July 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2020:0931-1: important: Security update for python3
by opensuse-security＠opensuse.org 05 Jul '20

05 Jul '20

openSUSE Security Update: Security update for python3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0931-1 Rating: important References: #1173274 Cross-References: CVE-2020-14422 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python3 fixes the following issues: - CVE-2020-14422: Fixed an improper computation of hash values in the IPv4Interface and IPv6Interface could have led to denial of service (bsc#1173274). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-931=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libpython3_6m1_0-3.6.10-lp151.6.21.1 libpython3_6m1_0-debuginfo-3.6.10-lp151.6.21.1 python3-3.6.10-lp151.6.21.1 python3-base-3.6.10-lp151.6.21.1 python3-base-debuginfo-3.6.10-lp151.6.21.1 python3-base-debugsource-3.6.10-lp151.6.21.1 python3-curses-3.6.10-lp151.6.21.1 python3-curses-debuginfo-3.6.10-lp151.6.21.1 python3-dbm-3.6.10-lp151.6.21.1 python3-dbm-debuginfo-3.6.10-lp151.6.21.1 python3-debuginfo-3.6.10-lp151.6.21.1 python3-debugsource-3.6.10-lp151.6.21.1 python3-devel-3.6.10-lp151.6.21.1 python3-devel-debuginfo-3.6.10-lp151.6.21.1 python3-idle-3.6.10-lp151.6.21.1 python3-testsuite-3.6.10-lp151.6.21.1 python3-testsuite-debuginfo-3.6.10-lp151.6.21.1 python3-tk-3.6.10-lp151.6.21.1 python3-tk-debuginfo-3.6.10-lp151.6.21.1 python3-tools-3.6.10-lp151.6.21.1 - openSUSE Leap 15.1 (x86_64): libpython3_6m1_0-32bit-3.6.10-lp151.6.21.1 libpython3_6m1_0-32bit-debuginfo-3.6.10-lp151.6.21.1 python3-32bit-3.6.10-lp151.6.21.1 python3-32bit-debuginfo-3.6.10-lp151.6.21.1 python3-base-32bit-3.6.10-lp151.6.21.1 python3-base-32bit-debuginfo-3.6.10-lp151.6.21.1 References: https://www.suse.com/security/cve/CVE-2020-14422.html https://bugzilla.suse.com/1173274

1 0

openSUSE-RU-2020:0930-1: moderate: Recommended update for resource-agents
by maintenance＠opensuse.org 05 Jul '20

05 Jul '20

openSUSE Recommended Update: Recommended update for resource-agents ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0930-1 Rating: moderate References: #1162978 #1170270 #1172734 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for resource-agents fixes the following issues: - Fixed a bug where the pulling of images was stuck (bsc#1170270) - Added a fix for defect file /usr/lib/ocf/resource.d/heartbeat/clvm (bsc#1172734) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-930=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): ldirectord-4.3.0184.6ee15eb2-lp151.3.24.1 resource-agents-4.3.0184.6ee15eb2-lp151.3.24.1 resource-agents-debuginfo-4.3.0184.6ee15eb2-lp151.3.24.1 resource-agents-debugsource-4.3.0184.6ee15eb2-lp151.3.24.1 - openSUSE Leap 15.1 (noarch): monitoring-plugins-metadata-4.3.0184.6ee15eb2-lp151.3.24.1 References: https://bugzilla.suse.com/1162978 https://bugzilla.suse.com/1170270 https://bugzilla.suse.com/1172734

1 0

openSUSE-RU-2020:0929-1: moderate: Recommended update for dracut
by maintenance＠opensuse.org 05 Jul '20

05 Jul '20

openSUSE Recommended Update: Recommended update for dracut ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0929-1 Rating: moderate References: #1161573 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for dracut fixes the following issue: - Fix dracut timeout on missing root device (bsc#1161573) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-929=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): dracut-044.2-lp151.2.21.1 dracut-debuginfo-044.2-lp151.2.21.1 dracut-debugsource-044.2-lp151.2.21.1 dracut-fips-044.2-lp151.2.21.1 dracut-ima-044.2-lp151.2.21.1 dracut-tools-044.2-lp151.2.21.1 References: https://bugzilla.suse.com/1161573

1 0

openSUSE-SU-2020:0928-1: important: Security update for chocolate-doom
by opensuse-security＠opensuse.org 05 Jul '20

05 Jul '20

openSUSE Security Update: Security update for chocolate-doom ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0928-1 Rating: important References: #1173595 Cross-References: CVE-2020-14983 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for chocolate-doom to version 3.0.1 fixes the following issues: - CVE-2020-14983: Fixed a stack-based buffer overflow in the networking code (boo#1173595). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-928=1 Package List: - openSUSE Leap 15.1 (noarch): chocolate-doom-bash-completion-3.0.1-lp151.3.3.1 - openSUSE Leap 15.1 (x86_64): chocolate-doom-3.0.1-lp151.3.3.1 chocolate-doom-debuginfo-3.0.1-lp151.3.3.1 chocolate-doom-debugsource-3.0.1-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2020-14983.html https://bugzilla.suse.com/1173595

