 mariadb-10.2.32-lp151.2.15.1 mariadb-bench-10.2.32-lp151.2.15.1 mariadb-bench-debuginfo-10.2.32-lp151.2.15.1 mariadb-client-10.2.32-lp151.2.15.1 mariadb-client-debuginfo-10.2.32-lp151.2.15.1 mariadb-debuginfo-10.2.32-lp151.2.15.1 mariadb-debugsource-10.2.32-lp151.2.15.1 mariadb-galera-10.2.32-lp151.2.15.1 mariadb-test-10.2.32-lp151.2.15.1 mariadb-test-debuginfo-10.2.32-lp151.2.15.1 mariadb-tools-10.2.32-lp151.2.15.1 mariadb-tools-debuginfo-10.2.32-lp151.2.15.1 - openSUSE Leap 15.1 (noarch): mariadb-errormessages-10.2.32-lp151.2.15.1 References: https://www.suse.com/security/cve/CVE-2020-13249.html https://www.suse.com/security/cve/CVE-2020-2752.html https://www.suse.com/security/cve/CVE-2020-2760.html https://www.suse.com/security/cve/CVE-2020-2812.html https://www.suse.com/security/cve/CVE-2020-2814.html https://bugzilla.suse.com/1171550

1 0

openSUSE-RU-2020:0875-1: moderate: Recommended update for python-pytest-xdist
by maintenance＠opensuse.org 26 Jun '20

26 Jun '20

openSUSE Recommended Update: Recommended update for python-pytest-xdist ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0875-1 Rating: moderate References: #1171561 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-pytest-xdist fixes the following issue: - Export PYTHONDONTWRITEBYTECODE=1 to avoid PYTEST.pyc cache creation. (bsc#1171561) This update was imported from the SUSE:SLE-15-SP1:Update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-875=1 Package List: - openSUSE Leap 15.1 (noarch): python2-pytest-xdist-1.27.0-lp151.3.6.1 python3-pytest-xdist-1.27.0-lp151.3.6.1 References: https://bugzilla.suse.com/1171561

1 0

openSUSE-SU-2020:0869-1: Security update for mercurial
by opensuse-security＠opensuse.org 26 Jun '20

26 Jun '20

openSUSE Security Update: Security update for mercurial ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0869-1 Rating: low References: #1133035 Cross-References: CVE-2019-3902 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for mercurial fixes the following issues: Security issue fixed: - CVE-2019-3902: Fixed incorrect patch-checking with symlinks and subrepos (bsc#1133035). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-869=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): mercurial-4.5.2-lp151.6.3.1 mercurial-debuginfo-4.5.2-lp151.6.3.1 mercurial-debugsource-4.5.2-lp151.6.3.1 - openSUSE Leap 15.1 (noarch): mercurial-lang-4.5.2-lp151.6.3.1 References: https://www.suse.com/security/cve/CVE-2019-3902.html https://bugzilla.suse.com/1133035

1 0

openSUSE-RU-2020:0868-1: moderate: Recommended update for gnu-free-fonts
by maintenance＠opensuse.org 26 Jun '20

26 Jun '20

openSUSE Recommended Update: Recommended update for gnu-free-fonts ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0868-1 Rating: moderate References: #1170856 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gnu-free-fonts fixes the following issue: - Fix building with fontforge 20190801. (bsc#1170856) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-868=1 Package List: - openSUSE Leap 15.1 (noarch): gnu-free-fonts-0.20120503-lp151.4.3.1 References: https://bugzilla.suse.com/1170856

1 0

openSUSE-RU-2020:0867-1: moderate: Recommended update for go1.13
by maintenance＠opensuse.org 25 Jun '20

25 Jun '20

openSUSE Recommended Update: Recommended update for go1.13 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0867-1 Rating: moderate References: #1149259 #1170826 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for go1.13 fixes the following issues: - Fix for go compiler to avoid faileures caused on s390x. (bsc#1149259) - Add 'binutils-gold' as a dependency for arm and aarch64 architectures. (bsc#1170826) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-867=1 Package List: - openSUSE Leap 15.1 (x86_64): go1.13-1.13.11-lp151.2.1 go1.13-doc-1.13.11-lp151.2.1 go1.13-race-1.13.11-lp151.2.1 References: https://bugzilla.suse.com/1149259 https://bugzilla.suse.com/1170826

1 0

openSUSE-RU-2020:0864-1: moderate: Recommended update for festival
by maintenance＠opensuse.org 25 Jun '20

25 Jun '20

openSUSE Recommended Update: Recommended update for festival ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0864-1 Rating: moderate References: #1173193 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for festival fixes the following issues: - Fixed NULL dereference problem (EST_Item's method may be called even though "this" is NULL); it causes SIGSEGV in text2wave (boo#1173193). - Do not ignore errors from useradd/groupadd. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-864=1 Package List: - openSUSE Leap 15.1 (x86_64): festival-2.5.0-lp151.2.3.1 festival-debuginfo-2.5.0-lp151.2.3.1 festival-debugsource-2.5.0-lp151.2.3.1 festival-devel-2.5.0-lp151.2.3.1 References: https://bugzilla.suse.com/1173193

1 0