July 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2020:1028-1: moderate: Recommended update for dracut
by maintenance＠opensuse.org 21 Jul '20

21 Jul '20

openSUSE Recommended Update: Recommended update for dracut ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1028-1 Rating: moderate References: #1161573 #1165828 #1169997 #1172807 #1173560 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: This update for dracut fixes the following issues: - Update to version 049.1+suse.152.g8506e86f: * 01fips: modprobe failures during manual module loading is not fatal. (bsc#bsc#1169997) * 91zipl: parse-zipl.sh: honor SYSTEMD_READY. (bsc#1165828) * 95iscsi: fix ipv6 target discovery. (bsc#1172807) * 35network-legacy: correct conditional for creating did-setup file. (bsc#1172807) - Update to version 049.1+suse.148.gc4a6c2dd: * 95fcoe: load 'libfcoe' module as a fallback. (bsc#1173560) * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases. (bsc#1161573) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1028=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): dracut-049.1+suse.152.g8506e86f-lp152.2.6.1 dracut-debuginfo-049.1+suse.152.g8506e86f-lp152.2.6.1 dracut-debugsource-049.1+suse.152.g8506e86f-lp152.2.6.1 dracut-extra-049.1+suse.152.g8506e86f-lp152.2.6.1 dracut-fips-049.1+suse.152.g8506e86f-lp152.2.6.1 dracut-ima-049.1+suse.152.g8506e86f-lp152.2.6.1 dracut-tools-049.1+suse.152.g8506e86f-lp152.2.6.1 References: https://bugzilla.suse.com/1161573 https://bugzilla.suse.com/1165828 https://bugzilla.suse.com/1169997 https://bugzilla.suse.com/1172807 https://bugzilla.suse.com/1173560

1 0

openSUSE-RU-2020:1029-1: moderate: Recommended update for xournalpp
by maintenance＠opensuse.org 21 Jul '20

21 Jul '20

openSUSE Recommended Update: Recommended update for xournalpp ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1029-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for xournalpp fixes the following issues: - Add Recommends tex(standalone.tex) instead of Requires: texlive-latex-bin, so that users can uninstall texlive packages should they not use this particular feature. The standalone pkg is required for the feature to work and it pulls in the right texlive dependencies as Recommends. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1029=1 Package List: - openSUSE Leap 15.2 (x86_64): xournalpp-1.0.18-lp152.2.3.1 xournalpp-debuginfo-1.0.18-lp152.2.3.1 xournalpp-debugsource-1.0.18-lp152.2.3.1 - openSUSE Leap 15.2 (noarch): xournalpp-lang-1.0.18-lp152.2.3.1 References:

1 0

openSUSE-RU-2020:1030-1: moderate: Recommended update for kio
by maintenance＠opensuse.org 21 Jul '20

21 Jul '20

openSUSE Recommended Update: Recommended update for kio ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1030-1 Rating: moderate References: #1174141 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for kio fixes the following issues: - Fixed running files with spaces in the path (boo#1174141, kde#423412, kde#423645). Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1030=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): kio-5.71.0-lp152.2.6.1 kio-core-5.71.0-lp152.2.6.1 kio-core-debuginfo-5.71.0-lp152.2.6.1 kio-debuginfo-5.71.0-lp152.2.6.1 kio-debugsource-5.71.0-lp152.2.6.1 kio-devel-5.71.0-lp152.2.6.1 kio-devel-debuginfo-5.71.0-lp152.2.6.1 - openSUSE Leap 15.2 (noarch): kio-lang-5.71.0-lp152.2.6.1 - openSUSE Leap 15.2 (x86_64): kio-32bit-5.71.0-lp152.2.6.1 kio-32bit-debuginfo-5.71.0-lp152.2.6.1 kio-core-32bit-5.71.0-lp152.2.6.1 kio-core-32bit-debuginfo-5.71.0-lp152.2.6.1 kio-devel-32bit-5.71.0-lp152.2.6.1 kio-devel-32bit-debuginfo-5.71.0-lp152.2.6.1 References: https://bugzilla.suse.com/1174141

