July 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2020:1116-1: moderate: Security update for claws-mail
by opensuse-security＠opensuse.org 31 Jul '20

31 Jul '20

openSUSE Security Update: Security update for claws-mail ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1116-1 Rating: moderate References: #1174457 Cross-References: CVE-2020-15917 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for claws-mail fixes the following issues: - CVE-2020-15917: Fixed an improper handling of suffix data after STARTTLS is mishandled (boo#1174457). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1116=1 Package List: - openSUSE Leap 15.1 (noarch): claws-mail-lang-3.17.3-lp151.2.3.1 - openSUSE Leap 15.1 (x86_64): claws-mail-3.17.3-lp151.2.3.1 claws-mail-debuginfo-3.17.3-lp151.2.3.1 claws-mail-debugsource-3.17.3-lp151.2.3.1 claws-mail-devel-3.17.3-lp151.2.3.1 References: https://www.suse.com/security/cve/CVE-2020-15917.html https://bugzilla.suse.com/1174457

1 0

openSUSE-RU-2020:1114-1: Recommended update for go1.12
by maintenance＠opensuse.org 30 Jul '20

30 Jul '20

openSUSE Recommended Update: Recommended update for go1.12 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1114-1 Rating: low References: #1169832 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for go1.12 fixes the following issues: - Fix for an issue when installing on Raspberry Pi causes illegal instruction due to unproper ARM arch set. (bsc#1169832) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1114=1 Package List: - openSUSE Leap 15.1 (x86_64): go1.12-1.12.17-lp151.2.37.1 go1.12-doc-1.12.17-lp151.2.37.1 go1.12-race-1.12.17-lp151.2.37.1 References: https://bugzilla.suse.com/1169832

1 0

openSUSE-RU-2020:1115-1: moderate: Recommended update for nodejs12
by maintenance＠opensuse.org 30 Jul '20

30 Jul '20

openSUSE Recommended Update: Recommended update for nodejs12 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1115-1 Rating: moderate References: #1173653 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for nodejs12 fixes the following issues: - Fixes reported memory leak. (bsc#1173653) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1115=1 Package List: - openSUSE Leap 15.2 (x86_64): nodejs12-12.18.2-lp152.3.3.1 nodejs12-debuginfo-12.18.2-lp152.3.3.1 nodejs12-debugsource-12.18.2-lp152.3.3.1 nodejs12-devel-12.18.2-lp152.3.3.1 npm12-12.18.2-lp152.3.3.1 - openSUSE Leap 15.2 (noarch): nodejs12-docs-12.18.2-lp152.3.3.1 References: https://bugzilla.suse.com/1173653

1 0

openSUSE-RU-2020:1113-1: moderate: Recommended update for go1.12
by maintenance＠opensuse.org 30 Jul '20

30 Jul '20

openSUSE Recommended Update: Recommended update for go1.12 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1113-1 Rating: moderate References: #1170826 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for go1.12 fixes the following issues: - Add 'binutils-gold' as a dependency for arm and aarch64 architectures. (bsc#1170826) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1113=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): go1.12-1.12.17-lp152.3.3.1 go1.12-doc-1.12.17-lp152.3.3.1 - openSUSE Leap 15.2 (x86_64): go1.12-race-1.12.17-lp152.3.3.1 References: https://bugzilla.suse.com/1170826

1 0

openSUSE-SU-2020:1112-1: moderate: Security update for knot
by opensuse-security＠opensuse.org 29 Jul '20

29 Jul '20

openSUSE Security Update: Security update for knot ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1112-1 Rating: moderate References: #1047841 Cross-References: CVE-2017-11104 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for knot fixes the following issues: - CVE-2017-11104: Fixed an improper implementation of TSIG protocol which could have allowed an attacker with a valid key name and algorithm to bypass TSIG authentication (boo#1047841). This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1112=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): knot-1.6.8-bp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2017-11104.html https://bugzilla.suse.com/1047841

1 0

openSUSE-SU-2020:1111-1: important: Security update for tomcat
by opensuse-security＠opensuse.org 29 Jul '20

29 Jul '20

openSUSE Security Update: Security update for tomcat ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1111-1 Rating: important References: #1174117 #1174121 Cross-References: CVE-2020-13934 CVE-2020-13935 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for tomcat fixes the following issues: - Fixed CVEs: * CVE-2020-13934 (bsc#1174121) * CVE-2020-13935 (bsc#1174117) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1111=1 Package List: - openSUSE Leap 15.2 (noarch): tomcat-9.0.36-lp152.2.4.1 tomcat-admin-webapps-9.0.36-lp152.2.4.1 tomcat-docs-webapp-9.0.36-lp152.2.4.1 tomcat-el-3_0-api-9.0.36-lp152.2.4.1 tomcat-embed-9.0.36-lp152.2.4.1 tomcat-javadoc-9.0.36-lp152.2.4.1 tomcat-jsp-2_3-api-9.0.36-lp152.2.4.1 tomcat-jsvc-9.0.36-lp152.2.4.1 tomcat-lib-9.0.36-lp152.2.4.1 tomcat-servlet-4_0-api-9.0.36-lp152.2.4.1 tomcat-webapps-9.0.36-lp152.2.4.1 References: https://www.suse.com/security/cve/CVE-2020-13934.html https://www.suse.com/security/cve/CVE-2020-13935.html https://bugzilla.suse.com/1174117 https://bugzilla.suse.com/1174121

1 0

openSUSE-SU-2020:1108-1: important: Security update for qemu
by opensuse-security＠opensuse.org 28 Jul '20

28 Jul '20

openSUSE Security Update: Security update for qemu ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1108-1 Rating: important References: #1172383 #1172384 #1172386 #1172495 #1172710 Cross-References: CVE-2020-10761 CVE-2020-13361 CVE-2020-13362 CVE-2020-13659 CVE-2020-13800 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for qemu to version 4.2.1 fixes the following issues: - CVE-2020-10761: Fixed a denial of service in Network Block Device (nbd) support infrastructure (bsc#1172710). - CVE-2020-13800: Fixed a denial of service possibility in ati-vga emulation (bsc#1172495). - CVE-2020-13659: Fixed a null pointer dereference possibility in MegaRAID SAS 8708EM2 emulation (bsc#1172386). - CVE-2020-13362: Fixed an OOB access possibility in MegaRAID SAS 8708EM2 emulation (bsc#1172383). - CVE-2020-13361: Fixed an OOB access possibility in ES1370 audio device emulation (bsc#1172384). This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1108=1 Package List: - openSUSE Leap 15.2 (noarch): qemu-ipxe-1.0.0+-lp152.9.3.1 qemu-microvm-4.2.1-lp152.9.3.1 qemu-seabios-1.12.1+-lp152.9.3.1 qemu-sgabios-8-lp152.9.3.1 qemu-vgabios-1.12.1+-lp152.9.3.1 - openSUSE Leap 15.2 (x86_64): qemu-4.2.1-lp152.9.3.1 qemu-arm-4.2.1-lp152.9.3.1 qemu-arm-debuginfo-4.2.1-lp152.9.3.1 qemu-audio-alsa-4.2.1-lp152.9.3.1 qemu-audio-alsa-debuginfo-4.2.1-lp152.9.3.1 qemu-audio-pa-4.2.1-lp152.9.3.1 qemu-audio-pa-debuginfo-4.2.1-lp152.9.3.1 qemu-audio-sdl-4.2.1-lp152.9.3.1 qemu-audio-sdl-debuginfo-4.2.1-lp152.9.3.1 qemu-block-curl-4.2.1-lp152.9.3.1 qemu-block-curl-debuginfo-4.2.1-lp152.9.3.1 qemu-block-dmg-4.2.1-lp152.9.3.1 qemu-block-dmg-debuginfo-4.2.1-lp152.9.3.1 qemu-block-gluster-4.2.1-lp152.9.3.1 qemu-block-gluster-debuginfo-4.2.1-lp152.9.3.1 qemu-block-iscsi-4.2.1-lp152.9.3.1 qemu-block-iscsi-debuginfo-4.2.1-lp152.9.3.1 qemu-block-nfs-4.2.1-lp152.9.3.1 qemu-block-nfs-debuginfo-4.2.1-lp152.9.3.1 qemu-block-rbd-4.2.1-lp152.9.3.1 qemu-block-rbd-debuginfo-4.2.1-lp152.9.3.1 qemu-block-ssh-4.2.1-lp152.9.3.1 qemu-block-ssh-debuginfo-4.2.1-lp152.9.3.1 qemu-debuginfo-4.2.1-lp152.9.3.1 qemu-debugsource-4.2.1-lp152.9.3.1 qemu-extra-4.2.1-lp152.9.3.1 qemu-extra-debuginfo-4.2.1-lp152.9.3.1 qemu-guest-agent-4.2.1-lp152.9.3.1 qemu-guest-agent-debuginfo-4.2.1-lp152.9.3.1 qemu-ksm-4.2.1-lp152.9.3.1 qemu-kvm-4.2.1-lp152.9.3.1 qemu-lang-4.2.1-lp152.9.3.1 qemu-linux-user-4.2.1-lp152.9.3.1 qemu-linux-user-debuginfo-4.2.1-lp152.9.3.1 qemu-linux-user-debugsource-4.2.1-lp152.9.3.1 qemu-ppc-4.2.1-lp152.9.3.1 qemu-ppc-debuginfo-4.2.1-lp152.9.3.1 qemu-s390-4.2.1-lp152.9.3.1 qemu-s390-debuginfo-4.2.1-lp152.9.3.1 qemu-testsuite-4.2.1-lp152.9.3.1 qemu-tools-4.2.1-lp152.9.3.1 qemu-tools-debuginfo-4.2.1-lp152.9.3.1 qemu-ui-curses-4.2.1-lp152.9.3.1 qemu-ui-curses-debuginfo-4.2.1-lp152.9.3.1 qemu-ui-gtk-4.2.1-lp152.9.3.1 qemu-ui-gtk-debuginfo-4.2.1-lp152.9.3.1 qemu-ui-sdl-4.2.1-lp152.9.3.1 qemu-ui-sdl-debuginfo-4.2.1-lp152.9.3.1 qemu-ui-spice-app-4.2.1-lp152.9.3.1 qemu-ui-spice-app-debuginfo-4.2.1-lp152.9.3.1 qemu-vhost-user-gpu-4.2.1-lp152.9.3.1 qemu-vhost-user-gpu-debuginfo-4.2.1-lp152.9.3.1 qemu-x86-4.2.1-lp152.9.3.1 qemu-x86-debuginfo-4.2.1-lp152.9.3.1 References: https://www.suse.com/security/cve/CVE-2020-10761.html https://www.suse.com/security/cve/CVE-2020-13361.html https://www.suse.com/security/cve/CVE-2020-13362.html https://www.suse.com/security/cve/CVE-2020-13659.html https://www.suse.com/security/cve/CVE-2020-13800.html https://bugzilla.suse.com/1172383 https://bugzilla.suse.com/1172384 https://bugzilla.suse.com/1172386 https://bugzilla.suse.com/1172495 https://bugzilla.suse.com/1172710

1 0

openSUSE-RU-2020:1109-1: moderate: Recommended update for libsolv, libzypp
by maintenance＠opensuse.org 28 Jul '20

28 Jul '20

openSUSE Recommended Update: Recommended update for libsolv, libzypp ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1109-1 Rating: moderate References: #1170801 #1171224 #1172135 #1173106 #1174011 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: This update for libsolv, libzypp fixes the following issues: libsolv was updated to version 0.7.14: - Enable zstd compression support for sle15 - Support blacklisted packages in solver_findproblemrule() (bsc#1172135) - Support rules with multiple negative literals in choice rule generation libzypp was updated to version 17.24.0: - Enable zchunk metadata download if libsolv supports it. - Older kernel-devel packages are not properly purged (bsc#1171224) - doc: enhance service plugin example. - Fix core dump with corrupted history file (bsc#1170801) - Better handling of the purge-kernels algorithm. (bsc#1173106) - Proactively send credentials if the URL specifes '?auth=basic' and a username. (bsc#1174011) - ZYPP_MEDIA_CURL_DEBUG: Strip credentials in header log. (bsc#1174011) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1109=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libsolv-debuginfo-0.7.14-lp151.2.19.1 libsolv-debugsource-0.7.14-lp151.2.19.1 libsolv-demo-0.7.14-lp151.2.19.1 libsolv-demo-debuginfo-0.7.14-lp151.2.19.1 libsolv-devel-0.7.14-lp151.2.19.1 libsolv-devel-debuginfo-0.7.14-lp151.2.19.1 libsolv-tools-0.7.14-lp151.2.19.1 libsolv-tools-debuginfo-0.7.14-lp151.2.19.1 perl-solv-0.7.14-lp151.2.19.1 perl-solv-debuginfo-0.7.14-lp151.2.19.1 python-solv-0.7.14-lp151.2.19.1 python-solv-debuginfo-0.7.14-lp151.2.19.1 python3-solv-0.7.14-lp151.2.19.1 python3-solv-debuginfo-0.7.14-lp151.2.19.1 ruby-solv-0.7.14-lp151.2.19.1 ruby-solv-debuginfo-0.7.14-lp151.2.19.1 - openSUSE Leap 15.1 (x86_64): libzypp-17.24.1-lp151.2.19.1 libzypp-debuginfo-17.24.1-lp151.2.19.1 libzypp-debugsource-17.24.1-lp151.2.19.1 libzypp-devel-17.24.1-lp151.2.19.1 libzypp-devel-doc-17.24.1-lp151.2.19.1 References: https://bugzilla.suse.com/1170801 https://bugzilla.suse.com/1171224 https://bugzilla.suse.com/1172135 https://bugzilla.suse.com/1173106 https://bugzilla.suse.com/1174011

1 0

openSUSE-SU-2020:1106-1: moderate: Security update for cacti, cacti-spine
by opensuse-security＠opensuse.org 28 Jul '20

28 Jul '20

openSUSE Security Update: Security update for cacti, cacti-spine ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1106-1 Rating: moderate References: #1115436 #1154087 #1173090 Cross-References: CVE-2020-11022 CVE-2020-11023 CVE-2020-13625 CVE-2020-14295 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for cacti, cacti-spine fixes the following issues: - cacti 1.2.13: * Query XSS vulnerabilities require vendor package update (CVE-2020-11022 / CVE-2020-11023) * Lack of escaping on some pages can lead to XSS exposure * Update PHPMailer to 6.1.6 (CVE-2020-13625) * SQL Injection vulnerability due to input validation failure when editing colors (CVE-2020-14295, boo#1173090) * Lack of escaping on template import can lead to XSS exposure - switch from cron to systemd timers (boo#1115436): + cacti-cron.timer + cacti-cron.service - avoid potential root escalation on systems with fs.protected_hardlinks=0 (boo#1154087): handle directory permissions in file section instead of using chown during post installation - rewrote apache configuration to get rid of .htaccess files and explicitely disable directory permissions per default (only allow a limited, well-known set of directories) This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1106=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): cacti-spine-1.2.13-bp151.4.12.1 cacti-spine-debuginfo-1.2.13-bp151.4.12.1 cacti-spine-debugsource-1.2.13-bp151.4.12.1 - openSUSE Backports SLE-15-SP1 (noarch): cacti-1.2.13-bp151.4.12.1 References: https://www.suse.com/security/cve/CVE-2020-11022.html https://www.suse.com/security/cve/CVE-2020-11023.html https://www.suse.com/security/cve/CVE-2020-13625.html https://www.suse.com/security/cve/CVE-2020-14295.html https://bugzilla.suse.com/1115436 https://bugzilla.suse.com/1154087 https://bugzilla.suse.com/1173090

1 0

openSUSE-RU-2020:1107-1: moderate: Recommended update for putty
by maintenance＠opensuse.org 28 Jul '20

28 Jul '20

openSUSE Recommended Update: Recommended update for putty ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1107-1 Rating: moderate References: #1173442 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for putty fixes the following issues: putty was updated to release 0.74: * security fix: if an SSH server accepted an offer of a public key and then rejected the signature, PuTTY could access freed memory, if the key had come from an SSH agent. (boo#1173442) * Added a new configuration option to mitigate a minor information leak in SSH host key policy. This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1107=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): putty-0.74-bp151.4.9.1 References: https://bugzilla.suse.com/1173442

1 0

openSUSE-SU-2020:1102-1: important: Security update for tomcat
by opensuse-security＠opensuse.org 27 Jul '20

27 Jul '20

openSUSE Security Update: Security update for tomcat ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1102-1 Rating: important References: #1174117 #1174121 Cross-References: CVE-2020-13934 CVE-2020-13935 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for tomcat fixes the following issues: - Fixed CVEs: * CVE-2020-13934 (bsc#1174121) * CVE-2020-13935 (bsc#1174117) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1102=1 Package List: - openSUSE Leap 15.1 (noarch): tomcat-9.0.36-lp151.3.27.1 tomcat-admin-webapps-9.0.36-lp151.3.27.1 tomcat-docs-webapp-9.0.36-lp151.3.27.1 tomcat-el-3_0-api-9.0.36-lp151.3.27.1 tomcat-embed-9.0.36-lp151.3.27.1 tomcat-javadoc-9.0.36-lp151.3.27.1 tomcat-jsp-2_3-api-9.0.36-lp151.3.27.1 tomcat-jsvc-9.0.36-lp151.3.27.1 tomcat-lib-9.0.36-lp151.3.27.1 tomcat-servlet-4_0-api-9.0.36-lp151.3.27.1 tomcat-webapps-9.0.36-lp151.3.27.1 References: https://www.suse.com/security/cve/CVE-2020-13934.html https://www.suse.com/security/cve/CVE-2020-13935.html https://bugzilla.suse.com/1174117 https://bugzilla.suse.com/1174121

1 0

openSUSE-RU-2020:1104-1: moderate: Recommended update for yast2-registration
by maintenance＠opensuse.org 27 Jul '20

27 Jul '20

openSUSE Recommended Update: Recommended update for yast2-registration ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1104-1 Rating: moderate References: #1162755 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-registration fixes the following issues: - Fix for an issue when during SCC registration indicating a wrong version. (bsc#1162755) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1104=1 Package List: - openSUSE Leap 15.2 (noarch): yast2-registration-4.2.42-lp152.2.3.1 References: https://bugzilla.suse.com/1162755

1 0

openSUSE-RU-2020:1103-1: moderate: Recommended update for gdm
by maintenance＠opensuse.org 27 Jul '20

27 Jul '20

openSUSE Recommended Update: Recommended update for gdm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1103-1 Rating: moderate References: #1171290 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gdm fixes the following issues: -Fix for an issue when user session reuses tty7 same as greeter session, gdm doesn't bring up the greeter session after switching from other tty to tty7. (bsc#1171290) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1103=1 Package List: - openSUSE Leap 15.2 (x86_64): gdm-3.34.1-lp152.6.3.1 gdm-debuginfo-3.34.1-lp152.6.3.1 gdm-debugsource-3.34.1-lp152.6.3.1 gdm-devel-3.34.1-lp152.6.3.1 libgdm1-3.34.1-lp152.6.3.1 libgdm1-debuginfo-3.34.1-lp152.6.3.1 typelib-1_0-Gdm-1_0-3.34.1-lp152.6.3.1 - openSUSE Leap 15.2 (noarch): gdm-branding-upstream-3.34.1-lp152.6.3.1 gdm-lang-3.34.1-lp152.6.3.1 gdm-systemd-3.34.1-lp152.6.3.1 gdmflexiserver-3.34.1-lp152.6.3.1 References: https://bugzilla.suse.com/1171290

1 0

openSUSE-SU-2020:1105-1: moderate: Security update for SUSE Manager Client Tools
by opensuse-security＠opensuse.org 27 Jul '20

27 Jul '20

openSUSE Security Update: Security update for SUSE Manager Client Tools ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1105-1 Rating: moderate References: #1113160 #1138822 #1142038 #1148177 #1153090 #1153277 #1154940 #1154968 #1155372 #1163871 #1165921 #1168310 #1170231 #1170557 #1170824 #1171687 #1172462 Cross-References: CVE-2019-10215 CVE-2019-15043 CVE-2020-12245 CVE-2020-13379 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves four vulnerabilities and has 13 fixes is now available. Description: This update fixes the following issues: dracut-saltboot: - Print a list of available disk devices (bsc#1170824) - Install wipefs to initrd - Force install crypt modules golang-github-prometheus-prometheus: - Update change log and spec file + Modified spec file: default to golang 1.14 to avoid "have choice" build issues in OBS. + Rebase and update patches for version 2.18.0 - Update to 2.18.0 + Features * Tracing: Added experimental Jaeger support #7148 + Changes * Federation: Only use local TSDB for federation (ignore remote read). #7096 * Rules: `rule_evaluations_total` and `rule_evaluation_failures_total` have a `rule_group` label now. #7094 + Enhancements * TSDB: Significantly reduce WAL size kept around after a block cut. #7098 * Discovery: Add `architecture` meta label for EC2. #7000 + Bug fixes * UI: Fixed wrong MinTime reported by /status. #7182 * React UI: Fixed multiselect legend on OSX. #6880 * Remote Write: Fixed blocked resharding edge case. #7122 * Remote Write: Fixed remote write not updating on relabel configs change. #7073 - Changes from 2.17.2 + Bug fixes * Federation: Register federation metrics #7081 * PromQL: Fix panic in parser error handling #7132 * Rules: Fix reloads hanging when deleting a rule group that is being evaluated #7138 * TSDB: Fix a memory leak when prometheus starts with an empty TSDB WAL #7135 * TSDB: Make isolation more robust to panics in web handlers #7129 #7136 - Changes from 2.17.1 + Bug fixes * TSDB: Fix query performance regression that increased memory and CPU usage #7051 - Changes from 2.17.0 + Features * TSDB: Support isolation #6841 * This release implements isolation in TSDB. API queries and recording rules are guaranteed to only see full scrapes and full recording rules. This comes with a certain overhead in resource usage. Depending on the situation, there might be some increase in memory usage, CPU usage, or query latency. + Enhancements * PromQL: Allow more keywords as metric names #6933 * React UI: Add normalization of localhost URLs in targets page #6794 * Remote read: Read from remote storage concurrently #6770 * Rules: Mark deleted rule series as stale after a reload #6745 * Scrape: Log scrape append failures as debug rather than warn #6852 * TSDB: Improve query performance for queries that partially hit the head #6676 * Consul SD: Expose service health as meta label #5313 * EC2 SD: Expose EC2 instance lifecycle as meta label #6914 * Kubernetes SD: Expose service type as meta label for K8s service role #6684 * Kubernetes SD: Expose label_selector and field_selector #6807 * Openstack SD: Expose hypervisor id as meta label #6962 + Bug fixes * PromQL: Do not escape HTML-like chars in query log #6834 #6795 * React UI: Fix data table matrix values #6896 * React UI: Fix new targets page not loading when using non-ASCII characters #6892 * Remote read: Fix duplication of metrics read from remote storage with external labels #6967 #7018 * Remote write: Register WAL watcher and live reader metrics for all remotes, not just the first one #6998 * Scrape: Prevent removal of metric names upon relabeling #6891 * Scrape: Fix 'superfluous response.WriteHeader call' errors when scrape fails under some circonstances #6986 * Scrape: Fix crash when reloads are separated by two scrape intervals #7011 - Changes from 2.16.0 + Features * React UI: Support local timezone on /graph #6692 * PromQL: add absent_over_time query function #6490 * Adding optional logging of queries to their own file #6520 + Enhancements * React UI: Add support for rules page and "Xs ago" duration displays #6503 * React UI: alerts page, replace filtering togglers tabs with checkboxes #6543 * TSDB: Export metric for WAL write errors #6647 * TSDB: Improve query performance for queries that only touch the most recent 2h of data. #6651 * PromQL: Refactoring in parser errors to improve error messages #6634 * PromQL: Support trailing commas in grouping opts #6480 * Scrape: Reduce memory usage on reloads by reusing scrape cache #6670 * Scrape: Add metrics to track bytes and entries in the metadata cache #6675 * promtool: Add support for line-column numbers for invalid rules output #6533 * Avoid restarting rule groups when it is unnecessary #6450 + Bug fixes * React UI: Send cookies on fetch() on older browsers #6553 * React UI: adopt grafana flot fix for stacked graphs #6603 * React UI: broken graph page browser history so that back button works as expected #6659 * TSDB: ensure compactionsSkipped metric is registered, and log proper error if one is returned from head.Init #6616 * TSDB: return an error on ingesting series with duplicate labels #6664 * PromQL: Fix unary operator precedence #6579 * PromQL: Respect query.timeout even when we reach query.max-concurrency #6712 * PromQL: Fix string and parentheses handling in engine, which affected React UI #6612 * PromQL: Remove output labels returned by absent() if they are produced by multiple identical label matchers #6493 * Scrape: Validate that OpenMetrics input ends with `# EOF` #6505 * Remote read: return the correct error if configs can't be marshal'd to JSON #6622 * Remote write: Make remote client `Store` use passed context, which can affect shutdown timing #6673 * Remote write: Improve sharding calculation in cases where we would always be consistently behind by tracking pendingSamples #6511 * Ensure prometheus_rule_group metrics are deleted when a rule group is removed #6693 - Changes from 2.15.2 + Bug fixes * TSDB: Fixed support for TSDB blocks built with Prometheus before 2.1.0. #6564 * TSDB: Fixed block compaction issues on Windows. #6547 - Changes from 2.15.1 + Bug fixes * TSDB: Fixed race on concurrent queries against same data. #6512 - Changes from 2.15.0 + Features * API: Added new endpoint for exposing per metric metadata `/metadata`. #6420 #6442 + Changes * Discovery: Removed `prometheus_sd_kubernetes_cache_*` metrics. Additionally `prometheus_sd_kubernetes_workqueue_latency_seconds` and `prometheus_sd_kubernetes_workqueue_work_duration_seconds` metrics now show correct values in seconds. #6393 * Remote write: Changed `query` label on `prometheus_remote_storage_*` metrics to `remote_name` and `url`. #6043 + Enhancements * TSDB: Significantly reduced memory footprint of loaded TSDB blocks. #6418 #6461 * TSDB: Significantly optimized what we buffer during compaction which should result in lower memory footprint during compaction. #6422 #6452 #6468 #6475 * TSDB: Improve replay latency. #6230 * TSDB: WAL size is now used for size based retention calculation. #5886 * Remote read: Added query grouping and range hints to the remote read request #6401 * Remote write: Added `prometheus_remote_storage_sent_bytes_total` counter per queue. #6344 * promql: Improved PromQL parser performance. #6356 * React UI: Implemented missing pages like `/targets` #6276, TSDB status page #6281 #6267 and many other fixes and performance improvements. * promql: Prometheus now accepts spaces between time range and square bracket. e.g `[ 5m]` #6065 + Bug fixes * Config: Fixed alertmanager configuration to not miss targets when configurations are similar. #6455 * Remote write: Value of `prometheus_remote_storage_shards_desired` gauge shows raw value of desired shards and it's updated correctly. #6378 * Rules: Prometheus now fails the evaluation of rules and alerts where metric results collide with labels specified in `labels` field. #6469 * API: Targets Metadata API `/targets/metadata` now accepts empty `match_targets` parameter as in the spec. #6303 - Changes from 2.14.0 + Features * API: `/api/v1/status/runtimeinfo` and `/api/v1/status/buildinfo` endpoints added for use by the React UI. #6243 * React UI: implement the new experimental React based UI. #5694 and many more * Can be found by under `/new`. * Not all pages are implemented yet. * Status: Cardinality statistics added to the Runtime & Build Information page. #6125 + Enhancements * Remote write: fix delays in remote write after a compaction. #6021 * UI: Alerts can be filtered by state. #5758 + Bug fixes * Ensure warnings from the API are escaped. #6279 * API: lifecycle endpoints return 403 when not enabled. #6057 * Build: Fix Solaris build. #6149 * Promtool: Remove false duplicate rule warnings when checking rule files with alerts. #6270 * Remote write: restore use of deduplicating logger in remote write. #6113 * Remote write: do not reshard when unable to send samples. #6111 * Service discovery: errors are no longer logged on context cancellation. #6116, #6133 * UI: handle null response from API properly. #6071 - Changes from 2.13.1 + Bug fixes * Fix panic in ARM builds of Prometheus. #6110 * promql: fix potential panic in the query logger. #6094 * Multiple errors of http: superfluous response.WriteHeader call in the logs. #6145 - Changes from 2.13.0 + Enhancements * Metrics: renamed prometheus_sd_configs_failed_total to prometheus_sd_failed_configs and changed to Gauge #5254 * Include the tsdb tool in builds. #6089 * Service discovery: add new node address types for kubernetes. #5902 * UI: show warnings if query have returned some warnings. #5964 * Remote write: reduce memory usage of the series cache. #5849 * Remote read: use remote read streaming to reduce memory usage. #5703 * Metrics: added metrics for remote write max/min/desired shards to queue manager. #5787 * Promtool: show the warnings during label query. #5924 * Promtool: improve error messages when parsing bad rules. #5965 * Promtool: more promlint rules. #5515 + Bug fixes * UI: Fix a Stored DOM XSS vulnerability with query history [CVE-2019-10215](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-102 15). #6098 * Promtool: fix recording inconsistency due to duplicate labels. #6026 * UI: fixes service-discovery view when accessed from unhealthy targets. #5915 * Metrics format: OpenMetrics parser crashes on short input. #5939 * UI: avoid truncated Y-axis values. #6014 - Changes from 2.12.0 + Features * Track currently active PromQL queries in a log file. #5794 * Enable and provide binaries for `mips64` / `mips64le` architectures. #5792 + Enhancements * Improve responsiveness of targets web UI and API endpoint. #5740 * Improve remote write desired shards calculation. #5763 * Flush TSDB pages more precisely. tsdb#660 * Add `prometheus_tsdb_retention_limit_bytes` metric. tsdb#667 * Add logging during TSDB WAL replay on startup. tsdb#662 * Improve TSDB memory usage. tsdb#653, tsdb#643, tsdb#654, tsdb#642, tsdb#627 + Bug fixes * Check for duplicate label names in remote read. #5829 * Mark deleted rules' series as stale on next evaluation. #5759 * Fix JavaScript error when showing warning about out-of-sync server time. #5833 * Fix `promtool test rules` panic when providing empty `exp_labels`. #5774 * Only check last directory when discovering checkpoint number. #5756 * Fix error propagation in WAL watcher helper functions. #5741 * Correctly handle empty labels from alert templates. #5845 - Update Uyuni/SUSE Manager service discovery patch + Adapt service discovery to the new Uyuni API endpoints + Modified spec file: force golang 1.12 to fix build issues in SLE15SP2 - Update to Prometheus 2.11.2 grafana: - Update to version 7.0.3 * Features / Enhancements - Stats: include all fields. #24829, @ryantxu - Variables: change VariableEditorList row action Icon to IconButton. #25217, @hshoff * Bug fixes - Cloudwatch: Fix dimensions of DDoSProtection. #25317, @papagian - Configuration: Fix env var override of sections containing hyphen. #25178, @marefr - Dashboard: Get panels in collapsed rows. #25079, @peterholmberg - Do not show alerts tab when alerting is disabled. #25285, @dprokop - Jaeger: fixes cascader option label duration value. #25129, @Estrax - Transformations: Fixed Transform tab crash & no update after adding first transform. #25152, @torkelo - Update to version 7.0.2 * Bug fixes - Security: Urgent security patch release to fix CVE-2020-13379 - Update to version 7.0.1 * Features / Enhancements - Datasource/CloudWatch: Makes CloudWatch Logs query history more readable. #24795, @kaydelaney - Download CSV: Add date and time formatting. #24992, @ryantxu - Table: Make last cell value visible when right aligned. #24921, @peterholmberg - TablePanel: Adding sort order persistance. #24705, @torkelo - Transformations: Display correct field name when using reduce transformation. #25068, @peterholmberg - Transformations: Allow custom number input for binary operations. #24752, @ryantxu * Bug fixes - Dashboard/Links: Fixes dashboard links by tags not working. #24773, @KamalGalrani - Dashboard/Links: Fixes open in new window for dashboard link. #24772, @KamalGalrani - Dashboard/Links: Variables are resolved and limits to 100. #25076, @hugohaggmark - DataLinks: Bring back variables interpolation in title. #24970, @dprokop - Datasource/CloudWatch: Field suggestions no longer limited to prefix-only. #24855, @kaydelaney - Explore/Table: Keep existing field types if possible. #24944, @kaydelaney - Explore: Fix wrap lines toggle for results of queries with filter expression. #24915, @ivanahuckova - Explore: fix undo in query editor. #24797, @zoltanbedi - Explore: fix word break in type head info. #25014, @zoltanbedi - Graph: Legend decimals now work as expected. #24931, @torkelo - LoginPage: Fix hover color for service buttons. #25009, @tskarhed - LogsPanel: Fix scrollbar. #24850, @ivanahuckova - MoveDashboard: Fix for moving dashboard caused all variables to be lost. #25005, @torkelo - Organize transformer: Use display name in field order comparer. #24984, @dprokop - Panel: shows correct panel menu items in view mode. #24912, @hugohaggmark - PanelEditor Fix missing labels and description if there is only single option in category. #24905, @dprokop - PanelEditor: Overrides name matcher still show all original field names even after Field default display name is specified. #24933, @torkelo - PanelInspector: Makes sure Data display options are visible. #24902, @hugohaggmark - PanelInspector: Hides unsupported data display options for Panel type. #24918, @hugohaggmark - PanelMenu: Make menu disappear on button press. #25015, @tskarhed - Postgres: Fix add button. #25087, @phemmer - Prometheus: Fix recording rules expansion. #24977, @ivanahuckova - Stackdriver: Fix creating Service Level Objectives (SLO) datasource query variable. #25023, @papagian - Update to version 7.0.0 * Breaking changes - Removed PhantomJS: PhantomJS was deprecated in Grafana v6.4 and starting from Grafana v7.0.0, all PhantomJS support has been removed. This means that Grafana no longer ships with a built-in image renderer, and we advise you to install the Grafana Image Renderer plugin. - Dashboard: A global minimum dashboard refresh interval is now enforced and defaults to 5 seconds. - Interval calculation: There is now a new option Max data points that controls the auto interval $__interval calculation. Interval was previously calculated by dividing the panel width by the time range. With the new max data points option it is now easy to set $__interval to a dynamic value that is time range agnostic. For example if you set Max data points to 10 Grafana will dynamically set $__interval by dividing the current time range by 10. - Datasource/Loki: Support for deprecated Loki endpoints has been removed. - Backend plugins: Grafana now requires backend plugins to be signed, otherwise Grafana will not load/start them. This is an additional security measure to make sure backend plugin binaries and files haven't been tampered with. Refer to Upgrade Grafana for more information. - @grafana/ui: Forms migration notice, see @grafana/ui changelog - @grafana/ui: Select API change for creating custom values, see @grafana/ui changelog + Deprecation warnings - Scripted dashboards is now deprecated. The feature is not removed but will be in a future release. We hope to address the underlying requirement of dynamic dashboards in a different way. #24059 - The unofficial first version of backend plugins together with usage of grafana/grafana-plugin-model is now deprecated and support for that will be removed in a future release. Please refer to backend plugins documentation for information about the new officially supported backend plugins. * Features / Enhancements - Backend plugins: Log deprecation warning when using the unofficial first version of backend plugins. #24675, @marefr - Editor: New line on Enter, run query on Shift+Enter. #24654, @davkal - Loki: Allow multiple derived fields with the same name. #24437, @aocenas - Orgs: Add future deprecation notice. #24502, @torkelo * Bug Fixes - @grafana/toolkit: Use process.cwd() instead of PWD to get directory. #24677, @zoltanbedi - Admin: Makes long settings values line break in settings page. #24559, @hugohaggmark - Dashboard: Allow editing provisioned dashboard JSON and add confirmation when JSON is copied to dashboard. #24680, @dprokop - Dashboard: Fix for strange "dashboard not found" errors when opening links in dashboard settings. #24416, @torkelo - Dashboard: Fix so default data source is selected when data source can't be found in panel editor. #24526, @mckn - Dashboard: Fixed issue changing a panel from transparent back to normal in panel editor. #24483, @torkelo - Dashboard: Make header names reflect the field name when exporting to CSV file from the the panel inspector. #24624, @peterholmberg - Dashboard: Make sure side pane is displayed with tabs by default in panel editor. #24636, @dprokop - Data source: Fix query/annotation help content formatting. #24687, @AgnesToulet - Data source: Fixes async mount errors. #24579, @Estrax - Data source: Fixes saving a data source without failure when URL doesn't specify a protocol. #24497, @aknuds1 - Explore/Prometheus: Show results of instant queries only in table. #24508, @ivanahuckova - Explore: Fix rendering of react query editors. #24593, @ivanahuckova - Explore: Fixes loading more logs in logs context view. #24135, @Estrax - Graphite: Fix schema and dedupe strategy in rollup indicators for Metrictank queries. #24685, @torkelo - Graphite: Makes query annotations work again. #24556, @hugohaggmark - Logs: Clicking "Load more" from context overlay doesn't expand log row. #24299, @kaydelaney - Logs: Fix total bytes process calculation. #24691, @davkal - Org/user/team preferences: Fixes so UI Theme can be set back to Default. #24628, @AgnesToulet - Plugins: Fix manifest validation. #24573, @aknuds1 - Provisioning: Use proxy as default access mode in provisioning. #24669, @bergquist - Search: Fix select item when pressing enter and Grafana is served using a sub path. #24634, @tskarhed - Search: Save folder expanded state. #24496, @Clarity-89 - Security: Tag value sanitization fix in OpenTSDB data source. #24539, @rotemreiss - Table: Do not include angular options in options when switching from angular panel. #24684, @torkelo - Table: Fixed persisting column resize for time series fields. #24505, @torkelo - Table: Fixes Cannot read property subRows of null. #24578, @hugohaggmark - Time picker: Fixed so you can enter a relative range in the time picker without being converted to absolute range. #24534, @mckn - Transformations: Make transform dropdowns not cropped. #24615, @dprokop - Transformations: Sort order should be preserved as entered by user when using the reduce transformation. #24494, @hugohaggmark - Units: Adds scale symbol for currencies with suffixed symbol. #24678, @hugohaggmark - Variables: Fixes filtering options with more than 1000 entries. #24614, @hugohaggmark - Variables: Fixes so Textbox variables read value from url. #24623, @hugohaggmark - Zipkin: Fix error when span contains remoteEndpoint. #24524, @aocenas - SAML: Switch from email to login for user login attribute mapping (Enterprise) - Update Makefile and spec file * Remove phantomJS patch from Makefile * Fix multiline strings in Makefile * Exclude s390 from SLE12 builds, golang 1.14 is not built for s390 - Add instructions for patching the Grafana javascript frontend. - BuildRequires golang(API) instead of go metapackage version range * BuildRequires: golang(API) >= 1.14 from BuildRequires: ( go >= 1.14 with go < 1.15 ) - Update to version 6.7.3 - This version fixes bsc#1170557 and its corresponding CVE-2020-12245 - Admin: Fix Synced via LDAP message for non-LDAP external users. #23477, @alexanderzobnin - Alerting: Fixes notifications for alerts with empty message in Google Hangouts notifier. #23559, @hugohaggmark - AuthProxy: Fixes bug where long username could not be cached.. #22926, @jcmcken - Dashboard: Fix saving dashboard when editing raw dashboard JSON model. #23314, @peterholmberg - Dashboard: Try to parse 8 and 15 digit numbers as timestamps if parsing of time range as date fails. #21694, @jessetan - DashboardListPanel: Fixed problem with empty panel after going into edit mode (General folder filter being automatically added) . #23426, @torkelo - Data source: Handle datasource withCredentials option properly. #23380, @hvtuananh - Security: Fix annotation popup XSS vulnerability. #23813, @torkelo - Server: Exit Grafana with status code 0 if no error. #23312, @aknuds1 - TablePanel: Fix XSS issue in header column rename (backport). #23814, @torkelo - Variables: Fixes error when setting adhoc variable values. #23580, @hugohaggmark - Update to version 6.7.2: (see installed changelog for the full list of changes) - BackendSrv: Adds config to response to fix issue for external plugins that used this property . #23032, @torkelo - Dashboard: Fixed issue with saving new dashboard after changing title . #23104, @dprokop - DataLinks: make sure we use the correct datapoint when dataset contains null value.. #22981, @mckn - Plugins: Fixed issue for plugins that imported dateMath util . #23069, @mckn - Security: Fix for dashboard snapshot original dashboard link could contain XSS vulnerability in url. #23254, @torkelo - Variables: Fixes issue with too many queries being issued for nested template variables after value change. #23220, @torkelo - Plugins: Expose promiseToDigest. #23249, @torkelo - Reporting (Enterprise): Fixes issue updating a report created by someone else - Update to 6.7.1: (see installed changelog for the full list of changes) Bug Fixes - Azure: Fixed dropdowns not showing current value. #22914, @torkelo - BackendSrv: only add content-type on POST, PUT requests. #22910, @hugohaggmark - Panels: Fixed size issue with panel internal size when exiting panel edit mode. #22912, @torkelo - Reporting: fixes migrations compatibility with mysql (Enterprise) - Reporting: Reduce default concurrency limit to 4 (Enterprise) - Update to 6.7.0: (see installed changelog for the full list of changes) Bug Fixes - AngularPanels: Fixed inner height calculation for angular panels . #22796, @torkelo - BackendSrv: makes sure provided headers are correctly recognized and set. #22778, @hugohaggmark - Forms: Fix input suffix position (caret-down in Select) . #22780, @torkelo - Graphite: Fixed issue with query editor and next select metric now showing after selecting metric node . #22856, @torkelo - Rich History: UX adjustments and fixes. #22729, @ivanahuckova - Update to 6.7.0-beta1: Breaking changes - Slack: Removed Mention setting and instead introduce Mention Users, Mention Groups, and Mention Channel. The first two settings require user and group IDs, respectively. This change was necessary because the way of mentioning via the Slack API changed and mentions in Slack notifications no longer worked. - Alerting: Reverts the behavior of diff and percent_diff to not always be absolute. Something we introduced by mistake in 6.1.0. Alerting now support diff(), diff_abs(), percent_diff() and percent_diff_abs(). #21338 - Notice about changes in backendSrv for plugin authors In our mission to migrate away from AngularJS to React we have removed all AngularJS dependencies in the core data retrieval service backendSrv. Removing the AngularJS dependencies in backendSrv has the unfortunate side effect of AngularJS digest no longer being triggered for any request made with backendSrv. Because of this, external plugins using backendSrv directly may suffer from strange behaviour in the UI. To remedy this issue, as a plugin author you need to trigger the digest after a direct call to backendSrv. Bug Fixes API: Fix redirect issues. #22285, @papagian Alerting: Don't include image_url field with Slack message if empty. #22372, @aknuds1 Alerting: Fixed bad background color for default notifications in alert tab . #22660, @krvajal Annotations: In table panel when setting transform to annotation, they will now show up right away without a manual refresh. #22323, @krvajal Azure Monitor: Fix app insights source to allow for new __timeFrom and __timeTo. #21879, @ChadNedzlek BackendSrv: Fixes POST body for form data. #21714, @hugohaggmark CloudWatch: Credentials cache invalidation fix. #22473, @sunker CloudWatch: Expand alias variables when query yields no result. #22695, @sunker Dashboard: Fix bug with NaN in alerting. #22053, @a-melnyk Explore: Fix display of multiline logs in log panel and explore. #22057, @thomasdraebing Heatmap: Legend color range is incorrect when using custom min/max. #21748, @sv5d Security: Fixed XSS issue in dashboard history diff . #22680, @torkelo StatPanel: Fixes base color is being used for null values . #22646, @torkelo - Update to version 6.6.2: (see installed changelog for the full list of changes) - Update to version 6.6.1: (see installed changelog for the full list of changes) - Update to version 6.6.0: (see installed changelog for the full list of changes) - Update to version 6.5.3: (see installed changelog for the full list of changes) - Update to version 6.5.2: (see installed changelog for the full list of changes) - Update to version 6.5.1: (see installed changelog for the full list of changes) - Update to version 6.5.0 (see installed changelog for the full list of changes) - Update to version 6.4.5: * Create version 6.4.5 * CloudWatch: Fix high CPU load (#20579) - Add obs-service-go_modules to download required modules into vendor.tar.gz - Adjusted spec file to use vendor.tar.gz - Adjusted Makefile to work with new filenames - BuildRequire go1.14 - Update to version 6.4.4: * DataLinks: Fix blur issues. #19883, @aocenas * Docker: Makes it possible to parse timezones in the docker image. #20081, @xlson * LDAP: All LDAP servers should be tried even if one of them returns a connection error. #20077, @jongyllen * LDAP: No longer shows incorrectly matching groups based on role in debug page. #20018, @xlson * Singlestat: Fix no data / null value mapping . #19951, @ryantxu - Revert the spec file and make script - Remove PhantomJS dependency - Update to 6.4.3 * Bug Fixes - Alerting: All notification channels should send even if one fails to send. #19807, @jan25 - AzureMonitor: Fix slate interference with dropdowns. #19799, @aocenas - ContextMenu: make ContextMenu positioning aware of the viewport width. #19699, @krvajal - DataLinks: Fix context menu not showing in singlestat-ish visualisations. #19809, @dprokop - DataLinks: Fix url field not releasing focus. #19804, @aocenas - Datasource: Fixes clicking outside of some query editors required 2 clicks. #19822, @aocenas - Panels: Fixes default tab for visualizations without Queries Tab. #19803, @hugohaggmark - Singlestat: Fixed issue with mapping null to text. #19689, @torkelo - @grafana/toolkit: Don't fail plugin creation when git user.name config is not set. #19821, @dprokop - @grafana/toolkit: TSLint line number off by 1. #19782, @fredwangwang - Update to 6.4.2 * Bug Fixes - CloudWatch: Changes incorrect dimension wmlid to wlmid . #19679, @ATTron - Grafana Image Renderer: Fixes plugin page. #19664, @hugohaggmark - Graph: Fixes auto decimals logic for y axis ticks that results in too many decimals for high values. #19618, @torkelo - Graph: Switching to series mode should re-render graph. #19623, @torkelo - Loki: Fix autocomplete on label values. #19579, @aocenas - Loki: Removes live option for logs panel. #19533, @davkal - Profile: Fix issue with user profile not showing more than sessions sessions in some cases. #19578, @huynhsamha - Prometheus: Fixes so results in Panel always are sorted by query order. #19597, @hugohaggmark - ShareQuery: Fixed issue when using -- Dashboard -- datasource (to share query result) when dashboard had rows. #19610, @torkelo - Show SAML login button if SAML is enabled. #19591, @papagian - SingleStat: Fixes postfix/prefix usage. #19687, @hugohaggmark - Table: Proper handling of json data with dataframes. #19596, @marefr - Units: Fixed wrong id for Terabits/sec. #19611, @andreaslangnevyjel - Changes from 6.4.1 * Bug Fixes - Provisioning: Fixed issue where empty nested keys in YAML provisioning caused a server crash, #19547 - ImageRendering: Fixed issue with image rendering in enterprise build (Enterprise) - Reporting: Fixed issue with reporting service when STMP was disabled (Enterprise). - Changes from 6.4.0 * Features / Enhancements - Build: Upgrade go to 1.12.10. #19499, @marefr - DataLinks: Suggestions menu improvements. #19396, @dprokop - Explore: Take root_url setting into account when redirecting from dashboard to explore. #19447, @ivanahuckova - Explore: Update broken link to logql docs. #19510, @ivanahuckova - Logs: Adds Logs Panel as a visualization. #19504, @davkal * Bug Fixes - CLI: Fix version selection for plugin install. #19498, @aocenas - Graph: Fixes minor issue with series override color picker and custom color . #19516, @torkelo - Changes from 6.4.0 Beta 2 * Features / Enhancements - Azure Monitor: Remove support for cross resource queries (#19115)". #19346, @sunker - Docker: Upgrade packages to resolve reported vulnerabilities. #19188, @marefr - Graphite: Time range expansion reduced from 1 minute to 1 second. #19246, @torkelo - grafana/toolkit: Add plugin creation task. #19207, @dprokop * Bug Fixes - Alerting: Prevents creating alerts from unsupported queries. #19250, @hugohaggmark - Alerting: Truncate PagerDuty summary when greater than 1024 characters. #18730, @nvllsvm - Cloudwatch: Fix autocomplete for Gamelift dimensions. #19146, @kevinpz - Dashboard: Fix export for sharing when panels use default data source. #19315, @torkelo - Database: Rewrite system statistics query to perform better. #19178, @papagian - Gauge/BarGauge: Fix issue with [object Object] in titles . #19217, @ryantxu - MSSQL: Revert usage of new connectionstring format introduced by #18384. #19203, @marefr - Multi-LDAP: Do not fail-fast on invalid credentials. #19261, @gotjosh - MySQL, Postgres, MSSQL: Fix validating query with template variables in alert . #19237, @marefr - MySQL, Postgres: Update raw sql when query builder updates. #19209, @marefr - MySQL: Limit datasource error details returned from the backend. #19373, @marefr - Changes from 6.4.0 Beta 1 * Features / Enhancements - API: Readonly datasources should not be created via the API. #19006, @papagian - Alerting: Include configured AlertRuleTags in Webhooks notifier. #18233, @dominic-miglar - Annotations: Add annotations support to Loki. #18949, @aocenas - Annotations: Use a single row to represent a region. #17673, @ryantxu - Auth: Allow inviting existing users when login form is disabled. #19048, @548017 - Azure Monitor: Add support for cross resource queries. #19115, @sunker - CLI: Allow installing custom binary plugins. #17551, @aocenas - Dashboard: Adds Logs Panel (alpha) as visualization option for Dashboards. #18641, @hugohaggmark - Dashboard: Reuse query results between panels . #16660, @ryantxu - Dashboard: Set time to to 23:59:59 when setting To time using calendar. #18595, @simPod - DataLinks: Add DataLinks support to Gauge, BarGauge and SingleStat2 panel. #18605, @ryantxu - DataLinks: Enable access to labels & field names. #18918, @torkelo - DataLinks: Enable multiple data links per panel. #18434, @dprokop - Docker: switch docker image to alpine base with phantomjs support. #18468, @DanCech - Elasticsearch: allow templating queries to order by doc_count. #18870, @hackery - Explore: Add throttling when doing live queries. #19085, @aocenas - Explore: Adds ability to go back to dashboard, optionally with query changes. #17982, @kaydelaney - Explore: Reduce default time range to last hour. #18212, @davkal - Gauge/BarGauge: Support decimals for min/max. #18368, @ryantxu - Graph: New series override transform constant that renders a single point as a line across the whole graph. #19102, @davkal - Image rendering: Add deprecation warning when PhantomJS is used for rendering images. #18933, @papagian - InfluxDB: Enable interpolation within ad-hoc filter values. #18077, @kvc-code - LDAP: Allow an user to be synchronized against LDAP. #18976, @gotjosh - Ldap: Add ldap debug page. #18759, @peterholmberg - Loki: Remove prefetching of default label values. #18213, @davkal - Metrics: Add failed alert notifications metric. #18089, @koorgoo - OAuth: Support JMES path lookup when retrieving user email. #14683, @bobmshannon - OAuth: return GitLab groups as a part of user info (enable team sync). #18388, @alexanderzobnin - Panels: Add unit for electrical charge - ampere-hour. #18950, @anirudh-ramesh - Plugin: AzureMonitor - Reapply MetricNamespace support. #17282, @raphaelquati - Plugins: better warning when plugins fail to load. #18671, @ryantxu - Postgres: Add support for scram sha 256 authentication. #18397, @nonamef - RemoteCache: Support SSL with Redis. #18511, @kylebrandt - SingleStat: The gauge option in now disabled/hidden (unless it's an old panel with it already enabled) . #18610, @ryantxu - Stackdriver: Add extra alignment period options. #18909, @sunker - Units: Add South African Rand (ZAR) to currencies. #18893, @jeteon - Units: Adding T,P,E,Z,and Y bytes. #18706, @chiqomar * Bug Fixes - Alerting: Notification is sent when state changes from no_data to ok. #18920, @papagian - Alerting: fix duplicate alert states when the alert fails to save to the database. #18216, @kylebrandt - Alerting: fix response popover prompt when add notification channels. #18967, @lzdw - CloudWatch: Fix alerting for queries with Id (using GetMetricData). #17899, @alex-berger - Explore: Fix auto completion on label values for Loki. #18988, @aocenas - Explore: Fixes crash using back button with a zoomed in graph. #19122, @hugohaggmark - Explore: Fixes so queries in Explore are only run if Graph/Table is shown. #19000, @hugohaggmark - MSSQL: Change connectionstring to URL format to fix using passwords with semicolon. #18384, @Russiancold - MSSQL: Fix memory leak when debug enabled. #19049, @briangann - Provisioning: Allow escaping literal '$' with '$$' in configs to avoid interpolation. #18045, @kylebrandt - TimePicker: Fixes hiding time picker dropdown in FireFox. #19154, @hugohaggmark * Breaking changes + Annotations There are some breaking changes in the annotations HTTP API for region annotations. Region annotations are now represented using a single event instead of two seperate events. Check breaking changes in HTTP API below and HTTP API documentation for more details. + Docker Grafana is now using Alpine 3.10 as docker base image. + HTTP API - GET /api/alert-notifications now requires at least editor access. New /api/alert-notifications/lookup returns less information than /api/alert-notifications and can be access by any authenticated user. - GET /api/alert-notifiers now requires at least editor access - GET /api/org/users now requires org admin role. New /api/org/users/lookup returns less information than /api/org/users and can be access by users that are org admins, admin in any folder or admin of any team. - GET /api/annotations no longer returns regionId property. - POST /api/annotations no longer supports isRegion property. - PUT /api/annotations/:id no longer supports isRegion property. - PATCH /api/annotations/:id no longer supports isRegion property. - DELETE /api/annotations/region/:id has been removed. * Deprecation notes + PhantomJS - PhantomJS, which is used for rendering images of dashboards and panels, is deprecated and will be removed in a future Grafana release. A deprecation warning will from now on be logged when Grafana starts up if PhantomJS is in use. Please consider migrating from PhantomJS to the Grafana Image Renderer plugin. - Changes from 6.3.6 * Features / Enhancements - Metrics: Adds setting for turning off total stats metrics. #19142, @marefr * Bug Fixes - Database: Rewrite system statistics query to perform better. #19178, @papagian - Explore: Fixes error when switching from prometheus to loki data sources. #18599, @kaydelaney - Rebase package spec. Use mostly from fedora, fix suse specified things and fix some errors. - Add missing directories provisioning/datasources and provisioning/notifiers and sample.yaml as described in packaging/rpm/control from upstream. Missing directories are shown in logfiles. - Version 6.3.5 * Upgrades + Build: Upgrade to go 1.12.9. * Bug Fixes + Dashboard: Fixes dashboards init failed loading error for dashboards with panel links that had missing properties. + Editor: Fixes issue where only entire lines were being copied. + Explore: Fixes query field layout in splitted view for Safari browsers. + LDAP: multildap + ldap integration. + Profile/UserAdmin: Fix for user agent parser crashes grafana-server on 32-bit builds. + Prometheus: Prevents panel editor crash when switching to Prometheus datasource. + Prometheus: Changes brace-insertion behavior to be less annoying. - Version 6.3.4 * Security: CVE-2019-15043 - Parts of the HTTP API allow unauthenticated use. - Version 6.3.3 * Bug Fixes + Annotations: Fix failing annotation query when time series query is cancelled. #18532 1, @dprokop 1 + Auth: Do not set SameSite cookie attribute if cookie_samesite is none. #18462 1, @papagian 3 + DataLinks: Apply scoped variables to data links correctly. #18454 1, @dprokop 1 + DataLinks: Respect timezone when displaying datapoint’s timestamp in graph context menu. #18461 2, @dprokop 1 + DataLinks: Use datapoint timestamp correctly when interpolating variables. #18459 1, @dprokop 1 + Explore: Fix loading error for empty queries. #18488 1, @davkal + Graph: Fixes legend issue clicking on series line icon and issue with horizontal scrollbar being visible on windows. #18563 1, @torkelo 2 + Graphite: Avoid glob of single-value array variables . #18420, @gotjosh + Prometheus: Fix queries with label_replace remove the $1 match when loading query editor. #18480 5, @hugohaggmark 3 + Prometheus: More consistently allows for multi-line queries in editor. #18362 2, @kaydelaney 2 + TimeSeries: Assume values are all numbers. #18540 4, @ryantxu - Version 6.3.2 * Bug Fixes + Gauge/BarGauge: Fixes issue with losts thresholds and issue loading Gauge with avg stat. #18375 12 - Version 6.3.1 * Bug Fixes + PanelLinks: Fix crash issue Gauge & Bar Gauge for panels with panel links (drill down links). #18430 2 - Version 6.3.0 * Features / Enhancements + OAuth: Do not set SameSite OAuth cookie if cookie_samesite is None. #18392 4, @papagian 3 + Auth Proxy: Include additional headers as part of the cache key. #18298 6, @gotjosh + Build grafana images consistently. #18224 12, @hassanfarid + Docs: SAML. #18069 11, @gotjosh + Permissions: Show plugins in nav for non admin users but hide plugin configuration. #18234 1, @aocenas + TimePicker: Increase max height of quick range dropdown. #18247 2, @torkelo 2 + Alerting: Add tags to alert rules. #10989 13, @Thib17 1 + Alerting: Attempt to send email notifications to all given email addresses. #16881 1, @zhulongcheng + Alerting: Improve alert rule testing. #16286 2, @marefr + Alerting: Support for configuring content field for Discord alert notifier. #17017 2, @jan25 + Alertmanager: Replace illegal chars with underscore in label names. #17002 5, @bergquist 1 + Auth: Allow expiration of API keys. #17678, @papagian 3 + Auth: Return device, os and browser when listing user auth tokens in HTTP API. #17504, @shavonn 1 + Auth: Support list and revoke of user auth tokens in UI. #17434 2, @shavonn 1 + AzureMonitor: change clashing built-in Grafana variables/macro names for Azure Logs. #17140, @shavonn 1 + CloudWatch: Made region visible for AWS Cloudwatch Expressions. #17243 2, @utkarshcmu + Cloudwatch: Add AWS DocDB metrics. #17241, @utkarshcmu + Dashboard: Use timezone dashboard setting when exporting to CSV. #18002 1, @dehrax + Data links. #17267 11, @torkelo 2 + Docker: Switch base image to ubuntu:latest from debian:stretch to avoid security issues… #17066 5, @bergquist 1 + Elasticsearch: Support for visualizing logs in Explore . #17605 7, @marefr + Explore: Adds Live option for supported datasources. #17062 1, @hugohaggmark 3 + Explore: Adds orgId to URL for sharing purposes. #17895 1, @kaydelaney 2 + Explore: Adds support for new loki ‘start’ and ‘end’ params for labels endpoint. #17512, @kaydelaney 2 + Explore: Adds support for toggling raw query mode in explore. #17870, @kaydelaney 2 + Explore: Allow switching between metrics and logs . #16959 2, @marefr + Explore: Combines the timestamp and local time columns into one. #17775, @hugohaggmark 3 + Explore: Display log lines context . #17097, @dprokop 1 + Explore: Don’t parse log levels if provided by field or label. #17180 1, @marefr + Explore: Improves performance of Logs element by limiting re-rendering. #17685, @kaydelaney 2 + Explore: Support for new LogQL filtering syntax. #16674 4, @davkal + Explore: Use new TimePicker from Grafana/UI. #17793, @hugohaggmark 3 + Explore: handle newlines in LogRow Highlighter. #17425, @rrfeng 1 + Graph: Added new fill gradient option. #17528 3, @torkelo 2 + GraphPanel: Don’t sort series when legend table & sort column is not visible . #17095, @shavonn 1 + InfluxDB: Support for visualizing logs in Explore. #17450 9, @hugohaggmark 3 + Logging: Login and Logout actions (#17760). #17883 1, @ATTron + Logging: Move log package to pkg/infra. #17023, @zhulongcheng + Metrics: Expose stats about roles as metrics. #17469 2, @bergquist 1 + MySQL/Postgres/MSSQL: Add parsing for day, weeks and year intervals in macros. #13086 6, @bernardd + MySQL: Add support for periodically reloading client certs. #14892, @tpetr + Plugins: replace dataFormats list with skipDataQuery flag in plugin.json. #16984, @ryantxu + Prometheus: Take timezone into account for step alignment. #17477, @fxmiii + Prometheus: Use overridden panel range for $__range instead of dashboard range. #17352, @patrick246 + Prometheus: added time range filter to series labels query. #16851 3, @FUSAKLA + Provisioning: Support folder that doesn’t exist yet in dashboard provisioning. #17407 1, @Nexucis + Refresh picker: Handle empty intervals. #17585 1, @dehrax + Singlestat: Add y min/max config to singlestat sparklines. #17527 4, @pitr + Snapshot: use given key and deleteKey. #16876, @zhulongcheng + Templating: Correctly display __text in multi-value variable after page reload. #17840 1, @EduardSergeev + Templating: Support selecting all filtered values of a multi-value variable. #16873 2, @r66ad + Tracing: allow propagation with Zipkin headers. #17009 4, @jrockway + Users: Disable users removed from LDAP. #16820 2, @alexanderzobnin * Bug Fixes + PanelLinks: Fix render issue when there is no panel description. #18408 3, @dehrax + OAuth: Fix “missing saved state” OAuth login failure due to SameSite cookie policy. #18332 1, @papagian 3 + cli: fix for recognizing when in dev mode… #18334, @xlson + DataLinks: Fixes incorrect interpolation of ${__series_name} . #18251 1, @torkelo 2 + Loki: Display live tailed logs in correct order in Explore. #18031 3, @kaydelaney 2 + PhantomJS: Fixes rendering on Debian Buster. #18162 2, @xlson + TimePicker: Fixed style issue for custom range popover. #18244, @torkelo 2 + Timerange: Fixes a bug where custom time ranges didn’t respect UTC. #18248 1, @kaydelaney 2 + remote_cache: Fix redis connstr parsing. #18204 1, @mblaschke + AddPanel: Fix issue when removing moved add panel widget . #17659 2, @dehrax + CLI: Fix encrypt-datasource-passwords fails with sql error. #18014, @marefr + Elasticsearch: Fix default max concurrent shard requests. #17770 4, @marefr + Explore: Fix browsing back to dashboard panel. #17061, @jschill + Explore: Fix filter by series level in logs graph. #17798, @marefr + Explore: Fix issues when loading and both graph/table are collapsed. #17113, @marefr + Explore: Fix selection/copy of log lines. #17121, @marefr + Fix: Wrap value of multi variable in array when coming from URL. #16992 1, @aocenas + Frontend: Fix for Json tree component not working. #17608, @srid12 + Graphite: Fix for issue with alias function being moved last. #17791, @torkelo 2 + Graphite: Fixes issue with seriesByTag & function with variable param. #17795, @torkelo 2 + Graphite: use POST for /metrics/find requests. #17814 2, @papagian 3 + HTTP Server: Serve Grafana with a custom URL path prefix. #17048 6, @jan25 + InfluxDB: Fixes single quotes are not escaped in label value filters. #17398 1, @Panzki + Prometheus: Correctly escape ‘|’ literals in interpolated PromQL variables. #16932, @Limess + Prometheus: Fix when adding label for metrics which contains colons in Explore. #16760, @tolwi + SinglestatPanel: Remove background color when value turns null. #17552 1, @druggieri - Make phantomjs dependency configurable - Create plugin directory and clean up (create in %install, add to %files) handling of /var/lib/grafana/* and koan: - Calculate relative path for kernel and inited when generating grub entry (bsc#1170231) - Fix os-release version detection for SUSE mgr-cfg: - Remove commented code in test files - Replace spacewalk-usix with uyuni-common-libs - Bump version to 4.1.0 (bsc#1154940) - Add mgr manpage links mgr-custom-info: - Bump version to 4.1.0 (bsc#1154940) mgr-daemon: - Bump version to 4.1.0 (bsc#1154940) - Fix systemd timer configuration on SLE12 (bsc#1142038) mgr-osad: - Separate osa-dispatcher and jabberd so it can be disabled independently - Replace spacewalk-usix with uyuni-common-libs - Bump version to 4.1.0 (bsc#1154940) - Move /usr/share/rhn/config-defaults to uyuni-base-common - Require uyuni-base-common for /etc/rhn (for osa-dispatcher) - Ensure bytes type when using hashlib to avoid traceback (bsc#1138822) mgr-push: - Replace spacewalk-usix and spacewalk-backend-libs with uyuni-common-libs - Bump version to 4.1.0 (bsc#1154940) mgr-virtualization: - Replace spacewalk-usix with uyuni-common-libs - Bump version to 4.1.0 (bsc#1154940) - Fix mgr-virtualization timer rhnlib: - Fix building - Fix malformed XML response when data contains non-ASCII chars (bsc#1154968) - Bump version to 4.1.0 (bsc#1154940) - Fix bootstrapping SLE11SP4 trad client with SSL enabled (bsc#1148177) spacecmd: - Only report real error, not result (bsc#1171687) - Use defined return values for spacecmd methods so scripts can check for failure (bsc#1171687) - Disable globbing for api subcommand to allow wildcards in filter settings (bsc#1163871) - Bugfix: attempt to purge SSM when it is empty (bsc#1155372) - Bump version to 4.1.0 (bsc#1154940) - Prevent error when piping stdout in Python 2 (bsc#1153090) - Java api expects content as encoded string instead of encoded bytes like before (bsc#1153277) - Enable building and installing for Ubuntu 16.04 and Ubuntu 18.04 - Add unit test for schedule, errata, user, utils, misc, configchannel and kickstart modules - Multiple minor bugfixes alongside the unit tests - Bugfix: referenced variable before assignment. - Add unit test for report, package, org, repo and group spacewalk-client-tools: - Add workaround for uptime overflow to spacewalk-update-status as well (bsc#1165921) - Spell correctly "successful" and "successfully" - Skip dmidecode data on aarch64 to prevent coredump (bsc#1113160) - Replace spacewalk-usix with uyuni-common-libs - Return a non-zero exit status on errors in rhn_check - Bump version to 4.1.0 (bsc#1154940) - Make a explicit requirement to systemd for spacewalk-client-tools when rhnsd timer is installed spacewalk-koan: - Bump version to 4.1.0 (bsc#1154940) - Require commands we use in merge-rd.sh spacewalk-oscap: - Bump version to 4.1.0 (bsc#1154940) spacewalk-remote-utils: - Update spacewalk-create-channel with RHEL 7.7 channel definitions - Bump version to 4.1.0 (bsc#1154940) supportutils-plugin-susemanager-client: - Bump version to 4.1.0 (bsc#1154940) suseRegisterInfo: - SuseRegisterInfo only needs perl-base, not full perl (bsc#1168310) - Bump version to 4.1.0 (bsc#1154940) zypp-plugin-spacewalk: - 1.0.7 - Prevent issue with non-ASCII characters in Python 2 systems (bsc#1172462) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1105=1 Package List: - openSUSE Leap 15.2 (noarch): dracut-saltboot-0.1.1590413773.a959db7-lp152.2.3.1 References: https://www.suse.com/security/cve/CVE-2019-10215.html https://www.suse.com/security/cve/CVE-2019-15043.html https://www.suse.com/security/cve/CVE-2020-12245.html https://www.suse.com/security/cve/CVE-2020-13379.html https://bugzilla.suse.com/1113160 https://bugzilla.suse.com/1138822 https://bugzilla.suse.com/1142038 https://bugzilla.suse.com/1148177 https://bugzilla.suse.com/1153090 https://bugzilla.suse.com/1153277 https://bugzilla.suse.com/1154940 https://bugzilla.suse.com/1154968 https://bugzilla.suse.com/1155372 https://bugzilla.suse.com/1163871 https://bugzilla.suse.com/1165921 https://bugzilla.suse.com/1168310 https://bugzilla.suse.com/1170231 https://bugzilla.suse.com/1170557 https://bugzilla.suse.com/1170824 https://bugzilla.suse.com/1171687 https://bugzilla.suse.com/1172462

1 0

openSUSE-RU-2020:1099-1: Recommened update for opencl
by maintenance＠opensuse.org 27 Jul '20

27 Jul '20

openSUSE Recommended Update: Recommened update for opencl ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1099-1 Rating: low References: #1172303 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update provides OpenCL 32bit packages for Wine usage. (bsc#1172303) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1099=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libOpenCL1-2.2.11-lp152.5.3.1 libOpenCL1-debuginfo-2.2.11-lp152.5.3.1 ocl-icd-debugsource-2.2.11-lp152.5.3.1 ocl-icd-devel-2.2.11-lp152.5.3.1 - openSUSE Leap 15.2 (x86_64): libOpenCL1-32bit-2.2.11-lp152.5.3.1 libOpenCL1-32bit-debuginfo-2.2.11-lp152.5.3.1 ocl-icd-devel-32bit-2.2.11-lp152.5.3.1 References: https://bugzilla.suse.com/1172303

1 0

openSUSE-RU-2020:1098-1: moderate: Recommended update for yast2
by maintenance＠opensuse.org 27 Jul '20

27 Jul '20

openSUSE Recommended Update: Recommended update for yast2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1098-1 Rating: moderate References: #1162514 #1173447 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for yast2 fixes the following issues: - Improve actions to stop and start a system service. (bsc#1162514) - Avoid failure when downloading release notes from an inoperative proxy. (bsc#1173447) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1098=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): yast2-4.2.85-lp152.2.3.1 yast2-logs-4.2.85-lp152.2.3.1 References: https://bugzilla.suse.com/1162514 https://bugzilla.suse.com/1173447

1 0

openSUSE-RU-2020:1096-1: important: Recommended update for crmsh
by maintenance＠opensuse.org 27 Jul '20

27 Jul '20

openSUSE Recommended Update: Recommended update for crmsh ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1096-1 Rating: important References: #1166962 #1169581 #1170037 #1170999 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for crmsh fixes the following issues: - Fix for collecting of binary data to avoid CRC error in report. (bsc#1166962) - Implement ssh key configuration improvement to avoid security issues. (bsc#1169581, ECO-2035) - Fix for using class 'SBDManager' for sbd configuration and management. (bsc#1170037, bsc#1170999) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1096=1 Package List: - openSUSE Leap 15.1 (noarch): crmsh-4.1.0+git.1594697133.dcecb3ec-lp151.2.21.1 crmsh-scripts-4.1.0+git.1594697133.dcecb3ec-lp151.2.21.1 crmsh-test-4.1.0+git.1594697133.dcecb3ec-lp151.2.21.1 References: https://bugzilla.suse.com/1166962 https://bugzilla.suse.com/1169581 https://bugzilla.suse.com/1170037 https://bugzilla.suse.com/1170999

1 0

openSUSE-SU-2020:1095-1: important: Security update for go1.13
by opensuse-security＠opensuse.org 27 Jul '20

27 Jul '20

openSUSE Security Update: Security update for go1.13 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1095-1 Rating: important References: #1149259 #1169832 #1172868 #1174153 #1174191 Cross-References: CVE-2020-14039 CVE-2020-15586 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves two vulnerabilities and has three fixes is now available. Description: This update for go1.13 fixes the following issues: - go1.13.14 (released 2020/07/16) includes fixes to the compiler, vet, and the database/sql, net/http, and reflect packages Refs bsc#1149259 go1.13 release tracking * go#39925 net/http: panic on misformed If-None-Match Header with http.ServeContent * go#39848 cmd/compile: internal compile error when using sync.Pool: mismatched zero/store sizes * go#39823 cmd/go: TestBuildIDContainsArchModeEnv/386 fails on linux/386 in Go 1.14 and 1.13, not 1.15 * go#39697 reflect: panic from malloc after MakeFunc function returns value that is also stored globally * go#39561 cmd/compile/internal/ssa: TestNexting/dlv-dbg-hist failing on linux-386-longtest builder because it tries to use an older version of dlv which only supports linux/amd64 * go#39538 net: TestDialParallel is flaky on windows-amd64-longtest * go#39287 cmd/vet: update for new number formats * go#40211 net/http: Expect 100-continue panics in httputil.ReverseProxy bsc#1174153 CVE-2020-15586 * go#40209 crypto/x509: Certificate.Verify method seemingly ignoring EKU requirements on Windows bsc#1174191 CVE-2020-14039 (Windows only) * go#38932 runtime: preemption in startTemplateThread may cause infinite hang * go#36689 go/types, math/big: data race in go/types due to math/big.Rat accessors unsafe for concurrent use - Add patch to ensure /etc/hosts is used if /etc/nsswitch.conf is not present bsc#1172868 gh#golang/go#35305 This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1095=1 Package List: - openSUSE Leap 15.2 (x86_64): go1.13-1.13.14-lp152.2.4.1 go1.13-doc-1.13.14-lp152.2.4.1 go1.13-race-1.13.14-lp152.2.4.1 References: https://www.suse.com/security/cve/CVE-2020-14039.html https://www.suse.com/security/cve/CVE-2020-15586.html https://bugzilla.suse.com/1149259 https://bugzilla.suse.com/1169832 https://bugzilla.suse.com/1172868 https://bugzilla.suse.com/1174153 https://bugzilla.suse.com/1174191

1 0

openSUSE-RU-2020:1094-1: moderate: Recommended update for alsa
by maintenance＠opensuse.org 27 Jul '20

27 Jul '20

openSUSE Recommended Update: Recommended update for alsa ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1094-1 Rating: moderate References: #1171246 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for alsa fixes the following issues: - Add UCM profile for ASUS Chromebook C300. (bsc#1171246) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1094=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): alsa-1.1.5-lp152.9.4.1 alsa-debugsource-1.1.5-lp152.9.4.1 alsa-devel-1.1.5-lp152.9.4.1 libasound2-1.1.5-lp152.9.4.1 libasound2-debuginfo-1.1.5-lp152.9.4.1 - openSUSE Leap 15.2 (x86_64): alsa-devel-32bit-1.1.5-lp152.9.4.1 libasound2-32bit-1.1.5-lp152.9.4.1 libasound2-32bit-debuginfo-1.1.5-lp152.9.4.1 - openSUSE Leap 15.2 (noarch): alsa-docs-1.1.5-lp152.9.4.1 References: https://bugzilla.suse.com/1171246

1 0

openSUSE-SU-2020:1093-1: moderate: Security update for perl-YAML-LibYAML
by opensuse-security＠opensuse.org 27 Jul '20

