August 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2020:1207-1: moderate: Security update for balsa
by opensuse-security＠opensuse.org 14 Aug '20

14 Aug '20

openSUSE Security Update: Security update for balsa ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1207-1 Rating: moderate References: #1174711 Cross-References: CVE-2020-16118 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for balsa fixes the following issues: - CVE-2020-16118: Fixed a NULL pointer dereference (boo#1174711). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1207=1 Package List: - openSUSE Leap 15.1 (noarch): balsa-lang-2.5.5-lp151.3.3.1 - openSUSE Leap 15.1 (x86_64): balsa-2.5.5-lp151.3.3.1 balsa-debuginfo-2.5.5-lp151.3.3.1 balsa-debugsource-2.5.5-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2020-16118.html https://bugzilla.suse.com/1174711

1 0

openSUSE-RU-2020:1202-1: moderate: Recommended update for libstorage-ng
by maintenance＠opensuse.org 14 Aug '20

14 Aug '20

openSUSE Recommended Update: Recommended update for libstorage-ng ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1202-1 Rating: moderate References: #1172866 #1173610 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for libstorage-ng fixes the following issues: - merge gh#openSUSE/libstorage-ng#754 - Fix for an issue when NVME client is not installing if the root partition is an NVME device. (bsc#1172866) - Delegate to initial guided proposal when no partitions are defined in the profile. (bsc#1173610) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1202=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libstorage-ng-debuginfo-4.2.76-lp152.2.3.1 libstorage-ng-debugsource-4.2.76-lp152.2.3.1 libstorage-ng-devel-4.2.76-lp152.2.3.1 libstorage-ng-integration-tests-4.2.76-lp152.2.3.1 libstorage-ng-python3-4.2.76-lp152.2.3.1 libstorage-ng-python3-debuginfo-4.2.76-lp152.2.3.1 libstorage-ng-ruby-4.2.76-lp152.2.3.1 libstorage-ng-ruby-debuginfo-4.2.76-lp152.2.3.1 libstorage-ng-utils-4.2.76-lp152.2.3.1 libstorage-ng-utils-debuginfo-4.2.76-lp152.2.3.1 libstorage-ng1-4.2.76-lp152.2.3.1 libstorage-ng1-debuginfo-4.2.76-lp152.2.3.1 yast2-storage-ng-4.2.111-lp152.2.3.1 - openSUSE Leap 15.2 (noarch): libstorage-ng-lang-4.2.76-lp152.2.3.1 References: https://bugzilla.suse.com/1172866 https://bugzilla.suse.com/1173610

1 0

openSUSE-SU-2020:1206-1: important: Security update for chromium
by opensuse-security＠opensuse.org 14 Aug '20

14 Aug '20

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1206-1 Rating: important References: #1174497 #1175044 #1175085 Cross-References: CVE-2020-6542 CVE-2020-6543 CVE-2020-6544 CVE-2020-6545 CVE-2020-6546 CVE-2020-6547 CVE-2020-6548 CVE-2020-6549 CVE-2020-6550 CVE-2020-6551 CVE-2020-6552 CVE-2020-6553 CVE-2020-6554 CVE-2020-6555 Affected Products: openSUSE Leap 15.2 openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 14 vulnerabilities is now available. Description: This update for chromium fixes the following issues: - Chromium updated to 84.0.4147.125 (boo#1175085) * CVE-2020-6542: Use after free in ANGLE * CVE-2020-6543: Use after free in task scheduling * CVE-2020-6544: Use after free in media * CVE-2020-6545: Use after free in audio * CVE-2020-6546: Inappropriate implementation in installer * CVE-2020-6547: Incorrect security UI in media * CVE-2020-6548: Heap buffer overflow in Skia * CVE-2020-6549: Use after free in media * CVE-2020-6550: Use after free in IndexedDB * CVE-2020-6551: Use after free in WebXR * CVE-2020-6552: Use after free in Blink * CVE-2020-6553: Use after free in offline mode * CVE-2020-6554: Use after free in extensions * CVE-2020-6555: Out of bounds read in WebGL * Various fixes from internal audits, fuzzing and other initiatives - Disable wayland everywhere as it breaks headless and middle mouse copy everywhere: boo#1174497 boo#1175044 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1206=1 - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1206=1 Package List: - openSUSE Leap 15.2 (x86_64): chromedriver-84.0.4147.125-lp152.2.12.2 chromedriver-debuginfo-84.0.4147.125-lp152.2.12.2 chromium-84.0.4147.125-lp152.2.12.2 chromium-debuginfo-84.0.4147.125-lp152.2.12.2 chromium-debugsource-84.0.4147.125-lp152.2.12.2 - openSUSE Leap 15.1 (x86_64): chromedriver-84.0.4147.125-lp151.2.115.1 chromedriver-debuginfo-84.0.4147.125-lp151.2.115.1 chromium-84.0.4147.125-lp151.2.115.1 chromium-debuginfo-84.0.4147.125-lp151.2.115.1 chromium-debugsource-84.0.4147.125-lp151.2.115.1 References: https://www.suse.com/security/cve/CVE-2020-6542.html https://www.suse.com/security/cve/CVE-2020-6543.html https://www.suse.com/security/cve/CVE-2020-6544.html https://www.suse.com/security/cve/CVE-2020-6545.html https://www.suse.com/security/cve/CVE-2020-6546.html https://www.suse.com/security/cve/CVE-2020-6547.html https://www.suse.com/security/cve/CVE-2020-6548.html https://www.suse.com/security/cve/CVE-2020-6549.html https://www.suse.com/security/cve/CVE-2020-6550.html https://www.suse.com/security/cve/CVE-2020-6551.html https://www.suse.com/security/cve/CVE-2020-6552.html https://www.suse.com/security/cve/CVE-2020-6553.html https://www.suse.com/security/cve/CVE-2020-6554.html https://www.suse.com/security/cve/CVE-2020-6555.html https://bugzilla.suse.com/1174497 https://bugzilla.suse.com/1175044 https://bugzilla.suse.com/1175085