1 0

openSUSE-SU-2020:1027-1: moderate: Security update for openconnect
by opensuse-security＠opensuse.org 21 Jul '20

21 Jul '20

openSUSE Security Update: Security update for openconnect ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1027-1 Rating: moderate References: #1171862 Cross-References: CVE-2020-12823 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for openconnect fixes the following issues: - CVE-2020-12823: Fixed a buffer overflow via crafted certificate data which could have led to denial of service (bsc#1171862). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1027=1 Package List: - openSUSE Leap 15.2 (noarch): openconnect-lang-7.08-lp152.9.4.2 - openSUSE Leap 15.2 (x86_64): openconnect-7.08-lp152.9.4.2 openconnect-debuginfo-7.08-lp152.9.4.2 openconnect-debugsource-7.08-lp152.9.4.2 openconnect-devel-7.08-lp152.9.4.2 openconnect-doc-7.08-lp152.9.4.2 References: https://www.suse.com/security/cve/CVE-2020-12823.html https://bugzilla.suse.com/1171862

1 0

openSUSE-RU-2020:1026-1: important: Recommended update for parted
by maintenance＠opensuse.org 21 Jul '20

21 Jul '20

openSUSE Recommended Update: Recommended update for parted ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1026-1 Rating: important References: #1164260 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for parted fixes the following issue: - fix support of NVDIMM (pmemXs) devices (bsc#1164260) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1026=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libparted0-3.2-lp152.12.3.1 libparted0-debuginfo-3.2-lp152.12.3.1 parted-3.2-lp152.12.3.1 parted-debuginfo-3.2-lp152.12.3.1 parted-debugsource-3.2-lp152.12.3.1 parted-devel-3.2-lp152.12.3.1 - openSUSE Leap 15.2 (x86_64): libparted0-32bit-3.2-lp152.12.3.1 libparted0-32bit-debuginfo-3.2-lp152.12.3.1 - openSUSE Leap 15.2 (noarch): parted-lang-3.2-lp152.12.3.1 References: https://bugzilla.suse.com/1164260

1 0

openSUSE-SU-2020:1025-1: important: Security update for LibVNCServer
by opensuse-security＠opensuse.org 21 Jul '20

21 Jul '20

openSUSE Security Update: Security update for LibVNCServer ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1025-1 Rating: important References: #1173477 #1173691 #1173694 #1173700 #1173701 #1173743 #1173874 #1173875 #1173876 #1173880 Cross-References: CVE-2017-18922 CVE-2018-21247 CVE-2019-20839 CVE-2019-20840 CVE-2020-14397 CVE-2020-14398 CVE-2020-14399 CVE-2020-14400 CVE-2020-14401 CVE-2020-14402 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes 10 vulnerabilities is now available. Description: This update for LibVNCServer fixes the following issues: - security update - added patches fix CVE-2018-21247 [bsc#1173874], uninitialized memory contents are vulnerable to Information leak + LibVNCServer-CVE-2018-21247.patch fix CVE-2019-20839 [bsc#1173875], buffer overflow in ConnectClientToUnixSock() + LibVNCServer-CVE-2019-20839.patch fix CVE-2019-20840 [bsc#1173876], unaligned accesses in hybiReadAndDecode can lead to denial of service + LibVNCServer-CVE-2019-20840.patch fix CVE-2020-14398 [bsc#1173880], improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c + LibVNCServer-CVE-2020-14398.patch fix CVE-2020-14397 [bsc#1173700], NULL pointer dereference in libvncserver/rfbregion.c + LibVNCServer-CVE-2020-14397.patch fix CVE-2020-14399 [bsc#1173743], Byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c. + LibVNCServer-CVE-2020-14399.patch fix CVE-2020-14400 [bsc#1173691], Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c. + LibVNCServer-CVE-2020-14400.patch fix CVE-2020-14401 [bsc#1173694], potential integer overflows in libvncserver/scale.c + LibVNCServer-CVE-2020-14401.patch fix CVE-2020-14402 [bsc#1173701], out-of-bounds access via encodings. + LibVNCServer-CVE-2020-14402,14403,14404.patch fix CVE-2017-18922 [bsc#1173477], preauth buffer overwrite This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1025=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): LibVNCServer-debugsource-0.9.10-lp152.9.8.1 LibVNCServer-devel-0.9.10-lp152.9.8.1 libvncclient0-0.9.10-lp152.9.8.1 libvncclient0-debuginfo-0.9.10-lp152.9.8.1 libvncserver0-0.9.10-lp152.9.8.1 libvncserver0-debuginfo-0.9.10-lp152.9.8.1 References: https://www.suse.com/security/cve/CVE-2017-18922.html https://www.suse.com/security/cve/CVE-2018-21247.html https://www.suse.com/security/cve/CVE-2019-20839.html https://www.suse.com/security/cve/CVE-2019-20840.html https://www.suse.com/security/cve/CVE-2020-14397.html https://www.suse.com/security/cve/CVE-2020-14398.html https://www.suse.com/security/cve/CVE-2020-14399.html https://www.suse.com/security/cve/CVE-2020-14400.html https://www.suse.com/security/cve/CVE-2020-14401.html https://www.suse.com/security/cve/CVE-2020-14402.html https://bugzilla.suse.com/1173477 https://bugzilla.suse.com/1173691 https://bugzilla.suse.com/1173694 https://bugzilla.suse.com/1173700 https://bugzilla.suse.com/1173701 https://bugzilla.suse.com/1173743 https://bugzilla.suse.com/1173874 https://bugzilla.suse.com/1173875 https://bugzilla.suse.com/1173876 https://bugzilla.suse.com/1173880