27 Jul '20

openSUSE Security Update: Security update for perl-YAML-LibYAML ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1093-1 Rating: moderate References: #1173703 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for perl-YAML-LibYAML fixes the following issues: perl-YAML-LibYAML was updated to 0.69: [bsc#1173703] * Security fix: Add $LoadBlessed option to turn on/off loading objects: Default is set to true. Note that, the behavior is unchanged. * Clarify documentation about exported functions * Dump() was modifying original data, adding a PV to numbers * Support standard tags !!str, !!map and !!seq instead of dying. * Support JSON::PP::Boolean and boolean.pm via $YAML::XS::Boolean. * Fix regex roundtrip. Fix loading of many regexes. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1093=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): perl-YAML-LibYAML-0.69-lp152.4.3.1 perl-YAML-LibYAML-debuginfo-0.69-lp152.4.3.1 perl-YAML-LibYAML-debugsource-0.69-lp152.4.3.1 References: https://bugzilla.suse.com/1173703

1 0

openSUSE-RU-2020:1092-1: Recommended update for go1.11
by maintenance＠opensuse.org 27 Jul '20

27 Jul '20

openSUSE Recommended Update: Recommended update for go1.11 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1092-1 Rating: low References: #1169832 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for go1.11 fixes the following issues: - Fix for an issue when installing on Raspberry Pi causes illegal instruction due to unproper ARM arch set. (bsc#1169832) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1092=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): go1.11-1.11.13-lp152.4.3.1 go1.11-doc-1.11.13-lp152.4.3.1 - openSUSE Leap 15.2 (x86_64): go1.11-race-1.11.13-lp152.4.3.1 References: https://bugzilla.suse.com/1169832

1 0

openSUSE-RU-2020:1091-1: moderate: Recommended update for apparmor
by maintenance＠opensuse.org 27 Jul '20

27 Jul '20

openSUSE Recommended Update: Recommended update for apparmor ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1091-1 Rating: moderate References: #1172040 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for apparmor fixes the following issues: - Add 'UI_Showfile' so Yast shows the profile correctly. (bsc#1172040) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1091=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): apache2-mod_apparmor-2.13.4-lp152.2.3.1 apache2-mod_apparmor-debuginfo-2.13.4-lp152.2.3.1 apparmor-debugsource-2.13.4-lp152.2.3.1 apparmor-parser-2.13.4-lp152.2.3.1 apparmor-parser-debuginfo-2.13.4-lp152.2.3.1 libapparmor-debugsource-2.13.4-lp152.2.3.1 libapparmor-devel-2.13.4-lp152.2.3.1 libapparmor1-2.13.4-lp152.2.3.1 libapparmor1-debuginfo-2.13.4-lp152.2.3.1 pam_apparmor-2.13.4-lp152.2.3.1 pam_apparmor-debuginfo-2.13.4-lp152.2.3.1 perl-apparmor-2.13.4-lp152.2.3.1 perl-apparmor-debuginfo-2.13.4-lp152.2.3.1 python3-apparmor-2.13.4-lp152.2.3.1 python3-apparmor-debuginfo-2.13.4-lp152.2.3.1 ruby-apparmor-2.13.4-lp152.2.3.1 ruby-apparmor-debuginfo-2.13.4-lp152.2.3.1 - openSUSE Leap 15.2 (noarch): apparmor-abstractions-2.13.4-lp152.2.3.1 apparmor-docs-2.13.4-lp152.2.3.1 apparmor-parser-lang-2.13.4-lp152.2.3.1 apparmor-profiles-2.13.4-lp152.2.3.1 apparmor-utils-2.13.4-lp152.2.3.1 apparmor-utils-lang-2.13.4-lp152.2.3.1 - openSUSE Leap 15.2 (x86_64): libapparmor1-32bit-2.13.4-lp152.2.3.1 libapparmor1-32bit-debuginfo-2.13.4-lp152.2.3.1 pam_apparmor-32bit-2.13.4-lp152.2.3.1 pam_apparmor-32bit-debuginfo-2.13.4-lp152.2.3.1 References: https://bugzilla.suse.com/1172040

1 0

openSUSE-SU-2020:1090-1: important: Security update for freerdp
by opensuse-security＠opensuse.org 26 Jul '20

26 Jul '20

openSUSE Security Update: Security update for freerdp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1090-1 Rating: important References: #1169679 #1169748 #1171441 #1171443 #1171444 #1171445 #1171446 #1171447 #1171474 #1173247 #1173605 #1174200 Cross-References: CVE-2020-11017 CVE-2020-11018 CVE-2020-11019 CVE-2020-11038 CVE-2020-11039 CVE-2020-11040 CVE-2020-11041 CVE-2020-11043 CVE-2020-11085 CVE-2020-11086 CVE-2020-11087 CVE-2020-11088 CVE-2020-11089 CVE-2020-11095 CVE-2020-11096 CVE-2020-11097 CVE-2020-11098 CVE-2020-11099 CVE-2020-11521 CVE-2020-11522 CVE-2020-11523 CVE-2020-11524 CVE-2020-11525 CVE-2020-11526 CVE-2020-13396 CVE-2020-13397 CVE-2020-13398 CVE-2020-4030 CVE-2020-4031 CVE-2020-4032 CVE-2020-4033 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 31 vulnerabilities is now available. Description: This update for freerdp fixes the following issues: frerdp was updated to version 2.1.2 (bsc#1171441,bsc#1173247 and jsc#ECO-2006): - CVE-2020-11017: Fixed a double free which could have denied the server's service. - CVE-2020-11018: Fixed an out of bounds read which a malicious clients could have triggered. - CVE-2020-11019: Fixed an issue which could have led to denial of service if logger was set to "WLOG_TRACE". - CVE-2020-11038: Fixed a buffer overflow when /video redirection was used. - CVE-2020-11039: Fixed an issue which could have allowed arbitrary memory read and write when USB redirection was enabled. - CVE-2020-11040: Fixed an out of bounds data read in clear_decompress_subcode_rlex. - CVE-2020-11041: Fixed an issue with the configuration for sound backend which could have led to server's denial of service. - CVE-2020-11043: Fixed an out of bounds read in rfx_process_message_tileset. - CVE-2020-11085: Fixed an out of bounds read in cliprdr_read_format_list. - CVE-2020-11086: Fixed an out of bounds read in ntlm_read_ntlm_v2_client_challenge. - CVE-2020-11087: Fixed an out of bounds read in ntlm_read_AuthenticateMessage. - CVE-2020-11088: Fixed an out of bounds read in ntlm_read_NegotiateMessage. - CVE-2020-11089: Fixed an out of bounds read in irp function family. - CVE-2020-11095: Fixed a global out of bounds read in update_recv_primary_order. - CVE-2020-11096: Fixed a global out of bounds read in update_read_cache_bitmap_v3_order. - CVE-2020-11097: Fixed an out of bounds read in ntlm_av_pair_get. - CVE-2020-11098: Fixed an out of bounds read in glyph_cache_put. - CVE-2020-11099: Fixed an out of bounds Read in license_read_new_or_upgrade_license_packet. - CVE-2020-11521: Fixed an out of bounds write in planar.c (bsc#1171443). - CVE-2020-11522: Fixed an out of bounds read in gdi.c (bsc#1171444). - CVE-2020-11523: Fixed an integer overflow in region.c (bsc#1171445). - CVE-2020-11524: Fixed an out of bounds write in interleaved.c (bsc#1171446). - CVE-2020-11525: Fixed an out of bounds read in bitmap.c (bsc#1171447). - CVE-2020-11526: Fixed an out of bounds read in update_recv_secondary_order (bsc#1171674). - CVE-2020-13396: Fixed an Read in ntlm_read_ChallengeMessage. - CVE-2020-13397: Fixed an out of bounds read in security_fips_decrypt due to uninitialized value. - CVE-2020-13398: Fixed an out of bounds write in crypto_rsa_common. - CVE-2020-4030: Fixed an out of bounds read in `TrioParse`. - CVE-2020-4031: Fixed a use after free in gdi_SelectObject. - CVE-2020-4032: Fixed an integer casting in `update_recv_secondary_order`. - CVE-2020-4033: Fixed an out of bound read in RLEDECOMPRESS. - Fixed an issue where freerdp failed with -fno-common (bsc#1169748). - Fixed an issue where USB redirection with FreeRDP was not working (bsc#1169679). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1090=1 Package List: - openSUSE Leap 15.1 (x86_64): freerdp-2.1.2-lp151.5.6.1 freerdp-debuginfo-2.1.2-lp151.5.6.1 freerdp-debugsource-2.1.2-lp151.5.6.1 freerdp-devel-2.1.2-lp151.5.6.1 freerdp-proxy-2.1.2-lp151.5.6.1 freerdp-proxy-debuginfo-2.1.2-lp151.5.6.1 freerdp-server-2.1.2-lp151.5.6.1 freerdp-server-debuginfo-2.1.2-lp151.5.6.1 freerdp-wayland-2.1.2-lp151.5.6.1 freerdp-wayland-debuginfo-2.1.2-lp151.5.6.1 libfreerdp2-2.1.2-lp151.5.6.1 libfreerdp2-debuginfo-2.1.2-lp151.5.6.1 libuwac0-0-2.1.2-lp151.5.6.1 libuwac0-0-debuginfo-2.1.2-lp151.5.6.1 libwinpr2-2.1.2-lp151.5.6.1 libwinpr2-debuginfo-2.1.2-lp151.5.6.1 uwac0-0-devel-2.1.2-lp151.5.6.1 winpr2-devel-2.1.2-lp151.5.6.1 References: https://www.suse.com/security/cve/CVE-2020-11017.html https://www.suse.com/security/cve/CVE-2020-11018.html https://www.suse.com/security/cve/CVE-2020-11019.html https://www.suse.com/security/cve/CVE-2020-11038.html https://www.suse.com/security/cve/CVE-2020-11039.html https://www.suse.com/security/cve/CVE-2020-11040.html https://www.suse.com/security/cve/CVE-2020-11041.html https://www.suse.com/security/cve/CVE-2020-11043.html https://www.suse.com/security/cve/CVE-2020-11085.html https://www.suse.com/security/cve/CVE-2020-11086.html https://www.suse.com/security/cve/CVE-2020-11087.html https://www.suse.com/security/cve/CVE-2020-11088.html https://www.suse.com/security/cve/CVE-2020-11089.html https://www.suse.com/security/cve/CVE-2020-11095.html https://www.suse.com/security/cve/CVE-2020-11096.html https://www.suse.com/security/cve/CVE-2020-11097.html https://www.suse.com/security/cve/CVE-2020-11098.html https://www.suse.com/security/cve/CVE-2020-11099.html https://www.suse.com/security/cve/CVE-2020-11521.html https://www.suse.com/security/cve/CVE-2020-11522.html https://www.suse.com/security/cve/CVE-2020-11523.html https://www.suse.com/security/cve/CVE-2020-11524.html https://www.suse.com/security/cve/CVE-2020-11525.html https://www.suse.com/security/cve/CVE-2020-11526.html https://www.suse.com/security/cve/CVE-2020-13396.html https://www.suse.com/security/cve/CVE-2020-13397.html https://www.suse.com/security/cve/CVE-2020-13398.html https://www.suse.com/security/cve/CVE-2020-4030.html https://www.suse.com/security/cve/CVE-2020-4031.html https://www.suse.com/security/cve/CVE-2020-4032.html https://www.suse.com/security/cve/CVE-2020-4033.html https://bugzilla.suse.com/1169679 https://bugzilla.suse.com/1169748 https://bugzilla.suse.com/1171441 https://bugzilla.suse.com/1171443 https://bugzilla.suse.com/1171444 https://bugzilla.suse.com/1171445 https://bugzilla.suse.com/1171446 https://bugzilla.suse.com/1171447 https://bugzilla.suse.com/1171474 https://bugzilla.suse.com/1173247 https://bugzilla.suse.com/1173605 https://bugzilla.suse.com/1174200

1 0

openSUSE-RU-2020:1079-1: moderate: Recommended update for perf
by maintenance＠opensuse.org 26 Jul '20

26 Jul '20

openSUSE Recommended Update: Recommended update for perf ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1079-1 Rating: moderate References: #1169763 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for perf fixes the following issues: - Add support for new IBM S390 z15 deflate counters (bsc#1169763) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1079=1 Package List: - openSUSE Leap 15.2 (x86_64): perf-5.3.18-lp152.21.3.1 perf-debuginfo-5.3.18-lp152.21.3.1 perf-debugsource-5.3.18-lp152.21.3.1 References: https://bugzilla.suse.com/1169763

1 0

openSUSE-RU-2020:1083-1: Recommended update for go1.9
by maintenance＠opensuse.org 26 Jul '20

26 Jul '20

openSUSE Recommended Update: Recommended update for go1.9 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1083-1 Rating: low References: #1169832 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for go1.9 fixes the following issues: - Fix for an issue when installing on Raspberry Pi causes illegal instruction due to unproper ARM arch set. (bsc#1169832) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1083=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): go1.9-1.9.7-lp152.4.3.1 go1.9-doc-1.9.7-lp152.4.3.1 - openSUSE Leap 15.2 (x86_64): go1.9-race-1.9.7-lp152.4.3.1 References: https://bugzilla.suse.com/1169832

1 0

openSUSE-SU-2020:1089-1: moderate: Security update for perl-YAML-LibYAML
by opensuse-security＠opensuse.org 26 Jul '20

26 Jul '20

openSUSE Security Update: Security update for perl-YAML-LibYAML ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1089-1 Rating: moderate References: #1173703 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for perl-YAML-LibYAML fixes the following issues: perl-YAML-LibYAML was updated to 0.69: [bsc#1173703] * Security fix: Add $LoadBlessed option to turn on/off loading objects: Default is set to true. Note that, the behavior is unchanged. * Clarify documentation about exported functions * Dump() was modifying original data, adding a PV to numbers * Support standard tags !!str, !!map and !!seq instead of dying. * Support JSON::PP::Boolean and boolean.pm via $YAML::XS::Boolean. * Fix regex roundtrip. Fix loading of many regexes. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1089=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): perl-YAML-LibYAML-0.69-lp151.3.3.1 perl-YAML-LibYAML-debuginfo-0.69-lp151.3.3.1 perl-YAML-LibYAML-debugsource-0.69-lp151.3.3.1 References: https://bugzilla.suse.com/1173703

1 0

openSUSE-SU-2020:1086-1: moderate: Security update for knot
by opensuse-security＠opensuse.org 26 Jul '20

26 Jul '20

openSUSE Security Update: Security update for knot ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1086-1 Rating: moderate References: #1047841 Cross-References: CVE-2017-11104 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for knot fixes the following issues: - CVE-2017-11104: Fixed an improper implementation of TSIG protocol which could have allowed an attacker with a valid key name and algorithm to bypass TSIG authentication (boo#1047841). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1086=1 Package List: - openSUSE Leap 15.2 (x86_64): knot-1.6.8-lp152.5.3.1 knot-debuginfo-1.6.8-lp152.5.3.1 knot-debugsource-1.6.8-lp152.5.3.1 References: https://www.suse.com/security/cve/CVE-2017-11104.html https://bugzilla.suse.com/1047841

1 0

openSUSE-RU-2020:1081-1: Recommended update for go1.10
by maintenance＠opensuse.org 26 Jul '20

26 Jul '20

openSUSE Recommended Update: Recommended update for go1.10 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1081-1 Rating: low References: #1169832 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for go1.10 fixes the following issues: - Fix for an issue when installing on Raspberry Pi causes illegal instruction due to unproper ARM arch set. (bsc#1169832) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1081=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): go1.10-1.10.8-lp152.5.3.1 go1.10-doc-1.10.8-lp152.5.3.1 - openSUSE Leap 15.2 (x86_64): go1.10-race-1.10.8-lp152.5.3.1 References: https://bugzilla.suse.com/1169832

1 0

openSUSE-RU-2020:1082-1: moderate: Recommended update for flatpak
by maintenance＠opensuse.org 26 Jul '20

26 Jul '20

openSUSE Recommended Update: Recommended update for flatpak ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1082-1 Rating: moderate References: #1169619 #1170416 #1172316 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for flatpak fixes the following issues: - Fix for missing directories by creating a 'skeleton flatpak' repository using 'flatpak remotes' instead of creating the directory manually. (bsc#1172316, bsc#1169619, bsc#1170416) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1082=1 Package List: - openSUSE Leap 15.2 (x86_64): flatpak-1.6.3-lp152.3.3.1 flatpak-debuginfo-1.6.3-lp152.3.3.1 flatpak-debugsource-1.6.3-lp152.3.3.1 flatpak-devel-1.6.3-lp152.3.3.1 flatpak-zsh-completion-1.6.3-lp152.3.3.1 libflatpak0-1.6.3-lp152.3.3.1 libflatpak0-debuginfo-1.6.3-lp152.3.3.1 system-user-flatpak-1.6.3-lp152.3.3.1 typelib-1_0-Flatpak-1_0-1.6.3-lp152.3.3.1 References: https://bugzilla.suse.com/1169619 https://bugzilla.suse.com/1170416 https://bugzilla.suse.com/1172316

1 0

openSUSE-SU-2020:1087-1: important: Security update for go1.13
by opensuse-security＠opensuse.org 26 Jul '20

26 Jul '20

openSUSE Security Update: Security update for go1.13 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1087-1 Rating: important References: #1149259 #1169832 #1172868 #1174153 #1174191 Cross-References: CVE-2020-14039 CVE-2020-15586 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves two vulnerabilities and has three fixes is now available. Description: This update for go1.13 fixes the following issues: - go1.13.14 (released 2020/07/16) includes fixes to the compiler, vet, and the database/sql, net/http, and reflect packages Refs bsc#1149259 go1.13 release tracking * go#39925 net/http: panic on misformed If-None-Match Header with http.ServeContent * go#39848 cmd/compile: internal compile error when using sync.Pool: mismatched zero/store sizes * go#39823 cmd/go: TestBuildIDContainsArchModeEnv/386 fails on linux/386 in Go 1.14 and 1.13, not 1.15 * go#39697 reflect: panic from malloc after MakeFunc function returns value that is also stored globally * go#39561 cmd/compile/internal/ssa: TestNexting/dlv-dbg-hist failing on linux-386-longtest builder because it tries to use an older version of dlv which only supports linux/amd64 * go#39538 net: TestDialParallel is flaky on windows-amd64-longtest * go#39287 cmd/vet: update for new number formats * go#40211 net/http: Expect 100-continue panics in httputil.ReverseProxy bsc#1174153 CVE-2020-15586 * go#40209 crypto/x509: Certificate.Verify method seemingly ignoring EKU requirements on Windows bsc#1174191 CVE-2020-14039 (Windows only) * go#38932 runtime: preemption in startTemplateThread may cause infinite hang * go#36689 go/types, math/big: data race in go/types due to math/big.Rat accessors unsafe for concurrent use - Add patch to ensure /etc/hosts is used if /etc/nsswitch.conf is not present bsc#1172868 gh#golang/go#35305 This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1087=1 Package List: - openSUSE Leap 15.1 (x86_64): go1.13-1.13.14-lp151.5.1 go1.13-doc-1.13.14-lp151.5.1 go1.13-race-1.13.14-lp151.5.1 References: https://www.suse.com/security/cve/CVE-2020-14039.html https://www.suse.com/security/cve/CVE-2020-15586.html https://bugzilla.suse.com/1149259 https://bugzilla.suse.com/1169832 https://bugzilla.suse.com/1172868 https://bugzilla.suse.com/1174153 https://bugzilla.suse.com/1174191

1 0

openSUSE-RU-2020:1084-1: moderate: Recommended update for python-importlib_resources
by maintenance＠opensuse.org 26 Jul '20

26 Jul '20

openSUSE Recommended Update: Recommended update for python-importlib_resources ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1084-1 Rating: moderate References: #1172933 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-importlib_resources fixes the following issues: Update from version 1.0.2 to 1.1.0 (jsc#ECO-2153, bsc#1172933) - Add support for retrieving resources from subdirectories of packages through the new files() function, which returns a Traversable object with joinpath and read_* interfaces matching those of pathlib.Path objects. This new function supersedes all of the previous functionality as it provides a more general-purpose access to a package’s resources. - With this function, subdirectories are supported. - The documentation has been updated to reflect that this function is now the preferred interface for loading package resources. It does not, however, support resources from arbitrary loaders. It currently only supports resources from file system path and zipfile packages (a consequence of the ResourceReader interface only operating on Python packages). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1084=1 Package List: - openSUSE Leap 15.2 (noarch): python2-importlib_resources-1.1.0-lp152.2.4.1 python3-importlib_resources-1.1.0-lp152.2.4.1 References: https://bugzilla.suse.com/1172933

1 0

openSUSE-RU-2020:1080-1: moderate: Recommended update for yast2-network
by maintenance＠opensuse.org 26 Jul '20

26 Jul '20

openSUSE Recommended Update: Recommended update for yast2-network ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1080-1 Rating: moderate References: #1167256 #1168479 #1169663 #1172444 #1172922 #1173213 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 6 recommended fixes can now be installed. Description: This update for yast2-network fixes the following issues: - Do not remove automatically aliases from /etc/hosts during an autoinstallation. (bsc#1173213) - Avoid error when accessing to Bond Slaves in s390. (bsc#1172444). - AutoYaST: Udev rules are written or copied to the target system properly when defined in the profile. (bsc#1169663) - AutoYaST: Fixed the copy or merge of the linuxrc interfaces configuration when the installation network configuration is selected to be kept. - Do not export interfaces <aliases> section when there are no aliases to export. (bsc#1172922) - Try to install the wireless-tools package when the package is not installed and the wifi networks are scanned. (bsc#1168479) - Fix for parse the udev rules keys correctly using underscores. (bsc#1167256) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1080=1 Package List: - openSUSE Leap 15.2 (noarch): yast2-network-4.2.72-lp152.2.3.1 References: https://bugzilla.suse.com/1167256 https://bugzilla.suse.com/1168479 https://bugzilla.suse.com/1169663 https://bugzilla.suse.com/1172444 https://bugzilla.suse.com/1172922 https://bugzilla.suse.com/1173213

1 0

openSUSE-SU-2020:1085-1: moderate: Security update for knot
by opensuse-security＠opensuse.org 26 Jul '20

26 Jul '20

openSUSE Security Update: Security update for knot ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1085-1 Rating: moderate References: #1047841 Cross-References: CVE-2017-11104 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for knot fixes the following issues: - CVE-2017-11104: Fixed an improper implementation of TSIG protocol which could have allowed an attacker with a valid key name and algorithm to bypass TSIG authentication (boo#1047841). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1085=1 Package List: - openSUSE Leap 15.1 (x86_64): knot-1.6.8-lp151.4.3.1 knot-debuginfo-1.6.8-lp151.4.3.1 knot-debugsource-1.6.8-lp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2017-11104.html https://bugzilla.suse.com/1047841

1 0

openSUSE-SU-2020:1088-1: moderate: Security update for libraw
by opensuse-security＠opensuse.org 26 Jul '20

26 Jul '20

openSUSE Security Update: Security update for libraw ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1088-1 Rating: moderate References: #1173674 Cross-References: CVE-2020-15503 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libraw fixes the following issues: - security update - added patches fix CVE-2020-15503 [bsc#1173674], lack of thumbnail size range check can lead to buffer overflow + libraw-CVE-2020-15503.patch This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1088=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libraw-debuginfo-0.18.9-lp151.4.3.1 libraw-debugsource-0.18.9-lp151.4.3.1 libraw-devel-0.18.9-lp151.4.3.1 libraw-devel-static-0.18.9-lp151.4.3.1 libraw-tools-0.18.9-lp151.4.3.1 libraw-tools-debuginfo-0.18.9-lp151.4.3.1 libraw16-0.18.9-lp151.4.3.1 libraw16-debuginfo-0.18.9-lp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2020-15503.html https://bugzilla.suse.com/1173674

1 0

openSUSE-RU-2020:1076-1: Recommended update for go1.11
by maintenance＠opensuse.org 26 Jul '20

26 Jul '20

openSUSE Recommended Update: Recommended update for go1.11 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1076-1 Rating: low References: #1169832 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for go1.11 fixes the following issues: - Fix for an issue when installing on Raspberry Pi causes illegal instruction due to unproper ARM arch set. (bsc#1169832) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1076=1 Package List: - openSUSE Leap 15.1 (x86_64): go1.11-1.11.13-lp151.2.21.1 go1.11-doc-1.11.13-lp151.2.21.1 go1.11-race-1.11.13-lp151.2.21.1 References: https://bugzilla.suse.com/1169832

1 0

openSUSE-RU-2020:1066-1: moderate: Recommended update for openvswitch
by maintenance＠opensuse.org 26 Jul '20

26 Jul '20

openSUSE Recommended Update: Recommended update for openvswitch ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1066-1 Rating: moderate References: #1172861 #1172929 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for openvswitch fixes the following issues: - Preserve the old default OVS_USER_ID for users that removed the override at /etc/sysconfig/openvswitch. (bsc#1172861) - Fix possible changes of openvswitch configuration during upgrades. (bsc#1172929) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1066=1 Package List: - openSUSE Leap 15.2 (noarch): openvswitch-doc-2.13.0-lp152.3.3.1 ovn-doc-20.03.0-lp152.3.3.1 - openSUSE Leap 15.2 (x86_64): libopenvswitch-2_13-0-2.13.0-lp152.3.3.1 libopenvswitch-2_13-0-debuginfo-2.13.0-lp152.3.3.1 libovn-20_03-0-20.03.0-lp152.3.3.1 libovn-20_03-0-debuginfo-20.03.0-lp152.3.3.1 openvswitch-2.13.0-lp152.3.3.1 openvswitch-debuginfo-2.13.0-lp152.3.3.1 openvswitch-debugsource-2.13.0-lp152.3.3.1 openvswitch-devel-2.13.0-lp152.3.3.1 openvswitch-ipsec-2.13.0-lp152.3.3.1 openvswitch-pki-2.13.0-lp152.3.3.1 openvswitch-test-2.13.0-lp152.3.3.1 openvswitch-test-debuginfo-2.13.0-lp152.3.3.1 openvswitch-vtep-2.13.0-lp152.3.3.1 openvswitch-vtep-debuginfo-2.13.0-lp152.3.3.1 ovn-20.03.0-lp152.3.3.1 ovn-central-20.03.0-lp152.3.3.1 ovn-central-debuginfo-20.03.0-lp152.3.3.1 ovn-debuginfo-20.03.0-lp152.3.3.1 ovn-devel-20.03.0-lp152.3.3.1 ovn-docker-20.03.0-lp152.3.3.1 ovn-host-20.03.0-lp152.3.3.1 ovn-host-debuginfo-20.03.0-lp152.3.3.1 ovn-vtep-20.03.0-lp152.3.3.1 ovn-vtep-debuginfo-20.03.0-lp152.3.3.1 python3-ovs-2.13.0-lp152.3.3.1 References: https://bugzilla.suse.com/1172861 https://bugzilla.suse.com/1172929

1 0

openSUSE-RU-2020:1067-1: moderate: Recommended update for alsa
by maintenance＠opensuse.org 26 Jul '20

26 Jul '20

openSUSE Recommended Update: Recommended update for alsa ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1067-1 Rating: moderate References: #1171246 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for alsa fixes the following issues: - Add UCM profile for ASUS Chromebook C300. (bsc#1171246) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1067=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): alsa-1.1.5-lp151.8.3.1 alsa-debugsource-1.1.5-lp151.8.3.1 alsa-devel-1.1.5-lp151.8.3.1 libasound2-1.1.5-lp151.8.3.1 libasound2-debuginfo-1.1.5-lp151.8.3.1 - openSUSE Leap 15.1 (noarch): alsa-docs-1.1.5-lp151.8.3.1 - openSUSE Leap 15.1 (x86_64): alsa-devel-32bit-1.1.5-lp151.8.3.1 libasound2-32bit-1.1.5-lp151.8.3.1 libasound2-32bit-debuginfo-1.1.5-lp151.8.3.1 References: https://bugzilla.suse.com/1171246

1 0

openSUSE-RU-2020:1065-1: important: Recommended update for libsolv, libzypp, yast2-packager, yast2-pkg-bindings
by maintenance＠opensuse.org 26 Jul '20

26 Jul '20

openSUSE Recommended Update: Recommended update for libsolv, libzypp, yast2-packager, yast2-pkg-bindings ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1065-1 Rating: important References: #1172477 #1173336 #1174011 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for libsolv, libzypp, yast2-packager, yast2-pkg-bindings fixes the following issues: libsolv: - No source changes, just shipping it as an installer update (required by yast2-pkg-bindings). libzypp: - Proactively send credentials if the URL specifes '?auth=basic' and a username. (bsc#1174011) - ZYPP_MEDIA_CURL_DEBUG: Strip credentials in header log. (bsc#1174011) yast2-packager: - Handle variable expansion in repository name. (bsc#1172477) - Improve medium type detection, do not report Online medium when the /media.1/products file is missing in the repository, SMT does not mirror this file. (bsc#1173336) yast2-pkg-bindings: - Extensions to handle raw repository name. (bsc#1172477) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1065=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libsolv-debuginfo-0.7.14-lp152.2.7.1 libsolv-debugsource-0.7.14-lp152.2.7.1 libsolv-demo-0.7.14-lp152.2.7.1 libsolv-demo-debuginfo-0.7.14-lp152.2.7.1 libsolv-devel-0.7.14-lp152.2.7.1 libsolv-devel-debuginfo-0.7.14-lp152.2.7.1 libsolv-tools-0.7.14-lp152.2.7.1 libsolv-tools-debuginfo-0.7.14-lp152.2.7.1 libzypp-17.24.1-lp152.2.7.1 libzypp-debuginfo-17.24.1-lp152.2.7.1 libzypp-debugsource-17.24.1-lp152.2.7.1 libzypp-devel-17.24.1-lp152.2.7.1 libzypp-devel-doc-17.24.1-lp152.2.7.1 perl-solv-0.7.14-lp152.2.7.1 perl-solv-debuginfo-0.7.14-lp152.2.7.1 python-solv-0.7.14-lp152.2.7.1 python-solv-debuginfo-0.7.14-lp152.2.7.1 python3-solv-0.7.14-lp152.2.7.1 python3-solv-debuginfo-0.7.14-lp152.2.7.1 ruby-solv-0.7.14-lp152.2.7.1 ruby-solv-debuginfo-0.7.14-lp152.2.7.1 yast2-packager-4.2.64-lp152.2.3.1 yast2-pkg-bindings-4.2.8-lp152.2.3.1 yast2-pkg-bindings-debuginfo-4.2.8-lp152.2.3.1 yast2-pkg-bindings-debugsource-4.2.8-lp152.2.3.1 - openSUSE Leap 15.2 (noarch): yast2-pkg-bindings-devel-doc-4.2.8-lp152.2.3.1 References: https://bugzilla.suse.com/1172477 https://bugzilla.suse.com/1173336 https://bugzilla.suse.com/1174011

1 0

openSUSE-RU-2020:1073-1: important: Recommended update for efivar
by maintenance＠opensuse.org 26 Jul '20

26 Jul '20

openSUSE Recommended Update: Recommended update for efivar ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1073-1 Rating: important References: #1100077 #1101023 #1120862 #1127544 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for efivar fixes the following issues: - fix logic that checks for UCS-2 string termination (bsc#1127544) - fix casting of IPv4 addresses - Don't require an EUI for NVMe (bsc#1100077) - Add support for ACPI Generic Container and Embedded Controller root nodes (bsc#1101023) - fix for compilation failures bsc#1120862 This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1073=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): efivar-37-lp152.3.3.1 efivar-debuginfo-37-lp152.3.3.1 efivar-debugsource-37-lp152.3.3.1 efivar-devel-37-lp152.3.3.1 libefivar1-37-lp152.3.3.1 libefivar1-debuginfo-37-lp152.3.3.1 References: https://bugzilla.suse.com/1100077 https://bugzilla.suse.com/1101023 https://bugzilla.suse.com/1120862 https://bugzilla.suse.com/1127544

1 0

openSUSE-RU-2020:1072-1: important: Recommended update for crmsh
by maintenance＠opensuse.org 26 Jul '20

26 Jul '20

openSUSE Recommended Update: Recommended update for crmsh ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1072-1 Rating: important References: #1166644 #1166962 #1167220 #1169581 #1170037 #1170999 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 6 recommended fixes can now be installed. Description: This update for crmsh fixes the following issues: - Fix for collecting of binary data to avoid CRC error in report. (bsc#1166962) - Implement ssh key configuration improvement to avoid security issues. (bsc#1169581, ECO-2035) - Fix for using class 'SBDManager' for sbd configuration and management. (bsc#1170037, bsc#1170999) - Fix for 'crm' resource refresh to complete. (bsc#1167220) - Update man page about completion example of 'crm' resource. (bsc#1166644) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1072=1 Package List: - openSUSE Leap 15.2 (noarch): crmsh-4.2.0+git.1594286044.7a596d12-lp152.4.3.1 crmsh-scripts-4.2.0+git.1594286044.7a596d12-lp152.4.3.1 crmsh-test-4.2.0+git.1594286044.7a596d12-lp152.4.3.1 References: https://bugzilla.suse.com/1166644 https://bugzilla.suse.com/1166962 https://bugzilla.suse.com/1167220 https://bugzilla.suse.com/1169581 https://bugzilla.suse.com/1170037 https://bugzilla.suse.com/1170999

1 0

openSUSE-RU-2020:1069-1: important: Recommended update for efivar
by maintenance＠opensuse.org 26 Jul '20

26 Jul '20

openSUSE Recommended Update: Recommended update for efivar ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1069-1 Rating: important References: #1100077 #1101023 #1120862 #1127544 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for efivar fixes the following issues: - fix logic that checks for UCS-2 string termination (bsc#1127544) - fix casting of IPv4 addresses - Don't require an EUI for NVMe (bsc#1100077) - Add support for ACPI Generic Container and Embedded Controller root nodes (bsc#1101023) - fix for compilation failures bsc#1120862 This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1069=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): efivar-37-lp151.2.3.1 efivar-debuginfo-37-lp151.2.3.1 efivar-debugsource-37-lp151.2.3.1 efivar-devel-37-lp151.2.3.1 libefivar1-37-lp151.2.3.1 libefivar1-debuginfo-37-lp151.2.3.1 References: https://bugzilla.suse.com/1100077 https://bugzilla.suse.com/1101023 https://bugzilla.suse.com/1120862 https://bugzilla.suse.com/1127544

1 0

openSUSE-RU-2020:1077-1: Recommended update for go1.9
by maintenance＠opensuse.org 26 Jul '20

26 Jul '20

openSUSE Recommended Update: Recommended update for go1.9 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1077-1 Rating: low References: #1169832 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for go1.9 fixes the following issues: - Fix for an issue when installing on Raspberry Pi causes illegal instruction due to unproper ARM arch set. (bsc#1169832) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1077=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): go1.9-1.9.7-lp151.2.8.1 go1.9-doc-1.9.7-lp151.2.8.1 - openSUSE Leap 15.1 (x86_64): go1.9-race-1.9.7-lp151.2.8.1 References: https://bugzilla.suse.com/1169832

1 0

openSUSE-SU-2020:1064-1: important: Security update for webkit2gtk3
by opensuse-security＠opensuse.org 26 Jul '20

26 Jul '20

openSUSE Security Update: Security update for webkit2gtk3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1064-1 Rating: important References: #1173998 Cross-References: CVE-2020-13753 CVE-2020-9802 CVE-2020-9803 CVE-2020-9805 CVE-2020-9806 CVE-2020-9807 CVE-2020-9843 CVE-2020-9850 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 8 vulnerabilities is now available. Description: This update for webkit2gtk3 fixes the following issues: - Update to version 2.28.3 (bsc#1173998): + Enable kinetic scrolling with async scrolling. + Fix web process hangs on large GitHub pages. + Bubblewrap sandbox should not attempt to bind empty paths. + Fix threading issues in the media player. + Fix several crashes and rendering issues. + Security fixes: CVE-2020-9802, CVE-2020-9803, CVE-2020-9805, CVE-2020-9806, CVE-2020-9807, CVE-2020-9843, CVE-2020-9850, CVE-2020-13753. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1064=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libjavascriptcoregtk-4_0-18-2.28.3-lp151.2.21.1 libjavascriptcoregtk-4_0-18-debuginfo-2.28.3-lp151.2.21.1 libwebkit2gtk-4_0-37-2.28.3-lp151.2.21.1 libwebkit2gtk-4_0-37-debuginfo-2.28.3-lp151.2.21.1 typelib-1_0-JavaScriptCore-4_0-2.28.3-lp151.2.21.1 typelib-1_0-WebKit2-4_0-2.28.3-lp151.2.21.1 typelib-1_0-WebKit2WebExtension-4_0-2.28.3-lp151.2.21.1 webkit-jsc-4-2.28.3-lp151.2.21.1 webkit-jsc-4-debuginfo-2.28.3-lp151.2.21.1 webkit2gtk-4_0-injected-bundles-2.28.3-lp151.2.21.1 webkit2gtk-4_0-injected-bundles-debuginfo-2.28.3-lp151.2.21.1 webkit2gtk3-debugsource-2.28.3-lp151.2.21.1 webkit2gtk3-devel-2.28.3-lp151.2.21.1 webkit2gtk3-minibrowser-2.28.3-lp151.2.21.1 webkit2gtk3-minibrowser-debuginfo-2.28.3-lp151.2.21.1 - openSUSE Leap 15.1 (x86_64): libjavascriptcoregtk-4_0-18-32bit-2.28.3-lp151.2.21.1 libjavascriptcoregtk-4_0-18-32bit-debuginfo-2.28.3-lp151.2.21.1 libwebkit2gtk-4_0-37-32bit-2.28.3-lp151.2.21.1 libwebkit2gtk-4_0-37-32bit-debuginfo-2.28.3-lp151.2.21.1 - openSUSE Leap 15.1 (noarch): libwebkit2gtk3-lang-2.28.3-lp151.2.21.1 References: https://www.suse.com/security/cve/CVE-2020-13753.html https://www.suse.com/security/cve/CVE-2020-9802.html https://www.suse.com/security/cve/CVE-2020-9803.html https://www.suse.com/security/cve/CVE-2020-9805.html https://www.suse.com/security/cve/CVE-2020-9806.html https://www.suse.com/security/cve/CVE-2020-9807.html https://www.suse.com/security/cve/CVE-2020-9843.html https://www.suse.com/security/cve/CVE-2020-9850.html https://bugzilla.suse.com/1173998

1 0

openSUSE-SU-2020:1071-1: moderate: Security update for vino
by opensuse-security＠opensuse.org 26 Jul '20

26 Jul '20

openSUSE Security Update: Security update for vino ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1071-1 Rating: moderate References: #1155419 Cross-References: CVE-2019-15681 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for vino fixes the following issues: - CVE-2019-15681: Fixed a memory leak which could have allowed to a remote attacker to read stack memory (bsc#1155419). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1071=1 Package List: - openSUSE Leap 15.1 (x86_64): vino-3.22.0-lp151.4.3.1 vino-debuginfo-3.22.0-lp151.4.3.1 vino-debugsource-3.22.0-lp151.4.3.1 - openSUSE Leap 15.1 (noarch): vino-lang-3.22.0-lp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2019-15681.html https://bugzilla.suse.com/1155419

1 0

openSUSE-SU-2020:1063-1: important: Security update for tomcat
by opensuse-security＠opensuse.org 26 Jul '20

26 Jul '20

openSUSE Security Update: Security update for tomcat ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1063-1 Rating: important References: #1173389 Cross-References: CVE-2020-11996 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for tomcat fixes the following issues: Tomcat was updated to 9.0.36 See changelog at - CVE-2020-11996: Fixed an issue which by sending a specially crafted sequence of HTTP/2 requests could have triggered high CPU usage for several seconds making potentially the server unresponsive (bsc#1173389). This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1063=1 Package List: - openSUSE Leap 15.2 (noarch): tomcat-9.0.36-lp152.2.3.1 tomcat-admin-webapps-9.0.36-lp152.2.3.1 tomcat-docs-webapp-9.0.36-lp152.2.3.1 tomcat-el-3_0-api-9.0.36-lp152.2.3.1 tomcat-embed-9.0.36-lp152.2.3.1 tomcat-javadoc-9.0.36-lp152.2.3.1 tomcat-jsp-2_3-api-9.0.36-lp152.2.3.1 tomcat-jsvc-9.0.36-lp152.2.3.1 tomcat-lib-9.0.36-lp152.2.3.1 tomcat-servlet-4_0-api-9.0.36-lp152.2.3.1 tomcat-webapps-9.0.36-lp152.2.3.1 References: https://www.suse.com/security/cve/CVE-2020-11996.html https://bugzilla.suse.com/1173389

1 0

openSUSE-RU-2020:1068-1: moderate: Recommended update for dracut
by maintenance＠opensuse.org 26 Jul '20

26 Jul '20

openSUSE Recommended Update: Recommended update for dracut ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1068-1 Rating: moderate References: #1172807 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for dracut fixes the following issues: - PXE boot process times out (bsc#1172807) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1068=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): dracut-044.2-lp151.2.24.1 dracut-debuginfo-044.2-lp151.2.24.1 dracut-debugsource-044.2-lp151.2.24.1 dracut-fips-044.2-lp151.2.24.1 dracut-ima-044.2-lp151.2.24.1 dracut-tools-044.2-lp151.2.24.1 References: https://bugzilla.suse.com/1172807

1 0

openSUSE-RU-2020:1070-1: moderate: Recommended update for python-importlib_resources
by maintenance＠opensuse.org 26 Jul '20

26 Jul '20

openSUSE Recommended Update: Recommended update for python-importlib_resources ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1070-1 Rating: moderate References: #1172933 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-importlib_resources fixes the following issues: Update from version 1.0.2 to 1.1.0 (jsc#ECO-2153, bsc#1172933) - Add support for retrieving resources from subdirectories of packages through the new files() function, which returns a Traversable object with joinpath and read_* interfaces matching those of pathlib.Path objects. This new function supersedes all of the previous functionality as it provides a more general-purpose access to a package’s resources. - With this function, subdirectories are supported. - The documentation has been updated to reflect that this function is now the preferred interface for loading package resources. It does not, however, support resources from arbitrary loaders. It currently only supports resources from file system path and zipfile packages (a consequence of the ResourceReader interface only operating on Python packages). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1070=1 Package List: - openSUSE Leap 15.1 (noarch): python2-importlib_resources-1.1.0-lp151.5.1 python3-importlib_resources-1.1.0-lp151.5.1 References: https://bugzilla.suse.com/1172933

1 0

openSUSE-RU-2020:1078-1: moderate: Recommended update for pacemaker
by maintenance＠opensuse.org 26 Jul '20

26 Jul '20

openSUSE Recommended Update: Recommended update for pacemaker ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1078-1 Rating: moderate References: #1171372 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for pacemaker fixes the following issues: - Fixes handling of fence-agents through its parameters in pacemaker (bsc#1171372) - Implement priority fencing delay to make a coordinated, successful fencing in case of 'split-brain'. (jsc#ECO-1611, jsc#SLE-12237) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1078=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libpacemaker-devel-2.0.1+20190417.13d370ca9-lp151.2.12.1 libpacemaker3-2.0.1+20190417.13d370ca9-lp151.2.12.1 libpacemaker3-debuginfo-2.0.1+20190417.13d370ca9-lp151.2.12.1 pacemaker-2.0.1+20190417.13d370ca9-lp151.2.12.1 pacemaker-cli-2.0.1+20190417.13d370ca9-lp151.2.12.1 pacemaker-cli-debuginfo-2.0.1+20190417.13d370ca9-lp151.2.12.1 pacemaker-debuginfo-2.0.1+20190417.13d370ca9-lp151.2.12.1 pacemaker-debugsource-2.0.1+20190417.13d370ca9-lp151.2.12.1 pacemaker-remote-2.0.1+20190417.13d370ca9-lp151.2.12.1 pacemaker-remote-debuginfo-2.0.1+20190417.13d370ca9-lp151.2.12.1 - openSUSE Leap 15.1 (noarch): pacemaker-cts-2.0.1+20190417.13d370ca9-lp151.2.12.1 References: https://bugzilla.suse.com/1171372

1 0

openSUSE-SU-2020:1062-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 26 Jul '20

26 Jul '20

openSUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1062-1 Rating: important References: #1152472 #1152489 #1153274 #1154353 #1155518 #1155798 #1156395 #1158983 #1162702 #1167773 #1169094 #1170284 #1170617 #1171150 #1171529 #1171530 #1171732 #1172344 #1172543 #1172687 #1172871 #1173284 #1173514 #1173552 #1173573 #1173625 #1173746 #1173776 #1173817 #1173818 #1173820 #1173822 #1173823 #1173824 #1173825 #1173826 #1173827 #1173828 #1173830 #1173831 #1173832 #1173833 #1173834 #1173836 #1173837 #1173838 #1173839 #1173841 #1173843 #1173844 #1173845 #1173847 #1173860 #1173894 #1174018 #1174244 #1174345 Cross-References: CVE-2020-12771 CVE-2020-15393 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves two vulnerabilities and has 55 fixes is now available. Description: The openSUSE Leap 15.2 was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-15393: usbtest_disconnect in drivers/usb/misc/usbtest.c had a memory leak, aka CID-28ebeb8db770 (bnc#1173514). - CVE-2020-12771: btree_gc_coalesce in drivers/md/bcache/btree.c had a deadlock if a coalescing operation fails (bnc#1171732). The following non-security bugs were fixed: - ACPI: configfs: Disallow loading ACPI tables when locked down (git-fixes). - ACPI: sysfs: Fix pm_profile_attr type (git-fixes). - aio: fix async fsync creds (bsc#1173828). - ALSA: hda: Add NVIDIA codec IDs 9a & 9d through a0 to patch table (git-fixes). - ALSA: hda/hdmi: fix failures at PCM open on Intel ICL and later (git-fixes). - ALSA: hda/hdmi: improve debug traces for stream lookups (git-fixes). - ALSA: hda - let hs_mic be picked ahead of hp_mic (git-fixes). - ALSA: hda/realtek: Add mute LED and micmute LED support for HP systems (git-fixes). - ALSA: hda/realtek - Add quirk for MSI GE63 laptop (git-fixes). - ALSA: hda/realtek - Enable audio jacks of Acer vCopperbox with ALC269VC (git-fixes). - ALSA: hda/realtek: Enable headset mic of Acer C20-820 with ALC269VC (git-fixes). - ALSA: hda/realtek: Enable headset mic of Acer Veriton N4660G with ALC269VC (git-fixes). - ALSA: hda/realtek - Fix Lenovo Thinkpad X1 Carbon 7th quirk subdevice id (git-fixes). - ALSA: isa/wavefront: prevent out of bounds write in ioctl (git-fixes). - ALSA: opl3: fix infoleak in opl3 (git-fixes). - ALSA: usb-audio: Add implicit feedback quirk for RTX6001 (git-fixes). - ALSA: usb-audio: Add implicit feedback quirk for SSL2+ (git-fixes). - ALSA: usb-audio: add quirk for Denon DCD-1500RE (git-fixes). - ALSA: usb-audio: add quirk for MacroSilicon MS2109 (git-fixes). - ALSA: usb-audio: add quirk for Samsung USBC Headset (AKG) (git-fixes). - ALSA: usb-audio: Fix OOB access of mixer element list (git-fixes). - ALSA: usb-audio: Fix packet size calculation (bsc#1173847). - ALSA: usb-audio: Fix potential use-after-free of streams (git-fixes). - ALSA: usb-audio: Replace s/frame/packet/ where appropriate (git-fixes). - amdgpu: a NULL ->mm does not mean a thread is a kthread (git-fixes). - ASoC: core: only convert non DPCM link to DPCM link (git-fixes). - ASoC: davinci-mcasp: Fix dma_chan refcnt leak when getting dma type (git-fixes). - ASoC: fsl_asrc_dma: Fix dma_chan leak when config DMA channel failed (git-fixes). - ASoC: fsl_ssi: Fix bclk calculation for mono channel (git-fixes). - ASoC: Intel: bytcr_rt5640: Add quirk for Toshiba Encore WT8-A tablet (git-fixes). - ASoC: max98373: reorder max98373_reset() in resume (git-fixes). - ASoc: q6afe: add support to get port direction (git-fixes). - ASoC: q6asm: handle EOS correctly (git-fixes). - ASoC: qcom: q6asm-dai: kCFI fix (git-fixes). - ASoC: rockchip: Fix a reference count leak (git-fixes). - ASoC: SOF: Do nothing when DSP PM callbacks are not set (git-fixes). - ASoC: SOF: nocodec: conditionally set dpcm_capture/dpcm_playback flags (git-fixes). - ASoC: tegra: tegra_wm8903: Support nvidia, headset property (git-fixes). - ASoC: ti: omap-mcbsp: Fix an error handling path in 'asoc_mcbsp_probe()' (git-fixes). - ata/libata: Fix usage of page address by page_address in ata_scsi_mode_select_xlat function (git-fixes). - ath10k: fix kernel null pointer dereference (git-fixes). - ath10k: Fix the race condition in firmware dump work queue (git-fixes). - b43: Fix connection problem with WPA3 (git-fixes). - b43_legacy: Fix connection problem with WPA3 (git-fixes). - backlight: lp855x: Ensure regulators are disabled on probe failure (git-fixes). - batman-adv: Revert "disable ethtool link speed detection when auto negotiation off" (git-fixes). - bdev: fix bdev inode reference count disbalance regression (bsc#1174244) - block/bio-integrity: do not free 'buf' if bio_integrity_add_page() failed (bsc#1173817). - block: Fix use-after-free in blkdev_get() (bsc#1173834). - block: nr_sects_write(): Disable preemption on seqcount write (bsc#1173818). - Bluetooth: Add SCO fallback for invalid LMP parameters error (git-fixes). - Bluetooth: btbcm: Add 2 missing models to subver tables (git-fixes). - bnxt_en: Fix AER reset logic on 57500 chips (bsc#1171150). - bnxt_en: fix firmware message length endianness (bsc#1173894). - bnxt_en: Fix return code to "flash_device" (bsc#1173894). - bnxt_en: Re-enable SRIOV during resume (jsc#SLE-8371 bsc#1153274). - bnxt_en: Return from timer if interface is not in open state (jsc#SLE-8371 bsc#1153274). - bnxt_en: Simplify bnxt_resume() (jsc#SLE-8371 bsc#1153274). - bpf: Document optval > PAGE_SIZE behavior for sockopt hooks (bsc#1155518). - bpf: Do not return EINVAL from {get,set}sockopt when optlen > PAGE_SIZE (bsc#1155518). - bpf: Fix an error code in check_btf_func() (bsc#1154353). - bpf: Restrict bpf_trace_printk()'s %s usage and add %pks, %pus specifier (bsc#1172344). - bpf, xdp, samples: Fix null pointer dereference in *_user code (bsc#1155518). - brcmfmac: expose RPi firmware config files through modinfo (bsc#1169094). - bus: ti-sysc: Ignore clockactivity unless specified as a quirk (git-fixes). - carl9170: remove P2P_GO support (git-fixes). - cdc-acm: Add DISABLE_ECHO quirk for Microchip/SMSC chip (git-fixes). - clk: qcom: msm8916: Fix the address location of pll->config_reg (git-fixes). - clk: samsung: exynos5433: Add IGNORE_UNUSED flag to sclk_i2s1 (git-fixes). - clk: sifive: allocate sufficient memory for struct __prci_data (git-fixes). - clk: ti: composite: fix memory leak (git-fixes). - clk: zynqmp: fix memory leak in zynqmp_register_clocks (git-fixes). - clocksource: dw_apb_timer: Make CPU-affiliation being optional (git-fixes). - cpufreq: Fix up cpufreq_boost_set_sw() (git-fixes). - cpufreq: intel_pstate: Only mention the BIOS disabling turbo mode once (git-fixes). - cpufreq: powernv: Fix frame-size-overflow in powernv_cpufreq_work_fn (git-fixes). - cpuidle: Fix three reference count leaks (git-fixes). - crypto: algif_skcipher - Cap recv SG list at ctx->used (git-fixes). - crypto - Avoid free() namespace collision (git-fixes). - Crypto/chcr: fix for ccm(aes) failed test (git-fixes). - crypto: omap-sham - add proper load balancing support for multicore (git-fixes). - debugfs: Check module state before warning in {full/open}_proxy_open() (bsc#1173746). - devlink: fix return value after hitting end in region read (networking-stable-20_05_12). - devmap: Use bpf_map_area_alloc() for allocating hash buckets (bsc#1154353). - dm writecache: reject asynchronous pmem devices (bsc#1156395). - dpaa2-eth: prevent array underflow in update_cls_rule() (networking-stable-20_05_16). - dpaa2-eth: properly handle buffer size restrictions (networking-stable-20_05_16). - dpaa_eth: fix usage as DSA master, try 3 (networking-stable-20_05_27). - drivers: base: Fix NULL pointer exception in __platform_driver_probe() if a driver developer is foolish (git-fixes). - Drivers: hv: Change flag to write log level in panic msg to false (bsc#1170617). - drm: amd/display: fix Kconfig help text (bsc#1152489) * context changes - drm/amd/display: Revalidate bandwidth before commiting DC updates (git-fixes). - drm/amd: fix potential memleak in err branch (git-fixes). - drm/amdgpu: add fw release for sdma v5_0 (git-fixes). - drm/amdgpu: drop redundant cg/pg ungate on runpm enter (git-fixes). - drm/amdgpu: fix gfx hang during suspend with video playback (v2) (git-fixes). - drm/amdgpu: fix the hw hang during perform system reboot and reset (git-fixes). - drm/amdgpu: Init data to avoid oops while reading pp_num_states (git-fixes). - drm/amdgpu: move kfd suspend after ip_suspend_phase1 (git-fixes). - drm/amdgpu: Replace invalid device ID with a valid device ID (bsc#1152472) - drm/amd/powerpay: Disable gfxoff when setting manual mode on picasso and raven (git-fixes). - drm: bridge: adv7511: Extend list of audio sample rates (git-fixes). - drm/connector: notify userspace on hotplug after register complete (bsc#1152489) * context changes - drm/i915/gt: Do not schedule normal requests immediately along (bsc#1152489) - drm/i915/gvt: Fix two CFL MMIO handling caused by regression. (bsc#1152489) - drm/i915/gvt: Fix two CFL MMIO handling caused by regression (git-fixes). - drm/i915/icl+: Fix hotplug interrupt disabling after storm detection (bsc#1152489) - drm/msm: Check for powered down HW in the devfreq callbacks (bsc#1152489) - drm/msm/dpu: fix error return code in dpu_encoder_init (bsc#1152489) - drm/msm/dpu: fix error return code in dpu_encoder_init (git-fixes). - drm/msm/mdp5: Fix mdp5_init error path for failed mdp5_kms allocation (git-fixes). - drm/nouveau/disp/gm200-: fix NV_PDISP_SOR_HDMI2_CTRL(n) selection (git-fixes). - drm/qxl: Use correct notify port address when creating cursor ring (bsc#1152472) - drm/radeon: fix fb_div check in ni_init_smc_spll_table() (bsc#1152472) - drm: rcar-du: Fix build error (bsc#1152472) - drm: sun4i: hdmi: Remove extra HPD polling (bsc#1152489) - drm: sun4i: hdmi: Remove extra HPD polling (git-fixes). - e1000: Distribute switch variables for initialization (git-fixes). - e1000e: Relax condition to trigger reset for ME workaround (git-fixes). - ext4: avoid utf8_strncasecmp() with unstable name (bsc#1173843). - ext4: fix error pointer dereference (bsc#1173837). - ext4: fix EXT_MAX_EXTENT/INDEX to check for zeroed eh_max (bsc#1173836). - ext4: fix partial cluster initialization when splitting extent (bsc#1173839). - ext4: fix race between ext4_sync_parent() and rename() (bsc#1173838). - ext4, jbd2: ensure panic by fix a race between jbd2 abort and ext4 error handlers (bsc#1173833). - ext4: stop overwrite the errcode in ext4_setup_super (bsc#1173841). - fat: do not allow to mount if the FAT length == 0 (bsc#1173831). - Fix boot crash with MD (bsc#1173860) - fix multiplication overflow in copy_fdtable() (bsc#1173825). - fork: prevent accidental access to clone3 features (bsc#1174018). - fq_codel: fix TCA_FQ_CODEL_DROP_BATCH_SIZE sanity checks (networking-stable-20_05_12). - geneve: allow changing DF behavior after creation (git-fixes). - geneve: change from tx_error to tx_dropped on missing metadata (git-fixes). - gfs2: fix glock reference problem in gfs2_trans_remove_revoke (bsc#1173823). - gfs2: Multi-block allocations in gfs2_page_mkwrite (bsc#1173822). - gpio: pca953x: fix handling of automatic address incrementing (git-fixes). - HID: Add quirks for Trust Panora Graphic Tablet (git-fixes). - hinic: fix a bug of ndo_stop (networking-stable-20_05_16). - hinic: fix wrong para of wait_for_completion_timeout (networking-stable-20_05_16). - hv_netvsc: Fix netvsc_start_xmit's return type (git-fixes). - hwmon: (acpi_power_meter) Fix potential memory leak in acpi_power_meter_add() (git-fixes). - hwmon: (k10temp) Add AMD family 17h model 60h PCI match (git-fixes). - hwmon: (max6697) Make sure the OVERT mask is set correctly (git-fixes). - hwmon: (pmbus) fix a typo in Kconfig SENSORS_IR35221 option (git-fixes). - i2c: algo-pca: Add 0x78 as SCL stuck low status for PCA9665 (git-fixes). - i2c: core: check returned size of emulated smbus block read (git-fixes). - i2c: fsi: Fix the port number field in status register (git-fixes). - i2c: mlxcpld: check correct size of maximum RECV_LEN packet (git-fixes). - i2c: piix4: Detect secondary SMBus controller on AMD AM4 chipsets (git-fixes). - i2c: pxa: clear all master action bits in i2c_pxa_stop_message() (git-fixes). - i2c: pxa: fix i2c_pxa_scream_blue_murder() debug output (git-fixes). - IB/rdmavt: Free kernel completion queue when done (bsc#1173625). - iio: bmp280: fix compensation of humidity (git-fixes). - input: i8042 - Remove special PowerPC handling (git-fixes). - ionic: add pcie_print_link_status (bsc#1167773). - ionic: export features for vlans to use (bsc#1167773). - ionic: no link check while resetting queues (bsc#1167773). - ionic: remove support for mgmt device (bsc#1167773). - ionic: tame the watchdog timer on reconfig (bsc#1167773). - ionic: wait on queue start until after IFF_UP (bsc#1167773). - io_uring: use kvfree() in io_sqe_buffer_register() (bsc#1173832). - ipmi: use vzalloc instead of kmalloc for user creation (git-fixes). - iwlwifi: mvm: fix aux station leak (git-fixes). - ixgbe: do not check firmware errors (bsc#1170284). - jbd2: avoid leaking transaction credits when unreserving handle (bsc#1173845). - jbd2: Preserve kABI when adding j_abort_mutex (bsc#1173833). - kABI fixup mtk-vpu: avoid unaligned access to DTCM buffer (git-fixes). - kabi: hv: prevent struct device_node to become defined (bsc#1172871). - kABI: protect struct fib_dump_filter (kabi). - kABI: protect struct mlx5_cmd_work_ent (kabi). - libceph: do not omit recovery_deletes in target_copy() (git-fixes). - loop: replace kill_bdev with invalidate_bdev (bsc#1173820). - media: dvbdev: Fix tuner->demod media controller link (git-fixes). - media: dvbsky: add support for eyeTV Geniatech T2 lite (bsc#1173776). - media: dvbsky: add support for Mygica T230C v2 (bsc#1173776). - media: imx: imx7-mipi-csis: Cleanup and fix subdev pad format handling (git-fixes). - media: mtk-vpu: avoid unaligned access to DTCM buffer (git-fixes). - media: ov5640: fix use of destroyed mutex (git-fixes). - media: si2157: Better check for running tuner in init (git-fixes). - media: si2168: add support for Mygica T230C v2 (bsc#1173776). - media: staging: imgu: do not hold spinlock during freeing mmu page table (git-fixes). - media: staging/intel-ipu3: Implement lock for stream on/off operations (git-fixes). - media: vicodec: Fix error codes in probe function (git-fixes). - mfd: wm8994: Fix driver operation if loaded as modules (git-fixes). - mlxsw: spectrum_acl_tcam: Position vchunk in a vregion list properly (networking-stable-20_05_12). - mmc: sdhci-msm: Set SDHCI_QUIRK_MULTIBLOCK_READ_ACMD12 quirk (git-fixes). - mmc: via-sdmmc: Respect the cmd->busy_timeout from the mmc core (git-fixes). - mm: fix NUMA node file count error in replace_page_cache() (bsc#1173844). - mm/memory_hotplug: refrain from adding memory into an impossible node (bsc#1173552). - mvpp2: remove module bugfix (bsc#1154353). - namei: only return -ECHILD from follow_dotdot_rcu() (bsc#1173824). - neigh: send protocol value in neighbor create notification (networking-stable-20_05_12). - net: core: device_rename: Use rwsem instead of a seqcount (bsc#1162702). - net: do not return invalid table id error when we fall back to PF_UNSPEC (networking-stable-20_05_27). - net: dsa: Do not leave DSA master with NULL netdev_ops (networking-stable-20_05_12). - net: dsa: loop: Add module soft dependency (networking-stable-20_05_16). - net: dsa: mt7530: fix roaming from DSA user ports (networking-stable-20_05_27). - net: ethernet: ti: cpsw: fix ASSERT_RTNL() warning during suspend (networking-stable-20_05_27). - net: fix a potential recursive NETDEV_FEAT_CHANGE (networking-stable-20_05_16). - __netif_receive_skb_core: pass skb by reference (networking-stable-20_05_27). - net: inet_csk: Fix so_reuseport bind-address cache in tb->fast* (networking-stable-20_05_27). - net: ipip: fix wrong address family in init error path (networking-stable-20_05_27). - net: macb: fix an issue about leak related system resources (networking-stable-20_05_12). - net: macsec: preserve ingress frame ordering (networking-stable-20_05_12). - net/mlx4_core: Fix use of ENOSPC around mlx4_counter_alloc() (networking-stable-20_05_12). - net/mlx5: Add command entry handling completion (networking-stable-20_05_27). - net/mlx5: Disable reload while removing the device (jsc#SLE-8464). - net/mlx5: DR, Fix freeing in dr_create_rc_qp() (jsc#SLE-8464). - net/mlx5e: Fix inner tirs handling (networking-stable-20_05_27). - net/mlx5e: kTLS, Destroy key object after destroying the TIS (networking-stable-20_05_27). - net/mlx5e: Update netdev txq on completions during closure (networking-stable-20_05_27). - net/mlx5: Fix command entry leak in Internal Error State (networking-stable-20_05_12). - net/mlx5: Fix error flow in case of function_setup failure (networking-stable-20_05_27). - net/mlx5: Fix forced completion access non initialized command entry (networking-stable-20_05_12). - net/mlx5: Fix memory leak in mlx5_events_init (networking-stable-20_05_27). - net: mvpp2: cls: Prevent buffer overflow in mvpp2_ethtool_cls_rule_del() (networking-stable-20_05_12). - net: mvpp2: fix RX hashing for non-10G ports (networking-stable-20_05_27). - net: mvpp2: prevent buffer overflow in mvpp22_rss_ctx() (networking-stable-20_05_12). - net: nlmsg_cancel() if put fails for nhmsg (networking-stable-20_05_27). - net: phy: fix aneg restart in phy_ethtool_set_eee (networking-stable-20_05_16). - netprio_cgroup: Fix unlimited memory leak of v2 cgroups (networking-stable-20_05_16). - net: qrtr: Fix passing invalid reference to qrtr_local_enqueue() (networking-stable-20_05_27). - net sched: fix reporting the first-time use timestamp (networking-stable-20_05_27). - net_sched: sch_skbprio: add message validation to skbprio_change() (networking-stable-20_05_12). - net/smc: tolerate future SMCD versions (bsc#1172543 LTC#186069). - net: stmmac: fix num_por initialization (networking-stable-20_05_16). - net: stricter validation of untrusted gso packets (networking-stable-20_05_12). - net: tc35815: Fix phydev supported/advertising mask (networking-stable-20_05_12). - net: tcp: fix rx timestamp behavior for tcp_recvmsg (networking-stable-20_05_16). - net/tls: fix race condition causing kernel panic (networking-stable-20_05_27). - net/tls: Fix sk_psock refcnt leak in bpf_exec_tx_verdict() (networking-stable-20_05_12). - net/tls: Fix sk_psock refcnt leak when in tls_data_ready() (networking-stable-20_05_12). - net: usb: qmi_wwan: add support for DW5816e (networking-stable-20_05_12). - nexthop: Fix attribute checking for groups (networking-stable-20_05_27). - nfp: abm: fix a memory leak bug (networking-stable-20_05_12). - nfp: abm: fix error return code in nfp_abm_vnic_alloc() (networking-stable-20_05_16). - nfsd4: fix nfsdfs reference count loop (git-fixes). - nfsd: apply umask on fs without ACL support (git-fixes). - nfsd: fix nfsdfs inode reference count leak (git-fixes). - NFSv4 fix CLOSE not waiting for direct IO compeletion (git-fixes). - PCI: aardvark: Do not blindly enable ASPM L0s and do not write to read-only register (git-fixes). - PCI: Add ACS quirk for Intel Root Complex Integrated Endpoints (git-fixes). - PCI: Add Loongson vendor ID (git-fixes). - PCI/ASPM: Allow ASPM on links to PCIe-to-PCI/PCI-X Bridges (git-fixes). - PCI: Avoid FLR for AMD Matisse HD Audio & USB 3.0 (git-fixes). - PCI: Avoid FLR for AMD Starship USB 3.0 (git-fixes). - PCI: Do not disable decoding when mmio_always_on is set (git-fixes). - PCI: dwc: Fix inner MSI IRQ domain registration (git-fixes). - PCI: hv: Change pci_protocol_version to per-hbus (bsc#1172871). - PCI: hv: Decouple the func definition in hv_dr_state from VSP message (bsc#1172871). - PCI: hv: Fix the PCI HyperV probe failure path to release resource properly (bsc#1172871). - PCI: hv: Introduce hv_msi_entry (bsc#1172871). - PCI: hv: Move hypercall related definitions into tlfs header (bsc#1172871). - PCI: hv: Move retarget related structures into tlfs header (bsc#1172871). - PCI: hv: Reorganize the code in preparation of hibernation (bsc#1172871). - PCI: hv: Retry PCI bus D0 entry on invalid device state (bsc#1172871). - PCI: pci-bridge-emul: Fix PCIe bit conflicts (git-fixes). - PCI: vmd: Add device id for VMD device 8086:9A0B (git-fixes). - pinctrl: rockchip: fix memleak in rockchip_dt_node_to_map (git-fixes). - pinctrl: tegra: Use noirq suspend/resume callbacks (git-fixes). - platform/x86: asus_wmi: Reserve more space for struct bias_args (git-fixes). - platform/x86: hp-wmi: Convert simple_strtoul() to kstrtou32() (git-fixes). - platform/x86: intel-hid: Add a quirk to support HP Spectre X2 (2015) (git-fixes). - pNFS/flexfiles: Fix list corruption if the mirror count changes (git-fixes). - pppoe: only process PADT targeted at local interfaces (networking-stable-20_05_16). - proc: Use new_inode not new_inode_pseudo (bsc#1173830). - pwm: img: Call pm_runtime_put() in pm_runtime_get_sync() failed case (git-fixes). - RDMA/core: Check that type_attrs is not NULL prior access (jsc#SLE-8449). - regualtor: pfuze100: correct sw1a/sw2 on pfuze3000 (git-fixes). - remoteproc: qcom_q6v5_mss: map/unmap mpss segments before/after use (git-fixes). - Revert commit e918e570415c ("tpm_tis: Remove the HID IFX0102") (git-fixes). - Revert "i2c: tegra: Fix suspending in active runtime PM state" (git-fixes). - Revert "ipv6: add mtu lock check in __ip6_rt_update_pmtu" (networking-stable-20_05_16). - ring-buffer: Zero out time extend if it is nested and not absolute (git-fixes). - sata_rcar: handle pm_runtime_get_sync failure cases (git-fixes). - sch_choke: avoid potential panic in choke_reset() (networking-stable-20_05_12). - sched: Fix loadavg accounting race (bnc#1155798 (CPU scheduler functional and performance backports)). - sched: Fix race against ptrace_freeze_trace() (bsc#1174345). - sch_sfq: validate silly quantum values (networking-stable-20_05_12). - scsi: lpfc: Add an internal trace log buffer (bsc#1172687 bsc#1171530). - scsi: lpfc: Add blk_io_poll support for latency improvment (bsc#1172687 bsc#1171530). - scsi: lpfc: Add support to display if adapter dumps are available (bsc#1172687 bsc#1171530). - scsi: lpfc: Allow applications to issue Common Set Features mailbox command (bsc#1172687 bsc#1171530). - scsi: lpfc: Fix inconsistent indenting (bsc#1172687 bsc#1171530). - scsi: lpfc: Fix interrupt assignments when multiple vectors are supported on same CPU (bsc#1172687 bsc#1171530). - scsi: lpfc: Fix kdump hang on PPC (bsc#1172687 bsc#1171530). - scsi: lpfc: Fix language in 0373 message to reflect non-error message (bsc#1172687 bsc#1171530). - scsi: lpfc: Fix less-than-zero comparison of unsigned value (bsc#1172687 bsc#1171530). - scsi: lpfc: Fix missing MDS functionality (bsc#1172687 bsc#1171530). - scsi: lpfc: Fix NVMe rport deregister and registration during ADISC (bsc#1172687 bsc#1171530). - scsi: lpfc: Fix oops due to overrun when reading SLI3 data (bsc#1172687 bsc#1171530). - scsi: lpfc: Fix shost refcount mismatch when deleting vport (bsc#1172687 bsc#1171530). - scsi: lpfc: Fix stack trace seen while setting rrq active (bsc#1172687 bsc#1171530). - scsi: lpfc: Fix unused assignment in lpfc_sli4_bsg_link_diag_test (bsc#1172687 bsc#1171530). - scsi: lpfc: Update lpfc version to 12.8.0.2 (bsc#1172687 bsc#1171530). - scsi: qla2xxx: Set NVMe status code for failed NVMe FCP request (bsc#1158983). - sctp: Do not add the shutdown timer if its already been added (networking-stable-20_05_27). - sctp: Start shutdown on association restart if in SHUTDOWN-SENT state and socket is closed (networking-stable-20_05_27). - selftests/bpf: Make sure optvals > PAGE_SIZE are bypassed (bsc#1155518). - signal: Avoid corrupting si_pid and si_uid in do_notify_parent (bsc#1171529). - slimbus: ngd: get drvdata from correct device (git-fixes). - socionext: account for napi_gro_receive never returning GRO_DROP (bsc#1154353). - spi: dw: Enable interrupts in accordance with DMA xfer mode (git-fixes). - spi: dw: Fix Rx-only DMA transfers (git-fixes). - spi: dw: Return any value retrieved from the dma_transfer callback (git-fixes). - spi: pxa2xx: Apply CS clk quirk to BXT (git-fixes). - spi: sprd: switch the sequence of setting WDG_LOAD_LOW and _HIGH (git-fixes). - Staging: rtl8723bs: prevent buffer overflow in update_sta_support_rate() (git-fixes). - sunrpc: fixed rollback in rpc_gssd_dummy_populate() (git-fixes). - SUNRPC: Properly set the @subbuf parameter of xdr_buf_subsegment() (git-fixes). - tcp: fix error recovery in tcp_zerocopy_receive() (networking-stable-20_05_16). - tcp: fix SO_RCVLOWAT hangs with fat skbs (networking-stable-20_05_16). - tg3: driver sleeps indefinitely when EEH errors exceed eeh_max_freezes (bsc#1173284). - thermal/drivers/mediatek: Fix bank number settings on mt8183 (git-fixes). - thermal/drivers/rcar_gen3: Fix undefined temperature if negative (git-fixes). - thermal/drivers/ti-soc-thermal: Avoid dereferencing ERR_PTR (git-fixes). - tipc: block BH before using dst_cache (networking-stable-20_05_27). - tipc: fix partial topology connection closure (networking-stable-20_05_12). - tpm: Fix TIS locality timeout problems (git-fixes). - tpm_tis: Remove the HID IFX0102 (git-fixes). - tracing: Fix event trigger to accept redundant spaces (git-fixes). - tunnel: Propagate ECT(1) when decapsulating as recommended by RFC6040 (networking-stable-20_05_12). - ubifs: fix wrong use of crypto_shash_descsize() (bsc#1173827). - ubifs: remove broken lazytime support (bsc#1173826). - Update patch reference tag for ACPI lockdown fix (bsc#1173573) - usb: add USB_QUIRK_DELAY_INIT for Logitech C922 (git-fixes). - usb/ehci-platform: Set PM runtime as active on resume (git-fixes). - USB: ehci: reopen solution for Synopsys HC bug (git-fixes). - usb: gadget: udc: Potential Oops in error handling code (git-fixes). - usb: host: ehci-exynos: Fix error check in exynos_ehci_probe() (git-fixes). - usb: host: ehci-platform: add a quirk to avoid stuck (git-fixes). - usb: host: xhci-mtk: avoid runtime suspend when removing hcd (git-fixes). - usblp: poison URBs upon disconnect (git-fixes). - usb/ohci-platform: Fix a warning when hibernating (git-fixes). - USB: ohci-sm501: Add missed iounmap() in remove (git-fixes). - usb: renesas_usbhs: getting residue from callback_result (git-fixes). - USB: serial: ch341: add basis for quirk detection (git-fixes). - usb: typec: tcpci_rt1711h: avoid screaming irq causing boot hangs (git-fixes). - usb/xhci-plat: Set PM runtime as active on resume (git-fixes). - video: vt8500lcdfb: fix fallthrough warning (bsc#1152489) - virtio_net: fix lockdep warning on 32 bit (networking-stable-20_05_16). - watchdog: da9062: No need to ping manually before setting timeout (git-fixes). - wil6210: account for napi_gro_receive never returning GRO_DROP (bsc#1154353). - wil6210: add wil_netif_rx() helper function (bsc#1154353). - wil6210: use after free in wil_netif_rx_any() (bsc#1154353). - x86/amd_nb: Add AMD family 17h model 60h PCI IDs (git-fixes). - xhci: Fix enumeration issue when setting max packet size for FS devices (git-fixes). - xhci: Fix incorrect EP_STATE_MASK (git-fixes). - xhci: Poll for U0 after disabling USB2 LPM (git-fixes). - xhci: Return if xHCI does not support LPM (git-fixes). - xprtrdma: Fix handling of RDMA_ERROR replies (git-fixes). Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1062=1 Package List: - openSUSE Leap 15.2 (x86_64): kernel-debug-5.3.18-lp152.33.1 kernel-debug-debuginfo-5.3.18-lp152.33.1 kernel-debug-debugsource-5.3.18-lp152.33.1 kernel-debug-devel-5.3.18-lp152.33.1 kernel-debug-devel-debuginfo-5.3.18-lp152.33.1 kernel-default-5.3.18-lp152.33.1 kernel-default-base-5.3.18-lp152.33.1.lp152.8.4.4 kernel-default-base-rebuild-5.3.18-lp152.33.1.lp152.8.4.4 kernel-default-debuginfo-5.3.18-lp152.33.1 kernel-default-debugsource-5.3.18-lp152.33.1 kernel-default-devel-5.3.18-lp152.33.1 kernel-default-devel-debuginfo-5.3.18-lp152.33.1 kernel-kvmsmall-5.3.18-lp152.33.1 kernel-kvmsmall-debuginfo-5.3.18-lp152.33.1 kernel-kvmsmall-debugsource-5.3.18-lp152.33.1 kernel-kvmsmall-devel-5.3.18-lp152.33.1 kernel-kvmsmall-devel-debuginfo-5.3.18-lp152.33.1 kernel-obs-build-5.3.18-lp152.33.1 kernel-obs-build-debugsource-5.3.18-lp152.33.1 kernel-obs-qa-5.3.18-lp152.33.1 kernel-preempt-5.3.18-lp152.33.1 kernel-preempt-debuginfo-5.3.18-lp152.33.1 kernel-preempt-debugsource-5.3.18-lp152.33.1 kernel-preempt-devel-5.3.18-lp152.33.1 kernel-preempt-devel-debuginfo-5.3.18-lp152.33.1 kernel-syms-5.3.18-lp152.33.1 - openSUSE Leap 15.2 (noarch): kernel-devel-5.3.18-lp152.33.1 kernel-docs-5.3.18-lp152.33.1 kernel-docs-html-5.3.18-lp152.33.1 kernel-macros-5.3.18-lp152.33.1 kernel-source-5.3.18-lp152.33.1 kernel-source-vanilla-5.3.18-lp152.33.1 References: https://www.suse.com/security/cve/CVE-2020-12771.html https://www.suse.com/security/cve/CVE-2020-15393.html https://bugzilla.suse.com/1152472 https://bugzilla.suse.com/1152489 https://bugzilla.suse.com/1153274 https://bugzilla.suse.com/1154353 https://bugzilla.suse.com/1155518 https://bugzilla.suse.com/1155798 https://bugzilla.suse.com/1156395 https://bugzilla.suse.com/1158983 https://bugzilla.suse.com/1162702 https://bugzilla.suse.com/1167773 https://bugzilla.suse.com/1169094 https://bugzilla.suse.com/1170284 https://bugzilla.suse.com/1170617 https://bugzilla.suse.com/1171150 https://bugzilla.suse.com/1171529 https://bugzilla.suse.com/1171530 https://bugzilla.suse.com/1171732 https://bugzilla.suse.com/1172344 https://bugzilla.suse.com/1172543 https://bugzilla.suse.com/1172687 https://bugzilla.suse.com/1172871 https://bugzilla.suse.com/1173284 https://bugzilla.suse.com/1173514 https://bugzilla.suse.com/1173552 https://bugzilla.suse.com/1173573 https://bugzilla.suse.com/1173625 https://bugzilla.suse.com/1173746 https://bugzilla.suse.com/1173776 https://bugzilla.suse.com/1173817 https://bugzilla.suse.com/1173818 https://bugzilla.suse.com/1173820 https://bugzilla.suse.com/1173822 https://bugzilla.suse.com/1173823 https://bugzilla.suse.com/1173824 https://bugzilla.suse.com/1173825 https://bugzilla.suse.com/1173826 https://bugzilla.suse.com/1173827 https://bugzilla.suse.com/1173828 https://bugzilla.suse.com/1173830 https://bugzilla.suse.com/1173831 https://bugzilla.suse.com/1173832 https://bugzilla.suse.com/1173833 https://bugzilla.suse.com/1173834 https://bugzilla.suse.com/1173836 https://bugzilla.suse.com/1173837 https://bugzilla.suse.com/1173838 https://bugzilla.suse.com/1173839 https://bugzilla.suse.com/1173841 https://bugzilla.suse.com/1173843 https://bugzilla.suse.com/1173844 https://bugzilla.suse.com/1173845 https://bugzilla.suse.com/1173847 https://bugzilla.suse.com/1173860 https://bugzilla.suse.com/1173894 https://bugzilla.suse.com/1174018 https://bugzilla.suse.com/1174244 https://bugzilla.suse.com/1174345

