July 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2020:0998-1: Recommended update for python-numpy
by maintenance＠opensuse.org 18 Jul '20

18 Jul '20

openSUSE Recommended Update: Recommended update for python-numpy ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0998-1 Rating: low References: #1166678 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-numpy fixes the following issues: - Fixes a file conflict with /usr/bin/f2py (bsc#1166678) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-998=1 Package List: - openSUSE Leap 15.1 (x86_64): python-numpy-debugsource-1.17.3-lp151.5.9.1 python-numpy_1_17_3-gnu-hpc-debugsource-1.17.3-lp151.5.9.1 python3-numpy-1.17.3-lp151.5.9.1 python3-numpy-debuginfo-1.17.3-lp151.5.9.1 python3-numpy-devel-1.17.3-lp151.5.9.1 python3-numpy-gnu-hpc-1.17.3-lp151.5.9.1 python3-numpy-gnu-hpc-devel-1.17.3-lp151.5.9.1 python3-numpy_1_17_3-gnu-hpc-1.17.3-lp151.5.9.1 python3-numpy_1_17_3-gnu-hpc-debuginfo-1.17.3-lp151.5.9.1 python3-numpy_1_17_3-gnu-hpc-devel-1.17.3-lp151.5.9.1 References: https://bugzilla.suse.com/1166678

1 0

openSUSE-RU-2020:0993-1: moderate: Recommended update for grub2
by maintenance＠opensuse.org 18 Jul '20

18 Jul '20

openSUSE Recommended Update: Recommended update for grub2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0993-1 Rating: moderate References: #1166513 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for grub2 fixes the following issue: - Skip not needed zfcpdump kernel from the grub boot menu. (bsc#1166513) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-993=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): grub2-2.02-lp151.21.18.1 grub2-branding-upstream-2.02-lp151.21.18.1 grub2-debuginfo-2.02-lp151.21.18.1 grub2-debugsource-2.02-lp151.21.18.1 - openSUSE Leap 15.1 (noarch): grub2-i386-efi-2.02-lp151.21.18.1 grub2-i386-pc-2.02-lp151.21.18.1 grub2-i386-xen-2.02-lp151.21.18.1 grub2-snapper-plugin-2.02-lp151.21.18.1 grub2-systemd-sleep-plugin-2.02-lp151.21.18.1 grub2-x86_64-efi-2.02-lp151.21.18.1 grub2-x86_64-xen-2.02-lp151.21.18.1 References: https://bugzilla.suse.com/1166513

1 0

openSUSE-SU-2020:0994-1: important: Security update for slirp4netns
by opensuse-security＠opensuse.org 18 Jul '20

18 Jul '20

openSUSE Security Update: Security update for slirp4netns ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0994-1 Rating: important References: #1172380 Cross-References: CVE-2020-10756 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for slirp4netns fixes the following issues: - Update to 0.4.7 (bsc#1172380) * libslirp: update to v4.3.1 (Fix CVE-2020-10756) * Fix config_from_options() to correctly enable ipv6 This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-994=1 Package List: - openSUSE Leap 15.2 (x86_64): slirp4netns-0.4.7-lp152.2.3.1 slirp4netns-debuginfo-0.4.7-lp152.2.3.1 slirp4netns-debugsource-0.4.7-lp152.2.3.1 References: https://www.suse.com/security/cve/CVE-2020-10756.html https://bugzilla.suse.com/1172380

1 0

openSUSE-SU-2020:0997-1: moderate: Security update for openconnect
by opensuse-security＠opensuse.org 18 Jul '20

18 Jul '20

openSUSE Security Update: Security update for openconnect ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0997-1 Rating: moderate References: #1171862 Cross-References: CVE-2020-12823 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for openconnect fixes the following issues: - CVE-2020-12823: Fixed a buffer overflow via crafted certificate data which could have led to denial of service (bsc#1171862). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-997=1 Package List: - openSUSE Leap 15.1 (x86_64): openconnect-7.08-lp151.6.9.1 openconnect-debuginfo-7.08-lp151.6.9.1 openconnect-debugsource-7.08-lp151.6.9.1 openconnect-devel-7.08-lp151.6.9.1 openconnect-doc-7.08-lp151.6.9.1 - openSUSE Leap 15.1 (noarch): openconnect-lang-7.08-lp151.6.9.1 References: https://www.suse.com/security/cve/CVE-2020-12823.html https://bugzilla.suse.com/1171862