1 0

openSUSE-RU-2020:1203-1: important: Recommended update for python-azure-agent
by maintenance＠opensuse.org 14 Aug '20

14 Aug '20

openSUSE Recommended Update: Recommended update for python-azure-agent ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1203-1 Rating: important References: #1173866 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-azure-agent fixes the following issues: - Properly set the DHCP configuration to push the hostname to the DHCP server. (bsc#1173866) - Do not bring the interface down to push the hostname, just use 'ifup'. (bsc#1173866) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1203=1 Package List: - openSUSE Leap 15.2 (noarch): python-azure-agent-2.2.45-lp152.3.3.1 python-azure-agent-test-2.2.45-lp152.3.3.1 References: https://bugzilla.suse.com/1173866

1 0

openSUSE-RU-2020:1201-1: moderate: Recommended update for gnome-control-center
by maintenance＠opensuse.org 14 Aug '20

14 Aug '20

openSUSE Recommended Update: Recommended update for gnome-control-center ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1201-1 Rating: moderate References: #1160173 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gnome-control-center fixes the following issues: - Fix the resolution list as it shows only the currently used resolution. (bsc#1160173 glgo#GNOME/Settings#903) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1201=1 Package List: - openSUSE Leap 15.2 (noarch): gnome-control-center-lang-3.34.6-lp152.2.3.1 - openSUSE Leap 15.2 (x86_64): gnome-control-center-3.34.6-lp152.2.3.1 gnome-control-center-color-3.34.6-lp152.2.3.1 gnome-control-center-debuginfo-3.34.6-lp152.2.3.1 gnome-control-center-debugsource-3.34.6-lp152.2.3.1 gnome-control-center-devel-3.34.6-lp152.2.3.1 gnome-control-center-goa-3.34.6-lp152.2.3.1 gnome-control-center-user-faces-3.34.6-lp152.2.3.1 References: https://bugzilla.suse.com/1160173

1 0

openSUSE-SU-2020:1204-1: moderate: Security update for perl-XML-Twig
by opensuse-security＠opensuse.org 14 Aug '20

14 Aug '20

openSUSE Security Update: Security update for perl-XML-Twig ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1204-1 Rating: moderate References: #1008644 Cross-References: CVE-2016-9180 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for perl-XML-Twig fixes the following issues: - Security fix [bsc#1008644, CVE-2016-9180] * Setting expand_external_ents to 0 or -1 currently doesn't work as expected; To completely turn off expanding external entities use no_xxe. * Update documentation for XML::Twig to mention problems with expand_external_ents and add information about new no_xxe argument This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1204=1 Package List: - openSUSE Leap 15.2 (noarch): perl-XML-Twig-3.52-lp152.4.3.1 References: https://www.suse.com/security/cve/CVE-2016-9180.html https://bugzilla.suse.com/1008644

1 0

openSUSE-SU-2020:1205-1: important: Security update for MozillaThunderbird
by opensuse-security＠opensuse.org 14 Aug '20

14 Aug '20

openSUSE Security Update: Security update for MozillaThunderbird ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1205-1 Rating: important References: #1174538 Cross-References: CVE-2020-15652 CVE-2020-15659 CVE-2020-6463 CVE-2020-6514 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for MozillaThunderbird fixes the following issues: - Updated to Mozilla Thunderbird 68.11: * Fixed various security issues (MFSA-2020-35, bsc#1174538). * Fixed CVE-2020-15652: Potential leak of redirect targets when loading scripts in a worker (bsc#1174538). * Fixed CVE-2020-6514: WebRTC data channel leaks internal address to peer (bsc#1174538). * Fixed CVE-2020-6463: Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture (bsc#1174538). * Fixed CVE-2020-15659: Memory safety bugs fixed in Thunderbird 68.11 (bsc#1174538). * Fixed a bug with FileLink attachments included as a link and file when added from a network drive via drag & drop (bmo#793118). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1205=1 Package List: - openSUSE Leap 15.2 (x86_64): MozillaThunderbird-68.11.0-lp152.2.7.1 MozillaThunderbird-debuginfo-68.11.0-lp152.2.7.1 MozillaThunderbird-debugsource-68.11.0-lp152.2.7.1 MozillaThunderbird-translations-common-68.11.0-lp152.2.7.1 MozillaThunderbird-translations-other-68.11.0-lp152.2.7.1 References: https://www.suse.com/security/cve/CVE-2020-15652.html https://www.suse.com/security/cve/CVE-2020-15659.html https://www.suse.com/security/cve/CVE-2020-6463.html https://www.suse.com/security/cve/CVE-2020-6514.html https://bugzilla.suse.com/1174538

