June 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2020:0847-1: moderate: Security update for php7
by opensuse-security＠opensuse.org 22 Jun '20

22 Jun '20

openSUSE Security Update: Security update for php7 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0847-1 Rating: moderate References: #1171999 Cross-References: CVE-2019-11048 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for php7 fixes the following issues: Security issue fixed: - CVE-2019-11048: Improved the handling of overly long filenames or field names in HTTP file uploads (bsc#1171999). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-847=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): apache2-mod_php7-7.2.5-lp151.6.28.1 apache2-mod_php7-debuginfo-7.2.5-lp151.6.28.1 php7-7.2.5-lp151.6.28.1 php7-bcmath-7.2.5-lp151.6.28.1 php7-bcmath-debuginfo-7.2.5-lp151.6.28.1 php7-bz2-7.2.5-lp151.6.28.1 php7-bz2-debuginfo-7.2.5-lp151.6.28.1 php7-calendar-7.2.5-lp151.6.28.1 php7-calendar-debuginfo-7.2.5-lp151.6.28.1 php7-ctype-7.2.5-lp151.6.28.1 php7-ctype-debuginfo-7.2.5-lp151.6.28.1 php7-curl-7.2.5-lp151.6.28.1 php7-curl-debuginfo-7.2.5-lp151.6.28.1 php7-dba-7.2.5-lp151.6.28.1 php7-dba-debuginfo-7.2.5-lp151.6.28.1 php7-debuginfo-7.2.5-lp151.6.28.1 php7-debugsource-7.2.5-lp151.6.28.1 php7-devel-7.2.5-lp151.6.28.1 php7-dom-7.2.5-lp151.6.28.1 php7-dom-debuginfo-7.2.5-lp151.6.28.1 php7-embed-7.2.5-lp151.6.28.1 php7-embed-debuginfo-7.2.5-lp151.6.28.1 php7-enchant-7.2.5-lp151.6.28.1 php7-enchant-debuginfo-7.2.5-lp151.6.28.1 php7-exif-7.2.5-lp151.6.28.1 php7-exif-debuginfo-7.2.5-lp151.6.28.1 php7-fastcgi-7.2.5-lp151.6.28.1 php7-fastcgi-debuginfo-7.2.5-lp151.6.28.1 php7-fileinfo-7.2.5-lp151.6.28.1 php7-fileinfo-debuginfo-7.2.5-lp151.6.28.1 php7-firebird-7.2.5-lp151.6.28.1 php7-firebird-debuginfo-7.2.5-lp151.6.28.1 php7-fpm-7.2.5-lp151.6.28.1 php7-fpm-debuginfo-7.2.5-lp151.6.28.1 php7-ftp-7.2.5-lp151.6.28.1 php7-ftp-debuginfo-7.2.5-lp151.6.28.1 php7-gd-7.2.5-lp151.6.28.1 php7-gd-debuginfo-7.2.5-lp151.6.28.1 php7-gettext-7.2.5-lp151.6.28.1 php7-gettext-debuginfo-7.2.5-lp151.6.28.1 php7-gmp-7.2.5-lp151.6.28.1 php7-gmp-debuginfo-7.2.5-lp151.6.28.1 php7-iconv-7.2.5-lp151.6.28.1 php7-iconv-debuginfo-7.2.5-lp151.6.28.1 php7-intl-7.2.5-lp151.6.28.1 php7-intl-debuginfo-7.2.5-lp151.6.28.1 php7-json-7.2.5-lp151.6.28.1 php7-json-debuginfo-7.2.5-lp151.6.28.1 