1 0

openSUSE-RU-2020:0927-1: important: Recommended update for mdadm
by maintenance＠opensuse.org 04 Jul '20

04 Jul '20

openSUSE Recommended Update: Recommended update for mdadm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0927-1 Rating: important References: #1163727 #1168953 #1173137 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for mdadm fixes the following issues: - OnCalendar format fix of mdcheck_start.timer (bsc#1173137) - Detail: adding sync status for cluster device (bsc#1163727) - Monitor: improve check_one_sharer() for checking duplicated process (bsc#1168953) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-927=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): mdadm-4.1-lp151.4.12.1 mdadm-debuginfo-4.1-lp151.4.12.1 mdadm-debugsource-4.1-lp151.4.12.1 References: https://bugzilla.suse.com/1163727 https://bugzilla.suse.com/1168953 https://bugzilla.suse.com/1173137

1 0

openSUSE-RU-2020:0926-1: moderate: Recommended update for icewm-theme-branding
by maintenance＠opensuse.org 04 Jul '20

04 Jul '20

openSUSE Recommended Update: Recommended update for icewm-theme-branding ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0926-1 Rating: moderate References: #1170420 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for icewm-theme-branding fixes the following issues: Fix the "zypper dup" issue on Leap by explicitly obsoleting icewm-config-upstream. (bsc#1170420) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-926=1 Package List: - openSUSE Leap 15.1 (noarch): icewm-theme-branding-1.2.4-lp151.3.9.1 References: https://bugzilla.suse.com/1170420

1 0

openSUSE-OU-2020:0923-1: Recommended update for python-scipy
by maintenance＠opensuse.org 03 Jul '20

03 Jul '20

openSUSE Optional Update: Recommended update for python-scipy ______________________________________________________________________________ Announcement ID: openSUSE-OU-2020:0923-1 Rating: low References: #1171510 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update for python-scipy doesn't fix any user visible issues, but improves the package building process. This update was imported from the SUSE:SLE-15-SP1:Update update project. This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Optional Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-923=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): python2-scipy-1.2.0-bp151.2.3.1 python3-scipy-1.2.0-bp151.2.3.1 - openSUSE Backports SLE-15-SP1 (ppc64le): python2-scipy-gnu-hpc-1.2.0-bp151.2.3.1 python2-scipy_1_2_0-gnu-hpc-1.2.0-bp151.2.3.1 python3-scipy-gnu-hpc-1.2.0-bp151.2.3.1 python3-scipy_1_2_0-gnu-hpc-1.2.0-bp151.2.3.1 References: https://bugzilla.suse.com/1171510

1 0

openSUSE-SU-2020:0925-1: moderate: Security update for Virtualbox
by opensuse-security＠opensuse.org 03 Jul '20