1 0

openSUSE-SU-2020:1074-1: moderate: Security update for salt
by opensuse-security＠opensuse.org 26 Jul '20

26 Jul '20

openSUSE Security Update: Security update for salt ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1074-1 Rating: moderate References: #1159284 #1165572 #1167437 #1168340 #1169604 #1170104 #1170288 #1171906 #1172075 #1173072 #1174165 Cross-References: CVE-2018-15750 CVE-2018-15751 CVE-2020-11651 CVE-2020-11652 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves four vulnerabilities and has 7 fixes is now available. Description: This update for salt contains the following fixes: - Fix for TypeError in Tornado importer (bsc#1174165) - Require python3-distro only for TW (bsc#1173072) - Update to Salt version 3000: See release notes: https://docs.saltstack.com/en/latest/topics/releases/3000.html - Add docker.logout to docker execution module. (bsc#1165572) - Add option to enable/disable force refresh for zypper. - Add publish_batch to ClearFuncs exposed methods. - Adds test for zypper abbreviation fix. - Avoid segfault from "salt-api" under certain conditions of heavy load managing SSH minions. (bsc#1169604) - Avoid traceback on debug logging for swarm module. (bsc#1172075) - Batch mode now also correctly provides return value. (bsc#1168340) - Better import cache handline. - Do not make file.recurse state to fail when msgpack 0.5.4. (bsc#1167437) - Do not require vendored backports-abc. (bsc#1170288) - Fix errors from unit tests due NO_MOCK and NO_MOCK_REASON deprecation. - Fix for low rpm_lowpkg unit test. - Fix for temp folder definition in loader unit test. - Fix for unless requisite when pip is not installed. - Fix integration test failure for test_mod_del_repo_multiline_values. - Fix regression in service states with reload argument. - Fix tornado imports and missing _utils after rebasing patches. - Fix status attribute issue in aptpkg test. - Improved storage pool or network handling. - loop: fix variable names for until_no_eval. - Make "salt.ext.tornado.gen" to use "salt.ext.backports_abc" on Python 2. - Make setup.py script not to require setuptools greater than 9.1. - More robust remote port detection. - Prevent sporious "salt-api" stuck processes when managing SSH minions. because of logging deadlock. (bsc#1159284) - Python3.8 compatibility changes. - Removes unresolved merge conflict in yumpkg module. - Returns a the list of IPs filtered by the optional network list. - Revert broken changes to slspath made on Salt 3000 (saltstack/salt#56341). (bsc#1170104) - Sanitize grains loaded from roster_grains.json cache during "state.pkg". - Various virt backports from 3000.2. - zypperpkg: filter patterns that start with dot. (bsc#1171906) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1074=1 Package List: - openSUSE Leap 15.1 (noarch): salt-bash-completion-3000-lp151.5.21.1 salt-fish-completion-3000-lp151.5.21.1 salt-zsh-completion-3000-lp151.5.21.1 - openSUSE Leap 15.1 (x86_64): python2-salt-3000-lp151.5.21.1 python3-salt-3000-lp151.5.21.1 salt-3000-lp151.5.21.1 salt-api-3000-lp151.5.21.1 salt-cloud-3000-lp151.5.21.1 salt-doc-3000-lp151.5.21.1 salt-master-3000-lp151.5.21.1 salt-minion-3000-lp151.5.21.1 salt-proxy-3000-lp151.5.21.1 salt-ssh-3000-lp151.5.21.1 salt-standalone-formulas-configuration-3000-lp151.5.21.1 salt-syndic-3000-lp151.5.21.1 References: https://www.suse.com/security/cve/CVE-2018-15750.html https://www.suse.com/security/cve/CVE-2018-15751.html https://www.suse.com/security/cve/CVE-2020-11651.html https://www.suse.com/security/cve/CVE-2020-11652.html https://bugzilla.suse.com/1159284 https://bugzilla.suse.com/1165572 https://bugzilla.suse.com/1167437 https://bugzilla.suse.com/1168340 https://bugzilla.suse.com/1169604 https://bugzilla.suse.com/1170104 https://bugzilla.suse.com/1170288 https://bugzilla.suse.com/1171906 https://bugzilla.suse.com/1172075 https://bugzilla.suse.com/1173072 https://bugzilla.suse.com/1174165

1 0

openSUSE-RU-2020:1075-1: important: Recommended update for salt
by maintenance＠opensuse.org 26 Jul '20

26 Jul '20

openSUSE Recommended Update: Recommended update for salt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1075-1 Rating: important References: #1174165 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for salt fixes the following issue: - Fix for TypeError in Tornado importer (bsc#1174165) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1075=1 Package List: - openSUSE Leap 15.2 (x86_64): python2-salt-3000-lp152.3.6.1 python3-salt-3000-lp152.3.6.1 salt-3000-lp152.3.6.1 salt-api-3000-lp152.3.6.1 salt-cloud-3000-lp152.3.6.1 salt-doc-3000-lp152.3.6.1 salt-master-3000-lp152.3.6.1 salt-minion-3000-lp152.3.6.1 salt-proxy-3000-lp152.3.6.1 salt-ssh-3000-lp152.3.6.1 salt-standalone-formulas-configuration-3000-lp152.3.6.1 salt-syndic-3000-lp152.3.6.1 - openSUSE Leap 15.2 (noarch): salt-bash-completion-3000-lp152.3.6.1 salt-fish-completion-3000-lp152.3.6.1 salt-zsh-completion-3000-lp152.3.6.1 References: https://bugzilla.suse.com/1174165

1 0

openSUSE-SU-2020:1061-1: important: Security update for chromium
by opensuse-security＠opensuse.org 26 Jul '20

26 Jul '20

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1061-1 Rating: important References: #1174189 Cross-References: CVE-2020-6510 CVE-2020-6511 CVE-2020-6512 CVE-2020-6513 CVE-2020-6514 CVE-2020-6515 CVE-2020-6516 CVE-2020-6517 CVE-2020-6518 CVE-2020-6519 CVE-2020-6520 CVE-2020-6521 CVE-2020-6522 CVE-2020-6523 CVE-2020-6524 CVE-2020-6525 CVE-2020-6526 CVE-2020-6527 CVE-2020-6528 CVE-2020-6529 CVE-2020-6530 CVE-2020-6531 CVE-2020-6533 CVE-2020-6534 CVE-2020-6535 CVE-2020-6536 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes 26 vulnerabilities is now available. Description: This update for chromium fixes the following issues: - Update to 84.0.4147.89 boo#1174189: * Critical CVE-2020-6510: Heap buffer overflow in background fetch. * High CVE-2020-6511: Side-channel information leakage in content security policy. * High CVE-2020-6512: Type Confusion in V8. * High CVE-2020-6513: Heap buffer overflow in PDFium. * High CVE-2020-6514: Inappropriate implementation in WebRTC. * High CVE-2020-6515: Use after free in tab strip. * High CVE-2020-6516: Policy bypass in CORS. * High CVE-2020-6517: Heap buffer overflow in history. * Medium CVE-2020-6518: Use after free in developer tools. * Medium CVE-2020-6519: Policy bypass in CSP. * Medium CVE-2020-6520: Heap buffer overflow in Skia. * Medium CVE-2020-6521: Side-channel information leakage in autofill. * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers. * Medium CVE-2020-6523: Out of bounds write in Skia. * Medium CVE-2020-6524: Heap buffer overflow in WebAudio. * Medium CVE-2020-6525: Heap buffer overflow in Skia. * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox. * Low CVE-2020-6527: Insufficient policy enforcement in CSP. * Low CVE-2020-6528: Incorrect security UI in basic auth. * Low CVE-2020-6529: Inappropriate implementation in WebRTC. * Low CVE-2020-6530: Out of bounds memory access in developer tools. * Low CVE-2020-6531: Side-channel information leakage in scroll to text. * Low CVE-2020-6533: Type Confusion in V8. * Low CVE-2020-6534: Heap buffer overflow in WebRTC. * Low CVE-2020-6535: Insufficient data validation in WebUI. * Low CVE-2020-6536: Incorrect security UI in PWAs. - Use bundled xcb-proto as we need to generate py2 bindings - Try to fix non-wayland build for Leap builds This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1061=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 x86_64): chromedriver-84.0.4147.89-bp151.3.94.1 chromium-84.0.4147.89-bp151.3.94.1 References: https://www.suse.com/security/cve/CVE-2020-6510.html https://www.suse.com/security/cve/CVE-2020-6511.html https://www.suse.com/security/cve/CVE-2020-6512.html https://www.suse.com/security/cve/CVE-2020-6513.html https://www.suse.com/security/cve/CVE-2020-6514.html https://www.suse.com/security/cve/CVE-2020-6515.html https://www.suse.com/security/cve/CVE-2020-6516.html https://www.suse.com/security/cve/CVE-2020-6517.html https://www.suse.com/security/cve/CVE-2020-6518.html https://www.suse.com/security/cve/CVE-2020-6519.html https://www.suse.com/security/cve/CVE-2020-6520.html https://www.suse.com/security/cve/CVE-2020-6521.html https://www.suse.com/security/cve/CVE-2020-6522.html https://www.suse.com/security/cve/CVE-2020-6523.html https://www.suse.com/security/cve/CVE-2020-6524.html https://www.suse.com/security/cve/CVE-2020-6525.html https://www.suse.com/security/cve/CVE-2020-6526.html https://www.suse.com/security/cve/CVE-2020-6527.html https://www.suse.com/security/cve/CVE-2020-6528.html https://www.suse.com/security/cve/CVE-2020-6529.html https://www.suse.com/security/cve/CVE-2020-6530.html https://www.suse.com/security/cve/CVE-2020-6531.html https://www.suse.com/security/cve/CVE-2020-6533.html https://www.suse.com/security/cve/CVE-2020-6534.html https://www.suse.com/security/cve/CVE-2020-6535.html https://www.suse.com/security/cve/CVE-2020-6536.html https://bugzilla.suse.com/1174189

1 0

openSUSE-SU-2020:1060-1: moderate: Security update for cacti, cacti-spine
by opensuse-security＠opensuse.org 25 Jul '20

25 Jul '20

openSUSE Security Update: Security update for cacti, cacti-spine ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1060-1 Rating: moderate References: #1115436 #1154087 #1173090 Cross-References: CVE-2020-11022 CVE-2020-11023 CVE-2020-13625 CVE-2020-14295 Affected Products: openSUSE Leap 15.2 openSUSE Leap 15.1 SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for cacti, cacti-spine fixes the following issues: - cacti 1.2.13: * Query XSS vulnerabilities require vendor package update (CVE-2020-11022 / CVE-2020-11023) * Lack of escaping on some pages can lead to XSS exposure * Update PHPMailer to 6.1.6 (CVE-2020-13625) * SQL Injection vulnerability due to input validation failure when editing colors (CVE-2020-14295, boo#1173090) * Lack of escaping on template import can lead to XSS exposure - switch from cron to systemd timers (boo#1115436): + cacti-cron.timer + cacti-cron.service - avoid potential root escalation on systems with fs.protected_hardlinks=0 (boo#1154087): handle directory permissions in file section instead of using chown during post installation - rewrote apache configuration to get rid of .htaccess files and explicitely disable directory permissions per default (only allow a limited, well-known set of directories) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1060=1 - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1060=1 - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2020-1060=1 Package List: - openSUSE Leap 15.2 (noarch): cacti-1.2.13-lp152.2.3.1 - openSUSE Leap 15.2 (x86_64): cacti-spine-1.2.13-lp152.2.3.1 cacti-spine-debuginfo-1.2.13-lp152.2.3.1 cacti-spine-debugsource-1.2.13-lp152.2.3.1 - openSUSE Leap 15.1 (noarch): cacti-1.2.13-lp151.3.12.1 - openSUSE Leap 15.1 (x86_64): cacti-spine-1.2.13-lp151.3.12.1 cacti-spine-debuginfo-1.2.13-lp151.3.12.1 cacti-spine-debugsource-1.2.13-lp151.3.12.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): cacti-spine-1.2.13-8.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (ppc64le x86_64): cacti-spine-debuginfo-1.2.13-8.1 cacti-spine-debugsource-1.2.13-8.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): cacti-1.2.13-11.1 References: https://www.suse.com/security/cve/CVE-2020-11022.html https://www.suse.com/security/cve/CVE-2020-11023.html https://www.suse.com/security/cve/CVE-2020-13625.html https://www.suse.com/security/cve/CVE-2020-14295.html https://bugzilla.suse.com/1115436 https://bugzilla.suse.com/1154087 https://bugzilla.suse.com/1173090

1 0

openSUSE-RU-2020:1059-1: moderate: Recommended update for zypper-migration-plugin
by maintenance＠opensuse.org 25 Jul '20

25 Jul '20

openSUSE Recommended Update: Recommended update for zypper-migration-plugin ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1059-1 Rating: moderate References: #1171652 Affected Products: openSUSE Leap 15.2 openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for zypper-migration-plugin fixes the following issues: Changes in zypper-migration-plugin: - make sure all release packages are installed (boo#1171652) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1059=1 - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1059=1 Package List: - openSUSE Leap 15.2 (noarch): zypper-migration-plugin-0.12.1590748670.86b0749-lp152.2.3.1 - openSUSE Leap 15.1 (noarch): zypper-migration-plugin-0.12.1590748670.86b0749-lp151.2.6.1 References: https://bugzilla.suse.com/1171652

1 0

openSUSE-SU-2020:1060-1: moderate: Security update for cacti, cacti-spine
by opensuse-security＠opensuse.org 25 Jul '20

25 Jul '20

openSUSE Security Update: Security update for cacti, cacti-spine ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1060-1 Rating: moderate References: #1115436 #1154087 #1173090 Cross-References: CVE-2020-11022 CVE-2020-11023 CVE-2020-13625 CVE-2020-14295 Affected Products: openSUSE Leap 15.2 openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for cacti, cacti-spine fixes the following issues: - cacti 1.2.13: * Query XSS vulnerabilities require vendor package update (CVE-2020-11022 / CVE-2020-11023) * Lack of escaping on some pages can lead to XSS exposure * Update PHPMailer to 6.1.6 (CVE-2020-13625) * SQL Injection vulnerability due to input validation failure when editing colors (CVE-2020-14295, boo#1173090) * Lack of escaping on template import can lead to XSS exposure - switch from cron to systemd timers (boo#1115436): + cacti-cron.timer + cacti-cron.service - avoid potential root escalation on systems with fs.protected_hardlinks=0 (boo#1154087): handle directory permissions in file section instead of using chown during post installation - rewrote apache configuration to get rid of .htaccess files and explicitely disable directory permissions per default (only allow a limited, well-known set of directories) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1060=1 - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1060=1 Package List: - openSUSE Leap 15.2 (noarch): cacti-1.2.13-lp152.2.3.1 - openSUSE Leap 15.2 (x86_64): cacti-spine-1.2.13-lp152.2.3.1 cacti-spine-debuginfo-1.2.13-lp152.2.3.1 cacti-spine-debugsource-1.2.13-lp152.2.3.1 - openSUSE Leap 15.1 (noarch): cacti-1.2.13-lp151.3.12.1 - openSUSE Leap 15.1 (x86_64): cacti-spine-1.2.13-lp151.3.12.1 cacti-spine-debuginfo-1.2.13-lp151.3.12.1 cacti-spine-debugsource-1.2.13-lp151.3.12.1 References: https://www.suse.com/security/cve/CVE-2020-11022.html https://www.suse.com/security/cve/CVE-2020-11023.html https://www.suse.com/security/cve/CVE-2020-13625.html https://www.suse.com/security/cve/CVE-2020-14295.html https://bugzilla.suse.com/1115436 https://bugzilla.suse.com/1154087 https://bugzilla.suse.com/1173090

1 0

openSUSE-RU-2020:1058-1: moderate: Recommended update for putty
by maintenance＠opensuse.org 25 Jul '20

25 Jul '20

openSUSE Recommended Update: Recommended update for putty ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1058-1 Rating: moderate References: #1173442 Affected Products: openSUSE Leap 15.2 openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for putty fixes the following issues: putty was updated to release 0.74: * security fix: if an SSH server accepted an offer of a public key and then rejected the signature, PuTTY could access freed memory, if the key had come from an SSH agent. (boo#1173442) * Added a new configuration option to mitigate a minor information leak in SSH host key policy. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1058=1 - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1058=1 Package List: - openSUSE Leap 15.2 (x86_64): putty-0.74-lp152.2.3.1 putty-debuginfo-0.74-lp152.2.3.1 putty-debugsource-0.74-lp152.2.3.1 - openSUSE Leap 15.1 (x86_64): putty-0.74-lp151.3.9.1 putty-debuginfo-0.74-lp151.3.9.1 putty-debugsource-0.74-lp151.3.9.1 References: https://bugzilla.suse.com/1173442

1 0

openSUSE-RU-2020:1057-1: moderate: Recommended update for wxMaxima
by maintenance＠opensuse.org 24 Jul '20

24 Jul '20

openSUSE Recommended Update: Recommended update for wxMaxima ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1057-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for wxMaxima fixes the following issues: Update to version 20.06.6: * Resolved a compiling problem the last release has introduced. Changes from version 20.06.0: * Many spell corrections and bugfixes * The history sidebar now works again * TextCells with copy-alt-text caused an crash * A few additional small bugfixes * Many (really many!) big stability improvements * In sqrt(conjugate(f(x))) the horizontal lines coincided * Strings were searched for comment starts when adding line endings * Faster start-up by avoiding unneeded redraw events * A big number of performance improvements * Unfortunately one last temporary fix reduces performance again * Corrected a bug that sometimes caused parts of equations not to be displayed * As this allows to improve performance and stability C++14 is now used * Speed boost The list of anchors from the manual is now cached on disk * Updated translations. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1057=1 Package List: - openSUSE Leap 15.2 (x86_64): wxMaxima-20.06.6-lp152.2.3.1 wxMaxima-debuginfo-20.06.6-lp152.2.3.1 wxMaxima-debugsource-20.06.6-lp152.2.3.1 - openSUSE Leap 15.2 (noarch): wxMaxima-lang-20.06.6-lp152.2.3.1 References:

1 0

openSUSE-SU-2020:1056-1: important: Security update for LibVNCServer
by opensuse-security＠opensuse.org 24 Jul '20

24 Jul '20

openSUSE Security Update: Security update for LibVNCServer ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1056-1 Rating: important References: #1173477 #1173691 #1173694 #1173700 #1173701 #1173743 #1173874 #1173875 #1173876 #1173880 Cross-References: CVE-2017-18922 CVE-2018-21247 CVE-2019-20839 CVE-2019-20840 CVE-2020-14397 CVE-2020-14398 CVE-2020-14399 CVE-2020-14400 CVE-2020-14401 CVE-2020-14402 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes 10 vulnerabilities is now available. Description: This update for LibVNCServer fixes the following issues: - security update - added patches fix CVE-2018-21247 [bsc#1173874], uninitialized memory contents are vulnerable to Information leak + LibVNCServer-CVE-2018-21247.patch fix CVE-2019-20839 [bsc#1173875], buffer overflow in ConnectClientToUnixSock() + LibVNCServer-CVE-2019-20839.patch fix CVE-2019-20840 [bsc#1173876], unaligned accesses in hybiReadAndDecode can lead to denial of service + LibVNCServer-CVE-2019-20840.patch fix CVE-2020-14398 [bsc#1173880], improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c + LibVNCServer-CVE-2020-14398.patch fix CVE-2020-14397 [bsc#1173700], NULL pointer dereference in libvncserver/rfbregion.c + LibVNCServer-CVE-2020-14397.patch fix CVE-2020-14399 [bsc#1173743], Byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c. + LibVNCServer-CVE-2020-14399.patch fix CVE-2020-14400 [bsc#1173691], Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c. + LibVNCServer-CVE-2020-14400.patch fix CVE-2020-14401 [bsc#1173694], potential integer overflows in libvncserver/scale.c + LibVNCServer-CVE-2020-14401.patch fix CVE-2020-14402 [bsc#1173701], out-of-bounds access via encodings. + LibVNCServer-CVE-2020-14402,14403,14404.patch fix CVE-2017-18922 [bsc#1173477], preauth buffer overwrite This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1056=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): LibVNCServer-debugsource-0.9.10-lp152.9.4.2 LibVNCServer-devel-0.9.10-lp152.9.4.2 libvncclient0-0.9.10-lp152.9.4.2 libvncclient0-debuginfo-0.9.10-lp152.9.4.2 libvncserver0-0.9.10-lp152.9.4.2 libvncserver0-debuginfo-0.9.10-lp152.9.4.2 References: https://www.suse.com/security/cve/CVE-2017-18922.html https://www.suse.com/security/cve/CVE-2018-21247.html https://www.suse.com/security/cve/CVE-2019-20839.html https://www.suse.com/security/cve/CVE-2019-20840.html https://www.suse.com/security/cve/CVE-2020-14397.html https://www.suse.com/security/cve/CVE-2020-14398.html https://www.suse.com/security/cve/CVE-2020-14399.html https://www.suse.com/security/cve/CVE-2020-14400.html https://www.suse.com/security/cve/CVE-2020-14401.html https://www.suse.com/security/cve/CVE-2020-14402.html https://bugzilla.suse.com/1173477 https://bugzilla.suse.com/1173691 https://bugzilla.suse.com/1173694 https://bugzilla.suse.com/1173700 https://bugzilla.suse.com/1173701 https://bugzilla.suse.com/1173743 https://bugzilla.suse.com/1173874 https://bugzilla.suse.com/1173875 https://bugzilla.suse.com/1173876 https://bugzilla.suse.com/1173880

1 0

openSUSE-RU-2020:1052-1: moderate: Recommended update for golang-github-prometheus-node_exporter
by maintenance＠opensuse.org 24 Jul '20

24 Jul '20

openSUSE Recommended Update: Recommended update for golang-github-prometheus-node_exporter ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1052-1 Rating: moderate References: #1143913 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for golang-github-prometheus-node_exporter fixes the following issues: - Update from version 0.17.0 to version 0.18.1 (jsc#ECO-2110) 0.18.1 / 2019-06-04 * [BUGFIX] Fix incorrect sysctl call in BSD meminfo collector, resulting in broken swap metrics on FreeBSD * [BUGFIX] Fix rollover bug in mountstats collector 0.18.0 / 2019-05-09 * Renamed interface label to device in netclass collector for consistency with other network metrics * The cpufreq metrics now separate the cpufreq and scaling data based on what the driver provides. * The labels for the network_up metric have changed * Bonding collector now uses mii_status instead of operstatus * Several systemd metrics have been turned off by default to improve performance * These include unit_tasks_current, unit_tasks_max, service_restart_total, and unit_start_time_seconds * The systemd collector blacklist now includes automount, device, mount, and slice units by default. * [CHANGE] Bonding state uses mii_status * [CHANGE] Add a limit to the number of in-flight requests * [CHANGE] Renamed interface label to device in netclass collector * [CHANGE] Add separate cpufreq and scaling metrics * [CHANGE] Several systemd metrics have been turned off by default to improve performance * [CHANGE] Expand systemd collector blacklist * [CHANGE] Split cpufreq metrics into a separate collector * [FEATURE] Add a flag to disable exporter metrics * [FEATURE] Add kstat-based Solaris metrics for boottime, cpu and zfs collectors * [FEATURE] Add uname collector for FreeBSD * [FEATURE] Add diskstats collector for OpenBSD * [FEATURE] Add pressure collector exposing pressure stall information for Linux * [FEATURE] Add perf exporter for Linux * [ENHANCEMENT] Add Infiniband counters * [ENHANCEMENT] Add TCPSynRetrans to netstat default filter * [ENHANCEMENT] Move network_up labels into new metric network_info * [ENHANCEMENT] Use 64-bit counters for Darwin netstat * [BUGFIX] Add fallback for missing /proc/1/mounts * [BUGFIX] Fix node_textfile_mtime_seconds to work properly on symlinks - Add network-online (Wants and After) dependency to systemd unit. (bsc#1143913) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1052=1 Package List: - openSUSE Leap 15.1 (x86_64): golang-github-prometheus-node_exporter-0.18.1-lp151.2.3.1 References: https://bugzilla.suse.com/1143913

1 0

openSUSE-RU-2020:1053-1: moderate: Recommended update for golang-github-prometheus-node_exporter
by maintenance＠opensuse.org 24 Jul '20

24 Jul '20

openSUSE Recommended Update: Recommended update for golang-github-prometheus-node_exporter ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1053-1 Rating: moderate References: #1143913 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for golang-github-prometheus-node_exporter fixes the following issues: - Update from version 0.17.0 to version 0.18.1 (jsc#ECO-2110) 0.18.1 / 2019-06-04 * [BUGFIX] Fix incorrect sysctl call in BSD meminfo collector, resulting in broken swap metrics on FreeBSD * [BUGFIX] Fix rollover bug in mountstats collector 0.18.0 / 2019-05-09 * Renamed interface label to device in netclass collector for consistency with other network metrics * The cpufreq metrics now separate the cpufreq and scaling data based on what the driver provides * The labels for the network_up metric have changed * Bonding collector now uses mii_status instead of operstatus * Several systemd metrics have been turned off by default to improve performance * These include unit_tasks_current, unit_tasks_max, service_restart_total, and unit_start_time_seconds * The systemd collector blacklist now includes automount, device, mount, and slice units by default. * [CHANGE] Bonding state uses mii_status * [CHANGE] Add a limit to the number of in-flight requests * [CHANGE] Renamed interface label to device in netclass collector * [CHANGE] Add separate cpufreq and scaling metrics * [CHANGE] Several systemd metrics have been turned off by default to improve performance * [CHANGE] Expand systemd collector blacklist * [CHANGE] Split cpufreq metrics into a separate collector * [FEATURE] Add a flag to disable exporter metrics * [FEATURE] Add kstat-based Solaris metrics for boottime, cpu and zfs collectors * [FEATURE] Add uname collector for FreeBSD * [FEATURE] Add diskstats collector for OpenBSD * [FEATURE] Add pressure collector exposing pressure stall information for Linux * [FEATURE] Add perf exporter for Linux * [ENHANCEMENT] Add Infiniband counters * [ENHANCEMENT] Add TCPSynRetrans to netstat default filter * [ENHANCEMENT] Move network_up labels into new metric network_info * [ENHANCEMENT] Use 64-bit counters for Darwin netstat * [BUGFIX] Add fallback for missing /proc/1/mounts * [BUGFIX] Fix node_textfile_mtime_seconds to work properly on symlinks - Add network-online (Wants and After) dependency to systemd unit bsc#1143913 This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1053=1 Package List: - openSUSE Leap 15.2 (x86_64): golang-github-prometheus-node_exporter-0.18.1-lp152.3.3.1 References: https://bugzilla.suse.com/1143913

1 0

openSUSE-SU-2020:1050-1: moderate: Security update for cni-plugins
by opensuse-security＠opensuse.org 23 Jul '20

23 Jul '20

openSUSE Security Update: Security update for cni-plugins ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1050-1 Rating: moderate References: #1172410 Cross-References: CVE-2020-10749 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for cni-plugins fixes the following issues: cni-plugins updated to version 0.8.6 - CVE-2020-10749: Fixed a potential Man-in-the-Middle attacks in IPv4 clusters by spoofing IPv6 router advertisements (bsc#1172410). Release notes: https://github.com/containernetworking/plugins/releases/tag/v0.8.6 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1050=1 Package List: - openSUSE Leap 15.2 (x86_64): cni-plugins-0.8.6-lp152.2.4.1 References: https://www.suse.com/security/cve/CVE-2020-10749.html https://bugzilla.suse.com/1172410

1 0

openSUSE-SU-2020:1051-1: important: Security update for tomcat
by opensuse-security＠opensuse.org 23 Jul '20

23 Jul '20

openSUSE Security Update: Security update for tomcat ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1051-1 Rating: important References: #1173389 Cross-References: CVE-2020-11996 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for tomcat fixes the following issues: Tomcat was updated to 9.0.36 See changelog at - CVE-2020-11996: Fixed an issue which by sending a specially crafted sequence of HTTP/2 requests could have triggered high CPU usage for several seconds making potentially the server unresponsive (bsc#1173389). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1051=1 Package List: - openSUSE Leap 15.1 (noarch): tomcat-9.0.36-lp151.3.24.1 tomcat-admin-webapps-9.0.36-lp151.3.24.1 tomcat-docs-webapp-9.0.36-lp151.3.24.1 tomcat-el-3_0-api-9.0.36-lp151.3.24.1 tomcat-embed-9.0.36-lp151.3.24.1 tomcat-javadoc-9.0.36-lp151.3.24.1 tomcat-jsp-2_3-api-9.0.36-lp151.3.24.1 tomcat-jsvc-9.0.36-lp151.3.24.1 tomcat-lib-9.0.36-lp151.3.24.1 tomcat-servlet-4_0-api-9.0.36-lp151.3.24.1 tomcat-webapps-9.0.36-lp151.3.24.1 References: https://www.suse.com/security/cve/CVE-2020-11996.html https://bugzilla.suse.com/1173389

1 0

openSUSE-SU-2020:1049-1: moderate: Security update for cni-plugins
by opensuse-security＠opensuse.org 23 Jul '20

23 Jul '20

openSUSE Security Update: Security update for cni-plugins ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1049-1 Rating: moderate References: #1172410 Cross-References: CVE-2020-10749 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for cni-plugins fixes the following issues: cni-plugins updated to version 0.8.6 - CVE-2020-10749: Fixed a potential Man-in-the-Middle attacks in IPv4 clusters by spoofing IPv6 router advertisements (bsc#1172410). Release notes: https://github.com/containernetworking/plugins/releases/tag/v0.8.6 This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1049=1 Package List: - openSUSE Leap 15.1 (x86_64): cni-plugins-0.8.6-lp151.2.6.1 References: https://www.suse.com/security/cve/CVE-2020-10749.html https://bugzilla.suse.com/1172410

1 0

openSUSE-RU-2020:1047-1: moderate: Recommended update for wine-mono
by maintenance＠opensuse.org 23 Jul '20

23 Jul '20

openSUSE Recommended Update: Recommended update for wine-mono ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1047-1 Rating: moderate References: #1172622 Affected Products: openSUSE Leap 15.2:NonFree ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for wine-mono fixes the following issues: This update downgrades wine-mono to work with 15.2 wine version. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2:NonFree: zypper in -t patch openSUSE-2020-1047=1 Package List: - openSUSE Leap 15.2:NonFree (noarch): wine-mono-4.9.4-lp152.3.1 References: https://bugzilla.suse.com/1172622

1 0

openSUSE-RU-2020:1046-1: moderate: Recommended update for strawberry
by maintenance＠opensuse.org 23 Jul '20

23 Jul '20

openSUSE Recommended Update: Recommended update for strawberry ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1046-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for strawberry fixes the following issues: Update to version 0.6.13: * Bugfixes: + Fixed cut-off text in about dialog. + Fixed increasing play count when stop after track is enabled. + Fixed showing/hiding playing widget when playback is started while window is hidden. + Fixed "Show in file browser" to also work on local songs that are not in the collection. + Fixed "Show in file browser" to work with PCManFM file manager. + Fixed audio analyzer to work with S24LE and F32LE audio formats. + Fixed playlist background image not loading. + Fixed a memory leak when switching between playlists. + Removed use of HTML in systemtray tooltip on KDE, since KDE no longer renders HTML in the systemtray. * Enhancements: + Replaced use of C style casts. + Adapted use of C++11 override. + Improved CMake build files. + Added new on startup options to show maximized or minimized. + Builtin TagLib code is updated and improved. + Made most icon sizes configurable in the settings, and increased default sizes for icons. + Improved fancy tabbar to use font sizes from the theme instead of fixed sizes. + Moving the currently playing song to the top when the playlist is manually shuffled. + Added "a taste of Strawbs" background image. + Fixed unit test for testing playlist model. + Added new unit tests for tagreader. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1046=1 Package List: - openSUSE Leap 15.2 (x86_64): strawberry-0.6.13-lp152.2.6.1 strawberry-debuginfo-0.6.13-lp152.2.6.1 strawberry-debugsource-0.6.13-lp152.2.6.1 References:

1 0

openSUSE-RU-2020:1045-1: moderate: Recommended update for HepMC2
by maintenance＠opensuse.org 23 Jul '20

23 Jul '20

openSUSE Recommended Update: Recommended update for HepMC2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1045-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for HepMC2 fixes the following issues: HepMC2 was updated to version 2.06.11: * HepMC/HepMCDefs.h: Add a HEPMC_HAS_ORDERED_WEIGHTS #define. * HepMC/WeightContainer.h: Add weights() and weight_names() public methods. * src/WeightContainer.cc: Fix print() to use canonical weight ordering. * src/GenEventStreamIO.cc: Fix the I/O streaming to preserve the weight ordering. * Fixed the tests. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1045=1 Package List: - openSUSE Leap 15.2 (x86_64): HepMC2-devel-2.06.11-lp152.4.3.1 libHepMC4-2.06.11-lp152.4.3.1 libHepMC4-debuginfo-2.06.11-lp152.4.3.1 References:

1 0

openSUSE-SU-2020:1043-1: moderate: Security update for xmlgraphics-batik
by opensuse-security＠opensuse.org 23 Jul '20

23 Jul '20

openSUSE Security Update: Security update for xmlgraphics-batik ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1043-1 Rating: moderate References: #1172961 Cross-References: CVE-2019-17566 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for xmlgraphics-batik fixes the following issues: - CVE-2019-17566: Fixed a SSRF which might have allowed the underlying server to make arbitrary GET requests (bsc#1172961). This update was imported from the SUSE:SLE-15-SP1:Update update project. This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1043=1 Package List: - openSUSE Backports SLE-15-SP1 (noarch): xmlgraphics-batik-1.9-bp151.2.3.1 xmlgraphics-batik-demo-1.9-bp151.2.3.1 xmlgraphics-batik-rasterizer-1.9-bp151.2.3.1 xmlgraphics-batik-slideshow-1.9-bp151.2.3.1 xmlgraphics-batik-squiggle-1.9-bp151.2.3.1 xmlgraphics-batik-svgpp-1.9-bp151.2.3.1 xmlgraphics-batik-ttf2svg-1.9-bp151.2.3.1 References: https://www.suse.com/security/cve/CVE-2019-17566.html https://bugzilla.suse.com/1172961

1 0

openSUSE-RU-2020:1044-1: moderate: Recommended update for HepMC
by maintenance＠opensuse.org 23 Jul '20

23 Jul '20

openSUSE Recommended Update: Recommended update for HepMC ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1044-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for HepMC fixes the following issues: HepMC was updated to version 3.2.2: * Fixed treatment of the weights in case of different number of weights and weight names. * Fixed WriterAsciiHepMC2 option for separate flows. * Improved treatment of python installation. * Split the sources of python bindings into smaller files to optimize compilation. * Improved cmake configuration for special cases, e.g. old cmake, no ROOT, some compilers, etc. Added more error handling. * Fixed compilation of the search module with Clang. * Added an example for search module. * Fixed the HepMC2 output for events without weights. * Fixed the signal vertex ID for HepMC2 output. * Added an interface for HepMC2 (in-memory-conversion). * Added functions to search module: search for relatives (particle or vertex)->(particle or vertex) in different combinations. * The previous point bumps .so version of the libHepMC3search to 4. * Improved the configuration of Pythia8 for tests (minimal version requirement). * Fixed compatibility of ROOT trees written with HePMC3.0 and removed the typedefs in the dictionaries. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1044=1 Package List: - openSUSE Leap 15.2 (x86_64): HepMC-debuginfo-3.2.2-lp152.2.3.1 HepMC-debugsource-3.2.2-lp152.2.3.1 HepMC-devel-3.2.2-lp152.2.3.1 HepMC-doc-3.2.2-lp152.2.3.1 libHepMC3-1-3.2.2-lp152.2.3.1 libHepMC3-1-debuginfo-3.2.2-lp152.2.3.1 python3-HepMC-3.2.2-lp152.2.3.1 python3-HepMC-debuginfo-3.2.2-lp152.2.3.1 References:

1 0

openSUSE-RU-2020:1038-1: moderate: Recommended update for open-vm-tools
by maintenance＠opensuse.org 23 Jul '20

23 Jul '20

openSUSE Recommended Update: Recommended update for open-vm-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1038-1 Rating: moderate References: #1171003 #1171764 #1171765 #1172693 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for open-vm-tools fixes the following issues: - Update 11.1.0 (build 16036546) (bsc#1171764, jsc#ECO-2164) This version provides a new 'Service Discovery' plugin. (bsc#1171765) The plugin connects with the vRealize Operations Manager product. For more information and details on configuring this plugin, refer to Configuring Service Discovery. In this release, a new tools.conf switch is added to enable and disable the guest customization in the guest virtual machine. By default, the guest customization is enabled. For more details, refer KB 78903. - vm-support is now automatically placed in the /usr/bin directory. - Added version number to Requires: libxmlsec1-openssl1 to help with vgauth version checking. - Provide a better PAM configuration and authentication. (bsc#1171003, bsc#1172693) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1038=1 Package List: - openSUSE Leap 15.1 (x86_64): libvmtools-devel-11.1.0-lp151.2.15.1 libvmtools0-11.1.0-lp151.2.15.1 libvmtools0-debuginfo-11.1.0-lp151.2.15.1 open-vm-tools-11.1.0-lp151.2.15.1 open-vm-tools-debuginfo-11.1.0-lp151.2.15.1 open-vm-tools-debugsource-11.1.0-lp151.2.15.1 open-vm-tools-desktop-11.1.0-lp151.2.15.1 open-vm-tools-desktop-debuginfo-11.1.0-lp151.2.15.1 open-vm-tools-sdmp-11.1.0-lp151.2.15.1 open-vm-tools-sdmp-debuginfo-11.1.0-lp151.2.15.1 References: https://bugzilla.suse.com/1171003 https://bugzilla.suse.com/1171764 https://bugzilla.suse.com/1171765 https://bugzilla.suse.com/1172693

1 0

openSUSE-RU-2020:1041-1: Recommended update for python-Sphinx
by maintenance＠opensuse.org 23 Jul '20

23 Jul '20

openSUSE Recommended Update: Recommended update for python-Sphinx ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1041-1 Rating: low References: #1172721 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-Sphinx fixes the following issues: - Disable test 'test_correct_year' as the range is no longer matched. (bsc#1172721) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1041=1 Package List: - openSUSE Leap 15.1 (noarch): python-Sphinx-doc-html-1.7.6-lp151.2.6.1 python-Sphinx-doc-man-common-1.7.6-lp151.2.6.1 python2-Sphinx-1.7.6-lp151.2.6.1 python2-Sphinx-doc-1.7.6-lp151.2.6.1 python2-Sphinx-doc-man-1.7.6-lp151.2.6.1 python2-Sphinx-latex-1.7.6-lp151.2.6.1 python3-Sphinx-1.7.6-lp151.2.6.1 python3-Sphinx-doc-1.7.6-lp151.2.6.1 python3-Sphinx-doc-man-1.7.6-lp151.2.6.1 python3-Sphinx-latex-1.7.6-lp151.2.6.1 References: https://bugzilla.suse.com/1172721

1 0

openSUSE-SU-2020:1042-1: moderate: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 23 Jul '20

23 Jul '20

openSUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1042-1 Rating: moderate References: #1173948 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for MozillaFirefox fixes the following issues: - Mozilla Firefox 78.0.2 MFSA 2020-28 (bsc#1173948) * MFSA-2020-0003 (bmo#1644076) X-Frame-Options bypass using object or embed tags - Firefox Extended Support Release 78.0.2esr ESR * Fixed: Security fix * Fixed: Fixed an accessibility regression in reader mode (bmo#1650922) * Fixed: Made the address bar more resilient to data corruption in the user profile (bmo#1649981) * Fixed: Fixed a regression opening certain external applications (bmo#1650162) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1042=1 Package List: - openSUSE Leap 15.1 (x86_64): MozillaFirefox-78.0.2-lp151.2.57.1 MozillaFirefox-branding-upstream-78.0.2-lp151.2.57.1 MozillaFirefox-buildsymbols-78.0.2-lp151.2.57.1 MozillaFirefox-debuginfo-78.0.2-lp151.2.57.1 MozillaFirefox-debugsource-78.0.2-lp151.2.57.1 MozillaFirefox-devel-78.0.2-lp151.2.57.1 MozillaFirefox-translations-common-78.0.2-lp151.2.57.1 MozillaFirefox-translations-other-78.0.2-lp151.2.57.1 References: https://bugzilla.suse.com/1173948

1 0

openSUSE-RU-2020:1040-1: important: Recommended update for parted
by maintenance＠opensuse.org 23 Jul '20

23 Jul '20

openSUSE Recommended Update: Recommended update for parted ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1040-1 Rating: important References: #1164260 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for parted fixes the following issue: - fix support of NVDIMM (pmemXs) devices (bsc#1164260) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1040=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libparted0-3.2-lp151.9.12.1 libparted0-debuginfo-3.2-lp151.9.12.1 parted-3.2-lp151.9.12.1 parted-debuginfo-3.2-lp151.9.12.1 parted-debugsource-3.2-lp151.9.12.1 parted-devel-3.2-lp151.9.12.1 - openSUSE Leap 15.1 (noarch): parted-lang-3.2-lp151.9.12.1 - openSUSE Leap 15.1 (x86_64): libparted0-32bit-3.2-lp151.9.12.1 libparted0-32bit-debuginfo-3.2-lp151.9.12.1 References: https://bugzilla.suse.com/1164260

1 0

openSUSE-SU-2020:1035-1: moderate: Security update for redis
by opensuse-security＠opensuse.org 23 Jul '20

23 Jul '20

openSUSE Security Update: Security update for redis ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1035-1 Rating: moderate References: #1173018 Cross-References: CVE-2020-14147 Affected Products: openSUSE Leap 15.1 openSUSE Backports SLE-15-SP1 SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for redis fixes the following issues: - CVE-2020-14147: Context dependent attackers with permission to run Lua code in a Redis session could have caused a denial of service (memory corruption and application crash) or possibly bypass sandbox restrictions (boo#1173018) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1035=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1035=1 - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2020-1035=1 Package List: - openSUSE Leap 15.1 (x86_64): redis-4.0.14-lp151.2.6.1 redis-debuginfo-4.0.14-lp151.2.6.1 redis-debugsource-4.0.14-lp151.2.6.1 - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): redis-4.0.14-bp151.3.6.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): redis-4.0.14-24.1 References: https://www.suse.com/security/cve/CVE-2020-14147.html https://bugzilla.suse.com/1173018

1 0

openSUSE-SU-2020:1037-1: important: Security update for singularity
by opensuse-security＠opensuse.org 23 Jul '20

23 Jul '20

openSUSE Security Update: Security update for singularity ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1037-1 Rating: important References: #1125369 #1128598 #1159550 #1174148 #1174150 #1174152 Cross-References: CVE-2019-11328 CVE-2019-19724 CVE-2020-13845 CVE-2020-13846 CVE-2020-13847 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves 5 vulnerabilities and has one errata is now available. Description: This update for singularity fixes the following issues: - New version 3.6.0. This version introduces a new signature format for SIF images, and changes to the signing / verification code to address the following security problems: - CVE-2020-13845, boo#1174150 In Singularity 3.x versions below 3.6.0, issues allow the ECL to be bypassed by a malicious user. - CVE-2020-13846, boo#1174148 In Singularity 3.5 the --all / -a option to singularity verify returns success even when some objects in a SIF container are not signed, or cannot be verified. - CVE-2020-13847, boo#1174152 In Singularity 3.x versions below 3.6.0, Singularity's sign and verify commands do not sign metadata found in the global header or data object descriptors of a SIF file, allowing an attacker to cause unexpected behavior. A signed container may verify successfully, even when it has been modified in ways that could be exploited to cause malicious behavior. - New features / functionalities - A new '--legacy-insecure' flag to verify allows verification of SIF signatures in the old, insecure format. - A new '-l / --logs' flag for instance list that shows the paths to instance STDERR / STDOUT log files. - The --json output of instance list now include paths to STDERR / STDOUT log files. - Singularity now supports the execution of minimal Docker/OCI containers that do not contain /bin/sh, e.g. docker://hello-world. - A new cache structure is used that is concurrency safe on a filesystem that supports atomic rename. If you downgrade to Singularity 3.5 or older after using 3.6 you will need to run singularity cache clean. - A plugin system rework adds new hook points that will allow the development of plugins that modify behavior of the runtime. An image driver concept is introduced for plugins to support new ways of handling image and overlay mounts. Plugins built for <=3.5 are not compatible with 3.6. - The --bind flag can now bind directories from a SIF or ext3 image into a container. - The --fusemount feature to mount filesystems to a container via FUSE drivers is now a supported feature (previously an experimental hidden flag). - This permits users to mount e.g. sshfs and cvmfs filesystems to the container at runtime. - A new -c/--config flag allows an alternative singularity.conf to be specified by the root user, or all users in an unprivileged installation. - A new --env flag allows container environment variables to be set via the Singularity command line. - A new --env-file flag allows container environment variables to be set from a specified file. - A new --days flag for cache clean allows removal of items older than a specified number of days. Replaces the --name flag which is not generally useful as the cache entries are stored by hash, not a friendly name. - Changed defaults / behaviours - New signature format (see security fixes above). - Fixed spacing of singularity instance list to be dynamically changing based off of input lengths instead of fixed number of spaces to account for long instance names. - Environment variables prefixed with SINGULARITYENV_ always take precedence over variables without SINGULARITYENV_ prefix. - The %post build section inherits environment variables from the base image. - %files from ... will now follow symlinks for sources that are directly specified, or directly resolved from a glob pattern. It will not follow symlinks found through directory traversal. This mirrors Docker multi-stage COPY behaviour. - Restored the CWD mount behaviour of v2, implying that CWD path is not recreated inside container and any symlinks in the CWD path are not resolved anymore to determine the destination path inside container. - The %test build section is executed the same manner as singularity test image. --fusemount with the container: default directive will foreground the FUSE process. Use container-daemon: for previous behavior. - Deprecate -a / --all option to sign/verify as new signature behavior makes this the default. - For more information about upstream changes, please check: https://github.com/hpcng/singularity/blob/master/CHANGELOG.md - Removed --name flag for cache clean; replaced with --days. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1037=1 Package List: - openSUSE Leap 15.1 (x86_64): singularity-3.6.0-lp151.2.6.1 singularity-debuginfo-3.6.0-lp151.2.6.1 References: https://www.suse.com/security/cve/CVE-2019-11328.html https://www.suse.com/security/cve/CVE-2019-19724.html https://www.suse.com/security/cve/CVE-2020-13845.html https://www.suse.com/security/cve/CVE-2020-13846.html https://www.suse.com/security/cve/CVE-2020-13847.html https://bugzilla.suse.com/1125369 https://bugzilla.suse.com/1128598 https://bugzilla.suse.com/1159550 https://bugzilla.suse.com/1174148 https://bugzilla.suse.com/1174150 https://bugzilla.suse.com/1174152

1 0

openSUSE-SU-2020:1035-1: moderate: Security update for redis
by opensuse-security＠opensuse.org 23 Jul '20

23 Jul '20

openSUSE Security Update: Security update for redis ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1035-1 Rating: moderate References: #1173018 Cross-References: CVE-2020-14147 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for redis fixes the following issues: - CVE-2020-14147: Context dependent attackers with permission to run Lua code in a Redis session could have caused a denial of service (memory corruption and application crash) or possibly bypass sandbox restrictions (boo#1173018) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2020-1035=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): redis-4.0.14-24.1 References: https://www.suse.com/security/cve/CVE-2020-14147.html https://bugzilla.suse.com/1173018

1 0

openSUSE-RU-2020:1036-1: moderate: Recommended update for ceph
by maintenance＠opensuse.org 23 Jul '20

23 Jul '20

openSUSE Recommended Update: Recommended update for ceph ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1036-1 Rating: moderate References: #1167477 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ceph fixes the following issues: - Updated ceph to 14.2.10-392-gb3a13b81cb * This update includes many bug fixes and improvements. For a complete list of all changes, please refer to the upstream release notes: https://ceph.io/releases/v14-2-10-nautilus-released/ This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1036=1 Package List: - openSUSE Leap 15.1 (x86_64): ceph-14.2.10.392+gb3a13b81cb-lp151.2.22.1 ceph-base-14.2.10.392+gb3a13b81cb-lp151.2.22.1 ceph-base-debuginfo-14.2.10.392+gb3a13b81cb-lp151.2.22.1 ceph-common-14.2.10.392+gb3a13b81cb-lp151.2.22.1 ceph-common-debuginfo-14.2.10.392+gb3a13b81cb-lp151.2.22.1 ceph-debugsource-14.2.10.392+gb3a13b81cb-lp151.2.22.1 ceph-fuse-14.2.10.392+gb3a13b81cb-lp151.2.22.1 ceph-fuse-debuginfo-14.2.10.392+gb3a13b81cb-lp151.2.22.1 ceph-mds-14.2.10.392+gb3a13b81cb-lp151.2.22.1 ceph-mds-debuginfo-14.2.10.392+gb3a13b81cb-lp151.2.22.1 ceph-mgr-14.2.10.392+gb3a13b81cb-lp151.2.22.1 ceph-mgr-debuginfo-14.2.10.392+gb3a13b81cb-lp151.2.22.1 ceph-mon-14.2.10.392+gb3a13b81cb-lp151.2.22.1 ceph-mon-debuginfo-14.2.10.392+gb3a13b81cb-lp151.2.22.1 ceph-osd-14.2.10.392+gb3a13b81cb-lp151.2.22.1 ceph-osd-debuginfo-14.2.10.392+gb3a13b81cb-lp151.2.22.1 ceph-radosgw-14.2.10.392+gb3a13b81cb-lp151.2.22.1 ceph-radosgw-debuginfo-14.2.10.392+gb3a13b81cb-lp151.2.22.1 ceph-resource-agents-14.2.10.392+gb3a13b81cb-lp151.2.22.1 ceph-test-14.2.10.392+gb3a13b81cb-lp151.2.22.1 ceph-test-debuginfo-14.2.10.392+gb3a13b81cb-lp151.2.22.1 ceph-test-debugsource-14.2.10.392+gb3a13b81cb-lp151.2.22.1 cephfs-shell-14.2.10.392+gb3a13b81cb-lp151.2.22.1 libcephfs-devel-14.2.10.392+gb3a13b81cb-lp151.2.22.1 libcephfs2-14.2.10.392+gb3a13b81cb-lp151.2.22.1 libcephfs2-debuginfo-14.2.10.392+gb3a13b81cb-lp151.2.22.1 librados-devel-14.2.10.392+gb3a13b81cb-lp151.2.22.1 librados-devel-debuginfo-14.2.10.392+gb3a13b81cb-lp151.2.22.1 librados2-14.2.10.392+gb3a13b81cb-lp151.2.22.1 librados2-debuginfo-14.2.10.392+gb3a13b81cb-lp151.2.22.1 libradospp-devel-14.2.10.392+gb3a13b81cb-lp151.2.22.1 libradosstriper-devel-14.2.10.392+gb3a13b81cb-lp151.2.22.1 libradosstriper1-14.2.10.392+gb3a13b81cb-lp151.2.22.1 libradosstriper1-debuginfo-14.2.10.392+gb3a13b81cb-lp151.2.22.1 librbd-devel-14.2.10.392+gb3a13b81cb-lp151.2.22.1 librbd1-14.2.10.392+gb3a13b81cb-lp151.2.22.1 librbd1-debuginfo-14.2.10.392+gb3a13b81cb-lp151.2.22.1 librgw-devel-14.2.10.392+gb3a13b81cb-lp151.2.22.1 librgw2-14.2.10.392+gb3a13b81cb-lp151.2.22.1 librgw2-debuginfo-14.2.10.392+gb3a13b81cb-lp151.2.22.1 python3-ceph-argparse-14.2.10.392+gb3a13b81cb-lp151.2.22.1 python3-cephfs-14.2.10.392+gb3a13b81cb-lp151.2.22.1 python3-cephfs-debuginfo-14.2.10.392+gb3a13b81cb-lp151.2.22.1 python3-rados-14.2.10.392+gb3a13b81cb-lp151.2.22.1 python3-rados-debuginfo-14.2.10.392+gb3a13b81cb-lp151.2.22.1 python3-rbd-14.2.10.392+gb3a13b81cb-lp151.2.22.1 python3-rbd-debuginfo-14.2.10.392+gb3a13b81cb-lp151.2.22.1 python3-rgw-14.2.10.392+gb3a13b81cb-lp151.2.22.1 python3-rgw-debuginfo-14.2.10.392+gb3a13b81cb-lp151.2.22.1 rados-objclass-devel-14.2.10.392+gb3a13b81cb-lp151.2.22.1 rbd-fuse-14.2.10.392+gb3a13b81cb-lp151.2.22.1 rbd-fuse-debuginfo-14.2.10.392+gb3a13b81cb-lp151.2.22.1 rbd-mirror-14.2.10.392+gb3a13b81cb-lp151.2.22.1 rbd-mirror-debuginfo-14.2.10.392+gb3a13b81cb-lp151.2.22.1 rbd-nbd-14.2.10.392+gb3a13b81cb-lp151.2.22.1 rbd-nbd-debuginfo-14.2.10.392+gb3a13b81cb-lp151.2.22.1 - openSUSE Leap 15.1 (noarch): ceph-dashboard-e2e-14.2.10.392+gb3a13b81cb-lp151.2.22.1 ceph-grafana-dashboards-14.2.10.392+gb3a13b81cb-lp151.2.22.1 ceph-mgr-dashboard-14.2.10.392+gb3a13b81cb-lp151.2.22.1 ceph-mgr-diskprediction-cloud-14.2.10.392+gb3a13b81cb-lp151.2.22.1 ceph-mgr-diskprediction-local-14.2.10.392+gb3a13b81cb-lp151.2.22.1 ceph-mgr-k8sevents-14.2.10.392+gb3a13b81cb-lp151.2.22.1 ceph-mgr-rook-14.2.10.392+gb3a13b81cb-lp151.2.22.1 ceph-mgr-ssh-14.2.10.392+gb3a13b81cb-lp151.2.22.1 ceph-prometheus-alerts-14.2.10.392+gb3a13b81cb-lp151.2.22.1 References: https://bugzilla.suse.com/1167477

1 0

openSUSE-RU-2020:1039-1: moderate: Recommended update for unar
by maintenance＠opensuse.org 23 Jul '20

23 Jul '20

openSUSE Recommended Update: Recommended update for unar ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1039-1 Rating: moderate References: #1127736 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for unar fixes the following issue: - Fix extracting RAR5 archives larger than 4GB (bsc#1127736) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1039=1 Package List: - openSUSE Leap 15.1 (x86_64): unar-1.10.1-lp151.6.4.1 unar-debuginfo-1.10.1-lp151.6.4.1 unar-debugsource-1.10.1-lp151.6.4.1 References: https://bugzilla.suse.com/1127736

1 0

openSUSE-SU-2020:1034-1: moderate: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 22 Jul '20

22 Jul '20

openSUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1034-1 Rating: moderate References: #1173948 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for MozillaFirefox fixes the following issues: - Mozilla Firefox 78.0.2 MFSA 2020-28 (bsc#1173948) * MFSA-2020-0003 (bmo#1644076) X-Frame-Options bypass using object or embed tags - Firefox Extended Support Release 78.0.2esr ESR * Fixed: Security fix * Fixed: Fixed an accessibility regression in reader mode (bmo#1650922) * Fixed: Made the address bar more resilient to data corruption in the user profile (bmo#1649981) * Fixed: Fixed a regression opening certain external applications (bmo#1650162) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1034=1 Package List: - openSUSE Leap 15.2 (x86_64): MozillaFirefox-78.0.2-lp152.2.9.1 MozillaFirefox-branding-upstream-78.0.2-lp152.2.9.1 MozillaFirefox-buildsymbols-78.0.2-lp152.2.9.1 MozillaFirefox-debuginfo-78.0.2-lp152.2.9.1 MozillaFirefox-debugsource-78.0.2-lp152.2.9.1 MozillaFirefox-devel-78.0.2-lp152.2.9.1 MozillaFirefox-translations-common-78.0.2-lp152.2.9.1 MozillaFirefox-translations-other-78.0.2-lp152.2.9.1 References: https://bugzilla.suse.com/1173948

1 0

openSUSE-RU-2020:1033-1: moderate: Recommended update for Rivet
by maintenance＠opensuse.org 22 Jul '20

22 Jul '20

openSUSE Recommended Update: Recommended update for Rivet ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1033-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for Rivet fixes the following issues: Rivet was updated to version 3.1.2: * Submission of ATLAS_2019_I1744201, ATLAS_2019_I1764342. * Add a very horrible preprocessor hack to allow use of a private method on the HepMC2 WeightContainer, for robust and correctly ordered weight name acquisition before HepMC 2.06.11. * Allow several AnalysisHandler objects to run in different threads. This is a temporary fix. A permanent fix involves changing the Analysis handler to own its own projections. Currently each AnalysisHandler need sto be created and run completely within the same separate thread. * Allow + and - in AO paths. * Always skip weights that have "AUX" or "DEBUG" in the name. * Add computation of Python versions and passing them to Cython as command-line flags. * Fix small bug in rivet-cmphistos. * Add ATLAS_2018_I163527 (W+jets at 8 TeV). * Add InvisibleFinalState projection. * HTML sectioning and float/overflow/scrollbar improvements in rivet-mkhtml output. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1033=1 Package List: - openSUSE Leap 15.2 (x86_64): Rivet-debuginfo-3.1.2-lp152.2.3.1 Rivet-debugsource-3.1.2-lp152.2.3.1 Rivet-devel-3.1.2-lp152.2.3.1 Rivet-plugins-3.1.2-lp152.2.3.1 Rivet-plugins-debuginfo-3.1.2-lp152.2.3.1 libRivet-3_1_2-3.1.2-lp152.2.3.1 libRivet-3_1_2-debuginfo-3.1.2-lp152.2.3.1 python3-Rivet-3.1.2-lp152.2.3.1 python3-Rivet-debuginfo-3.1.2-lp152.2.3.1 References:

1 0

openSUSE-RU-2020:1031-1: Recommended update for python-numpy
by maintenance＠opensuse.org 22 Jul '20

22 Jul '20

openSUSE Recommended Update: Recommended update for python-numpy ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1031-1 Rating: low References: #1166678 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-numpy fixes the following issues: - Fixes a file conflict with /usr/bin/f2py (bsc#1166678) This update was imported from the SUSE:SLE-15:Update update project. This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1031=1 Package List: - openSUSE Backports SLE-15-SP1 (ppc64le s390x): python3-numpy-gnu-hpc-1.17.3-bp151.2.9.1 python3-numpy-gnu-hpc-devel-1.17.3-bp151.2.9.1 python3-numpy_1_17_3-gnu-hpc-1.17.3-bp151.2.9.1 python3-numpy_1_17_3-gnu-hpc-devel-1.17.3-bp151.2.9.1 References: https://bugzilla.suse.com/1166678

1 0

openSUSE-RU-2020:1028-1: moderate: Recommended update for dracut
by maintenance＠opensuse.org 21 Jul '20

21 Jul '20

openSUSE Recommended Update: Recommended update for dracut ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1028-1 Rating: moderate References: #1161573 #1165828 #1169997 #1172807 #1173560 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: This update for dracut fixes the following issues: - Update to version 049.1+suse.152.g8506e86f: * 01fips: modprobe failures during manual module loading is not fatal. (bsc#bsc#1169997) * 91zipl: parse-zipl.sh: honor SYSTEMD_READY. (bsc#1165828) * 95iscsi: fix ipv6 target discovery. (bsc#1172807) * 35network-legacy: correct conditional for creating did-setup file. (bsc#1172807) - Update to version 049.1+suse.148.gc4a6c2dd: * 95fcoe: load 'libfcoe' module as a fallback. (bsc#1173560) * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases. (bsc#1161573) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1028=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): dracut-049.1+suse.152.g8506e86f-lp152.2.6.1 dracut-debuginfo-049.1+suse.152.g8506e86f-lp152.2.6.1 dracut-debugsource-049.1+suse.152.g8506e86f-lp152.2.6.1 dracut-extra-049.1+suse.152.g8506e86f-lp152.2.6.1 dracut-fips-049.1+suse.152.g8506e86f-lp152.2.6.1 dracut-ima-049.1+suse.152.g8506e86f-lp152.2.6.1 dracut-tools-049.1+suse.152.g8506e86f-lp152.2.6.1 References: https://bugzilla.suse.com/1161573 https://bugzilla.suse.com/1165828 https://bugzilla.suse.com/1169997 https://bugzilla.suse.com/1172807 https://bugzilla.suse.com/1173560

1 0

openSUSE-RU-2020:1029-1: moderate: Recommended update for xournalpp
by maintenance＠opensuse.org 21 Jul '20

21 Jul '20

openSUSE Recommended Update: Recommended update for xournalpp ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1029-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for xournalpp fixes the following issues: - Add Recommends tex(standalone.tex) instead of Requires: texlive-latex-bin, so that users can uninstall texlive packages should they not use this particular feature. The standalone pkg is required for the feature to work and it pulls in the right texlive dependencies as Recommends. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1029=1 Package List: - openSUSE Leap 15.2 (x86_64): xournalpp-1.0.18-lp152.2.3.1 xournalpp-debuginfo-1.0.18-lp152.2.3.1 xournalpp-debugsource-1.0.18-lp152.2.3.1 - openSUSE Leap 15.2 (noarch): xournalpp-lang-1.0.18-lp152.2.3.1 References:

1 0

openSUSE-RU-2020:1030-1: moderate: Recommended update for kio
by maintenance＠opensuse.org 21 Jul '20

21 Jul '20

openSUSE Recommended Update: Recommended update for kio ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1030-1 Rating: moderate References: #1174141 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for kio fixes the following issues: - Fixed running files with spaces in the path (boo#1174141, kde#423412, kde#423645). Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1030=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): kio-5.71.0-lp152.2.6.1 kio-core-5.71.0-lp152.2.6.1 kio-core-debuginfo-5.71.0-lp152.2.6.1 kio-debuginfo-5.71.0-lp152.2.6.1 kio-debugsource-5.71.0-lp152.2.6.1 kio-devel-5.71.0-lp152.2.6.1 kio-devel-debuginfo-5.71.0-lp152.2.6.1 - openSUSE Leap 15.2 (noarch): kio-lang-5.71.0-lp152.2.6.1 - openSUSE Leap 15.2 (x86_64): kio-32bit-5.71.0-lp152.2.6.1 kio-32bit-debuginfo-5.71.0-lp152.2.6.1 kio-core-32bit-5.71.0-lp152.2.6.1 kio-core-32bit-debuginfo-5.71.0-lp152.2.6.1 kio-devel-32bit-5.71.0-lp152.2.6.1 kio-devel-32bit-debuginfo-5.71.0-lp152.2.6.1 References: https://bugzilla.suse.com/1174141

1 0

openSUSE-SU-2020:1027-1: moderate: Security update for openconnect
by opensuse-security＠opensuse.org 21 Jul '20

21 Jul '20

openSUSE Security Update: Security update for openconnect ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1027-1 Rating: moderate References: #1171862 Cross-References: CVE-2020-12823 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for openconnect fixes the following issues: - CVE-2020-12823: Fixed a buffer overflow via crafted certificate data which could have led to denial of service (bsc#1171862). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1027=1 Package List: - openSUSE Leap 15.2 (noarch): openconnect-lang-7.08-lp152.9.4.2 - openSUSE Leap 15.2 (x86_64): openconnect-7.08-lp152.9.4.2 openconnect-debuginfo-7.08-lp152.9.4.2 openconnect-debugsource-7.08-lp152.9.4.2 openconnect-devel-7.08-lp152.9.4.2 openconnect-doc-7.08-lp152.9.4.2 References: https://www.suse.com/security/cve/CVE-2020-12823.html https://bugzilla.suse.com/1171862

1 0

openSUSE-RU-2020:1026-1: important: Recommended update for parted
by maintenance＠opensuse.org 21 Jul '20

21 Jul '20

openSUSE Recommended Update: Recommended update for parted ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1026-1 Rating: important References: #1164260 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for parted fixes the following issue: - fix support of NVDIMM (pmemXs) devices (bsc#1164260) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1026=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libparted0-3.2-lp152.12.3.1 libparted0-debuginfo-3.2-lp152.12.3.1 parted-3.2-lp152.12.3.1 parted-debuginfo-3.2-lp152.12.3.1 parted-debugsource-3.2-lp152.12.3.1 parted-devel-3.2-lp152.12.3.1 - openSUSE Leap 15.2 (x86_64): libparted0-32bit-3.2-lp152.12.3.1 libparted0-32bit-debuginfo-3.2-lp152.12.3.1 - openSUSE Leap 15.2 (noarch): parted-lang-3.2-lp152.12.3.1 References: https://bugzilla.suse.com/1164260

1 0

openSUSE-SU-2020:1025-1: important: Security update for LibVNCServer
by opensuse-security＠opensuse.org 21 Jul '20

21 Jul '20

openSUSE Security Update: Security update for LibVNCServer ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1025-1 Rating: important References: #1173477 #1173691 #1173694 #1173700 #1173701 #1173743 #1173874 #1173875 #1173876 #1173880 Cross-References: CVE-2017-18922 CVE-2018-21247 CVE-2019-20839 CVE-2019-20840 CVE-2020-14397 CVE-2020-14398 CVE-2020-14399 CVE-2020-14400 CVE-2020-14401 CVE-2020-14402 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes 10 vulnerabilities is now available. Description: This update for LibVNCServer fixes the following issues: - security update - added patches fix CVE-2018-21247 [bsc#1173874], uninitialized memory contents are vulnerable to Information leak + LibVNCServer-CVE-2018-21247.patch fix CVE-2019-20839 [bsc#1173875], buffer overflow in ConnectClientToUnixSock() + LibVNCServer-CVE-2019-20839.patch fix CVE-2019-20840 [bsc#1173876], unaligned accesses in hybiReadAndDecode can lead to denial of service + LibVNCServer-CVE-2019-20840.patch fix CVE-2020-14398 [bsc#1173880], improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c + LibVNCServer-CVE-2020-14398.patch fix CVE-2020-14397 [bsc#1173700], NULL pointer dereference in libvncserver/rfbregion.c + LibVNCServer-CVE-2020-14397.patch fix CVE-2020-14399 [bsc#1173743], Byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c. + LibVNCServer-CVE-2020-14399.patch fix CVE-2020-14400 [bsc#1173691], Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c. + LibVNCServer-CVE-2020-14400.patch fix CVE-2020-14401 [bsc#1173694], potential integer overflows in libvncserver/scale.c + LibVNCServer-CVE-2020-14401.patch fix CVE-2020-14402 [bsc#1173701], out-of-bounds access via encodings. + LibVNCServer-CVE-2020-14402,14403,14404.patch fix CVE-2017-18922 [bsc#1173477], preauth buffer overwrite This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1025=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): LibVNCServer-debugsource-0.9.10-lp152.9.8.1 LibVNCServer-devel-0.9.10-lp152.9.8.1 libvncclient0-0.9.10-lp152.9.8.1 libvncclient0-debuginfo-0.9.10-lp152.9.8.1 libvncserver0-0.9.10-lp152.9.8.1 libvncserver0-debuginfo-0.9.10-lp152.9.8.1 References: https://www.suse.com/security/cve/CVE-2017-18922.html https://www.suse.com/security/cve/CVE-2018-21247.html https://www.suse.com/security/cve/CVE-2019-20839.html https://www.suse.com/security/cve/CVE-2019-20840.html https://www.suse.com/security/cve/CVE-2020-14397.html https://www.suse.com/security/cve/CVE-2020-14398.html https://www.suse.com/security/cve/CVE-2020-14399.html https://www.suse.com/security/cve/CVE-2020-14400.html https://www.suse.com/security/cve/CVE-2020-14401.html https://www.suse.com/security/cve/CVE-2020-14402.html https://bugzilla.suse.com/1173477 https://bugzilla.suse.com/1173691 https://bugzilla.suse.com/1173694 https://bugzilla.suse.com/1173700 https://bugzilla.suse.com/1173701 https://bugzilla.suse.com/1173743 https://bugzilla.suse.com/1173874 https://bugzilla.suse.com/1173875 https://bugzilla.suse.com/1173876 https://bugzilla.suse.com/1173880

1 0

openSUSE-SU-2020:1023-1: important: Security update for ldb, samba
by opensuse-security＠opensuse.org 21 Jul '20