php7-ldap-7.2.5-lp151.6.28.1 php7-ldap-debuginfo-7.2.5-lp151.6.28.1 php7-mbstring-7.2.5-lp151.6.28.1 php7-mbstring-debuginfo-7.2.5-lp151.6.28.1 php7-mysql-7.2.5-lp151.6.28.1 php7-mysql-debuginfo-7.2.5-lp151.6.28.1 php7-odbc-7.2.5-lp151.6.28.1 php7-odbc-debuginfo-7.2.5-lp151.6.28.1 php7-opcache-7.2.5-lp151.6.28.1 php7-opcache-debuginfo-7.2.5-lp151.6.28.1 php7-openssl-7.2.5-lp151.6.28.1 php7-openssl-debuginfo-7.2.5-lp151.6.28.1 php7-pcntl-7.2.5-lp151.6.28.1 php7-pcntl-debuginfo-7.2.5-lp151.6.28.1 php7-pdo-7.2.5-lp151.6.28.1 php7-pdo-debuginfo-7.2.5-lp151.6.28.1 php7-pgsql-7.2.5-lp151.6.28.1 php7-pgsql-debuginfo-7.2.5-lp151.6.28.1 php7-phar-7.2.5-lp151.6.28.1 php7-phar-debuginfo-7.2.5-lp151.6.28.1 php7-posix-7.2.5-lp151.6.28.1 php7-posix-debuginfo-7.2.5-lp151.6.28.1 php7-readline-7.2.5-lp151.6.28.1 php7-readline-debuginfo-7.2.5-lp151.6.28.1 php7-shmop-7.2.5-lp151.6.28.1 php7-shmop-debuginfo-7.2.5-lp151.6.28.1 php7-snmp-7.2.5-lp151.6.28.1 php7-snmp-debuginfo-7.2.5-lp151.6.28.1 php7-soap-7.2.5-lp151.6.28.1 php7-soap-debuginfo-7.2.5-lp151.6.28.1 php7-sockets-7.2.5-lp151.6.28.1 php7-sockets-debuginfo-7.2.5-lp151.6.28.1 php7-sodium-7.2.5-lp151.6.28.1 php7-sodium-debuginfo-7.2.5-lp151.6.28.1 php7-sqlite-7.2.5-lp151.6.28.1 php7-sqlite-debuginfo-7.2.5-lp151.6.28.1 php7-sysvmsg-7.2.5-lp151.6.28.1 php7-sysvmsg-debuginfo-7.2.5-lp151.6.28.1 php7-sysvsem-7.2.5-lp151.6.28.1 php7-sysvsem-debuginfo-7.2.5-lp151.6.28.1 php7-sysvshm-7.2.5-lp151.6.28.1 php7-sysvshm-debuginfo-7.2.5-lp151.6.28.1 php7-test-7.2.5-lp151.6.28.1 php7-tidy-7.2.5-lp151.6.28.1 php7-tidy-debuginfo-7.2.5-lp151.6.28.1 php7-tokenizer-7.2.5-lp151.6.28.1 php7-tokenizer-debuginfo-7.2.5-lp151.6.28.1 php7-wddx-7.2.5-lp151.6.28.1 php7-wddx-debuginfo-7.2.5-lp151.6.28.1 php7-xmlreader-7.2.5-lp151.6.28.1 php7-xmlreader-debuginfo-7.2.5-lp151.6.28.1 php7-xmlrpc-7.2.5-lp151.6.28.1 php7-xmlrpc-debuginfo-7.2.5-lp151.6.28.1 php7-xmlwriter-7.2.5-lp151.6.28.1 php7-xmlwriter-debuginfo-7.2.5-lp151.6.28.1 php7-xsl-7.2.5-lp151.6.28.1 php7-xsl-debuginfo-7.2.5-lp151.6.28.1 php7-zip-7.2.5-lp151.6.28.1 php7-zip-debuginfo-7.2.5-lp151.6.28.1 php7-zlib-7.2.5-lp151.6.28.1 php7-zlib-debuginfo-7.2.5-lp151.6.28.1 - openSUSE Leap 15.1 (noarch): php7-pear-7.2.5-lp151.6.28.1 php7-pear-Archive_Tar-7.2.5-lp151.6.28.1 References: https://www.suse.com/security/cve/CVE-2019-11048.html https://bugzilla.suse.com/1171999