1 0

openSUSE-SU-2020:1198-1: important: Security update for libX11
by opensuse-security＠opensuse.org 14 Aug '20

14 Aug '20

openSUSE Security Update: Security update for libX11 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1198-1 Rating: important References: #1174628 Cross-References: CVE-2020-14344 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libX11 fixes the following issues: - Fixed XIM client heap overflows (CVE-2020-14344, bsc#1174628). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1198=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libX11-6-1.6.5-lp151.4.6.1 libX11-6-debuginfo-1.6.5-lp151.4.6.1 libX11-debugsource-1.6.5-lp151.4.6.1 libX11-devel-1.6.5-lp151.4.6.1 libX11-xcb1-1.6.5-lp151.4.6.1 libX11-xcb1-debuginfo-1.6.5-lp151.4.6.1 - openSUSE Leap 15.1 (x86_64): libX11-6-32bit-1.6.5-lp151.4.6.1 libX11-6-32bit-debuginfo-1.6.5-lp151.4.6.1 libX11-devel-32bit-1.6.5-lp151.4.6.1 libX11-xcb1-32bit-1.6.5-lp151.4.6.1 libX11-xcb1-32bit-debuginfo-1.6.5-lp151.4.6.1 - openSUSE Leap 15.1 (noarch): libX11-data-1.6.5-lp151.4.6.1 References: https://www.suse.com/security/cve/CVE-2020-14344.html https://bugzilla.suse.com/1174628

1 0

openSUSE-RU-2020:1197-1: moderate: Recommended update for open-lldp
by maintenance＠opensuse.org 13 Aug '20

13 Aug '20

openSUSE Recommended Update: Recommended update for open-lldp ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1197-1 Rating: moderate References: #1153520 #1170745 #1171284 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for open-lldp fixes the following issues: - Fix for a segementation fault, when agents change their MAC address (bsc#1171284) - lldapd will now transmit the permanent MAC address (the MAC address of the underlying physical device) as port id, thus allowing the switch or any management application to differentiate between those ports. (bsc#1153520) - Fix for a segmentation fault, when lldapd registers an interface and it gets shortly removed afterwards. (bsc#1170745) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1197=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): liblldp_clif1-1.0.1+63.f977e67-lp151.2.3.1 liblldp_clif1-debuginfo-1.0.1+63.f977e67-lp151.2.3.1 open-lldp-1.0.1+63.f977e67-lp151.2.3.1 open-lldp-debuginfo-1.0.1+63.f977e67-lp151.2.3.1 open-lldp-debugsource-1.0.1+63.f977e67-lp151.2.3.1 open-lldp-devel-1.0.1+63.f977e67-lp151.2.3.1 References: https://bugzilla.suse.com/1153520 https://bugzilla.suse.com/1170745 https://bugzilla.suse.com/1171284

1 0

openSUSE-SU-2020:1196-1: important: Security update for xen
by opensuse-security＠opensuse.org 13 Aug '20

13 Aug '20

openSUSE Security Update: Security update for xen ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1196-1 Rating: important References: #1172356 #1174543 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for xen fixes the following issues: - bsc#1174543 - secure boot related fixes - bsc#1172356 - Not able to hot-plug NIC via virt-manager, asks to attach on next reboot while it should be live attached This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1196=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): xen-debugsource-4.12.3_06-lp151.2.24.1 xen-devel-4.12.3_06-lp151.2.24.1 xen-libs-4.12.3_06-lp151.2.24.1 xen-libs-debuginfo-4.12.3_06-lp151.2.24.1 xen-tools-domU-4.12.3_06-lp151.2.24.1 xen-tools-domU-debuginfo-4.12.3_06-lp151.2.24.1 - openSUSE Leap 15.1 (x86_64): xen-4.12.3_06-lp151.2.24.1 xen-doc-html-4.12.3_06-lp151.2.24.1 xen-libs-32bit-4.12.3_06-lp151.2.24.1 xen-libs-32bit-debuginfo-4.12.3_06-lp151.2.24.1 xen-tools-4.12.3_06-lp151.2.24.1 xen-tools-debuginfo-4.12.3_06-lp151.2.24.1 References: https://bugzilla.suse.com/1172356 https://bugzilla.suse.com/1174543

1 0

openSUSE-RU-2020:1195-1: moderate: Recommended update for php7
by maintenance＠opensuse.org 12 Aug '20

