July 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2020:0992-1: moderate: Recommended update for msr-safe
by maintenance＠opensuse.org 18 Jul '20

18 Jul '20

openSUSE Recommended Update: Recommended update for msr-safe ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0992-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for msr-safe fixes the following issues: This update introduces the msr-safe tool. - Add system account msr for msr-safe tool Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-992=1 Package List: - openSUSE Leap 15.2 (x86_64): msr-safe-debugsource-1.4.0-lp152.2.1 msr-safe-kmp-default-1.4.0_k5.3.18_lp152.20.7-lp152.2.1 msr-safe-kmp-default-debuginfo-1.4.0_k5.3.18_lp152.20.7-lp152.2.1 msr-safe-kmp-preempt-1.4.0_k5.3.18_lp152.20.7-lp152.2.1 msr-safe-kmp-preempt-debuginfo-1.4.0_k5.3.18_lp152.20.7-lp152.2.1 system-user-msr-1.4.0-lp152.2.1 system-user-msr-debuginfo-1.4.0-lp152.2.1 References:

1 0

openSUSE-SU-2020:0987-1: important: Security update for slirp4netns
by opensuse-security＠opensuse.org 18 Jul '20

18 Jul '20

openSUSE Security Update: Security update for slirp4netns ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0987-1 Rating: important References: #1172380 Cross-References: CVE-2020-10756 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for slirp4netns fixes the following issues: - Update to 0.4.7 (bsc#1172380) * libslirp: update to v4.3.1 (Fix CVE-2020-10756) * Fix config_from_options() to correctly enable ipv6 This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-987=1 Package List: - openSUSE Leap 15.1 (x86_64): slirp4netns-0.4.7-lp151.2.12.1 slirp4netns-debuginfo-0.4.7-lp151.2.12.1 slirp4netns-debugsource-0.4.7-lp151.2.12.1 References: https://www.suse.com/security/cve/CVE-2020-10756.html https://bugzilla.suse.com/1172380

1 0

openSUSE-RU-2020:0986-1: moderate: Recommended update for salt
by maintenance＠opensuse.org 18 Jul '20

18 Jul '20

openSUSE Recommended Update: Recommended update for salt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0986-1 Rating: moderate References: #1159284 #1165572 #1168340 #1169604 #1170104 #1171906 #1172075 #1173072 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 8 recommended fixes can now be installed. Description: This update for salt contains the following fixes: - Require python3-distro only for TW (bsc#1173072) - Various virt backports from 3000.2 including blackening commit for the virt module and state. - Avoid traceback on debug logging for swarm module. (bsc#1172075) - Add publish_batch to ClearFuncs exposed methods. - zypperpkg: filter patterns that start with dot. (bsc#1171906) - Batch mode now also correctly provides return value. (bsc#1168340) - Add docker.logout to docker execution module. (bsc#1165572) - Testsuite fix. - Add option to enable/disable force refresh for zypper. - Python3.8 compatibility changes. - Prevent sporious "salt-api" stuck processes when managing SSH minions because of logging deadlock. (bsc#1159284) - Avoid segfault from "salt-api" under certain conditions of heavy load managing SSH minions. (bsc#1169604) - Revert broken changes to slspath made on Salt 3000 (saltstack/salt#56341). (bsc#1170104) - Returns a the list of IPs filtered by the optional network list This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-986=1 Package List: - openSUSE Leap 15.2 (noarch): salt-bash-completion-3000-lp152.3.3.1 salt-fish-completion-3000-lp152.3.3.1 salt-zsh-completion-3000-lp152.3.3.1 - openSUSE Leap 15.2 (x86_64): python2-salt-3000-lp152.3.3.1 python3-salt-3000-lp152.3.3.1 salt-3000-lp152.3.3.1 salt-api-3000-lp152.3.3.1 salt-cloud-3000-lp152.3.3.1 salt-doc-3000-lp152.3.3.1 salt-master-3000-lp152.3.3.1 salt-minion-3000-lp152.3.3.1 salt-proxy-3000-lp152.3.3.1 salt-ssh-3000-lp152.3.3.1 salt-standalone-formulas-configuration-3000-lp152.3.3.1 salt-syndic-3000-lp152.3.3.1 References: https://bugzilla.suse.com/1159284 https://bugzilla.suse.com/1165572 https://bugzilla.suse.com/1168340 https://bugzilla.suse.com/1169604 https://bugzilla.suse.com/1170104 https://bugzilla.suse.com/1171906 https://bugzilla.suse.com/1172075 https://bugzilla.suse.com/1173072

