June 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2020:0855-1: moderate: Recommended update for ucode-intel
by maintenance＠opensuse.org 24 Jun '20

24 Jun '20

openSUSE Recommended Update: Recommended update for ucode-intel ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0855-1 Rating: moderate References: #1172466 #1172856 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for ucode-intel fixes the following issues: Updated Intel CPU Microcode to 20200616 official release (bsc#1172856) - revert 06-4e-03 Skylake U/Y, U23e ucode back to 000000d6 release - revert 06-5e-03 Skylake H/S ucode back to 000000d6 release, as both cause stability issues. (bsc#1172856) Updated Intel CPU Microcode to 20200609 official release (bsc#1172466) - no changes to 20200602 prerelease This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-855=1 Package List: - openSUSE Leap 15.1 (x86_64): ucode-intel-20200616-lp151.2.27.1 References: https://bugzilla.suse.com/1172466 https://bugzilla.suse.com/1172856

1 0

openSUSE-SU-2019:2154-1: moderate: Security update for opera
by opensuse-security＠opensuse.org 24 Jun '20

24 Jun '20

openSUSE Security Update: Security update for opera ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2154-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2:NonFree ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for opera fixes the following issues: Opera was updated to version 63.0.3368.88: - DNA-79103 Saving link to bookmarks saves it to Other bookmarks folder - DNA-79455 Crash at views::MenuController:: FindNextSelectableMenuItem(views::MenuItemView*, int, views:: MenuController::SelectionIncrementDirectionType, bool) - DNA-79579 Continuous packages using new_mac_bundle_structure do not run - DNA-79611 Update opauto_paths.py:GetResourcesDir - DNA-79621 Add support for new bundle structure to old autoupdate clients - DNA-80131 Sign Opera Helper(GPU).app opera_components/tracking_data/tracking_data_paths.cc - DNA-80638 Cherry-pick fix for CreditCardTest. UpdateFromImportedCard_ExpiredVerifiedCardUpdatedWithSameName - DNA-80801 Very slow tab deletion process Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2:NonFree: zypper in -t patch openSUSE-2019-2154=1 Package List: - openSUSE Leap 15.2:NonFree (x86_64): opera-63.0.3368.88-lp152.2.3.1 References:

1 0

openSUSE-RU-2020:0810-1: Recommended of update-test-retracted
by maintenance＠opensuse.org 24 Jun '20

24 Jun '20

openSUSE Recommended Update: Recommended of update-test-retracted ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0810-1 Rating: low References: #1169700 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for update-test-retracted: Step 0: - This is a harmless update, which establishes update-test-retracted. It has no bugs. This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-810=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): update-test-retracted-5.1-lp152.7.1 References: https://bugzilla.suse.com/1169700

1 0

openSUSE-RU-2020:0371-1: Test update
by maintenance＠opensuse.org 24 Jun '20

24 Jun '20

openSUSE Recommended Update: Test update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0371-1 Rating: low References: #1149774 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Test update for 15.2 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-371=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): update-test-32bit-pkg-5.1-lp152.4.1 update-test-affects-package-manager-5.1-lp152.4.1 update-test-broken-5.1-lp152.4.1 update-test-feature-5.1-lp152.4.1 update-test-interactive-5.1-lp152.4.1 update-test-optional-5.1-lp152.4.1 update-test-reboot-needed-5.1-lp152.4.1 update-test-relogin-suggested-5.1-lp152.4.1 update-test-security-5.1-lp152.4.1 update-test-trivial-5.1-lp152.4.1 - openSUSE Leap 15.2 (x86_64): update-test-32bit-pkg-32bit-5.1-lp152.4.1 References: https://bugzilla.suse.com/1149774

1 0

openSUSE-SU-2020:0841-1: important: Security update for java-1_8_0-openj9
by opensuse-security＠opensuse.org 24 Jun '20