1 0

openSUSE-RU-2020:0995-1: moderate: Recommended update for open-vm-tools
by maintenance＠opensuse.org 18 Jul '20

18 Jul '20

openSUSE Recommended Update: Recommended update for open-vm-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0995-1 Rating: moderate References: #1171003 #1171764 #1171765 #1172693 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for open-vm-tools fixes the following issues: - Update to version 11.1.0 (bsc#1171764, jsc#ECO-2164) This version provides a new 'Service Discovery' plugin. (bsc#1171765) - Provide a better pam configuration and authentication. (bsc#1171003, bsc#1172693) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-995=1 Package List: - openSUSE Leap 15.2 (x86_64): libvmtools-devel-11.1.0-lp152.3.3.1 libvmtools0-11.1.0-lp152.3.3.1 libvmtools0-debuginfo-11.1.0-lp152.3.3.1 open-vm-tools-11.1.0-lp152.3.3.1 open-vm-tools-debuginfo-11.1.0-lp152.3.3.1 open-vm-tools-debugsource-11.1.0-lp152.3.3.1 open-vm-tools-desktop-11.1.0-lp152.3.3.1 open-vm-tools-desktop-debuginfo-11.1.0-lp152.3.3.1 open-vm-tools-sdmp-11.1.0-lp152.3.3.1 open-vm-tools-sdmp-debuginfo-11.1.0-lp152.3.3.1 References: https://bugzilla.suse.com/1171003 https://bugzilla.suse.com/1171764 https://bugzilla.suse.com/1171765 https://bugzilla.suse.com/1172693

1 0

openSUSE-SU-2020:1001-1: moderate: Security update for rubygem-puma
by opensuse-security＠opensuse.org 18 Jul '20

18 Jul '20

openSUSE Security Update: Security update for rubygem-puma ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1001-1 Rating: moderate References: #1172175 #1172176 Cross-References: CVE-2020-11076 CVE-2020-11077 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for rubygem-puma to version 4.3.5 fixes the following issues: - CVE-2020-11077: Fixed a HTTP smuggling issue related to proxy usage (bsc#1172175). - CVE-2020-11076: Fixed a HTTP smuggling issue when using an invalid transfer-encoding header (bsc#1172176). - Disabled TLSv1.0 and TLSv1.1 (jsc#SLE-6965). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1001=1 Package List: - openSUSE Leap 15.2 (x86_64): ruby2.5-rubygem-puma-4.3.5-lp152.4.3.1 ruby2.5-rubygem-puma-debuginfo-4.3.5-lp152.4.3.1 ruby2.5-rubygem-puma-doc-4.3.5-lp152.4.3.1 rubygem-puma-debugsource-4.3.5-lp152.4.3.1 References: https://www.suse.com/security/cve/CVE-2020-11076.html https://www.suse.com/security/cve/CVE-2020-11077.html https://bugzilla.suse.com/1172175 https://bugzilla.suse.com/1172176

1 0

openSUSE-SU-2020:0996-1: important: Security update for google-compute-engine
by opensuse-security＠opensuse.org 18 Jul '20