1 0

openSUSE-SU-2020:0990-1: moderate: Security update for rubygem-puma
by opensuse-security＠opensuse.org 18 Jul '20

18 Jul '20

openSUSE Security Update: Security update for rubygem-puma ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0990-1 Rating: moderate References: #1172175 #1172176 Cross-References: CVE-2020-11076 CVE-2020-11077 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for rubygem-puma to version 4.3.5 fixes the following issues: - CVE-2020-11077: Fixed a HTTP smuggling issue related to proxy usage (bsc#1172175). - CVE-2020-11076: Fixed a HTTP smuggling issue when using an invalid transfer-encoding header (bsc#1172176). - Disabled TLSv1.0 and TLSv1.1 (jsc#SLE-6965). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-990=1 Package List: - openSUSE Leap 15.1 (x86_64): ruby2.5-rubygem-puma-4.3.5-lp151.3.3.1 ruby2.5-rubygem-puma-debuginfo-4.3.5-lp151.3.3.1 ruby2.5-rubygem-puma-doc-4.3.5-lp151.3.3.1 rubygem-puma-debugsource-4.3.5-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2020-11076.html https://www.suse.com/security/cve/CVE-2020-11077.html https://bugzilla.suse.com/1172175 https://bugzilla.suse.com/1172176

1 0

openSUSE-SU-2020:0988-1: important: Security update for LibVNCServer
by opensuse-security＠opensuse.org 18 Jul '20

18 Jul '20

openSUSE Security Update: Security update for LibVNCServer ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0988-1 Rating: important References: #1173477 #1173691 #1173694 #1173700 #1173701 #1173743 #1173874 #1173875 #1173876 #1173880 Cross-References: CVE-2017-18922 CVE-2018-21247 CVE-2019-20839 CVE-2019-20840 CVE-2020-14397 CVE-2020-14398 CVE-2020-14399 CVE-2020-14400 CVE-2020-14401 CVE-2020-14402 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 10 vulnerabilities is now available. Description: This update for LibVNCServer fixes the following issues: - security update - added patches fix CVE-2018-21247 [bsc#1173874], uninitialized memory contents are vulnerable to Information leak + LibVNCServer-CVE-2018-21247.patch fix CVE-2019-20839 [bsc#1173875], buffer overflow in ConnectClientToUnixSock() + LibVNCServer-CVE-2019-20839.patch fix CVE-2019-20840 [bsc#1173876], unaligned accesses in hybiReadAndDecode can lead to denial of service + LibVNCServer-CVE-2019-20840.patch fix CVE-2020-14398 [bsc#1173880], improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c + LibVNCServer-CVE-2020-14398.patch fix CVE-2020-14397 [bsc#1173700], NULL pointer dereference in libvncserver/rfbregion.c + LibVNCServer-CVE-2020-14397.patch fix CVE-2020-14399 [bsc#1173743], Byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c. + LibVNCServer-CVE-2020-14399.patch fix CVE-2020-14400 [bsc#1173691], Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c. + LibVNCServer-CVE-2020-14400.patch fix CVE-2020-14401 [bsc#1173694], potential integer overflows in libvncserver/scale.c + LibVNCServer-CVE-2020-14401.patch fix CVE-2020-14402 [bsc#1173701], out-of-bounds access via encodings. + LibVNCServer-CVE-2020-14402,14403,14404.patch fix CVE-2017-18922 [bsc#1173477], preauth buffer overwrite This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-988=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): LibVNCServer-debugsource-0.9.10-lp151.7.9.1 LibVNCServer-devel-0.9.10-lp151.7.9.1 libvncclient0-0.9.10-lp151.7.9.1 libvncclient0-debuginfo-0.9.10-lp151.7.9.1 libvncserver0-0.9.10-lp151.7.9.1 libvncserver0-debuginfo-0.9.10-lp151.7.9.1 References: https://www.suse.com/security/cve/CVE-2017-18922.html https://www.suse.com/security/cve/CVE-2018-21247.html https://www.suse.com/security/cve/CVE-2019-20839.html https://www.suse.com/security/cve/CVE-2019-20840.html https://www.suse.com/security/cve/CVE-2020-14397.html https://www.suse.com/security/cve/CVE-2020-14398.html https://www.suse.com/security/cve/CVE-2020-14399.html https://www.suse.com/security/cve/CVE-2020-14400.html https://www.suse.com/security/cve/CVE-2020-14401.html https://www.suse.com/security/cve/CVE-2020-14402.html https://bugzilla.suse.com/1173477 https://bugzilla.suse.com/1173691 https://bugzilla.suse.com/1173694 https://bugzilla.suse.com/1173700 https://bugzilla.suse.com/1173701 https://bugzilla.suse.com/1173743 https://bugzilla.suse.com/1173874 https://bugzilla.suse.com/1173875 https://bugzilla.suse.com/1173876 https://bugzilla.suse.com/1173880