12 Aug '20

openSUSE Recommended Update: Recommended update for php7 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1195-1 Rating: moderate References: #1173786 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for php7 fixes the following issues: - Add 'tmpfiles.d' for 'php-fpm' to provide a base for a socket and fix this error accordingly. (bsc#1173786) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1195=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): apache2-mod_php7-7.4.6-lp152.2.3.2 apache2-mod_php7-debuginfo-7.4.6-lp152.2.3.2 php7-7.4.6-lp152.2.3.2 php7-bcmath-7.4.6-lp152.2.3.2 php7-bcmath-debuginfo-7.4.6-lp152.2.3.2 php7-bz2-7.4.6-lp152.2.3.2 php7-bz2-debuginfo-7.4.6-lp152.2.3.2 php7-calendar-7.4.6-lp152.2.3.2 php7-calendar-debuginfo-7.4.6-lp152.2.3.2 php7-ctype-7.4.6-lp152.2.3.2 php7-ctype-debuginfo-7.4.6-lp152.2.3.2 php7-curl-7.4.6-lp152.2.3.2 php7-curl-debuginfo-7.4.6-lp152.2.3.2 php7-dba-7.4.6-lp152.2.3.2 php7-dba-debuginfo-7.4.6-lp152.2.3.2 php7-debuginfo-7.4.6-lp152.2.3.2 php7-debugsource-7.4.6-lp152.2.3.2 php7-devel-7.4.6-lp152.2.3.2 php7-dom-7.4.6-lp152.2.3.2 php7-dom-debuginfo-7.4.6-lp152.2.3.2 php7-embed-7.4.6-lp152.2.3.2 php7-embed-debuginfo-7.4.6-lp152.2.3.2 php7-enchant-7.4.6-lp152.2.3.2 php7-enchant-debuginfo-7.4.6-lp152.2.3.2 php7-exif-7.4.6-lp152.2.3.2 php7-exif-debuginfo-7.4.6-lp152.2.3.2 php7-fastcgi-7.4.6-lp152.2.3.2 php7-fastcgi-debuginfo-7.4.6-lp152.2.3.2 php7-fileinfo-7.4.6-lp152.2.3.2 php7-fileinfo-debuginfo-7.4.6-lp152.2.3.2 php7-firebird-7.4.6-lp152.2.3.2 php7-firebird-debuginfo-7.4.6-lp152.2.3.2 php7-fpm-7.4.6-lp152.2.3.2 php7-fpm-debuginfo-7.4.6-lp152.2.3.2 php7-ftp-7.4.6-lp152.2.3.2 php7-ftp-debuginfo-7.4.6-lp152.2.3.2 php7-gd-7.4.6-lp152.2.3.2 php7-gd-debuginfo-7.4.6-lp152.2.3.2 php7-gettext-7.4.6-lp152.2.3.2 php7-gettext-debuginfo-7.4.6-lp152.2.3.2 php7-gmp-7.4.6-lp152.2.3.2 php7-gmp-debuginfo-7.4.6-lp152.2.3.2 php7-iconv-7.4.6-lp152.2.3.2 php7-iconv-debuginfo-7.4.6-lp152.2.3.2 php7-intl-7.4.6-lp152.2.3.2 php7-intl-debuginfo-7.4.6-lp152.2.3.2 php7-json-7.4.6-lp152.2.3.2 php7-json-debuginfo-7.4.6-lp152.2.3.2 php7-ldap-7.4.6-lp152.2.3.2 php7-ldap-debuginfo-7.4.6-lp152.2.3.2 php7-mbstring-7.4.6-lp152.2.3.2 php7-mbstring-debuginfo-7.4.6-lp152.2.3.2 php7-mysql-7.4.6-lp152.2.3.2 php7-mysql-debuginfo-7.4.6-lp152.2.3.2 php7-odbc-7.4.6-lp152.2.3.2 php7-odbc-debuginfo-7.4.6-lp152.2.3.2 php7-opcache-7.4.6-lp152.2.3.2 php7-opcache-debuginfo-7.4.6-lp152.2.3.2 php7-openssl-7.4.6-lp152.2.3.2 php7-openssl-debuginfo-7.4.6-lp152.2.3.2 php7-pcntl-7.4.6-lp152.2.3.2 php7-pcntl-debuginfo-7.4.6-lp152.2.3.2 php7-pdo-7.4.6-lp152.2.3.2 php7-pdo-debuginfo-7.4.6-lp152.2.3.2 php7-pgsql-7.4.6-lp152.2.3.2 php7-pgsql-debuginfo-7.4.6-lp152.2.3.2 php7-phar-7.4.6-lp152.2.3.2 php7-phar-debuginfo-7.4.6-lp152.2.3.2 php7-posix-7.4.6-lp152.2.3.2 php7-posix-debuginfo-7.4.6-lp152.2.3.2 php7-readline-7.4.6-lp152.2.3.2 php7-readline-debuginfo-7.4.6-lp152.2.3.2 php7-shmop-7.4.6-lp152.2.3.2 php7-shmop-debuginfo-7.4.6-lp152.2.3.2 php7-snmp-7.4.6-lp152.2.3.2 php7-snmp-debuginfo-7.4.6-lp152.2.3.2 php7-soap-7.4.6-lp152.2.3.2 php7-soap-debuginfo-7.4.6-lp152.2.3.2 php7-sockets-7.4.6-lp152.2.3.2 php7-sockets-debuginfo-7.4.6-lp152.2.3.2 php7-sodium-7.4.6-lp152.2.3.2 php7-sodium-debuginfo-7.4.6-lp152.2.3.2 php7-sqlite-7.4.6-lp152.2.3.2 php7-sqlite-debuginfo-7.4.6-lp152.2.3.2 php7-sysvmsg-7.4.6-lp152.2.3.2 php7-sysvmsg-debuginfo-7.4.6-lp152.2.3.2 php7-sysvsem-7.4.6-lp152.2.3.2 php7-sysvsem-debuginfo-7.4.6-lp152.2.3.2 php7-sysvshm-7.4.6-lp152.2.3.2 php7-sysvshm-debuginfo-7.4.6-lp152.2.3.2 php7-test-7.4.6-lp152.2.3.2 php7-tidy-7.4.6-lp152.2.3.2 php7-tidy-debuginfo-7.4.6-lp152.2.3.2 php7-tokenizer-7.4.6-lp152.2.3.2 php7-tokenizer-debuginfo-7.4.6-lp152.2.3.2 php7-xmlreader-7.4.6-lp152.2.3.2 php7-xmlreader-debuginfo-7.4.6-lp152.2.3.2 php7-xmlrpc-7.4.6-lp152.2.3.2 php7-xmlrpc-debuginfo-7.4.6-lp152.2.3.2 php7-xmlwriter-7.4.6-lp152.2.3.2 php7-xmlwriter-debuginfo-7.4.6-lp152.2.3.2 php7-xsl-7.4.6-lp152.2.3.2 php7-xsl-debuginfo-7.4.6-lp152.2.3.2 php7-zip-7.4.6-lp152.2.3.2 php7-zip-debuginfo-7.4.6-lp152.2.3.2 php7-zlib-7.4.6-lp152.2.3.2 php7-zlib-debuginfo-7.4.6-lp152.2.3.2 References: https://bugzilla.suse.com/1173786