21 Jul '20

openSUSE Security Update: Security update for ldb, samba ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1023-1 Rating: important References: #1141320 #1162680 #1169095 #1169521 #1169850 #1169851 #1171437 #1172307 #1173159 #1173160 #1173161 #1173359 #1174120 Cross-References: CVE-2020-10700 CVE-2020-10704 CVE-2020-10730 CVE-2020-10745 CVE-2020-10760 CVE-2020-14303 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves 6 vulnerabilities and has 7 fixes is now available. Description: This update for ldb, samba fixes the following issues: Changes in samba: - Update to samba 4.11.11 + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ and VLV combined; (bso#14364); (bsc#1173159] + CVE-2020-10745: invalid DNS or NBT queries containing dots use several seconds of CPU each; (bso#14378); (bsc#1173160). + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server with paged_result or VLV; (bso#14402); (bsc#1173161) + CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC nbt_server; (bso#14417); (bsc#1173359). - Update to samba 4.11.10 + Fix segfault when using SMBC_opendir_ctx() routine for share folder that contains incorrect symbols in any file name; (bso#14374). + vfs_shadow_copy2 doesn't fail case looking in snapdirseverywhere mode; (bso#14350) + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr; (bso#14413). + Malicous SMB1 server can crash libsmbclient; (bso#14366) + winbindd: Fix a use-after-free when winbind clients exit; (bso#14382) + ldb: Bump version to 2.0.11, LMDB databases can grow without bounds. (bso#14330) - Update to samba 4.11.9 + nmblib: Avoid undefined behaviour in handle_name_ptrs(); (bso#14242). + 'samba-tool group' commands do not handle group names with special chars correctly; (bso#14296). + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo is not valid; (bso#14237). + Missing check for DMAPI offline status in async DOS attributes; (bso#14293). + smbd: Ignore set NTACL requests which contain S-1-5-88 NFS ACEs; (bso#14307). + vfs_recycle: Prevent flooding the log if we're called on non-existant paths; (bso#14316) + smbd mistakenly updates a file's write-time on close; (bso#14320). + RPC handles cannot be differentiated in source3 RPC server; (bso#14359). + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313). + nsswitch: Fix use-after-free causing segfault in _pam_delete_cred; (bso#14327). + Fix fruit:time machine max size on arm; (bso#13622) + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294). + ctdb: Fix a memleak; (bso#14348). + libsmb: Don't try to find posix stat info in SMBC_getatr(). + ctdb-tcp: Move free of inbound queue to TCP restart; (bso#14295); (bsc#1162680). + s3/librpc/crypto: Fix double free with unresolved credential cache; (bso#14344); (bsc#1169095) + s3:libads: Fix ads_get_upn(); (bso#14336). + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294) + Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680). + ctdb-recoverd: Avoid dereferencing NULL rec->nodemap; (bso#14324) - Update to samba 4.11.8 + CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850); + CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - Update to samba 4.11.7 + s3: lib: nmblib. Clean up and harden nmb packet processing; (bso#14239). + s3: VFS: full_audit. Use system session_info if called from a temporary share definition; (bso#14283) + dsdb: Correctly handle memory in objectclass_attrs; (bso#14258). + ldb: version 2.0.9, Samba 4.11 and later give incorrect results for SCOPE_ONE searches; (bso#14270) + auth: Fix CIDs 1458418 and 1458420 Null pointer dereferences; (bso#14247). + smbd: Handle EINTR from open(2) properly; (bso#14285) + winbind member (source3) fails local SAM auth with empty domain name; (bso#14247) + winbindd: Handling missing idmap in getgrgid(); (bso#14265). + lib:util: Log mkdir error on correct debug levels; (bso#14253). + wafsamba: Do not use 'rU' as the 'U' is deprecated in Python 3.9; (bso#14266). + ctdb-tcp: Make error handling for outbound connection consistent; (bso#14274). - Update to samba 4.11.6 + pygpo: Use correct method flags; (bso#14209). + vfs_ceph_snapshots: Fix root relative path handling; (bso#14216); (bsc#1141320). + Avoiding bad call flags with python 3.8, using METH_NOARGS instead of zero; (bso#14209). + source4/utils/oLschema2ldif: Include stdint.h before cmocka.h; (bso#14218). + docs-xml/winbindnssinfo: Clarify interaction with idmap_ad etc; (bso#14122). + smbd: Fix the build with clang; (bso#14251). + upgradedns: Ensure lmdb lock files linked; (bso#14199). + s3: VFS: glusterfs: Reset nlinks for symlink entries during readdir; (bso#14182). + smbc_stat() doesn't return the correct st_mode and also the uid/gid is not filled (SMBv1) file; (bso#14101). + librpc: Fix string length checking in ndr_pull_charset_to_null(); (bso#14219). + ctdb-scripts: Strip square brackets when gathering connection info; (bso#14227). - Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307); - Installing: samba - samba-ad-dc.service does not exist and unit not found; (bsc#1171437); - Fix samba_winbind package is installing python3-base without python3 package; (bsc#1169521); Changes in ldb: - Update to version 2.0.12 + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ and VLV combined; (bso#14364); (bsc#1173159). + ldb_ldap: fix off-by-one increment in lldb_add_msg_attr; (bso#14413). + lib/ldb: add unit test for ldb_ldap internal code. - Update to version 2.0.11 + lib ldb: lmdb init var before calling mdb_reader_check. + lib ldb: lmdb clear stale readers on write txn start; (bso#14330). + ldb tests: Confirm lmdb free list handling This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1023=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): ctdb-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 ctdb-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 ctdb-pcp-pmda-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 ctdb-pcp-pmda-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 ctdb-tests-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 ctdb-tests-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 ldb-debugsource-2.0.12-lp152.2.3.1 ldb-tools-2.0.12-lp152.2.3.1 ldb-tools-debuginfo-2.0.12-lp152.2.3.1 libdcerpc-binding0-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libdcerpc-binding0-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libdcerpc-devel-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libdcerpc-samr-devel-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libdcerpc-samr0-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libdcerpc-samr0-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libdcerpc0-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libdcerpc0-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libldb-devel-2.0.12-lp152.2.3.1 libldb2-2.0.12-lp152.2.3.1 libldb2-debuginfo-2.0.12-lp152.2.3.1 libndr-devel-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libndr-krb5pac-devel-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libndr-krb5pac0-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libndr-krb5pac0-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libndr-nbt-devel-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libndr-nbt0-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libndr-nbt0-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libndr-standard-devel-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libndr-standard0-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libndr-standard0-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libndr0-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libndr0-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libnetapi-devel-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libnetapi0-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libnetapi0-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamba-credentials-devel-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamba-credentials0-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamba-credentials0-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamba-errors-devel-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamba-errors0-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamba-errors0-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamba-hostconfig-devel-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamba-hostconfig0-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamba-hostconfig0-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamba-passdb-devel-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamba-passdb0-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamba-passdb0-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamba-policy-devel-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamba-policy-python3-devel-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamba-policy0-python3-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamba-policy0-python3-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamba-util-devel-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamba-util0-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamba-util0-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamdb-devel-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamdb0-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamdb0-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsmbclient-devel-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsmbclient0-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsmbclient0-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsmbconf-devel-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsmbconf0-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsmbconf0-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsmbldap-devel-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsmbldap2-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsmbldap2-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libtevent-util-devel-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libtevent-util0-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libtevent-util0-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libwbclient-devel-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libwbclient0-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libwbclient0-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 python3-ldb-2.0.12-lp152.2.3.1 python3-ldb-debuginfo-2.0.12-lp152.2.3.1 python3-ldb-devel-2.0.12-lp152.2.3.1 samba-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 samba-ad-dc-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 samba-ad-dc-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 samba-client-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 samba-client-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 samba-core-devel-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 samba-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 samba-debugsource-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 samba-dsdb-modules-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 samba-dsdb-modules-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 samba-libs-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 samba-libs-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 samba-libs-python3-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 samba-libs-python3-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 samba-python3-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 samba-python3-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 samba-test-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 samba-test-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 samba-winbind-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 samba-winbind-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 - openSUSE Leap 15.2 (x86_64): libdcerpc-binding0-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libdcerpc-binding0-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libdcerpc-samr0-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libdcerpc-samr0-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libdcerpc0-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libdcerpc0-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libldb2-32bit-2.0.12-lp152.2.3.1 libldb2-32bit-debuginfo-2.0.12-lp152.2.3.1 libndr-krb5pac0-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libndr-krb5pac0-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libndr-nbt0-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libndr-nbt0-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libndr-standard0-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libndr-standard0-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libndr0-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libndr0-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libnetapi-devel-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libnetapi0-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libnetapi0-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamba-credentials0-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamba-credentials0-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamba-errors0-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamba-errors0-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamba-hostconfig0-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamba-hostconfig0-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamba-passdb0-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamba-passdb0-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamba-policy0-python3-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamba-policy0-python3-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamba-util0-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamba-util0-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamdb0-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamdb0-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsmbclient0-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsmbclient0-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsmbconf0-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsmbconf0-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsmbldap2-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsmbldap2-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libtevent-util0-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libtevent-util0-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libwbclient0-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libwbclient0-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 python3-ldb-32bit-2.0.12-lp152.2.3.1 python3-ldb-32bit-debuginfo-2.0.12-lp152.2.3.1 samba-ad-dc-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 samba-ad-dc-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 samba-ceph-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 samba-ceph-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 samba-client-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 samba-client-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 samba-libs-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 samba-libs-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 samba-libs-python3-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 samba-libs-python3-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 samba-winbind-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 samba-winbind-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 - openSUSE Leap 15.2 (noarch): samba-doc-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 References: https://www.suse.com/security/cve/CVE-2020-10700.html https://www.suse.com/security/cve/CVE-2020-10704.html https://www.suse.com/security/cve/CVE-2020-10730.html https://www.suse.com/security/cve/CVE-2020-10745.html https://www.suse.com/security/cve/CVE-2020-10760.html https://www.suse.com/security/cve/CVE-2020-14303.html https://bugzilla.suse.com/1141320 https://bugzilla.suse.com/1162680 https://bugzilla.suse.com/1169095 https://bugzilla.suse.com/1169521 https://bugzilla.suse.com/1169850 https://bugzilla.suse.com/1169851 https://bugzilla.suse.com/1171437 https://bugzilla.suse.com/1172307 https://bugzilla.suse.com/1173159 https://bugzilla.suse.com/1173160 https://bugzilla.suse.com/1173161 https://bugzilla.suse.com/1173359 https://bugzilla.suse.com/1174120

1 0

openSUSE-RU-2020:1024-1: moderate: Recommended update for NetworkManager-branding
by maintenance＠opensuse.org 21 Jul '20

21 Jul '20

openSUSE Recommended Update: Recommended update for NetworkManager-branding ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1024-1 Rating: moderate References: #1172773 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for NetworkManager-branding fixes the following issues: - Fix an issue when NetworkManager uses an enexpanded macro. (bsc#1172773) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1024=1 Package List: - openSUSE Leap 15.2 (noarch): NetworkManager-branding-openSUSE-42.1-lp152.2.3.1 References: https://bugzilla.suse.com/1172773

1 0

openSUSE-SU-2020:1022-1: moderate: Security update for ant
by opensuse-security＠opensuse.org 20 Jul '20

20 Jul '20

openSUSE Security Update: Security update for ant ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1022-1 Rating: moderate References: #1171696 Cross-References: CVE-2020-1945 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for ant fixes the following issues: - CVE-2020-1945: Fixed an inseure temorary file vulnerability which could have potentially leaked sensitive information (bsc#1171696). This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1022=1 Package List: - openSUSE Leap 15.2 (noarch): ant-1.10.7-lp152.2.3.1 ant-antlr-1.10.7-lp152.2.3.1 ant-apache-bcel-1.10.7-lp152.2.3.1 ant-apache-bsf-1.10.7-lp152.2.3.1 ant-apache-log4j-1.10.7-lp152.2.3.1 ant-apache-oro-1.10.7-lp152.2.3.1 ant-apache-regexp-1.10.7-lp152.2.3.1 ant-apache-resolver-1.10.7-lp152.2.3.1 ant-apache-xalan2-1.10.7-lp152.2.3.1 ant-commons-logging-1.10.7-lp152.2.3.1 ant-commons-net-1.10.7-lp152.2.3.1 ant-imageio-1.10.7-lp152.2.3.1 ant-javamail-1.10.7-lp152.2.3.1 ant-jdepend-1.10.7-lp152.2.3.1 ant-jmf-1.10.7-lp152.2.3.1 ant-jsch-1.10.7-lp152.2.3.1 ant-junit-1.10.7-lp152.2.3.1 ant-junit5-1.10.7-lp152.2.3.1 ant-manual-1.10.7-lp152.2.3.1 ant-scripts-1.10.7-lp152.2.3.1 ant-swing-1.10.7-lp152.2.3.1 ant-testutil-1.10.7-lp152.2.3.1 ant-xz-1.10.7-lp152.2.3.1 References: https://www.suse.com/security/cve/CVE-2020-1945.html https://bugzilla.suse.com/1171696

1 0

openSUSE-SU-2020:1021-1: important: Security update for chromium
by opensuse-security＠opensuse.org 20 Jul '20

20 Jul '20

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1021-1 Rating: important References: #1174189 Cross-References: CVE-2020-6510 CVE-2020-6511 CVE-2020-6512 CVE-2020-6513 CVE-2020-6514 CVE-2020-6515 CVE-2020-6516 CVE-2020-6517 CVE-2020-6518 CVE-2020-6519 CVE-2020-6520 CVE-2020-6521 CVE-2020-6522 CVE-2020-6523 CVE-2020-6524 CVE-2020-6525 CVE-2020-6526 CVE-2020-6527 CVE-2020-6528 CVE-2020-6529 CVE-2020-6530 CVE-2020-6531 CVE-2020-6533 CVE-2020-6534 CVE-2020-6535 CVE-2020-6536 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 26 vulnerabilities is now available. Description: This update for chromium fixes the following issues: - Update to 84.0.4147.89 boo#1174189: * Critical CVE-2020-6510: Heap buffer overflow in background fetch. * High CVE-2020-6511: Side-channel information leakage in content security policy. * High CVE-2020-6512: Type Confusion in V8. * High CVE-2020-6513: Heap buffer overflow in PDFium. * High CVE-2020-6514: Inappropriate implementation in WebRTC. * High CVE-2020-6515: Use after free in tab strip. * High CVE-2020-6516: Policy bypass in CORS. * High CVE-2020-6517: Heap buffer overflow in history. * Medium CVE-2020-6518: Use after free in developer tools. * Medium CVE-2020-6519: Policy bypass in CSP. * Medium CVE-2020-6520: Heap buffer overflow in Skia. * Medium CVE-2020-6521: Side-channel information leakage in autofill. * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers. * Medium CVE-2020-6523: Out of bounds write in Skia. * Medium CVE-2020-6524: Heap buffer overflow in WebAudio. * Medium CVE-2020-6525: Heap buffer overflow in Skia. * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox. * Low CVE-2020-6527: Insufficient policy enforcement in CSP. * Low CVE-2020-6528: Incorrect security UI in basic auth. * Low CVE-2020-6529: Inappropriate implementation in WebRTC. * Low CVE-2020-6530: Out of bounds memory access in developer tools. * Low CVE-2020-6531: Side-channel information leakage in scroll to text. * Low CVE-2020-6533: Type Confusion in V8. * Low CVE-2020-6534: Heap buffer overflow in WebRTC. * Low CVE-2020-6535: Insufficient data validation in WebUI. * Low CVE-2020-6536: Incorrect security UI in PWAs. - Use bundled xcb-proto as we need to generate py2 bindings - Try to fix non-wayland build for Leap builds Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1021=1 Package List: - openSUSE Leap 15.1 (x86_64): chromedriver-84.0.4147.89-lp151.2.109.1 chromedriver-debuginfo-84.0.4147.89-lp151.2.109.1 chromium-84.0.4147.89-lp151.2.109.1 chromium-debuginfo-84.0.4147.89-lp151.2.109.1 chromium-debugsource-84.0.4147.89-lp151.2.109.1 References: https://www.suse.com/security/cve/CVE-2020-6510.html https://www.suse.com/security/cve/CVE-2020-6511.html https://www.suse.com/security/cve/CVE-2020-6512.html https://www.suse.com/security/cve/CVE-2020-6513.html https://www.suse.com/security/cve/CVE-2020-6514.html https://www.suse.com/security/cve/CVE-2020-6515.html https://www.suse.com/security/cve/CVE-2020-6516.html https://www.suse.com/security/cve/CVE-2020-6517.html https://www.suse.com/security/cve/CVE-2020-6518.html https://www.suse.com/security/cve/CVE-2020-6519.html https://www.suse.com/security/cve/CVE-2020-6520.html https://www.suse.com/security/cve/CVE-2020-6521.html https://www.suse.com/security/cve/CVE-2020-6522.html https://www.suse.com/security/cve/CVE-2020-6523.html https://www.suse.com/security/cve/CVE-2020-6524.html https://www.suse.com/security/cve/CVE-2020-6525.html https://www.suse.com/security/cve/CVE-2020-6526.html https://www.suse.com/security/cve/CVE-2020-6527.html https://www.suse.com/security/cve/CVE-2020-6528.html https://www.suse.com/security/cve/CVE-2020-6529.html https://www.suse.com/security/cve/CVE-2020-6530.html https://www.suse.com/security/cve/CVE-2020-6531.html https://www.suse.com/security/cve/CVE-2020-6533.html https://www.suse.com/security/cve/CVE-2020-6534.html https://www.suse.com/security/cve/CVE-2020-6535.html https://www.suse.com/security/cve/CVE-2020-6536.html https://bugzilla.suse.com/1174189

1 0

openSUSE-SU-2020:1020-1: important: Security update for chromium
by opensuse-security＠opensuse.org 20 Jul '20

20 Jul '20

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1020-1 Rating: important References: #1174189 Cross-References: CVE-2020-6510 CVE-2020-6511 CVE-2020-6512 CVE-2020-6513 CVE-2020-6514 CVE-2020-6515 CVE-2020-6516 CVE-2020-6517 CVE-2020-6518 CVE-2020-6519 CVE-2020-6520 CVE-2020-6521 CVE-2020-6522 CVE-2020-6523 CVE-2020-6524 CVE-2020-6525 CVE-2020-6526 CVE-2020-6527 CVE-2020-6528 CVE-2020-6529 CVE-2020-6530 CVE-2020-6531 CVE-2020-6533 CVE-2020-6534 CVE-2020-6535 CVE-2020-6536 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes 26 vulnerabilities is now available. Description: This update for chromium fixes the following issues: - Update to 84.0.4147.89 boo#1174189: * Critical CVE-2020-6510: Heap buffer overflow in background fetch. * High CVE-2020-6511: Side-channel information leakage in content security policy. * High CVE-2020-6512: Type Confusion in V8. * High CVE-2020-6513: Heap buffer overflow in PDFium. * High CVE-2020-6514: Inappropriate implementation in WebRTC. * High CVE-2020-6515: Use after free in tab strip. * High CVE-2020-6516: Policy bypass in CORS. * High CVE-2020-6517: Heap buffer overflow in history. * Medium CVE-2020-6518: Use after free in developer tools. * Medium CVE-2020-6519: Policy bypass in CSP. * Medium CVE-2020-6520: Heap buffer overflow in Skia. * Medium CVE-2020-6521: Side-channel information leakage in autofill. * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers. * Medium CVE-2020-6523: Out of bounds write in Skia. * Medium CVE-2020-6524: Heap buffer overflow in WebAudio. * Medium CVE-2020-6525: Heap buffer overflow in Skia. * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox. * Low CVE-2020-6527: Insufficient policy enforcement in CSP. * Low CVE-2020-6528: Incorrect security UI in basic auth. * Low CVE-2020-6529: Inappropriate implementation in WebRTC. * Low CVE-2020-6530: Out of bounds memory access in developer tools. * Low CVE-2020-6531: Side-channel information leakage in scroll to text. * Low CVE-2020-6533: Type Confusion in V8. * Low CVE-2020-6534: Heap buffer overflow in WebRTC. * Low CVE-2020-6535: Insufficient data validation in WebUI. * Low CVE-2020-6536: Incorrect security UI in PWAs. - Use bundled xcb-proto as we need to generate py2 bindings - Try to fix non-wayland build for Leap builds Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1020=1 Package List: - openSUSE Leap 15.2 (x86_64): chromedriver-84.0.4147.89-lp152.2.6.2 chromedriver-debuginfo-84.0.4147.89-lp152.2.6.2 chromium-84.0.4147.89-lp152.2.6.2 chromium-debuginfo-84.0.4147.89-lp152.2.6.2 chromium-debugsource-84.0.4147.89-lp152.2.6.2 References: https://www.suse.com/security/cve/CVE-2020-6510.html https://www.suse.com/security/cve/CVE-2020-6511.html https://www.suse.com/security/cve/CVE-2020-6512.html https://www.suse.com/security/cve/CVE-2020-6513.html https://www.suse.com/security/cve/CVE-2020-6514.html https://www.suse.com/security/cve/CVE-2020-6515.html https://www.suse.com/security/cve/CVE-2020-6516.html https://www.suse.com/security/cve/CVE-2020-6517.html https://www.suse.com/security/cve/CVE-2020-6518.html https://www.suse.com/security/cve/CVE-2020-6519.html https://www.suse.com/security/cve/CVE-2020-6520.html https://www.suse.com/security/cve/CVE-2020-6521.html https://www.suse.com/security/cve/CVE-2020-6522.html https://www.suse.com/security/cve/CVE-2020-6523.html https://www.suse.com/security/cve/CVE-2020-6524.html https://www.suse.com/security/cve/CVE-2020-6525.html https://www.suse.com/security/cve/CVE-2020-6526.html https://www.suse.com/security/cve/CVE-2020-6527.html https://www.suse.com/security/cve/CVE-2020-6528.html https://www.suse.com/security/cve/CVE-2020-6529.html https://www.suse.com/security/cve/CVE-2020-6530.html https://www.suse.com/security/cve/CVE-2020-6531.html https://www.suse.com/security/cve/CVE-2020-6533.html https://www.suse.com/security/cve/CVE-2020-6534.html https://www.suse.com/security/cve/CVE-2020-6535.html https://www.suse.com/security/cve/CVE-2020-6536.html https://bugzilla.suse.com/1174189

1 0

openSUSE-RU-2020:1019-1: moderate: Recommended update for libsolv, libzypp, zypper
by maintenance＠opensuse.org 20 Jul '20

20 Jul '20

openSUSE Recommended Update: Recommended update for libsolv, libzypp, zypper ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1019-1 Rating: moderate References: #1169947 #1170801 #1172925 #1173106 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for libsolv, libzypp, zypper fixes the following issues: libsolv was updated to: - Enable zstd compression support for sle15 zypper was updated to version 1.14.37: - Print switch abbrev warning to stderr (bsc#1172925) - Fix typo in man page (bsc#1169947) libzypp was updated to 17.24.0 - Fix core dump with corrupted history file (bsc#1170801) - Enable zchunk metadata download if libsolv supports it. - Better handling of the purge-kernels algorithm. (bsc#1173106) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1019=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libsolv-debuginfo-0.7.14-lp152.2.3.1 libsolv-debugsource-0.7.14-lp152.2.3.1 libsolv-demo-0.7.14-lp152.2.3.1 libsolv-demo-debuginfo-0.7.14-lp152.2.3.1 libsolv-devel-0.7.14-lp152.2.3.1 libsolv-devel-debuginfo-0.7.14-lp152.2.3.1 libsolv-tools-0.7.14-lp152.2.3.1 libsolv-tools-debuginfo-0.7.14-lp152.2.3.1 libzypp-17.24.0-lp152.2.3.2 libzypp-debuginfo-17.24.0-lp152.2.3.2 libzypp-debugsource-17.24.0-lp152.2.3.2 libzypp-devel-17.24.0-lp152.2.3.2 libzypp-devel-doc-17.24.0-lp152.2.3.2 perl-solv-0.7.14-lp152.2.3.1 perl-solv-debuginfo-0.7.14-lp152.2.3.1 python-solv-0.7.14-lp152.2.3.1 python-solv-debuginfo-0.7.14-lp152.2.3.1 python3-solv-0.7.14-lp152.2.3.1 python3-solv-debuginfo-0.7.14-lp152.2.3.1 ruby-solv-0.7.14-lp152.2.3.1 ruby-solv-debuginfo-0.7.14-lp152.2.3.1 zypper-1.14.37-lp152.2.3.1 zypper-debuginfo-1.14.37-lp152.2.3.1 zypper-debugsource-1.14.37-lp152.2.3.1 - openSUSE Leap 15.2 (noarch): zypper-aptitude-1.14.37-lp152.2.3.1 zypper-log-1.14.37-lp152.2.3.1 zypper-needs-restarting-1.14.37-lp152.2.3.1 References: https://bugzilla.suse.com/1169947 https://bugzilla.suse.com/1170801 https://bugzilla.suse.com/1172925 https://bugzilla.suse.com/1173106

1 0

openSUSE-RU-2020:1018-1: Recommended update for python-numpy
by maintenance＠opensuse.org 20 Jul '20

20 Jul '20

openSUSE Recommended Update: Recommended update for python-numpy ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1018-1 Rating: low References: #1166678 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-numpy fixes the following issues: - Fixes a file conflict with /usr/bin/f2py (bsc#1166678) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1018=1 Package List: - openSUSE Leap 15.2 (x86_64): python-numpy-debugsource-1.17.3-lp152.2.4.1 python-numpy_1_17_3-gnu-hpc-debugsource-1.17.3-lp152.2.4.1 python3-numpy-1.17.3-lp152.2.4.1 python3-numpy-debuginfo-1.17.3-lp152.2.4.1 python3-numpy-devel-1.17.3-lp152.2.4.1 python3-numpy-gnu-hpc-1.17.3-lp152.2.4.1 python3-numpy-gnu-hpc-devel-1.17.3-lp152.2.4.1 python3-numpy_1_17_3-gnu-hpc-1.17.3-lp152.2.4.1 python3-numpy_1_17_3-gnu-hpc-debuginfo-1.17.3-lp152.2.4.1 python3-numpy_1_17_3-gnu-hpc-devel-1.17.3-lp152.2.4.1 References: https://bugzilla.suse.com/1166678

1 0

openSUSE-SU-2020:1016-1: moderate: Security update for mumble
by opensuse-security＠opensuse.org 20 Jul '20

20 Jul '20

openSUSE Security Update: Security update for mumble ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1016-1 Rating: moderate References: #1174041 Affected Products: openSUSE Leap 15.2 openSUSE Leap 15.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for mumble fixes the following issues: mumble was updated 1.3.2: * client: Fixed overlay not starting Update to upstream version 1.3.1 - Security * Fixed: Potential exploit in the OCB2 encryption (#4227) boo#1174041 - ICE * Fixed: Added missing UserKDFIterations field to UserInfo => Prevents getRegistration() from failing with enumerator out of range error (#3835) - GRPC * Fixed: Segmentation fault during murmur shutdown (#3938) - Client * Fixed: Crash when using multiple monitors (#3756) * Fixed: Don't send empty message from clipboard via shortcut, if clipboard is empty (#3864) * Fixed: Talking indicator being able to freeze to indicate talking when self-muted (#4006) * Fixed: High CPU usage for update-check if update server not available (#4019) * Fixed: DBus getCurrentUrl returning empty string when not in root-channel (#4029) * Fixed: Small parts of whispering leaking out (#4051) * Fixed: Last audio frame of normal talking is sent to last whisper target (#4050) * Fixed: LAN-icon not found in ConnectDialog (#4058) * Improved: Set maximal vertical size for User Volume Adjustment dialog (#3801) * Improved: Don't send empty data to PulseAudio (#3316) * Improved: Use the SRV resolved port for UDP connections (#3820) * Improved: Manual Plugin UI (#3919) * Improved: Don't start Jack server by default (#3990) * Improved: Overlay doesn't hook into all other processes by default (#4041) * Improved: Wait longer before disconnecting from a server due to unanswered Ping-messages (#4123) - Server * Fixed: Possibility to circumvent max user-count in channel (#3880) * Fixed: Rate-limit implementation susceptible to time-underflow (#4004) * Fixed: OpenSSL error 140E0197 with Qt >= 5.12.2 (#4032) * Fixed: VersionCheck for SQL for when to use the WAL feature (#4163) * Fixed: Wrong database encoding that could lead to server-crash (#4220) * Fixed: DB crash due to primary key violation (now performs "UPSERT" to avoid this) (#4105) * Improved: The fields in the Version ProtoBuf message are now size-restricted (#4101) - use the "profile profilename /path/to/binary" syntax to make "ps aufxZ" more readable Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1016=1 - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1016=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): mumble-1.3.2-lp152.2.3.1 mumble-debuginfo-1.3.2-lp152.2.3.1 mumble-debugsource-1.3.2-lp152.2.3.1 mumble-server-1.3.2-lp152.2.3.1 mumble-server-debuginfo-1.3.2-lp152.2.3.1 - openSUSE Leap 15.2 (x86_64): mumble-32bit-1.3.2-lp152.2.3.1 mumble-32bit-debuginfo-1.3.2-lp152.2.3.1 - openSUSE Leap 15.1 (i586 x86_64): mumble-1.3.2-lp151.4.12.1 mumble-debuginfo-1.3.2-lp151.4.12.1 mumble-debugsource-1.3.2-lp151.4.12.1 mumble-server-1.3.2-lp151.4.12.1 mumble-server-debuginfo-1.3.2-lp151.4.12.1 - openSUSE Leap 15.1 (x86_64): mumble-32bit-1.3.2-lp151.4.12.1 mumble-32bit-debuginfo-1.3.2-lp151.4.12.1 References: https://bugzilla.suse.com/1174041

1 0

openSUSE-SU-2020:1017-1: important: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 20 Jul '20

20 Jul '20

openSUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1017-1 Rating: important References: #1166238 #1173576 #1173613 Cross-References: CVE-2020-12402 CVE-2020-12415 CVE-2020-12416 CVE-2020-12417 CVE-2020-12418 CVE-2020-12419 CVE-2020-12420 CVE-2020-12421 CVE-2020-12422 CVE-2020-12423 CVE-2020-12424 CVE-2020-12425 CVE-2020-12426 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 13 vulnerabilities is now available. Description: This update for MozillaFirefox to version 78.0.1 ESR fixes the following issues: Security issues fixed: - CVE-2020-12415: AppCache manifest poisoning due to url encoded character processing (bsc#1173576). - CVE-2020-12416: Use-after-free in WebRTC VideoBroadcaster (bsc#1173576). - CVE-2020-12417: Memory corruption due to missing sign-extension for ValueTags on ARM64 (bsc#1173576). - CVE-2020-12418: Information disclosure due to manipulated URL object (bsc#1173576). - CVE-2020-12419: Use-after-free in nsGlobalWindowInner (bsc#1173576). - CVE-2020-12420: Use-After-Free when trying to connect to a STUN server (bsc#1173576). - CVE-2020-12402: RSA Key Generation vulnerable to side-channel attack (bsc#1173576). - CVE-2020-12421: Add-On updates did not respect the same certificate trust rules as software updates (bsc#1173576). - CVE-2020-12422: Integer overflow in nsJPEGEncoder::emptyOutputBuffer (bsc#1173576). - CVE-2020-12423: DLL Hijacking due to searching %PATH% for a library (bsc#1173576). - CVE-2020-12424: WebRTC permission prompt could have been bypassed by a compromised content process (bsc#1173576). - CVE-2020-12425: Out of bound read in Date.parse() (bsc#1173576). - CVE-2020-12426: Memory safety bugs fixed in Firefox 78 (bsc#1173576). - FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled (bsc#1167231). Non-security issues fixed: - Fixed interaction with freetype6 (bsc#1173613). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1017=1 Package List: - openSUSE Leap 15.1 (x86_64): MozillaFirefox-78.0.1-lp151.2.53.1 MozillaFirefox-branding-upstream-78.0.1-lp151.2.53.1 MozillaFirefox-buildsymbols-78.0.1-lp151.2.53.1 MozillaFirefox-debuginfo-78.0.1-lp151.2.53.1 MozillaFirefox-debugsource-78.0.1-lp151.2.53.1 MozillaFirefox-devel-78.0.1-lp151.2.53.1 MozillaFirefox-translations-common-78.0.1-lp151.2.53.1 MozillaFirefox-translations-other-78.0.1-lp151.2.53.1 References: https://www.suse.com/security/cve/CVE-2020-12402.html https://www.suse.com/security/cve/CVE-2020-12415.html https://www.suse.com/security/cve/CVE-2020-12416.html https://www.suse.com/security/cve/CVE-2020-12417.html https://www.suse.com/security/cve/CVE-2020-12418.html https://www.suse.com/security/cve/CVE-2020-12419.html https://www.suse.com/security/cve/CVE-2020-12420.html https://www.suse.com/security/cve/CVE-2020-12421.html https://www.suse.com/security/cve/CVE-2020-12422.html https://www.suse.com/security/cve/CVE-2020-12423.html https://www.suse.com/security/cve/CVE-2020-12424.html https://www.suse.com/security/cve/CVE-2020-12425.html https://www.suse.com/security/cve/CVE-2020-12426.html https://bugzilla.suse.com/1166238 https://bugzilla.suse.com/1173576 https://bugzilla.suse.com/1173613

1 0

openSUSE-SU-2020:1015-1: moderate: Security update for openexr
by opensuse-security＠opensuse.org 19 Jul '20

19 Jul '20

openSUSE Security Update: Security update for openexr ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1015-1 Rating: moderate References: #1173466 #1173467 #1173469 Cross-References: CVE-2020-15304 CVE-2020-15305 CVE-2020-15306 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for openexr fixes the following issues: - CVE-2020-15304: Fixed a NULL pointer dereference in TiledInputFile:TiledInputFile() (bsc#1173466). - CVE-2020-15305: Fixed a use-after-free in DeepScanLineInputFile:DeepScanLineInputFile() (bsc#1173467). - CVE-2020-15306: Fixed a heap buffer overflow in getChunkOffsetTableSize() (bsc#1173469). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1015=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libIlmImf-2_2-23-2.2.1-lp152.7.5.1 libIlmImf-2_2-23-debuginfo-2.2.1-lp152.7.5.1 libIlmImfUtil-2_2-23-2.2.1-lp152.7.5.1 libIlmImfUtil-2_2-23-debuginfo-2.2.1-lp152.7.5.1 openexr-2.2.1-lp152.7.5.1 openexr-debuginfo-2.2.1-lp152.7.5.1 openexr-debugsource-2.2.1-lp152.7.5.1 openexr-devel-2.2.1-lp152.7.5.1 openexr-doc-2.2.1-lp152.7.5.1 - openSUSE Leap 15.2 (x86_64): libIlmImf-2_2-23-32bit-2.2.1-lp152.7.5.1 libIlmImf-2_2-23-32bit-debuginfo-2.2.1-lp152.7.5.1 libIlmImfUtil-2_2-23-32bit-2.2.1-lp152.7.5.1 libIlmImfUtil-2_2-23-32bit-debuginfo-2.2.1-lp152.7.5.1 References: https://www.suse.com/security/cve/CVE-2020-15304.html https://www.suse.com/security/cve/CVE-2020-15305.html https://www.suse.com/security/cve/CVE-2020-15306.html https://bugzilla.suse.com/1173466 https://bugzilla.suse.com/1173467 https://bugzilla.suse.com/1173469

1 0

openSUSE-SU-2020:1014-1: important: Security update for google-compute-engine
by opensuse-security＠opensuse.org 19 Jul '20

19 Jul '20

openSUSE Security Update: Security update for google-compute-engine ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1014-1 Rating: important References: #1169978 #1173258 Cross-References: CVE-2020-8903 CVE-2020-8907 CVE-2020-8933 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for google-compute-engine fixes the following issues: - Don't enable and start google-network-daemon.service when it's already installed (bsc#1169978) + Do not add the created user to the adm (CVE-2020-8903), docker (CVE-2020-8907), or lxd (CVE-2020-8933) groups if they exist (bsc#1173258) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1014=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): google-compute-engine-debugsource-20190801-lp152.5.4.1 google-compute-engine-oslogin-20190801-lp152.5.4.1 google-compute-engine-oslogin-debuginfo-20190801-lp152.5.4.1 - openSUSE Leap 15.2 (x86_64): google-compute-engine-oslogin-32bit-20190801-lp152.5.4.1 google-compute-engine-oslogin-32bit-debuginfo-20190801-lp152.5.4.1 - openSUSE Leap 15.2 (noarch): google-compute-engine-init-20190801-lp152.5.4.1 References: https://www.suse.com/security/cve/CVE-2020-8903.html https://www.suse.com/security/cve/CVE-2020-8907.html https://www.suse.com/security/cve/CVE-2020-8933.html https://bugzilla.suse.com/1169978 https://bugzilla.suse.com/1173258

1 0

openSUSE-OU-2020:1013-1: moderate: Optional update for python-Cerberus
by maintenance＠opensuse.org 19 Jul '20

19 Jul '20

openSUSE Optional Update: Optional update for python-Cerberus ______________________________________________________________________________ Announcement ID: openSUSE-OU-2020:1013-1 Rating: moderate References: #1121858 #1173465 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has two optional fixes can now be installed. Description: This update for python-Cerberus fixes the following issues: - Update to version 1.3.2 * includes various features and improvements - please refer to the changelog for a detailed technical list of changes This update was imported from the SUSE:SLE-15-SP1:Update update project. This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Optional Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1013=1 Package List: - openSUSE Backports SLE-15-SP1 (noarch): python2-Cerberus-1.3.2-bp151.2.1 References: https://bugzilla.suse.com/1121858 https://bugzilla.suse.com/1173465

1 0

openSUSE-RU-2020:1012-1: moderate: Recommended update for pan
by maintenance＠opensuse.org 19 Jul '20

19 Jul '20

openSUSE Recommended Update: Recommended update for pan ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1012-1 Rating: moderate References: #1166404 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for pan fixes the following issues: - Fix message sending when using gmime 3.0 (boo#1166404, Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1012=1 Package List: - openSUSE Leap 15.2 (noarch): pan-lang-0.146-lp152.2.3.1 - openSUSE Leap 15.2 (x86_64): pan-0.146-lp152.2.3.1 pan-debuginfo-0.146-lp152.2.3.1 pan-debugsource-0.146-lp152.2.3.1 References: https://bugzilla.suse.com/1166404

1 0

openSUSE-SU-2020:1011-1: important: Security update for singularity
by opensuse-security＠opensuse.org 19 Jul '20

19 Jul '20

openSUSE Security Update: Security update for singularity ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1011-1 Rating: important References: #1174148 #1174150 #1174152 Cross-References: CVE-2020-13845 CVE-2020-13846 CVE-2020-13847 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for singularity fixes the following issues: - New version 3.6.0. This version introduces a new signature format for SIF images, and changes to the signing / verification code to address the following security problems: - CVE-2020-13845, boo#1174150 In Singularity 3.x versions below 3.6.0, issues allow the ECL to be bypassed by a malicious user. - CVE-2020-13846, boo#1174148 In Singularity 3.5 the --all / -a option to singularity verify returns success even when some objects in a SIF container are not signed, or cannot be verified. - CVE-2020-13847, boo#1174152 In Singularity 3.x versions below 3.6.0, Singularity's sign and verify commands do not sign metadata found in the global header or data object descriptors of a SIF file, allowing an attacker to cause unexpected behavior. A signed container may verify successfully, even when it has been modified in ways that could be exploited to cause malicious behavior. - New features / functionalities - A new '--legacy-insecure' flag to verify allows verification of SIF signatures in the old, insecure format. - A new '-l / --logs' flag for instance list that shows the paths to instance STDERR / STDOUT log files. - The --json output of instance list now include paths to STDERR / STDOUT log files. - Singularity now supports the execution of minimal Docker/OCI containers that do not contain /bin/sh, e.g. docker://hello-world. - A new cache structure is used that is concurrency safe on a filesystem that supports atomic rename. If you downgrade to Singularity 3.5 or older after using 3.6 you will need to run singularity cache clean. - A plugin system rework adds new hook points that will allow the development of plugins that modify behavior of the runtime. An image driver concept is introduced for plugins to support new ways of handling image and overlay mounts. Plugins built for <=3.5 are not compatible with 3.6. - The --bind flag can now bind directories from a SIF or ext3 image into a container. - The --fusemount feature to mount filesystems to a container via FUSE drivers is now a supported feature (previously an experimental hidden flag). - This permits users to mount e.g. sshfs and cvmfs filesystems to the container at runtime. - A new -c/--config flag allows an alternative singularity.conf to be specified by the root user, or all users in an unprivileged installation. - A new --env flag allows container environment variables to be set via the Singularity command line. - A new --env-file flag allows container environment variables to be set from a specified file. - A new --days flag for cache clean allows removal of items older than a specified number of days. Replaces the --name flag which is not generally useful as the cache entries are stored by hash, not a friendly name. - Changed defaults / behaviours - New signature format (see security fixes above). - Fixed spacing of singularity instance list to be dynamically changing based off of input lengths instead of fixed number of spaces to account for long instance names. - Environment variables prefixed with SINGULARITYENV_ always take precedence over variables without SINGULARITYENV_ prefix. - The %post build section inherits environment variables from the base image. - %files from ... will now follow symlinks for sources that are directly specified, or directly resolved from a glob pattern. It will not follow symlinks found through directory traversal. This mirrors Docker multi-stage COPY behaviour. - Restored the CWD mount behaviour of v2, implying that CWD path is not recreated inside container and any symlinks in the CWD path are not resolved anymore to determine the destination path inside container. - The %test build section is executed the same manner as singularity test image. --fusemount with the container: default directive will foreground the FUSE process. Use container-daemon: for previous behavior. - Deprecate -a / --all option to sign/verify as new signature behavior makes this the default. - For more information about upstream changes, please check: https://github.com/hpcng/singularity/blob/master/CHANGELOG.md - Removed --name flag for cache clean; replaced with --days. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1011=1 Package List: - openSUSE Leap 15.2 (x86_64): singularity-3.6.0-lp152.2.3.1 singularity-debuginfo-3.6.0-lp152.2.3.1 References: https://www.suse.com/security/cve/CVE-2020-13845.html https://www.suse.com/security/cve/CVE-2020-13846.html https://www.suse.com/security/cve/CVE-2020-13847.html https://bugzilla.suse.com/1174148 https://bugzilla.suse.com/1174150 https://bugzilla.suse.com/1174152

1 0

openSUSE-RU-2020:1010-1: important: Recommended update for yast2-installation
by maintenance＠opensuse.org 19 Jul '20

19 Jul '20

openSUSE Recommended Update: Recommended update for yast2-installation ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1010-1 Rating: important References: #1172853 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-installation fixes the following issues: - Fixes an isuse where /etc/nvme/hostnqn nor /etc/nvme/hostid were available after system installation (bsc#1172853) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1010=1 Package List: - openSUSE Leap 15.2 (noarch): yast2-installation-4.2.43-lp152.2.3.1 References: https://bugzilla.suse.com/1172853

1 0

openSUSE-RU-2020:1006-1: moderate: Recommended update for resource-agents
by maintenance＠opensuse.org 19 Jul '20

19 Jul '20

openSUSE Recommended Update: Recommended update for resource-agents ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1006-1 Rating: moderate References: #1170270 #1172734 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for resource-agents fixes the following issues: - Fixed a bug where the pulling of images was stuck (bsc#1170270) - Added a fix for defect file /usr/lib/ocf/resource.d/heartbeat/clvm (bsc#1172734) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1006=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): ldirectord-4.4.0+git57.70549516-lp152.2.3.1 resource-agents-4.4.0+git57.70549516-lp152.2.3.1 resource-agents-debuginfo-4.4.0+git57.70549516-lp152.2.3.1 resource-agents-debugsource-4.4.0+git57.70549516-lp152.2.3.1 - openSUSE Leap 15.2 (noarch): monitoring-plugins-metadata-4.4.0+git57.70549516-lp152.2.3.1 References: https://bugzilla.suse.com/1170270 https://bugzilla.suse.com/1172734

1 0

openSUSE-RU-2020:1008-1: moderate: Recommended update for keepassxc
by maintenance＠opensuse.org 19 Jul '20

19 Jul '20

openSUSE Recommended Update: Recommended update for keepassxc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1008-1 Rating: moderate References: #1171438 Affected Products: openSUSE Leap 15.2 openSUSE Leap 15.1 openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for keepassxc fixes the following issues: - Update to version 2.6.0: * https://keepassxc.org/blog/2020-07-07-2.6.0-released/ * https://github.com/keepassxreboot/keepassxc/releases/tag/2.6.0 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1008=1 - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1008=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1008=1 Package List: - openSUSE Leap 15.2 (noarch): keepassxc-lang-2.6.0-lp152.3.3.1 - openSUSE Leap 15.2 (x86_64): keepassxc-2.6.0-lp152.3.3.1 keepassxc-debuginfo-2.6.0-lp152.3.3.1 keepassxc-debugsource-2.6.0-lp152.3.3.1 - openSUSE Leap 15.1 (x86_64): keepassxc-2.6.0-lp151.2.18.1 keepassxc-debuginfo-2.6.0-lp151.2.18.1 keepassxc-debugsource-2.6.0-lp151.2.18.1 - openSUSE Leap 15.1 (noarch): keepassxc-lang-2.6.0-lp151.2.18.1 - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): keepassxc-2.6.0-bp151.3.15.1 - openSUSE Backports SLE-15-SP1 (noarch): keepassxc-lang-2.6.0-bp151.3.15.1 References: https://bugzilla.suse.com/1171438

1 0

openSUSE-SU-2020:1005-1: moderate: Security update for pdns-recursor
by opensuse-security＠opensuse.org 19 Jul '20

19 Jul '20

openSUSE Security Update: Security update for pdns-recursor ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1005-1 Rating: moderate References: #1173302 Cross-References: CVE-2020-14196 Affected Products: openSUSE Leap 15.2 openSUSE Leap 15.1 openSUSE Backports SLE-15-SP1 SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for pdns-recursor fixes the following issues: - CVE-2020-14196: Fixed an access restriction bypass with API key and password authentication (boo#1173302). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1005=1 - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1005=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1005=1 - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2020-1005=1 Package List: - openSUSE Leap 15.2 (x86_64): pdns-recursor-4.3.2-lp152.2.3.1 pdns-recursor-debuginfo-4.3.2-lp152.2.3.1 pdns-recursor-debugsource-4.3.2-lp152.2.3.1 - openSUSE Leap 15.1 (x86_64): pdns-recursor-4.1.12-lp151.3.6.1 pdns-recursor-debuginfo-4.1.12-lp151.3.6.1 pdns-recursor-debugsource-4.1.12-lp151.3.6.1 - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): pdns-recursor-4.1.12-bp151.4.6.1 pdns-recursor-debuginfo-4.1.12-bp151.4.6.1 pdns-recursor-debugsource-4.1.12-bp151.4.6.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): pdns-recursor-4.1.17-22.1 References: https://www.suse.com/security/cve/CVE-2020-14196.html https://bugzilla.suse.com/1173302

1 0

openSUSE-SU-2020:1007-1: moderate: Security update for ntp
by opensuse-security＠opensuse.org 19 Jul '20

19 Jul '20

openSUSE Security Update: Security update for ntp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1007-1 Rating: moderate References: #1125401 #1169740 #1171355 #1172651 #1173334 #992038 Cross-References: CVE-2018-8956 CVE-2020-11868 CVE-2020-13817 CVE-2020-15025 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves four vulnerabilities and has two fixes is now available. Description: This update for ntp fixes the following issues: ntp was updated to 4.2.8p15 - CVE-2020-11868: Fixed an issue which a server mode packet with spoofed source address frequently send to the client ntpd could have caused denial of service (bsc#1169740). - CVE-2018-8956: Fixed an issue which could have allowed remote attackers to prevent a broadcast client from synchronizing its clock with a broadcast NTP server via spoofed mode 3 and mode 5 packets (bsc#1171355). - CVE-2020-13817: Fixed an issue which an off-path attacker with the ability to query time from victim's ntpd instance could have modified the victim's clock by a limited amount (bsc#1172651). - CVE-2020-15025: Fixed an issue which remote attacker could have caused denial of service by consuming the memory when a CMAC key was used andassociated with a CMAC algorithm in the ntp.keys (bsc#1173334). - Removed an OpenSSL version warning (bsc#992038 and bsc#1125401). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1007=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): ntp-4.2.8p15-lp152.3.3.1 ntp-debuginfo-4.2.8p15-lp152.3.3.1 ntp-debugsource-4.2.8p15-lp152.3.3.1 ntp-doc-4.2.8p15-lp152.3.3.1 References: https://www.suse.com/security/cve/CVE-2018-8956.html https://www.suse.com/security/cve/CVE-2020-11868.html https://www.suse.com/security/cve/CVE-2020-13817.html https://www.suse.com/security/cve/CVE-2020-15025.html https://bugzilla.suse.com/1125401 https://bugzilla.suse.com/1169740 https://bugzilla.suse.com/1171355 https://bugzilla.suse.com/1172651 https://bugzilla.suse.com/1173334 https://bugzilla.suse.com/992038

1 0

openSUSE-SU-2020:1005-1: moderate: Security update for pdns-recursor
by opensuse-security＠opensuse.org 19 Jul '20

19 Jul '20

openSUSE Security Update: Security update for pdns-recursor ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1005-1 Rating: moderate References: #1173302 Cross-References: CVE-2020-14196 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for pdns-recursor fixes the following issues: - CVE-2020-14196: Fixed an access restriction bypass with API key and password authentication (boo#1173302). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2020-1005=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): pdns-recursor-4.1.17-22.1 References: https://www.suse.com/security/cve/CVE-2020-14196.html https://bugzilla.suse.com/1173302

1 0

openSUSE-RU-2020:1009-1: moderate: Recommended update for dracut
by maintenance＠opensuse.org 19 Jul '20

19 Jul '20

openSUSE Recommended Update: Recommended update for dracut ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1009-1 Rating: moderate References: #1172807 #1172816 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for dracut fixes the following issues: - 35network-legacy: Fix dual stack setups. (bsc#1172807) - 95iscsi: fix missing space when compiling cmdline args. (bsc#1172816) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1009=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): dracut-049.1+suse.146.g6f5195cf-lp152.2.3.1 dracut-debuginfo-049.1+suse.146.g6f5195cf-lp152.2.3.1 dracut-debugsource-049.1+suse.146.g6f5195cf-lp152.2.3.1 dracut-extra-049.1+suse.146.g6f5195cf-lp152.2.3.1 dracut-fips-049.1+suse.146.g6f5195cf-lp152.2.3.1 dracut-ima-049.1+suse.146.g6f5195cf-lp152.2.3.1 dracut-tools-049.1+suse.146.g6f5195cf-lp152.2.3.1 References: https://bugzilla.suse.com/1172807 https://bugzilla.suse.com/1172816

1 0

openSUSE-RU-2020:1004-1: moderate: Recommended update for lxd
by maintenance＠opensuse.org 19 Jul '20

19 Jul '20

openSUSE Recommended Update: Recommended update for lxd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1004-1 Rating: moderate References: #1173608 Affected Products: openSUSE Leap 15.2 openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for lxd fixes the following issues: Update to LXD 4.3. The full upstream changelog is available from: https://discuss.linuxcontainers.org/t/lxd-4-3-has-been-released/8303 + Block custom storage volumes + VM: Initial work for graphical console * VM: Rework of PCIe layout + VM: GPU passthrough * Direct console attach on lxc start and lxc restart * Isolated CPUs reporting in resources API Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1004=1 - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1004=1 Package List: - openSUSE Leap 15.2 (x86_64): lxd-4.3-lp152.2.3.1 - openSUSE Leap 15.2 (noarch): lxd-bash-completion-4.3-lp152.2.3.1 - openSUSE Leap 15.1 (x86_64): lxd-4.3-lp151.42.1 - openSUSE Leap 15.1 (noarch): lxd-bash-completion-4.3-lp151.42.1 References: https://bugzilla.suse.com/1173608

1 0

openSUSE-SU-2020:1003-1: moderate: Security update for cairo
by opensuse-security＠opensuse.org 19 Jul '20

19 Jul '20

openSUSE Security Update: Security update for cairo ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1003-1 Rating: moderate References: #1049092 Cross-References: CVE-2017-9814 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for cairo fixes the following issues: - Fix a memory corruption in pango. - Revert "Correctly decode Adobe CMYK JPEGs in PDF export". - Add more FreeeType font color conversions to support COLR/CPAL. - Fix crash when rendering Microsoft's Segoe UI Emoji Regular font. - Fix memory leaks found by Coverity. - Fix assertion failure in the freetype backend. (fdo#105746). - Add cairo-CVE-2017-9814.patch: Replace malloc with _cairo_malloc and check cmap size before allocating (bsc#1049092) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1003=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): cairo-debugsource-1.16.0-lp151.5.3.1 cairo-devel-1.16.0-lp151.5.3.1 cairo-tools-1.16.0-lp151.5.3.1 cairo-tools-debuginfo-1.16.0-lp151.5.3.1 libcairo-gobject2-1.16.0-lp151.5.3.1 libcairo-gobject2-debuginfo-1.16.0-lp151.5.3.1 libcairo-script-interpreter2-1.16.0-lp151.5.3.1 libcairo-script-interpreter2-debuginfo-1.16.0-lp151.5.3.1 libcairo2-1.16.0-lp151.5.3.1 libcairo2-debuginfo-1.16.0-lp151.5.3.1 - openSUSE Leap 15.1 (x86_64): cairo-devel-32bit-1.16.0-lp151.5.3.1 libcairo-gobject2-32bit-1.16.0-lp151.5.3.1 libcairo-gobject2-32bit-debuginfo-1.16.0-lp151.5.3.1 libcairo-script-interpreter2-32bit-1.16.0-lp151.5.3.1 libcairo-script-interpreter2-32bit-debuginfo-1.16.0-lp151.5.3.1 libcairo2-32bit-1.16.0-lp151.5.3.1 libcairo2-32bit-debuginfo-1.16.0-lp151.5.3.1 References: https://www.suse.com/security/cve/CVE-2017-9814.html https://bugzilla.suse.com/1049092

1 0

openSUSE-SU-2020:1002-1: important: Security update for python-ipaddress
by opensuse-security＠opensuse.org 19 Jul '20

19 Jul '20

openSUSE Security Update: Security update for python-ipaddress ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1002-1 Rating: important References: #1173274 Cross-References: CVE-2020-14422 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-ipaddress fixes the following issues: - Add CVE-2020-14422-ipaddress-hash-collision.patch fixing CVE-2020-14422 (bsc#1173274, bpo#41004), where hash collisions in IPv4Interface and IPv6Interface could lead to DOS. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1002=1 Package List: - openSUSE Leap 15.2 (noarch): python-ipaddress-1.0.18-lp152.4.3.1 References: https://www.suse.com/security/cve/CVE-2020-14422.html https://bugzilla.suse.com/1173274

1 0

openSUSE-RU-2020:0998-1: Recommended update for python-numpy
by maintenance＠opensuse.org 18 Jul '20

18 Jul '20

openSUSE Recommended Update: Recommended update for python-numpy ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0998-1 Rating: low References: #1166678 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-numpy fixes the following issues: - Fixes a file conflict with /usr/bin/f2py (bsc#1166678) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-998=1 Package List: - openSUSE Leap 15.1 (x86_64): python-numpy-debugsource-1.17.3-lp151.5.9.1 python-numpy_1_17_3-gnu-hpc-debugsource-1.17.3-lp151.5.9.1 python3-numpy-1.17.3-lp151.5.9.1 python3-numpy-debuginfo-1.17.3-lp151.5.9.1 python3-numpy-devel-1.17.3-lp151.5.9.1 python3-numpy-gnu-hpc-1.17.3-lp151.5.9.1 python3-numpy-gnu-hpc-devel-1.17.3-lp151.5.9.1 python3-numpy_1_17_3-gnu-hpc-1.17.3-lp151.5.9.1 python3-numpy_1_17_3-gnu-hpc-debuginfo-1.17.3-lp151.5.9.1 python3-numpy_1_17_3-gnu-hpc-devel-1.17.3-lp151.5.9.1 References: https://bugzilla.suse.com/1166678

1 0

openSUSE-RU-2020:0993-1: moderate: Recommended update for grub2
by maintenance＠opensuse.org 18 Jul '20

18 Jul '20

openSUSE Recommended Update: Recommended update for grub2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0993-1 Rating: moderate References: #1166513 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for grub2 fixes the following issue: - Skip not needed zfcpdump kernel from the grub boot menu. (bsc#1166513) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-993=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): grub2-2.02-lp151.21.18.1 grub2-branding-upstream-2.02-lp151.21.18.1 grub2-debuginfo-2.02-lp151.21.18.1 grub2-debugsource-2.02-lp151.21.18.1 - openSUSE Leap 15.1 (noarch): grub2-i386-efi-2.02-lp151.21.18.1 grub2-i386-pc-2.02-lp151.21.18.1 grub2-i386-xen-2.02-lp151.21.18.1 grub2-snapper-plugin-2.02-lp151.21.18.1 grub2-systemd-sleep-plugin-2.02-lp151.21.18.1 grub2-x86_64-efi-2.02-lp151.21.18.1 grub2-x86_64-xen-2.02-lp151.21.18.1 References: https://bugzilla.suse.com/1166513

1 0

openSUSE-SU-2020:0994-1: important: Security update for slirp4netns
by opensuse-security＠opensuse.org 18 Jul '20

18 Jul '20

openSUSE Security Update: Security update for slirp4netns ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0994-1 Rating: important References: #1172380 Cross-References: CVE-2020-10756 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for slirp4netns fixes the following issues: - Update to 0.4.7 (bsc#1172380) * libslirp: update to v4.3.1 (Fix CVE-2020-10756) * Fix config_from_options() to correctly enable ipv6 This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-994=1 Package List: - openSUSE Leap 15.2 (x86_64): slirp4netns-0.4.7-lp152.2.3.1 slirp4netns-debuginfo-0.4.7-lp152.2.3.1 slirp4netns-debugsource-0.4.7-lp152.2.3.1 References: https://www.suse.com/security/cve/CVE-2020-10756.html https://bugzilla.suse.com/1172380

1 0

openSUSE-SU-2020:0997-1: moderate: Security update for openconnect
by opensuse-security＠opensuse.org 18 Jul '20

18 Jul '20

openSUSE Security Update: Security update for openconnect ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0997-1 Rating: moderate References: #1171862 Cross-References: CVE-2020-12823 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for openconnect fixes the following issues: - CVE-2020-12823: Fixed a buffer overflow via crafted certificate data which could have led to denial of service (bsc#1171862). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-997=1 Package List: - openSUSE Leap 15.1 (x86_64): openconnect-7.08-lp151.6.9.1 openconnect-debuginfo-7.08-lp151.6.9.1 openconnect-debugsource-7.08-lp151.6.9.1 openconnect-devel-7.08-lp151.6.9.1 openconnect-doc-7.08-lp151.6.9.1 - openSUSE Leap 15.1 (noarch): openconnect-lang-7.08-lp151.6.9.1 References: https://www.suse.com/security/cve/CVE-2020-12823.html https://bugzilla.suse.com/1171862

1 0

openSUSE-RU-2020:0995-1: moderate: Recommended update for open-vm-tools
by maintenance＠opensuse.org 18 Jul '20

18 Jul '20

openSUSE Recommended Update: Recommended update for open-vm-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0995-1 Rating: moderate References: #1171003 #1171764 #1171765 #1172693 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for open-vm-tools fixes the following issues: - Update to version 11.1.0 (bsc#1171764, jsc#ECO-2164) This version provides a new 'Service Discovery' plugin. (bsc#1171765) - Provide a better pam configuration and authentication. (bsc#1171003, bsc#1172693) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-995=1 Package List: - openSUSE Leap 15.2 (x86_64): libvmtools-devel-11.1.0-lp152.3.3.1 libvmtools0-11.1.0-lp152.3.3.1 libvmtools0-debuginfo-11.1.0-lp152.3.3.1 open-vm-tools-11.1.0-lp152.3.3.1 open-vm-tools-debuginfo-11.1.0-lp152.3.3.1 open-vm-tools-debugsource-11.1.0-lp152.3.3.1 open-vm-tools-desktop-11.1.0-lp152.3.3.1 open-vm-tools-desktop-debuginfo-11.1.0-lp152.3.3.1 open-vm-tools-sdmp-11.1.0-lp152.3.3.1 open-vm-tools-sdmp-debuginfo-11.1.0-lp152.3.3.1 References: https://bugzilla.suse.com/1171003 https://bugzilla.suse.com/1171764 https://bugzilla.suse.com/1171765 https://bugzilla.suse.com/1172693

1 0

openSUSE-SU-2020:1001-1: moderate: Security update for rubygem-puma
by opensuse-security＠opensuse.org 18 Jul '20

18 Jul '20

openSUSE Security Update: Security update for rubygem-puma ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1001-1 Rating: moderate References: #1172175 #1172176 Cross-References: CVE-2020-11076 CVE-2020-11077 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for rubygem-puma to version 4.3.5 fixes the following issues: - CVE-2020-11077: Fixed a HTTP smuggling issue related to proxy usage (bsc#1172175). - CVE-2020-11076: Fixed a HTTP smuggling issue when using an invalid transfer-encoding header (bsc#1172176). - Disabled TLSv1.0 and TLSv1.1 (jsc#SLE-6965). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1001=1 Package List: - openSUSE Leap 15.2 (x86_64): ruby2.5-rubygem-puma-4.3.5-lp152.4.3.1 ruby2.5-rubygem-puma-debuginfo-4.3.5-lp152.4.3.1 ruby2.5-rubygem-puma-doc-4.3.5-lp152.4.3.1 rubygem-puma-debugsource-4.3.5-lp152.4.3.1 References: https://www.suse.com/security/cve/CVE-2020-11076.html https://www.suse.com/security/cve/CVE-2020-11077.html https://bugzilla.suse.com/1172175 https://bugzilla.suse.com/1172176

1 0

openSUSE-SU-2020:0996-1: important: Security update for google-compute-engine
by opensuse-security＠opensuse.org 18 Jul '20

18 Jul '20

openSUSE Security Update: Security update for google-compute-engine ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0996-1 Rating: important References: #1169978 #1173258 Cross-References: CVE-2020-8903 CVE-2020-8907 CVE-2020-8933 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for google-compute-engine fixes the following issues: - Don't enable and start google-network-daemon.service when it's already installed (bsc#1169978) + Do not add the created user to the adm (CVE-2020-8903), docker (CVE-2020-8907), or lxd (CVE-2020-8933) groups if they exist (bsc#1173258) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-996=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): google-compute-engine-debugsource-20190801-lp151.2.25.1 google-compute-engine-oslogin-20190801-lp151.2.25.1 google-compute-engine-oslogin-debuginfo-20190801-lp151.2.25.1 - openSUSE Leap 15.1 (x86_64): google-compute-engine-oslogin-32bit-20190801-lp151.2.25.1 google-compute-engine-oslogin-32bit-debuginfo-20190801-lp151.2.25.1 - openSUSE Leap 15.1 (noarch): google-compute-engine-init-20190801-lp151.2.25.1 References: https://www.suse.com/security/cve/CVE-2020-8903.html https://www.suse.com/security/cve/CVE-2020-8907.html https://www.suse.com/security/cve/CVE-2020-8933.html https://bugzilla.suse.com/1169978 https://bugzilla.suse.com/1173258

1 0

openSUSE-SU-2020:0999-1: important: Security update for xrdp
by opensuse-security＠opensuse.org 18 Jul '20

18 Jul '20

openSUSE Security Update: Security update for xrdp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0999-1 Rating: important References: #1173580 Cross-References: CVE-2020-4044 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for xrdp fixes the following issues: - Security fixes (bsc#1173580, CVE-2020-4044): + Add patches: * xrdp-cve-2020-4044-fix-0.patch * xrdp-cve-2020-4044-fix-1.patch + Rebase SLE patch: * xrdp-fate318398-change-expired-password.patch This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-999=1 Package List: - openSUSE Leap 15.1 (x86_64): libpainter0-0.9.6-lp151.4.6.1 libpainter0-debuginfo-0.9.6-lp151.4.6.1 librfxencode0-0.9.6-lp151.4.6.1 librfxencode0-debuginfo-0.9.6-lp151.4.6.1 xrdp-0.9.6-lp151.4.6.1 xrdp-debuginfo-0.9.6-lp151.4.6.1 xrdp-debugsource-0.9.6-lp151.4.6.1 xrdp-devel-0.9.6-lp151.4.6.1 References: https://www.suse.com/security/cve/CVE-2020-4044.html https://bugzilla.suse.com/1173580

1 0

openSUSE-RU-2020:1000-1: moderate: Recommended update for armagetron
by maintenance＠opensuse.org 18 Jul '20

18 Jul '20

openSUSE Recommended Update: Recommended update for armagetron ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1000-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for armagetron fixes the following issues: Update to 0.2.8.3.5. No changelog. This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1000=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): armagetron-0.2.8.3.5-bp151.4.3.1 References:

1 0

openSUSE-RU-2020:0991-1: moderate: Recommended update for kio
by maintenance＠opensuse.org 18 Jul '20

18 Jul '20

openSUSE Recommended Update: Recommended update for kio ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0991-1 Rating: moderate References: #1174169 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for kio fixes the following issues: - Fixed copying to protocols which don't always report available space (boo#1174169): Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-991=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): kio-5.71.0-lp152.2.3.1 kio-core-5.71.0-lp152.2.3.1 kio-core-debuginfo-5.71.0-lp152.2.3.1 kio-debuginfo-5.71.0-lp152.2.3.1 kio-debugsource-5.71.0-lp152.2.3.1 kio-devel-5.71.0-lp152.2.3.1 kio-devel-debuginfo-5.71.0-lp152.2.3.1 - openSUSE Leap 15.2 (noarch): kio-lang-5.71.0-lp152.2.3.1 - openSUSE Leap 15.2 (x86_64): kio-32bit-5.71.0-lp152.2.3.1 kio-32bit-debuginfo-5.71.0-lp152.2.3.1 kio-core-32bit-5.71.0-lp152.2.3.1 kio-core-32bit-debuginfo-5.71.0-lp152.2.3.1 kio-devel-32bit-5.71.0-lp152.2.3.1 kio-devel-32bit-debuginfo-5.71.0-lp152.2.3.1 References: https://bugzilla.suse.com/1174169

1 0

openSUSE-RU-2020:0992-1: moderate: Recommended update for msr-safe
by maintenance＠opensuse.org 18 Jul '20

18 Jul '20

openSUSE Recommended Update: Recommended update for msr-safe ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0992-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for msr-safe fixes the following issues: This update introduces the msr-safe tool. - Add system account msr for msr-safe tool Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-992=1 Package List: - openSUSE Leap 15.2 (x86_64): msr-safe-debugsource-1.4.0-lp152.2.1 msr-safe-kmp-default-1.4.0_k5.3.18_lp152.20.7-lp152.2.1 msr-safe-kmp-default-debuginfo-1.4.0_k5.3.18_lp152.20.7-lp152.2.1 msr-safe-kmp-preempt-1.4.0_k5.3.18_lp152.20.7-lp152.2.1 msr-safe-kmp-preempt-debuginfo-1.4.0_k5.3.18_lp152.20.7-lp152.2.1 system-user-msr-1.4.0-lp152.2.1 system-user-msr-debuginfo-1.4.0-lp152.2.1 References:

1 0

openSUSE-SU-2020:0987-1: important: Security update for slirp4netns
by opensuse-security＠opensuse.org 18 Jul '20

18 Jul '20

openSUSE Security Update: Security update for slirp4netns ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0987-1 Rating: important References: #1172380 Cross-References: CVE-2020-10756 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for slirp4netns fixes the following issues: - Update to 0.4.7 (bsc#1172380) * libslirp: update to v4.3.1 (Fix CVE-2020-10756) * Fix config_from_options() to correctly enable ipv6 This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-987=1 Package List: - openSUSE Leap 15.1 (x86_64): slirp4netns-0.4.7-lp151.2.12.1 slirp4netns-debuginfo-0.4.7-lp151.2.12.1 slirp4netns-debugsource-0.4.7-lp151.2.12.1 References: https://www.suse.com/security/cve/CVE-2020-10756.html https://bugzilla.suse.com/1172380

1 0

openSUSE-RU-2020:0986-1: moderate: Recommended update for salt
by maintenance＠opensuse.org 18 Jul '20

18 Jul '20

openSUSE Recommended Update: Recommended update for salt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0986-1 Rating: moderate References: #1159284 #1165572 #1168340 #1169604 #1170104 #1171906 #1172075 #1173072 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 8 recommended fixes can now be installed. Description: This update for salt contains the following fixes: - Require python3-distro only for TW (bsc#1173072) - Various virt backports from 3000.2 including blackening commit for the virt module and state. - Avoid traceback on debug logging for swarm module. (bsc#1172075) - Add publish_batch to ClearFuncs exposed methods. - zypperpkg: filter patterns that start with dot. (bsc#1171906) - Batch mode now also correctly provides return value. (bsc#1168340) - Add docker.logout to docker execution module. (bsc#1165572) - Testsuite fix. - Add option to enable/disable force refresh for zypper. - Python3.8 compatibility changes. - Prevent sporious "salt-api" stuck processes when managing SSH minions because of logging deadlock. (bsc#1159284) - Avoid segfault from "salt-api" under certain conditions of heavy load managing SSH minions. (bsc#1169604) - Revert broken changes to slspath made on Salt 3000 (saltstack/salt#56341). (bsc#1170104) - Returns a the list of IPs filtered by the optional network list This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-986=1 Package List: - openSUSE Leap 15.2 (noarch): salt-bash-completion-3000-lp152.3.3.1 salt-fish-completion-3000-lp152.3.3.1 salt-zsh-completion-3000-lp152.3.3.1 - openSUSE Leap 15.2 (x86_64): python2-salt-3000-lp152.3.3.1 python3-salt-3000-lp152.3.3.1 salt-3000-lp152.3.3.1 salt-api-3000-lp152.3.3.1 salt-cloud-3000-lp152.3.3.1 salt-doc-3000-lp152.3.3.1 salt-master-3000-lp152.3.3.1 salt-minion-3000-lp152.3.3.1 salt-proxy-3000-lp152.3.3.1 salt-ssh-3000-lp152.3.3.1 salt-standalone-formulas-configuration-3000-lp152.3.3.1 salt-syndic-3000-lp152.3.3.1 References: https://bugzilla.suse.com/1159284 https://bugzilla.suse.com/1165572 https://bugzilla.suse.com/1168340 https://bugzilla.suse.com/1169604 https://bugzilla.suse.com/1170104 https://bugzilla.suse.com/1171906 https://bugzilla.suse.com/1172075 https://bugzilla.suse.com/1173072

1 0

openSUSE-SU-2020:0990-1: moderate: Security update for rubygem-puma
by opensuse-security＠opensuse.org 18 Jul '20

18 Jul '20

openSUSE Security Update: Security update for rubygem-puma ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0990-1 Rating: moderate References: #1172175 #1172176 Cross-References: CVE-2020-11076 CVE-2020-11077 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for rubygem-puma to version 4.3.5 fixes the following issues: - CVE-2020-11077: Fixed a HTTP smuggling issue related to proxy usage (bsc#1172175). - CVE-2020-11076: Fixed a HTTP smuggling issue when using an invalid transfer-encoding header (bsc#1172176). - Disabled TLSv1.0 and TLSv1.1 (jsc#SLE-6965). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-990=1 Package List: - openSUSE Leap 15.1 (x86_64): ruby2.5-rubygem-puma-4.3.5-lp151.3.3.1 ruby2.5-rubygem-puma-debuginfo-4.3.5-lp151.3.3.1 ruby2.5-rubygem-puma-doc-4.3.5-lp151.3.3.1 rubygem-puma-debugsource-4.3.5-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2020-11076.html https://www.suse.com/security/cve/CVE-2020-11077.html https://bugzilla.suse.com/1172175 https://bugzilla.suse.com/1172176

1 0

openSUSE-SU-2020:0988-1: important: Security update for LibVNCServer
by opensuse-security＠opensuse.org 18 Jul '20

18 Jul '20

openSUSE Security Update: Security update for LibVNCServer ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0988-1 Rating: important References: #1173477 #1173691 #1173694 #1173700 #1173701 #1173743 #1173874 #1173875 #1173876 #1173880 Cross-References: CVE-2017-18922 CVE-2018-21247 CVE-2019-20839 CVE-2019-20840 CVE-2020-14397 CVE-2020-14398 CVE-2020-14399 CVE-2020-14400 CVE-2020-14401 CVE-2020-14402 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 10 vulnerabilities is now available. Description: This update for LibVNCServer fixes the following issues: - security update - added patches fix CVE-2018-21247 [bsc#1173874], uninitialized memory contents are vulnerable to Information leak + LibVNCServer-CVE-2018-21247.patch fix CVE-2019-20839 [bsc#1173875], buffer overflow in ConnectClientToUnixSock() + LibVNCServer-CVE-2019-20839.patch fix CVE-2019-20840 [bsc#1173876], unaligned accesses in hybiReadAndDecode can lead to denial of service + LibVNCServer-CVE-2019-20840.patch fix CVE-2020-14398 [bsc#1173880], improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c + LibVNCServer-CVE-2020-14398.patch fix CVE-2020-14397 [bsc#1173700], NULL pointer dereference in libvncserver/rfbregion.c + LibVNCServer-CVE-2020-14397.patch fix CVE-2020-14399 [bsc#1173743], Byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c. + LibVNCServer-CVE-2020-14399.patch fix CVE-2020-14400 [bsc#1173691], Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c. + LibVNCServer-CVE-2020-14400.patch fix CVE-2020-14401 [bsc#1173694], potential integer overflows in libvncserver/scale.c + LibVNCServer-CVE-2020-14401.patch fix CVE-2020-14402 [bsc#1173701], out-of-bounds access via encodings. + LibVNCServer-CVE-2020-14402,14403,14404.patch fix CVE-2017-18922 [bsc#1173477], preauth buffer overwrite This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-988=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): LibVNCServer-debugsource-0.9.10-lp151.7.9.1 LibVNCServer-devel-0.9.10-lp151.7.9.1 libvncclient0-0.9.10-lp151.7.9.1 libvncclient0-debuginfo-0.9.10-lp151.7.9.1 libvncserver0-0.9.10-lp151.7.9.1 libvncserver0-debuginfo-0.9.10-lp151.7.9.1 References: https://www.suse.com/security/cve/CVE-2017-18922.html https://www.suse.com/security/cve/CVE-2018-21247.html https://www.suse.com/security/cve/CVE-2019-20839.html https://www.suse.com/security/cve/CVE-2019-20840.html https://www.suse.com/security/cve/CVE-2020-14397.html https://www.suse.com/security/cve/CVE-2020-14398.html https://www.suse.com/security/cve/CVE-2020-14399.html https://www.suse.com/security/cve/CVE-2020-14400.html https://www.suse.com/security/cve/CVE-2020-14401.html https://www.suse.com/security/cve/CVE-2020-14402.html https://bugzilla.suse.com/1173477 https://bugzilla.suse.com/1173691 https://bugzilla.suse.com/1173694 https://bugzilla.suse.com/1173700 https://bugzilla.suse.com/1173701 https://bugzilla.suse.com/1173743 https://bugzilla.suse.com/1173874 https://bugzilla.suse.com/1173875 https://bugzilla.suse.com/1173876 https://bugzilla.suse.com/1173880

1 0

openSUSE-SU-2020:0989-1: important: Security update for python-ipaddress
by opensuse-security＠opensuse.org 18 Jul '20

18 Jul '20

openSUSE Security Update: Security update for python-ipaddress ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0989-1 Rating: important References: #1173274 Cross-References: CVE-2020-14422 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-ipaddress fixes the following issues: - Add CVE-2020-14422-ipaddress-hash-collision.patch fixing CVE-2020-14422 (bsc#1173274, bpo#41004), where hash collisions in IPv4Interface and IPv6Interface could lead to DOS. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-989=1 Package List: - openSUSE Leap 15.1 (noarch): python-ipaddress-1.0.18-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2020-14422.html https://bugzilla.suse.com/1173274

1 0

openSUSE-SU-2020:0985-1: important: Security update for xen
by opensuse-security＠opensuse.org 18 Jul '20