1 0

openSUSE-SU-2020:0989-1: important: Security update for python-ipaddress
by opensuse-security＠opensuse.org 18 Jul '20

18 Jul '20

openSUSE Security Update: Security update for python-ipaddress ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0989-1 Rating: important References: #1173274 Cross-References: CVE-2020-14422 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-ipaddress fixes the following issues: - Add CVE-2020-14422-ipaddress-hash-collision.patch fixing CVE-2020-14422 (bsc#1173274, bpo#41004), where hash collisions in IPv4Interface and IPv6Interface could lead to DOS. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-989=1 Package List: - openSUSE Leap 15.1 (noarch): python-ipaddress-1.0.18-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2020-14422.html https://bugzilla.suse.com/1173274

1 0

openSUSE-SU-2020:0985-1: important: Security update for xen
by opensuse-security＠opensuse.org 18 Jul '20

18 Jul '20

openSUSE Security Update: Security update for xen ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0985-1 Rating: important References: #1027519 #1172205 #1173376 #1173377 #1173378 #1173380 Cross-References: CVE-2020-0543 CVE-2020-15563 CVE-2020-15565 CVE-2020-15566 CVE-2020-15567 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves 5 vulnerabilities and has one errata is now available. Description: This update for xen fixes the following issues: - CVE-2020-15563: Fixed inverted code paths in x86 dirty VRAM tracking (bsc#1173377). - CVE-2020-15565: Fixed insufficient cache write-back under VT-d (bsc#1173378). - CVE-2020-15566: Fixed incorrect error handling in event channel port allocation (bsc#1173376). - CVE-2020-15567: Fixed non-atomic modification of live EPT PTE (bsc#1173380). - CVE-2020-0543: Special Register Buffer Data Sampling (SRBDS) aka "CrossTalk" (bsc#1172205). Additional upstream bug fixes (bsc#1027519) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-985=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): xen-debugsource-4.13.1_04-lp152.2.3.1 xen-devel-4.13.1_04-lp152.2.3.1 xen-libs-4.13.1_04-lp152.2.3.1 xen-libs-debuginfo-4.13.1_04-lp152.2.3.1 xen-tools-domU-4.13.1_04-lp152.2.3.1 xen-tools-domU-debuginfo-4.13.1_04-lp152.2.3.1 - openSUSE Leap 15.2 (x86_64): xen-4.13.1_04-lp152.2.3.1 xen-doc-html-4.13.1_04-lp152.2.3.1 xen-libs-32bit-4.13.1_04-lp152.2.3.1 xen-libs-32bit-debuginfo-4.13.1_04-lp152.2.3.1 xen-tools-4.13.1_04-lp152.2.3.1 xen-tools-debuginfo-4.13.1_04-lp152.2.3.1 - openSUSE Leap 15.2 (noarch): xen-tools-xendomains-wait-disk-4.13.1_04-lp152.2.3.1 References: https://www.suse.com/security/cve/CVE-2020-0543.html https://www.suse.com/security/cve/CVE-2020-15563.html https://www.suse.com/security/cve/CVE-2020-15565.html https://www.suse.com/security/cve/CVE-2020-15566.html https://www.suse.com/security/cve/CVE-2020-15567.html https://bugzilla.suse.com/1027519 https://bugzilla.suse.com/1172205 https://bugzilla.suse.com/1173376 https://bugzilla.suse.com/1173377 https://bugzilla.suse.com/1173378 https://bugzilla.suse.com/1173380

1 0

openSUSE-SU-2020:0984-1: important: Security update for samba
by opensuse-security＠opensuse.org 18 Jul '20