1 0

openSUSE-SU-2020:1023-1: important: Security update for ldb, samba
by opensuse-security＠opensuse.org 21 Jul '20

21 Jul '20

openSUSE Security Update: Security update for ldb, samba ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1023-1 Rating: important References: #1141320 #1162680 #1169095 #1169521 #1169850 #1169851 #1171437 #1172307 #1173159 #1173160 #1173161 #1173359 #1174120 Cross-References: CVE-2020-10700 CVE-2020-10704 CVE-2020-10730 CVE-2020-10745 CVE-2020-10760 CVE-2020-14303 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves 6 vulnerabilities and has 7 fixes is now available. Description: This update for ldb, samba fixes the following issues: Changes in samba: - Update to samba 4.11.11 + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ and VLV combined; (bso#14364); (bsc#1173159] + CVE-2020-10745: invalid DNS or NBT queries containing dots use several seconds of CPU each; (bso#14378); (bsc#1173160). + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server with paged_result or VLV; (bso#14402); (bsc#1173161) + CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC nbt_server; (bso#14417); (bsc#1173359). - Update to samba 4.11.10 + Fix segfault when using SMBC_opendir_ctx() routine for share folder that contains incorrect symbols in any file name; (bso#14374). + vfs_shadow_copy2 doesn't fail case looking in snapdirseverywhere mode; (bso#14350) + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr; (bso#14413). + Malicous SMB1 server can crash libsmbclient; (bso#14366) + winbindd: Fix a use-after-free when winbind clients exit; (bso#14382) + ldb: Bump version to 2.0.11, LMDB databases can grow without bounds. (bso#14330) - Update to samba 4.11.9 + nmblib: Avoid undefined behaviour in handle_name_ptrs(); (bso#14242). + 'samba-tool group' commands do not handle group names with special chars correctly; (bso#14296). + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo is not valid; (bso#14237). + Missing check for DMAPI offline status in async DOS attributes; (bso#14293). + smbd: Ignore set NTACL requests which contain S-1-5-88 NFS ACEs; (bso#14307). + vfs_recycle: Prevent flooding the log if we're called on non-existant paths; (bso#14316) + smbd mistakenly updates a file's write-time on close; (bso#14320). + RPC handles cannot be differentiated in source3 RPC server; (bso#14359). + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313). + nsswitch: Fix use-after-free causing segfault in _pam_delete_cred; (bso#14327). + Fix fruit:time machine max size on arm; (bso#13622) + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294). + ctdb: Fix a memleak; (bso#14348). + libsmb: Don't try to find posix stat info in SMBC_getatr(). + ctdb-tcp: Move free of inbound queue to TCP restart; (bso#14295); (bsc#1162680). + s3/librpc/crypto: Fix double free with unresolved credential cache; (bso#14344); (bsc#1169095) + s3:libads: Fix ads_get_upn(); (bso#14336). + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294) + Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680). + ctdb-recoverd: Avoid dereferencing NULL rec->nodemap; (bso#14324) - Update to samba 4.11.8 + CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850); + CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - Update to samba 4.11.7 + s3: lib: nmblib. Clean up and harden nmb packet processing; (bso#14239). + s3: VFS: full_audit. Use system session_info if called from a temporary share definition; (bso#14283) + dsdb: Correctly handle memory in objectclass_attrs; (bso#14258). + ldb: version 2.0.9, Samba 4.11 and later give incorrect results for SCOPE_ONE searches; (bso#14270) + auth: Fix CIDs 1458418 and 1458420 Null pointer dereferences; (bso#14247). + smbd: Handle EINTR from open(2) properly; (bso#14285) + winbind member (source3) fails local SAM auth with empty domain name; (bso#14247) + winbindd: Handling missing idmap in getgrgid(); (bso#14265). + lib:util: Log mkdir error on correct debug levels; (bso#14253). + wafsamba: Do not use 'rU' as the 'U' is deprecated in Python 3.9; (bso#14266). + ctdb-tcp: Make error handling for outbound connection consistent; (bso#14274). - Update to samba 4.11.6 + pygpo: Use correct method flags; (bso#14209). + vfs_ceph_snapshots: Fix root relative path handling; (bso#14216); (bsc#1141320). + Avoiding bad call flags with python 3.8, using METH_NOARGS instead of zero; (bso#14209). + source4/utils/oLschema2ldif: Include stdint.h before cmocka.h; (bso#14218). + docs-xml/winbindnssinfo: Clarify interaction with idmap_ad etc; (bso#14122). + smbd: Fix the build with clang; (bso#14251). + upgradedns: Ensure lmdb lock files linked; (bso#14199). + s3: VFS: glusterfs: Reset nlinks for symlink entries during readdir; (bso#14182). + smbc_stat() doesn't return the correct st_mode and also the uid/gid is not filled (SMBv1) file; (bso#14101). + librpc: Fix string length checking in ndr_pull_charset_to_null(); (bso#14219). + ctdb-scripts: Strip square brackets when gathering connection info; (bso#14227). - Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307); - Installing: samba - samba-ad-dc.service does not exist and unit not found; (bsc#1171437); - Fix samba_winbind package is installing python3-base without python3 package; (bsc#1169521); Changes in ldb: - Update to version 2.0.12 + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ and VLV combined; (bso#14364); (bsc#1173159). + ldb_ldap: fix off-by-one increment in lldb_add_msg_attr; (bso#14413). + lib/ldb: add unit test for ldb_ldap