18 Jul '20

openSUSE Security Update: Security update for xen ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0985-1 Rating: important References: #1027519 #1172205 #1173376 #1173377 #1173378 #1173380 Cross-References: CVE-2020-0543 CVE-2020-15563 CVE-2020-15565 CVE-2020-15566 CVE-2020-15567 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves 5 vulnerabilities and has one errata is now available. Description: This update for xen fixes the following issues: - CVE-2020-15563: Fixed inverted code paths in x86 dirty VRAM tracking (bsc#1173377). - CVE-2020-15565: Fixed insufficient cache write-back under VT-d (bsc#1173378). - CVE-2020-15566: Fixed incorrect error handling in event channel port allocation (bsc#1173376). - CVE-2020-15567: Fixed non-atomic modification of live EPT PTE (bsc#1173380). - CVE-2020-0543: Special Register Buffer Data Sampling (SRBDS) aka "CrossTalk" (bsc#1172205). Additional upstream bug fixes (bsc#1027519) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-985=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): xen-debugsource-4.13.1_04-lp152.2.3.1 xen-devel-4.13.1_04-lp152.2.3.1 xen-libs-4.13.1_04-lp152.2.3.1 xen-libs-debuginfo-4.13.1_04-lp152.2.3.1 xen-tools-domU-4.13.1_04-lp152.2.3.1 xen-tools-domU-debuginfo-4.13.1_04-lp152.2.3.1 - openSUSE Leap 15.2 (x86_64): xen-4.13.1_04-lp152.2.3.1 xen-doc-html-4.13.1_04-lp152.2.3.1 xen-libs-32bit-4.13.1_04-lp152.2.3.1 xen-libs-32bit-debuginfo-4.13.1_04-lp152.2.3.1 xen-tools-4.13.1_04-lp152.2.3.1 xen-tools-debuginfo-4.13.1_04-lp152.2.3.1 - openSUSE Leap 15.2 (noarch): xen-tools-xendomains-wait-disk-4.13.1_04-lp152.2.3.1 References: https://www.suse.com/security/cve/CVE-2020-0543.html https://www.suse.com/security/cve/CVE-2020-15563.html https://www.suse.com/security/cve/CVE-2020-15565.html https://www.suse.com/security/cve/CVE-2020-15566.html https://www.suse.com/security/cve/CVE-2020-15567.html https://bugzilla.suse.com/1027519 https://bugzilla.suse.com/1172205 https://bugzilla.suse.com/1173376 https://bugzilla.suse.com/1173377 https://bugzilla.suse.com/1173378 https://bugzilla.suse.com/1173380

1 0

openSUSE-SU-2020:0984-1: important: Security update for samba
by opensuse-security＠opensuse.org 18 Jul '20

18 Jul '20

openSUSE Security Update: Security update for samba ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0984-1 Rating: important References: #1171437 #1172307 #1173159 #1173160 #1173161 #1173359 Cross-References: CVE-2020-10730 CVE-2020-10745 CVE-2020-10760 CVE-2020-14303 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves four vulnerabilities and has two fixes is now available. Description: This update for samba fixes the following issues: - CVE-2020-10745: Fixed an issue which parsing and packing of NBT and DNS packets containing dots could potentially have consumed excessive CPU (bsc#1173160). - CVE-2020-14303: Fixed an endless loop when receiving at AD DC empty UDP packets (bsc#1173359). - CVE-2020-10730: Fixed a null de-reference in AD DC LDAP server when ASQ and VLV combined (bsc#1173159). - CVE-2020-10760: Fixed a use-after-free in AD DC Global Catalog LDAP server with paged_result or VLV (bsc#1173161). - Added libnetapi-devel to baselibs conf, for wine usage (bsc#1172307). - Fixed an installing issue where samba - samba-ad-dc.service did not exist and unit was not found (bsc#1171437). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-984=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): ctdb-4.9.5+git.343.4bc358522a9-lp151.2.27.1 ctdb-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 ctdb-pcp-pmda-4.9.5+git.343.4bc358522a9-lp151.2.27.1 ctdb-pcp-pmda-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 ctdb-tests-4.9.5+git.343.4bc358522a9-lp151.2.27.1 ctdb-tests-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libdcerpc-binding0-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libdcerpc-binding0-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libdcerpc-devel-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libdcerpc-samr-devel-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libdcerpc-samr0-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libdcerpc-samr0-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libdcerpc0-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libdcerpc0-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libndr-devel-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libndr-krb5pac-devel-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libndr-krb5pac0-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libndr-krb5pac0-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libndr-nbt-devel-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libndr-nbt0-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libndr-nbt0-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libndr-standard-devel-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libndr-standard0-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libndr-standard0-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libndr0-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libndr0-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libnetapi-devel-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libnetapi0-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libnetapi0-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-credentials-devel-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-credentials0-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-credentials0-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-errors-devel-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-errors0-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-errors0-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-hostconfig-devel-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-hostconfig0-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-hostconfig0-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-passdb-devel-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-passdb0-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-passdb0-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-policy-devel-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-policy-python-devel-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-policy-python3-devel-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-policy0-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-policy0-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-policy0-python3-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-policy0-python3-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-util-devel-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-util0-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-util0-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamdb-devel-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamdb0-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamdb0-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsmbclient-devel-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsmbclient0-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsmbclient0-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsmbconf-devel-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsmbconf0-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsmbconf0-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsmbldap-devel-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsmbldap2-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsmbldap2-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libtevent-util-devel-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libtevent-util0-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libtevent-util0-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libwbclient-devel-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libwbclient0-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libwbclient0-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-ad-dc-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-ad-dc-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-client-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-client-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-core-devel-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-debugsource-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-dsdb-modules-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-dsdb-modules-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-libs-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-libs-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-libs-python-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-libs-python-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-libs-python3-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-libs-python3-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-pidl-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-python-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-python-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-python3-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-python3-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-test-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-test-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-winbind-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-winbind-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 - openSUSE Leap 15.1 (noarch): samba-doc-4.9.5+git.343.4bc358522a9-lp151.2.27.1 - openSUSE Leap 15.1 (x86_64): libdcerpc-binding0-32bit-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libdcerpc-binding0-32bit-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libdcerpc-samr0-32bit-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libdcerpc-samr0-32bit-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libdcerpc0-32bit-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libdcerpc0-32bit-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libndr-krb5pac0-32bit-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libndr-krb5pac0-32bit-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libndr-nbt0-32bit-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libndr-nbt0-32bit-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libndr-standard0-32bit-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libndr-standard0-32bit-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libndr0-32bit-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libndr0-32bit-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libnetapi-devel-32bit-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libnetapi0-32bit-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libnetapi0-32bit-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-credentials0-32bit-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-credentials0-32bit-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-errors0-32bit-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-errors0-32bit-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-hostconfig0-32bit-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-hostconfig0-32bit-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-passdb0-32bit-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-passdb0-32bit-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-policy0-32bit-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-policy0-32bit-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-policy0-python3-32bit-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-policy0-python3-32bit-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-util0-32bit-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-util0-32bit-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamdb0-32bit-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamdb0-32bit-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsmbclient0-32bit-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsmbclient0-32bit-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsmbconf0-32bit-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsmbconf0-32bit-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsmbldap2-32bit-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsmbldap2-32bit-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libtevent-util0-32bit-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libtevent-util0-32bit-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libwbclient0-32bit-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libwbclient0-32bit-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-ad-dc-32bit-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-ad-dc-32bit-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-ceph-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-ceph-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-client-32bit-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-client-32bit-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-libs-32bit-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-libs-32bit-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-libs-python-32bit-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-libs-python-32bit-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-libs-python3-32bit-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-libs-python3-32bit-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-winbind-32bit-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-winbind-32bit-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 References: https://www.suse.com/security/cve/CVE-2020-10730.html https://www.suse.com/security/cve/CVE-2020-10745.html https://www.suse.com/security/cve/CVE-2020-10760.html https://www.suse.com/security/cve/CVE-2020-14303.html https://bugzilla.suse.com/1171437 https://bugzilla.suse.com/1172307 https://bugzilla.suse.com/1173159 https://bugzilla.suse.com/1173160 https://bugzilla.suse.com/1173161 https://bugzilla.suse.com/1173359

1 0

openSUSE-SU-2020:0976-1: important: Security update for openldap2
by opensuse-security＠opensuse.org 17 Jul '20

17 Jul '20

openSUSE Security Update: Security update for openldap2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0976-1 Rating: important References: #1172698 #1172704 Cross-References: CVE-2020-8023 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for openldap2 fixes the following issues: - CVE-2020-8023: Fixed a potential local privilege escalation from ldap to root when OPENLDAP_CONFIG_BACKEND="ldap" was used (bsc#1172698). - Changed DB_CONFIG to root:ldap permissions (bsc#1172704). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-976=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libldap-2_4-2-2.4.46-lp152.14.3.1 libldap-2_4-2-debuginfo-2.4.46-lp152.14.3.1 openldap2-2.4.46-lp152.14.3.1 openldap2-back-meta-2.4.46-lp152.14.3.1 openldap2-back-meta-debuginfo-2.4.46-lp152.14.3.1 openldap2-back-perl-2.4.46-lp152.14.3.1 openldap2-back-perl-debuginfo-2.4.46-lp152.14.3.1 openldap2-back-sock-2.4.46-lp152.14.3.1 openldap2-back-sock-debuginfo-2.4.46-lp152.14.3.1 openldap2-back-sql-2.4.46-lp152.14.3.1 openldap2-back-sql-debuginfo-2.4.46-lp152.14.3.1 openldap2-client-2.4.46-lp152.14.3.1 openldap2-client-debuginfo-2.4.46-lp152.14.3.1 openldap2-contrib-2.4.46-lp152.14.3.1 openldap2-contrib-debuginfo-2.4.46-lp152.14.3.1 openldap2-debuginfo-2.4.46-lp152.14.3.1 openldap2-debugsource-2.4.46-lp152.14.3.1 openldap2-devel-2.4.46-lp152.14.3.1 openldap2-devel-static-2.4.46-lp152.14.3.1 openldap2-ppolicy-check-password-1.2-lp152.14.3.1 openldap2-ppolicy-check-password-debuginfo-1.2-lp152.14.3.1 - openSUSE Leap 15.2 (noarch): libldap-data-2.4.46-lp152.14.3.1 openldap2-doc-2.4.46-lp152.14.3.1 - openSUSE Leap 15.2 (x86_64): libldap-2_4-2-32bit-2.4.46-lp152.14.3.1 libldap-2_4-2-32bit-debuginfo-2.4.46-lp152.14.3.1 openldap2-devel-32bit-2.4.46-lp152.14.3.1 References: https://www.suse.com/security/cve/CVE-2020-8023.html https://bugzilla.suse.com/1172698 https://bugzilla.suse.com/1172704

1 0

openSUSE-RU-2020:0981-1: moderate: Recommended update for k4dirstat
by maintenance＠opensuse.org 17 Jul '20

17 Jul '20

openSUSE Recommended Update: Recommended update for k4dirstat ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0981-1 Rating: moderate References: #1173905 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for k4dirstat fixes the following issues: k4dirstat was updated: to 3.2.1 (boo#1173905): * Fix crashes on startup in some certain KIO related circumstances Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-981=1 Package List: - openSUSE Leap 15.2 (x86_64): k4dirstat-3.2.1-lp152.2.3.1 k4dirstat-debuginfo-3.2.1-lp152.2.3.1 k4dirstat-debugsource-3.2.1-lp152.2.3.1 - openSUSE Leap 15.2 (noarch): k4dirstat-lang-3.2.1-lp152.2.3.1 References: https://bugzilla.suse.com/1173905

1 0

openSUSE-RU-2020:0980-1: moderate: Recommended update for gcc9
by maintenance＠opensuse.org 17 Jul '20

17 Jul '20

openSUSE Recommended Update: Recommended update for gcc9 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0980-1 Rating: moderate References: #1149995 #1152590 #1167898 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for gcc9 fixes the following issues: This update ships the GCC 9.3 release. - Includes a fix for Internal compiler error when building HepMC (bsc#1167898) - Includes fix for binutils version parsing - Add libstdc++6-pp provides and conflicts to avoid file conflicts with same minor version of libstdc++6-pp from gcc10. - Add gcc9 autodetect -g at lto link (bsc#1149995) - Install go tool buildid for bootstrapping go Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-980=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): cpp9-9.3.1+git1296-lp152.2.3.1 cpp9-debuginfo-9.3.1+git1296-lp152.2.3.1 gcc9-9.3.1+git1296-lp152.2.3.1 gcc9-ada-9.3.1+git1296-lp152.2.3.1 gcc9-ada-debuginfo-9.3.1+git1296-lp152.2.3.1 gcc9-c++-9.3.1+git1296-lp152.2.3.1 gcc9-c++-debuginfo-9.3.1+git1296-lp152.2.3.1 gcc9-debuginfo-9.3.1+git1296-lp152.2.3.1 gcc9-debugsource-9.3.1+git1296-lp152.2.3.1 gcc9-fortran-9.3.1+git1296-lp152.2.3.1 gcc9-fortran-debuginfo-9.3.1+git1296-lp152.2.3.1 gcc9-go-9.3.1+git1296-lp152.2.3.1 gcc9-go-debuginfo-9.3.1+git1296-lp152.2.3.1 gcc9-locale-9.3.1+git1296-lp152.2.3.1 libada9-9.3.1+git1296-lp152.2.3.1 libada9-debuginfo-9.3.1+git1296-lp152.2.3.1 libasan5-9.3.1+git1296-lp152.2.3.1 libasan5-debuginfo-9.3.1+git1296-lp152.2.3.1 libatomic1-9.3.1+git1296-lp152.2.3.1 libatomic1-debuginfo-9.3.1+git1296-lp152.2.3.1 libgcc_s1-9.3.1+git1296-lp152.2.3.1 libgcc_s1-debuginfo-9.3.1+git1296-lp152.2.3.1 libgfortran5-9.3.1+git1296-lp152.2.3.1 libgfortran5-debuginfo-9.3.1+git1296-lp152.2.3.1 libgo14-9.3.1+git1296-lp152.2.3.1 libgo14-debuginfo-9.3.1+git1296-lp152.2.3.1 libgomp1-9.3.1+git1296-lp152.2.3.1 libgomp1-debuginfo-9.3.1+git1296-lp152.2.3.1 libitm1-9.3.1+git1296-lp152.2.3.1 libitm1-debuginfo-9.3.1+git1296-lp152.2.3.1 libquadmath0-9.3.1+git1296-lp152.2.3.1 libquadmath0-debuginfo-9.3.1+git1296-lp152.2.3.1 libstdc++6-9.3.1+git1296-lp152.2.3.1 libstdc++6-debuginfo-9.3.1+git1296-lp152.2.3.1 libstdc++6-devel-gcc9-9.3.1+git1296-lp152.2.3.1 libstdc++6-locale-9.3.1+git1296-lp152.2.3.1 libstdc++6-pp-gcc9-9.3.1+git1296-lp152.2.3.1 libubsan1-9.3.1+git1296-lp152.2.3.1 libubsan1-debuginfo-9.3.1+git1296-lp152.2.3.1 - openSUSE Leap 15.2 (x86_64): cross-nvptx-gcc9-9.3.1+git1296-lp152.2.3.1 cross-nvptx-gcc9-debuginfo-9.3.1+git1296-lp152.2.3.1 cross-nvptx-gcc9-debugsource-9.3.1+git1296-lp152.2.3.1 cross-nvptx-newlib9-devel-9.3.1+git1296-lp152.2.3.1 gcc9-32bit-9.3.1+git1296-lp152.2.3.1 gcc9-ada-32bit-9.3.1+git1296-lp152.2.3.1 gcc9-c++-32bit-9.3.1+git1296-lp152.2.3.1 gcc9-fortran-32bit-9.3.1+git1296-lp152.2.3.1 gcc9-go-32bit-9.3.1+git1296-lp152.2.3.1 gcc9-testresults-9.3.1+git1296-lp152.2.3.1 libada9-32bit-9.3.1+git1296-lp152.2.3.1 libada9-32bit-debuginfo-9.3.1+git1296-lp152.2.3.1 libasan5-32bit-9.3.1+git1296-lp152.2.3.1 libasan5-32bit-debuginfo-9.3.1+git1296-lp152.2.3.1 libatomic1-32bit-9.3.1+git1296-lp152.2.3.1 libatomic1-32bit-debuginfo-9.3.1+git1296-lp152.2.3.1 libgcc_s1-32bit-9.3.1+git1296-lp152.2.3.1 libgcc_s1-32bit-debuginfo-9.3.1+git1296-lp152.2.3.1 libgfortran5-32bit-9.3.1+git1296-lp152.2.3.1 libgfortran5-32bit-debuginfo-9.3.1+git1296-lp152.2.3.1 libgo14-32bit-9.3.1+git1296-lp152.2.3.1 libgo14-32bit-debuginfo-9.3.1+git1296-lp152.2.3.1 libgomp1-32bit-9.3.1+git1296-lp152.2.3.1 libgomp1-32bit-debuginfo-9.3.1+git1296-lp152.2.3.1 libitm1-32bit-9.3.1+git1296-lp152.2.3.1 libitm1-32bit-debuginfo-9.3.1+git1296-lp152.2.3.1 liblsan0-9.3.1+git1296-lp152.2.3.1 liblsan0-debuginfo-9.3.1+git1296-lp152.2.3.1 libquadmath0-32bit-9.3.1+git1296-lp152.2.3.1 libquadmath0-32bit-debuginfo-9.3.1+git1296-lp152.2.3.1 libstdc++6-32bit-9.3.1+git1296-lp152.2.3.1 libstdc++6-32bit-debuginfo-9.3.1+git1296-lp152.2.3.1 libstdc++6-devel-gcc9-32bit-9.3.1+git1296-lp152.2.3.1 libstdc++6-pp-gcc9-32bit-9.3.1+git1296-lp152.2.3.1 libtsan0-9.3.1+git1296-lp152.2.3.1 libtsan0-debuginfo-9.3.1+git1296-lp152.2.3.1 libubsan1-32bit-9.3.1+git1296-lp152.2.3.1 libubsan1-32bit-debuginfo-9.3.1+git1296-lp152.2.3.1 - openSUSE Leap 15.2 (noarch): gcc9-info-9.3.1+git1296-lp152.2.3.1 References: https://bugzilla.suse.com/1149995 https://bugzilla.suse.com/1152590 https://bugzilla.suse.com/1167898

1 0

openSUSE-RU-2020:0973-1: moderate: Recommended update for kubernetes, kubernetes1.17, kubernetes1.18
by maintenance＠opensuse.org 17 Jul '20

17 Jul '20

openSUSE Recommended Update: Recommended update for kubernetes, kubernetes1.17, kubernetes1.18 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0973-1 Rating: moderate References: #1146372 #1163328 #1168390 #1171770 #1172744 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: This update for kubernetes, kubernetes1.17, kubernetes1.18 fixes the following issues: - kubernetes 1.18 was updated to 1.18.4 and kubernetes 1.17 to 1.17.7 Changes in kubernetes1.18: Update to version 1.18.4: * enable floating IP for IPv6 * Extend AWS azToRegion method to support Local Zones and other partitions * kubelet: block non-forwarded packets from crossing the localhost boundary * Deflake port-forward e2e test * Fix fieldType being dropped by older go-clients * FieldManager: Reset if we receive nil or a list with one empty item * set dest prefix and port for IPv6 sg rule * fieldManager: Ignore and log all errors when updating managedFields * Make kubectl tolerate other versions of the CSR API * Changes to ManagedFields is not mutation for GC * fix a number of unbounded dimensions in request metrics * build: Use debian-hyperkube-base(a)v1.0.0 image * Check for GCE finalizer in GetLoadBalancer. * Fix csi-provisioner image for pd csi driver * hyperkube: Build v1.0.0 image * build: Add dependency entries for debian-hyperkube-base * Update CNI to v0.8.6 * Fix public IP not shown issues after assigning public IP to Azure VMs * Skip Pod Conditions from scheduling queue updates * add test for finalizers * skip unnecessary scheduling attempt when pod's finalizers change * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.3 * Add back anti-affinity to kube-dns pods. * Check for empty zone string * Azure - do not use 0 zone or empty string for zone when creating PVs * Fix client-ca dynamic reload in apiserver * Fix exclusive CPU allocations being deleted at container restart * Update strategy used to reuse CPUs from init containers in CPUManager Update to version 1.18.3: * Move nfs-provisioner from quay.io/kubernetes_incubator to staging-csi * Use staging-csi to work around quay.io availability * Azure: support non-VMSS instances removal * deps: Use debian-base:v2.1.0 and debian-iptables:v12.1.0 * build: Add build-image OWNERS to debian-{base,iptables} and pause dirs * count no nodes scheduling failure as unschedulable instead of error * kubeadm: fix flakes when performing etcd MemberAdd on slower setups * base-images: Update to kube-cross:v1.13.9-5 * build: Alpha-sort dependencies.yaml * fix: azure disk dangling attach issue * kube-proxy: increase the session affinity timeout to ensure that the test passes in ipvs mode * cluster: ipvs conntrack module vs kernel version * allow k8s.io/kubernetes/third_party/forked/ipvs in e2e test framework import restrictions (transitive dep from pkg/kubemark) * add license headers for third_party/forked/ipvs * third_party/forked/ipvs: check the address family if the netlink address family attribute is not set * run hack/update-vendor.sh to remove github.com/docker/libnetwork * remove github.com/docker/libnetwork from go.mod * update pkg/util/ipvs to use third_party/forked/ipvs * move github.com/docker/libnetwork/ipvs to third_party/forked * fix backoff manager timer initialization race * fix: ACR auth fails in private azure clouds * Restore cache-control header filter * kube-scheduler: compatibility with ServerSideApply * bugfix: initcontainer wasn't considered when calculate resource request * fix: azure file csi migration failure * Fix flaws in Azure CSI translation * Revert "stop defaulting kubeconfig to http://localhost:8080" * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.2 * Fix Node initialization for GCP cloud provider * Simplify unregistration of csiplugin * Unregister csiplugin even if socket path is gone * Move PSP tests behind a feature tag * kube-openapi bump to release-1.18 * Preserve int/float distinction when decoding raw values * Check Annotations map against nil for ConfigMapLock#Update() * Fix CSINodeInfo startup * Wait for APIServer 'ok' forever during CSINode initialization during Kubelet init - Add ConditionPathExists=/var/lib/kubelet/config.yaml to kubelet.service [boo#1146372] - Run sysctl -a --system before kubelet to ensure sysctl parameters are correctly loaded [boo#1171770] Update to version 1.18.2: * Fix GCE ILB for large clusters * Restore the ability to `kubectl apply --prune` without -n flag * Fix client watch reestablishment handling of client-side timeouts * Fix priorityClass typo, add numeric priority to static pods * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.1 * Test dropped round-trip annotations in HPA conversion * Drop round-trip annotations in HPA conversion * Skip updating cache on pod update if the node was deleted - kubelet-common: conflict with other instances of kubelet-common and require kubernetes-kubelet%{baseversion} Update to version 1.18.1: * Ensure Azure availability zone is always in lower cases * Even with build error, kubectl apply should apply all valid resources * fix: update max azure disk max count * Ensure diff doesn't persist patches * Fix permissions for endpointslice controller * Clean up event messages for errors. * Allow list-resources.sh to continue if a resource fails to list * fix a bug where spn: prefix is unexpectedly added to kubeconfig apiserver-id setting * Adds integration test for apply failures when applying multiple resources * Fixes problem where kubectl apply stops after first error * fix cpu resource metric type by changing to counter * fix concurreny issue in lb creation * Kubeadm: fix Ready condition check * kubeadm: add missing RBAC for getting nodes on "upgrade apply" * Check that ImageInspect pointer is not nil * Fix bug about unintentional scale out during updating deployment. * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.0 * build/dependencies: Remove bazel WORKSPACE go_version check * deps: Update to Golang 1.13.9 * build: Remove kube-cross image building * Label Windows test as Serial. Changes in kubernetes1.17: Update to version 1.17.7: * Fix fieldType being dropped by older go-clients * FieldManager: Reset if we receive nil or a list with one empty item * enable floating IP for IPv6 * Extend AWS azToRegion method to support Local Zones and other partitions * kubelet: block non-forwarded packets from crossing the localhost boundary * Deflake port-forward e2e test * Skip Pod Conditions from scheduling queue updates * add test for finalizers * skip unnecessary scheduling attempt when pod's finalizers change * set dest prefix and port for IPv6 sg rule * Create class to call function at most every given period * fieldManager: Ignore and log all errors when updating managedFields * Make kubectl tolerate other versions of the CSR API * Changes to ManagedFields is not mutation for GC * fix a number of unbounded dimensions in request metrics * build: Use debian-hyperkube-base(a)v1.0.0 image * Source CNI plugins from gs://k8s-artifacts-cni/release * Update CNI to v0.8.6 * releng: Remove debian-hyperkube-base image building from this branch * Fix public IP not shown issues after assigning public IP to Azure VMs * fix: formating and typo * fix: address test failure and review comments * fix: add unit tests for truncate long subnet name on lb ip configuration * fix: should truncate long subnet name on lb rules * Update CHANGELOG/CHANGELOG-1.17.md for v1.17.6 * kubeadm: fix flakes when performing etcd MemberAdd on slower setups * Add back anti-affinity to kube-dns pods. * Check for empty zone string * Azure - do not use 0 zone or empty string for zone when creating PVs * Fix client-ca dynamic reload in apiserver * Make updateAllocatedDevices() as a public method and call it in podresources api Update to version 1.17.6: * Azure: support non-VMSS instances removal * deps: Use debian-base:v2.1.0 and debian-iptables:v12.1.0 * build: Add build-image OWNERS to debian-{base,iptables} and pause dirs * count no nodes scheduling failure as unschedulable instead of error * base-images: Update to kube-cross:v1.13.9-5 * build: Alpha-sort dependencies.yaml * Work-around for missing metrics on CRI-O exited containers * fix: azure disk dangling attach issue * fix: ACR auth fails in private azure clouds * Restore cache-control header filter * bugfix: initcontainer wasn't considered when calculate resource request * fix: azure file csi migration failure * Fix flaws in Azure CSI translation * Update CHANGELOG/CHANGELOG-1.17.md for v1.17.5 * Move PSP tests behind a feature tag * Fix code for 1.17 * kube-openapi bump to release-1.17 * Do not reset managedFields in status update strategy * Use discovery to test apply all status * Preserve int/float distinction when decoding raw values * All check for instanceID * Fix AWS eventual consistency of AttachDisk * fix: update max azure disk max count * Fix cherry-pick errors * Fix CSINodeInfo startup * Wait for APIServer 'ok' forever during CSINode initialization during Kubelet init - Add ConditionPathExists=/var/lib/kubelet/config.yaml to kubelet.service [boo#1146372] - Run sysctl -a --system before kubelet to ensure sysctl parameters are correctly loaded [boo#1171770] Update to version 1.17.5: * Fix GCE ILB for large clusters * gce-addons: Make sure default/limit-range doesn't get overridden * Restore the ability to `kubectl apply --prune` without -n flag * Fix client watch reestablishment handling of client-side timeouts * Fix priorityClass typo, add numeric priority to static pods * Test dropped round-trip annotations in HPA conversion * Drop round-trip annotations in HPA conversion * Ensure Azure availability zone is always in lower cases * Clean up event messages for errors. * Fix permissions for endpointslice controller * Allow list-resources.sh to continue if a resource fails to list * Check that ImageInspect pointer is not nil * Fix bug about unintentional scale out during updating deployment. * kubeadm: increase timeouts in the etcd client * kubeadm: handle multiple members without names during concurrent join * build/dependencies: Remove bazel WORKSPACE go_version check * deps: Update to Golang 1.13.9 * build: Remove kube-cross image building * Fix the VMSS name and resource group name when updating VMSS for LoadBalancer backendPools. * Remove wait.Until for running Kubelet Bootstrap * Parallelize attach operations across different nodes for volumes that allow multi-attach * Add nil nodeinfo check in podFitsOnNode * fix: check disk status before disk azure disk * Update kube-openapi to release-1.17 * Update tag for structured-merge-diff to v2.0.1 * EndpointSlice and Endpoints should treat terminating pods the same * EndpointSliceTracker should track updated resource version * Ensuring EndpointSlices are not used for Windows kube-proxy implementations * Ensuring kube-proxy does not mutate shared EndpointSlices * Update CHANGELOG/CHANGELOG-1.17.md for v1.17.4 * let image cache do sort on write instead of on read to avoid data * Removing kubectl get output e2e test * Fix VMSS cache content * Preserve target apiVersion when decoding into unstructured lists * Adding a temporary fix for kubectl get output e2e test * /readyz should start returning failure on shutdown initiation * test: don't use hardcoded pod count for memory limit test * Fixed in the GCE/PD in-tree volume logic to expose the max number of persistent-disks for each instance type correctly. * Honor status.podIP over status.podIPs, node.spec.podCIDR over node.spec.podCIDRs * fix: corrupted mount point in csi driver * fix: azure file mount timeout issue * fix behaviour of aws-load-balancer-security-groups annotation * fix: add remediation in azure disk attach/detach * Update to golang(a)1.13.8 * build: Enable kube-cross push/pull from K8s Infra GCR * build: Add justaugustus as reviewer * build: Add OWNERS on build-image/ * rename to sharedLimitWriter * address review feedback * Fix docker/journald logging conformance * fix get-kube authorization headers * Calling hcsshim instead of docker api to get stats for windows to greatly reduce latency * adding e2e test to ensure it takes less than 10 seconds to query kubelet stats for windows nodes * update golang.org/x/crypto * kube-proxy filter Load Balancer Status ingress * kube-proxy unit test FilterIncorrectIPVersion * add delays between goroutines for vm instance update * Updated test cos image to include runc-1.0.0-rc10 * Fix gce-cos-master-reboot test * Fix route conflicted operations when updating multiple routes together * fix: get azure disk lun timeout issue * Set up connection onClose prior to adding to connection map * fix: add azure disk migration support for CSINode * Add annotation annealing for migration for PVs and PVCs during syncVolume and syncClaim. This allows external-provisioners to pick up and delete volumes when they have been rolled up from previous kubernetes versions. * Update CHANGELOG/CHANGELOG-1.17.md for v1.17.3 * Limit number of instances in single update to GCE target pool * Add code to fix kubelet/metrics memory issue. * Remove Error log for nil StartTime * CHANGELOG: Move changelogs into a subdir to delegate releng approvals * Enable selinux tags in make targets * Fix pending_pods, schedule_attempts_total was not recorded * Fixing Potential Race Condition in EndpointSlice Controller. * Restore statefulset conversion that populates apiVersion/kind in volume templates * Use standard default storage media type in local-up-cluster * changelog: clarify 1.17 upgrade requirements * Fix back off when scheduling cycle is delayed * blank out value for unbounded client label * update gopkg.in/yaml.v2 to v2.2.8 * set nil cache entry based on old cache * Revert "It fixes a bug where AAD token obtained by kubectl is incompatible with on-behalf-of flow and oidc." * Fix issue with GCE scripts assuming Python2. * Add/Update CHANGELOG-1.17.md for v1.17.2. * [1.17] No-op whitespace fix to CHANGELOG-1.17 to trigger a new 1.17 build * Update to golang(a)1.13.6 * Fix the bug PIP's DNS is deleted if no DNS label service annotation is set. * kubenet: replace gateway with cni result * Add/Update CHANGELOG-1.17.md for v1.17.1. * Fixes unnecessary creation of default SG and trying to delete non-provisioned SG by k8s system when annotation [service.beta.kubernetes.io/aws-load-balancer-security-groups] is present * Ensure a provider ID is set on a node if expected * Bind metrics-server containers to linux nodes to avoid Windows scheduling on kubernetes cluster includes linux nodes and windows nodes * Drop version from static openapi json file * Update to golang(a)1.13.5 * Revert reflector changes from PR #83520 from 1.17 * Fix IPv6 addresses lost issue in pure ipv6 vsphere environment * Fix unit test to run in non-gce environments * fix: azure disk could not mounted on Standard_DC4s/DC2s instances * Use legacyscheme's types rather than testapi ones * Fix nil pointer dereference in the azure provider * Add unit test for extended ipv4 service IP range * Revert "remove ipallocator in favor of k/utils net package" * It fixes a bug where AAD token obtained by kubectl is incompatible with on-behalf-of flow and oidc. * Allocate map when out points to nil map * fix: azure data disk should use same key as os disk by default * Check FileInfo against nil during walk of container dir path * Add UID precondition to kubelet pod status patch updates * Add cache for VMSS. * Fix build break - Hyperkube image needs kubelet/kubectl * Include cloud/gcp in e2e.test * Do not swallow timeout in manageReplicas * Sync the status of static Pods * Increase Burst limit for discovery client * Update v1.17.0 CHANGELOG to match final draft * Fix LoadBalancer rule checking so that no unexpected LoadBalancer updates are made * Fix broken SELinux detection * Add/Update CHANGELOG-1.17.md for v1.17.0. * Kubernetes version v1.17.1-beta.0 openapi-spec file updates * Deflake kubectl custom printing test * Refactor parsing logic for service IP and ranges, add tests * Fix bug in apiserver service cluster cidr split * Switch addon resizer to 1.8.7 * Deflake pod readiness e2e * Add/Update CHANGELOG-1.17.md for v1.17.0-rc.2. * Move hostdns.conf out of cni directory. * Fix iscsi refcounter in the case of no Block iscsi volumes * Ensure webhook backend requests are not artificially rate-limited * Retain objects for a limited lifetime in the mutation cache detector by default * Enable mutation detection * Make cluster auto scaler use leases * Bump Cluster Autoscaler version to 1.17.0 * fix: padded base64 encoded docker auth field * apiextensions: filter required nullable to workaround kubectl validation * update cadvisor dependency to v0.35.0 * Bumped the number of times a node tries to lookup itself * Wait for PV to be available before creating PVCs in volume binding test * increase pv controller resync period to try to deflake api update conflicts * Fix GKE upgrade test. * Use plugin name for filtering metrics * Provided a mechanism to re-register hidden metrics. * Deep copying EndpointSlices in reconciler before modifying them. * Set node cidr mask size ipv4/ipv6 config * Revert "kube-proxy: check KUBE-MARK-DROP" * Add/Update CHANGELOG-1.17.md for v1.17.0-rc.1. * Add/Update CHANGELOG-1.17.md for v1.17.0-beta.2. * Add/Update CHANGELOG-1.17.md for v1.17.0-beta.1. * Results of running update scripts: update-openapi-spec * Delete extraneous CHANGELOG-*.md files on branch. kubernetes1.17 was updated to version 1.17.7: * Fix fieldType being dropped by older go-clients * FieldManager: Reset if we receive nil or a list with one empty item * enable floating IP for IPv6 * Extend AWS azToRegion method to support Local Zones and other partitions * kubelet: block non-forwarded packets from crossing the localhost boundary * Deflake port-forward e2e test * Skip Pod Conditions from scheduling queue updates * add test for finalizers * skip unnecessary scheduling attempt when pod's finalizers change * set dest prefix and port for IPv6 sg rule * Create class to call function at most every given period * fieldManager: Ignore and log all errors when updating managedFields * Make kubectl tolerate other versions of the CSR API * Changes to ManagedFields is not mutation for GC * fix a number of unbounded dimensions in request metrics * build: Use debian-hyperkube-base(a)v1.0.0 image * Source CNI plugins from gs://k8s-artifacts-cni/release * Update CNI to v0.8.6 * releng: Remove debian-hyperkube-base image building from this branch * Fix public IP not shown issues after assigning public IP to Azure VMs * fix: formating and typo * fix: address test failure and review comments * fix: add unit tests for truncate long subnet name on lb ip configuration * fix: should truncate long subnet name on lb rules * Update CHANGELOG/CHANGELOG-1.17.md for v1.17.6 * kubeadm: fix flakes when performing etcd MemberAdd on slower setups * Add back anti-affinity to kube-dns pods. * Check for empty zone string * Azure - do not use 0 zone or empty string for zone when creating PVs * Fix client-ca dynamic reload in apiserver * Make updateAllocatedDevices() as a public method and call it in podresources api Update to version 1.17.6: * Azure: support non-VMSS instances removal * deps: Use debian-base:v2.1.0 and debian-iptables:v12.1.0 * build: Add build-image OWNERS to debian-{base,iptables} and pause dirs * count no nodes scheduling failure as unschedulable instead of error * base-images: Update to kube-cross:v1.13.9-5 * build: Alpha-sort dependencies.yaml * Work-around for missing metrics on CRI-O exited containers * fix: azure disk dangling attach issue * fix: ACR auth fails in private azure clouds * Restore cache-control header filter * bugfix: initcontainer wasn't considered when calculate resource request * fix: azure file csi migration failure * Fix flaws in Azure CSI translation * Update CHANGELOG/CHANGELOG-1.17.md for v1.17.5 * Move PSP tests behind a feature tag * Fix code for 1.17 * kube-openapi bump to release-1.17 * Do not reset managedFields in status update strategy * Use discovery to test apply all status * Preserve int/float distinction when decoding raw values * All check for instanceID * Fix AWS eventual consistency of AttachDisk * fix: update max azure disk max count * Fix cherry-pick errors * Fix CSINodeInfo startup * Wait for APIServer 'ok' forever during CSINode initialization during Kubelet init - Add ConditionPathExists=/var/lib/kubelet/config.yaml to kubelet.service [boo#1146372] - Run sysctl -a --system before kubelet to ensure sysctl parameters are correctly loaded [boo#1171770] Update to version 1.17.5: * Fix GCE ILB for large clusters * gce-addons: Make sure default/limit-range doesn't get overridden * Restore the ability to `kubectl apply --prune` without -n flag * Fix client watch reestablishment handling of client-side timeouts * Fix priorityClass typo, add numeric priority to static pods * Test dropped round-trip annotations in HPA conversion * Drop round-trip annotations in HPA conversion * Ensure Azure availability zone is always in lower cases * Clean up event messages for errors. * Fix permissions for endpointslice controller * Allow list-resources.sh to continue if a resource fails to list * Check that ImageInspect pointer is not nil * Fix bug about unintentional scale out during updating deployment. * kubeadm: increase timeouts in the etcd client * kubeadm: handle multiple members without names during concurrent join * build/dependencies: Remove bazel WORKSPACE go_version check * deps: Update to Golang 1.13.9 * build: Remove kube-cross image building * Fix the VMSS name and resource group name when updating VMSS for LoadBalancer backendPools. * Remove wait.Until for running Kubelet Bootstrap * Parallelize attach operations across different nodes for volumes that allow multi-attach * Add nil nodeinfo check in podFitsOnNode * fix: check disk status before disk azure disk * Update kube-openapi to release-1.17 * Update tag for structured-merge-diff to v2.0.1 * EndpointSlice and Endpoints should treat terminating pods the same * EndpointSliceTracker should track updated resource version * Ensuring EndpointSlices are not used for Windows kube-proxy implementations * Ensuring kube-proxy does not mutate shared EndpointSlices * Update CHANGELOG/CHANGELOG-1.17.md for v1.17.4 * let image cache do sort on write instead of on read to avoid data * Removing kubectl get output e2e test * Fix VMSS cache content * Preserve target apiVersion when decoding into unstructured lists * Adding a temporary fix for kubectl get output e2e test * /readyz should start returning failure on shutdown initiation * test: don't use hardcoded pod count for memory limit test * Fixed in the GCE/PD in-tree volume logic to expose the max number of persistent-disks for each instance type correctly. * Honor status.podIP over status.podIPs, node.spec.podCIDR over node.spec.podCIDRs * fix: corrupted mount point in csi driver * fix: azure file mount timeout issue * fix behaviour of aws-load-balancer-security-groups annotation * fix: add remediation in azure disk attach/detach * Update to golang(a)1.13.8 * build: Enable kube-cross push/pull from K8s Infra GCR * build: Add justaugustus as reviewer * build: Add OWNERS on build-image/ * rename to sharedLimitWriter * address review feedback * Fix docker/journald logging conformance * fix get-kube authorization headers * Calling hcsshim instead of docker api to get stats for windows to greatly reduce latency * adding e2e test to ensure it takes less than 10 seconds to query kubelet stats for windows nodes * update golang.org/x/crypto * kube-proxy filter Load Balancer Status ingress * kube-proxy unit test FilterIncorrectIPVersion * add delays between goroutines for vm instance update * Updated test cos image to include runc-1.0.0-rc10 * Fix gce-cos-master-reboot test * Fix route conflicted operations when updating multiple routes together * fix: get azure disk lun timeout issue * Set up connection onClose prior to adding to connection map * fix: add azure disk migration support for CSINode * Add annotation annealing for migration for PVs and PVCs during syncVolume and syncClaim. This allows external-provisioners to pick up and delete volumes when they have been rolled up from previous kubernetes versions. * Update CHANGELOG/CHANGELOG-1.17.md for v1.17.3 * Limit number of instances in single update to GCE target pool * Add code to fix kubelet/metrics memory issue. * Remove Error log for nil StartTime * CHANGELOG: Move changelogs into a subdir to delegate releng approvals * Enable selinux tags in make targets * Fix pending_pods, schedule_attempts_total was not recorded * Fixing Potential Race Condition in EndpointSlice Controller. * Restore statefulset conversion that populates apiVersion/kind in volume templates * Use standard default storage media type in local-up-cluster * changelog: clarify 1.17 upgrade requirements * Fix back off when scheduling cycle is delayed * blank out value for unbounded client label * update gopkg.in/yaml.v2 to v2.2.8 * set nil cache entry based on old cache * Revert "It fixes a bug where AAD token obtained by kubectl is incompatible with on-behalf-of flow and oidc." * Fix issue with GCE scripts assuming Python2. * Add/Update CHANGELOG-1.17.md for v1.17.2. * [1.17] No-op whitespace fix to CHANGELOG-1.17 to trigger a new 1.17 build * Update to golang(a)1.13.6 * Fix the bug PIP's DNS is deleted if no DNS label service annotation is set. * kubenet: replace gateway with cni result * Add/Update CHANGELOG-1.17.md for v1.17.1. * Fixes unnecessary creation of default SG and trying to delete non-provisioned SG by k8s system when annotation [service.beta.kubernetes.io/aws-load-balancer-security-groups] is present * Ensure a provider ID is set on a node if expected * Bind metrics-server containers to linux nodes to avoid Windows scheduling on kubernetes cluster includes linux nodes and windows nodes * Drop version from static openapi json file * Update to golang(a)1.13.5 * Revert reflector changes from PR #83520 from 1.17 * Fix IPv6 addresses lost issue in pure ipv6 vsphere environment * Fix unit test to run in non-gce environments * fix: azure disk could not mounted on Standard_DC4s/DC2s instances * Use legacyscheme's types rather than testapi ones * Fix nil pointer dereference in the azure provider * Add unit test for extended ipv4 service IP range * Revert "remove ipallocator in favor of k/utils net package" * It fixes a bug where AAD token obtained by kubectl is incompatible with on-behalf-of flow and oidc. * Allocate map when out points to nil map * fix: azure data disk should use same key as os disk by default * Check FileInfo against nil during walk of container dir path * Add UID precondition to kubelet pod status patch updates * Add cache for VMSS. * Fix build break - Hyperkube image needs kubelet/kubectl * Include cloud/gcp in e2e.test * Do not swallow timeout in manageReplicas * Sync the status of static Pods * Increase Burst limit for discovery client * Update v1.17.0 CHANGELOG to match final draft * Fix LoadBalancer rule checking so that no unexpected LoadBalancer updates are made * Fix broken SELinux detection * Add/Update CHANGELOG-1.17.md for v1.17.0. * Kubernetes version v1.17.1-beta.0 openapi-spec file updates * Deflake kubectl custom printing test * Refactor parsing logic for service IP and ranges, add tests * Fix bug in apiserver service cluster cidr split * Switch addon resizer to 1.8.7 * Deflake pod readiness e2e * Add/Update CHANGELOG-1.17.md for v1.17.0-rc.2. * Move hostdns.conf out of cni directory. * Fix iscsi refcounter in the case of no Block iscsi volumes * Ensure webhook backend requests are not artificially rate-limited * Retain objects for a limited lifetime in the mutation cache detector by default * Enable mutation detection * Make cluster auto scaler use leases * Bump Cluster Autoscaler version to 1.17.0 * fix: padded base64 encoded docker auth field * apiextensions: filter required nullable to workaround kubectl validation * update cadvisor dependency to v0.35.0 * Bumped the number of times a node tries to lookup itself * Wait for PV to be available before creating PVCs in volume binding test * increase pv controller resync period to try to deflake api update conflicts * Fix GKE upgrade test. * Use plugin name for filtering metrics * Provided a mechanism to re-register hidden metrics. * Deep copying EndpointSlices in reconciler before modifying them. * Set node cidr mask size ipv4/ipv6 config * Revert "kube-proxy: check KUBE-MARK-DROP" * Add/Update CHANGELOG-1.17.md for v1.17.0-rc.1. * Add/Update CHANGELOG-1.17.md for v1.17.0-beta.2. * Add/Update CHANGELOG-1.17.md for v1.17.0-beta.1. * Results of running update scripts: update-openapi-spec * Delete extraneous CHANGELOG-*.md files on branch. - kubelet-common: conflict with other instances of kubelet-common and require kubernetes-kubelet%{baseversion} Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-973=1 Package List: - openSUSE Leap 15.2 (x86_64): kubernetes-apiserver-1.18.4-lp152.2.3.1 kubernetes-apiserver-minus1-1.17.7-lp152.2.3.1 kubernetes-client-1.18.4-lp152.2.3.1 kubernetes-controller-manager-1.18.4-lp152.2.3.1 kubernetes-controller-manager-minus1-1.17.7-lp152.2.3.1 kubernetes-kubeadm-1.18.4-lp152.2.3.1 kubernetes-kubelet-1.18.4-lp152.2.3.1 kubernetes-proxy-1.18.4-lp152.2.3.1 kubernetes-proxy-minus1-1.17.7-lp152.2.3.1 kubernetes-scheduler-1.18.4-lp152.2.3.1 kubernetes-scheduler-minus1-1.17.7-lp152.2.3.1 kubernetes1.17-apiserver-1.17.7-lp152.5.1 kubernetes1.17-client-1.17.7-lp152.5.1 kubernetes1.17-controller-manager-1.17.7-lp152.5.1 kubernetes1.17-kubeadm-1.17.7-lp152.5.1 kubernetes1.17-kubelet-1.17.7-lp152.5.1 kubernetes1.17-kubelet-common-1.17.7-lp152.5.1 kubernetes1.17-proxy-1.17.7-lp152.5.1 kubernetes1.17-scheduler-1.17.7-lp152.5.1 kubernetes1.18-apiserver-1.18.4-lp152.5.1 kubernetes1.18-client-1.18.4-lp152.5.1 kubernetes1.18-controller-manager-1.18.4-lp152.5.1 kubernetes1.18-kubeadm-1.18.4-lp152.5.1 kubernetes1.18-kubelet-1.18.4-lp152.5.1 kubernetes1.18-kubelet-common-1.18.4-lp152.5.1 kubernetes1.18-proxy-1.18.4-lp152.5.1 kubernetes1.18-scheduler-1.18.4-lp152.5.1 References: https://bugzilla.suse.com/1146372 https://bugzilla.suse.com/1163328 https://bugzilla.suse.com/1168390 https://bugzilla.suse.com/1171770 https://bugzilla.suse.com/1172744

1 0

openSUSE-RU-2020:0977-1: moderate: Recommended update for imap
by maintenance＠opensuse.org 17 Jul '20

17 Jul '20

openSUSE Recommended Update: Recommended update for imap ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0977-1 Rating: moderate References: #1145195 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for imap fixes the following issues: - read certificates from /etc/imap/certs ([boo#1145195]) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-977=1 Package List: - openSUSE Leap 15.2 (x86_64): imap-2007e_suse-lp152.6.2.1 imap-debuginfo-2007e_suse-lp152.6.2.1 imap-debugsource-2007e_suse-lp152.6.2.1 imap-devel-2007e_suse-lp152.6.2.1 libc-client2007e_suse-2007e_suse-lp152.6.2.1 libc-client2007e_suse-debuginfo-2007e_suse-lp152.6.2.1 References: https://bugzilla.suse.com/1145195

1 0

openSUSE-RU-2020:0974-1: important: Recommended update for mdadm
by maintenance＠opensuse.org 17 Jul '20

17 Jul '20

openSUSE Recommended Update: Recommended update for mdadm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0974-1 Rating: important References: #1163727 #1168953 #1173137 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for mdadm fixes the following issues: - OnCalendar format fix of mdcheck_start.timer (bsc#1173137) - Detail: adding sync status for cluster device (bsc#1163727) - Monitor: improve check_one_sharer() for checking duplicated process (bsc#1168953) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-974=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): mdadm-4.1-lp152.7.4.1 mdadm-debuginfo-4.1-lp152.7.4.1 mdadm-debugsource-4.1-lp152.7.4.1 References: https://bugzilla.suse.com/1163727 https://bugzilla.suse.com/1168953 https://bugzilla.suse.com/1173137

1 0

openSUSE-SU-2020:0978-1: important: Security update for LibVNCServer
by opensuse-security＠opensuse.org 17 Jul '20

17 Jul '20

openSUSE Security Update: Security update for LibVNCServer ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0978-1 Rating: important References: #1173477 Cross-References: CVE-2017-18922 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for LibVNCServer fixes the following issues: - CVE-2017-18922: Fixed an issue which could have allowed to an attacker to pre-auth overwrite a function pointer which subsequently used leading to potential remote code execution (bsc#1173477). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-978=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): LibVNCServer-debugsource-0.9.10-lp152.9.4.1 LibVNCServer-devel-0.9.10-lp152.9.4.1 libvncclient0-0.9.10-lp152.9.4.1 libvncclient0-debuginfo-0.9.10-lp152.9.4.1 libvncserver0-0.9.10-lp152.9.4.1 libvncserver0-debuginfo-0.9.10-lp152.9.4.1 References: https://www.suse.com/security/cve/CVE-2017-18922.html https://bugzilla.suse.com/1173477

1 0

openSUSE-RU-2020:0975-1: moderate: Recommended update for fontforge, ghostscript-fonts, ttf-converter, xorg-x11-fonts
by maintenance＠opensuse.org 17 Jul '20

17 Jul '20

openSUSE Recommended Update: Recommended update for fontforge, ghostscript-fonts, ttf-converter, xorg-x11-fonts ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0975-1 Rating: moderate References: #1169444 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for fontforge, ghostscript-fonts, ttf-converter, xorg-x11-fonts fixes the following issues: Changes in fontforge: - Support transforming bitmap glyphs from python. (bsc#1169444) - Allow python-Sphinx >= 3 Changes in ttf-converter: - Update from version 1.0 to version 1.0.6: * ftdump is now shipped additionally as new dependency for ttf-converter * Standardize output when converting vector and bitmap fonts * Add more subfamilies fixes (bsc#1169444) * Add --family and --subfamily arguments to force values on those fields * Add parameters to fix glyph unicode values --fix-glyph-unicode : Try to fix unicode points and glyph names based on glyph names containing hexadecimal codes (like "$0C00", "char12345" or "uni004F") --replace-unicode-values: When passed 2 comma separated numbers a,b the glyph with an unicode value of a is replaced with the unicode value b. Can be used more than once. --shift-unicode-values: When passed 3 comma separated numbers a,b,c this shifts the unicode values of glyphs between a and b (both included) by adding c. Can be used more than once. * Add --bitmapTransform parameter to transform bitmap glyphs. (bsc#1169444) When used, all glyphs are modified with the transformation function and values passed as parameters. The parameter has three values separated by commas: fliph|flipv|rotate90cw|rotate90ccw|rotate180|skew|transmove,xoff,yoff * Add support to convert bitmap fonts (bsc#1169444) * Rename MediumItalic subfamily to Medium Italic * Show some more information when removing duplicated glyphs * Add a --force-monospaced argument instead of hardcoding font names * Convert `BoldCond` subfamily to `Bold Condensed` * Fixes for Monospaced fonts and force the Nimbus Mono L font to be Monospaced. (bsc#1169444 #c41) * Add a --version argument * Fix subfamily names so the converted font's subfamily match the original ones. (bsc#1169444 #c41) Changes in xorg-x11-fonts: - Use ttf-converter 1.0.6 to build an Italic version of cu12.pcf.gz in the converted subpackage - Include the subfamily in the filename of converted fonts - Use ttf-converter's new bitmap font support to convert Schumacher Clean and Schumacher Clean Wide (bsc#1169444 #c41) - Replace some unicode values in cu-pua12.pcf.gz to fix them - Shift some unicode values in arabic24.pcf.gz and cuarabic12.pcf.gz so glyphs don't pretend to be latin characters when they're not. - Don't distribute converted fonts with wrong unicode values in their glyphs. (bsc#1169444) Bitstream-Charter-*.otb, Cursor.ttf,Sun-OPEN-LOOK-*.otb, MUTT-ClearlyU-Devangari-Extra-Regular, MUTT-ClearlyU-Ligature-Wide-Regular, and MUTT-ClearlyU-Devanagari-Regular Changes in ghostscript-fonts: - Force the converted Nimbus Mono font to be monospaced. (bsc#1169444 #c41) Use the --force-monospaced argument of ttf-converter 1.0.3 This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-975=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): fontforge-20200314-lp152.2.3.1 fontforge-debuginfo-20200314-lp152.2.3.1 fontforge-debugsource-20200314-lp152.2.3.1 fontforge-devel-20200314-lp152.2.3.1 fonttosfnt-1.1.0-lp152.2.2.1 fonttosfnt-debuginfo-1.1.0-lp152.2.2.1 fonttosfnt-debugsource-1.1.0-lp152.2.2.1 freetype2-debugsource-2.10.1-lp152.2.2.1 freetype2-devel-2.10.1-lp152.2.2.1 ft2demos-2.10.1-lp152.2.2.1 ftbench-2.10.1-lp152.2.2.1 ftdiff-2.10.1-lp152.2.2.1 ftdump-2.10.1-lp152.2.2.1 ftgamma-2.10.1-lp152.2.2.1 ftgrid-2.10.1-lp152.2.2.1 ftinspect-2.10.1-lp152.2.2.1 ftlint-2.10.1-lp152.2.2.1 ftmulti-2.10.1-lp152.2.2.1 ftstring-2.10.1-lp152.2.2.1 ftvalid-2.10.1-lp152.2.2.1 ftview-2.10.1-lp152.2.2.1 libfreetype6-2.10.1-lp152.2.2.1 libfreetype6-debuginfo-2.10.1-lp152.2.2.1 - openSUSE Leap 15.2 (noarch): fontforge-doc-20200314-lp152.2.3.1 freetype2-profile-tti35-2.10.1-lp152.2.2.1 ghostscript-fonts-9.06-lp152.9.3.1 ghostscript-fonts-other-9.06-lp152.9.3.1 ghostscript-fonts-std-9.06-lp152.9.3.1 ghostscript-fonts-std-converted-9.06-lp152.9.3.1 ttf-converter-1.0.6-lp152.2.3.1 xorg-x11-fonts-7.6-lp152.7.3.1 xorg-x11-fonts-converted-7.6-lp152.7.3.1 xorg-x11-fonts-core-7.6-lp152.7.3.1 xorg-x11-fonts-legacy-7.6-lp152.7.3.1 - openSUSE Leap 15.2 (x86_64): freetype2-devel-32bit-2.10.1-lp152.2.2.1 libfreetype6-32bit-2.10.1-lp152.2.2.1 libfreetype6-32bit-debuginfo-2.10.1-lp152.2.2.1 References: https://bugzilla.suse.com/1169444

1 0

openSUSE-SU-2020:0983-1: important: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 17 Jul '20

17 Jul '20

openSUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0983-1 Rating: important References: #1166238 #1173576 #1173613 Cross-References: CVE-2020-12402 CVE-2020-12415 CVE-2020-12416 CVE-2020-12417 CVE-2020-12418 CVE-2020-12419 CVE-2020-12420 CVE-2020-12421 CVE-2020-12422 CVE-2020-12423 CVE-2020-12424 CVE-2020-12425 CVE-2020-12426 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes 13 vulnerabilities is now available. Description: This update for MozillaFirefox to version 78.0.1 ESR fixes the following issues: Security issues fixed: - CVE-2020-12415: AppCache manifest poisoning due to url encoded character processing (bsc#1173576). - CVE-2020-12416: Use-after-free in WebRTC VideoBroadcaster (bsc#1173576). - CVE-2020-12417: Memory corruption due to missing sign-extension for ValueTags on ARM64 (bsc#1173576). - CVE-2020-12418: Information disclosure due to manipulated URL object (bsc#1173576). - CVE-2020-12419: Use-after-free in nsGlobalWindowInner (bsc#1173576). - CVE-2020-12420: Use-After-Free when trying to connect to a STUN server (bsc#1173576). - CVE-2020-12402: RSA Key Generation vulnerable to side-channel attack (bsc#1173576). - CVE-2020-12421: Add-On updates did not respect the same certificate trust rules as software updates (bsc#1173576). - CVE-2020-12422: Integer overflow in nsJPEGEncoder::emptyOutputBuffer (bsc#1173576). - CVE-2020-12423: DLL Hijacking due to searching %PATH% for a library (bsc#1173576). - CVE-2020-12424: WebRTC permission prompt could have been bypassed by a compromised content process (bsc#1173576). - CVE-2020-12425: Out of bound read in Date.parse() (bsc#1173576). - CVE-2020-12426: Memory safety bugs fixed in Firefox 78 (bsc#1173576). - FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled (bsc#1167231). Non-security issues fixed: - Fixed interaction with freetype6 (bsc#1173613). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-983=1 Package List: - openSUSE Leap 15.2 (x86_64): MozillaFirefox-78.0.1-lp152.2.5.1 MozillaFirefox-branding-upstream-78.0.1-lp152.2.5.1 MozillaFirefox-buildsymbols-78.0.1-lp152.2.5.1 MozillaFirefox-debuginfo-78.0.1-lp152.2.5.1 MozillaFirefox-debugsource-78.0.1-lp152.2.5.1 MozillaFirefox-devel-78.0.1-lp152.2.5.1 MozillaFirefox-translations-common-78.0.1-lp152.2.5.1 MozillaFirefox-translations-other-78.0.1-lp152.2.5.1 References: https://www.suse.com/security/cve/CVE-2020-12402.html https://www.suse.com/security/cve/CVE-2020-12415.html https://www.suse.com/security/cve/CVE-2020-12416.html https://www.suse.com/security/cve/CVE-2020-12417.html https://www.suse.com/security/cve/CVE-2020-12418.html https://www.suse.com/security/cve/CVE-2020-12419.html https://www.suse.com/security/cve/CVE-2020-12420.html https://www.suse.com/security/cve/CVE-2020-12421.html https://www.suse.com/security/cve/CVE-2020-12422.html https://www.suse.com/security/cve/CVE-2020-12423.html https://www.suse.com/security/cve/CVE-2020-12424.html https://www.suse.com/security/cve/CVE-2020-12425.html https://www.suse.com/security/cve/CVE-2020-12426.html https://bugzilla.suse.com/1166238 https://bugzilla.suse.com/1173576 https://bugzilla.suse.com/1173613

1 0

openSUSE-SU-2020:0982-1: important: Security update for MozillaThunderbird
by opensuse-security＠opensuse.org 17 Jul '20

17 Jul '20

openSUSE Security Update: Security update for MozillaThunderbird ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0982-1 Rating: important References: #1173576 Cross-References: CVE-2020-12417 CVE-2020-12418 CVE-2020-12419 CVE-2020-12420 CVE-2020-12421 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for MozillaThunderbird to version 68.10.0 ESR fixes the following issues: - CVE-2020-12417: Memory corruption due to missing sign-extension for ValueTags on ARM64 (bsc#1173576). - CVE-2020-12418: Information disclosure due to manipulated URL object (bsc#1173576). - CVE-2020-12419: Use-after-free in nsGlobalWindowInner (bsc#1173576). - CVE-2020-12420: Use-After-Free when trying to connect to a STUN server (bsc#1173576). - CVE-2020-12421: Add-On updates did not respect the same certificate trust rules as software updates (bsc#1173576). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-982=1 Package List: - openSUSE Leap 15.2 (x86_64): MozillaThunderbird-68.10.0-lp152.2.4.1 MozillaThunderbird-debuginfo-68.10.0-lp152.2.4.1 MozillaThunderbird-debugsource-68.10.0-lp152.2.4.1 MozillaThunderbird-translations-common-68.10.0-lp152.2.4.1 MozillaThunderbird-translations-other-68.10.0-lp152.2.4.1 References: https://www.suse.com/security/cve/CVE-2020-12417.html https://www.suse.com/security/cve/CVE-2020-12418.html https://www.suse.com/security/cve/CVE-2020-12419.html https://www.suse.com/security/cve/CVE-2020-12420.html https://www.suse.com/security/cve/CVE-2020-12421.html https://bugzilla.suse.com/1173576

1 0

openSUSE-RU-2020:0979-1: moderate: Recommended update for live-add-yast-repos
by maintenance＠opensuse.org 17 Jul '20

17 Jul '20

openSUSE Recommended Update: Recommended update for live-add-yast-repos ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0979-1 Rating: moderate References: #1173873 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for live-add-yast-repos fixes the following issues: - autorefresh defaults to true (boo#1173873) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-979=1 Package List: - openSUSE Leap 15.2 (x86_64): live-add-yast-repos-1.0-lp152.5.3.1 References: https://bugzilla.suse.com/1173873

1 0

openSUSE-RU-2020:0972-1: moderate: Recommended update for usbguard
by maintenance＠opensuse.org 17 Jul '20

17 Jul '20

openSUSE Recommended Update: Recommended update for usbguard ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0972-1 Rating: moderate References: #1173750 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for usbguard fixes the following issues: - disable system call filtering in systemd service file for Leap 15.X (boo#1173750) - update to 0.7.8 + Fixed segfaults with rules.d feature + Added readwritepath to service file + Added match-all keyword to rules language + Added rules.d feature: daemon can load multiple rule files from rules.d/ + Included with-connect-type in dbus signal + Fixed sigwaitinfo handling + Fixed possible data corruption on stack with appendRule via dbus + Fixed ENOBUFS errno handling on netlink socket: daemon can survive and wait until socket is readable again + Dropped unused PIDFile from service file + Dropped deprecated dbus-glib dependency Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-972=1 Package List: - openSUSE Leap 15.2 (x86_64): libusbguard0-0.7.8-lp152.2.5.1 libusbguard0-debuginfo-0.7.8-lp152.2.5.1 usbguard-0.7.8-lp152.2.5.1 usbguard-debuginfo-0.7.8-lp152.2.5.1 usbguard-debugsource-0.7.8-lp152.2.5.1 usbguard-devel-0.7.8-lp152.2.5.1 usbguard-tools-0.7.8-lp152.2.5.1 usbguard-tools-debuginfo-0.7.8-lp152.2.5.1 References: https://bugzilla.suse.com/1173750

1 0

openSUSE-RU-2020:0971-1: moderate: Recommended update for hylafax+
by maintenance＠opensuse.org 17 Jul '20

17 Jul '20

openSUSE Recommended Update: Recommended update for hylafax+ ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0971-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for hylafax+ fixes the following issues: * adjusted authorisation * adjusted pre*/post* snipplets Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-971=1 Package List: - openSUSE Leap 15.2 (x86_64): hylafax+-7.0.2-lp152.3.3.1 hylafax+-client-7.0.2-lp152.3.3.1 hylafax+-client-debuginfo-7.0.2-lp152.3.3.1 hylafax+-debuginfo-7.0.2-lp152.3.3.1 hylafax+-debugsource-7.0.2-lp152.3.3.1 libfaxutil7_0_2-7.0.2-lp152.3.3.1 libfaxutil7_0_2-debuginfo-7.0.2-lp152.3.3.1 References:

1 0

openSUSE-SU-2020:0970-1: moderate: Security update for openexr
by opensuse-security＠opensuse.org 16 Jul '20

16 Jul '20

openSUSE Security Update: Security update for openexr ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0970-1 Rating: moderate References: #1173466 #1173467 #1173469 Cross-References: CVE-2020-15304 CVE-2020-15305 CVE-2020-15306 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for openexr fixes the following issues: - CVE-2020-15304: Fixed a NULL pointer dereference in TiledInputFile:TiledInputFile() (bsc#1173466). - CVE-2020-15305: Fixed a use-after-free in DeepScanLineInputFile:DeepScanLineInputFile() (bsc#1173467). - CVE-2020-15306: Fixed a heap buffer overflow in getChunkOffsetTableSize() (bsc#1173469). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-970=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libIlmImf-2_2-23-2.2.1-lp151.4.12.1 libIlmImf-2_2-23-debuginfo-2.2.1-lp151.4.12.1 libIlmImfUtil-2_2-23-2.2.1-lp151.4.12.1 libIlmImfUtil-2_2-23-debuginfo-2.2.1-lp151.4.12.1 openexr-2.2.1-lp151.4.12.1 openexr-debuginfo-2.2.1-lp151.4.12.1 openexr-debugsource-2.2.1-lp151.4.12.1 openexr-devel-2.2.1-lp151.4.12.1 openexr-doc-2.2.1-lp151.4.12.1 - openSUSE Leap 15.1 (x86_64): libIlmImf-2_2-23-32bit-2.2.1-lp151.4.12.1 libIlmImf-2_2-23-32bit-debuginfo-2.2.1-lp151.4.12.1 libIlmImfUtil-2_2-23-32bit-2.2.1-lp151.4.12.1 libIlmImfUtil-2_2-23-32bit-debuginfo-2.2.1-lp151.4.12.1 References: https://www.suse.com/security/cve/CVE-2020-15304.html https://www.suse.com/security/cve/CVE-2020-15305.html https://www.suse.com/security/cve/CVE-2020-15306.html https://bugzilla.suse.com/1173466 https://bugzilla.suse.com/1173467 https://bugzilla.suse.com/1173469

1 0

openSUSE-OU-2020:0969-1: moderate: Optional update for python-Cerberus
by maintenance＠opensuse.org 16 Jul '20

16 Jul '20

openSUSE Optional Update: Optional update for python-Cerberus ______________________________________________________________________________ Announcement ID: openSUSE-OU-2020:0969-1 Rating: moderate References: #1121858 #1173465 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two optional fixes can now be installed. Description: This update for python-Cerberus fixes the following issues: - Update to version 1.3.2 * includes various features and improvements - please refer to the changelog for a detailed technical list of changes This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Optional Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-969=1 Package List: - openSUSE Leap 15.1 (noarch): python2-Cerberus-1.3.2-lp151.4.3.1 python3-Cerberus-1.3.2-lp151.4.3.1 References: https://bugzilla.suse.com/1121858 https://bugzilla.suse.com/1173465

1 0

openSUSE-RU-2020:0968-1: moderate: Recommended update for nodejs10
by maintenance＠opensuse.org 15 Jul '20

15 Jul '20

openSUSE Recommended Update: Recommended update for nodejs10 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0968-1 Rating: moderate References: #1172728 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for nodejs10 fixes the following issues: - Added Require for nodejs10 when intalling npm10 (bsc#1172728) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-968=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): nodejs10-10.21.0-lp151.2.11.1 nodejs10-debuginfo-10.21.0-lp151.2.11.1 nodejs10-debugsource-10.21.0-lp151.2.11.1 nodejs10-devel-10.21.0-lp151.2.11.1 npm10-10.21.0-lp151.2.11.1 - openSUSE Leap 15.1 (noarch): nodejs10-docs-10.21.0-lp151.2.11.1 References: https://bugzilla.suse.com/1172728

1 0

openSUSE-RU-2020:0964-1: moderate: Recommended update for cloud-init
by maintenance＠opensuse.org 15 Jul '20

15 Jul '20

openSUSE Recommended Update: Recommended update for cloud-init ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0964-1 Rating: moderate References: #1170154 #1171546 #1171995 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for cloud-init contains the following fixes: - rsyslog warning, '~' is deprecated: (bsc#1170154) + replace deprecated syntax '& ~' by '& stop' for more information please see https://www.rsyslog.com/rsyslog-error-2307/. + Explicitly test for netconfig version 1 as well as 2. + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-964=1 Package List: - openSUSE Leap 15.1 (x86_64): cloud-init-19.4-lp151.2.21.1 cloud-init-config-suse-19.4-lp151.2.21.1 cloud-init-doc-19.4-lp151.2.21.1 References: https://bugzilla.suse.com/1170154 https://bugzilla.suse.com/1171546 https://bugzilla.suse.com/1171995

1 0

openSUSE-SU-2020:0965-1: important: Security update for xen
by opensuse-security＠opensuse.org 15 Jul '20

15 Jul '20

openSUSE Security Update: Security update for xen ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0965-1 Rating: important References: #1027519 #1172205 #1173376 #1173377 #1173378 #1173380 Cross-References: CVE-2020-0543 CVE-2020-15563 CVE-2020-15565 CVE-2020-15566 CVE-2020-15567 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves 5 vulnerabilities and has one errata is now available. Description: This update for xen fixes the following issues: - CVE-2020-15563: Fixed inverted code paths in x86 dirty VRAM tracking (bsc#1173377). - CVE-2020-15565: Fixed insufficient cache write-back under VT-d (bsc#1173378). - CVE-2020-15566: Fixed incorrect error handling in event channel port allocation (bsc#1173376). - CVE-2020-15567: Fixed non-atomic modification of live EPT PTE (bsc#1173380). - CVE-2020-0543: Special Register Buffer Data Sampling (SRBDS) aka "CrossTalk" (bsc#1172205). Additional upstream bug fixes (bsc#1027519) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-965=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): xen-debugsource-4.12.3_04-lp151.2.21.1 xen-devel-4.12.3_04-lp151.2.21.1 xen-libs-4.12.3_04-lp151.2.21.1 xen-libs-debuginfo-4.12.3_04-lp151.2.21.1 xen-tools-domU-4.12.3_04-lp151.2.21.1 xen-tools-domU-debuginfo-4.12.3_04-lp151.2.21.1 - openSUSE Leap 15.1 (x86_64): xen-4.12.3_04-lp151.2.21.1 xen-doc-html-4.12.3_04-lp151.2.21.1 xen-libs-32bit-4.12.3_04-lp151.2.21.1 xen-libs-32bit-debuginfo-4.12.3_04-lp151.2.21.1 xen-tools-4.12.3_04-lp151.2.21.1 xen-tools-debuginfo-4.12.3_04-lp151.2.21.1 References: https://www.suse.com/security/cve/CVE-2020-0543.html https://www.suse.com/security/cve/CVE-2020-15563.html https://www.suse.com/security/cve/CVE-2020-15565.html https://www.suse.com/security/cve/CVE-2020-15566.html https://www.suse.com/security/cve/CVE-2020-15567.html https://bugzilla.suse.com/1027519 https://bugzilla.suse.com/1172205 https://bugzilla.suse.com/1173376 https://bugzilla.suse.com/1173377 https://bugzilla.suse.com/1173378 https://bugzilla.suse.com/1173380

1 0

openSUSE-SU-2020:0967-1: important: Security update for MozillaThunderbird
by opensuse-security＠opensuse.org 15 Jul '20

15 Jul '20

openSUSE Security Update: Security update for MozillaThunderbird ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0967-1 Rating: important References: #1173576 Cross-References: CVE-2020-12417 CVE-2020-12418 CVE-2020-12419 CVE-2020-12420 CVE-2020-12421 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for MozillaThunderbird to version 68.10.0 ESR fixes the following issues: - CVE-2020-12417: Memory corruption due to missing sign-extension for ValueTags on ARM64 (bsc#1173576). - CVE-2020-12418: Information disclosure due to manipulated URL object (bsc#1173576). - CVE-2020-12419: Use-after-free in nsGlobalWindowInner (bsc#1173576). - CVE-2020-12420: Use-After-Free when trying to connect to a STUN server (bsc#1173576). - CVE-2020-12421: Add-On updates did not respect the same certificate trust rules as software updates (bsc#1173576). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-967=1 Package List: - openSUSE Leap 15.1 (x86_64): MozillaThunderbird-68.10.0-lp151.2.44.2 MozillaThunderbird-debuginfo-68.10.0-lp151.2.44.2 MozillaThunderbird-debugsource-68.10.0-lp151.2.44.2 MozillaThunderbird-translations-common-68.10.0-lp151.2.44.2 MozillaThunderbird-translations-other-68.10.0-lp151.2.44.2 References: https://www.suse.com/security/cve/CVE-2020-12417.html https://www.suse.com/security/cve/CVE-2020-12418.html https://www.suse.com/security/cve/CVE-2020-12419.html https://www.suse.com/security/cve/CVE-2020-12420.html https://www.suse.com/security/cve/CVE-2020-12421.html https://bugzilla.suse.com/1173576

1 0

openSUSE-RU-2020:0966-1: moderate: Recommended update for armagetron
by maintenance＠opensuse.org 15 Jul '20

15 Jul '20

openSUSE Recommended Update: Recommended update for armagetron ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0966-1 Rating: moderate References: Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for armagetron fixes the following issues: Update to 0.2.8.3.5. No changelog. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-966=1 Package List: - openSUSE Leap 15.1 (x86_64): armagetron-0.2.8.3.5-lp151.3.3.1 armagetron-debuginfo-0.2.8.3.5-lp151.3.3.1 armagetron-debugsource-0.2.8.3.5-lp151.3.3.1 References:

1 0

openSUSE-RU-2020:0962-1: moderate: Recommended update for mkdud
by maintenance＠opensuse.org 14 Jul '20

14 Jul '20

openSUSE Recommended Update: Recommended update for mkdud ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0962-1 Rating: moderate References: #1173988 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for mkdud fixes the following issues: - ensure DUD repos are removed at the end of the installation (boo#1173988) - add --sign-key-id option to allow specifying a gpg signing key by id - updated troubleshooting section in HOWTO - adjust spec file to build on SLE-11 - start moving doc to asciidoc; add proper man page - map Kubic to Tumbleweed - fix architecture auto-detection for elf binaries and libraries - Add bash completion - fix reading oscrc (gh#openSUSE/mkdud#19) - add HOWTO describing some typical uses - put 'module.config' files into module directory - look also at ~/.config/osc/oscrc for osc config Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2020-962=1 Package List: - openSUSE Backports SLE-15 (noarch): mkdud-1.50-bp150.3.3.1 References: https://bugzilla.suse.com/1173988

1 0

openSUSE-RU-2020:0963-1: moderate: Recommended update for mkdud
by maintenance＠opensuse.org 14 Jul '20

14 Jul '20

openSUSE Recommended Update: Recommended update for mkdud ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0963-1 Rating: moderate References: #1173988 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for mkdud fixes the following issues: - ensure DUD repos are removed at the end of the installation (boo#1173988) - add --sign-key-id option to allow specifying a gpg signing key by id - updated troubleshooting section in HOWTO - start moving doc to asciidoc; add proper man page - map Kubic to Tumbleweed - fix architecture auto-detection for elf binaries and libraries - Add bash completion - fix reading oscrc (gh#openSUSE/mkdud#19) - add HOWTO describing some typical uses - put 'module.config' files into module directory - look also at ~/.config/osc/oscrc for osc config Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-963=1 Package List: - openSUSE Backports SLE-15-SP1 (noarch): mkdud-1.50-bp151.4.3.1 References: https://bugzilla.suse.com/1173988