1 0

openSUSE-SU-2020:1190-1: important: Security update for xen
by opensuse-security＠opensuse.org 12 Aug '20

12 Aug '20

openSUSE Security Update: Security update for xen ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1190-1 Rating: important References: #1172356 #1174543 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for xen fixes the following issues: - bsc#1174543 - secure boot related fixes - bsc#1172356 - Not able to hot-plug NIC via virt-manager, asks to attach on next reboot while it should be live attached This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1190=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): xen-debugsource-4.13.1_06-lp152.2.6.1 xen-devel-4.13.1_06-lp152.2.6.1 xen-libs-4.13.1_06-lp152.2.6.1 xen-libs-debuginfo-4.13.1_06-lp152.2.6.1 xen-tools-domU-4.13.1_06-lp152.2.6.1 xen-tools-domU-debuginfo-4.13.1_06-lp152.2.6.1 - openSUSE Leap 15.2 (x86_64): xen-4.13.1_06-lp152.2.6.1 xen-doc-html-4.13.1_06-lp152.2.6.1 xen-libs-32bit-4.13.1_06-lp152.2.6.1 xen-libs-32bit-debuginfo-4.13.1_06-lp152.2.6.1 xen-tools-4.13.1_06-lp152.2.6.1 xen-tools-debuginfo-4.13.1_06-lp152.2.6.1 - openSUSE Leap 15.2 (noarch): xen-tools-xendomains-wait-disk-4.13.1_06-lp152.2.6.1 References: https://bugzilla.suse.com/1172356 https://bugzilla.suse.com/1174543

1 0

openSUSE-SU-2020:1194-1: moderate: Security update for go1.13
by opensuse-security＠opensuse.org 12 Aug '20

12 Aug '20

openSUSE Security Update: Security update for go1.13 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1194-1 Rating: moderate References: #1149259 #1174977 Cross-References: CVE-2020-16845 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for go1.13 fixes the following issues: - go1.13 was updated to version 1.13.5 - CVE-2020-16845: dUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs (bsc#1174977). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1194=1 Package List: - openSUSE Leap 15.2 (x86_64): go1.13-1.13.15-lp152.2.7.1 go1.13-doc-1.13.15-lp152.2.7.1 go1.13-race-1.13.15-lp152.2.7.1 References: https://www.suse.com/security/cve/CVE-2020-16845.html https://bugzilla.suse.com/1149259 https://bugzilla.suse.com/1174977

1 0

openSUSE-SU-2020:1191-1: important: Security update for java-11-openjdk
by opensuse-security＠opensuse.org 12 Aug '20