internal code. - Update to version 2.0.11 + lib ldb: lmdb init var before calling mdb_reader_check. + lib ldb: lmdb clear stale readers on write txn start; (bso#14330). + ldb tests: Confirm lmdb free list handling This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1023=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): ctdb-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 ctdb-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 ctdb-pcp-pmda-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 ctdb-pcp-pmda-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 ctdb-tests-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 ctdb-tests-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 ldb-debugsource-2.0.12-lp152.2.3.1 ldb-tools-2.0.12-lp152.2.3.1 ldb-tools-debuginfo-2.0.12-lp152.2.3.1 libdcerpc-binding0-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libdcerpc-binding0-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libdcerpc-devel-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libdcerpc-samr-devel-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libdcerpc-samr0-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libdcerpc-samr0-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libdcerpc0-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libdcerpc0-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libldb-devel-2.0.12-lp152.2.3.1 libldb2-2.0.12-lp152.2.3.1 libldb2-debuginfo-2.0.12-lp152.2.3.1 libndr-devel-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libndr-krb5pac-devel-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libndr-krb5pac0-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libndr-krb5pac0-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libndr-nbt-devel-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libndr-nbt0-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libndr-nbt0-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libndr-standard-devel-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libndr-standard0-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libndr-standard0-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libndr0-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libndr0-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libnetapi-devel-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libnetapi0-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libnetapi0-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamba-credentials-devel-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamba-credentials0-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamba-credentials0-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamba-errors-devel-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamba-errors0-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamba-errors0-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamba-hostconfig-devel-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamba-hostconfig0-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamba-hostconfig0-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamba-passdb-devel-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamba-passdb0-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamba-passdb0-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamba-policy-devel-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamba-policy-python3-devel-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamba-policy0-python3-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamba-policy0-python3-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamba-util-devel-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamba-util0-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamba-util0-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamdb-devel-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamdb0-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamdb0-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsmbclient-devel-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsmbclient0-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsmbclient0-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsmbconf-devel-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsmbconf0-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsmbconf0-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsmbldap-devel-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsmbldap2-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsmbldap2-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libtevent-util-devel-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libtevent-util0-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libtevent-util0-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libwbclient-devel-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libwbclient0-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libwbclient0-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 python3-ldb-2.0.12-lp152.2.3.1 python3-ldb-debuginfo-2.0.12-lp152.2.3.1 python3-ldb-devel-2.0.12-lp152.2.3.1 samba-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 samba-ad-dc-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 samba-ad-dc-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 samba-client-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 samba-client-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 samba-core-devel-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 