1 0

openSUSE-SU-2020:0850-1: important: Security update for perl
by opensuse-security＠opensuse.org 22 Jun '20

22 Jun '20

openSUSE Security Update: Security update for perl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0850-1 Rating: important References: #1171863 #1171864 #1171866 #1172348 Cross-References: CVE-2020-10543 CVE-2020-10878 CVE-2020-12723 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves three vulnerabilities and has one errata is now available. Description: This update for perl fixes the following issues: - CVE-2020-10543: Fixed a heap buffer overflow in regular expression compiler which could have allowed overwriting of allocated memory with attacker's data (bsc#1171863). - CVE-2020-10878: Fixed multiple integer overflows which could have allowed the insertion of instructions into the compiled form of Perl regular expression (bsc#1171864). - CVE-2020-12723: Fixed an attacker's corruption of the intermediate language state of a compiled regular expression (bsc#1171866). - Fixed a bad warning in features.ph (bsc#1172348). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-850=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): perl-5.26.1-lp151.9.6.1 perl-base-5.26.1-lp151.9.6.1 perl-base-debuginfo-5.26.1-lp151.9.6.1 perl-debuginfo-5.26.1-lp151.9.6.1 perl-debugsource-5.26.1-lp151.9.6.1 - openSUSE Leap 15.1 (x86_64): perl-32bit-5.26.1-lp151.9.6.1 perl-32bit-debuginfo-5.26.1-lp151.9.6.1 perl-base-32bit-5.26.1-lp151.9.6.1 perl-base-32bit-debuginfo-5.26.1-lp151.9.6.1 - openSUSE Leap 15.1 (noarch): perl-doc-5.26.1-lp151.9.6.1 References: https://www.suse.com/security/cve/CVE-2020-10543.html https://www.suse.com/security/cve/CVE-2020-10878.html https://www.suse.com/security/cve/CVE-2020-12723.html https://bugzilla.suse.com/1171863 https://bugzilla.suse.com/1171864 https://bugzilla.suse.com/1171866 https://bugzilla.suse.com/1172348

1 0

openSUSE-RU-2020:0842-1: moderate: Recommended update for libsolv, libzypp, zypper
by maintenance＠opensuse.org 22 Jun '20