18 Jul '20

openSUSE Security Update: Security update for samba ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0984-1 Rating: important References: #1171437 #1172307 #1173159 #1173160 #1173161 #1173359 Cross-References: CVE-2020-10730 CVE-2020-10745 CVE-2020-10760 CVE-2020-14303 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves four vulnerabilities and has two fixes is now available. Description: This update for samba fixes the following issues: - CVE-2020-10745: Fixed an issue which parsing and packing of NBT and DNS packets containing dots could potentially have consumed excessive CPU (bsc#1173160). - CVE-2020-14303: Fixed an endless loop when receiving at AD DC empty UDP packets (bsc#1173359). - CVE-2020-10730: Fixed a null de-reference in AD DC LDAP server when ASQ and VLV combined (bsc#1173159). - CVE-2020-10760: Fixed a use-after-free in AD DC Global Catalog LDAP server with paged_result or VLV (bsc#1173161). - Added libnetapi-devel to baselibs conf, for wine usage (bsc#1172307). - Fixed an installing issue where samba - samba-ad-dc.service did not exist and unit was not found (bsc#1171437). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-984=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): ctdb-4.9.5+git.343.4bc358522a9-lp151.2.27.1 ctdb-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 ctdb-pcp-pmda-4.9.5+git.343.4bc358522a9-lp151.2.27.1 ctdb-pcp-pmda-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 ctdb-tests-4.9.5+git.343.4bc358522a9-lp151.2.27.1 ctdb-tests-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libdcerpc-binding0-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libdcerpc-binding0-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libdcerpc-devel-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libdcerpc-samr-devel-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libdcerpc-samr0-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libdcerpc-samr0-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libdcerpc0-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libdcerpc0-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libndr-devel-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libndr-krb5pac-devel-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libndr-krb5pac0-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libndr-krb5pac0-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libndr-nbt-devel-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libndr-nbt0-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libndr-nbt0-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libndr-standard-devel-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libndr-standard0-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libndr-standard0-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libndr0-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libndr0-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libnetapi-devel-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libnetapi0-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libnetapi0-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-credentials-devel-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-credentials0-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-credentials0-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-errors-devel-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-errors0-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-errors0-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-hostconfig-devel-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-hostconfig0-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-hostconfig0-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-passdb-devel-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-passdb0-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-passdb0-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-policy-devel-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-policy-python-devel-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-policy-python3-devel-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-policy0-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-policy0-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-policy0-python3-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-policy0-python3-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-util-devel-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-util0-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-util0-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamdb-devel-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamdb0-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamdb0-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsmbclient-devel-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsmbclient0-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsmbclient0-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsmbconf-devel-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsmbconf0-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsmbconf0-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsmbldap-devel-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsmbldap2-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsmbldap2-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libtevent-util-devel-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libtevent-util0-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libtevent-util0-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libwbclient-devel-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libwbclient0-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libwbclient0-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-ad-dc-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-ad-dc-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-client-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-client-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-core-devel-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-debugsource-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-dsdb-modules-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-dsdb-modules-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-libs-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-libs-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-libs-python-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-libs-python-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-libs-python3-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-libs-python3-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-pidl-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-python-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-python-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-python3-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-python3-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-test-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-test-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-winbind-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-winbind-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 - openSUSE Leap 15.1 (noarch): samba-doc-4.9.5+git.343.4bc358522a9-lp151.2.27.1 - openSUSE Leap 15.1 (x86_64): libdcerpc-binding0-32bit-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libdcerpc-binding0-32bit-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libdcerpc-samr0-32bit-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libdcerpc-samr0-32bit-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libdcerpc0-32bit-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libdcerpc0-32bit-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libndr-krb5pac0-32bit-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libndr-krb5pac0-32bit-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libndr-nbt0-32bit-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libndr-nbt0-32bit-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libndr-standard0-32bit-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libndr-standard0-32bit-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libndr0-32bit-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libndr0-32bit-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libnetapi-devel-32bit-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libnetapi0-32bit-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libnetapi0-32bit-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-credentials0-32bit-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-credentials0-32bit-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-errors0-32bit-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-errors0-32bit-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-hostconfig0-32bit-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-hostconfig0-32bit-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-passdb0-32bit-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-passdb0-32bit-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-policy0-32bit-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-policy0-32bit-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-policy0-python3-32bit-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-policy0-python3-32bit-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-util0-32bit-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamba-util0-32bit-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamdb0-32bit-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsamdb0-32bit-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsmbclient0-32bit-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsmbclient0-32bit-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsmbconf0-32bit-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsmbconf0-32bit-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsmbldap2-32bit-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libsmbldap2-32bit-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libtevent-util0-32bit-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libtevent-util0-32bit-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libwbclient0-32bit-4.9.5+git.343.4bc358522a9-lp151.2.27.1 libwbclient0-32bit-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-ad-dc-32bit-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-ad-dc-32bit-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-ceph-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-ceph-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-client-32bit-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-client-32bit-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-libs-32bit-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-libs-32bit-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-libs-python-32bit-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-libs-python-32bit-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-libs-python3-32bit-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-libs-python3-32bit-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-winbind-32bit-4.9.5+git.343.4bc358522a9-lp151.2.27.1 samba-winbind-32bit-debuginfo-4.9.5+git.343.4bc358522a9-lp151.2.27.1 References: https://www.suse.com/security/cve/CVE-2020-10730.html https://www.suse.com/security/cve/CVE-2020-10745.html https://www.suse.com/security/cve/CVE-2020-10760.html https://www.suse.com/security/cve/CVE-2020-14303.html https://bugzilla.suse.com/1171437 https://bugzilla.suse.com/1172307 https://bugzilla.suse.com/1173159 https://bugzilla.suse.com/1173160 https://bugzilla.suse.com/1173161 https://bugzilla.suse.com/1173359