03 Jul '20

openSUSE Security Update: Security update for Virtualbox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0925-1 Rating: moderate References: #1169628 Cross-References: CVE-2020-2741 CVE-2020-2742 CVE-2020-2743 CVE-2020-2748 CVE-2020-2758 CVE-2020-2894 CVE-2020-2902 CVE-2020-2905 CVE-2020-2907 CVE-2020-2908 CVE-2020-2909 CVE-2020-2910 CVE-2020-2911 CVE-2020-2913 CVE-2020-2914 CVE-2020-2929 CVE-2020-2951 CVE-2020-2958 CVE-2020-2959 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 19 vulnerabilities is now available. Description: Virtualbox was updated to 6.0.22 (released May 15 2020 by Oracle) This is a maintenance release. The following items were fixed and/or added: Guest Additions: Build problems fix with Oracle Linux 8.2 (Red Hat compatible kernel) / Red Hat Enterprise Linux 8.2 / CentOS 8.2 (bug #19391) Guest Control/VBoxManage: fix handling of multiple environment variables supplied to 'VBoxManage guestcontrol VM run' (6.1.6/6.0.20 regression; bug #19518) Version bump to 6.0.20 (released April 14 2020 by Oracle) This is a maintenance release. The following items were fixed and/or added: - USB: Multiple enhancements improving prformance and stability - VBoxManage: Multiple fixes for guestcontrol command - Graphics: Enhancements in 2D and 3D acceleration and rendering - API: Fix for exception handling bug in Python bindings - Linux host and guest: Support Linux kernel 5.6 (bug #19312) This update fixes the following security issues: CVE-2020-2741, CVE-2020-2742, CVE-2020-2743, CVE-2020-2748, CVE-2020-2758, CVE-2020-2894, CVE-2020-2902, CVE-2020-2905, CVE-2020-2907, CVE-2020-2908, CVE-2020-2909, CVE-2020-2910, CVE-2020-2911, CVE-2020-2913, CVE-2020-2914, CVE-2020-2929, CVE-2020-2951, CVE-2020-2958, CVE-2020-2959 (bsc#1169628) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-925=1 Package List: - openSUSE Leap 15.1 (noarch): virtualbox-guest-desktop-icons-6.0.22-lp151.2.15.1 virtualbox-guest-source-6.0.22-lp151.2.15.1 virtualbox-host-source-6.0.22-lp151.2.15.1 - openSUSE Leap 15.1 (x86_64): python3-virtualbox-6.0.22-lp151.2.15.1 python3-virtualbox-debuginfo-6.0.22-lp151.2.15.1 virtualbox-6.0.22-lp151.2.15.1 virtualbox-debuginfo-6.0.22-lp151.2.15.1 virtualbox-debugsource-6.0.22-lp151.2.15.1 virtualbox-devel-6.0.22-lp151.2.15.1 virtualbox-guest-tools-6.0.22-lp151.2.15.1 virtualbox-guest-tools-debuginfo-6.0.22-lp151.2.15.1 virtualbox-guest-x11-6.0.22-lp151.2.15.1 virtualbox-guest-x11-debuginfo-6.0.22-lp151.2.15.1 virtualbox-kmp-default-6.0.22_k4.12.14_lp151.28.52-lp151.2.15.1 virtualbox-kmp-default-debuginfo-6.0.22_k4.12.14_lp151.28.52-lp151.2.15.1 virtualbox-qt-6.0.22-lp151.2.15.1 virtualbox-qt-debuginfo-6.0.22-lp151.2.15.1 virtualbox-vnc-6.0.22-lp151.2.15.1 virtualbox-websrv-6.0.22-lp151.2.15.1 virtualbox-websrv-debuginfo-6.0.22-lp151.2.15.1 References: https://www.suse.com/security/cve/CVE-2020-2741.html https://www.suse.com/security/cve/CVE-2020-2742.html https://www.suse.com/security/cve/CVE-2020-2743.html https://www.suse.com/security/cve/CVE-2020-2748.html https://www.suse.com/security/cve/CVE-2020-2758.html https://www.suse.com/security/cve/CVE-2020-2894.html https://www.suse.com/security/cve/CVE-2020-2902.html https://www.suse.com/security/cve/CVE-2020-2905.html https://www.suse.com/security/cve/CVE-2020-2907.html https://www.suse.com/security/cve/CVE-2020-2908.html https://www.suse.com/security/cve/CVE-2020-2909.html https://www.suse.com/security/cve/CVE-2020-2910.html https://www.suse.com/security/cve/CVE-2020-2911.html https://www.suse.com/security/cve/CVE-2020-2913.html https://www.suse.com/security/cve/CVE-2020-2914.html https://www.suse.com/security/cve/CVE-2020-2929.html https://www.suse.com/security/cve/CVE-2020-2951.html https://www.suse.com/security/cve/CVE-2020-2958.html https://www.suse.com/security/cve/CVE-2020-2959.html https://bugzilla.suse.com/1169628

1 0

openSUSE-RU-2020:0924-1: moderate: Recommended update for smtube
by maintenance＠opensuse.org 03 Jul '20

03 Jul '20

openSUSE Recommended Update: Recommended update for smtube ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0924-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for smtube fixes the following issues: Update to version 20.6.0: * New option in preferences to select the site to use as homepage. * The internal youtube code has been removed and now smtube just uses youtube-dl to get the video urls. * New option in the help menu to help install youtube-dl. - Youtube-dl is not required, so changed Suggest: youtube-dl to Required: youtube-dl Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-924=1 Package List: - openSUSE Leap 15.2 (noarch): smtube-lang-20.6.0-lp152.2.3.1 - openSUSE Leap 15.2 (x86_64): smtube-20.6.0-lp152.2.3.1 smtube-debuginfo-20.6.0-lp152.2.3.1 smtube-debugsource-20.6.0-lp152.2.3.1 References:

1 0

openSUSE-RU-2020:0919-1: moderate: Recommended update for strawberry
by maintenance＠opensuse.org 03 Jul '20

03 Jul '20

openSUSE Recommended Update: Recommended update for strawberry ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0919-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for strawberry fixes the following issues: strawberry was updated to version 0.6.12: * Bugfixes: + Fixed height of about dialog. * Enhancements: + Only save settings for pages that actually has been changed. + Replaced use of deprecated Qt functionality as of 5.15. + Made scrobbler show error dialog for all errors when show error dialog option is on. + Dont append disc to album titles for Subsonic and Tidal. + Sort folders added from file view. + Changed default collection grouping to album - disc. This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-919=1 Package List: - openSUSE Backports SLE-15-SP1 (x86_64): strawberry-0.6.12-bp151.2.25.1 References:

1 0