12 Aug '20

openSUSE Security Update: Security update for java-11-openjdk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1191-1 Rating: important References: #1174157 Cross-References: CVE-2020-14556 CVE-2020-14562 CVE-2020-14573 CVE-2020-14577 CVE-2020-14581 CVE-2020-14583 CVE-2020-14593 CVE-2020-14621 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes 8 vulnerabilities is now available. Description: This update for java-11-openjdk fixes the following issues: - Update to upstream tag jdk-11.0.8+10 (July 2020 CPU, bsc#1174157) * Security fixes: + JDK-8230613: Better ASCII conversions + JDK-8231800: Better listing of arrays + JDK-8232014: Expand DTD support + JDK-8233234: Better Zip Naming + JDK-8233239, CVE-2020-14562: Enhance TIFF support + JDK-8233255: Better Swing Buttons + JDK-8234032: Improve basic calendar services + JDK-8234042: Better factory production of certificates + JDK-8234418: Better parsing with CertificateFactory + JDK-8234836: Improve serialization handling + JDK-8236191: Enhance OID processing + JDK-8236867, CVE-2020-14573: Enhance Graal interface handling + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior + JDK-8237592, CVE-2020-14577: Enhance certificate verification + JDK-8238002, CVE-2020-14581: Better matrix operations + JDK-8238013: Enhance String writing + JDK-8238804: Enhance key handling process + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable + JDK-8238843: Enhanced font handing + JDK-8238920, CVE-2020-14583: Better Buffer support + JDK-8238925: Enhance WAV file playback + JDK-8240119, CVE-2020-14593: Less Affine Transformations + JDK-8240482: Improved WAV file playback + JDK-8241379: Update JCEKS support + JDK-8241522: Manifest improved jar headers redux + JDK-8242136, CVE-2020-14621: Better XML namespace handling * Other changes: + JDK-6933331: (d3d/ogl) java.lang.IllegalStateException: Buffers have not been created + JDK-7124307: JSpinner and changing value by mouse + JDK-8022574: remove HaltNode code after uncommon trap calls + JDK-8039082: [TEST_BUG] Test java/awt/dnd/BadSerializationTest/BadSerializationTest.java fails + JDK-8040630: Popup menus and tooltips flicker with previous popup contents when first shown + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with ENOMEM when joining group (OS X 10.9) + JDK-8048215: [TESTBUG] java/lang/management/ManagementFactory/ThreadMXBeanProxy.java Expected non-null LockInfo + JDK-8051349: nsk/jvmti/scenarios/sampling/SP06/sp06t003 fails in nightly + JDK-8080353: JShell: Better error message on attempting to add default method + JDK-8139876: Exclude hanging nsk/stress/stack from execution with deoptimization enabled + JDK-8146090: java/lang/ref/ReachabilityFenceTest.java fails with -XX:+DeoptimizeALot + JDK-8153430: jdk regression test MletParserLocaleTest, ParserInfiniteLoopTest reduce default timeout + JDK-8156207: Resource allocated BitMaps are often cleared unnecessarily + JDK-8159740: JShell: corralled declarations do not have correct source to wrapper mapping + JDK-8175984: ICC_Profile has un-needed, not-empty finalize method + JDK-8176359: Frame#setMaximizedbounds not working properly in multi screen environments + JDK-8183369: RFC unconformity of HttpURLConnection with proxy + JDK-8187078: -XX:+VerifyOops finds numerous problems when running JPRT + JDK-8189861: Refactor CacheFind + JDK-8191169: java/net/Authenticator/B4769350.java failed intermittently + JDK-8191930: [Graal] emits unparseable XML into compile log + JDK-8193879: Java debugger hangs on method invocation + JDK-8196019: java/awt/Window/Grab/GrabTest.java fails on Windows + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails + JDK-8198000: java/awt/List/EmptyListEventTest/EmptyListEventTest.java debug assert on Windows + JDK-8198001: java/awt/Menu/WrongParentAfterRemoveMenu/ /WrongParentAfterRemoveMenu.java debug assert on Windows + JDK-8198339: Test javax/swing/border/Test6981576.java is unstable + JDK-8200701: jdk/jshell/ExceptionsTest.java fails on Windows, after JDK-8198801 + JDK-8203264: JNI exception pending in PlainDatagramSocketImpl.c:740 + JDK-8203672: JNI exception pending in PlainSocketImpl.c + JDK-8203673: JNI exception pending in DualStackPlainDatagramSocketImpl.c:398 + JDK-8204834: Fix confusing "allocate" naming in OopStorage + JDK-8205399: Set node color on pinned HashMap.TreeNode deletion + JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/ /RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with handshake_failure + JDK-8206179: com/sun/management/OperatingSystemMXBean/ /GetCommittedVirtualMemorySize.java fails with Committed virtual memory size illegal value + JDK-8207334: VM times out in VM_HandshakeAllThreads::doit() with RunThese30M + JDK-8208277: Code cache heap (-XX:ReservedCodeCacheSize) doesn't work with 1GB LargePages This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1191=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): java-11-openjdk-11.0.8.0-lp152.2.3.1 java-11-openjdk-accessibility-11.0.8.0-lp152.2.3.1 java-11-openjdk-accessibility-debuginfo-11.0.8.0-lp152.2.3.1 java-11-openjdk-debuginfo-11.0.8.0-lp152.2.3.1 java-11-openjdk-debugsource-11.0.8.0-lp152.2.3.1 java-11-openjdk-demo-11.0.8.0-lp152.2.3.1 java-11-openjdk-devel-11.0.8.0-lp152.2.3.1 java-11-openjdk-headless-11.0.8.0-lp152.2.3.1 java-11-openjdk-jmods-11.0.8.0-lp152.2.3.1 java-11-openjdk-src-11.0.8.0-lp152.2.3.1 - openSUSE Leap 15.2 (noarch): java-11-openjdk-javadoc-11.0.8.0-lp152.2.3.1 References: https://www.suse.com/security/cve/CVE-2020-14556.html https://www.suse.com/security/cve/CVE-2020-14562.html https://www.suse.com/security/cve/CVE-2020-14573.html https://www.suse.com/security/cve/CVE-2020-14577.html https://www.suse.com/security/cve/CVE-2020-14581.html https://www.suse.com/security/cve/CVE-2020-14583.html https://www.suse.com/security/cve/CVE-2020-14593.html https://www.suse.com/security/cve/CVE-2020-14621.html https://bugzilla.suse.com/1174157

1 0

openSUSE-RU-2020:1187-1: Recommended update for go1.10
by maintenance＠opensuse.org 12 Aug '20

12 Aug '20

openSUSE Recommended Update: Recommended update for go1.10 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1187-1 Rating: low References: #1169832 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for go1.10 fixes the following issues: - Fix for an issue when installing on Raspberry Pi causes illegal instruction due to unproper ARM arch set. (bsc#1169832) This update was imported from the SUSE:SLE-15:Update update project. This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1187=1 Package List: - openSUSE Backports SLE-15-SP1 (x86_64): go1.10-1.10.8-bp151.2.6.1 go1.10-doc-1.10.8-bp151.2.6.1 go1.10-race-1.10.8-bp151.2.6.1 References: https://bugzilla.suse.com/1169832