22 Jun '20

openSUSE Recommended Update: Recommended update for libsolv, libzypp, zypper ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0842-1 Rating: moderate References: #1130873 #1154803 #1164543 #1165476 #1165573 #1166610 #1167122 #1168990 #1169947 #1172925 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 10 recommended fixes can now be installed. Description: This update for libsolv, libzypp, zypper fixes the following issues: libsolv was updated to 0.7.13 to fix: - Fix solvable swapping messing up idarrays - fix ruleinfo of complex dependencies returning the wrong origin libzypp was updated to 17.23.4 to fix: - Get retracted patch status from updateinfo data (jsc#SLE-8770) libsolv injects the indicator provides into packages only. - remove 'using namespace std;' (bsc#1166610, fixes #218) - Online doc: add 'Hardware (modalias) dependencies' page (fixes #216) - Add HistoryLogReader actionFilter to parse only specific HistoryActionIDs. - RepoVariables: Add safe guard in case the caller does not own a zypp instance. - Enable c++17. Define libyzpp CXX_STANDARD in ZyppCommon.cmake. - Fix package status computation regarding unneeded, orphaned, recommended and suggested packages (broken in 17.23.0) (bsc#1165476) - Log patch status changes to history (jsc#SLE-5116) - Allow to disable all WebServer dependent tests when building. OBS wants to be able to get rid of the nginx/FastCGI-devel build requirement. Use 'rpmbuild --without mediabackend_tests' or 'cmake -DDISABLE_MEDIABACKEND_TESTS=1'. - update translations - boost: Fix deprecated auto_unit_test.hpp includes. - Disable zchunk on Leap-15.0 and SLE15-* while there is no libzck. - Fix decision whether to download ZCHUNK files. libzypp and libsolv must both be able to read the format. - yum::Downloader: Prefer zchunk compressed metadata if libvsolv supports it. - Selectable: Fix highestAvailableVersionObj if only retracted packages are available. Avoid using retracted items as candidate (jsc#SLE-8770) - RpmDb: Become rpmdb backend independent (jsc#SLE-7272) - RpmDb: Close API offering a custom rpmdb path It's actually not needed and for this to work also libsolv needs to support it. You can sill use a librpmDb::db_const_iterator to access a database at a custom location (ro). - Remove legacy rpmV3database conversion code. - Reformat manpages to workaround asciidoctor shortcomings (bsc#1154803, bsc#1167122, bsc#1168990) - Remove undocumented rug legacy stuff. - Remove 'using namespace std;' (bsc#1166610) - patch table: Add 'Since' column if history data are available (jsc#SLE-5116) zypper was updated to version 1.14.36: - Tag 'retracted' patch status in info and list-patches (jsc#SLE-8770) - Tag 'R'etracted items in search tabes status columns (jsc#SLE-8770) - Relax 'Do not allow the abbreviation of cli arguments' in legacy distibutions (bsc#1164543) - Correctly detect ambigous switch abbreviations (bsc#1165573) - zypper-aptitude: don't supplement zypper. supplementing zypper means zypper-aptitude gets installed by default and pulls in perl. Neither is desired on small systems. - Do not allow the abbreviation of cli arguments (bsc#1164543) - accoring to according in all translation files. - Always show exception history if available. - Use default package cache location for temporary repos (bsc#1130873) - Print switch abbrev warning to stderr (bsc#1172925) - Fix typo in man page (bsc#1169947) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-842=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): PackageKit-1.1.10-lp151.8.9.2 PackageKit-backend-zypp-1.1.10-lp151.8.9.2 PackageKit-backend-zypp-debuginfo-1.1.10-lp151.8.9.2 PackageKit-debuginfo-1.1.10-lp151.8.9.2 PackageKit-debugsource-1.1.10-lp151.8.9.2 PackageKit-devel-1.1.10-lp151.8.9.2 PackageKit-devel-debuginfo-1.1.10-lp151.8.9.2 PackageKit-gstreamer-plugin-1.1.10-lp151.8.9.2 PackageKit-gstreamer-plugin-debuginfo-1.1.10-lp151.8.9.2 PackageKit-gtk3-module-1.1.10-lp151.8.9.2 PackageKit-gtk3-module-debuginfo-1.1.10-lp151.8.9.2 libmaxminddb-debugsource-1.4.2-lp151.3.5.1 libmaxminddb-devel-1.4.2-lp151.3.5.1 libmaxminddb0-1.4.2-lp151.3.5.1 libmaxminddb0-debuginfo-1.4.2-lp151.3.5.1 libpackagekit-glib2-18-1.1.10-lp151.8.9.2 libpackagekit-glib2-18-debuginfo-1.1.10-lp151.8.9.2 libpackagekit-glib2-devel-1.1.10-lp151.8.9.2 libsolv-debuginfo-0.7.13-lp151.2.16.1 libsolv-debugsource-0.7.13-lp151.2.16.1 libsolv-demo-0.7.13-lp151.2.16.1 libsolv-demo-debuginfo-0.7.13-lp151.2.16.1 libsolv-devel-0.7.13-lp151.2.16.1 libsolv-devel-debuginfo-0.7.13-lp151.2.16.1 libsolv-tools-0.7.13-lp151.2.16.1 libsolv-tools-debuginfo-0.7.13-lp151.2.16.1 libyui-ncurses-pkg-debugsource-2.48.9-lp151.2.6.1 libyui-ncurses-pkg-devel-2.48.9-lp151.2.6.1 libyui-ncurses-pkg9-2.48.9-lp151.2.6.1 libyui-ncurses-pkg9-debuginfo-2.48.9-lp151.2.6.1 libyui-qt-pkg-debugsource-2.45.28-lp151.2.10.2 libyui-qt-pkg-devel-2.45.28-lp151.2.10.2 libyui-qt-pkg9-2.45.28-lp151.2.10.2 libyui-qt-pkg9-debuginfo-2.45.28-lp151.2.10.2 libzypp-17.23.4-lp151.2.16.2 libzypp-debuginfo-17.23.4-lp151.2.16.2 libzypp-debugsource-17.23.4-lp151.2.16.2 libzypp-devel-17.23.4-lp151.2.16.2 libzypp-devel-doc-17.23.4-lp151.2.16.2 mmdblookup-1.4.2-lp151.3.5.1 mmdblookup-debuginfo-1.4.2-lp151.3.5.1 nginx-1.16.1-lp151.4.11.1 nginx-debuginfo-1.16.1-lp151.4.11.1 nginx-debugsource-1.16.1-lp151.4.11.1 perl-solv-0.7.13-lp151.2.16.1 perl-solv-debuginfo-0.7.13-lp151.2.16.1 python-solv-0.7.13-lp151.2.16.1 python-solv-debuginfo-0.7.13-lp151.2.16.1 python3-solv-0.7.13-lp151.2.16.1 python3-solv-debuginfo-0.7.13-lp151.2.16.1 ruby-solv-0.7.13-lp151.2.16.1 ruby-solv-debuginfo-0.7.13-lp151.2.16.1 typelib-1_0-PackageKitGlib-1_0-1.1.10-lp151.8.9.2 yast2-pkg-bindings-4.1.2-lp151.2.6.1 yast2-pkg-bindings-debuginfo-4.1.2-lp151.2.6.1 yast2-pkg-bindings-debugsource-4.1.2-lp151.2.6.1 zypper-1.14.37-lp151.2.14.1 zypper-debuginfo-1.14.37-lp151.2.14.1 zypper-debugsource-1.14.37-lp151.2.14.1 - openSUSE Leap 15.1 (x86_64): libmaxminddb0-32bit-1.4.2-lp151.3.5.1 libmaxminddb0-32bit-debuginfo-1.4.2-lp151.3.5.1 libpackagekit-glib2-18-32bit-1.1.10-lp151.8.9.2 libpackagekit-glib2-18-32bit-debuginfo-1.1.10-lp151.8.9.2 libpackagekit-glib2-devel-32bit-1.1.10-lp151.8.9.2 - openSUSE Leap 15.1 (noarch): PackageKit-branding-upstream-1.1.10-lp151.8.9.2 PackageKit-lang-1.1.10-lp151.8.9.2 libyui-ncurses-pkg-doc-2.48.9-lp151.2.6.1 libyui-qt-pkg-doc-2.45.28-lp151.2.10.1 nginx-source-1.16.1-lp151.4.11.1 vim-plugin-nginx-1.16.1-lp151.4.11.1 yast2-pkg-bindings-devel-doc-4.1.2-lp151.2.6.1 zypper-aptitude-1.14.37-lp151.2.14.1 zypper-log-1.14.37-lp151.2.14.1 zypper-needs-restarting-1.14.37-lp151.2.14.1 References: https://bugzilla.suse.com/1130873 https://bugzilla.suse.com/1154803 https://bugzilla.suse.com/1164543 https://bugzilla.suse.com/1165476 https://bugzilla.suse.com/1165573 https://bugzilla.suse.com/1166610 https://bugzilla.suse.com/1167122 https://bugzilla.suse.com/1168990 https://bugzilla.suse.com/1169947 https://bugzilla.suse.com/1172925