1 0

openSUSE-SU-2020:0976-1: important: Security update for openldap2
by opensuse-security＠opensuse.org 17 Jul '20

17 Jul '20

openSUSE Security Update: Security update for openldap2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0976-1 Rating: important References: #1172698 #1172704 Cross-References: CVE-2020-8023 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for openldap2 fixes the following issues: - CVE-2020-8023: Fixed a potential local privilege escalation from ldap to root when OPENLDAP_CONFIG_BACKEND="ldap" was used (bsc#1172698). - Changed DB_CONFIG to root:ldap permissions (bsc#1172704). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-976=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libldap-2_4-2-2.4.46-lp152.14.3.1 libldap-2_4-2-debuginfo-2.4.46-lp152.14.3.1 openldap2-2.4.46-lp152.14.3.1 openldap2-back-meta-2.4.46-lp152.14.3.1 openldap2-back-meta-debuginfo-2.4.46-lp152.14.3.1 openldap2-back-perl-2.4.46-lp152.14.3.1 openldap2-back-perl-debuginfo-2.4.46-lp152.14.3.1 openldap2-back-sock-2.4.46-lp152.14.3.1 openldap2-back-sock-debuginfo-2.4.46-lp152.14.3.1 openldap2-back-sql-2.4.46-lp152.14.3.1 openldap2-back-sql-debuginfo-2.4.46-lp152.14.3.1 openldap2-client-2.4.46-lp152.14.3.1 openldap2-client-debuginfo-2.4.46-lp152.14.3.1 openldap2-contrib-2.4.46-lp152.14.3.1 openldap2-contrib-debuginfo-2.4.46-lp152.14.3.1 openldap2-debuginfo-2.4.46-lp152.14.3.1 openldap2-debugsource-2.4.46-lp152.14.3.1 openldap2-devel-2.4.46-lp152.14.3.1 openldap2-devel-static-2.4.46-lp152.14.3.1 openldap2-ppolicy-check-password-1.2-lp152.14.3.1 openldap2-ppolicy-check-password-debuginfo-1.2-lp152.14.3.1 - openSUSE Leap 15.2 (noarch): libldap-data-2.4.46-lp152.14.3.1 openldap2-doc-2.4.46-lp152.14.3.1 - openSUSE Leap 15.2 (x86_64): libldap-2_4-2-32bit-2.4.46-lp152.14.3.1 libldap-2_4-2-32bit-debuginfo-2.4.46-lp152.14.3.1 openldap2-devel-32bit-2.4.46-lp152.14.3.1 References: https://www.suse.com/security/cve/CVE-2020-8023.html https://bugzilla.suse.com/1172698 https://bugzilla.suse.com/1172704

1 0

openSUSE-RU-2020:0981-1: moderate: Recommended update for k4dirstat
by maintenance＠opensuse.org 17 Jul '20

17 Jul '20

openSUSE Recommended Update: Recommended update for k4dirstat ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0981-1 Rating: moderate References: #1173905 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for k4dirstat fixes the following issues: k4dirstat was updated: to 3.2.1 (boo#1173905): * Fix crashes on startup in some certain KIO related circumstances Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-981=1 Package List: - openSUSE Leap 15.2 (x86_64): k4dirstat-3.2.1-lp152.2.3.1 k4dirstat-debuginfo-3.2.1-lp152.2.3.1 k4dirstat-debugsource-3.2.1-lp152.2.3.1 - openSUSE Leap 15.2 (noarch): k4dirstat-lang-3.2.1-lp152.2.3.1 References: https://bugzilla.suse.com/1173905

1 0