1 0

openSUSE-SU-2020:1188-1: moderate: Security update for wireshark
by opensuse-security＠opensuse.org 12 Aug '20

12 Aug '20

openSUSE Security Update: Security update for wireshark ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1188-1 Rating: moderate References: #1169063 #1171899 #1173606 Cross-References: CVE-2020-11647 CVE-2020-13164 CVE-2020-15466 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for wireshark fixes the following issues: - Wireshark to 3.2.5: * CVE-2020-15466: GVCP dissector infinite loop (bsc#1173606) * CVE-2020-13164: NFS dissector crash (bsc#1171899) * CVE-2020-11647: The BACapp dissector could crash (bsc#1169063) - Further features, bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-3.2.5.html This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1188=1 Package List: - openSUSE Leap 15.1 (x86_64): libwireshark13-3.2.5-lp151.2.12.1 libwireshark13-debuginfo-3.2.5-lp151.2.12.1 libwiretap10-3.2.5-lp151.2.12.1 libwiretap10-debuginfo-3.2.5-lp151.2.12.1 libwsutil11-3.2.5-lp151.2.12.1 libwsutil11-debuginfo-3.2.5-lp151.2.12.1 wireshark-3.2.5-lp151.2.12.1 wireshark-debuginfo-3.2.5-lp151.2.12.1 wireshark-debugsource-3.2.5-lp151.2.12.1 wireshark-devel-3.2.5-lp151.2.12.1 wireshark-ui-qt-3.2.5-lp151.2.12.1 wireshark-ui-qt-debuginfo-3.2.5-lp151.2.12.1 References: https://www.suse.com/security/cve/CVE-2020-11647.html https://www.suse.com/security/cve/CVE-2020-13164.html https://www.suse.com/security/cve/CVE-2020-15466.html https://bugzilla.suse.com/1169063 https://bugzilla.suse.com/1171899 https://bugzilla.suse.com/1173606

1 0

openSUSE-SU-2020:1189-1: important: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 12 Aug '20

12 Aug '20

openSUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1189-1 Rating: important References: #1171433 #1174538 Cross-References: CVE-2020-15652 CVE-2020-15653 CVE-2020-15654 CVE-2020-15655 CVE-2020-15656 CVE-2020-15657 CVE-2020-15658 CVE-2020-15659 CVE-2020-6463 CVE-2020-6514 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes 10 vulnerabilities is now available. Description: This update for MozillaFirefox fixes the following issues: This update for MozillaFirefox and pipewire fixes the following issues: MozillaFirefox Extended Support Release 78.1.0 ESR * Fixed: Various stability, functionality, and security fixes (bsc#1174538) * CVE-2020-15652: Potential leak of redirect targets when loading scripts in a worker * CVE-2020-6514: WebRTC data channel leaks internal address to peer * CVE-2020-15655: Extension APIs could be used to bypass Same-Origin Policy * CVE-2020-15653: Bypassing iframe sandbox when allowing popups * CVE-2020-6463: Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture * CVE-2020-15656: Type confusion for special arguments in IonMonkey * CVE-2020-15658: Overriding file type when saving to disk * CVE-2020-15657: DLL hijacking due to incorrect loading path * CVE-2020-15654: Custom cursor can overlay user interface * CVE-2020-15659: Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1 pipewire was updated to version 0.3.6 (bsc#1171433, jsc#ECO-2308): * Extensive memory leak fixing and stress testing was done. A big leak in screen sharing with DMA-BUF was fixed. * Compile fixes * Stability improvements in jack and pulseaudio layers. * Added the old portal module to make the Camera portal work again. This will be moved to the session manager in future versions. * Improvements to the GStreamer source and sink shutdown. * Fix compatibility with v2 clients again when negotiating buffers. This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1189=1 Package List: - openSUSE Leap 15.2 (x86_64): MozillaFirefox-78.1.0-lp152.2.15.1 MozillaFirefox-branding-upstream-78.1.0-lp152.2.15.1 MozillaFirefox-buildsymbols-78.1.0-lp152.2.15.1 MozillaFirefox-debuginfo-78.1.0-lp152.2.15.1 MozillaFirefox-debugsource-78.1.0-lp152.2.15.1 MozillaFirefox-devel-78.1.0-lp152.2.15.1 MozillaFirefox-translations-common-78.1.0-lp152.2.15.1 MozillaFirefox-translations-other-78.1.0-lp152.2.15.1 gstreamer-plugin-pipewire-0.3.6-lp152.2.3.1 gstreamer-plugin-pipewire-debuginfo-0.3.6-lp152.2.3.1 libpipewire-0_3-0-0.3.6-lp152.2.3.1 libpipewire-0_3-0-debuginfo-0.3.6-lp152.2.3.1 pipewire-0.3.6-lp152.2.3.1 pipewire-debuginfo-0.3.6-lp152.2.3.1 pipewire-debugsource-0.3.6-lp152.2.3.1 pipewire-devel-0.3.6-lp152.2.3.1 pipewire-doc-0.3.6-lp152.2.3.1 pipewire-libjack-0_3-0.3.6-lp152.2.3.1 pipewire-libjack-0_3-debuginfo-0.3.6-lp152.2.3.1 pipewire-libpulse-0_3-0.3.6-lp152.2.3.1 pipewire-libpulse-0_3-debuginfo-0.3.6-lp152.2.3.1 pipewire-modules-0.3.6-lp152.2.3.1 pipewire-modules-debuginfo-0.3.6-lp152.2.3.1 pipewire-spa-plugins-0_2-0.3.6-lp152.2.3.1 pipewire-spa-plugins-0_2-debuginfo-0.3.6-lp152.2.3.1 pipewire-spa-tools-0.3.6-lp152.2.3.1 pipewire-spa-tools-debuginfo-0.3.6-lp152.2.3.1 pipewire-tools-0.3.6-lp152.2.3.1 pipewire-tools-debuginfo-0.3.6-lp152.2.3.1 References: https://www.suse.com/security/cve/CVE-2020-15652.html https://www.suse.com/security/cve/CVE-2020-15653.html https://www.suse.com/security/cve/CVE-2020-15654.html https://www.suse.com/security/cve/CVE-2020-15655.html https://www.suse.com/security/cve/CVE-2020-15656.html https://www.suse.com/security/cve/CVE-2020-15657.html https://www.suse.com/security/cve/CVE-2020-15658.html https://www.suse.com/security/cve/CVE-2020-15659.html https://www.suse.com/security/cve/CVE-2020-6463.html https://www.suse.com/security/cve/CVE-2020-6514.html https://bugzilla.suse.com/1171433 https://bugzilla.suse.com/1174538