1 0

openSUSE-SU-2020:0958-1: moderate: Security update for hylafax+
by opensuse-security＠opensuse.org 14 Jul '20

14 Jul '20

openSUSE Security Update: Security update for hylafax+ ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0958-1 Rating: moderate References: #1172731 Cross-References: CVE-2020-8024 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for hylafax+ fixes the following issues: Security issue fixed: - CVE-2020-8024 boo#1172731 hylafax+ was updated to version 7.0.2: * change FIXEDWIDTH default to better accommodate auto-rotation (13 Dec 2019) * prevent SSL_accept() from blocking (5 Dec 2019) * support libtiff v4.1 (5 Dec 2019) * fix ignoremodembusy feature broken by ModemGroup limits feature (16 Nov 2019) Version 7.0.1: * create a client timeout setting and change the default from 60 to 3600 seconds (26 Sep 2019) * extend timeout for receiving ECM frames (21 Aug 2019) * fix timeout in Class 1 frame reception (5 Aug 2019) * improve Class 1 protocol handling when MaxRecvPages exceeded (31 Jul 2019) * fix ModemGroup limit default (11 Jul 2019) * fix recovery for SSL Fax write failures (6 Jun 2019) Version 7.0.0: * add LDAP features for compatibility with ActiveDirectory (25 Mar-1 Apr 2019) * fix recovery after SSL Fax "accept failure" (18 Mar 2019) * add TextFormat overstrike option and disable by default (6 Feb 2019) * fix the page size of cover sheets returned via notify (8 Jan 2019) * fix or silence numerous compiler warnings (19, 22, 28 Dec 2018) * fix pagehandling updating after a proxy has been used (7-8 Dec 2018) * add faxmail stderr output of RFC2047 decoding results (5 Dec 2018) * fix faxmail handling of headers encoded with UTF-8 (4 Dec 2018) * fix faxmail handling of base64-encoded text parts (4 Dec 2018) * add SSL Fax support (9-26, 29 Nov; 11, 18, 25 Dec 2018; 2, 7, 23 Jan 2019) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-958=1 Package List: - openSUSE Leap 15.1 (x86_64): hylafax+-7.0.2-lp151.4.3.1 hylafax+-client-7.0.2-lp151.4.3.1 hylafax+-client-debuginfo-7.0.2-lp151.4.3.1 hylafax+-debuginfo-7.0.2-lp151.4.3.1 hylafax+-debugsource-7.0.2-lp151.4.3.1 libfaxutil7_0_2-7.0.2-lp151.4.3.1 libfaxutil7_0_2-debuginfo-7.0.2-lp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2020-8024.html https://bugzilla.suse.com/1172731

1 0

openSUSE-RU-2020:0961-1: moderate: Recommended update for crmsh
by maintenance＠opensuse.org 14 Jul '20

14 Jul '20

openSUSE Recommended Update: Recommended update for crmsh ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0961-1 Rating: moderate References: #1170037 #1170999 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for crmsh fixes the following issues: - Fix for using SBDManager to configure sbd and enable systemd service as it is necessary. (bsc#1170037, bsc#1170999) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-961=1 Package List: - openSUSE Leap 15.1 (noarch): crmsh-4.1.0+git.1585823743.3acb5567-lp151.2.18.1 crmsh-scripts-4.1.0+git.1585823743.3acb5567-lp151.2.18.1 crmsh-test-4.1.0+git.1585823743.3acb5567-lp151.2.18.1 References: https://bugzilla.suse.com/1170037 https://bugzilla.suse.com/1170999

1 0

openSUSE-SU-2020:0957-1: moderate: Security update for permissions
by opensuse-security＠opensuse.org 14 Jul '20

14 Jul '20

openSUSE Security Update: Security update for permissions ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0957-1 Rating: moderate References: #1171883 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for permissions fixes the following issues: - Removed conflicting entries which might expose pcp to security issues (bsc#1171883) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-957=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): permissions-20181116-lp151.4.24.1 permissions-debuginfo-20181116-lp151.4.24.1 permissions-debugsource-20181116-lp151.4.24.1 - openSUSE Leap 15.1 (noarch): permissions-zypp-plugin-20181116-lp151.4.24.1 References: https://bugzilla.suse.com/1171883

1 0

openSUSE-SU-2020:0960-1: important: Security update for LibVNCServer
by opensuse-security＠opensuse.org 14 Jul '20

14 Jul '20

openSUSE Security Update: Security update for LibVNCServer ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0960-1 Rating: important References: #1173477 Cross-References: CVE-2017-18922 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for LibVNCServer fixes the following issues: - CVE-2017-18922: Fixed an issue which could have allowed to an attacker to pre-auth overwrite a function pointer which subsequently used leading to potential remote code execution (bsc#1173477). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-960=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): LibVNCServer-debugsource-0.9.10-lp151.7.6.1 LibVNCServer-devel-0.9.10-lp151.7.6.1 libvncclient0-0.9.10-lp151.7.6.1 libvncclient0-debuginfo-0.9.10-lp151.7.6.1 libvncserver0-0.9.10-lp151.7.6.1 libvncserver0-debuginfo-0.9.10-lp151.7.6.1 References: https://www.suse.com/security/cve/CVE-2017-18922.html https://bugzilla.suse.com/1173477

1 0

openSUSE-SU-2020:0956-1: important: Security update for openldap2
by opensuse-security＠opensuse.org 14 Jul '20

14 Jul '20

openSUSE Security Update: Security update for openldap2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0956-1 Rating: important References: #1172698 #1172704 Cross-References: CVE-2020-8023 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for openldap2 fixes the following issues: - CVE-2020-8023: Fixed a potential local privilege escalation from ldap to root when OPENLDAP_CONFIG_BACKEND="ldap" was used (bsc#1172698). - Changed DB_CONFIG to root:ldap permissions (bsc#1172704). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-956=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libldap-2_4-2-2.4.46-lp151.10.12.1 libldap-2_4-2-debuginfo-2.4.46-lp151.10.12.1 openldap2-2.4.46-lp151.10.12.1 openldap2-back-meta-2.4.46-lp151.10.12.1 openldap2-back-meta-debuginfo-2.4.46-lp151.10.12.1 openldap2-back-perl-2.4.46-lp151.10.12.1 openldap2-back-perl-debuginfo-2.4.46-lp151.10.12.1 openldap2-back-sock-2.4.46-lp151.10.12.1 openldap2-back-sock-debuginfo-2.4.46-lp151.10.12.1 openldap2-back-sql-2.4.46-lp151.10.12.1 openldap2-back-sql-debuginfo-2.4.46-lp151.10.12.1 openldap2-client-2.4.46-lp151.10.12.1 openldap2-client-debuginfo-2.4.46-lp151.10.12.1 openldap2-contrib-2.4.46-lp151.10.12.1 openldap2-contrib-debuginfo-2.4.46-lp151.10.12.1 openldap2-debuginfo-2.4.46-lp151.10.12.1 openldap2-debugsource-2.4.46-lp151.10.12.1 openldap2-devel-2.4.46-lp151.10.12.1 openldap2-devel-static-2.4.46-lp151.10.12.1 openldap2-ppolicy-check-password-1.2-lp151.10.12.1 openldap2-ppolicy-check-password-debuginfo-1.2-lp151.10.12.1 - openSUSE Leap 15.1 (noarch): libldap-data-2.4.46-lp151.10.12.1 openldap2-doc-2.4.46-lp151.10.12.1 - openSUSE Leap 15.1 (x86_64): libldap-2_4-2-32bit-2.4.46-lp151.10.12.1 libldap-2_4-2-32bit-debuginfo-2.4.46-lp151.10.12.1 openldap2-devel-32bit-2.4.46-lp151.10.12.1 References: https://www.suse.com/security/cve/CVE-2020-8023.html https://bugzilla.suse.com/1172698 https://bugzilla.suse.com/1172704

1 0

openSUSE-RU-2020:0959-1: moderate: Recommended update for llvm7
by maintenance＠opensuse.org 14 Jul '20

14 Jul '20

openSUSE Recommended Update: Recommended update for llvm7 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0959-1 Rating: moderate References: #1173202 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for llvm7 fixes the following issues: - Fix miscompilations with rustc 1.43 that lead to LTO failures (bsc#1173202) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-959=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): clang7-7.0.1-lp151.2.12.1 clang7-checker-7.0.1-lp151.2.12.1 clang7-debuginfo-7.0.1-lp151.2.12.1 clang7-devel-7.0.1-lp151.2.12.1 libLLVM7-7.0.1-lp151.2.12.1 libLLVM7-debuginfo-7.0.1-lp151.2.12.1 libLTO7-7.0.1-lp151.2.12.1 libLTO7-debuginfo-7.0.1-lp151.2.12.1 libclang7-7.0.1-lp151.2.12.1 libclang7-debuginfo-7.0.1-lp151.2.12.1 libomp7-devel-7.0.1-lp151.2.12.1 libomp7-devel-debuginfo-7.0.1-lp151.2.12.1 lld7-7.0.1-lp151.2.12.1 lld7-debuginfo-7.0.1-lp151.2.12.1 llvm7-7.0.1-lp151.2.12.1 llvm7-LTO-devel-7.0.1-lp151.2.12.1 llvm7-debuginfo-7.0.1-lp151.2.12.1 llvm7-debugsource-7.0.1-lp151.2.12.1 llvm7-devel-7.0.1-lp151.2.12.1 llvm7-devel-debuginfo-7.0.1-lp151.2.12.1 llvm7-gold-7.0.1-lp151.2.12.1 llvm7-gold-debuginfo-7.0.1-lp151.2.12.1 llvm7-polly-7.0.1-lp151.2.12.1 llvm7-polly-debuginfo-7.0.1-lp151.2.12.1 llvm7-polly-devel-7.0.1-lp151.2.12.1 - openSUSE Leap 15.1 (x86_64): clang7-devel-32bit-7.0.1-lp151.2.12.1 libLLVM7-32bit-7.0.1-lp151.2.12.1 libLLVM7-32bit-debuginfo-7.0.1-lp151.2.12.1 libLTO7-32bit-7.0.1-lp151.2.12.1 libLTO7-32bit-debuginfo-7.0.1-lp151.2.12.1 libc++-devel-7.0.1-lp151.2.12.1 libc++1-7.0.1-lp151.2.12.1 libc++1-debuginfo-7.0.1-lp151.2.12.1 libc++abi-devel-7.0.1-lp151.2.12.1 libc++abi1-7.0.1-lp151.2.12.1 libc++abi1-debuginfo-7.0.1-lp151.2.12.1 libclang7-32bit-7.0.1-lp151.2.12.1 libclang7-32bit-debuginfo-7.0.1-lp151.2.12.1 liblldb7-7.0.1-lp151.2.12.1 liblldb7-debuginfo-7.0.1-lp151.2.12.1 lldb7-7.0.1-lp151.2.12.1 lldb7-debuginfo-7.0.1-lp151.2.12.1 lldb7-devel-7.0.1-lp151.2.12.1 llvm7-LTO-devel-32bit-7.0.1-lp151.2.12.1 llvm7-devel-32bit-7.0.1-lp151.2.12.1 llvm7-devel-32bit-debuginfo-7.0.1-lp151.2.12.1 python3-lldb7-7.0.1-lp151.2.12.1 python3-lldb7-debuginfo-7.0.1-lp151.2.12.1 - openSUSE Leap 15.1 (noarch): llvm7-emacs-plugins-7.0.1-lp151.2.12.1 llvm7-opt-viewer-7.0.1-lp151.2.12.1 llvm7-vim-plugins-7.0.1-lp151.2.12.1 python3-clang-7.0.1-lp151.2.12.1 References: https://bugzilla.suse.com/1173202

1 0

openSUSE-SU-2020:0955-1: moderate: Security update for mozilla-nss
by opensuse-security＠opensuse.org 13 Jul '20

13 Jul '20

openSUSE Security Update: Security update for mozilla-nss ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0955-1 Rating: moderate References: #1168669 #1173032 Cross-References: CVE-2020-12402 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for mozilla-nss fixes the following issues: mozilla-nss was updated to version 3.53.1 - CVE-2020-12402: Fixed a potential side channel attack during RSA key generation (bsc#1173032) - Fixed various FIPS issues in libfreebl3 which were causing segfaults in the test suite of chrony (bsc#1168669). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-955=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libfreebl3-3.53.1-lp152.2.4.1 libfreebl3-debuginfo-3.53.1-lp152.2.4.1 libfreebl3-hmac-3.53.1-lp152.2.4.1 libsoftokn3-3.53.1-lp152.2.4.1 libsoftokn3-debuginfo-3.53.1-lp152.2.4.1 libsoftokn3-hmac-3.53.1-lp152.2.4.1 mozilla-nss-3.53.1-lp152.2.4.1 mozilla-nss-certs-3.53.1-lp152.2.4.1 mozilla-nss-certs-debuginfo-3.53.1-lp152.2.4.1 mozilla-nss-debuginfo-3.53.1-lp152.2.4.1 mozilla-nss-debugsource-3.53.1-lp152.2.4.1 mozilla-nss-devel-3.53.1-lp152.2.4.1 mozilla-nss-sysinit-3.53.1-lp152.2.4.1 mozilla-nss-sysinit-debuginfo-3.53.1-lp152.2.4.1 mozilla-nss-tools-3.53.1-lp152.2.4.1 mozilla-nss-tools-debuginfo-3.53.1-lp152.2.4.1 - openSUSE Leap 15.2 (x86_64): libfreebl3-32bit-3.53.1-lp152.2.4.1 libfreebl3-32bit-debuginfo-3.53.1-lp152.2.4.1 libfreebl3-hmac-32bit-3.53.1-lp152.2.4.1 libsoftokn3-32bit-3.53.1-lp152.2.4.1 libsoftokn3-32bit-debuginfo-3.53.1-lp152.2.4.1 libsoftokn3-hmac-32bit-3.53.1-lp152.2.4.1 mozilla-nss-32bit-3.53.1-lp152.2.4.1 mozilla-nss-32bit-debuginfo-3.53.1-lp152.2.4.1 mozilla-nss-certs-32bit-3.53.1-lp152.2.4.1 mozilla-nss-certs-32bit-debuginfo-3.53.1-lp152.2.4.1 mozilla-nss-sysinit-32bit-3.53.1-lp152.2.4.1 mozilla-nss-sysinit-32bit-debuginfo-3.53.1-lp152.2.4.1 References: https://www.suse.com/security/cve/CVE-2020-12402.html https://bugzilla.suse.com/1168669 https://bugzilla.suse.com/1173032

1 0

openSUSE-SU-2020:0952-1: moderate: Security update for nasm
by opensuse-security＠opensuse.org 13 Jul '20

13 Jul '20

openSUSE Security Update: Security update for nasm ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0952-1 Rating: moderate References: #1084631 #1086186 #1086227 #1086228 #1090519 #1090840 #1106878 #1107592 #1107594 #1108404 #1115758 #1115774 #1115795 #1173538 Cross-References: CVE-2018-1000667 CVE-2018-10016 CVE-2018-10254 CVE-2018-10316 CVE-2018-16382 CVE-2018-16517 CVE-2018-16999 CVE-2018-19214 CVE-2018-19215 CVE-2018-19216 CVE-2018-8881 CVE-2018-8882 CVE-2018-8883 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves 13 vulnerabilities and has one errata is now available. Description: This update for nasm fixes the following issues: nasm was updated to version 2.14.02. This allows building of Mozilla Firefox 78ESR and also contains lots of bugfixes, security fixes and improvements. * Fix crash due to multiple errors or warnings during the code generation pass if a list file is specified. * Create all system-defined macros defore processing command-line given preprocessing directives (-p, -d, -u, --pragma, --before). * If debugging is enabled, define a __DEBUG_FORMAT__ predefined macro. See section 4.11.7. * Fix an assert for the case in the obj format when a SEG operator refers to an EXTERN symbol declared further down in the code. * Fix a corner case in the floating-point code where a binary, octal or hexadecimal floating-point having at least 32, 11, or 8 mantissa digits could produce slightly incorrect results under very specific conditions. * Support -MD without a filename, for gcc compatibility. -MF can be used to set the dependencies output filename. See section 2.1.7. * Fix -E in combination with -MD. See section 2.1.21. * Fix missing errors on redefined labels; would cause convergence failure instead which is very slow and not easy to debug. * Duplicate definitions of the same label with the same value is now explicitly permitted (2.14 would allow it in some circumstances.) * Add the option --no-line to ignore %line directives in the source. See section 2.1.33 and section 4.10.1. * Changed -I option semantics by adding a trailing path separator unconditionally. * Fixed null dereference in corrupted invalid single line macros. * Fixed division by zero which may happen if source code is malformed. * Fixed out of bound access in processing of malformed segment override. * Fixed out of bound access in certain EQU parsing. * Fixed buffer underflow in float parsing. * Added SGX (Intel Software Guard Extensions) instructions. * Added +n syntax for multiple contiguous registers. * Fixed subsections_via_symbols for macho object format. * Added the --gprefix, --gpostfix, --lprefix, and --lpostfix command line options, to allow command line base symbol renaming. See section 2.1.28. * Allow label renaming to be specified by %pragma in addition to from the command line. See section 6.9. * Supported generic %pragma namespaces, output and debug. See section 6.10. * Added the --pragma command line option to inject a %pragma directive. See section 2.1.29. * Added the --before command line option to accept preprocess statement before input. See section 2.1.30. * Added AVX512 VBMI2 (Additional Bit Manipulation), VNNI (Vector Neural Network), BITALG (Bit Algorithm), and GFNI (Galois Field New Instruction) instructions. * Added the STATIC directive for local symbols that should be renamed using global-symbol rules. See section 6.8. * Allow a symbol to be defined as EXTERN and then later overridden as GLOBAL or COMMON. Furthermore, a symbol declared EXTERN and then defined will be treated as GLOBAL. See section 6.5. * The GLOBAL directive no longer is required to precede the definition of the symbol. * Support private_extern as macho specific extension to the GLOBAL directive. See section 7.8.5. * Updated UD0 encoding to match with the specification * Added the --limit-X command line option to set execution limits. See section 2.1.31. * Updated the Codeview version number to be aligned with MASM. * Added the --keep-all command line option to preserve output files. See section 2.1.32. * Added the --include command line option, an alias to -P (section 2.1.18). * Added the --help command line option as an alias to -h (section 3.1). * Added -W, -D, and -Q suffix aliases for RET instructions so the operand sizes of these instructions can be encoded without using o16, o32 or o64. New upstream version 2.13.03: * Add flags: AES, VAES, VPCLMULQDQ * Add VPCLMULQDQ instruction * elf: Add missing dwarf loc section * documentation updates This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-952=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): nasm-2.14.02-lp151.3.3.1 nasm-debuginfo-2.14.02-lp151.3.3.1 nasm-debugsource-2.14.02-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2018-1000667.html https://www.suse.com/security/cve/CVE-2018-10016.html https://www.suse.com/security/cve/CVE-2018-10254.html https://www.suse.com/security/cve/CVE-2018-10316.html https://www.suse.com/security/cve/CVE-2018-16382.html https://www.suse.com/security/cve/CVE-2018-16517.html https://www.suse.com/security/cve/CVE-2018-16999.html https://www.suse.com/security/cve/CVE-2018-19214.html https://www.suse.com/security/cve/CVE-2018-19215.html https://www.suse.com/security/cve/CVE-2018-19216.html https://www.suse.com/security/cve/CVE-2018-8881.html https://www.suse.com/security/cve/CVE-2018-8882.html https://www.suse.com/security/cve/CVE-2018-8883.html https://bugzilla.suse.com/1084631 https://bugzilla.suse.com/1086186 https://bugzilla.suse.com/1086227 https://bugzilla.suse.com/1086228 https://bugzilla.suse.com/1090519 https://bugzilla.suse.com/1090840 https://bugzilla.suse.com/1106878 https://bugzilla.suse.com/1107592 https://bugzilla.suse.com/1107594 https://bugzilla.suse.com/1108404 https://bugzilla.suse.com/1115758 https://bugzilla.suse.com/1115774 https://bugzilla.suse.com/1115795 https://bugzilla.suse.com/1173538

1 0

openSUSE-SU-2020:0953-1: moderate: Security update for mozilla-nss
by opensuse-security＠opensuse.org 13 Jul '20

13 Jul '20

openSUSE Security Update: Security update for mozilla-nss ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0953-1 Rating: moderate References: #1168669 #1173032 Cross-References: CVE-2020-12402 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for mozilla-nss fixes the following issues: mozilla-nss was updated to version 3.53.1 - CVE-2020-12402: Fixed a potential side channel attack during RSA key generation (bsc#1173032) - Fixed various FIPS issues in libfreebl3 which were causing segfaults in the test suite of chrony (bsc#1168669). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-953=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libfreebl3-3.53.1-lp151.2.26.1 libfreebl3-debuginfo-3.53.1-lp151.2.26.1 libfreebl3-hmac-3.53.1-lp151.2.26.1 libsoftokn3-3.53.1-lp151.2.26.1 libsoftokn3-debuginfo-3.53.1-lp151.2.26.1 libsoftokn3-hmac-3.53.1-lp151.2.26.1 mozilla-nss-3.53.1-lp151.2.26.1 mozilla-nss-certs-3.53.1-lp151.2.26.1 mozilla-nss-certs-debuginfo-3.53.1-lp151.2.26.1 mozilla-nss-debuginfo-3.53.1-lp151.2.26.1 mozilla-nss-debugsource-3.53.1-lp151.2.26.1 mozilla-nss-devel-3.53.1-lp151.2.26.1 mozilla-nss-sysinit-3.53.1-lp151.2.26.1 mozilla-nss-sysinit-debuginfo-3.53.1-lp151.2.26.1 mozilla-nss-tools-3.53.1-lp151.2.26.1 mozilla-nss-tools-debuginfo-3.53.1-lp151.2.26.1 - openSUSE Leap 15.1 (x86_64): libfreebl3-32bit-3.53.1-lp151.2.26.1 libfreebl3-32bit-debuginfo-3.53.1-lp151.2.26.1 libfreebl3-hmac-32bit-3.53.1-lp151.2.26.1 libsoftokn3-32bit-3.53.1-lp151.2.26.1 libsoftokn3-32bit-debuginfo-3.53.1-lp151.2.26.1 libsoftokn3-hmac-32bit-3.53.1-lp151.2.26.1 mozilla-nss-32bit-3.53.1-lp151.2.26.1 mozilla-nss-32bit-debuginfo-3.53.1-lp151.2.26.1 mozilla-nss-certs-32bit-3.53.1-lp151.2.26.1 mozilla-nss-certs-32bit-debuginfo-3.53.1-lp151.2.26.1 mozilla-nss-sysinit-32bit-3.53.1-lp151.2.26.1 mozilla-nss-sysinit-32bit-debuginfo-3.53.1-lp151.2.26.1 References: https://www.suse.com/security/cve/CVE-2020-12402.html https://bugzilla.suse.com/1168669 https://bugzilla.suse.com/1173032

1 0

openSUSE-SU-2020:0954-1: moderate: Security update for nasm
by opensuse-security＠opensuse.org 13 Jul '20

13 Jul '20

openSUSE Security Update: Security update for nasm ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0954-1 Rating: moderate References: #1084631 #1086186 #1086227 #1086228 #1090519 #1090840 #1106878 #1107592 #1107594 #1108404 #1115758 #1115774 #1115795 #1173538 Cross-References: CVE-2018-1000667 CVE-2018-10016 CVE-2018-10254 CVE-2018-10316 CVE-2018-16382 CVE-2018-16517 CVE-2018-16999 CVE-2018-19214 CVE-2018-19215 CVE-2018-19216 CVE-2018-8881 CVE-2018-8882 CVE-2018-8883 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves 13 vulnerabilities and has one errata is now available. Description: This update for nasm fixes the following issues: nasm was updated to version 2.14.02. This allows building of Mozilla Firefox 78ESR and also contains lots of bugfixes, security fixes and improvements. * Fix crash due to multiple errors or warnings during the code generation pass if a list file is specified. * Create all system-defined macros defore processing command-line given preprocessing directives (-p, -d, -u, --pragma, --before). * If debugging is enabled, define a __DEBUG_FORMAT__ predefined macro. See section 4.11.7. * Fix an assert for the case in the obj format when a SEG operator refers to an EXTERN symbol declared further down in the code. * Fix a corner case in the floating-point code where a binary, octal or hexadecimal floating-point having at least 32, 11, or 8 mantissa digits could produce slightly incorrect results under very specific conditions. * Support -MD without a filename, for gcc compatibility. -MF can be used to set the dependencies output filename. See section 2.1.7. * Fix -E in combination with -MD. See section 2.1.21. * Fix missing errors on redefined labels; would cause convergence failure instead which is very slow and not easy to debug. * Duplicate definitions of the same label with the same value is now explicitly permitted (2.14 would allow it in some circumstances.) * Add the option --no-line to ignore %line directives in the source. See section 2.1.33 and section 4.10.1. * Changed -I option semantics by adding a trailing path separator unconditionally. * Fixed null dereference in corrupted invalid single line macros. * Fixed division by zero which may happen if source code is malformed. * Fixed out of bound access in processing of malformed segment override. * Fixed out of bound access in certain EQU parsing. * Fixed buffer underflow in float parsing. * Added SGX (Intel Software Guard Extensions) instructions. * Added +n syntax for multiple contiguous registers. * Fixed subsections_via_symbols for macho object format. * Added the --gprefix, --gpostfix, --lprefix, and --lpostfix command line options, to allow command line base symbol renaming. See section 2.1.28. * Allow label renaming to be specified by %pragma in addition to from the command line. See section 6.9. * Supported generic %pragma namespaces, output and debug. See section 6.10. * Added the --pragma command line option to inject a %pragma directive. See section 2.1.29. * Added the --before command line option to accept preprocess statement before input. See section 2.1.30. * Added AVX512 VBMI2 (Additional Bit Manipulation), VNNI (Vector Neural Network), BITALG (Bit Algorithm), and GFNI (Galois Field New Instruction) instructions. * Added the STATIC directive for local symbols that should be renamed using global-symbol rules. See section 6.8. * Allow a symbol to be defined as EXTERN and then later overridden as GLOBAL or COMMON. Furthermore, a symbol declared EXTERN and then defined will be treated as GLOBAL. See section 6.5. * The GLOBAL directive no longer is required to precede the definition of the symbol. * Support private_extern as macho specific extension to the GLOBAL directive. See section 7.8.5. * Updated UD0 encoding to match with the specification * Added the --limit-X command line option to set execution limits. See section 2.1.31. * Updated the Codeview version number to be aligned with MASM. * Added the --keep-all command line option to preserve output files. See section 2.1.32. * Added the --include command line option, an alias to -P (section 2.1.18). * Added the --help command line option as an alias to -h (section 3.1). * Added -W, -D, and -Q suffix aliases for RET instructions so the operand sizes of these instructions can be encoded without using o16, o32 or o64. New upstream version 2.13.03: * Add flags: AES, VAES, VPCLMULQDQ * Add VPCLMULQDQ instruction * elf: Add missing dwarf loc section * documentation updates This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-954=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): nasm-2.14.02-lp152.4.3.1 nasm-debuginfo-2.14.02-lp152.4.3.1 nasm-debugsource-2.14.02-lp152.4.3.1 References: https://www.suse.com/security/cve/CVE-2018-1000667.html https://www.suse.com/security/cve/CVE-2018-10016.html https://www.suse.com/security/cve/CVE-2018-10254.html https://www.suse.com/security/cve/CVE-2018-10316.html https://www.suse.com/security/cve/CVE-2018-16382.html https://www.suse.com/security/cve/CVE-2018-16517.html https://www.suse.com/security/cve/CVE-2018-16999.html https://www.suse.com/security/cve/CVE-2018-19214.html https://www.suse.com/security/cve/CVE-2018-19215.html https://www.suse.com/security/cve/CVE-2018-19216.html https://www.suse.com/security/cve/CVE-2018-8881.html https://www.suse.com/security/cve/CVE-2018-8882.html https://www.suse.com/security/cve/CVE-2018-8883.html https://bugzilla.suse.com/1084631 https://bugzilla.suse.com/1086186 https://bugzilla.suse.com/1086227 https://bugzilla.suse.com/1086228 https://bugzilla.suse.com/1090519 https://bugzilla.suse.com/1090840 https://bugzilla.suse.com/1106878 https://bugzilla.suse.com/1107592 https://bugzilla.suse.com/1107594 https://bugzilla.suse.com/1108404 https://bugzilla.suse.com/1115758 https://bugzilla.suse.com/1115774 https://bugzilla.suse.com/1115795 https://bugzilla.suse.com/1173538

1 0

openSUSE-RU-2020:0951-1: moderate: Recommended update for python-py3c
by maintenance＠opensuse.org 10 Jul '20

10 Jul '20

openSUSE Recommended Update: Recommended update for python-py3c ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0951-1 Rating: moderate References: #1173807 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-py3c fixes the following issues: Update python-py3c to 1.1 boo#1173807: * Fixes the py3.8 builds Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-951=1 Package List: - openSUSE Leap 15.2 (noarch): py3c-devel-1.1-lp152.2.1 python2-py3c-1.1-lp152.2.1 python3-py3c-1.1-lp152.2.1 References: https://bugzilla.suse.com/1173807

1 0

openSUSE-SU-2020:0950-1: important: Security update for opera
by opensuse-security＠opensuse.org 10 Jul '20

10 Jul '20

openSUSE Security Update: Security update for opera ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0950-1 Rating: important References: #1173251 Cross-References: CVE-2020-6509 Affected Products: openSUSE Leap 15.2:NonFree ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for opera fixes the following issues: - Update to version 69.0.3686.49 - CHR-7971 Update chromium on desktop-stable-83-3686 to 83.0.4103.116 (CVE-2020-6509) - DNA-79195 Wrong date on history - DNA-86090 Crash at views::View::ReorderChildView(views::View*, int) - DNA-86122 [Mac] Some popovers have incorrectly themed arrow - DNA-86833 Add hint to tell users that tab content is now searched - DNA-86906 [Search in tabs] No matching results in your open tabs label not displayed for some strings not found. - DNA-86983 Allow to search from the tile - DNA-87029 Search in tabs dropdown should disappear when resizing window - DNA-87051 No autocompletion in the address bar for Speed Dials - DNA-87091 Do not vertically center search-in-tabs dialog - DNA-87113 Crash at content::NavigationRequest::GetRenderFrameHost() - DNA-87114 Double scrollbar in bookmarks popup - DNA-87117 Hide “Provide additional details” button when crash is discarded by Socorro - DNA-87122 Hide provide more information button from infobar when crash is discarded - DNA-87153 The icons cover the inscription on the BABE picture title - DNA-87203 The scroll view changes visible area unexpectedly - DNA-87243 Provide missing translations - DNA-87245 Extend schema and report search events - DNA-87261 Allow to use search and modal at the same time - DNA-87273 Switch to dedicated subdomain - Complete Opera 69.0 changelog at: https://blogs.opera.com/desktop/changelog-for-69/ Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2:NonFree: zypper in -t patch openSUSE-2020-950=1 Package List: - openSUSE Leap 15.2:NonFree (x86_64): opera-69.0.3686.49-lp152.2.9.1 References: https://www.suse.com/security/cve/CVE-2020-6509.html https://bugzilla.suse.com/1173251

1 0

openSUSE-SU-2020:0949-1: important: Security update for opera
by opensuse-security＠opensuse.org 10 Jul '20

10 Jul '20

openSUSE Security Update: Security update for opera ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0949-1 Rating: important References: #1173251 Cross-References: CVE-2020-6509 Affected Products: openSUSE Leap 15.1:NonFree ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for opera fixes the following issues: - Update to version 69.0.3686.49 - CHR-7971 Update chromium on desktop-stable-83-3686 to 83.0.4103.116 (CVE-2020-6509) - DNA-79195 Wrong date on history - DNA-86090 Crash at views::View::ReorderChildView(views::View*, int) - DNA-86122 [Mac] Some popovers have incorrectly themed arrow - DNA-86833 Add hint to tell users that tab content is now searched - DNA-86906 [Search in tabs] No matching results in your open tabs label not displayed for some strings not found. - DNA-86983 Allow to search from the tile - DNA-87029 Search in tabs dropdown should disappear when resizing window - DNA-87051 No autocompletion in the address bar for Speed Dials - DNA-87091 Do not vertically center search-in-tabs dialog - DNA-87113 Crash at content::NavigationRequest::GetRenderFrameHost() - DNA-87114 Double scrollbar in bookmarks popup - DNA-87117 Hide “Provide additional details” button when crash is discarded by Socorro - DNA-87122 Hide provide more information button from infobar when crash is discarded - DNA-87153 The icons cover the inscription on the BABE picture title - DNA-87203 The scroll view changes visible area unexpectedly - DNA-87243 Provide missing translations - DNA-87245 Extend schema and report search events - DNA-87261 Allow to use search and modal at the same time - DNA-87273 Switch to dedicated subdomain - Complete Opera 69.0 changelog at: https://blogs.opera.com/desktop/changelog-for-69/ Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1:NonFree: zypper in -t patch openSUSE-2020-949=1 Package List: - openSUSE Leap 15.1:NonFree (x86_64): opera-69.0.3686.49-lp151.2.21.1 References: https://www.suse.com/security/cve/CVE-2020-6509.html https://bugzilla.suse.com/1173251

1 0

openSUSE-RU-2020:0948-1: moderate: Recommended update for gsoap, kopano, kopano-python-services
by maintenance＠opensuse.org 09 Jul '20

09 Jul '20

openSUSE Recommended Update: Recommended update for gsoap, kopano, kopano-python-services ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0948-1 Rating: moderate References: #1154309 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gsoap, kopano, kopano-python-services fixes the following issues: kopano was updated to release 10.0.5: * Enhancements: * gateway: support loading MAPI folders with slash in their name. * Fixes: * admin: fix stack exhaustion calling AclRightsToString. * admin: fix out-of-bounds access in ConsoleTable. * dagent: change SMTP error code for plugin failure from permanent to transient category. * server: recognize more MariaDB-specific status codes and initiate reconnect if needed. * server: fix a cache pollution with PR_HTML and PR_RTF_COMPRESSED. * dagent: failure to run actions will no longer stop rule processing. * mapi4linux: avoid M4LMAPISession going away while ECMsgStore object(s) still alive. Update to release 10.0.4 * Enhancements: * daemons: service units now run with systemd protections on. * icalmapi: support reading multi-iCal and multi-vCard files. * Fixes: * dagent, spooler: workaround crash during Python GC. * dagent, gateway: avoid stack exhaustion in HTML filter. * gateway: avoid non-atomic replacement of SSL context. * gateway: avoid one crash case for deeply-nested HTML mail. * server: cure a mysql wait phase during shutdown. * server: cure a crash when the SQL server has shut down. * daemons: avoid deadlock during signal handling. * libserver: fix use-after-free and crash on shutdown. * Various null deref warnings from clang --analyze were fixed. * libserver: resolve memory leak of MYSQL objects. Update to release 10.0.3 * Enhancements: * server: new config directive request_log_method and request_log_file. * server: The log_level=0x100000 bit (SOAP) no longer has a meaning; use the request_log_file mechanism instead. Update to release 10.0.2 * dagent: add processing time stats and publish via surveyclient * common: fix a malloc/delete[] mismatch in kc_utf8_to_punyaddr * Respect KOPANO_SOCKET environment variable in all programs * server: support numeric UID/GID for local_admin_users directive * daemons: support numeric UID/GID for run_as_* directives Update to release 10.0.1 * common: avoid computing log messages that will not get shown [KC-1674] * freebusy: fix crash in RecurrenceState::Exception instantiation * client: IDN support [KC-1659] * In config files, fractional values can now be used for sizes ("0.5G"). Update to release 9.0.2 * Enhancements: * storeadm: print entity types in orphan list [KC-718] * client: improve dreaded "gsoap connect: ()" reporting * server: fix dreaded "SSL_accept: (null)" reporting * ECtools: add kopano-vcfimport * Fixes: * client: resolve rogue file descriptor closing [KC-1397, KC-1462, KC-1518, KC-1584, KS-42330, KS-43193, KS-43409, KS-43618, KS-43677, KS-43693, KS-43907, KS-43925, KS-43936] * dagent: resolve crash when appointment has empty organizer [KC-1637] * spooler: regard redirected messages as having recipients [KC-1638] - Drop chown calls from scriptlets [boo#1154309] Update to release 8.7.85 * daemons: support "%xxx"-style interface identifiers in bindspecs (the "server_listen" or similarly-named directives in .cfg files) * client: send fewer logoff calls [KC-1590] * daemons: AF_LOCAL sockets were erroneously owned by root rather than run_as_user [KC-1616] * pyko: avoid circular strong reference from notification to store [KC-1572] * php: add missing successful return value for zif_mapi_vcfstomapi [KC-1487] * client: unbreak translation of newly created store folder names [KC-1607] * dagent: the server_bind_intf option is removed in favor of %xxx * search: put back the old value for limit_results=1000 - Update to release 8.7.84 * server: new installations will use files_v2 by default [KC-567] * icalmapi: vCard 4.0 (RFC 6350) is now emitted * kopano-set-oof has been removed; use `kopano-oof` instead [KC-981] * kopano-localize-folders has been removed; use `kopano-storeadm -Y` instead * admin: the --mr-process option has been added * dbadm: the "populate" action has been added * daemons: the {pop3,imap,etc.}_listen directives can now take an interface specifier similar to ping(8), e.g. "%eth0" * server/ldapplugin: LDAP group membership cache [KC-1588] - Update to release 8.7.83 * libserver: fix "withholding" of properties from clients [KC-1547] * dagent, spooler: threaded more is enabled by default now [KC-1475] * ldapplugin: 22% speedup in retriving the entire user list [KC-1399] * client: enable write-caching for properties on stores and folders; improves e.g. store creation time by 17% [KC-1585] * Dropped Python2 and PHP5 support - Update to new upstream release 8.7.3 * Fixes: * dagent: standard casing for RFC 5322 headers [KF-2100] * daemons: do not fail startup on IPv4-only systems [KC-1400] * Feed HTML through libtidy before using it for the to-plaintext conversion stage [KS-40722] * server: fix crash on shutdown [KF-2179] * server: address a potential crash due to type mismatch [KF-2151] * server: use utf8mb3 with mysql 5.1 [KC-1423] * server: avoid entering truncated tproperties data into the cache [KC-1417] * server: avoid using OpenLDAP-specific filters that 389-ds does not know about [KC-1402] * server: fixed TLS negotiation errors with openSSL 1.1.1 [KC-1439] * spooler: avoid unnecessary QP encoding in header fields [KC-1430] * spooler: fix hang on process termination [KC-1449] * srvadm: do not complain about default_store_locale [KC-1416] * dbadm: some long-running statements can now be run in parallel with the new -j option [KS-42617] * pyko: expand stubbed messages when dumping [KC-1159,KC-1168] * pyko: don't mix str/int busy statuses [KC-1433] * oof: fix erroneous -u parsing [KC-1425] * oof: make --message option set the right property [KC-1435] * server: complete utf8mb4->utf8 fallback for RHEL6 [KC-1423] * inetmapi: modified appointments need to produce a new Message-ID [KC-1458] * dagent: set Bcc/RecipMe flags appropriately [KC-319] * inetmapi: restore FQDN in Message-IDs [KC-1393] * inetmapi: parse fake "From:" header better to hinder proliferation of impersonations [KC-1350] * stats: print "PR_..." instead of proptag numbers [KC-1495] * server: no more unbounded thread number increase [KC-1446] * php: fix crash in zif_mapi_getprops [KC-1507] * Enhancements: * backup: do record outofoffice settings * php-ext: performance measurement log now contains a timestamp, thread identifier, and global monotonic counter. This can be used for estimating the achieved command rate. - Update to 8.7.0 stable git HEAD * dagent: standard casing for RFC 5322 headers [KF-2100] * daemons: do not fail startup on IPv4-only systems [KC-1400] * Feed HTML through libtidy before using it for the to-plaintext conversion stage [KS-40722] * server: fix crash on shutdown [KF-2179] * server: address a potential crash due to type mismatch [KF-2151] * server: use utf8mb3 with mysql 5.1 [KC-1423] * srvadm: do not complain about default_store_locale [KC-1416] * dbadm: some long-running statements can now be run in parallel with the new -j option [KS-42617] * pyko: expand stubbed messages when dumping [KC-1159,KC-1168] - Update to 8.7.0 stable * server: fix disappearing inbox rules [KC-1359] * kopano-dbadm: new action "usmp" and "usmp-charset" * server: no more automatic upgrade to utf8mb4, use `kopano-dbadm usmp` instead [KF-1394] * dagent: the spam_header_name was not matched correctly [KF-1961] * dagent/client/libserver: fix inadvertent AF_LOCAL->SSL redirect [KC-1368] * client: ABEIDs were parsed wrong (and it broke with gcc8) [KC-1386] * php7-ext: cease modifying potentially-immutable PHP variables [KC-1355] - Update to 8.7~beta release (8.6.90) * dagent, gateway, ical: modern socket specification in .cfg with lmtp_listen=, pop3_listen=, imap_listen=, ical_listen=, etc. * dagent: PF_LOCAL socket support for communicating with postfix * dagent: limited support for RFC 6531 (SMTPUTF8) * server: LDAP STARTTLS support for user backend * spooler: new config value log_raw_message=error * daemons: coredumps no longer rely on fs.suid_dumpable * server: support for Unicode supplemental plane (Emojis) * spooler: add copy_delegate_mails=move-to-rep config directive * kopano-ibrule: new utility for MAPI rules * server: experimental "files_v2" attachment storage * kopano-statsd: new daemon that records dagent/server/spooler statistics * This is an abridged list; there are more changes to configuration and behavior; see RELNOTES.txt in the "kopano-common" package for more details. - Update to new snapshot 8.6.7.2 * Fixes: * gateway, spooler: (re-)activate RFC 2047 header generation (Outlook is still unable to read the RFC 2231 headers that are generated normally) [KC-1226] * srvadm: make --purge-softdelete=0 work * Enhancements: * dagent: advertise 8BITMIME/RFC6152 support [KS-41452] * dagent/client: fixed broken umlauts in PR_EC_BODY_FILTERED when input was not UTF-8 [KC-1225] - Update to new upstream release 8.6.6 * ical: handle double quotes in Content-Type header * server: repair broken timing log messages for ldapplugin * php7-ext: cure stack corruption in mapi_vcftomapi * gateway: avoid uncaught exception when client disconnects midway * dagent: avoid always running into K-2383 * server: avoid SSL crash near ERR_clear_error on shutdown - Update to new upstream snapshot 8.6.2.25 * Fixes: * ical: handle double quotes in Content-Type header * Enhancements: * client: now emits warnings about own incomplete PR_RULES_DATA processing * inetmapi: now emits a warning when runtime vmime is too old * server: fewer stat calls to the attachment backend * Changes: * dagent: default for log_timestamp changed to "yes" - Update to new upstream snapshot 8.6.1.99 * Fixes: * Fix crash due to ODR violation * libserver: drop all remains of clientupdatestatus table * gateway: fix crash when new client immediately disconnects * mapi: avoid garbage at end of malformed RTF * Enhancements: * kopano-dbadm: new diagnostics program for offline database modification * kopano-server: allow use of --ignore-da to skip schema update that won't complete * build: support ICU 61 * propmap: expose kopanoHidden LDAP attribute as PR_EC_AB_HIDDEN * Changes: * daemons: disable SSL renegotiation for OpenSSL 1.1+ * server: invalid port strings are now rejected * client: quiesce verbose logon failure messages * boot: set default and UTF-8 locale for services - Update to new upstream release 8.6.1 * Fixes: * backup: ignore error when server cannot find attachments * server: search folders were not loaded on startup * monitor: handle absence of config file * dagent: do not treat -d option like -c was given * server: fix a case where an old kopano-server would refuse to start with a newer database even if --ignore-da was used * server: fix server/client getting slower when named properties are created multiple times [KC-1108] * client: fix data corruption when server returns high named property IDs [KC-1107] * Changes (generally requires admin action): * inetmapi: stop treating empty indexed_headers as "X-*" * dagent: cease indexing X-Headers by default * dagent: turn indexed_headers from a prefix list into an exact-match set * If you need certain e-mail headers copied into named properties, they MUST be explicitly listed _one by one_ in dagent.cfg:indexed_headers now. * Enhancements: * server: reorder SQL log messages so the error is shown first, and do say when the message was truncated Changes in kopano-python-services: - Drop chown calls from scriptlets [boo#1154309] - Update to release 10.0.1 * Sync up with kopanocore-10.0.1. No user visible changes to pytils. * Drop kopano-dagent-pytils:/usr/sbin/kopano-autorespond. This program is already provided by the kopano-dagent package. - Update to release 9.0.2 * Fix broken property getter for public:OnlineMeetingExternalLink * Replace cpickle by pickle * pyko: avoid circular strong reference from notification to store * pyko: add text and onlineMeetingUrl setter to Ocurrence(s) - Update to upstream snapshot 8.7.83 * Split Python services into their own RPM package gsoap was updated to release 2.8.102: * Improved HTTP digest authentication plugin to cover additional HTTP methods. Update to release 2.8.101: * Fix read beyond end-of-buffer in soap_accept * Other unspecified improvements Update to release 2.8.100: * Improved proxy connectivity on the client side to handle bearer authentication. * Improved soapcpp2 handling of the `#module` directive. * Fixed an MTOM flag clearing issue hampering MTOM usability. Update to release 2.8.99: * Improved performance of the soapcpp2 tool. * Improved proxy connectivity on the client side with `soap::proxy_host`, `soap::proxy_port`, and NTLM, to maintain HTTP headers, e.g. `soap::http_content` and `soap::http_extra_header`. * Fixed a bug in HTTP cookie handling when the optional `-DWITH_COOKIES` flag is used. Note that cookie support is disabled by default or has no effect when deploying robust services with the gSOAP Apache modules and ISAPI extensions that handle cookies differently. Update to release 2.8.98: * Updated the WS-Security and WS-Trust APIs that use SAML with higher precision timestamps in microseconds, using the `custom/struct_timeval.h` serializer for `xsd__dateTime`. The WS-Security and WS-Trust updates require compiling and linking with `custom/struct_timeval.c`. * Fixed an issue with soapcpp2 code generation of `wchar_t*` serializers when combined with a custom serializer with base type `wchar_t*`, i.e. when `extern typedef wchar_t* name` is declared. * Fixed an issue with soapcpp2 code generation when an element tag names starts with an underscore and the element is namespace qualified. Update to release 2.8.97: * Fixed wsdl2h processing of schemas with a cyclic schema `<xs:include>` that may cause wsdl2h to hang when schemas have no `targetNamespace` attribute. * Improved wsdl2h code generation of unqualified types and names defined in imported schemas (with `<xs:import>`) when these schemas have no `targetNamespace`. Use wsdl2h option `-z10` or lesser to revert to the code generation behavior of versions prior to 2.8.97. Update to release 2.8.96 * Improved `soap_check_mime_attachments()` and `soap_recv_mime_attachment()` functions and documentation, ensure proper close when MIME/MTOM errors occur. Update to release 2.8.95 * Upgraded smdevp.c to replace deprecated OpenSSL API function. * Updated WS-Security WSSE plugin, documentation, and demo. * Improved soapcpp2 execution speed to generate WSDL and XSD files. Update to release 2.8.94 * Fixed a wsdl2h issue that caused it to omit names for local simpleType restrictions in the generated `enum` types of struct/class members; improved soapcpp2 to avoid `enum` symbol numbering clashes in the generated source code. * Removed unnecessary namespace prefixes from some class/struct members in the source code generated by wsdl2h in a specific case, to prevent XML validation issues. * Added wsdl2h option `-z9` for backward compatibility of 2.8.94 and greater to versions 2.8.93 and lesser, which reverts the namespace change. Update to release 2.8.93 * Fixed a wsdl2h schema import/include issue when a `./` occurs in schemaLocation` and schema import/include dependencies are cyclic, causing wsdl2h to not be able to locate and read schema files. * Removed empty substitutionGroup and duplicate substitutionGroup elements in wsdl2h-generated `SUBSTITUTIONS` sections. Update to release 2.8.92 * Fixed soapcpp2-generated call to `soap_DELETE` for REST DELETE operations. Update to new upstream release 2.8.91 * Correction to fix soapcpp2 2.8.90 `-z#` flag enforcement problem. Update to new upstream release 2.8.89 * Added wsdl2h option `-X` to do not qualify part names in order to disambiguate document/literal wrapped patterns (as the other choice to disambiguate instead of the default qualification with schema namespaces). * Added wsdl2h option `-z8` for backward compatibility with 2.8.74 and earlier: don't qualify part names to disambiguate doc/lit wrapped patterns and revert to the old wrapper class/struct naming used for `xs:anyType` inheritance. Update to new upstream release 2.8.87 * Added `soap::connect_retry` to specify a number of retries at the client side when connecting to a server fails, with exponential backoff of 2^n seconds between retries. Zero by default, meaning no retries. * Added `soap::client_addr_ipv6` to optionally specify a IPv6 or host address to bind to at the client side, when the destination is a IPv6 server. Otherwise uses `soap::client_addr` to bind. Update to new upstream release 2.8.86 * Added `soap::client_addr` string to specify a IPv4 or IPv6 or a host address to bind to before connecting. This can be used at the client side to bind to an address before connecting to a server endpoint, similar to `soap::client_port`. * Fixed wsdl2h compilation issue with C++17. * Fixed a problem with the `SOAP_SSL_DEFAULT` settings parameter used with `soap_ssl_client_context` and `soap_ssl_server_context` that may lead to a weaker setting than specified. Update to new upstream release 2.8.83 * Added wsdl2h optimization options `-Ow2`, `-Ow3`, and `-Ow4` to optimize the generated source code by schema slicing, while retaining all derived extensions of base types. * Added wsdl2h option `-Q` to make `xsd__anySimpleType` equal to `xsd__anyType` to use as the base type for derived types, so that elements of type `xsd:anySimpleType` can be serialized with a derived type, using inheritance in C++ and by using simulated inheritance in C using wsdl2h option `-F`. * Updated wsdl2h options `-p` and `-F` to generate additional wrappers for primitive types that aren't XSD primitive types, such as `SOAP-ENC:base64`. * Improved wsdl2h output for the infrequently-used `SOAP-ENC:Array` type. * Fixed an issue with soapcpp2 option `-A` that resulted in error 13 `SOAP_NO_METHOD`. Update to new upstream release 2.8.81 * Added the ability to specify `nullptr` web service operation arguments, similar to `nullptr` struct and class members. This enables `xs:nillable="true"` elements corresponding to web service operation arguments. * Updated wsdl2h `import schemaLocation` logic to handle relative paths. * Updated DOM API for embedded serializable data types: `SOAP_DOM_ASIS` removes XML namespace bindings (`xmlns`) from the XML output of the embedded data type, which are normally added to ensure namespace prefixes are always valid. `SOAP_DOM_ASIS` requires the DOM to specify the namespace bindings explicitly. Update to new upstream release 2.8.80 * Updated to remove GCC 8.2 warnings. * Improved wsdl2h handling of relative file paths. Update to new upstream release 2.8.79 * Fixed a bug in wsdl2h option `-c` for C source code output, resulting in a missing `*` pointer for `_XML __any` member declaration when declared after the `$ int __size` array size member. The bug may lead to validation errors in extensible types when extra elements are present in the XML payload received. The fix produces the correct `_XML *__any` member declaration. Update to new upstream release 2.8.78 * wsdl2h: WSDL and schema imports of files on relative paths: file name without path or file name with path stating with ../ are considered relative locations with respect to the current WSDL and schema that is importing, otherwise imported files are considered relative to the directory in which wsdl2h is run (the `-I` option can be used to change that location). * wsdl2h: to display warnings for invalid complexType and simpleType extensions/restrictions but generates valid code in such cases by inference, the update also fixes a valid extension case. * Fixed compilation error for soapcpp2 options `-i` and `-j` caused by special case with empty input arguments to service operations. * Added jsoncpp new option `-k`. Update to new upstream release 2.8.75 * Added wsdl2h option `-F` to add transient pointer members to structs to simulate type derivation with structs in C. * Added wsdl2h option `-L` to generate less documentation in interface header files. * Added `WITH_NOEMPTYNAMESPACES` compile-time flag to disable `xmlns=""`, this is intended for backward compatibility with old XML parsers and old gSOAP versions that do not support `xmlns=""` empty default namespaces. * Updated wsdl2h option `-D` to make attributes with fixed values pointer members in structs and classes, not just attributes with default values. * Updated wsdl2h option `-f` to flatten C++ class hierarchy by removing inheritance. This option removes support for type derivation with `xsi:type` in XML. * Updated soapcpp2 to split up the `soap_call_ns__webmethod` functions into new `soap_send_ns__webmethod` and `soap_recv_ns__webmethod` functions called by `soap_call_ns__webmethod`. The new functions can be used for asynchronous messaging. * Updated soapcpp2 option `-j` to call `destroy()` in destructor to deallocate managed heap data. * Updated call to OpenSSL `ERR_remove_state` (deprecated) by `ERR_remove_thread_state`. * Fixed a bug in HTTP cookie handling by the engine. HTTP cookies are disabled by default, but enabled with the `-DWITH_COOKIES` compile-time flag or when using the C/C++ `libgsoapck`/`libgsoapck++` and `libgsoapssl`/`libgsoapssl++` libraries. Update to new upstream release 2.8.74: * Fixed an issue with MIME/MTOM attachment sending when the HTTP-digest plugin is used or when compression is enabled, returning incorrect `SOAP_EOM` error (i.e. not caused by out-of-memory). The problem had been introduced in 2.8.70. Update to new upstream release 2.8.73 * Improved `soap_ssl_accept()` timeout settings to improve the performance of gSOAP stand-alone HTTPS servers. * Renamed `soap_get_http_body()` to `soap_http_get_body()` to avoid name clashes with soapcpp2-generated `soap_get_T` functions. * Renamed `soap_get_form()` to `soap_http_get_form()` to avoid name clashes with soapcpp2-generated `soap_get_T` functions. * Renamed `soap_get_mime_attachment()` to `soap_recv_mime_attachment()` to avoid name clashes with soapcpp2-generated `soap_get_T` functions. * Renamed `soap_get_stats()` to `soap_http_get_stats()` of the httpget plugin to avoid name clashes with soapcpp2-generated `soap_get_T` functions. * Renamed `soap_get_logging_stats()` to `soap_logging_stats()` of the logging plugin to avoid name clashes with soapcpp2-generated `soap_get_T` functions. * Moved `soap_http_get_form()`, `soap_query()`, `soap_query_key()`, and `soap_query_val()` functions from the httpget and httpform plugin APIs to the stdsoap2.c[pp] library API. No project rebuilds should be necessary when using these plugins with this upgrade. Update to new upstream release 2.8.72 * Improved the HTTP GET `http_get` and HTTP POST `http_post` plugins, handling of a HTTP POST request that has an empty body is now supported. * Updated user guide, corrected `soap_rand_uuid` description: string returned is stored in a temporary buffer, not stored in managed memory. * Fixed spurious constant initialization problem for `enum` types in soapcpp2-generated code, the problem was introduced with soapcpp2 2.8.71 C/C++ grammar expansion. * Fixed a CURL plugin issue that prevented PUT and DELETE methods to work properly. Update to new upstream release 2.8.71 * Added TLSv1.3 support with OpenSSL 1.1.1. * Added HTTP PATCH support. * Updated SSL/TLS options for `soap_ssl_client_context` and `soap_ssl_server_context` to allow combinations of `SOAP_TLSv1_0`, `SOAP_TLSv1_1`, `SOAP_TLSv1_2`, `SOAP_TLSv1_3` protocols (v1.3 only available with OpenSSL 1.1.1 and greater), a change from the single TLS protocol flag. * Fixed soapcpp2 code generation issue for single- and multi-dimensional fixed-size arrays. Update to new upstream release 2.8.70 * Updated `typemap.dat` for ONVIF and upgraded `wsdd10.h` (WS-Discovery 1.0 with WS-Addressing 2004/08) to `wsdd5.h` (WS-Discovery 1.0 with WS-Addressing 2005/08). * Fixed a deserialization issue with Qt `QString` used in a wrapper class (as `__item` member), when the wrapper class is used in a container, such as `std::vector`. Update to new upstream relesae 2.8.69 * Improved `xs:redefine` processing, fixing the remaining "circular group reference" warnings. * Improved XML sample message generation. Update to new upstream release 2.8.67 * Changed `typemap.dat` to disable `xsd__duration` custom serializer by default, meaning that `xsd__duration` is serialized as a string by default. * Fixed an issue where the 64-bit integer types `LONG64` and `ULONG64` and their serializers would be downcast to to 32-bit when compiling C code with newer GCC versions, due to `__STDC_VERSION__` no longer being defined by the compiler. This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-948=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): gsoap-debuginfo-2.8.102-bp151.4.3.1 gsoap-debugsource-2.8.102-bp151.4.3.1 gsoap-devel-2.8.102-bp151.4.3.1 gsoap-devel-debuginfo-2.8.102-bp151.4.3.1 libgsoap-2_8_102-2.8.102-bp151.4.3.1 libgsoap-2_8_102-debuginfo-2.8.102-bp151.4.3.1 - openSUSE Backports SLE-15-SP1 (noarch): gsoap-doc-2.8.102-bp151.4.3.1 kopano-bash-completion-10.0.5-bp151.4.3.1 kopano-migration-imap-10.0.5-bp151.4.3.1 - openSUSE Backports SLE-15-SP1 (x86_64): kopano-archiver-10.0.5-bp151.4.3.1 kopano-client-10.0.5-bp151.4.3.1 kopano-common-10.0.5-bp151.4.3.1 kopano-dagent-10.0.5-bp151.4.3.1 kopano-devel-10.0.5-bp151.4.3.1 kopano-gateway-10.0.5-bp151.4.3.1 kopano-ical-10.0.5-bp151.4.3.1 kopano-indexer-10.0.5-bp151.4.3.1 kopano-lang-10.0.5-bp151.4.3.1 kopano-monitor-10.0.5-bp151.4.3.1 kopano-server-10.0.5-bp151.4.3.1 kopano-spooler-10.0.5-bp151.4.3.1 kopano-statsd-10.0.5-bp151.4.3.1 libkcarchiver0-10.0.5-bp151.4.3.1 libkcfreebusy0-10.0.5-bp151.4.3.1 libkcicalmapi0-10.0.5-bp151.4.3.1 libkcindex0-10.0.5-bp151.4.3.1 libkcinetmapi0-10.0.5-bp151.4.3.1 libkcmapi0-10.0.5-bp151.4.3.1 libkcpyplug0-10.0.5-bp151.4.3.1 libkcserver0-10.0.5-bp151.4.3.1 libkcsoap0-10.0.5-bp151.4.3.1 libkcssl0-10.0.5-bp151.4.3.1 libkcsync0-10.0.5-bp151.4.3.1 libkcutil0-10.0.5-bp151.4.3.1 libmapi1-10.0.5-bp151.4.3.1 libvmime-debugsource-0.9.2.96-bp151.4.3.1 libvmime-devel-0.9.2.96-bp151.4.3.1 libvmime-kopano3-0.9.2.96-bp151.4.3.1 libvmime-kopano3-debuginfo-0.9.2.96-bp151.4.3.1 php-mapi-10.0.5-bp151.4.3.1 python3-mapi-10.0.5-bp151.4.3.1 References: https://bugzilla.suse.com/1154309

1 0

openSUSE-RU-2020:0946-1: moderate: Recommended update for google-worksans-fonts
by maintenance＠opensuse.org 08 Jul '20

08 Jul '20

openSUSE Recommended Update: Recommended update for google-worksans-fonts ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0946-1 Rating: moderate References: #1172154 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for google-worksans-fonts fixes the following issues: This update ships google-worksans-fonts 1.6+git145.18037a0. - Pick TTF format fonts back: the desktop needs ttf to render gui program, This feature is necessary for SLE-15:SP2(jsc#SLE-12421, jsc#SLE-12422, jsc#SLE-12893, boo#1172154). Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-946=1 Package List: - openSUSE Leap 15.1 (noarch): google-worksans-fonts-1.6+git145.18037a0-lp151.2.1 References: https://bugzilla.suse.com/1172154

1 0

openSUSE-SU-2020:0947-1: important: Security update for chocolate-doom
by opensuse-security＠opensuse.org 08 Jul '20

08 Jul '20

openSUSE Security Update: Security update for chocolate-doom ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0947-1 Rating: important References: #1173595 Cross-References: CVE-2020-14983 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for chocolate-doom to version 3.0.1 fixes the following issues: - CVE-2020-14983: Fixed a stack-based buffer overflow in the networking code (boo#1173595). This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-947=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): chocolate-doom-3.0.1-bp151.4.3.1 - openSUSE Backports SLE-15-SP1 (noarch): chocolate-doom-bash-completion-3.0.1-bp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2020-14983.html https://bugzilla.suse.com/1173595

1 0

openSUSE-SU-2020:0945-1: moderate: Security update for rust, rust-cbindgen
by opensuse-security＠opensuse.org 07 Jul '20

07 Jul '20

openSUSE Security Update: Security update for rust, rust-cbindgen ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0945-1 Rating: moderate References: #1115645 #1154817 #1173202 Cross-References: CVE-2020-1967 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update for rust, rust-cbindgen fixes the following issues: rust was updated for use by Firefox 76ESR. - Fixed miscompilations with rustc 1.43 that lead to LTO failures (bsc#1173202) Update to version 1.43.1 - Updated openssl-src to 1.1.1g for CVE-2020-1967. - Fixed the stabilization of AVX-512 features. - Fixed `cargo package --list` not working with unpublished dependencies. Update to version 1.43.0 + Language: - Fixed using binary operations with `&{number}` (e.g. `&1.0`) not having the type inferred correctly. - Attributes such as `#[cfg()]` can now be used on `if` expressions. - Syntax only changes: * Allow `type Foo: Ord` syntactically. * Fuse associated and extern items up to defaultness. * Syntactically allow `self` in all `fn` contexts. * Merge `fn` syntax + cleanup item parsing. * `item` macro fragments can be interpolated into `trait`s, `impl`s, and `extern` blocks. For example, you may now write: ```rust macro_rules! mac_trait { ($i:item) => { trait T { $i } } } mac_trait! { fn foo() {} } ``` * These are still rejected *semantically*, so you will likely receive an error but these changes can be seen and parsed by macros and conditional compilation. + Compiler - You can now pass multiple lint flags to rustc to override the previous flags. For example; `rustc -D unused -A unused-variables` denies everything in the `unused` lint group except `unused-variables` which is explicitly allowed. However, passing `rustc -A unused-variables -D unused` denies everything in the `unused` lint group **including** `unused-variables` since the allow flag is specified before the deny flag (and therefore overridden). - rustc will now prefer your system MinGW libraries over its bundled libraries if they are available on `windows-gnu`. - rustc now buffers errors/warnings printed in JSON. Libraries: - `Arc<[T; N]>`, `Box<[T; N]>`, and `Rc<[T; N]>`, now implement `TryFrom<Arc<[T]>>`,`TryFrom<Box<[T]>>`, and `TryFrom<Rc<[T]>>` respectively. **Note** These conversions are only available when `N` is `0..=32`. - You can now use associated constants on floats and integers directly, rather than having to import the module. e.g. You can now write `u32::MAX` or `f32::NAN` with no imports. - `u8::is_ascii` is now `const`. - `String` now implements `AsMut<str>`. - Added the `primitive` module to `std` and `core`. This module reexports Rust's primitive types. This is mainly useful in macros where you want avoid these types being shadowed. - Relaxed some of the trait bounds on `HashMap` and `HashSet`. - `string::FromUtf8Error` now implements `Clone + Eq`. + Stabilized APIs - `Once::is_completed` - `f32::LOG10_2` - `f32::LOG2_10` - `f64::LOG10_2` - `f64::LOG2_10` - `iter::once_with` + Cargo - You can now set config `[profile]`s in your `.cargo/config`, or through your environment. - Cargo will now set `CARGO_BIN_EXE_<name>` pointing to a binary's executable path when running integration tests or benchmarks. `<name>` is the name of your binary as-is e.g. If you wanted the executable path for a binary named `my-program`you would use `env!("CARGO_BIN_EXE_my-program")`. + Misc - Certain checks in the `const_err` lint were deemed unrelated to const evaluation, and have been moved to the `unconditional_panic` and `arithmetic_overflow` lints. + Compatibility Notes - Having trailing syntax in the `assert!` macro is now a hard error. This has been a warning since 1.36.0. - Fixed `Self` not having the correctly inferred type. This incorrectly led to some instances being accepted, and now correctly emits a hard error. Update to version 1.42.0: + Language - You can now use the slice pattern syntax with subslices. - You can now use #[repr(transparent)] on univariant enums. Meaning that you can create an enum that has the exact layout and ABI of the type it contains. - There are some syntax-only changes: * default is syntactically allowed before items in trait definitions. * Items in impls (i.e. consts, types, and fns) may syntactically leave out their bodies in favor of ;. * Bounds on associated types in impls are now syntactically allowed (e.g. type Foo: Ord;). * ... (the C-variadic type) may occur syntactically directly as the type of any function parameter. These are still rejected semantically, so you will likely receive an error but these changes can be seen and parsed by procedural macros and conditional compilation. + Compiler - Added tier 2 support for armv7a-none-eabi. - Added tier 2 support for riscv64gc-unknown-linux-gnu. - Option::{expect,unwrap} and Result::{expect, expect_err, unwrap, unwrap_err} now produce panic messages pointing to the location where they were called, rather than core's internals. Refer to Rust's platform support page for more information on Rust's tiered platform support. + Libraries - iter::Empty<T> now implements Send and Sync for any T. - Pin::{map_unchecked, map_unchecked_mut} no longer require the return type to implement Sized. - io::Cursor now derives PartialEq and Eq. - Layout::new is now const. - Added Standard Library support for riscv64gc-unknown-linux-gnu. + Stabilized APIs - CondVar::wait_while - CondVar::wait_timeout_while - DebugMap::key - DebugMap::value - ManuallyDrop::take - matches! - ptr::slice_from_raw_parts_mut - ptr::slice_from_raw_parts + Cargo - You no longer need to include extern crate proc_macro; to be able to use proc_macro; in the 2018 edition. + Compatibility Notes - Error::description has been deprecated, and its use will now produce a warning. It's recommended to use Display/to_string instead. Update to version 1.41.1: - Always check types of static items - Always check lifetime bounds of `Copy` impls - Fix miscompilation in callers of `Layout::repeat` Update to version 1.41.0: + Language - You can now pass type parameters to foreign items when implementing traits. E.g. You can now write `impl<T> From<Foo> for Vec<T> {}`. - You can now arbitrarily nest receiver types in the `self` position. E.g. you can now write `fn foo(self: Box<Box<Self>>) {}`. Previously only `Self`, `&Self`, `&mut Self`, `Arc<Self>`, `Rc<Self>`, and `Box<Self>` were allowed. - You can now use any valid identifier in a `format_args` macro. Previously identifiers starting with an underscore were not allowed. - Visibility modifiers (e.g. `pub`) are now syntactically allowed on trait items and enum variants. These are still rejected semantically, but can be seen and parsed by procedural macros and conditional compilation. + Compiler - Rustc will now warn if you have unused loop `'label`s. - Removed support for the `i686-unknown-dragonfly` target. - Added tier 3 support\* for the `riscv64gc-unknown-linux-gnu` target. - You can now pass an arguments file passing the `@path` syntax to rustc. Note that the format differs somewhat from what is found in other tooling; please see the documentation for more information. - You can now provide `--extern` flag without a path, indicating that it is available from the search path or specified with an `-L` flag. Refer to Rust's [platform support page][forge-platform-support] for more information on Rust's tiered platform support. + Libraries - The `core::panic` module is now stable. It was already stable through `std`. - `NonZero*` numerics now implement `From<NonZero*>` if it's a smaller integer width. E.g. `NonZeroU16` now implements `From<NonZeroU8>`. - `MaybeUninit<T>` now implements `fmt::Debug`. + Stabilized APIs - `Result::map_or` - `Result::map_or_else` - `std::rc::Weak::weak_count` - `std::rc::Weak::strong_count` - `std::sync::Weak::weak_count` - `std::sync::Weak::strong_count` + Cargo - Cargo will now document all the private items for binary crates by default. - `cargo-install` will now reinstall the package if it detects that it is out of date. - Cargo.lock now uses a more git friendly format that should help to reduce merge conflicts. - You can now override specific dependencies's build settings. E.g. `[profile.dev.package.image] opt-level = 2` sets the `image` crate's optimisation level to `2` for debug builds. You can also use `[profile.<profile>.build-override]` to override build scripts and their dependencies. + Misc - You can now specify `edition` in documentation code blocks to compile the block for that edition. E.g. `edition2018` tells rustdoc that the code sample should be compiled the 2018 edition of Rust. - You can now provide custom themes to rustdoc with `--theme`, and check the current theme with `--check-theme`. - You can use `#[cfg(doc)]` to compile an item when building documentation. + Compatibility Notes - As previously announced 1.41.0 will be the last tier 1 release for 32-bit Apple targets. This means that the source code is still available to build, but the targets are no longer being tested and release binaries for those platforms will no longer be distributed by the Rust project. Please refer to the linked blog post for more information. - Bump version of libssh2 for SLE15; we now need a version with libssh2_userauth_publickey_frommemory(), which appeared in libssh2 1.6.0. Update to version 1.40.0 + Language - You can now use tuple `struct`s and tuple `enum` variant's constructors in `const` contexts. e.g. pub struct Point(i32, i32); const ORIGIN: Point = { let constructor = Point; constructor(0, 0) }; - You can now mark `struct`s, `enum`s, and `enum` variants with the `#[non_exhaustive]` attribute to indicate that there may be variants or fields added in the future. For example this requires adding a wild-card branch (`_ => {}`) to any match statements on a non-exhaustive `enum`. - You can now use function-like procedural macros in `extern` blocks and in type positions. e.g. `type Generated = macro!();` - Function-like and attribute procedural macros can now emit `macro_rules!` items, so you can now have your macros generate macros. - The `meta` pattern matcher in `macro_rules!` now correctly matches the modern attribute syntax. For example `(#[$m:meta])` now matches `#[attr]`, `#[attr{tokens}]`, `#[attr[tokens]]`, and `#[attr(tokens)]`. + Compiler - Added tier 3 support\* for the `thumbv7neon-unknown-linux-musleabihf` target. - Added tier 3 support for the `aarch64-unknown-none-softfloat` target. - Added tier 3 support for the `mips64-unknown-linux-muslabi64`, and `mips64el-unknown-linux-muslabi64` targets. + Libraries - The `is_power_of_two` method on unsigned numeric types is now a `const` function. + Stabilized APIs - BTreeMap::get_key_value - HashMap::get_key_value - Option::as_deref_mut - Option::as_deref - Option::flatten - UdpSocket::peer_addr - f32::to_be_bytes - f32::to_le_bytes - f32::to_ne_bytes - f64::to_be_bytes - f64::to_le_bytes - f64::to_ne_bytes - f32::from_be_bytes - f32::from_le_bytes - f32::from_ne_bytes - f64::from_be_bytes - f64::from_le_bytes - f64::from_ne_bytes - mem::take - slice::repeat - todo! + Cargo - Cargo will now always display warnings, rather than only on fresh builds. - Feature flags (except `--all-features`) passed to a virtual workspace will now produce an error. Previously these flags were ignored. - You can now publish `dev-dependencies` without including a `version`. + Misc - You can now specify the `#[cfg(doctest)]` attribute to include an item only when running documentation tests with `rustdoc`. + Compatibility Notes - As previously announced, any previous NLL warnings in the 2015 edition are now hard errors. - The `include!` macro will now warn if it failed to include the entire file. The `include!` macro unintentionally only includes the first _expression_ in a file, and this can be unintuitive. This will become either a hard error in a future release, or the behavior may be fixed to include all expressions as expected. - Using `#[inline]` on function prototypes and consts now emits a warning under `unused_attribute` lint. Using `#[inline]` anywhere else inside traits or `extern` blocks now correctly emits a hard error. Update to version 1.39.0 + Language - You can now create async functions and blocks with async fn, async move {}, and async {} respectively, and you can now call .await on async expressions. - You can now use certain attributes on function, closure, and function pointer parameters. - You can now take shared references to bind-by-move patterns in the if guards of match arms. + Compiler - Added tier 3 support for the i686-unknown-uefi target. - Added tier 3 support for the sparc64-unknown-openbsd target. - rustc will now trim code snippets in diagnostics to fit in your terminal. - You can now pass --show-output argument to test binaries to print the output of successful tests. + For more details: https://github.com/rust-lang/rust/blob/stable/RELEASES.md#version-1390-2019 -11-07 - Switch to bundled version of libgit2 for now. libgit2-sys seems to expect using the bundled variant, which just seems to point to a snapshot of the master branch and doesn't match any released libgit2 (bsc#1154817). See: https://github.com/rust-lang/rust/issues/63476 and https://github.com/rust-lang/git2-rs/issues/458 for details. Update to version 1.38.0 + Language - The `#[global_allocator]` attribute can now be used in submodules. - The `#[deprecated]` attribute can now be used on macros. + Compiler - Added pipelined compilation support to `rustc`. This will improve compilation times in some cases. + Libraries - `ascii::EscapeDefault` now implements `Clone` and `Display`. - Derive macros for prelude traits (e.g. `Clone`, `Debug`, `Hash`) are now available at the same path as the trait. (e.g. The `Clone` derive macro is available at `std::clone::Clone`). This also makes all built-in macros available in `std`/`core` root. e.g. `std::include_bytes!`. - `str::Chars` now implements `Debug`. - `slice::{concat, connect, join}` now accepts `&[T]` in addition to `&T`. - `*const T` and `*mut T` now implement `marker::Unpin`. - `Arc<[T]>` and `Rc<[T]>` now implement `FromIterator<T>`. - Added euclidean remainder and division operations (`div_euclid`, `rem_euclid`) to all numeric primitives. Additionally `checked`, `overflowing`, and `wrapping` versions are available for all integer primitives. - `thread::AccessError` now implements `Clone`, `Copy`, `Eq`, `Error`, and `PartialEq`. - `iter::{StepBy, Peekable, Take}` now implement `DoubleEndedIterator`. + Stabilized APIs - `<*const T>::cast` - `<*mut T>::cast` - `Duration::as_secs_f32` - `Duration::as_secs_f64` - `Duration::div_f32` - `Duration::div_f64` - `Duration::from_secs_f32` - `Duration::from_secs_f64` - `Duration::mul_f32` - `Duration::mul_f64` - `any::type_name` + Cargo - Added pipelined compilation support to `cargo`. - You can now pass the `--features` option multiple times to enable multiple features. + Misc - `rustc` will now warn about some incorrect uses of `mem::{uninitialized, zeroed}` that are known to cause undefined behaviour. Update to version 1.37.0 + Language - #[must_use] will now warn if the type is contained in a tuple, Box, or an array and unused. - You can now use the `cfg` and `cfg_attr` attributes on generic parameters. - You can now use enum variants through type alias. e.g. You can write the following: ``` type MyOption = Option<u8>; fn increment_or_zero(x: MyOption) -> u8 { match x { MyOption::Some(y) => y + 1, MyOption::None => 0, } } ``` - You can now use `_` as an identifier for consts. e.g. You can write `const _: u32 = 5;`. - You can now use `#[repr(align(X)]` on enums. - The `?` Kleene macro operator is now available in the 2015 edition. + Compiler - You can now enable Profile-Guided Optimization with the `-C profile-generate` and `-C profile-use` flags. For more information on how to use profile guided optimization, please refer to the rustc book. - The `rust-lldb` wrapper script should now work again. + Libraries - `mem::MaybeUninit<T>` is now ABI-compatible with `T`. + Stabilized APIs - BufReader::buffer - BufWriter::buffer - Cell::from_mut - Cell<[T]>::as_slice_of_cells - Cell<slice>::as_slice_of_cells - DoubleEndedIterator::nth_back - Option::xor - Wrapping::reverse_bits - i128::reverse_bits - i16::reverse_bits - i32::reverse_bits - i64::reverse_bits - i8::reverse_bits - isize::reverse_bits - slice::copy_within - u128::reverse_bits - u16::reverse_bits - u32::reverse_bits - u64::reverse_bits - u8::reverse_bits - usize::reverse_bits + Cargo - Cargo.lock files are now included by default when publishing executable crates with executables. - You can now specify `default-run="foo"` in `[package]` to specify the default executable to use for `cargo run`. - cargo-vendor is now provided as a sub-command of cargo + Compatibility Notes - Using `...` for inclusive range patterns will now warn by default. Please transition your code to using the `..=` syntax for inclusive ranges instead. - Using a trait object without the `dyn` will now warn by default. Please transition your code to use `dyn Trait` for trait objects instead. Crab(String), Lobster(String), Person(String), let state = Creature::Crab("Ferris"); if let Creature::Crab(name) | Creature::Person(name) = state { println!("This creature's name is: {}", name); } unsafe { foo() } pub fn new(x: i32, y: i32) -> Self { Self(x, y) } pub fn is_origin(&self) -> bool { match self { Self(0, 0) => true, _ => false, } } Self: PartialOrd<Self> // can write `Self` instead of `List<T>` Nil, Cons(T, Box<Self>) // likewise here fn test(&self) { println!("one"); } //~ ERROR duplicate definitions with name `test` fn test(&self) { println!("two"); } * Basic procedural macros allowing custom `#[derive]`, aka "macros 1.1", are stable. This allows popular code-generating crates like Serde and Diesel to work ergonomically. [RFC 1681]. * [Tuple structs may be empty. Unary and empty tuple structs may be instantiated with curly braces][36868]. Part of [RFC 1506]. * [A number of minor changes to name resolution have been activated][37127]. They add up to more consistent semantics, allowing for future evolution of Rust macros. Specified in [RFC 1560], see its section on ["changes"] for details of what is different. The breaking changes here have been transitioned through the [`legacy_imports`] lint since 1.14, with no known regressions. * [In `macro_rules`, `path` fragments can now be parsed as type parameter bounds][38279] * [`?Sized` can be used in `where` clauses][37791] * [There is now a limit on the size of monomorphized types and it can be modified with the `#![type_size_limit]` crate attribute, similarly to the `#![recursion_limit]` attribute][37789] * [On Windows, the compiler will apply dllimport attributes when linking to extern functions][37973]. Additional attributes and flags can control which library kind is linked and its name. [RFC 1717]. * [Rust-ABI symbols are no longer exported from cdylibs][38117] * [The `--test` flag works with procedural macro crates][38107] * [Fix `extern "aapcs" fn` ABI][37814] * [The `-C no-stack-check` flag is deprecated][37636]. It does nothing. * [The `format!` expander recognizes incorrect `printf` and shell-style formatting directives and suggests the correct format][37613]. * [Only report one error for all unused imports in an import list][37456] * [Avoid unnecessary `mk_ty` calls in `Ty::super_fold_with`][37705] * [Avoid more unnecessary `mk_ty` calls in `Ty::super_fold_with`][37979] * [Don't clone in `UnificationTable::probe`][37848] * [Remove `scope_auxiliary` to cut RSS by 10%][37764] * [Use small vectors in type walker][37760] * [Macro expansion performance was improved][37701] * [Change `HirVec<P<T>>` to `HirVec<T>` in `hir::Expr`][37642] * [Replace FNV with a faster hash function][37229] https://raw.githubusercontent.com/rust-lang/rust/master/RELEASES.md rust-cbindgen is shipped in version 0.14.1. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-945=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): cargo-1.43.1-lp152.3.5.1 clippy-1.43.1-lp152.3.5.1 rls-1.43.1-lp152.3.5.1 rust-1.43.1-lp152.3.5.1 rust-analysis-1.43.1-lp152.3.5.1 rust-doc-1.43.1-lp152.3.5.1 rust-gdb-1.43.1-lp152.3.5.1 rust-std-static-1.43.1-lp152.3.5.1 rustfmt-1.43.1-lp152.3.5.1 - openSUSE Leap 15.2 (noarch): cargo-doc-1.43.1-lp152.3.5.1 rust-src-1.43.1-lp152.3.5.1 - openSUSE Leap 15.2 (x86_64): rust-cbindgen-0.14.1-lp152.2.4.1 References: https://www.suse.com/security/cve/CVE-2020-1967.html https://bugzilla.suse.com/1115645 https://bugzilla.suse.com/1154817 https://bugzilla.suse.com/1173202