samba-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 samba-debugsource-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 samba-dsdb-modules-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 samba-dsdb-modules-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 samba-libs-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 samba-libs-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 samba-libs-python3-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 samba-libs-python3-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 samba-python3-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 samba-python3-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 samba-test-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 samba-test-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 samba-winbind-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 samba-winbind-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 - openSUSE Leap 15.2 (x86_64): libdcerpc-binding0-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libdcerpc-binding0-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libdcerpc-samr0-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libdcerpc-samr0-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libdcerpc0-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libdcerpc0-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libldb2-32bit-2.0.12-lp152.2.3.1 libldb2-32bit-debuginfo-2.0.12-lp152.2.3.1 libndr-krb5pac0-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libndr-krb5pac0-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libndr-nbt0-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libndr-nbt0-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libndr-standard0-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libndr-standard0-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libndr0-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libndr0-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libnetapi-devel-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libnetapi0-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libnetapi0-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamba-credentials0-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamba-credentials0-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamba-errors0-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamba-errors0-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamba-hostconfig0-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamba-hostconfig0-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamba-passdb0-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamba-passdb0-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamba-policy0-python3-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamba-policy0-python3-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamba-util0-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamba-util0-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamdb0-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsamdb0-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsmbclient0-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsmbclient0-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsmbconf0-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsmbconf0-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsmbldap2-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libsmbldap2-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libtevent-util0-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libtevent-util0-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libwbclient0-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 libwbclient0-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 python3-ldb-32bit-2.0.12-lp152.2.3.1 python3-ldb-32bit-debuginfo-2.0.12-lp152.2.3.1 samba-ad-dc-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 samba-ad-dc-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 samba-ceph-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 samba-ceph-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 samba-client-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 samba-client-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 samba-libs-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 samba-libs-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 samba-libs-python3-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 samba-libs-python3-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 samba-winbind-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 samba-winbind-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 - openSUSE Leap 15.2 (noarch): samba-doc-4.11.11+git.180.2cf3b203f07-lp152.3.3.1 References: https://www.suse.com/security/cve/CVE-2020-10700.html https://www.suse.com/security/cve/CVE-2020-10704.html https://www.suse.com/security/cve/CVE-2020-10730.html https://www.suse.com/security/cve/CVE-2020-10745.html https://www.suse.com/security/cve/CVE-2020-10760.html https://www.suse.com/security/cve/CVE-2020-14303.html https://bugzilla.suse.com/1141320 https://bugzilla.suse.com/1162680 https://bugzilla.suse.com/1169095 https://bugzilla.suse.com/1169521 https://bugzilla.suse.com/1169850 https://bugzilla.suse.com/1169851 https://bugzilla.suse.com/1171437 https://bugzilla.suse.com/1172307 https://bugzilla.suse.com/1173159 https://bugzilla.suse.com/1173160 https://bugzilla.suse.com/1173161 https://bugzilla.suse.com/1173359 https://bugzilla.suse.com/1174120