24 Jun '20

openSUSE Security Update: Security update for java-1_8_0-openj9 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0841-1 Rating: important References: #1169511 #1171352 Cross-References: CVE-2020-2754 CVE-2020-2755 CVE-2020-2756 CVE-2020-2757 CVE-2020-2773 CVE-2020-2781 CVE-2020-2800 CVE-2020-2803 CVE-2020-2805 CVE-2020-2830 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes 10 vulnerabilities is now available. Description: This update for java-1_8_0-openj9 fixes the following issues: java-1_8_0-openj9 was updated to Java 8.0 Service Refresh 6 Fix Pack 10 (bsc#1169511) - CVE-2020-2830: Improved Scanner conversions - CVE-2020-2805: Enhanced typing of methods - CVE-2020-2803: Enhanced buffering of byte buffers - CVE-2020-2800: Improved Headings for HTTP Servers - CVE-2020-2781: Improved TLS session handling - CVE-2020-2773: Fixed an issue which could have allowed an attacker to caise denial of service - CVE-2020-2757: Less Blocking Array Queues - CVE-2020-2756: Improved mapping of serial ENUMs - CVE-2020-2755: Improved Nashorn matching - CVE-2020-2754: Forwarded references to Nashorn - The pack200 and unpack200 alternatives should be slaves of java (bsc#1171352). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-841=1 Package List: - openSUSE Leap 15.2 (noarch): java-1_8_0-openj9-javadoc-1.8.0.252-lp152.2.3.1 - openSUSE Leap 15.2 (x86_64): java-1_8_0-openj9-1.8.0.252-lp152.2.3.1 java-1_8_0-openj9-accessibility-1.8.0.252-lp152.2.3.1 java-1_8_0-openj9-debuginfo-1.8.0.252-lp152.2.3.1 java-1_8_0-openj9-debugsource-1.8.0.252-lp152.2.3.1 java-1_8_0-openj9-demo-1.8.0.252-lp152.2.3.1 java-1_8_0-openj9-demo-debuginfo-1.8.0.252-lp152.2.3.1 java-1_8_0-openj9-devel-1.8.0.252-lp152.2.3.1 java-1_8_0-openj9-headless-1.8.0.252-lp152.2.3.1 java-1_8_0-openj9-src-1.8.0.252-lp152.2.3.1 References: https://www.suse.com/security/cve/CVE-2020-2754.html https://www.suse.com/security/cve/CVE-2020-2755.html https://www.suse.com/security/cve/CVE-2020-2756.html https://www.suse.com/security/cve/CVE-2020-2757.html https://www.suse.com/security/cve/CVE-2020-2773.html https://www.suse.com/security/cve/CVE-2020-2781.html https://www.suse.com/security/cve/CVE-2020-2800.html https://www.suse.com/security/cve/CVE-2020-2803.html https://www.suse.com/security/cve/CVE-2020-2805.html https://www.suse.com/security/cve/CVE-2020-2830.html https://bugzilla.suse.com/1169511 https://bugzilla.suse.com/1171352

1 0

openSUSE-SU-2020:0854-1: important: Security update for mozilla-nspr, mozilla-nss
by opensuse-security＠opensuse.org 24 Jun '20

24 Jun '20

openSUSE Security Update: Security update for mozilla-nspr, mozilla-nss ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0854-1 Rating: important References: #1159819 #1169746 #1171978 Cross-References: CVE-2019-17006 CVE-2020-12399 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for mozilla-nspr, mozilla-nss fixes the following issues: mozilla-nss was updated to version 3.53 - CVE-2020-12399: Fixed a timing attack on DSA signature generation (bsc#1171978). - CVE-2019-17006: Added length checks for cryptographic primitives (bsc#1159819). Release notes: https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.53_rele ase_notes mozilla-nspr to version 4.25 This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-854=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libfreebl3-3.53-lp151.2.23.1 libfreebl3-debuginfo-3.53-lp151.2.23.1 libfreebl3-hmac-3.53-lp151.2.23.1 libsoftokn3-3.53-lp151.2.23.1 libsoftokn3-debuginfo-3.53-lp151.2.23.1 libsoftokn3-hmac-3.53-lp151.2.23.1 mozilla-nspr-4.25-lp151.2.9.1 mozilla-nspr-debuginfo-4.25-lp151.2.9.1 mozilla-nspr-debugsource-4.25-lp151.2.9.1 mozilla-nspr-devel-4.25-lp151.2.9.1 mozilla-nss-3.53-lp151.2.23.1 mozilla-nss-certs-3.53-lp151.2.23.1 mozilla-nss-certs-debuginfo-3.53-lp151.2.23.1 mozilla-nss-debuginfo-3.53-lp151.2.23.1 mozilla-nss-debugsource-3.53-lp151.2.23.1 mozilla-nss-devel-3.53-lp151.2.23.1 mozilla-nss-sysinit-3.53-lp151.2.23.1 mozilla-nss-sysinit-debuginfo-3.53-lp151.2.23.1 mozilla-nss-tools-3.53-lp151.2.23.1 mozilla-nss-tools-debuginfo-3.53-lp151.2.23.1 - openSUSE Leap 15.1 (x86_64): libfreebl3-32bit-3.53-lp151.2.23.1 libfreebl3-32bit-debuginfo-3.53-lp151.2.23.1 libfreebl3-hmac-32bit-3.53-lp151.2.23.1 libsoftokn3-32bit-3.53-lp151.2.23.1 libsoftokn3-32bit-debuginfo-3.53-lp151.2.23.1 libsoftokn3-hmac-32bit-3.53-lp151.2.23.1 mozilla-nspr-32bit-4.25-lp151.2.9.1 mozilla-nspr-32bit-debuginfo-4.25-lp151.2.9.1 mozilla-nss-32bit-3.53-lp151.2.23.1 mozilla-nss-32bit-debuginfo-3.53-lp151.2.23.1 mozilla-nss-certs-32bit-3.53-lp151.2.23.1 mozilla-nss-certs-32bit-debuginfo-3.53-lp151.2.23.1 mozilla-nss-sysinit-32bit-3.53-lp151.2.23.1 mozilla-nss-sysinit-32bit-debuginfo-3.53-lp151.2.23.1 References: https://www.suse.com/security/cve/CVE-2019-17006.html https://www.suse.com/security/cve/CVE-2020-12399.html https://bugzilla.suse.com/1159819 https://bugzilla.suse.com/1169746 https://bugzilla.suse.com/1171978