1 0

openSUSE-RU-2020:0942-1: moderate: Recommended update for gajim, python-nbxmpp
by maintenance＠opensuse.org 07 Jul '20

07 Jul '20

openSUSE Recommended Update: Recommended update for gajim, python-nbxmpp ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0942-1 Rating: moderate References: #1116161 #1123247 #1159017 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for gajim, python-nbxmpp fixes the following issues: gajim: - Always use the system certificates and remove the provided one, fix build with newer ca-certificates bundle (boo#1159017) - Require python3-nbxmpp greater than 0.6.9 (boo#1123247) - Add Requires for python3-precis-i18n (boo#1116161). - Update to 1.1.3: New: * Add a mobile phone indicator to the chat window * Rework HTTPUpload dialog * Add a "paste as quote" option to the message input Bug fixes: * #8822 Fix memory leak when using spell checker * #9514 Fix jingle filetransfers not working in some circumstances * #9573 Dont leak DNS query when connecting over proxy * #9578 Determine Windows version more reliably * #9622 Fix an error while quitting Gajim * #9633 Fix an error while sending a file * #9637 Restore window size correctly on wayland * #9660 GPG Agent setting is ignored * #9645 Make zeroconf IPV6 compatible * Improve dark theme colors * Fix access to GnuPG keys * Use UUID4 item ids for pubsub posts * Dont send invalid show values * Various smaller improvements - Update to 1.1.2: * #9518 Windows: Pressing "^" yields "^^" * #9522 Windows: Switching keyboard layouts leads to a crash * #9525 Windows/Mac: Links are not clickable in the About dialog * #9535 Jingle Audio: Update codecs * #9537 DiscoveryWindow: Fix bookmarking a group chat * DBus: Correctly raise NewMessage signal * Clicking on tray notifications does not open the chat - Update to 1.1.1: * 8362 DBus: Incorrect unread message count * 9427 Placeholder not cleared if pasting text into message input * 9444 Determine the delay timestamp correctly when using mam:1 * 9453 Fix opening links inside the group chat subject (MacOS/Windows) * 9465 Allow the full range of possible nicknames in group chats * 9067 Gajim crashes when receiving xhtml messages * 9096 Error when clicking on a subscription notification * 9446 Chatstate error in MUC conversation * 9471 Conversation Textview: Error on key press * 9472 Handle presences without from attr correctly * 9473 Error when creating a new group chat * 9491 Identify group chat subject changes correctly * 9496 Error on MUC roster selection change * Determine soundplayer correctly on unix systems * In some circumstances plugins could not be deleted * Show correct contact status on tabs * Dont answer group chat receipt requests * Fix receipts for private messages * Pressing the back button in the Accounts window leads to an error * Better handle not available keyring backends * Dont show incorrect contact on private messages * Join group chat menu is disabled when there are no bookmarks * Error on start chat menu action * Error when opening sign-in/out notification * Copying text does not work with different keyboard layouts - Update to 1.1.0: * Remove support for XEP-0091 * 8968 Windows: Gajim loads DLLs from wrong location * 9322 Error when adding contact * 9357 Acquire sleep inhibtor correctly after sleep * 9385 Ignore invalid bookmarks * 9386 Discovery: Browsing nodes without identity * 9393 Error when parsing invalid timestamps * 9398 Error on jingle file transfer - For complete ChangeLog from 1.0.99 and 1.0.99.1 please see installed ChaneLog file python-nbxmpp: - Update to 0.6.10: * Add support for domain based name in features for GSSAPI * Fix usage of BOSH * Fix Jingle hash namespace - Update to version 0.6.9 (boo#1123247): * Always bind after SM failed Fixes #64 * Dont try and guess system language - Update to version 0.6.8 (changes since 0.6.6): * Raise default TLS version to 1.2. * Remove DIGEST-MD5 from the default auth mechs. * Add STANZA RECEIVED Event (some servers send more than one stanza in one packet). * Add alternative locations to load TLS certs from. * Reset SM counter after receiving <enabled>. * Issue event when SM resume fails. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-942=1 Package List: - openSUSE Leap 15.2 (noarch): gajim-1.1.3-lp152.5.3.1 gajim-lang-1.1.3-lp152.5.3.1 References: https://bugzilla.suse.com/1116161 https://bugzilla.suse.com/1123247 https://bugzilla.suse.com/1159017

1 0

openSUSE-SU-2020:0937-1: moderate: Security update for coturn
by opensuse-security＠opensuse.org 07 Jul '20

07 Jul '20

openSUSE Security Update: Security update for coturn ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0937-1 Rating: moderate References: #1173510 Cross-References: CVE-2020-4067 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for coturn fixes the following issues: Version 4.5.1.3: * Remove reference to SSLv3: gh#coturn/coturn#566 * Ignore MD5 for BoringSSL: gh#coturn/coturn#579 * STUN response buffer not initialized properly; he issue found and reported gh#coturn/coturn#583 by Felix Dörre all credits belongs to him. CVE-2020-4067, boo#1173510 - Let coturn allow binding to ports below 1024 per default Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-937=1 Package List: - openSUSE Leap 15.2 (x86_64): coturn-4.5.1.3-lp152.2.3.1 coturn-debuginfo-4.5.1.3-lp152.2.3.1 coturn-debugsource-4.5.1.3-lp152.2.3.1 coturn-devel-4.5.1.3-lp152.2.3.1 coturn-utils-4.5.1.3-lp152.2.3.1 coturn-utils-debuginfo-4.5.1.3-lp152.2.3.1 References: https://www.suse.com/security/cve/CVE-2020-4067.html https://bugzilla.suse.com/1173510

1 0

openSUSE-RU-2020:0941-1: moderate: Recommended update for python-md2workflow
by maintenance＠opensuse.org 07 Jul '20

07 Jul '20

openSUSE Recommended Update: Recommended update for python-md2workflow ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0941-1 Rating: moderate References: #1173460 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-md2workflow fixes the following issues: - There are 2 fields one is scripted and forbidden for editing. We use explicitly the allowed one. boo#1173460 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-941=1 Package List: - openSUSE Leap 15.2 (noarch): python-md2workflow-common-1.4.18-lp152.2.3.1 python2-md2workflow-1.4.18-lp152.2.3.1 python2-md2workflow-plugins-jira-1.4.18-lp152.2.3.1 python2-md2workflow-plugins-redmine-1.4.18-lp152.2.3.1 python3-md2workflow-1.4.18-lp152.2.3.1 python3-md2workflow-plugins-jira-1.4.18-lp152.2.3.1 python3-md2workflow-plugins-redmine-1.4.18-lp152.2.3.1 References: https://bugzilla.suse.com/1173460

1 0

openSUSE-RU-2020:0943-1: moderate: Recommended update for strawberry
by maintenance＠opensuse.org 07 Jul '20

07 Jul '20

openSUSE Recommended Update: Recommended update for strawberry ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0943-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for strawberry fixes the following issues: strawberry was updated to version 0.6.12: * Bugfixes: + Fixed height of about dialog. * Enhancements: + Only save settings for pages that actually has been changed. + Replaced use of deprecated Qt functionality as of 5.15. + Made scrobbler show error dialog for all errors when show error dialog option is on. + Dont append disc to album titles for Subsonic and Tidal. + Sort folders added from file view. + Changed default collection grouping to album - disc. This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-943=1 Package List: - openSUSE Leap 15.2 (x86_64): strawberry-0.6.12-lp152.2.3.1 strawberry-debuginfo-0.6.12-lp152.2.3.1 strawberry-debugsource-0.6.12-lp152.2.3.1 References:

1 0

openSUSE-SU-2020:0944-1: moderate: Security update for live555
by opensuse-security＠opensuse.org 07 Jul '20

07 Jul '20

openSUSE Security Update: Security update for live555 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0944-1 Rating: moderate References: #1121995 #1124159 #1127341 Cross-References: CVE-2019-7314 CVE-2019-9215 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for live555 fixes the following issues: - CVE-2019-9215: Malformed headers could have lead to invalid memory access in the parseAuthorizationHeader function. (boo#1127341) - CVE-2019-7314: Mishandled termination of an RTSP stream after RTP/RTCP-over-RTSP has been set up could have lead to a Use-After-Free error causing the RTSP server to crash or possibly have unspecified other impact. (boo#1124159) - Update to version 2019.06.28, - Convert to dynamic libraries (boo#1121995): + Use make ilinux-with-shared-libraries: build the dynamic libs instead of the static one. + Use make install instead of a manual file copy script: this also reveals that we missed quite a bit of code to be installed before. + Split out shared library packages according the SLPP. - Use FAT LTO objects in order to provide proper static library. This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-944=1 Package List: - openSUSE Leap 15.2 (x86_64): libBasicUsageEnvironment1-2019.06.28-lp152.3.3.1 libBasicUsageEnvironment1-debuginfo-2019.06.28-lp152.3.3.1 libUsageEnvironment3-2019.06.28-lp152.3.3.1 libUsageEnvironment3-debuginfo-2019.06.28-lp152.3.3.1 libgroupsock8-2019.06.28-lp152.3.3.1 libgroupsock8-debuginfo-2019.06.28-lp152.3.3.1 libliveMedia66-2019.06.28-lp152.3.3.1 libliveMedia66-debuginfo-2019.06.28-lp152.3.3.1 live555-2019.06.28-lp152.3.3.1 live555-debuginfo-2019.06.28-lp152.3.3.1 live555-debugsource-2019.06.28-lp152.3.3.1 live555-devel-2019.06.28-lp152.3.3.1 References: https://www.suse.com/security/cve/CVE-2019-7314.html https://www.suse.com/security/cve/CVE-2019-9215.html https://bugzilla.suse.com/1121995 https://bugzilla.suse.com/1124159 https://bugzilla.suse.com/1127341

1 0

openSUSE-RU-2020:0938-1: moderate: Recommended update for profanity
by maintenance＠opensuse.org 07 Jul '20

07 Jul '20

openSUSE Recommended Update: Recommended update for profanity ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0938-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for profanity fixes the following issues: Update to 0.9.5: * Fix segfault in /theme properties due to uninitialized titlebar.scrollable (#1380) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-938=1 Package List: - openSUSE Leap 15.2 (x86_64): profanity-0.9.5-lp152.2.6.1 profanity-debuginfo-0.9.5-lp152.2.6.1 profanity-debugsource-0.9.5-lp152.2.6.1 profanity-mini-0.9.5-lp152.2.6.1 profanity-mini-debuginfo-0.9.5-lp152.2.6.1 profanity-standard-0.9.5-lp152.2.6.1 profanity-standard-debuginfo-0.9.5-lp152.2.6.1 References:

1 0

openSUSE-SU-2020:0935-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 07 Jul '20

07 Jul '20

openSUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0935-1 Rating: important References: #1058115 #1065729 #1071995 #1085030 #1148868 #1152472 #1152489 #1153274 #1154353 #1154492 #1155518 #1155798 #1156395 #1157169 #1158050 #1158242 #1158265 #1158748 #1158765 #1159781 #1159867 #1160947 #1161495 #1162002 #1162063 #1162400 #1164648 #1164777 #1164780 #1165211 #1165975 #1166985 #1167104 #1167651 #1168230 #1168779 #1168838 #1169021 #1169194 #1169514 #1169681 #1170011 #1170442 #1170774 #1170879 #1170891 #1170895 #1171189 #1171191 #1171219 #1171220 #1171246 #1171417 #1171513 #1171530 #1171662 #1171688 #1171699 #1171739 #1171743 #1171759 #1171828 #1171868 #1171904 #1171915 #1171982 #1171983 #1172017 #1172046 #1172061 #1172062 #1172063 #1172064 #1172065 #1172066 #1172067 #1172068 #1172069 #1172073 #1172086 #1172095 #1172169 #1172170 #1172208 #1172223 #1172342 #1172343 #1172344 #1172365 #1172366 #1172374 #1172391 #1172393 #1172394 #1172453 #1172458 #1172467 #1172484 #1172537 #1172719 #1172739 #1172751 #1172759 #1172775 #1172781 #1172782 #1172783 #1172814 #1172823 #1172841 #1172938 #1172939 #1172940 #1172956 #1172983 #1172984 #1172985 #1172986 #1172987 #1172988 #1172989 #1172990 #1172999 #1173060 #1173068 #1173085 #1173139 #1173206 #1173271 #1173280 #1173428 #1173438 #1173461 Cross-References: CVE-2019-19462 CVE-2019-20810 CVE-2019-20812 CVE-2020-10711 CVE-2020-10732 CVE-2020-10751 CVE-2020-10766 CVE-2020-10767 CVE-2020-10768 CVE-2020-10773 CVE-2020-12656 CVE-2020-12769 CVE-2020-12888 CVE-2020-13143 CVE-2020-13974 CVE-2020-14416 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves 16 vulnerabilities and has 117 fixes is now available. Description: The openSUSE Leap 15.2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-19462: relay_open in kernel/relay.c allowed local users to cause a denial of service (such as relay blockage) by triggering a NULL alloc_percpu result (bnc#1158265). - CVE-2019-20810: go7007_snd_init in drivers/media/usb/go7007/snd-go7007.c did not call snd_card_free for a failure path, which causes a memory leak, aka CID-9453264ef586 (bnc#1172458). - CVE-2019-20812: The prb_calc_retire_blk_tmo() function in net/packet/af_packet.c can result in a denial of service (CPU consumption and soft lockup) in a certain failure case involving TPACKET_V3, aka CID-b43d1f9f7067 (bnc#1172453). - CVE-2020-10711: A NULL pointer dereference flaw was found in the Linux kernel's SELinux subsystem. This flaw occurs while importing the Commercial IP Security Option (CIPSO) protocol's category bitmap into the SELinux extensible bitmap via the' ebitmap_netlbl_import' routine. While processing the CIPSO restricted bitmap tag in the 'cipso_v4_parsetag_rbm' routine, it sets the security attribute to indicate that the category bitmap is present, even if it has not been allocated. This issue leads to a NULL pointer dereference issue while importing the same category bitmap into SELinux. This flaw allowed a remote network user to crash the system kernel, resulting in a denial of service (bnc#1171191). - CVE-2020-10732: A flaw was found in the implementation of Userspace core dumps. This flaw allowed an attacker with a local account to crash a trivial program and exfiltrate private kernel data (bnc#1171220). - CVE-2020-10751: SELinux LSM hook implementation before version 5.7, where it incorrectly assumed that an skb would only contain a single netlink message. The hook would incorrectly only validate the first netlink message in the skb and allow or deny the rest of the messages within the skb with the granted permission without further processing (bnc#1171189). - CVE-2020-10766: Fixed rogue cross-process SSBD shutdown. Linux scheduler logical bug allowed an attacker to turn off the SSBD protection. (bnc#1172781). - CVE-2020-10767: Fixed that Indirect Branch Prediction Barrier is force-disabled when STIBP is unavailable or enhanced IBRS is available. (bnc#1172782). - CVE-2020-10768: Fixed that indirect branch speculation can be enabled after it was force-disabled by the PR_SPEC_FORCE_DISABLE prctl command (bnc#1172783). - CVE-2020-10773: Fixed a kernel stack information leak on s390/s390x. (bnc#1172999). - CVE-2020-12656: Fixed a memory leak in gss_mech_free in the rpcsec_gss_krb5 implementation due to lack of certain domain_release calls (bnc#1171219). - CVE-2020-12769: An issue was discovered in drivers/spi/spi-dw.c allowed attackers to cause a panic via concurrent calls to dw_spi_irq and dw_spi_transfer_one, aka CID-19b61392c5a8 (bnc#1171983). - CVE-2020-12888: The VFIO PCI driver mishandled attempts to access disabled memory space (bnc#1171868). - CVE-2020-13143: gadget_dev_desc_UDC_store in drivers/usb/gadget/configfs.c relied on kstrdup without considering the possibility of an internal '\0' value, which allowed attackers to trigger an out-of-bounds read, aka CID-15753588bcd4 (bnc#1171982). - CVE-2020-13974: tty/vt/keyboard.c had an integer overflow if k_ascii is called several times in a row, aka CID-b86dab054059. (bnc#1172775). - CVE-2020-14416: A race condition in tty->disc_data handling in the slip and slcan line discipline could lead to a use-after-free, aka CID-0ace17d56824. This affects drivers/net/slip/slip.c and drivers/net/can/slcan.c (bnc#1162002). The following non-security bugs were fixed: - ACPICA: Fixes for acpiExec namespace init file (git-fixes). - ACPI: CPPC: Fix reference count leak in acpi_cppc_processor_probe() (git-fixes). - ACPI: GED: add support for _Exx / _Lxx handler methods (git-fixes). - ACPI: GED: use correct trigger type field in _Exx / _Lxx handling (git-fixes). - ACPI: PM: Avoid using power resources if there are none for D0 (git-fixes). - ACPI: sysfs: Fix reference count leak in acpi_sysfs_add_hotplug_profile() (git-fixes). - af_unix: add compat_ioctl support (git-fixes). - agp/intel: Reinforce the barrier after GTT updates (git-fixes). - ALSA: emu10k1: delete an unnecessary condition (git-fixes). - ALSA: es1688: Add the missed snd_card_free() (git-fixes). - ALSA: fireface: fix configuration error for nominal sampling transfer frequency (git-fixes). - ALSA: firewire-lib: fix invalid assignment to union data for directional parameter (git-fixes). - ALSA: hda: Add ElkhartLake HDMI codec vid (git-fixes). - ALSA: hda: add member to store ratio for stripe control (git-fixes). - ALSA: hda: add sienna_cichlid audio asic id for sienna_cichlid up (git-fixes). - ALSA: hda: Fix potential race in unsol event handler (git-fixes). - ALSA: hda/realtek - Add a model for Thinkpad T570 without DAC workaround (bsc#1172017). - ALSA: hda/realtek - add a pintbl quirk for several Lenovo machines (git-fixes). - ALSA: hda/realtek - Add LED class support for micmute LED (git-fixes). - ALSA: hda/realtek - Add more fixup entries for Clevo machines (git-fixes). - ALSA: hda/realtek - Add new codec supported for ALC287 (git-fixes). - ALSA: hda/realtek - Enable micmute LED on and HP system (git-fixes). - ALSA: hda/realtek - Fix silent output on Gigabyte X570 Aorus Xtreme (git-fixes). - ALSA: hda/realtek - Fix unused variable warning w/o CONFIG_LEDS_TRIGGER_AUDIO (git-fixes). - ALSA: hda/realtek - Introduce polarity for micmute LED GPIO (git-fixes). - ALSA: hda/tegra: correct number of SDO lines for Tegra194 (git-fixes). - ALSA: hda/tegra: workaround playback failure on Tegra194 (git-fixes). - ALSA: hwdep: fix a left shifting 1 by 31 UB bug (git-fixes). - ALSA: iec1712: Initialize STDSP24 properly when using the model=staudio option (git-fixes). - ALSA: pcm: disallow linking stream to itself (git-fixes). - ALSA: pcm: fix incorrect hw_base increase (git-fixes). - ALSA: pcm: fix snd_pcm_link() lockdep splat (git-fixes). - ALSA: usb-audio: Add duplex sound support for USB devices using implicit feedback (git-fixes). - ALSA: usb-audio: Add Pioneer DJ DJM-900NXS2 support (git-fixes). - ALSA: usb-audio: Add vendor, product and profile name for HP Thunderbolt Dock (git-fixes). - ALSA: usb-audio: Clean up quirk entries with macros (git-fixes). - ALSA: usb-audio: Fix a limit check in proc_dump_substream_formats() (git-fixes). - ALSA: usb-audio: Fix inconsistent card PM state after resume (git-fixes). - ALSA: usb-audio: fixing upper volume limit for RME Babyface Pro routing crosspoints (git-fixes). - ALSA: usb-audio: Fixing usage of plain int instead of NULL (git-fixes). - ALSA: usb-audio: Fix racy list management in output queue (git-fixes). - ALSA: usb-audio: Improve frames size computation (git-fixes). - ALSA: usb-audio: Manage auto-pm of all bundled interfaces (git-fixes). - ALSA: usb-audio: mixer: volume quirk for ESS Technology Asus USB DAC (git-fixes). - ALSA: usb-audio: Print more information in stream proc files (git-fixes). - ALSA: usb-audio: Quirks for Gigabyte TRX40 Aorus Master onboard audio (git-fixes). - ALSA: usb-audio: Remove async workaround for Scarlett 2nd gen (git-fixes). - ALSA: usb-audio: RME Babyface Pro mixer patch (git-fixes). - ALSA: usb-audio: Use the new macro for HP Dock rename quirks (git-fixes). - amd-xgbe: Use __napi_schedule() in BH context (networking-stable-20_04_17). - arm64: map FDT as RW for early_init_dt_scan() (jsc#SLE-12424). - ARM: oxnas: make ox820_boot_secondary static (git-fixes). - asm-gemeric/tlb: remove stray function declarations (bsc#1156395). - ASoC: fix incomplete error-handling in img_i2s_in_probe (git-fixes). - ASoC: Intel: bytcr_rt5640: Add quirk for Toshiba Encore WT10-A tablet (git-fixes). - ASoC: intel: cht_bsw_max98090_ti: Add all Chromebooks that need pmc_plt_clk_0 quirk (bsc#1171246). - ASoC: intel - fix the card names (git-fixes). - ASoC: max9867: fix volume controls (git-fixes). - ASoC: meson: add missing free_irq() in error path (git-fixes). - ASoC: rt5645: Add platform-data for Asus T101HA (git-fixes). - ASoC: SOF: core: fix error return code in sof_probe_continue() (git-fixes). - ASoC: ux500: mop500: Fix some refcounted resources issues (git-fixes). - ath10k: Remove ath10k_qmi_register_service_notifier() declaration (git-fixes). - ath10k: remove the max_sched_scan_reqs value (git-fixes). - ath10k: Skip handling del_server during driver exit (git-fixes). - ath9k: Fix general protection fault in ath9k_hif_usb_rx_cb (git-fixes). - ath9k: Fix use-after-free Read in ath9k_wmi_ctrl_rx (git-fixes). - ath9k: Fix use-after-free Read in htc_connect_service (git-fixes). - ath9k: Fix use-after-free Write in ath9k_htc_rx_msg (git-fixes). - ath9k_htc: Silence undersized packet warnings (git-fixes). - ath9x: Fix stack-out-of-bounds Write in ath9k_hif_usb_rx_cb (git-fixes). - ax25: fix setsockopt(SO_BINDTODEVICE) (git-fixes). - b43legacy: Fix case where channel status is corrupted (git-fixes). - bfq: Avoid false bfq queue merging (bsc#1171513). - bfq: Fix check detecting whether waker queue should be selected (bsc#1168838). - bfq: Use only idle IO periods for think time calculations (bsc#1171513). - bfq: Use 'ttime' local variable (bsc#1171513). - blk-iocost: Fix error on iocost_ioc_vrate_adj (bsc#1173206). - blk-iocost: fix incorrect vtime comparison in iocg_is_idle() (bsc#1173206). - bluetooth: btmtkuart: Improve exception handling in btmtuart_probe() (git-fixes). - bluetooth: hci_bcm: fix freeing not-requested IRQ (git-fixes). - bnxt_en: Improve TQM ring context memory sizing formulas (jsc#SLE-8371 bsc#1153274). - bpf: Fix map permissions check (bsc#1155518). - bpf: Prevent mmap()'ing read-only maps as writable (bsc#1155518). - bpf: Restrict bpf_probe_read{, str}() only to archs where they work (bsc#1172344). - bpf, sockhash: Synchronize_rcu before free'ing map (git-fixes). - bpf, sockmap: Check update requirements after locking (git-fixes). - bpf: Undo internal BPF_PROBE_MEM in BPF insns dump (bsc#1155518). - brcmfmac: fix wrong location to get firmware feature (git-fixes). - btrfs: fix log context list corruption after rename whiteout error (bsc#1172342). - btrfs: fix partial loss of prealloc extent past i_size after fsync (bsc#1172343). - btrfs: reloc: clear DEAD_RELOC_TREE bit for orphan roots to prevent runaway balance (bsc#1171417 bsc#1160947 bsc#1172366). - btrfs: reloc: fix reloc root leak and NULL pointer dereference (bsc#1171417 bsc#1160947 bsc#1172366). - CDC-ACM: heed quirk also in error handling (git-fixes). - CDC-ACM: heed quirk also in error handling (git-fixes). - ceph: add comments for handle_cap_flush_ack logic (bsc#1172940). - ceph: allow rename operation under different quota realms (bsc#1172988). - ceph: ceph_kick_flushing_caps needs the s_mutex (bsc#1172986). - ceph: convert mdsc->cap_dirty to a per-session list (bsc#1172984 bsc#1167104). - ceph: document what protects i_dirty_item and i_flushing_item (bsc#1172940). - ceph: do not release i_ceph_lock in handle_cap_trunc (bsc#1172940). - ceph: do not return -ESTALE if there's still an open file (bsc#1171915). - ceph: do not take i_ceph_lock in handle_cap_import (bsc#1172940). - ceph: fix potential race in ceph_check_caps (bsc#1172940). - ceph: flush release queue when handling caps for unknown inode (bsc#1172939). - ceph: make sure mdsc->mutex is nested in s->s_mutex to fix dead lock (bsc#1172989). - ceph: normalize 'delta' parameter usage in check_quota_exceeded (bsc#1172987). - ceph: reorganize __send_cap for less spinlock abuse (bsc#1172940). - ceph: request expedited service on session's last cap flush (bsc#1172985 bsc#1167104). - ceph: reset i_requested_max_size if file write is not wanted (bsc#1172983). - ceph: skip checking caps when session reconnecting and releasing reqs (bsc#1172990). - ceph: split up __finish_cap_flush (bsc#1172940). - ceph: throw a warning if we destroy session with mutex still locked (bsc#1172940). - char/random: Add a newline at the end of the file (jsc#SLE-12424). - clk: bcm2835: Fix return type of bcm2835_register_gate (git-fixes). - clk: bcm2835: Remove casting to bcm2835_clk_register (git-fixes). - clk: clk-flexgen: fix clock-critical handling (git-fixes). - clk: mediatek: assign the initial value to clk_init_data of mtk_mux (git-fixes). - clk: meson: meson8b: Do not rely on u-boot to init all GP_PLL registers (git-fixes). - clk: meson: meson8b: Fix the polarity of the RESET_N lines (git-fixes). - clk: meson: meson8b: Fix the vclk_div{1, 2, 4, 6, 12}_en gate bits (git-fixes). - clk: qcom: Add missing msm8998 ufs_unipro_core_clk_src (git-fixes). - clk: renesas: cpg-mssr: Fix STBCR suspend/resume handling (git-fixes). - clk: samsung: Mark top ISP and CAM clocks on Exynos542x as critical (git-fixes). - clk: sprd: return correct type of value for _sprd_pll_recalc_rate (git-fixes). - clk: sunxi: Fix incorrect usage of round_down() (git-fixes). - clk: ti: am33xx: fix RTC clock parent (git-fixes). - clocksource: dw_apb_timer_of: Fix missing clockevent timers (git-fixes). - component: Silence bind error on -EPROBE_DEFER (git-fixes). - config: arm64: enable CONFIG_IOMMU_DEFAULT_PASSTHROUGH References: bsc#1172739 - coredump: fix crash when umh is disabled (git-fixes). - coredump: fix null pointer dereference on coredump (git-fixes). - crypto: algapi - Avoid spurious modprobe on LOADED (git-fixes). - crypto: algboss - do not wait during notifier callback (git-fixes). - crypto: cavium/nitrox - Fix 'nitrox_get_first_device()' when ndevlist is fully iterated (git-fixes). - crypto: ccp -- do not "select" CONFIG_DMADEVICES (git-fixes). - crypto: chelsio/chtls: properly set tp->lsndtime (git-fixes). - crypto: drbg - fix error return code in drbg_alloc_state() (git-fixes). - crypto: stm32/crc32 - fix ext4 chksum BUG_ON() (git-fixes). - crypto: stm32/crc32 - fix multi-instance (git-fixes). - crypto: stm32/crc32 - fix run-time self test issue (git-fixes). - cxgb4: fix adapter crash due to wrong MC size (networking-stable-20_04_27). - cxgb4: fix large delays in PTP synchronization (networking-stable-20_04_27). - Delete patches.suse/seltests-powerpc-Add-a-selftest-for-memcpy_mcsafe.patch (bsc#1171699). - dma-coherent: fix integer overflow in the reserved-memory dma allocation (git-fixes). - dma-debug: fix displaying of dma allocation type (git-fixes). - dma-direct: fix data truncation in dma_direct_get_required_mask() (git-fixes). - dmaengine: dmatest: Fix process hang when reading 'wait' parameter (git-fixes). - dmaengine: dmatest: Restore default for channel (git-fixes). - dmaengine: mmp_tdma: Do not ignore slave config validation errors (git-fixes). - dmaengine: mmp_tdma: Reset channel error on release (git-fixes). - dmaengine: owl: Use correct lock in owl_dma_get_pchan() (git-fixes). - dmaengine: pch_dma.c: Avoid data race between probe and irq handler (git-fixes). - dmaengine: tegra210-adma: Fix an error handling path in 'tegra_adma_probe()' (git-fixes). - dm verity fec: fix hash block number in verity_fec_decode (git fixes (block drivers)). - dm writecache: fix data corruption when reloading the target (git fixes (block drivers)). - drivers/net/ibmvnic: Update VNIC protocol version reporting (bsc#1065729). - drivers: phy: sr-usb: do not use internal fsm for USB2 phy init (git-fixes). - drivers: soc: ti: knav_qmss_queue: Make knav_gp_range_ops static (git-fixes). - drm/amd/display: add basic atomic check for cursor plane (git-fixes). - drm/amd/display: drop cursor position check in atomic test (git-fixes). - drm/amd/display: Prevent dpcd reads with passive dongles (git-fixes). - drm/amdgpu: force fbdev into vram (bsc#1152472) * context changes - drm/amdgpu: invalidate L2 before SDMA IBs (v2) (git-fixes). - drm/amdgpu: simplify padding calculations (v2) (git-fixes). - drm/amd/powerplay: avoid using pm_en before it is initialized revised (git-fixes). - drm/amd/powerplay: perform PG ungate prior to CG ungate (git-fixes). - drm/dp_mst: Increase ACT retry timeout to 3s (bsc#1152472) * context changes - drm/dp_mst: Reformat drm_dp_check_act_status() a bit (git-fixes). - drm/edid: Add Oculus Rift S to non-desktop list (git-fixes). - drm: encoder_slave: fix refcouting error for modules (git-fixes). - drm/etnaviv: fix perfmon domain interation (git-fixes). - drm/etnaviv: rework perfmon query infrastructure (git-fixes). - drm/i915: Do not enable WaIncreaseLatencyIPCEnabled when IPC is (bsc#1152489) - drm/i915: Do not enable WaIncreaseLatencyIPCEnabled when IPC is disabled (git-fixes). - drm/i915: extend audio CDCLK>=2*BCLK constraint to more platforms (git-fixes). - drm/i915: Extend WaDisableDARBFClkGating to icl,ehl,tgl (bsc#1152489) - drm/i915: fix port checks for MST support on gen >= 11 (git-fixes). - drm/i915/gem: Avoid iterating an empty list (git-fixes). - drm/i915/gvt: Fix kernel oops for 3-level ppgtt guest (bsc#1152489) - drm/i915/gvt: Fix kernel oops for 3-level ppgtt guest (git-fixes). - drm/i915/gvt: Init DPLL/DDI vreg for virtual display instead of (bsc#1152489) - drm/i915/gvt: Init DPLL/DDI vreg for virtual display instead of inheritance (git-fixes). - drm/i915: HDCP: fix Ri prime check done during link check (bsc#1152489) * context changes - drm/i915: HDCP: fix Ri prime check done during link check (git-fixes). - drm/i915: Limit audio CDCLK>=2*BCLK constraint back to GLK only (git-fixes). - drm/i915: Propagate error from completed fences (git-fixes). - drm/i915: Whitelist context-local timestamp in the gen9 cmdparser (git-fixes). - drm/i915: work around false-positive maybe-uninitialized warning (git-fixes). - drm/mcde: dsi: Fix return value check in mcde_dsi_bind() (git-fixes). - drm/qxl: lost qxl_bo_kunmap_atomic_page in qxl_image_init_helper() (git-fixes). - drm/sun4i: hdmi ddc clk: Fix size of m divider (git-fixes). - drm/vkms: Hold gem object while still in-use (git-fixes). - dwc3: Remove check for HWO flag in dwc3_gadget_ep_reclaim_trb_sg() (git-fixes). - e1000e: Disable TSO for buffer overrun workaround (git-fixes). - e1000e: Do not wake up the system via WOL if device wakeup is disabled (git-fixes). - EDAC/amd64: Add PCI device IDs for family 17h, model 70h (bsc#1165975). - EDAC/ghes: Setup DIMM label from DMI and use it in error reports (bsc#1168779). - EDAC/skx: Use the mcmtr register to retrieve close_pg/bank_xor_enable (bsc#1152489). - EDAC/synopsys: Do not dump uninitialized pinf->col (bsc#1152489). - efi/efivars: Add missing kobject_put() in sysfs entry creation error path (git-fixes). - efi/random: Treat EFI_RNG_PROTOCOL output as bootloader randomness (jsc#SLE-12424). - efi: READ_ONCE rng seed size before munmap (jsc#SLE-12424). - efi/tpm: Verify event log header before parsing (bsc#1173461). - eventpoll: fix missing wakeup for ovflist in ep_poll_callback (bsc#1159867). - evm: Check also if *tfm is an error pointer in init_desc() (git-fixes). - evm: Fix a small race in init_desc() (git-fixes). - evm: Fix possible memory leak in evm_calc_hmac_or_hash() (git-fixes). - evm: Fix RCU list related warnings (git-fixes). - extcon: adc-jack: Fix an error handling path in 'adc_jack_probe()' (git-fixes). - fanotify: fix ignore mask logic for events on child and on dir (bsc#1172719). - fdt: add support for rng-seed (jsc#SLE-12424). - fdt: Update CRC check for rng-seed (jsc#SLE-12424). - firmware: imx: scu: Fix corruption of header (git-fixes). - firmware: imx: scu: Fix possible memory leak in imx_scu_probe() (git-fixes). - firmware: imx-scu: Support one TX and one RX (git-fixes). - firmware: imx: warn on unexpected RX (git-fixes). - firmware: qcom_scm: fix bogous abuse of dma-direct internals (git-fixes). - firmware: xilinx: Fix an error handling path in 'zynqmp_firmware_probe()' (git-fixes). - Fix a regression of AF_ALG crypto interface hang with aes_s390 (bsc#1167651) - fpga: dfl: afu: Corrected error handling levels (git-fixes). - fs: Do not check if there is a fsnotify watcher on pseudo inodes (bsc#1158765). - fsnotify: Rearrange fast path to minimise overhead when there is no watcher (bsc#1158765). - genetlink: clean up family attributes allocations (git-fixes). - genetlink: fix memory leaks in genl_family_rcv_msg_dumpit() (bsc#1154353). - gpio: bcm-kona: Fix return value of bcm_kona_gpio_probe() (git-fixes). - gpio: dwapb: Append MODULE_ALIAS for platform driver (git-fixes). - gpio: dwapb: Call acpi_gpiochip_free_interrupts() on GPIO chip de-registration (git-fixes). - gpio: exar: Fix bad handling for ida_simple_get error path (git-fixes). - gpiolib: Document that GPIO line names are not globally unique (git-fixes). - gpio: pca953x: Fix pca953x_gpio_set_config (git-fixes). - gpio: pxa: Fix return value of pxa_gpio_probe() (git-fixes). - gpio: tegra: mask GPIO IRQs during IRQ shutdown (git-fixes). - gpu/drm: Ingenic: Fix opaque pointer casted to wrong type (git-fixes). - habanalabs: Align protection bits configuration of all TPCs (git-fixes). - HID: alps: Add AUI1657 device ID (git-fixes). - HID: alps: ALPS_1657 is too specific; use U1_UNICORN_LEGACY instead (git-fixes). - HID: i2c-hid: add Schneider SCL142ALM to descriptor override (git-fixes). - HID: i2c-hid: reset Synaptics SYNA2393 on resume (git-fixes). - HID: intel-ish-hid: avoid bogus uninitialized-variable warning (git-fixes). - HID: multitouch: add eGalaxTouch P80H84 support (git-fixes). - HID: multitouch: enable multi-input as a quirk for some devices (git-fixes). - HID: quirks: Add HID_QUIRK_NO_INIT_REPORTS quirk for Dell K12A keyboard-dock (git-fixes). - HID: sony: Fix for broken buttons on DS3 USB dongles (git-fixes). - hsr: check protocol version in hsr_newlink() (networking-stable-20_04_17). - i2c: acpi: put device when verifying client fails (git-fixes). - i2c: altera: Fix race between xfer_msg and isr thread (git-fixes). - i2c: designware-pci: Add support for Elkhart Lake PSE I2C (jsc#SLE-12734). - i2c: designware-pci: Fix BUG_ON during device removal (jsc#SLE-12734). - i2c: designware-pci: Switch over to MSI interrupts (jsc#SLE-12734). - i2c: dev: Fix the race between the release of i2c_dev and cdev (git-fixes). - i2c: fix missing pm_runtime_put_sync in i2c_device_probe (git-fixes). - i2c: mux: demux-pinctrl: Fix an error handling path in 'i2c_demux_pinctrl_probe()' (git-fixes). - ibmveth: Fix max MTU limit (bsc#1173428 ltc#186397). - ibmvnic: continue to init in CRQ reset returns H_CLOSED (bsc#1173280 ltc#185369). - ibmvnic: Flush existing work items before device removal (bsc#1065729). - ibmvnic: Harden device login requests (bsc#1170011 ltc#183538). - ice: Fix error return code in ice_add_prof() (jsc#SLE-7926). - ice: Fix inability to set channels when down (jsc#SLE-7926). - ieee80211: Fix incorrect mask for default PE duration (git-fixes). - iio: adc: stm32-adc: fix device used to request dma (git-fixes). - iio: adc: stm32-adc: Use dma_request_chan() instead dma_request_slave_channel() (git-fixes). - iio: adc: stm32-dfsdm: fix device used to request dma (git-fixes). - iio: adc: stm32-dfsdm: Use dma_request_chan() instead dma_request_slave_channel() (git-fixes). - iio: adc: ti-ads8344: Fix channel selection (git-fixes). - iio: buffer: Do not allow buffers without any channels enabled to be activated (git-fixes). - iio:chemical:pms7003: Fix timestamp alignment and prevent data leak (git-fixes). - iio:chemical:sps30: Fix timestamp alignment (git-fixes). - iio: dac: vf610: Fix an error handling path in 'vf610_dac_probe()' (git-fixes). - iio: pressure: bmp280: Tolerate IRQ before registering (git-fixes). - iio: sca3000: Remove an erroneous 'get_device()' (git-fixes). - iio: vcnl4000: Fix i2c swapped word reading (git-fixes). - ima: Call ima_calc_boot_aggregate() in ima_eventdigest_init() (bsc#1172223). - ima: Directly assign the ima_default_policy pointer to ima_rules (bsc#1172223) - ima: Directly free *entry in ima_alloc_init_template() if digests is NULL (bsc#1172223). - ima: Remove __init annotation from ima_pcrread() (git-fixes). - include/asm-generic/topology.h: guard cpumask_of_node() macro argument (bsc#1148868). - Input: dlink-dir685-touchkeys - fix a typo in driver name (git-fixes). - Input: edt-ft5x06 - fix get_default register write access (git-fixes). - Input: evdev - call input_flush_device() on release(), not flush() (git-fixes). - Input: i8042 - add ThinkPad S230u to i8042 reset list (git-fixes). - Input: mms114 - fix handling of mms345l (git-fixes). - Input: synaptics - add a second working PNP_ID for Lenovo T470s (git-fixes). - Input: synaptics-rmi4 - fix error return code in rmi_driver_probe() (git-fixes). - Input: synaptics-rmi4 - really fix attn_data use-after-free (git-fixes). - Input: usbtouchscreen - add support for BonXeon TP (git-fixes). - Input: xpad - add custom init packet for Xbox One S controllers (git-fixes). - iocost: check active_list of all the ancestors in iocg_activate() (bsc#1173206). - iocost: do not let vrate run wild while there's no saturation signal (bsc1173206). - iocost: over-budget forced IOs should schedule async delay (bsc#1173206). - iommu/amd: Call domain_flush_complete() in update_domain() (bsc#1172061). - iommu/amd: Do not flush Device Table in iommu_map_page() (bsc#1172062). - iommu/amd: Do not loop forever when trying to increase address space (bsc#1172063). - iommu/amd: Fix legacy interrupt remapping for x2APIC-enabled system (bsc#1172393). - iommu/amd: Fix over-read of ACPI UID from IVRS table (bsc#1172064). - iommu/amd: Fix race in increase_address_space()/fetch_pte() (bsc#1172065). - iommu/amd: Update Device Table in increase_address_space() (bsc#1172066). - iommu: Fix reference count leak in iommu_group_alloc (bsc#1172394). - iommu/qcom: Fix local_base status check (bsc#1172067). - iommu/virtio: Reverse arguments to list_add (bsc#1172068). - ipv4: Update fib_select_default to handle nexthop objects (networking-stable-20_04_27). - ipv6: fix IPV6_ADDRFORM operation logic (bsc#1171662). - ipvs: Improve robustness to the ipvs sysctl (git-fixes). - irqchip/al-fic: Add support for irq retrigger (jsc#SLE-10505). - irqchip/ti-sci-inta: Fix processing of masked irqs (git-fixes). - irqchip/versatile-fpga: Apply clear-mask earlier (git-fixes). - irqchip/versatile-fpga: Handle chained IRQs properly (git-fixes). - iwlwifi: avoid debug max amsdu config overwriting itself (git-fixes). - iwlwifi: mvm: limit maximum queue appropriately (git-fixes). - iwlwifi: pcie: handle QuZ configs with killer NICs as well (bsc#1172374). - jbd2: fix data races at struct journal_head (bsc#1173438). - kabi: ppc64le: prevent struct dma_map_ops to become defined (jsc#SLE-12424). - kabi/severities: Ingnore get_dev_data() The function is internal to the AMD IOMMU driver and must not be called by any third party. - kABI workaround for struct hdac_bus changes (git-fixes). - ktest: Add timeout for ssh sync testing (git-fixes). - KVM: Check validity of resolved slot when searching memslots (bsc#1172069). - KVM: x86/mmu: Set mmio_value to '0' if reserved #PF can't be generated (bsc#1171904). - KVM: x86: only do L1TF workaround on affected processors (bsc#1171904). - l2tp: Allow management of tunnels and session in user namespace (networking-stable-20_04_17). - libbpf: Fix perf_buffer__free() API for sparse allocs (bsc#1155518). - libceph: ignore pool overlay and cache logic on redirects (bsc#1172938). - lib: devres: add a helper function for ioremap_uc (git-fixes). - libertas_tf: avoid a null dereference in pointer priv (git-fixes). - lib/lzo: fix ambiguous encoding bug in lzo-rle (git-fixes). - libnvdimm/btt: fix variable 'rc' set but not used (bsc#1162400). - libnvdimm: cover up nd_pfn_sb changes (bsc#1171759). - libnvdimm: cover up nd_region changes (bsc#1162400). - libnvdimm/dax: Pick the right alignment default when creating dax devices (bsc#1171759). - libnvdimm/label: Remove the dpa align check (bsc#1171759). - libnvdimm/namespace: Enforce memremap_compat_align() (bsc#1162400). - libnvdimm/namsepace: Do not set claim_class on error (bsc#1162400). - libnvdimm/of_pmem: Provide a unique name for bus provider (bsc#1171739). - libnvdimm: Out of bounds read in __nd_ioctl() (bsc#1065729). - libnvdimm/pfn_dev: Add a build check to make sure we notice when struct page size change (bsc#1171743). - libnvdimm/pfn_dev: Add page size and struct page size to pfn superblock (bsc#1171759). - libnvdimm/pfn: Prevent raw mode fallback if pfn-infoblock valid (bsc#1171743). - libnvdimm/pmem: Advance namespace seed for specific probe errors (bsc#1171743). - libnvdimm/region: Fix build error (bsc#1162400). - libnvdimm/region: Introduce an 'align' attribute (bsc#1162400). - libnvdimm/region: Introduce NDD_LABELING (bsc#1162400). - libnvdimm/region: Rewrite _probe_success() to _advance_seeds() (bsc#1171743). - libnvdimm: Use PAGE_SIZE instead of SZ_4K for align check (bsc#1171759). - lib: Uplevel the pmem "region" ida to a global allocator (bc#1162400). - list: Add hlist_unhashed_lockless() (bsc#1173438). - livepatch: Apply vmlinux-specific KLP relocations early (bsc#1071995). - livepatch: Disallow vmlinux.ko (bsc#1071995). - livepatch: Make klp_apply_object_relocs static (bsc#1071995). - livepatch: Prevent module-specific KLP rela sections from referencing vmlinux symbols (bsc#1071995). - livepatch: Remove .klp.arch (bsc#1071995). - locktorture: Allow CPU-hotplug to be disabled via --bootargs (bsc#1173068). - lpfc_debugfs: get rid of pointless access_ok() (bsc#1171530). - lpfc: fix axchg pointer reference after free and double frees (bsc#1171530). - lpfc: Fix pointer checks and comments in LS receive refactoring (bsc#1171530). - lpfc: Fix return value in __lpfc_nvme_ls_abort (bsc#1171530). - lpfc: Synchronize NVME transport and lpfc driver devloss_tmo (bcs#1173060). - mac80211: mesh: fix discovery timer re-arming issue / crash (git-fixes). - mailbox: zynqmp-ipi: Fix NULL vs IS_ERR() check in zynqmp_ipi_mbox_probe() (git-fixes). - Make the "Reducing compressed framebufer size" message be DRM_INFO_ONCE() (git-fixes). - mdraid: fix read/write bytes accounting (bsc#1172537). - media: cedrus: Program output format during each run (git-fixes). - media: dvb: return -EREMOTEIO on i2c transfer failure (git-fixes). - media: platform: fcp: Set appropriate DMA parameters (git-fixes). - media: Revert "staging: imgu: Address a compiler warning on alignment" (git-fixes). - media: staging: ipu3: Fix stale list entries on parameter queue failure (git-fixes). - media: staging: ipu3-imgu: Move alignment attribute to field (git-fixes). - mei: release me_cl object reference (git-fixes). - mfd: intel-lpss: Add Intel Tiger Lake PCI IDs (jsc#SLE-12737). - mfd: intel-lpss: Use devm_ioremap_uc for MMIO (git-fixes). - mfd: stmfx: Fix stmfx_irq_init error path (git-fixes). - mfd: stmfx: Reset chip on resume as supply was disabled (git-fixes). - misc: fastrpc: fix potential fastrpc_invoke_ctx leak (git-fixes). - misc: rtsx: Add short delay after exit from ASPM (git-fixes). - mlxsw: Fix some IS_ERR() vs NULL bugs (networking-stable-20_04_27). - mm: adjust vm_committed_as_batch according to vm overcommit policy (bnc#1173271). - mmc: block: Fix use-after-free issue for rpmb (git-fixes). - mmc: core: Use DEFINE_DEBUGFS_ATTRIBUTE instead of DEFINE_SIMPLE_ATTRIBUTE (git-fixes). - mmc: fix compilation of user API (git-fixes). - mmc: meson-mx-sdio: trigger a soft reset after a timeout or CRC error (git-fixes). - mmc: mmci_sdmmc: fix DMA API warning overlapping mappings (git-fixes). - mmc: sdhci-esdhc-imx: fix the mask for tuning start point (git-fixes). - mmc: sdhci-msm: Clear tuning done flag while hs400 tuning (git-fixes). - mmc: sdio: Fix potential NULL pointer error in mmc_sdio_init_card() (git-fixes). - mmc: sdio: Fix several potential memory leaks in mmc_sdio_init_card() (git-fixes). - mmc: tmio: Further fixup runtime PM management at remove (git-fixes). - mmc: uniphier-sd: call devm_request_irq() after tmio_mmc_host_probe() (git-fixes). - mm: do not prepare anon_vma if vma has VM_WIPEONFORK (bsc#1169681). - mm: memcontrol: fix memory.low proportional distribution (bsc#1168230). - mm/memremap: drop unused SECTION_SIZE and SECTION_MASK (bsc#1162400 bsc#1170895 ltc#184375 ltc#185686). - mm/memremap_pages: Introduce memremap_compat_align() (bsc#1162400). - mm/memremap_pages: Kill unused __devm_memremap_pages() (bsc#1162400). - mm/util.c: make vm_memory_committed() more accurate (bnc#1173271). - mt76: mt76x02u: Add support for newer versions of the XBox One wifi adapter (git-fixes). - mtd: Fix mtd not registered due to nvmem name collision (git-fixes). - mtd: rawnand: brcmnand: correctly verify erased pages (git-fixes). - mtd: rawnand: brcmnand: fix CS0 layout (git-fixes). - mtd: rawnand: brcmnand: fix hamming oob layout (git-fixes). - mtd: rawnand: diskonchip: Fix the probe error path (git-fixes). - mtd: rawnand: Fix nand_gpio_waitrdy() (git-fixes). - mtd: rawnand: ingenic: Fix the probe error path (git-fixes). - mtd: rawnand: marvell: Fix probe error path (git-fixes). - mtd: rawnand: marvell: Fix the condition on a return code (git-fixes). - mtd: rawnand: marvell: Use nand_cleanup() when the device is not yet registered (git-fixes). - mtd: rawnand: mtk: Fix the probe error path (git-fixes). - mtd: rawnand: onfi: Fix redundancy detection check (git-fixes). - mtd: rawnand: orion: Fix the probe error path (git-fixes). - mtd: rawnand: oxnas: Keep track of registered devices (git-fixes). - mtd: rawnand: oxnas: Release all devices in the _remove() path (git-fixes). - mtd: rawnand: pasemi: Fix the probe error path (git-fixes). - mtd: rawnand: plat_nand: Fix the probe error path (git-fixes). - mtd: rawnand: sharpsl: Fix the probe error path (git-fixes). - mtd: rawnand: socrates: Fix the probe error path (git-fixes). - mtd: rawnand: sunxi: Fix the probe error path (git-fixes). - mtd: rawnand: timings: Fix default tR_max and tCCS_min timings (git-fixes). - mtd: rawnand: tmio: Fix the probe error path (git-fixes). - mtd: rawnand: xway: Fix the probe error path (git-fixes). - mtd: spinand: Propagate ECC information to the MTD structure (git-fixes). - mtd: spi-nor: intel-spi: Add support for Intel Tiger Lake SPI serial flash (jsc#SLE-12737). - mwifiex: avoid -Wstringop-overflow warning (git-fixes). - mwifiex: Fix memory corruption in dump_station (git-fixes). - net: bcmgenet: correct per TX/RX ring statistics (networking-stable-20_04_27). - net: dsa: b53: b53_arl_rw_op() needs to select IVL or SVL (networking-stable-20_04_27). - net: dsa: b53: Fix ARL register definitions (networking-stable-20_04_27). - net: dsa: b53: Lookup VID in ARL searches when VLAN is enabled (networking-stable-20_04_27). - net: dsa: b53: Rework ARL bin logic (networking-stable-20_04_27). - net: dsa: declare lockless TX feature for slave ports (bsc#1154353). - net: dsa: mt7530: fix tagged frames pass-through in VLAN-unaware mode (networking-stable-20_04_17). - net: ena: xdp: update napi budget for DROP and ABORTED (bsc#1154492). - net: ena: xdp: XDP_TX: fix memory leak (bsc#1154492). - netfilter: connlabels: prefer static lock initialiser (git-fixes). - netfilter: nf_queue: enqueue skbs with NULL dst (git-fixes). - netfilter: nf_tables_offload: return EOPNOTSUPP if rule specifies no actions (git-fixes). - netfilter: nft_tproxy: Fix port selector on Big Endian (git-fixes). - netfilter: nft_tunnel: add the missing ERSPAN_VERSION nla_policy (git-fixes). - netfilter: not mark a spinlock as __read_mostly (git-fixes). - net: ipv4: devinet: Fix crash when add/del multicast IP with autojoin (networking-stable-20_04_17). - net: ipv6: do not consider routes via gateways for anycast address check (networking-stable-20_04_17). - net/mlx4_en: avoid indirect call in TX completion (networking-stable-20_04_27). - net/mlx5e: Add missing release firmware call (networking-stable-20_04_17). - net/mlx5e: Fix pfnum in devlink port attribute (networking-stable-20_04_17). - net/mlx5e: Fix stats update for matchall classifier (jsc#SLE-8464). - net/mlx5e: replace EINVAL in mlx5e_flower_parse_meta() (jsc#SLE-8464). - net/mlx5: Fix cleaning unmanaged flow tables (jsc#SLE-8464). - net/mlx5: Fix crash upon suspend/resume (bsc#1172365). - net/mlx5: Fix frequent ioread PCI access during recovery (networking-stable-20_04_17). - net: netrom: Fix potential nr_neigh refcnt leak in nr_add_node (networking-stable-20_04_27). - net: openvswitch: ovs_ct_exit to be done under ovs_lock (networking-stable-20_04_27). - net: phy: propagate an error back to the callers of phy_sfp_probe (bsc#1154353). - net: qrtr: send msgs from local of same id as broadcast (networking-stable-20_04_17). - net: revert default NAPI poll timeout to 2 jiffies (networking-stable-20_04_17). - net: revert "net: get rid of an signed integer overflow in ip_idents_reserve()" (bnc#1158748 (network regression)). - net: tun: record RX queue in skb before do_xdp_generic() (networking-stable-20_04_17). - net: vmxnet3: fix possible buffer overflow caused by bad DMA value in vmxnet3_get_rss() (bsc#1172484). - net/x25: Fix x25_neigh refcnt leak when receiving frame (networking-stable-20_04_27). - NFC: st21nfca: add missed kfree_skb() in an error path (git-fixes). - nfs: add minor version to nfs_server_key for fscache (bsc#1172467). - nfsd4: make drc_slab global, not per-net (git-fixes). - nfsd: always check return value of find_any_file (bsc#1172208). - NFS: Fix fscache super_cookie index_key from changing after umount (git-fixes). - nfs: fix NULL deference in nfs4_get_valid_delegation. - nfs: fscache: use timespec64 in inode auxdata (git-fixes). - nfs: set invalid blocks after NFSv4 writes (git-fixes). - NFSv4.1 fix rpc_call_done assignment for BIND_CONN_TO_SESSION (git-fixes). - NFSv4: Fix fscache cookie aux_data to ensure change_attr is included (git-fixes). - ntb: intel: add hw workaround for NTB BAR alignment (jsc#SLE-12710). - ntb: intel: Add Icelake (gen4) support for Intel NTB (jsc#SLE-12710). - ntb: intel: fix static declaration (jsc#SLE-12710). - nvdimm: Avoid race between probe and reading device attributes (bsc#1170442). - nvme-fc: avoid gcc-10 zero-length-bounds warning (bsc#1173206). - nvme-fc: do not call nvme_cleanup_cmd() for AENs (bsc#1171688). - nvme-fc: print proper nvme-fc devloss_tmo value (bsc#1172391). - objtool: Allow no-op CFI ops in alternatives (bsc#1169514). - objtool: Clean instruction state before each function validation (bsc#1169514). - objtool: Fix !CFI insn_state propagation (bsc#1169514). - objtool: Fix ORC vs alternatives (bsc#1169514). - objtool: Ignore empty alternatives (bsc#1169514). - objtool: Remove check preventing branches within alternative (bsc#1169514). - objtool: Rename struct cfi_state (bsc#1169514). - objtool: Uniquely identify alternative instruction groups (bsc#1169514). - p54usb: add AirVasT USB stick device-id (git-fixes). - panic: do not print uninitialized taint_flags (bsc#1172814). - PCI: Allow pci_resize_resource() for devices on root bus (git-fixes). - PCI: amlogic: meson: Do not use FAST_LINK_MODE to set up link (git-fixes). - PCI: brcmstb: Assert fundamental reset on initialization (git-fixes). - PCI: brcmstb: Assert fundamental reset on initialization (git-fixes). - PCI: brcmstb: Fix window register offset from 4 to 8 (git-fixes). - PCI: brcmstb: Fix window register offset from 4 to 8 (git-fixes). - pcie: mobiveil: remove patchset v9 Prepare to backport upstream version. - PCI: Fix pci_register_host_bridge() device_register() error handling (git-fixes). - PCI: mobiveil: Add 8-bit and 16-bit CSR register accessors (bsc#1161495). - PCI: mobiveil: Add callback function for interrupt initialization (bsc#1161495). - PCI: mobiveil: Add callback function for link up check (bsc#1161495). - PCI: mobiveil: Add Header Type field check (bsc#1161495). - PCI: mobiveil: Add PCIe Gen4 RC driver for Layerscape SoCs (bsc#1161495). - PCI: mobiveil: Allow mobiveil_host_init() to be used to re-init host (bsc#1161495). - PCI: mobiveil: Collect the interrupt related operations into a function (bsc#1161495). - PCI: mobiveil: Fix sparse different address space warnings (bsc#1161495). - PCI: mobiveil: Fix unmet dependency warning for PCIE_MOBIVEIL_PLAT (bsc#1161495). - PCI: mobiveil: Introduce a new structure mobiveil_root_port (bsc#1161495). - PCI: mobiveil: ls_pcie_g4: add Workaround for A-011451 (bsc#1161495). - PCI: mobiveil: ls_pcie_g4: add Workaround for A-011577 (bsc#1161495). - PCI: mobiveil: ls_pcie_g4: fix SError when accessing config space (bsc#1161495). - PCI: mobiveil: Modularize the Mobiveil PCIe Host Bridge IP driver (bsc#1161495). - PCI: mobiveil: Move the host initialization into a function (bsc#1161495). - PCI/PM: Adjust pcie_wait_for_link_delay() for caller delay (git-fixes). - PCI/PM: Call .bridge_d3() hook only if non-NULL (git-fixes). - PCI: Program MPS for RCiEP devices (git-fixes). - PCI/PTM: Inherit Switch Downstream Port PTM settings from Upstream Port (git-fixes). - PCI: rcar: Fix incorrect programming of OB windows (git-fixes). - PCI: v3-semi: Fix a memory leak in v3_pci_probe() error handling paths (git-fixes). - PCI: vmd: Filter resource type bits from shadow register (git-fixes). - pcm_native: result of put_user() needs to be checked (git-fixes). - perf/core: Fix endless multiplex timer (git-fixes). - perf/core: fix parent pid/tid in task exit events (git-fixes). - pinctrl: freescale: imx: Fix an error handling path in 'imx_pinctrl_probe()' (git-fixes). - pinctrl: freescale: imx: Use 'devm_of_iomap()' to avoid a resource leak in case of error in 'imx_pinctrl_probe()' (git-fixes). - pinctrl: imxl: Fix an error handling path in 'imx1_pinctrl_core_probe()' (git-fixes). - pinctrl: intel: Add Intel Tiger Lake pin controller support (jsc#SLE-12737). - pinctrl: ocelot: Fix GPIO interrupt decoding on Jaguar2 (git-fixes). - pinctrl: rza1: Fix wrong array assignment of rza1l_swio_entries (git-fixes). - pinctrl: samsung: Correct setting of eint wakeup mask on s5pv210 (git-fixes). - pinctrl: samsung: Save/restore eint_mask over suspend for EINT_TYPE GPIOs (git-fixes). - pinctrl: sprd: Fix the incorrect pull-up definition (git-fixes). - pinctrl: stmfx: stmfx_pinconf_set does not require to get direction anymore (git-fixes). - pinctrl: tigerlake: Tiger Lake uses _HID enumeration (jsc#SLE-12737). - platform/x86: asus-nb-wmi: Do not load on Asus T100TA and T200TA (git-fixes). - platform/x86: dell-laptop: do not register micmute LED if there is no token (git-fixes). - platform/x86: intel-vbtn: Also handle tablet-mode switch on "Detachable" and "Portable" chassis-types (git-fixes). - platform/x86: intel-vbtn: Do not advertise switches to userspace if they are not there (git-fixes). - platform/x86: intel-vbtn: Only blacklist SW_TABLET_MODE on the 9 / "Laptop" chasis-type (git-fixes). - platform/x86: intel-vbtn: Split keymap into buttons and switches parts (git-fixes). - platform/x86: intel-vbtn: Use acpi_evaluate_integer() (git-fixes). - PM: runtime: clk: Fix clk_pm_runtime_get() error path (git-fixes). - pnp: Use list_for_each_entry() instead of open coding (git-fixes). - powerpc/64s: Do not let DT CPU features set FSCR_DSCR (bsc#1065729). - powerpc/64s/exception: Fix machine check no-loss idle wakeup (bsc#1156395). - powerpc/64s/kuap: Restore AMR in system reset exception (bsc#1156395). - powerpc/64s: Save FSCR to init_task.thread.fscr after feature init (bsc#1065729). - powerpc/book3s64: Export has_transparent_hugepage() related functions (bsc#1171759). - powerpc/bpf: Enable bpf_probe_read{, str}() on powerpc again (bsc#1172344). - powerpc/fadump: Account for memory_limit while reserving memory (jsc#SLE-9099 git-fixes). - powerpc/fadump: consider reserved ranges while reserving memory (jsc#SLE-9099 git-fixes). - powerpc/fadump: use static allocation for reserved memory ranges (jsc#SLE-9099 git-fixes). - powerpc/kuap: PPC_KUAP_DEBUG should depend on PPC_KUAP (bsc#1156395). - powerpc/powernv: Fix a warning message (bsc#1156395). - powerpc/setup_64: Set cache-line-size based on cache-block-size (bsc#1065729). - powerpc/xive: Clear the page tables for the ESB IO mapping (bsc#1085030). - power: reset: qcom-pon: reg write mask depends on pon generation (git-fixes). - power: supply: bq24257_charger: Replace depends on REGMAP_I2C with select (git-fixes). - power: supply: core: fix HWMON temperature labels (git-fixes). - power: supply: core: fix memory leak in HWMON error path (git-fixes). - power: supply: lp8788: Fix an error handling path in 'lp8788_charger_probe()' (git-fixes). - power: supply: smb347-charger: IRQSTAT_D is volatile (git-fixes). - printk: queue wake_up_klogd irq_work only if per-CPU areas are ready (bsc#1172095). - proc/meminfo: avoid open coded reading of vm_committed_as (bnc#1173271). - pwm: sun4i: Move pwm_calculate() out of spin_lock() (git-fixes). - r8152: support additional Microsoft Surface Ethernet Adapter variant (git-fixes). - r8169: Revive default chip version for r8168 (bsc#1173085). - raid5: remove gfp flags from scribble_alloc() (bsc#1166985). - random: fix data races at timer_rand_state (bsc#1173438). - rcu: Avoid data-race in rcu_gp_fqs_check_wake() (bsc#1171828). - rcu: Fix data-race due to atomic_t copy-by-value (bsc#1171828). - rcu: Make rcu_read_unlock_special() checks match raise_softirq_irqoff() (bsc#1172046). - rcu: Simplify rcu_read_unlock_special() deferred wakeups (bsc#1172046). - rcutorture: Add 100-CPU configuration (bsc#1173068). - rcutorture: Add worst-case call_rcu() forward-progress results (bsc#1173068). - rcutorture: Dispense with Dracut for initrd creation (bsc#1173068). - rcutorture: Make kvm-find-errors.sh abort on bad directory (bsc#1173068). - rcutorture: Remove CONFIG_HOTPLUG_CPU=n from scenarios (bsc#1173068). - rcutorture: Summarize summary of build and run results (bsc#1173068). - rcutorture: Test TREE03 with the threadirqs kernel boot parameter (bsc#1173068). - rcu: Use *_ONCE() to protect lockless ->expmask accesses (bsc#1171828). - rcu: Use WRITE_ONCE() for assignments to ->pprev for hlist_nulls (bsc#1173438). - RDMA/bnxt_re: Remove dead code from rcfw (bsc#1170774). - RDMA/core: Move and rename trace_cm_id_create() (jsc#SLE-8449). - RDMA/mlx5: Fix NULL pointer dereference in destroy_prefetch_work (jsc#SLE-8446). - RDMA/nl: Do not permit empty devices names during RDMA_NLDEV_CMD_NEWLINK/SET (bsc#1172841). - RDMA/srpt: Fix disabling device management (jsc#SLE-8449). - RDMA/uverbs: Make the event_queue fds return POLLERR when disassociated (jsc#SLE-8449). - remoteproc: Add missing '\n' in log messages (git-fixes). - remoteproc: Fall back to using parent memory pool if no dedicated available (git-fixes). - remoteproc: Fix and restore the parenting hierarchy for vdev (git-fixes). - remoteproc: Fix IDR initialisation in rproc_alloc() (git-fixes). - Revert "drm/amd/display: disable dcn20 abm feature for bring up" (git-fixes). - Revert "fs/seq_file.c: seq_read(): add info message about buggy .next functions" (bsc#1172751) The message floods dmesg and its benefit is marginal in default kernel. - Revert "pinctrl: freescale: imx: Use 'devm_of_iomap()' to avoid a resource leak in case of error in 'imx_pinctrl_probe()'" (git-fixes). - rpm/kernel-source.spec.in: Add obsolete_rebuilds (boo#1172073). - rpm/modules.fips: * add aes-ce-ccm and des3_ede-x86_64 (boo#173030) * add aes_ti and aes_neon_bs (boo#1172956) - rtc: mc13xxx: fix a double-unlock issue (git-fixes). - rtc: rv3028: Add missed check for devm_regmap_init_i2c() (git-fixes). - rtlwifi: Fix a double free in _rtl_usb_tx_urb_setup() (git-fixes). - rtw88: fix an issue about leak system resources (git-fixes). - rxrpc: Fix call RCU cleanup using non-bh-safe locks (git-fixes). - s390/bpf: Maintain 8-byte stack alignment (bsc#1169194, LTC#185911). - s390/pci: Log new handle in clp_disable_fh() (git-fixes). - sched/cfs: change initial value of runnable_avg (bsc#1158765). - sched/core: Check cpus_mask, not cpus_ptr in __set_cpus_allowed_ptr(), to fix mask corruption (bnc#1155798 (CPU scheduler functional and performance backports)). - sched/core: Fix PI boosting between RT and DEADLINE tasks (bsc#1172823). - sched/core: Fix PI boosting between RT and DEADLINE tasks (git fixes (sched)). - sched/core: Fix ttwu() race (bnc#1155798 (CPU scheduler functional and performance backports)). - sched/core: s/WF_ON_RQ/WQ_ON_CPU/ (bnc#1155798 (CPU scheduler functional and performance backports)). - sched/cpuacct: Fix charge cpuacct.usage_sys (bnc#1155798 (CPU scheduler functional and performance backports)). - sched/deadline: Initialize ->dl_boosted (bsc#1172823). - sched/deadline: Initialize ->dl_boosted (git fixes (sched)). - sched: etf: do not assume all sockets are full blown (networking-stable-20_04_27). - sched/fair: find_idlest_group(): Remove unused sd_flag parameter (bnc#1155798 (CPU scheduler functional and performance backports)). - sched/fair: Fix enqueue_task_fair() warning some more (bnc#1155798 (CPU scheduler functional and performance backports)). - sched/fair: fix nohz next idle balance (bnc#1155798 (CPU scheduler functional and performance backports)). - sched/fair: Optimize dequeue_task_fair() (bnc#1155798 (CPU scheduler functional and performance backports)). - sched/fair: Optimize enqueue_task_fair() (bnc#1155798 (CPU scheduler functional and performance backports)). - sched/fair: Simplify the code of should_we_balance() (bnc#1155798 (CPU scheduler functional and performance backports)). - sched: Make newidle_balance() static again (bnc#1155798 (CPU scheduler functional and performance backports)). - sched: Offload wakee task activation if it the wakee is descheduling (bnc#1158748, bnc#1159781). - sched: Optimize ttwu() spinning on p->on_cpu (bnc#1158748, bnc#1159781). - sched/pelt: Sync util/runnable_sum with PELT window when propagating (bnc#1155798 (CPU scheduler functional and performance backports)). - scripts/decodecode: fix trapping instruction formatting (bsc#1065729). - scsi: ibmvscsi: Do not send host info in adapter info MAD after LPM (bsc#1172759 ltc#184814). - scsi: lpfc: Change default queue allocation for reduced memory consumption (bsc#1164777 bsc#1164780 bsc#1165211 jsc#SLE-8654). - scsi: lpfc: Copyright updates for 12.6.0.4 patches (bsc#1171530). - scsi: lpfc: fix build failure with DEBUGFS disabled (bsc#1171530). - scsi: lpfc: Fix incomplete NVME discovery when target (bsc#1171530). - scsi: lpfc: Fix lpfc_nodelist leak when processing unsolicited event (bsc#1164777 bsc#1164780 bsc#1165211 jsc#SLE-8654). - scsi: lpfc: Fix MDS Diagnostic Enablement definition (bsc#1164777 bsc#1164780 bsc#1165211 jsc#SLE-8654). - scsi: lpfc: Fix memory leak on lpfc_bsg_write_ebuf_set func (bsc#1171530). - scsi: lpfc: Fix negation of else clause in lpfc_prep_node_fc4type (bsc#1164777 bsc#1164780 bsc#1165211 jsc#SLE-8654). - scsi: lpfc: Fix noderef and address space warnings (bsc#1164777 bsc#1164780 bsc#1165211 jsc#SLE-8654). - scsi: lpfc: fix spelling mistakes of asynchronous (bsc#1171530). - scsi: lpfc: Maintain atomic consistency of queue_claimed flag (bsc#1164777 bsc#1164780 bsc#1165211 jsc#SLE-8654). - scsi: lpfc: Make lpfc_defer_acc_rsp static (bsc#1171530). - scsi: lpfc: remove duplicate unloading checks (bsc#1164777 bsc#1164780 bsc#1165211 jsc#SLE-8654). - scsi: lpfc: Remove re-binding of nvme rport during registration (bsc#1164777 bsc#1164780 bsc#1165211 jsc#SLE-8654). - scsi: lpfc: Remove redundant initialization to variable rc (bsc#1164777 bsc#1164780 bsc#1165211 jsc#SLE-8654). - scsi: lpfc: Remove unnecessary lockdep_assert_held calls (bsc#1164777 bsc#1164780 bsc#1165211 jsc#SLE-8654). - scsi: lpfc: Update lpfc version to 12.8.0.1 (bsc#1164777 bsc#1164780 bsc#1165211 jsc#SLE-8654). - scsi: megaraid_sas: Replace undefined MFI_BIG_ENDIAN macro with __BIG_ENDIAN_BITFIELD macro (bsc#1173206). - scsi: qla2xxx: Delete all sessions before unregister local nvme port (jsc#SLE-9714 jsc#SLE-10327 jsc#SLE-10334 bsc#1157169). - scsi: qla2xxx: Do not log message when reading port speed via sysfs (jsc#SLE-9714 jsc#SLE-10327 jsc#SLE-10334 bsc#1157169). - scsi: qla2xxx: Fix hang when issuing nvme disconnect-all in NPIV (jsc#SLE-9714 jsc#SLE-10327 jsc#SLE-10334 bsc#1157169). - scsi: sd_zbc: Fix sd_zbc_complete() (bsc#1173206). - scsi: smartpqi: Update attribute name to `driver_version` (bsc#1173206). - scsi: zfcp: add diagnostics buffer for exchange config data (bsc#1158050). - scsi: zfcp: auto variables for dereferenced structs in open port handler (bsc#1158050). - scsi: zfcp: diagnostics buffer caching and use for exchange port data (bsc#1158050). - scsi: zfcp: enhance handling of FC Endpoint Security errors (bsc#1158050). - scsi: zfcp: expose fabric name as common fc_host sysfs attribute (bsc#1158050). - scsi: zfcp: Fence adapter status propagation for common statuses (bsc#1158050). - scsi: zfcp: Fence early sysfs interfaces for accesses of shost objects (bsc#1158050). - scsi: zfcp: Fence fc_host updates during link-down handling (bsc#1158050). - scsi: zfcp: fix fc_host attributes that should be unknown on local link down (bsc#1158050). - scsi: zfcp: fix wrong data and display format of SFP+ temperature (bsc#1158050). - scsi: zfcp: implicitly refresh config-data diagnostics when reading sysfs (bsc#1158050). - scsi: zfcp: implicitly refresh port-data diagnostics when reading sysfs (bsc#1158050). - scsi: zfcp: introduce sysfs interface for diagnostics of local SFP transceiver (bsc#1158050). - scsi: zfcp: introduce sysfs interface to read the local B2B-Credit (bsc#1158050). - scsi: zfcp: log FC Endpoint Security errors (bsc#1158050). - scsi: zfcp: log FC Endpoint Security of connections (bsc#1158050). - scsi: zfcp: Move allocation of the shost object to after xconf- and xport-data (bsc#1158050). - scsi: zfcp: Move fc_host updates during xport data handling into fenced function (bsc#1158050). - scsi: zfcp: move maximum age of diagnostic buffers into a per-adapter variable (bsc#1158050). - scsi: zfcp: Move p-t-p port allocation to after xport data (bsc#1158050). - scsi: zfcp: Move shost modification after QDIO (re-)open into fenced function (bsc#1158050). - scsi: zfcp: Move shost updates during xconfig data handling into fenced function (bsc#1158050). - scsi: zfcp: proper indentation to reduce confusion in zfcp_erp_required_act (bsc#1158050). - scsi: zfcp: report FC Endpoint Security in sysfs (bsc#1158050). - scsi: zfcp: signal incomplete or error for sync exchange config/port data (bsc#1158050). - scsi: zfcp: support retrieval of SFP Data via Exchange Port Data (bsc#1158050). - scsi: zfcp: trace FC Endpoint Security of FCP devices and connections (bsc#1158050). - scsi: zfcp: wire previously driver-specific sysfs attributes also to fc_host (bsc#1158050). - selftests/bpf: CONFIG_IPV6_SEG6_BPF required for test_seg6_loop.o (bsc#1155518). - selftests/bpf: CONFIG_LIRC required for test_lirc_mode2.sh (bsc#1155518). - selftests/bpf: Fix invalid memory reads in core_relo selftest (bsc#1155518). - selftests/bpf: Fix memory leak in extract_build_id() (bsc#1155518). - selftests/bpf, flow_dissector: Close TAP device FD after the test (bsc#1155518). - selftests/timens: handle a case when alarm clocks are not supported (bsc#1164648,jsc#SLE-11493). - serial: 8250: Fix max baud limit in generic 8250 port (git-fixes). - slimbus: core: Fix mismatch in of_node_get/put (git-fixes). - soc: mediatek: cmdq: return send msg error code (git-fixes). - soc: qcom: rpmh: Dirt can only make you dirtier, not cleaner (git-fixes). - soc: qcom: rpmh: Invalidate SLEEP and WAKE TCSes before flushing new data (git-fixes). - soc: qcom: rpmh-rsc: Allow using free WAKE TCS for active request (git-fixes). - soc: qcom: rpmh-rsc: Clear active mode configuration for wake TCS (git-fixes). - soc: qcom: rpmh: Update dirty flag only when data changes (git-fixes). - soc/tegra: pmc: Select GENERIC_PINCONF (git-fixes). - spi: bcm2835aux: Fix controller unregister order (git-fixes). - spi: bcm2835: Fix controller unregister order (git-fixes). - spi: bcm-qspi: Handle clock probe deferral (git-fixes). - spi: bcm-qspi: when tx/rx buffer is NULL set to 0 (git-fixes). - SPI: designware: pci: Switch over to MSI interrupts (jsc#SLE-12735). - spi: dt-bindings: spi-controller: Fix #address-cells for slave mode (git-fixes). - spi: dw: Add SPI Rx-done wait method to DMA-based transfer (git-fixes). - spi: dw: Add SPI Tx-done wait method to DMA-based transfer (git-fixes). - spi: dw: Fix controller unregister order (git-fixes). - spi: dw: Fix native CS being unset (git-fixes). - spi: dw-pci: Add MODULE_DEVICE_TABLE (jsc#SLE-12735). - spi: dw-pci: Add runtime power management support (jsc#SLE-12735). - spi: dw-pci: Add support for Intel Elkhart Lake PSE SPI (jsc#SLE-12735). - spi: dw-pci: Fix Chip Select amount on Intel Elkhart Lake PSE SPI (jsc#SLE-12735). - spi: dw: use "smp_mb()" to avoid sending spi data error (git-fixes). - spi: dw: Zero DMA Tx and Rx configurations on stack (git-fixes). - spi: Fix controller unregister order (git-fixes). - spi: fsl: do not map irq during probe (git-fixes). - spi: fsl: use platform_get_irq() instead of of_irq_to_resource() (git-fixes). - spi: pxa2xx: Fix controller unregister order (git-fixes). - spi: pxa2xx: Fix runtime PM ref imbalance on probe error (git-fixes). - spi: Respect DataBitLength field of SpiSerialBusV2() ACPI resource (git-fixes). - spi: spi-fsl-dspi: Change usage pattern of SPI_MCR_* and SPI_CTAR_* macros (git-fixes). - spi: spi-fsl-dspi: Do not access reserved fields in SPI_MCR (git-fixes). - spi: spi-fsl-dspi: Fix 16-bit word order in 32-bit XSPI mode (git-fixes). - spi: spi-fsl-dspi: Replace interruptible wait queue with a simple completion (git-fixes). - spi: spi-mem: Fix Dual/Quad modes on Octal-capable devices (git-fixes). - staging: iio: ad2s1210: Fix SPI reading (git-fixes). - staging: kpc2000: fix error return code in kp2000_pcie_probe() (git-fixes). - staging: rtl8712: Fix IEEE80211_ADDBA_PARAM_BUF_SIZE_MASK (git-fixes). - staging: sm750fb: add missing case while setting FB_VISUAL (git-fixes). - sun6i: dsi: fix gcc-4.8 (bsc#1152489) - SUNRPC: Signalled ASYNC tasks need to exit (git-fixes). - supported.conf: Add pinctrl-tigerlake as supported - supported.conf: Mark two hwtracing helper modules as externally supported (bsc#1170879) - svcrdma: Fix leak of svc_rdma_recv_ctxt objects (git-fixes). - tcp: cache line align MAX_TCP_HEADER (networking-stable-20_04_27). - team: fix hang in team_mode_get() (networking-stable-20_04_27). - thermal: intel: intel_pch_thermal: Add Comet Lake (CML) platform support (jsc#SLE-12668). - tick/sched: Annotate lockless access to last_jiffies_update (bsc#1173438). - timer: Use hlist_unhashed_lockless() in timer_pending() (bsc#1173438). - torture: Allow "CFLIST" to specify default list of scenarios (bsc#1173068). - torture: Expand last_ts variable in kvm-test-1-run.sh (bsc#1173068). - torture: Handle jitter for CPUs that cannot be offlined (bsc#1173068). - torture: Handle systems lacking the mpstat command (bsc#1173068). - torture: Hoist calls to lscpu to higher-level kvm.sh script (bsc#1173068). - torture: Make results-directory date format completion-friendly (bsc#1173068). - torture: Use gawk instead of awk for systime() function (bsc#1173068). - tpm: ibmvtpm: retry on H_CLOSED in tpm_ibmvtpm_send() (bsc#1065729). - tty: n_gsm: Fix bogus i++ in gsm_data_kick (git-fixes). - tty: n_gsm: Fix SOF skipping (git-fixes). - tty: n_gsm: Fix waking up upper tty layer when room available (git-fixes). - tty: serial: add missing spin_lock_init for SiFive serial console (git-fixes). - tun: correct header offsets in napi frags mode (git-fixes). - Update config files: Add CONFIG_PINCTRL_TIGERLAKE=m - Update patch reference for intel_th patch (jsc#SLE-12705) - Update the patch reference for ish-hid fix (jsc#SLE-12683) - usb: core: Fix misleading driver bug report (git-fixes). - usb: core: hub: limit HUB_QUIRK_DISABLE_AUTOSUSPEND to USB5534B (git-fixes). - usb: dwc2: gadget: move gadget resume after the core is in L0 state (git-fixes). - usb: dwc3: gadget: Properly handle ClearFeature(halt) (git-fixes). - usb: dwc3: gadget: Properly handle failed kick_transfer (git-fixes). - usb: dwc3: pci: Enable extcon driver for Intel Merrifield (git-fixes). - usb: gadget: audio: Fix a missing error return value in audio_bind() (git-fixes). - usb: gadget: fix illegal array access in binding with UDC (git-fixes). - usb: gadget: fix potential double-free in m66592_probe (git-fixes). - usb: gadget: legacy: fix error return code in cdc_bind() (git-fixes). - usb: gadget: legacy: fix error return code in gncm_bind() (git-fixes). - usb: gadget: legacy: fix redundant initialization warnings (git-fixes). - usb: gadget: lpc32xx_udc: do not dereference ep pointer before null check (git-fixes). - usb: gadget: net2272: Fix a memory leak in an error handling path in 'net2272_plat_probe()' (git-fixes). - usb: gadget: udc: atmel: Make some symbols static (git-fixes). - usb: gadget: udc: s3c2410_udc: Remove pointless NULL check in s3c2410_udc_nuke (git-fixes). - usb: host: ehci-mxc: Add error handling in ehci_mxc_drv_probe() (git-fixes). - usb: host: xhci-plat: keep runtime active when removing host (git-fixes). - usb: musb: Fix runtime PM imbalance on error (git-fixes). - usb: musb: start session in resume for host port (git-fixes). - usb: ohci-sm501: fix error return code in ohci_hcd_sm501_drv_probe() (git-fixes). - usb: serial: option: add Telit LE910C1-EUX compositions (git-fixes). - usb: serial: qcserial: add DW5816e QDL support (git-fixes). - usb: serial: usb_wwan: do not resubmit rx urb on fatal errors (git-fixes). - usb: usbfs: correct kernel->user page attribute mismatch (git-fixes). - usb: usbfs: fix mmap dma mismatch (git-fixes). - vfio: avoid possible overflow in vfio_iommu_type1_pin_pages (git-fixes). - vfio: Ignore -ENODEV when getting MSI cookie (git-fixes). - vfio/mdev: Fix reference count leak in add_mdev_supported_type (git-fixes). - vfio/pci: fix memory leaks in alloc_perm_bits() (git-fixes). - vfio/type1: Fix VA->PA translation for PFNMAP VMAs in vaddr_get_pfn() (git-fixes). - video: fbdev: w100fb: Fix a potential double free (git-fixes). - virtio-blk: handle block_device_operations callbacks after hot unplug (git fixes (block drivers)). - vmxnet3: add geneve and vxlan tunnel offload support (bsc#1172484). - vmxnet3: add support to get/set rx flow hash (bsc#1172484). - vmxnet3: allow rx flow hash ops only when rss is enabled (bsc#1172484). - vmxnet3: prepare for version 4 changes (bsc#1172484). - vmxnet3: update to version 4 (bsc#1172484). - vmxnet3: use correct hdr reference when packet is encapsulated (bsc#1172484). - vrf: Check skb for XFRM_TRANSFORMED flag (networking-stable-20_04_27). - vrf: Fix IPv6 with qdisc and xfrm (networking-stable-20_04_27). - vsprintf: do not obfuscate NULL and error pointers (bsc#1172086). - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (git-fixes). - vt: vt_ioctl: remove unnecessary console allocation checks (git-fixes). - vxlan: use the correct nlattr array in NL_SET_ERR_MSG_ATTR (networking-stable-20_04_27). - w1: omap-hdq: cleanup to add missing newline for some dev_dbg (git-fixes). - watchdog: imx_sc_wdt: Fix reboot on crash (git-fixes). - wcn36xx: Fix error handling path in 'wcn36xx_probe()' (git-fixes). - wireguard: device: avoid circular netns references (git-fixes). - wireguard: noise: do not assign initiation time in if condition (git-fixes). - wireguard: noise: read preshared key while taking lock (bsc#1169021 jsc#SLE-12250). - wireguard: noise: separate receive counter from send counter (bsc#1169021 jsc#SLE-12250). - wireguard: queueing: preserve flow hash across packet scrubbing (bsc#1169021 jsc#SLE-12250). - wireguard: receive: account for napi_gro_receive never returning GRO_DROP (git-fixes). - wireguard: selftests: use newer iproute2 for gcc-10 (bsc#1169021 jsc#SLE-12250). - work around mvfs bug (bsc#1162063). - workqueue: do not use wq_select_unbound_cpu() for bound works (git-fixes). - workqueue: Remove the warning in wq_worker_sleeping() (git-fixes). - x86/cpu/amd: Make erratum #1054 a legacy erratum (bsc#1152489). - x86: Fix early boot crash on gcc-10, third try (bsc#1152489). - x86/mm/cpa: Flush direct map alias during cpa (bsc#1152489). - x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (git-fixes). - x86/reboot/quirks: Add MacBook6,1 reboot quirk (git-fixes). - x86/resctrl: Fix invalid attempt at removing the default resource group (bsc#1152489). - x86/resctrl: Preserve CDP enable over CPU hotplug (bsc#1152489). - x86/unwind/orc: Fix unwind_get_return_address_ptr() for inactive tasks (bsc#1058115). - xfrm: Always set XFRM_TRANSFORMED in xfrm{4,6}_output_finish (networking-stable-20_04_27). - xfrm: fix error in comment (git fixes (block drivers)). - xfs: clean up the error handling in xfs_swap_extents (git-fixes). - xfs: do not commit sunit/swidth updates to disk if that would cause repair failures (bsc#1172169). - xfs: do not fail unwritten extent conversion on writeback due to edquot (bsc#1158242). - xfs: fix duplicate verification from xfs_qm_dqflush() (git-fixes). - xfs: force writes to delalloc regions to unwritten (bsc#1158242). - xfs: measure all contiguous previous extents for prealloc size (bsc#1158242). - xfs: preserve default grace interval during quotacheck (bsc#1172170). - xfs: refactor agfl length computation function (bsc#1172169). - xfs: split the sunit parameter update into two parts (bsc#1172169). - wireguard: selftests: initalize ipv6 members to NULL to squelch clang warning (git-fixes). Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-935=1 Package List: - openSUSE Leap 15.2 (noarch): kernel-devel-5.3.18-lp152.20.7.1 kernel-docs-5.3.18-lp152.20.7.1 kernel-docs-html-5.3.18-lp152.20.7.1 kernel-macros-5.3.18-lp152.20.7.1 kernel-source-5.3.18-lp152.20.7.1 kernel-source-vanilla-5.3.18-lp152.20.7.1 - openSUSE Leap 15.2 (x86_64): kernel-debug-5.3.18-lp152.20.7.1 kernel-debug-debuginfo-5.3.18-lp152.20.7.1 kernel-debug-debugsource-5.3.18-lp152.20.7.1 kernel-debug-devel-5.3.18-lp152.20.7.1 kernel-debug-devel-debuginfo-5.3.18-lp152.20.7.1 kernel-default-5.3.18-lp152.20.7.1 kernel-default-debuginfo-5.3.18-lp152.20.7.1 kernel-default-debugsource-5.3.18-lp152.20.7.1 kernel-default-devel-5.3.18-lp152.20.7.1 kernel-default-devel-debuginfo-5.3.18-lp152.20.7.1 kernel-kvmsmall-5.3.18-lp152.20.7.1 kernel-kvmsmall-debuginfo-5.3.18-lp152.20.7.1 kernel-kvmsmall-debugsource-5.3.18-lp152.20.7.1 kernel-kvmsmall-devel-5.3.18-lp152.20.7.1 kernel-kvmsmall-devel-debuginfo-5.3.18-lp152.20.7.1 kernel-obs-build-5.3.18-lp152.20.7.1 kernel-obs-build-debugsource-5.3.18-lp152.20.7.1 kernel-obs-qa-5.3.18-lp152.20.7.1 kernel-preempt-5.3.18-lp152.20.7.1 kernel-preempt-debuginfo-5.3.18-lp152.20.7.1 kernel-preempt-debugsource-5.3.18-lp152.20.7.1 kernel-preempt-devel-5.3.18-lp152.20.7.1 kernel-preempt-devel-debuginfo-5.3.18-lp152.20.7.1 kernel-syms-5.3.18-lp152.20.7.1 References: https://www.suse.com/security/cve/CVE-2019-19462.html https://www.suse.com/security/cve/CVE-2019-20810.html https://www.suse.com/security/cve/CVE-2019-20812.html https://www.suse.com/security/cve/CVE-2020-10711.html https://www.suse.com/security/cve/CVE-2020-10732.html https://www.suse.com/security/cve/CVE-2020-10751.html https://www.suse.com/security/cve/CVE-2020-10766.html https://www.suse.com/security/cve/CVE-2020-10767.html https://www.suse.com/security/cve/CVE-2020-10768.html https://www.suse.com/security/cve/CVE-2020-10773.html https://www.suse.com/security/cve/CVE-2020-12656.html https://www.suse.com/security/cve/CVE-2020-12769.html https://www.suse.com/security/cve/CVE-2020-12888.html https://www.suse.com/security/cve/CVE-2020-13143.html https://www.suse.com/security/cve/CVE-2020-13974.html https://www.suse.com/security/cve/CVE-2020-14416.html https://bugzilla.suse.com/1058115 https://bugzilla.suse.com/1065729 https://bugzilla.suse.com/1071995 https://bugzilla.suse.com/1085030 https://bugzilla.suse.com/1148868 https://bugzilla.suse.com/1152472 https://bugzilla.suse.com/1152489 https://bugzilla.suse.com/1153274 https://bugzilla.suse.com/1154353 https://bugzilla.suse.com/1154492 https://bugzilla.suse.com/1155518 https://bugzilla.suse.com/1155798 https://bugzilla.suse.com/1156395 https://bugzilla.suse.com/1157169 https://bugzilla.suse.com/1158050 https://bugzilla.suse.com/1158242 https://bugzilla.suse.com/1158265 https://bugzilla.suse.com/1158748 https://bugzilla.suse.com/1158765 https://bugzilla.suse.com/1159781 https://bugzilla.suse.com/1159867 https://bugzilla.suse.com/1160947 https://bugzilla.suse.com/1161495 https://bugzilla.suse.com/1162002 https://bugzilla.suse.com/1162063 https://bugzilla.suse.com/1162400 https://bugzilla.suse.com/1164648 https://bugzilla.suse.com/1164777 https://bugzilla.suse.com/1164780 https://bugzilla.suse.com/1165211 https://bugzilla.suse.com/1165975 https://bugzilla.suse.com/1166985 https://bugzilla.suse.com/1167104 https://bugzilla.suse.com/1167651 https://bugzilla.suse.com/1168230 https://bugzilla.suse.com/1168779 https://bugzilla.suse.com/1168838 https://bugzilla.suse.com/1169021 https://bugzilla.suse.com/1169194 https://bugzilla.suse.com/1169514 https://bugzilla.suse.com/1169681 https://bugzilla.suse.com/1170011 https://bugzilla.suse.com/1170442 https://bugzilla.suse.com/1170774 https://bugzilla.suse.com/1170879 https://bugzilla.suse.com/1170891 https://bugzilla.suse.com/1170895 https://bugzilla.suse.com/1171189 https://bugzilla.suse.com/1171191 https://bugzilla.suse.com/1171219 https://bugzilla.suse.com/1171220 https://bugzilla.suse.com/1171246 https://bugzilla.suse.com/1171417 https://bugzilla.suse.com/1171513 https://bugzilla.suse.com/1171530 https://bugzilla.suse.com/1171662 https://bugzilla.suse.com/1171688 https://bugzilla.suse.com/1171699 https://bugzilla.suse.com/1171739 https://bugzilla.suse.com/1171743 https://bugzilla.suse.com/1171759 https://bugzilla.suse.com/1171828 https://bugzilla.suse.com/1171868 https://bugzilla.suse.com/1171904 https://bugzilla.suse.com/1171915 https://bugzilla.suse.com/1171982 https://bugzilla.suse.com/1171983 https://bugzilla.suse.com/1172017 https://bugzilla.suse.com/1172046 https://bugzilla.suse.com/1172061 https://bugzilla.suse.com/1172062 https://bugzilla.suse.com/1172063 https://bugzilla.suse.com/1172064 https://bugzilla.suse.com/1172065 https://bugzilla.suse.com/1172066 https://bugzilla.suse.com/1172067 https://bugzilla.suse.com/1172068 https://bugzilla.suse.com/1172069 https://bugzilla.suse.com/1172073 https://bugzilla.suse.com/1172086 https://bugzilla.suse.com/1172095 https://bugzilla.suse.com/1172169 https://bugzilla.suse.com/1172170 https://bugzilla.suse.com/1172208 https://bugzilla.suse.com/1172223 https://bugzilla.suse.com/1172342 https://bugzilla.suse.com/1172343 https://bugzilla.suse.com/1172344 https://bugzilla.suse.com/1172365 https://bugzilla.suse.com/1172366 https://bugzilla.suse.com/1172374 https://bugzilla.suse.com/1172391 https://bugzilla.suse.com/1172393 https://bugzilla.suse.com/1172394 https://bugzilla.suse.com/1172453 https://bugzilla.suse.com/1172458 https://bugzilla.suse.com/1172467 https://bugzilla.suse.com/1172484 https://bugzilla.suse.com/1172537 https://bugzilla.suse.com/1172719 https://bugzilla.suse.com/1172739 https://bugzilla.suse.com/1172751 https://bugzilla.suse.com/1172759 https://bugzilla.suse.com/1172775 https://bugzilla.suse.com/1172781 https://bugzilla.suse.com/1172782 https://bugzilla.suse.com/1172783 https://bugzilla.suse.com/1172814 https://bugzilla.suse.com/1172823 https://bugzilla.suse.com/1172841 https://bugzilla.suse.com/1172938 https://bugzilla.suse.com/1172939 https://bugzilla.suse.com/1172940 https://bugzilla.suse.com/1172956 https://bugzilla.suse.com/1172983 https://bugzilla.suse.com/1172984 https://bugzilla.suse.com/1172985 https://bugzilla.suse.com/1172986 https://bugzilla.suse.com/1172987 https://bugzilla.suse.com/1172988 https://bugzilla.suse.com/1172989 https://bugzilla.suse.com/1172990 https://bugzilla.suse.com/1172999 https://bugzilla.suse.com/1173060 https://bugzilla.suse.com/1173068 https://bugzilla.suse.com/1173085 https://bugzilla.suse.com/1173139 https://bugzilla.suse.com/1173206 https://bugzilla.suse.com/1173271 https://bugzilla.suse.com/1173280 https://bugzilla.suse.com/1173428 https://bugzilla.suse.com/1173438 https://bugzilla.suse.com/1173461