1 0

openSUSE-RU-2020:1024-1: moderate: Recommended update for NetworkManager-branding
by maintenance＠opensuse.org 21 Jul '20

21 Jul '20

openSUSE Recommended Update: Recommended update for NetworkManager-branding ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1024-1 Rating: moderate References: #1172773 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for NetworkManager-branding fixes the following issues: - Fix an issue when NetworkManager uses an enexpanded macro. (bsc#1172773) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1024=1 Package List: - openSUSE Leap 15.2 (noarch): NetworkManager-branding-openSUSE-42.1-lp152.2.3.1 References: https://bugzilla.suse.com/1172773

1 0

openSUSE-SU-2020:1022-1: moderate: Security update for ant
by opensuse-security＠opensuse.org 20 Jul '20

20 Jul '20

openSUSE Security Update: Security update for ant ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1022-1 Rating: moderate References: #1171696 Cross-References: CVE-2020-1945 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for ant fixes the following issues: - CVE-2020-1945: Fixed an inseure temorary file vulnerability which could have potentially leaked sensitive information (bsc#1171696). This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1022=1 Package List: - openSUSE Leap 15.2 (noarch): ant-1.10.7-lp152.2.3.1 ant-antlr-1.10.7-lp152.2.3.1 ant-apache-bcel-1.10.7-lp152.2.3.1 ant-apache-bsf-1.10.7-lp152.2.3.1 ant-apache-log4j-1.10.7-lp152.2.3.1 ant-apache-oro-1.10.7-lp152.2.3.1 ant-apache-regexp-1.10.7-lp152.2.3.1 ant-apache-resolver-1.10.7-lp152.2.3.1 ant-apache-xalan2-1.10.7-lp152.2.3.1 ant-commons-logging-1.10.7-lp152.2.3.1 ant-commons-net-1.10.7-lp152.2.3.1 ant-imageio-1.10.7-lp152.2.3.1 ant-javamail-1.10.7-lp152.2.3.1 ant-jdepend-1.10.7-lp152.2.3.1 ant-jmf-1.10.7-lp152.2.3.1 ant-jsch-1.10.7-lp152.2.3.1 ant-junit-1.10.7-lp152.2.3.1 ant-junit5-1.10.7-lp152.2.3.1 ant-manual-1.10.7-lp152.2.3.1 ant-scripts-1.10.7-lp152.2.3.1 ant-swing-1.10.7-lp152.2.3.1 ant-testutil-1.10.7-lp152.2.3.1 ant-xz-1.10.7-lp152.2.3.1 References: https://www.suse.com/security/cve/CVE-2020-1945.html https://bugzilla.suse.com/1171696

1 0

openSUSE-SU-2020:1021-1: important: Security update for chromium
by opensuse-security＠opensuse.org 20 Jul '20