1 0

openSUSE-RU-2020:0853-1: moderate: Recommended update for spec-cleaner
by maintenance＠opensuse.org 23 Jun '20

23 Jun '20

openSUSE Recommended Update: Recommended update for spec-cleaner ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0853-1 Rating: moderate References: #1099674 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for spec-cleaner fixes the following issues: Update to 1.2.0 boo#1099674: * Fix pypi rewritter to work with wheels * Do not choke on multiline string macros * Add %{dephell_gensetup} macro instead of the full call This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-853=1 Package List: - openSUSE Backports SLE-15-SP1 (noarch): spec-cleaner-1.2.0-bp151.3.21.1 spec-cleaner-format_spec_file-1.2.0-bp151.3.21.1 References: https://bugzilla.suse.com/1099674

1 0

openSUSE-OU-2020:0848-1: Optional update for opensaml
by maintenance＠opensuse.org 22 Jun '20

22 Jun '20

openSUSE Optional Update: Optional update for opensaml ______________________________________________________________________________ Announcement ID: openSUSE-OU-2020:0848-1 Rating: low References: #1172352 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update for opensaml doesn't address any user visible bugs. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Optional Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-848=1 Package List: - openSUSE Leap 15.1 (x86_64): libsaml-devel-2.6.1-lp151.3.3.1 libsaml9-2.6.1-lp151.3.3.1 libsaml9-debuginfo-2.6.1-lp151.3.3.1 opensaml-bin-2.6.1-lp151.3.3.1 opensaml-bin-debuginfo-2.6.1-lp151.3.3.1 opensaml-debuginfo-2.6.1-lp151.3.3.1 opensaml-debugsource-2.6.1-lp151.3.3.1 opensaml-schemas-2.6.1-lp151.3.3.1 References: https://bugzilla.suse.com/1172352

1 0

openSUSE-SU-2020:0852-1: moderate: Security update for osc
by opensuse-security＠opensuse.org 22 Jun '20

22 Jun '20

openSUSE Security Update: Security update for osc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0852-1 Rating: moderate References: #1122675 Cross-References: CVE-2019-3681 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for osc to 0.169.1 fixes the following issues: Security issue fixed: - CVE-2019-3681: Fixed an insufficient validation of network-controlled filesystem paths (bsc#1122675). Non-security issues fixed: - Improved the speed and usability of osc bash completion. - improved some error messages. - osc add: support git@ (private github) or git:// URLs correctly. - Split dependson and whatdependson commands. - Added support for osc build --shell-cmd. - Added pkg-ccache support for osc build. - Added --ccache option to osc getbinaries This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-852=1 Package List: - openSUSE Leap 15.1 (noarch): osc-0.169.1-lp151.2.15.1 References: https://www.suse.com/security/cve/CVE-2019-3681.html https://bugzilla.suse.com/1122675

1 0

openSUSE-RU-2020:0843-1: important: Recommended update for fonts-config
by maintenance＠opensuse.org 22 Jun '20

22 Jun '20

openSUSE Recommended Update: Recommended update for fonts-config ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0843-1 Rating: important References: #1049056 #1092737 #1101985 #1106850 #1111791 #1172022 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 6 recommended fixes can now be installed. Description: This update for fonts-config fixes the following issues: - Update version from 20160921 to version 20200609+git0.42e2b1b * Check if it's required to use some default settings in /etc/sysconfig/fonts-config. (bsc#1172022) * Add variable to allow fonts-config to update default settings * Fix en-US, en-GB font matching. * Allow non-ASCII letters in font names. (bsc#1049056, bsc#1101985). * Update subpixel rendering config * Fix misspelling in configuration file. (bsc#1111791) * Fix wrong visualization for special characters and numbers. (bsc#1092737) * Support color emoji * Modern fonts for symbol * Add configurations for Noto Sans/Serif CJK * No longer create encodings.dir in /usr/share/fonts/encodings/ (bsc#1106850) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-843=1 Package List: - openSUSE Leap 15.1 (noarch): fonts-config-20200609+git0.42e2b1b-lp151.4.3.1 References: https://bugzilla.suse.com/1049056 https://bugzilla.suse.com/1092737 https://bugzilla.suse.com/1101985 https://bugzilla.suse.com/1106850 https://bugzilla.suse.com/1111791 https://bugzilla.suse.com/1172022

1 0