1 0

openSUSE-SU-2020:0845-1: important: Security update for chromium
by opensuse-security＠opensuse.org 22 Jun '20

22 Jun '20

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0845-1 Rating: important References: #1173029 #1173063 Cross-References: CVE-2020-6505 CVE-2020-6506 CVE-2020-6507 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for chromium fixes the following issues: Update to version 83.0.4103.106 (boo#1173029): * CVE-2020-6505: Use after free in speech * CVE-2020-6506: Insufficient policy enforcement in WebView * CVE-2020-6507: Out of bounds write in V8 - Enforce to not use system borders bsc#1173063 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-845=1 Package List: - openSUSE Leap 15.1 (x86_64): chromedriver-83.0.4103.106-lp151.2.101.1 chromedriver-debuginfo-83.0.4103.106-lp151.2.101.1 chromium-83.0.4103.106-lp151.2.101.1 chromium-debuginfo-83.0.4103.106-lp151.2.101.1 chromium-debugsource-83.0.4103.106-lp151.2.101.1 References: https://www.suse.com/security/cve/CVE-2020-6505.html https://www.suse.com/security/cve/CVE-2020-6506.html https://www.suse.com/security/cve/CVE-2020-6507.html https://bugzilla.suse.com/1173029 https://bugzilla.suse.com/1173063

1 0

openSUSE-SU-2020:0851-1: moderate: Security update for xmlgraphics-batik
by opensuse-security＠opensuse.org 22 Jun '20

22 Jun '20

openSUSE Security Update: Security update for xmlgraphics-batik ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0851-1 Rating: moderate References: #1172961 Cross-References: CVE-2019-17566 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for xmlgraphics-batik fixes the following issues: - CVE-2019-17566: Fixed a SSRF which might have allowed the underlying server to make arbitrary GET requests (bsc#1172961). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-851=1 Package List: - openSUSE Leap 15.1 (noarch): xmlgraphics-batik-1.9-lp151.6.3.1 xmlgraphics-batik-demo-1.9-lp151.6.3.1 xmlgraphics-batik-rasterizer-1.9-lp151.6.3.1 xmlgraphics-batik-slideshow-1.9-lp151.6.3.1 xmlgraphics-batik-squiggle-1.9-lp151.6.3.1 xmlgraphics-batik-svgpp-1.9-lp151.6.3.1 xmlgraphics-batik-ttf2svg-1.9-lp151.6.3.1 References: https://www.suse.com/security/cve/CVE-2019-17566.html https://bugzilla.suse.com/1172961

1 0

openSUSE-SU-2020:0849-1: important: Security update for fwupd
by opensuse-security＠opensuse.org 22 Jun '20

22 Jun '20

openSUSE Security Update: Security update for fwupd ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0849-1 Rating: important References: #1172643 Cross-References: CVE-2020-10759 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for fwupd fixes the following issues: - CVE-2020-10759: Fixed a potential PGP signature bypass, which could have led to installation of unsigned firmware (bsc#1172643) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-849=1 Package List: - openSUSE Leap 15.1 (x86_64): dfu-tool-1.0.9-lp151.2.3.1 dfu-tool-debuginfo-1.0.9-lp151.2.3.1 fwupd-1.0.9-lp151.2.3.1 fwupd-debuginfo-1.0.9-lp151.2.3.1 fwupd-debugsource-1.0.9-lp151.2.3.1 fwupd-devel-1.0.9-lp151.2.3.1 libfwupd2-1.0.9-lp151.2.3.1 libfwupd2-debuginfo-1.0.9-lp151.2.3.1 typelib-1_0-Fwupd-2_0-1.0.9-lp151.2.3.1 - openSUSE Leap 15.1 (noarch): fwupd-lang-1.0.9-lp151.2.3.1 References: https://www.suse.com/security/cve/CVE-2020-10759.html https://bugzilla.suse.com/1172643

1 0

openSUSE-RU-2020:0844-1: moderate: Recommended update for python3-ec2imgutils
by maintenance＠opensuse.org 22 Jun '20