20 Jul '20

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1021-1 Rating: important References: #1174189 Cross-References: CVE-2020-6510 CVE-2020-6511 CVE-2020-6512 CVE-2020-6513 CVE-2020-6514 CVE-2020-6515 CVE-2020-6516 CVE-2020-6517 CVE-2020-6518 CVE-2020-6519 CVE-2020-6520 CVE-2020-6521 CVE-2020-6522 CVE-2020-6523 CVE-2020-6524 CVE-2020-6525 CVE-2020-6526 CVE-2020-6527 CVE-2020-6528 CVE-2020-6529 CVE-2020-6530 CVE-2020-6531 CVE-2020-6533 CVE-2020-6534 CVE-2020-6535 CVE-2020-6536 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 26 vulnerabilities is now available. Description: This update for chromium fixes the following issues: - Update to 84.0.4147.89 boo#1174189: * Critical CVE-2020-6510: Heap buffer overflow in background fetch. * High CVE-2020-6511: Side-channel information leakage in content security policy. * High CVE-2020-6512: Type Confusion in V8. * High CVE-2020-6513: Heap buffer overflow in PDFium. * High CVE-2020-6514: Inappropriate implementation in WebRTC. * High CVE-2020-6515: Use after free in tab strip. * High CVE-2020-6516: Policy bypass in CORS. * High CVE-2020-6517: Heap buffer overflow in history. * Medium CVE-2020-6518: Use after free in developer tools. * Medium CVE-2020-6519: Policy bypass in CSP. * Medium CVE-2020-6520: Heap buffer overflow in Skia. * Medium CVE-2020-6521: Side-channel information leakage in autofill. * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers. * Medium CVE-2020-6523: Out of bounds write in Skia. * Medium CVE-2020-6524: Heap buffer overflow in WebAudio. * Medium CVE-2020-6525: Heap buffer overflow in Skia. * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox. * Low CVE-2020-6527: Insufficient policy enforcement in CSP. * Low CVE-2020-6528: Incorrect security UI in basic auth. * Low CVE-2020-6529: Inappropriate implementation in WebRTC. * Low CVE-2020-6530: Out of bounds memory access in developer tools. * Low CVE-2020-6531: Side-channel information leakage in scroll to text. * Low CVE-2020-6533: Type Confusion in V8. * Low CVE-2020-6534: Heap buffer overflow in WebRTC. * Low CVE-2020-6535: Insufficient data validation in WebUI. * Low CVE-2020-6536: Incorrect security UI in PWAs. - Use bundled xcb-proto as we need to generate py2 bindings - Try to fix non-wayland build for Leap builds Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1021=1 Package List: - openSUSE Leap 15.1 (x86_64): chromedriver-84.0.4147.89-lp151.2.109.1 chromedriver-debuginfo-84.0.4147.89-lp151.2.109.1 chromium-84.0.4147.89-lp151.2.109.1 chromium-debuginfo-84.0.4147.89-lp151.2.109.1 chromium-debugsource-84.0.4147.89-lp151.2.109.1 References: https://www.suse.com/security/cve/CVE-2020-6510.html https://www.suse.com/security/cve/CVE-2020-6511.html https://www.suse.com/security/cve/CVE-2020-6512.html https://www.suse.com/security/cve/CVE-2020-6513.html https://www.suse.com/security/cve/CVE-2020-6514.html https://www.suse.com/security/cve/CVE-2020-6515.html https://www.suse.com/security/cve/CVE-2020-6516.html https://www.suse.com/security/cve/CVE-2020-6517.html https://www.suse.com/security/cve/CVE-2020-6518.html https://www.suse.com/security/cve/CVE-2020-6519.html https://www.suse.com/security/cve/CVE-2020-6520.html https://www.suse.com/security/cve/CVE-2020-6521.html https://www.suse.com/security/cve/CVE-2020-6522.html https://www.suse.com/security/cve/CVE-2020-6523.html https://www.suse.com/security/cve/CVE-2020-6524.html https://www.suse.com/security/cve/CVE-2020-6525.html https://www.suse.com/security/cve/CVE-2020-6526.html https://www.suse.com/security/cve/CVE-2020-6527.html https://www.suse.com/security/cve/CVE-2020-6528.html https://www.suse.com/security/cve/CVE-2020-6529.html https://www.suse.com/security/cve/CVE-2020-6530.html https://www.suse.com/security/cve/CVE-2020-6531.html https://www.suse.com/security/cve/CVE-2020-6533.html https://www.suse.com/security/cve/CVE-2020-6534.html https://www.suse.com/security/cve/CVE-2020-6535.html https://www.suse.com/security/cve/CVE-2020-6536.html https://bugzilla.suse.com/1174189

1 0