1 0

openSUSE-RU-2020:0936-1: moderate: Recommended update for lyx
by maintenance＠opensuse.org 07 Jul '20

07 Jul '20

openSUSE Recommended Update: Recommended update for lyx ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0936-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for lyx fixes the following issues: lyx was updated to 2.3.5.2: * fix quotation marks being reversed in moving arguments when hyperref is enabled Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-936=1 Package List: - openSUSE Leap 15.2 (x86_64): lyx-2.3.5.2-lp152.2.3.1 lyx-debuginfo-2.3.5.2-lp152.2.3.1 lyx-debugsource-2.3.5.2-lp152.2.3.1 References:

1 0

openSUSE-SU-2020:0939-1: important: Security update for chocolate-doom
by opensuse-security＠opensuse.org 07 Jul '20

07 Jul '20

openSUSE Security Update: Security update for chocolate-doom ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0939-1 Rating: important References: #1173595 Cross-References: CVE-2020-14983 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for chocolate-doom to version 3.0.1 fixes the following issues: - CVE-2020-14983: Fixed a stack-based buffer overflow in the networking code (boo#1173595). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-939=1 Package List: - openSUSE Leap 15.2 (x86_64): chocolate-doom-3.0.1-lp152.4.3.1 chocolate-doom-debuginfo-3.0.1-lp152.4.3.1 chocolate-doom-debugsource-3.0.1-lp152.4.3.1 - openSUSE Leap 15.2 (noarch): chocolate-doom-bash-completion-3.0.1-lp152.4.3.1 References: https://www.suse.com/security/cve/CVE-2020-14983.html https://bugzilla.suse.com/1173595

1 0

openSUSE-SU-2020:0940-1: important: Security update for python3
by opensuse-security＠opensuse.org 07 Jul '20

07 Jul '20

openSUSE Security Update: Security update for python3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0940-1 Rating: important References: #1173274 Cross-References: CVE-2020-14422 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python3 fixes the following issues: - CVE-2020-14422: Fixed an improper computation of hash values in the IPv4Interface and IPv6Interface could have led to denial of service (bsc#1173274). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-940=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libpython3_6m1_0-3.6.10-lp152.4.3.1 libpython3_6m1_0-debuginfo-3.6.10-lp152.4.3.1 python3-3.6.10-lp152.4.3.1 python3-base-3.6.10-lp152.4.3.1 python3-base-debuginfo-3.6.10-lp152.4.3.1 python3-base-debugsource-3.6.10-lp152.4.3.1 python3-curses-3.6.10-lp152.4.3.1 python3-curses-debuginfo-3.6.10-lp152.4.3.1 python3-dbm-3.6.10-lp152.4.3.1 python3-dbm-debuginfo-3.6.10-lp152.4.3.1 python3-debuginfo-3.6.10-lp152.4.3.1 python3-debugsource-3.6.10-lp152.4.3.1 python3-devel-3.6.10-lp152.4.3.1 python3-devel-debuginfo-3.6.10-lp152.4.3.1 python3-idle-3.6.10-lp152.4.3.1 python3-testsuite-3.6.10-lp152.4.3.1 python3-testsuite-debuginfo-3.6.10-lp152.4.3.1 python3-tk-3.6.10-lp152.4.3.1 python3-tk-debuginfo-3.6.10-lp152.4.3.1 python3-tools-3.6.10-lp152.4.3.1 - openSUSE Leap 15.2 (x86_64): libpython3_6m1_0-32bit-3.6.10-lp152.4.3.1 libpython3_6m1_0-32bit-debuginfo-3.6.10-lp152.4.3.1 python3-32bit-3.6.10-lp152.4.3.1 python3-32bit-debuginfo-3.6.10-lp152.4.3.1 python3-base-32bit-3.6.10-lp152.4.3.1 python3-base-32bit-debuginfo-3.6.10-lp152.4.3.1 - openSUSE Leap 15.2 (noarch): python3-doc-3.6.10-lp152.4.3.1 References: https://www.suse.com/security/cve/CVE-2020-14422.html https://bugzilla.suse.com/1173274

1 0

openSUSE-SU-2020:0934-1: moderate: Security update for ntp
by opensuse-security＠opensuse.org 06 Jul '20

06 Jul '20

openSUSE Security Update: Security update for ntp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0934-1 Rating: moderate References: #1125401 #1169740 #1171355 #1172651 #1173334 #992038 Cross-References: CVE-2018-8956 CVE-2020-11868 CVE-2020-13817 CVE-2020-15025 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves four vulnerabilities and has two fixes is now available. Description: This update for ntp fixes the following issues: ntp was updated to 4.2.8p15 - CVE-2020-11868: Fixed an issue which a server mode packet with spoofed source address frequently send to the client ntpd could have caused denial of service (bsc#1169740). - CVE-2018-8956: Fixed an issue which could have allowed remote attackers to prevent a broadcast client from synchronizing its clock with a broadcast NTP server via spoofed mode 3 and mode 5 packets (bsc#1171355). - CVE-2020-13817: Fixed an issue which an off-path attacker with the ability to query time from victim's ntpd instance could have modified the victim's clock by a limited amount (bsc#1172651). - CVE-2020-15025: Fixed an issue which remote attacker could have caused denial of service by consuming the memory when a CMAC key was used andassociated with a CMAC algorithm in the ntp.keys (bsc#1173334). - Removed an OpenSSL version warning (bsc#992038 and bsc#1125401). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-934=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): ntp-4.2.8p15-lp151.2.3.1 ntp-debuginfo-4.2.8p15-lp151.2.3.1 ntp-debugsource-4.2.8p15-lp151.2.3.1 ntp-doc-4.2.8p15-lp151.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-8956.html https://www.suse.com/security/cve/CVE-2020-11868.html https://www.suse.com/security/cve/CVE-2020-13817.html https://www.suse.com/security/cve/CVE-2020-15025.html https://bugzilla.suse.com/1125401 https://bugzilla.suse.com/1169740 https://bugzilla.suse.com/1171355 https://bugzilla.suse.com/1172651 https://bugzilla.suse.com/1173334 https://bugzilla.suse.com/992038

1 0

openSUSE-RU-2020:0932-1: moderate: Recommended update for steam
by maintenance＠opensuse.org 06 Jul '20

06 Jul '20

openSUSE Recommended Update: Recommended update for steam ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0932-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2:NonFree ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for steam fixes the following issues: Steam was updated to version 1.0.0.63: * Update steam-devices subproject up to 2020-06-05 - Add HORIPAD for Nintendo Switch (thanks, @BrokenGale) (Fixes: steam-for-linux#6944, steam-devices#7) - Add ASTRO C40 controller (thanks, @exhumer2) (Fixes: steam-devices#5) - Add PowerA Nintendo Switch Controller (thanks, @blazingkin) (Fixes: steam-devices#6) - Add a workaround for PowerA Wireless Controller (thanks, Andrey Smirnov) (Fixes: steam-devices#9; T21767) * debian/steam-launcher.postinst: Notify udevd to reload its rules. This means the steam-devices rules should take effect immediately, instead of being deferred until after the next reboot. (T19535) * bin_steam.sh: Don't overwrite steam.desktop if it's a symlink. In a pre-configured distro like SteamOS, ~/Desktop/steam.desktop might already be a symlink to /usr/share/applications/steam.desktop, in which case overwriting it is pointless. (T21633) Update to version 1.0.0.64 * steam.list: Download updates via https (T21740) In older versions of apt (lower than 1.6) we need to install apt-transport-https to use https repositories, so do that. * steam.list: Switch the suite from precise to stable (Fixes: steam-for-linux#4436) * steam.list: Add commented-out apt sources for the beta launcher Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2:NonFree: zypper in -t patch openSUSE-2020-932=1 Package List: - openSUSE Leap 15.2:NonFree (x86_64): steam-1.0.0.64-lp152.2.3.1 steam-devices-1.0.0.64-lp152.2.3.1 References:

1 0

openSUSE-SU-2020:0933-1: moderate: Security update for rust, rust-cbindgen
by opensuse-security＠opensuse.org 06 Jul '20

06 Jul '20

openSUSE Security Update: Security update for rust, rust-cbindgen ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0933-1 Rating: moderate References: #1115645 #1154817 #1173202 Cross-References: CVE-2020-1967 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update for rust, rust-cbindgen fixes the following issues: rust was updated for use by Firefox 76ESR. - Fixed miscompilations with rustc 1.43 that lead to LTO failures (bsc#1173202) Update to version 1.43.1 - Updated openssl-src to 1.1.1g for CVE-2020-1967. - Fixed the stabilization of AVX-512 features. - Fixed `cargo package --list` not working with unpublished dependencies. Update to version 1.43.0 + Language: - Fixed using binary operations with `&{number}` (e.g. `&1.0`) not having the type inferred correctly. - Attributes such as `#[cfg()]` can now be used on `if` expressions. - Syntax only changes: * Allow `type Foo: Ord` syntactically. * Fuse associated and extern items up to defaultness. * Syntactically allow `self` in all `fn` contexts. * Merge `fn` syntax + cleanup item parsing. * `item` macro fragments can be interpolated into `trait`s, `impl`s, and `extern` blocks. For example, you may now write: ```rust macro_rules! mac_trait { ($i:item) => { trait T { $i } } } mac_trait! { fn foo() {} } ``` * These are still rejected *semantically*, so you will likely receive an error but these changes can be seen and parsed by macros and conditional compilation. + Compiler - You can now pass multiple lint flags to rustc to override the previous flags. For example; `rustc -D unused -A unused-variables` denies everything in the `unused` lint group except `unused-variables` which is explicitly allowed. However, passing `rustc -A unused-variables -D unused` denies everything in the `unused` lint group **including** `unused-variables` since the allow flag is specified before the deny flag (and therefore overridden). - rustc will now prefer your system MinGW libraries over its bundled libraries if they are available on `windows-gnu`. - rustc now buffers errors/warnings printed in JSON. Libraries: - `Arc<[T; N]>`, `Box<[T; N]>`, and `Rc<[T; N]>`, now implement `TryFrom<Arc<[T]>>`,`TryFrom<Box<[T]>>`, and `TryFrom<Rc<[T]>>` respectively. **Note** These conversions are only available when `N` is `0..=32`. - You can now use associated constants on floats and integers directly, rather than having to import the module. e.g. You can now write `u32::MAX` or `f32::NAN` with no imports. - `u8::is_ascii` is now `const`. - `String` now implements `AsMut<str>`. - Added the `primitive` module to `std` and `core`. This module reexports Rust's primitive types. This is mainly useful in macros where you want avoid these types being shadowed. - Relaxed some of the trait bounds on `HashMap` and `HashSet`. - `string::FromUtf8Error` now implements `Clone + Eq`. + Stabilized APIs - `Once::is_completed` - `f32::LOG10_2` - `f32::LOG2_10` - `f64::LOG10_2` - `f64::LOG2_10` - `iter::once_with` + Cargo - You can now set config `[profile]`s in your `.cargo/config`, or through your environment. - Cargo will now set `CARGO_BIN_EXE_<name>` pointing to a binary's executable path when running integration tests or benchmarks. `<name>` is the name of your binary as-is e.g. If you wanted the executable path for a binary named `my-program`you would use `env!("CARGO_BIN_EXE_my-program")`. + Misc - Certain checks in the `const_err` lint were deemed unrelated to const evaluation, and have been moved to the `unconditional_panic` and `arithmetic_overflow` lints. + Compatibility Notes - Having trailing syntax in the `assert!` macro is now a hard error. This has been a warning since 1.36.0. - Fixed `Self` not having the correctly inferred type. This incorrectly led to some instances being accepted, and now correctly emits a hard error. Update to version 1.42.0: + Language - You can now use the slice pattern syntax with subslices. - You can now use #[repr(transparent)] on univariant enums. Meaning that you can create an enum that has the exact layout and ABI of the type it contains. - There are some syntax-only changes: * default is syntactically allowed before items in trait definitions. * Items in impls (i.e. consts, types, and fns) may syntactically leave out their bodies in favor of ;. * Bounds on associated types in impls are now syntactically allowed (e.g. type Foo: Ord;). * ... (the C-variadic type) may occur syntactically directly as the type of any function parameter. These are still rejected semantically, so you will likely receive an error but these changes can be seen and parsed by procedural macros and conditional compilation. + Compiler - Added tier 2 support for armv7a-none-eabi. - Added tier 2 support for riscv64gc-unknown-linux-gnu. - Option::{expect,unwrap} and Result::{expect, expect_err, unwrap, unwrap_err} now produce panic messages pointing to the location where they were called, rather than core's internals. Refer to Rust's platform support page for more information on Rust's tiered platform support. + Libraries - iter::Empty<T> now implements Send and Sync for any T. - Pin::{map_unchecked, map_unchecked_mut} no longer require the return type to implement Sized. - io::Cursor now derives PartialEq and Eq. - Layout::new is now const. - Added Standard Library support for riscv64gc-unknown-linux-gnu. + Stabilized APIs - CondVar::wait_while - CondVar::wait_timeout_while - DebugMap::key - DebugMap::value - ManuallyDrop::take - matches! - ptr::slice_from_raw_parts_mut - ptr::slice_from_raw_parts + Cargo - You no longer need to include extern crate proc_macro; to be able to use proc_macro; in the 2018 edition. + Compatibility Notes - Error::description has been deprecated, and its use will now produce a warning. It's recommended to use Display/to_string instead. Update to version 1.41.1: - Always check types of static items - Always check lifetime bounds of `Copy` impls - Fix miscompilation in callers of `Layout::repeat` Update to version 1.41.0: + Language - You can now pass type parameters to foreign items when implementing traits. E.g. You can now write `impl<T> From<Foo> for Vec<T> {}`. - You can now arbitrarily nest receiver types in the `self` position. E.g. you can now write `fn foo(self: Box<Box<Self>>) {}`. Previously only `Self`, `&Self`, `&mut Self`, `Arc<Self>`, `Rc<Self>`, and `Box<Self>` were allowed. - You can now use any valid identifier in a `format_args` macro. Previously identifiers starting with an underscore were not allowed. - Visibility modifiers (e.g. `pub`) are now syntactically allowed on trait items and enum variants. These are still rejected semantically, but can be seen and parsed by procedural macros and conditional compilation. + Compiler - Rustc will now warn if you have unused loop `'label`s. - Removed support for the `i686-unknown-dragonfly` target. - Added tier 3 support\* for the `riscv64gc-unknown-linux-gnu` target. - You can now pass an arguments file passing the `@path` syntax to rustc. Note that the format differs somewhat from what is found in other tooling; please see the documentation for more information. - You can now provide `--extern` flag without a path, indicating that it is available from the search path or specified with an `-L` flag. Refer to Rust's [platform support page][forge-platform-support] for more information on Rust's tiered platform support. + Libraries - The `core::panic` module is now stable. It was already stable through `std`. - `NonZero*` numerics now implement `From<NonZero*>` if it's a smaller integer width. E.g. `NonZeroU16` now implements `From<NonZeroU8>`. - `MaybeUninit<T>` now implements `fmt::Debug`. + Stabilized APIs - `Result::map_or` - `Result::map_or_else` - `std::rc::Weak::weak_count` - `std::rc::Weak::strong_count` - `std::sync::Weak::weak_count` - `std::sync::Weak::strong_count` + Cargo - Cargo will now document all the private items for binary crates by default. - `cargo-install` will now reinstall the package if it detects that it is out of date. - Cargo.lock now uses a more git friendly format that should help to reduce merge conflicts. - You can now override specific dependencies's build settings. E.g. `[profile.dev.package.image] opt-level = 2` sets the `image` crate's optimisation level to `2` for debug builds. You can also use `[profile.<profile>.build-override]` to override build scripts and their dependencies. + Misc - You can now specify `edition` in documentation code blocks to compile the block for that edition. E.g. `edition2018` tells rustdoc that the code sample should be compiled the 2018 edition of Rust. - You can now provide custom themes to rustdoc with `--theme`, and check the current theme with `--check-theme`. - You can use `#[cfg(doc)]` to compile an item when building documentation. + Compatibility Notes - As previously announced 1.41.0 will be the last tier 1 release for 32-bit Apple targets. This means that the source code is still available to build, but the targets are no longer being tested and release binaries for those platforms will no longer be distributed by the Rust project. Please refer to the linked blog post for more information. - Bump version of libssh2 for SLE15; we now need a version with libssh2_userauth_publickey_frommemory(), which appeared in libssh2 1.6.0. Update to version 1.40.0 + Language - You can now use tuple `struct`s and tuple `enum` variant's constructors in `const` contexts. e.g. pub struct Point(i32, i32); const ORIGIN: Point = { let constructor = Point; constructor(0, 0) }; - You can now mark `struct`s, `enum`s, and `enum` variants with the `#[non_exhaustive]` attribute to indicate that there may be variants or fields added in the future. For example this requires adding a wild-card branch (`_ => {}`) to any match statements on a non-exhaustive `enum`. - You can now use function-like procedural macros in `extern` blocks and in type positions. e.g. `type Generated = macro!();` - Function-like and attribute procedural macros can now emit `macro_rules!` items, so you can now have your macros generate macros. - The `meta` pattern matcher in `macro_rules!` now correctly matches the modern attribute syntax. For example `(#[$m:meta])` now matches `#[attr]`, `#[attr{tokens}]`, `#[attr[tokens]]`, and `#[attr(tokens)]`. + Compiler - Added tier 3 support\* for the `thumbv7neon-unknown-linux-musleabihf` target. - Added tier 3 support for the `aarch64-unknown-none-softfloat` target. - Added tier 3 support for the `mips64-unknown-linux-muslabi64`, and `mips64el-unknown-linux-muslabi64` targets. + Libraries - The `is_power_of_two` method on unsigned numeric types is now a `const` function. + Stabilized APIs - BTreeMap::get_key_value - HashMap::get_key_value - Option::as_deref_mut - Option::as_deref - Option::flatten - UdpSocket::peer_addr - f32::to_be_bytes - f32::to_le_bytes - f32::to_ne_bytes - f64::to_be_bytes - f64::to_le_bytes - f64::to_ne_bytes - f32::from_be_bytes - f32::from_le_bytes - f32::from_ne_bytes - f64::from_be_bytes - f64::from_le_bytes - f64::from_ne_bytes - mem::take - slice::repeat - todo! + Cargo - Cargo will now always display warnings, rather than only on fresh builds. - Feature flags (except `--all-features`) passed to a virtual workspace will now produce an error. Previously these flags were ignored. - You can now publish `dev-dependencies` without including a `version`. + Misc - You can now specify the `#[cfg(doctest)]` attribute to include an item only when running documentation tests with `rustdoc`. + Compatibility Notes - As previously announced, any previous NLL warnings in the 2015 edition are now hard errors. - The `include!` macro will now warn if it failed to include the entire file. The `include!` macro unintentionally only includes the first _expression_ in a file, and this can be unintuitive. This will become either a hard error in a future release, or the behavior may be fixed to include all expressions as expected. - Using `#[inline]` on function prototypes and consts now emits a warning under `unused_attribute` lint. Using `#[inline]` anywhere else inside traits or `extern` blocks now correctly emits a hard error. Update to version 1.39.0 + Language - You can now create async functions and blocks with async fn, async move {}, and async {} respectively, and you can now call .await on async expressions. - You can now use certain attributes on function, closure, and function pointer parameters. - You can now take shared references to bind-by-move patterns in the if guards of match arms. + Compiler - Added tier 3 support for the i686-unknown-uefi target. - Added tier 3 support for the sparc64-unknown-openbsd target. - rustc will now trim code snippets in diagnostics to fit in your terminal. - You can now pass --show-output argument to test binaries to print the output of successful tests. + For more details: https://github.com/rust-lang/rust/blob/stable/RELEASES.md#version-1390-2019 -11-07 - Switch to bundled version of libgit2 for now. libgit2-sys seems to expect using the bundled variant, which just seems to point to a snapshot of the master branch and doesn't match any released libgit2 (bsc#1154817). See: https://github.com/rust-lang/rust/issues/63476 and https://github.com/rust-lang/git2-rs/issues/458 for details. Update to version 1.38.0 + Language - The `#[global_allocator]` attribute can now be used in submodules. - The `#[deprecated]` attribute can now be used on macros. + Compiler - Added pipelined compilation support to `rustc`. This will improve compilation times in some cases. + Libraries - `ascii::EscapeDefault` now implements `Clone` and `Display`. - Derive macros for prelude traits (e.g. `Clone`, `Debug`, `Hash`) are now available at the same path as the trait. (e.g. The `Clone` derive macro is available at `std::clone::Clone`). This also makes all built-in macros available in `std`/`core` root. e.g. `std::include_bytes!`. - `str::Chars` now implements `Debug`. - `slice::{concat, connect, join}` now accepts `&[T]` in addition to `&T`. - `*const T` and `*mut T` now implement `marker::Unpin`. - `Arc<[T]>` and `Rc<[T]>` now implement `FromIterator<T>`. - Added euclidean remainder and division operations (`div_euclid`, `rem_euclid`) to all numeric primitives. Additionally `checked`, `overflowing`, and `wrapping` versions are available for all integer primitives. - `thread::AccessError` now implements `Clone`, `Copy`, `Eq`, `Error`, and `PartialEq`. - `iter::{StepBy, Peekable, Take}` now implement `DoubleEndedIterator`. + Stabilized APIs - `<*const T>::cast` - `<*mut T>::cast` - `Duration::as_secs_f32` - `Duration::as_secs_f64` - `Duration::div_f32` - `Duration::div_f64` - `Duration::from_secs_f32` - `Duration::from_secs_f64` - `Duration::mul_f32` - `Duration::mul_f64` - `any::type_name` + Cargo - Added pipelined compilation support to `cargo`. - You can now pass the `--features` option multiple times to enable multiple features. + Misc - `rustc` will now warn about some incorrect uses of `mem::{uninitialized, zeroed}` that are known to cause undefined behaviour. Update to version 1.37.0 + Language - #[must_use] will now warn if the type is contained in a tuple, Box, or an array and unused. - You can now use the `cfg` and `cfg_attr` attributes on generic parameters. - You can now use enum variants through type alias. e.g. You can write the following: ``` type MyOption = Option<u8>; fn increment_or_zero(x: MyOption) -> u8 { match x { MyOption::Some(y) => y + 1, MyOption::None => 0, } } ``` - You can now use `_` as an identifier for consts. e.g. You can write `const _: u32 = 5;`. - You can now use `#[repr(align(X)]` on enums. - The `?` Kleene macro operator is now available in the 2015 edition. + Compiler - You can now enable Profile-Guided Optimization with the `-C profile-generate` and `-C profile-use` flags. For more information on how to use profile guided optimization, please refer to the rustc book. - The `rust-lldb` wrapper script should now work again. + Libraries - `mem::MaybeUninit<T>` is now ABI-compatible with `T`. + Stabilized APIs - BufReader::buffer - BufWriter::buffer - Cell::from_mut - Cell<[T]>::as_slice_of_cells - Cell<slice>::as_slice_of_cells - DoubleEndedIterator::nth_back - Option::xor - Wrapping::reverse_bits - i128::reverse_bits - i16::reverse_bits - i32::reverse_bits - i64::reverse_bits - i8::reverse_bits - isize::reverse_bits - slice::copy_within - u128::reverse_bits - u16::reverse_bits - u32::reverse_bits - u64::reverse_bits - u8::reverse_bits - usize::reverse_bits + Cargo - Cargo.lock files are now included by default when publishing executable crates with executables. - You can now specify `default-run="foo"` in `[package]` to specify the default executable to use for `cargo run`. - cargo-vendor is now provided as a sub-command of cargo + Compatibility Notes - Using `...` for inclusive range patterns will now warn by default. Please transition your code to using the `..=` syntax for inclusive ranges instead. - Using a trait object without the `dyn` will now warn by default. Please transition your code to use `dyn Trait` for trait objects instead. Crab(String), Lobster(String), Person(String), let state = Creature::Crab("Ferris"); if let Creature::Crab(name) | Creature::Person(name) = state { println!("This creature's name is: {}", name); } unsafe { foo() } pub fn new(x: i32, y: i32) -> Self { Self(x, y) } pub fn is_origin(&self) -> bool { match self { Self(0, 0) => true, _ => false, } } Self: PartialOrd<Self> // can write `Self` instead of `List<T>` Nil, Cons(T, Box<Self>) // likewise here fn test(&self) { println!("one"); } //~ ERROR duplicate definitions with name `test` fn test(&self) { println!("two"); } * Basic procedural macros allowing custom `#[derive]`, aka "macros 1.1", are stable. This allows popular code-generating crates like Serde and Diesel to work ergonomically. [RFC 1681]. * [Tuple structs may be empty. Unary and empty tuple structs may be instantiated with curly braces][36868]. Part of [RFC 1506]. * [A number of minor changes to name resolution have been activated][37127]. They add up to more consistent semantics, allowing for future evolution of Rust macros. Specified in [RFC 1560], see its section on ["changes"] for details of what is different. The breaking changes here have been transitioned through the [`legacy_imports`] lint since 1.14, with no known regressions. * [In `macro_rules`, `path` fragments can now be parsed as type parameter bounds][38279] * [`?Sized` can be used in `where` clauses][37791] * [There is now a limit on the size of monomorphized types and it can be modified with the `#![type_size_limit]` crate attribute, similarly to the `#![recursion_limit]` attribute][37789] * [On Windows, the compiler will apply dllimport attributes when linking to extern functions][37973]. Additional attributes and flags can control which library kind is linked and its name. [RFC 1717]. * [Rust-ABI symbols are no longer exported from cdylibs][38117] * [The `--test` flag works with procedural macro crates][38107] * [Fix `extern "aapcs" fn` ABI][37814] * [The `-C no-stack-check` flag is deprecated][37636]. It does nothing. * [The `format!` expander recognizes incorrect `printf` and shell-style formatting directives and suggests the correct format][37613]. * [Only report one error for all unused imports in an import list][37456] * [Avoid unnecessary `mk_ty` calls in `Ty::super_fold_with`][37705] * [Avoid more unnecessary `mk_ty` calls in `Ty::super_fold_with`][37979] * [Don't clone in `UnificationTable::probe`][37848] * [Remove `scope_auxiliary` to cut RSS by 10%][37764] * [Use small vectors in type walker][37760] * [Macro expansion performance was improved][37701] * [Change `HirVec<P<T>>` to `HirVec<T>` in `hir::Expr`][37642] * [Replace FNV with a faster hash function][37229] https://raw.githubusercontent.com/rust-lang/rust/master/RELEASES.md rust-cbindgen is shipped in version 0.14.1. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-933=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): cargo-1.43.1-lp151.5.13.1 clippy-1.43.1-lp151.5.13.1 rls-1.43.1-lp151.5.13.1 rust-1.43.1-lp151.5.13.1 rust-analysis-1.43.1-lp151.5.13.1 rust-doc-1.43.1-lp151.5.13.1 rust-gdb-1.43.1-lp151.5.13.1 rust-std-static-1.43.1-lp151.5.13.1 rustfmt-1.43.1-lp151.5.13.1 - openSUSE Leap 15.1 (noarch): cargo-doc-1.43.1-lp151.5.13.1 rust-src-1.43.1-lp151.5.13.1 - openSUSE Leap 15.1 (x86_64): rust-cbindgen-0.14.1-lp151.8.2 References: https://www.suse.com/security/cve/CVE-2020-1967.html https://bugzilla.suse.com/1115645 https://bugzilla.suse.com/1154817 https://bugzilla.suse.com/1173202

1 0

openSUSE-SU-2020:0931-1: important: Security update for python3
by opensuse-security＠opensuse.org 05 Jul '20

05 Jul '20

openSUSE Security Update: Security update for python3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0931-1 Rating: important References: #1173274 Cross-References: CVE-2020-14422 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python3 fixes the following issues: - CVE-2020-14422: Fixed an improper computation of hash values in the IPv4Interface and IPv6Interface could have led to denial of service (bsc#1173274). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-931=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libpython3_6m1_0-3.6.10-lp151.6.21.1 libpython3_6m1_0-debuginfo-3.6.10-lp151.6.21.1 python3-3.6.10-lp151.6.21.1 python3-base-3.6.10-lp151.6.21.1 python3-base-debuginfo-3.6.10-lp151.6.21.1 python3-base-debugsource-3.6.10-lp151.6.21.1 python3-curses-3.6.10-lp151.6.21.1 python3-curses-debuginfo-3.6.10-lp151.6.21.1 python3-dbm-3.6.10-lp151.6.21.1 python3-dbm-debuginfo-3.6.10-lp151.6.21.1 python3-debuginfo-3.6.10-lp151.6.21.1 python3-debugsource-3.6.10-lp151.6.21.1 python3-devel-3.6.10-lp151.6.21.1 python3-devel-debuginfo-3.6.10-lp151.6.21.1 python3-idle-3.6.10-lp151.6.21.1 python3-testsuite-3.6.10-lp151.6.21.1 python3-testsuite-debuginfo-3.6.10-lp151.6.21.1 python3-tk-3.6.10-lp151.6.21.1 python3-tk-debuginfo-3.6.10-lp151.6.21.1 python3-tools-3.6.10-lp151.6.21.1 - openSUSE Leap 15.1 (x86_64): libpython3_6m1_0-32bit-3.6.10-lp151.6.21.1 libpython3_6m1_0-32bit-debuginfo-3.6.10-lp151.6.21.1 python3-32bit-3.6.10-lp151.6.21.1 python3-32bit-debuginfo-3.6.10-lp151.6.21.1 python3-base-32bit-3.6.10-lp151.6.21.1 python3-base-32bit-debuginfo-3.6.10-lp151.6.21.1 References: https://www.suse.com/security/cve/CVE-2020-14422.html https://bugzilla.suse.com/1173274

1 0

openSUSE-RU-2020:0930-1: moderate: Recommended update for resource-agents
by maintenance＠opensuse.org 05 Jul '20

05 Jul '20

openSUSE Recommended Update: Recommended update for resource-agents ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0930-1 Rating: moderate References: #1162978 #1170270 #1172734 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for resource-agents fixes the following issues: - Fixed a bug where the pulling of images was stuck (bsc#1170270) - Added a fix for defect file /usr/lib/ocf/resource.d/heartbeat/clvm (bsc#1172734) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-930=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): ldirectord-4.3.0184.6ee15eb2-lp151.3.24.1 resource-agents-4.3.0184.6ee15eb2-lp151.3.24.1 resource-agents-debuginfo-4.3.0184.6ee15eb2-lp151.3.24.1 resource-agents-debugsource-4.3.0184.6ee15eb2-lp151.3.24.1 - openSUSE Leap 15.1 (noarch): monitoring-plugins-metadata-4.3.0184.6ee15eb2-lp151.3.24.1 References: https://bugzilla.suse.com/1162978 https://bugzilla.suse.com/1170270 https://bugzilla.suse.com/1172734

1 0

openSUSE-RU-2020:0929-1: moderate: Recommended update for dracut
by maintenance＠opensuse.org 05 Jul '20

05 Jul '20

openSUSE Recommended Update: Recommended update for dracut ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0929-1 Rating: moderate References: #1161573 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for dracut fixes the following issue: - Fix dracut timeout on missing root device (bsc#1161573) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-929=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): dracut-044.2-lp151.2.21.1 dracut-debuginfo-044.2-lp151.2.21.1 dracut-debugsource-044.2-lp151.2.21.1 dracut-fips-044.2-lp151.2.21.1 dracut-ima-044.2-lp151.2.21.1 dracut-tools-044.2-lp151.2.21.1 References: https://bugzilla.suse.com/1161573

1 0

openSUSE-SU-2020:0928-1: important: Security update for chocolate-doom
by opensuse-security＠opensuse.org 05 Jul '20

05 Jul '20

openSUSE Security Update: Security update for chocolate-doom ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0928-1 Rating: important References: #1173595 Cross-References: CVE-2020-14983 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for chocolate-doom to version 3.0.1 fixes the following issues: - CVE-2020-14983: Fixed a stack-based buffer overflow in the networking code (boo#1173595). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-928=1 Package List: - openSUSE Leap 15.1 (noarch): chocolate-doom-bash-completion-3.0.1-lp151.3.3.1 - openSUSE Leap 15.1 (x86_64): chocolate-doom-3.0.1-lp151.3.3.1 chocolate-doom-debuginfo-3.0.1-lp151.3.3.1 chocolate-doom-debugsource-3.0.1-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2020-14983.html https://bugzilla.suse.com/1173595

1 0

openSUSE-RU-2020:0927-1: important: Recommended update for mdadm
by maintenance＠opensuse.org 04 Jul '20

04 Jul '20

openSUSE Recommended Update: Recommended update for mdadm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0927-1 Rating: important References: #1163727 #1168953 #1173137 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for mdadm fixes the following issues: - OnCalendar format fix of mdcheck_start.timer (bsc#1173137) - Detail: adding sync status for cluster device (bsc#1163727) - Monitor: improve check_one_sharer() for checking duplicated process (bsc#1168953) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-927=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): mdadm-4.1-lp151.4.12.1 mdadm-debuginfo-4.1-lp151.4.12.1 mdadm-debugsource-4.1-lp151.4.12.1 References: https://bugzilla.suse.com/1163727 https://bugzilla.suse.com/1168953 https://bugzilla.suse.com/1173137

1 0

openSUSE-RU-2020:0926-1: moderate: Recommended update for icewm-theme-branding
by maintenance＠opensuse.org 04 Jul '20

04 Jul '20

openSUSE Recommended Update: Recommended update for icewm-theme-branding ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0926-1 Rating: moderate References: #1170420 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for icewm-theme-branding fixes the following issues: Fix the "zypper dup" issue on Leap by explicitly obsoleting icewm-config-upstream. (bsc#1170420) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-926=1 Package List: - openSUSE Leap 15.1 (noarch): icewm-theme-branding-1.2.4-lp151.3.9.1 References: https://bugzilla.suse.com/1170420

1 0

openSUSE-OU-2020:0923-1: Recommended update for python-scipy
by maintenance＠opensuse.org 03 Jul '20

03 Jul '20

openSUSE Optional Update: Recommended update for python-scipy ______________________________________________________________________________ Announcement ID: openSUSE-OU-2020:0923-1 Rating: low References: #1171510 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update for python-scipy doesn't fix any user visible issues, but improves the package building process. This update was imported from the SUSE:SLE-15-SP1:Update update project. This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Optional Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-923=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): python2-scipy-1.2.0-bp151.2.3.1 python3-scipy-1.2.0-bp151.2.3.1 - openSUSE Backports SLE-15-SP1 (ppc64le): python2-scipy-gnu-hpc-1.2.0-bp151.2.3.1 python2-scipy_1_2_0-gnu-hpc-1.2.0-bp151.2.3.1 python3-scipy-gnu-hpc-1.2.0-bp151.2.3.1 python3-scipy_1_2_0-gnu-hpc-1.2.0-bp151.2.3.1 References: https://bugzilla.suse.com/1171510

1 0

openSUSE-SU-2020:0925-1: moderate: Security update for Virtualbox
by opensuse-security＠opensuse.org 03 Jul '20

03 Jul '20

openSUSE Security Update: Security update for Virtualbox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0925-1 Rating: moderate References: #1169628 Cross-References: CVE-2020-2741 CVE-2020-2742 CVE-2020-2743 CVE-2020-2748 CVE-2020-2758 CVE-2020-2894 CVE-2020-2902 CVE-2020-2905 CVE-2020-2907 CVE-2020-2908 CVE-2020-2909 CVE-2020-2910 CVE-2020-2911 CVE-2020-2913 CVE-2020-2914 CVE-2020-2929 CVE-2020-2951 CVE-2020-2958 CVE-2020-2959 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 19 vulnerabilities is now available. Description: Virtualbox was updated to 6.0.22 (released May 15 2020 by Oracle) This is a maintenance release. The following items were fixed and/or added: Guest Additions: Build problems fix with Oracle Linux 8.2 (Red Hat compatible kernel) / Red Hat Enterprise Linux 8.2 / CentOS 8.2 (bug #19391) Guest Control/VBoxManage: fix handling of multiple environment variables supplied to 'VBoxManage guestcontrol VM run' (6.1.6/6.0.20 regression; bug #19518) Version bump to 6.0.20 (released April 14 2020 by Oracle) This is a maintenance release. The following items were fixed and/or added: - USB: Multiple enhancements improving prformance and stability - VBoxManage: Multiple fixes for guestcontrol command - Graphics: Enhancements in 2D and 3D acceleration and rendering - API: Fix for exception handling bug in Python bindings - Linux host and guest: Support Linux kernel 5.6 (bug #19312) This update fixes the following security issues: CVE-2020-2741, CVE-2020-2742, CVE-2020-2743, CVE-2020-2748, CVE-2020-2758, CVE-2020-2894, CVE-2020-2902, CVE-2020-2905, CVE-2020-2907, CVE-2020-2908, CVE-2020-2909, CVE-2020-2910, CVE-2020-2911, CVE-2020-2913, CVE-2020-2914, CVE-2020-2929, CVE-2020-2951, CVE-2020-2958, CVE-2020-2959 (bsc#1169628) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-925=1 Package List: - openSUSE Leap 15.1 (noarch): virtualbox-guest-desktop-icons-6.0.22-lp151.2.15.1 virtualbox-guest-source-6.0.22-lp151.2.15.1 virtualbox-host-source-6.0.22-lp151.2.15.1 - openSUSE Leap 15.1 (x86_64): python3-virtualbox-6.0.22-lp151.2.15.1 python3-virtualbox-debuginfo-6.0.22-lp151.2.15.1 virtualbox-6.0.22-lp151.2.15.1 virtualbox-debuginfo-6.0.22-lp151.2.15.1 virtualbox-debugsource-6.0.22-lp151.2.15.1 virtualbox-devel-6.0.22-lp151.2.15.1 virtualbox-guest-tools-6.0.22-lp151.2.15.1 virtualbox-guest-tools-debuginfo-6.0.22-lp151.2.15.1 virtualbox-guest-x11-6.0.22-lp151.2.15.1 virtualbox-guest-x11-debuginfo-6.0.22-lp151.2.15.1 virtualbox-kmp-default-6.0.22_k4.12.14_lp151.28.52-lp151.2.15.1 virtualbox-kmp-default-debuginfo-6.0.22_k4.12.14_lp151.28.52-lp151.2.15.1 virtualbox-qt-6.0.22-lp151.2.15.1 virtualbox-qt-debuginfo-6.0.22-lp151.2.15.1 virtualbox-vnc-6.0.22-lp151.2.15.1 virtualbox-websrv-6.0.22-lp151.2.15.1 virtualbox-websrv-debuginfo-6.0.22-lp151.2.15.1 References: https://www.suse.com/security/cve/CVE-2020-2741.html https://www.suse.com/security/cve/CVE-2020-2742.html https://www.suse.com/security/cve/CVE-2020-2743.html https://www.suse.com/security/cve/CVE-2020-2748.html https://www.suse.com/security/cve/CVE-2020-2758.html https://www.suse.com/security/cve/CVE-2020-2894.html https://www.suse.com/security/cve/CVE-2020-2902.html https://www.suse.com/security/cve/CVE-2020-2905.html https://www.suse.com/security/cve/CVE-2020-2907.html https://www.suse.com/security/cve/CVE-2020-2908.html https://www.suse.com/security/cve/CVE-2020-2909.html https://www.suse.com/security/cve/CVE-2020-2910.html https://www.suse.com/security/cve/CVE-2020-2911.html https://www.suse.com/security/cve/CVE-2020-2913.html https://www.suse.com/security/cve/CVE-2020-2914.html https://www.suse.com/security/cve/CVE-2020-2929.html https://www.suse.com/security/cve/CVE-2020-2951.html https://www.suse.com/security/cve/CVE-2020-2958.html https://www.suse.com/security/cve/CVE-2020-2959.html https://bugzilla.suse.com/1169628

1 0

openSUSE-RU-2020:0924-1: moderate: Recommended update for smtube
by maintenance＠opensuse.org 03 Jul '20

03 Jul '20

openSUSE Recommended Update: Recommended update for smtube ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0924-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for smtube fixes the following issues: Update to version 20.6.0: * New option in preferences to select the site to use as homepage. * The internal youtube code has been removed and now smtube just uses youtube-dl to get the video urls. * New option in the help menu to help install youtube-dl. - Youtube-dl is not required, so changed Suggest: youtube-dl to Required: youtube-dl Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-924=1 Package List: - openSUSE Leap 15.2 (noarch): smtube-lang-20.6.0-lp152.2.3.1 - openSUSE Leap 15.2 (x86_64): smtube-20.6.0-lp152.2.3.1 smtube-debuginfo-20.6.0-lp152.2.3.1 smtube-debugsource-20.6.0-lp152.2.3.1 References:

1 0

openSUSE-RU-2020:0919-1: moderate: Recommended update for strawberry
by maintenance＠opensuse.org 03 Jul '20

03 Jul '20

openSUSE Recommended Update: Recommended update for strawberry ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0919-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for strawberry fixes the following issues: strawberry was updated to version 0.6.12: * Bugfixes: + Fixed height of about dialog. * Enhancements: + Only save settings for pages that actually has been changed. + Replaced use of deprecated Qt functionality as of 5.15. + Made scrobbler show error dialog for all errors when show error dialog option is on. + Dont append disc to album titles for Subsonic and Tidal. + Sort folders added from file view. + Changed default collection grouping to album - disc. This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-919=1 Package List: - openSUSE Backports SLE-15-SP1 (x86_64): strawberry-0.6.12-bp151.2.25.1 References:

1 0

openSUSE-RU-2020:0918-1: moderate: Recommended update for krb5
by maintenance＠opensuse.org 03 Jul '20

03 Jul '20

openSUSE Recommended Update: Recommended update for krb5 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0918-1 Rating: moderate References: #1081947 #1144047 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for krb5 contains the following fixes: - Integrate pam_keyinit PAM module, ksu-pam.d. (bsc#1081947) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-918=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): krb5-1.16.3-lp152.5.3.1 krb5-client-1.16.3-lp152.5.3.1 krb5-client-debuginfo-1.16.3-lp152.5.3.1 krb5-debuginfo-1.16.3-lp152.5.3.1 krb5-debugsource-1.16.3-lp152.5.3.1 krb5-devel-1.16.3-lp152.5.3.1 krb5-mini-1.16.3-lp152.5.4.1 krb5-mini-debuginfo-1.16.3-lp152.5.4.1 krb5-mini-debugsource-1.16.3-lp152.5.4.1 krb5-mini-devel-1.16.3-lp152.5.4.1 krb5-plugin-kdb-ldap-1.16.3-lp152.5.3.1 krb5-plugin-kdb-ldap-debuginfo-1.16.3-lp152.5.3.1 krb5-plugin-preauth-otp-1.16.3-lp152.5.3.1 krb5-plugin-preauth-otp-debuginfo-1.16.3-lp152.5.3.1 krb5-plugin-preauth-pkinit-1.16.3-lp152.5.3.1 krb5-plugin-preauth-pkinit-debuginfo-1.16.3-lp152.5.3.1 krb5-server-1.16.3-lp152.5.3.1 krb5-server-debuginfo-1.16.3-lp152.5.3.1 - openSUSE Leap 15.2 (x86_64): krb5-32bit-1.16.3-lp152.5.3.1 krb5-32bit-debuginfo-1.16.3-lp152.5.3.1 krb5-devel-32bit-1.16.3-lp152.5.3.1 References: https://bugzilla.suse.com/1081947 https://bugzilla.suse.com/1144047

1 0

openSUSE-RU-2020:0920-1: moderate: Recommended update for fmt
by maintenance＠opensuse.org 03 Jul '20

03 Jul '20

openSUSE Recommended Update: Recommended update for fmt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0920-1 Rating: moderate References: #1173270 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for fmt fixes the following issues: - Fixed incorrect pkg-config file paths (boo#1173270) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-920=1 Package List: - openSUSE Leap 15.2 (x86_64): fmt-debugsource-6.2.1-lp152.2.3.1 fmt-devel-6.2.1-lp152.2.3.1 libfmt6-6.2.1-lp152.2.3.1 libfmt6-debuginfo-6.2.1-lp152.2.3.1 References: https://bugzilla.suse.com/1173270

1 0

openSUSE-RU-2020:0921-1: important: Recommended update for lvm2
by maintenance＠opensuse.org 03 Jul '20

03 Jul '20

openSUSE Recommended Update: Recommended update for lvm2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0921-1 Rating: important References: #1172566 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for lvm2 fixes the following issues: - Fix potential data loss problem with LVM cache (bsc#1172566) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-921=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): device-mapper-1.02.163-lp152.7.3.1 device-mapper-debuginfo-1.02.163-lp152.7.3.1 device-mapper-devel-1.02.163-lp152.7.3.1 libdevmapper-event1_03-1.02.163-lp152.7.3.1 libdevmapper-event1_03-debuginfo-1.02.163-lp152.7.3.1 libdevmapper1_03-1.02.163-lp152.7.3.1 libdevmapper1_03-debuginfo-1.02.163-lp152.7.3.1 liblvm2cmd2_03-2.03.05-lp152.7.3.1 liblvm2cmd2_03-debuginfo-2.03.05-lp152.7.3.1 lvm2-2.03.05-lp152.7.3.1 lvm2-debuginfo-2.03.05-lp152.7.3.1 lvm2-debugsource-2.03.05-lp152.7.3.1 lvm2-devel-2.03.05-lp152.7.3.1 lvm2-device-mapper-debugsource-2.03.05-lp152.7.3.1 lvm2-lockd-2.03.05-lp152.7.3.1 lvm2-lockd-debuginfo-2.03.05-lp152.7.3.1 lvm2-lvmlockd-debugsource-2.03.05-lp152.7.3.1 lvm2-testsuite-2.03.05-lp152.7.3.1 lvm2-testsuite-debuginfo-2.03.05-lp152.7.3.1 - openSUSE Leap 15.2 (x86_64): device-mapper-devel-32bit-1.02.163-lp152.7.3.1 libdevmapper-event1_03-32bit-1.02.163-lp152.7.3.1 libdevmapper-event1_03-32bit-debuginfo-1.02.163-lp152.7.3.1 libdevmapper1_03-32bit-1.02.163-lp152.7.3.1 libdevmapper1_03-32bit-debuginfo-1.02.163-lp152.7.3.1 References: https://bugzilla.suse.com/1172566

1 0

openSUSE-RU-2020:0922-1: moderate: Recommended update for python-typing_extensions
by maintenance＠opensuse.org 03 Jul '20

03 Jul '20

openSUSE Recommended Update: Recommended update for python-typing_extensions ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0922-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for python-typing_extensions fixes the following issues: Update to version 3.7.4.2 * official support for Python 3.8 and 3.9 Update to version 3.7.4.1: + Fix isinstance() with generic protocol subclasses after subscripting + Fix tests for non-default interpreters + Use environment marker to specify typing dependency + Fix unions of protocols on Python 2 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-922=1 Package List: - openSUSE Leap 15.2 (noarch): python2-typing_extensions-3.7.4.2-lp152.4.3.1 python3-typing_extensions-3.7.4.2-lp152.4.3.1 References:

1 0

openSUSE-SU-2020:0917-1: important: Security update for opera
by opensuse-security＠opensuse.org 02 Jul '20

02 Jul '20

openSUSE Security Update: Security update for opera ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0917-1 Rating: important References: Cross-References: CVE-2020-6464 CVE-2020-6831 Affected Products: openSUSE Leap 15.2:NonFree ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for opera fixes the following issues: Opera was updated to version 68.0.3618.104 - CHR-7909 Update chromium on desktop-stable-81-3618 to 81.0.4044.138 - CVE-2020-6831, CVE-2020-6464 - DNA-85609 [Mac] Tabs shrinking & disappearing - DNA-85629 Crash at opera::DownloadButtonPanel::ShouldShowCancelButton() - DNA-85669 Add mocking of AddressDropdownModel in AddressBarControllerTest - DNA-85678 Wrong badge icon on pages with mixed content on desktop-stable-81-3618 - DNA-85820 Flags are blue in default [D] state after restart - DNA-85822 Full screen snap on pkobp.pl - DNA-86077 Problem to upload .JPG file as an wallpaper - DNA-86165 Downloads list doesn’t returns to its original state after clearing search filter - DNA-86236 [Mac] Plus button click area too small - DNA-86241 X tab button is not visible - DNA-86217 Fix performance issue with Background Worker Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2:NonFree: zypper in -t patch openSUSE-2020-917=1 Package List: - openSUSE Leap 15.2:NonFree (x86_64): opera-68.0.3618.104-lp152.2.6.1 References: https://www.suse.com/security/cve/CVE-2020-6464.html https://www.suse.com/security/cve/CVE-2020-6831.html

1 0

openSUSE-RU-2020:0916-1: moderate: Recommended update for python3-gcemetadata
by maintenance＠opensuse.org 01 Jul '20

01 Jul '20

openSUSE Recommended Update: Recommended update for python3-gcemetadata ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0916-1 Rating: moderate References: #1173136 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python3-gcemetadata fixes the following issues: Update to version 1.0.4 (bsc#1173136) - Fixed typo, missing "=" for "identity" option in processed command line options causes mis-identification of instance as missing identity data access Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-916=1 Package List: - openSUSE Leap 15.2 (noarch): python3-gcemetadata-1.0.4-lp152.2.1 References: https://bugzilla.suse.com/1173136

1 0