18 Jul '20

openSUSE Security Update: Security update for google-compute-engine ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0996-1 Rating: important References: #1169978 #1173258 Cross-References: CVE-2020-8903 CVE-2020-8907 CVE-2020-8933 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for google-compute-engine fixes the following issues: - Don't enable and start google-network-daemon.service when it's already installed (bsc#1169978) + Do not add the created user to the adm (CVE-2020-8903), docker (CVE-2020-8907), or lxd (CVE-2020-8933) groups if they exist (bsc#1173258) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-996=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): google-compute-engine-debugsource-20190801-lp151.2.25.1 google-compute-engine-oslogin-20190801-lp151.2.25.1 google-compute-engine-oslogin-debuginfo-20190801-lp151.2.25.1 - openSUSE Leap 15.1 (x86_64): google-compute-engine-oslogin-32bit-20190801-lp151.2.25.1 google-compute-engine-oslogin-32bit-debuginfo-20190801-lp151.2.25.1 - openSUSE Leap 15.1 (noarch): google-compute-engine-init-20190801-lp151.2.25.1 References: https://www.suse.com/security/cve/CVE-2020-8903.html https://www.suse.com/security/cve/CVE-2020-8907.html https://www.suse.com/security/cve/CVE-2020-8933.html https://bugzilla.suse.com/1169978 https://bugzilla.suse.com/1173258

1 0

openSUSE-SU-2020:0999-1: important: Security update for xrdp
by opensuse-security＠opensuse.org 18 Jul '20

18 Jul '20

openSUSE Security Update: Security update for xrdp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0999-1 Rating: important References: #1173580 Cross-References: CVE-2020-4044 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for xrdp fixes the following issues: - Security fixes (bsc#1173580, CVE-2020-4044): + Add patches: * xrdp-cve-2020-4044-fix-0.patch * xrdp-cve-2020-4044-fix-1.patch + Rebase SLE patch: * xrdp-fate318398-change-expired-password.patch This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-999=1 Package List: - openSUSE Leap 15.1 (x86_64): libpainter0-0.9.6-lp151.4.6.1 libpainter0-debuginfo-0.9.6-lp151.4.6.1 librfxencode0-0.9.6-lp151.4.6.1 librfxencode0-debuginfo-0.9.6-lp151.4.6.1 xrdp-0.9.6-lp151.4.6.1 xrdp-debuginfo-0.9.6-lp151.4.6.1 xrdp-debugsource-0.9.6-lp151.4.6.1 xrdp-devel-0.9.6-lp151.4.6.1 References: https://www.suse.com/security/cve/CVE-2020-4044.html https://bugzilla.suse.com/1173580

1 0

openSUSE-RU-2020:1000-1: moderate: Recommended update for armagetron
by maintenance＠opensuse.org 18 Jul '20

18 Jul '20

openSUSE Recommended Update: Recommended update for armagetron ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1000-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for armagetron fixes the following issues: Update to 0.2.8.3.5. No changelog. This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1000=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): armagetron-0.2.8.3.5-bp151.4.3.1 References:

1 0

openSUSE-RU-2020:0991-1: moderate: Recommended update for kio
by maintenance＠opensuse.org 18 Jul '20

18 Jul '20

openSUSE Recommended Update: Recommended update for kio ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0991-1 Rating: moderate References: #1174169 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for kio fixes the following issues: - Fixed copying to protocols which don't always report available space (boo#1174169): Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-991=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): kio-5.71.0-lp152.2.3.1 kio-core-5.71.0-lp152.2.3.1 kio-core-debuginfo-5.71.0-lp152.2.3.1 kio-debuginfo-5.71.0-lp152.2.3.1 kio-debugsource-5.71.0-lp152.2.3.1 kio-devel-5.71.0-lp152.2.3.1 kio-devel-debuginfo-5.71.0-lp152.2.3.1 - openSUSE Leap 15.2 (noarch): kio-lang-5.71.0-lp152.2.3.1 - openSUSE Leap 15.2 (x86_64): kio-32bit-5.71.0-lp152.2.3.1 kio-32bit-debuginfo-5.71.0-lp152.2.3.1 kio-core-32bit-5.71.0-lp152.2.3.1 kio-core-32bit-debuginfo-5.71.0-lp152.2.3.1 kio-devel-32bit-5.71.0-lp152.2.3.1 kio-devel-32bit-debuginfo-5.71.0-lp152.2.3.1 References: https://bugzilla.suse.com/1174169

1 0