22 Jun '20

openSUSE Recommended Update: Recommended update for python3-ec2imgutils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0844-1 Rating: moderate References: #1171933 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python3-ec2imgutils contains the following fixes: - Update to version 8.0.0 (bsc#1171933) + Incompatible command line argument change for ec2publishimg. The --allow-copy option is no longer a boolean. It now supports the image and none keywords as well as a comma separated list of AWS account numbers. + Support having the snapshot copy permissions set differently than the image copy permissions. This supports published image aggregation into AWS MP. + ec2uploadimg tags the helper instance This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-844=1 Package List: - openSUSE Leap 15.1 (noarch): python3-ec2imgutils-8.0.0-lp151.2.12.1 References: https://bugzilla.suse.com/1171933

1 0

openSUSE-SU-2020:0846-1: moderate: Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork
by opensuse-security＠opensuse.org 22 Jun '20

22 Jun '20

openSUSE Security Update: Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0846-1 Rating: moderate References: #1172377 Cross-References: CVE-2020-13401 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for containerd, docker, docker-runc, golang-github-docker-libnetwork fixes the following issues: Docker was updated to 19.03.11-ce runc was updated to version 1.0.0-rc10 containerd was updated to version 1.2.13 - CVE-2020-13401: Fixed an issue where an attacker with CAP_NET_RAW capability, could have crafted IPv6 router advertisements, and spoof external IPv6 hosts, resulting in obtaining sensitive information or causing denial of service (bsc#1172377). This update was imported from the SUSE:SLE-15:Update update project. Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-846=1 Package List: - openSUSE Leap 15.1 (x86_64): containerd-1.2.13-lp151.2.12.1 containerd-ctr-1.2.13-lp151.2.12.1 docker-19.03.11_ce-lp151.2.18.1 docker-debuginfo-19.03.11_ce-lp151.2.18.1 docker-libnetwork-0.7.0.1+gitr2902_153d0769a118-lp151.2.12.1 docker-libnetwork-debuginfo-0.7.0.1+gitr2902_153d0769a118-lp151.2.12.1 docker-runc-1.0.0rc10+gitr3981_dc9208a3303f-lp151.3.21.1 docker-runc-debuginfo-1.0.0rc10+gitr3981_dc9208a3303f-lp151.3.21.1 docker-test-19.03.11_ce-lp151.2.18.1 docker-test-debuginfo-19.03.11_ce-lp151.2.18.1 golang-github-docker-libnetwork-0.7.0.1+gitr2902_153d0769a118-lp151.2.12.1 - openSUSE Leap 15.1 (noarch): docker-bash-completion-19.03.11_ce-lp151.2.18.1 docker-zsh-completion-19.03.11_ce-lp151.2.18.1 References: https://www.suse.com/security/cve/CVE-2020-13401.html https://bugzilla.suse.com/1172377

1 0

openSUSE-RU-2020:0840-1: moderate: Recommended update for python-mysql-connector-python
by maintenance＠opensuse.org 22 Jun '20

22 Jun '20

openSUSE Recommended Update: Recommended update for python-mysql-connector-python ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0840-1 Rating: moderate References: #1172784 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-mysql-connector-python fixes the following issues: - Add requirements on python-dnspython and python-protobuf (boo#1172784) This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-840=1 Package List: - openSUSE Backports SLE-15-SP1 (noarch): python2-mysql-connector-python-8.0.19-bp151.4.6.1 python3-mysql-connector-python-8.0.19-bp151.4.6.1 References: https://bugzilla.suse.com/1172784

1 0

openSUSE-RU-2020:0839-1: moderate: Recommended update for spec-cleaner
by maintenance＠opensuse.org 19 Jun '20

19 Jun '20

openSUSE Recommended Update: Recommended update for spec-cleaner ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0839-1 Rating: moderate References: #1099674 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for spec-cleaner fixes the following issues: Update to 1.2.0 boo#1099674: * Fix pypi rewritter to work with wheels * Do not choke on multiline string macros * Add %{dephell_gensetup} macro instead of the full call Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-839=1 Package List: - openSUSE Leap 15.1 (noarch): spec-cleaner-1.2.0-lp151.2.21.1 spec-cleaner-format_spec_file-1.2.0-lp151.2.21.1 References: https://bugzilla.suse.com/1099674

1 0