1 0

openSUSE-RU-2020:1186-1: Recommended update for go1.9
by maintenance＠opensuse.org 12 Aug '20

12 Aug '20

openSUSE Recommended Update: Recommended update for go1.9 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1186-1 Rating: low References: #1169832 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for go1.9 fixes the following issues: - Fix for an issue when installing on Raspberry Pi causes illegal instruction due to unproper ARM arch set. (bsc#1169832) This update was imported from the SUSE:SLE-15:Update update project. This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1186=1 Package List: - openSUSE Backports SLE-15-SP1 (x86_64): go1.9-1.9.7-bp151.2.6.1 go1.9-doc-1.9.7-bp151.2.6.1 go1.9-race-1.9.7-bp151.2.6.1 References: https://bugzilla.suse.com/1169832

1 0

openSUSE-SU-2020:1182-1: important: Security update for libX11
by opensuse-security＠opensuse.org 12 Aug '20

12 Aug '20

openSUSE Security Update: Security update for libX11 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1182-1 Rating: important References: #1174628 Cross-References: CVE-2020-14344 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libX11 fixes the following issues: - Fixed XIM client heap overflows (CVE-2020-14344, bsc#1174628). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1182=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libX11-6-1.6.5-lp152.5.6.1 libX11-6-debuginfo-1.6.5-lp152.5.6.1 libX11-debugsource-1.6.5-lp152.5.6.1 libX11-devel-1.6.5-lp152.5.6.1 libX11-xcb1-1.6.5-lp152.5.6.1 libX11-xcb1-debuginfo-1.6.5-lp152.5.6.1 - openSUSE Leap 15.2 (x86_64): libX11-6-32bit-1.6.5-lp152.5.6.1 libX11-6-32bit-debuginfo-1.6.5-lp152.5.6.1 libX11-devel-32bit-1.6.5-lp152.5.6.1 libX11-xcb1-32bit-1.6.5-lp152.5.6.1 libX11-xcb1-32bit-debuginfo-1.6.5-lp152.5.6.1 - openSUSE Leap 15.2 (noarch): libX11-data-1.6.5-lp152.5.6.1 References: https://www.suse.com/security/cve/CVE-2020-14344.html https://bugzilla.suse.com/1174628

1 0

openSUSE-RU-2020:1184-1: moderate: Recommended update for wireguard, wireguard-tools
by maintenance＠opensuse.org 12 Aug '20

12 Aug '20

openSUSE Recommended Update: Recommended update for wireguard, wireguard-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1184-1 Rating: moderate References: Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for wireguard, wireguard-tools fixes the following issues: This adds wireguard to openSUSE Leap 15.1. wireguard is shipped in version 1.0.20200729. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1184=1 Package List: - openSUSE Leap 15.1 (x86_64): wireguard-1.0.20200729-lp151.2.1 wireguard-debugsource-1.0.20200729-lp151.2.1 wireguard-kmp-default-1.0.20200729_k4.12.14_lp151.28.59-lp151.2.1 wireguard-kmp-default-debuginfo-1.0.20200729_k4.12.14_lp151.28.59-lp151.2.1 wireguard-tools-1.0.20200513-lp151.2.1 wireguard-tools-debuginfo-1.0.20200513-lp151.2.1 wireguard-tools-debugsource-1.0.20200513-lp151.2.1 References:

1 0

openSUSE-RU-2020:1185-1: moderate: Recommended update for wireguard-tools
by maintenance＠opensuse.org 12 Aug '20

12 Aug '20

openSUSE Recommended Update: Recommended update for wireguard-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1185-1 Rating: moderate References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for wireguard-tools fixes the following issues: wireguard-tools is added in version 1.0.20200513 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2020-1185=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): wireguard-tools-1.0.20200513-2.1 References:

1 0

openSUSE-SU-2020:1183-1: moderate: Security update for ark
by opensuse-security＠opensuse.org 12 Aug '20

12 Aug '20

openSUSE Security Update: Security update for ark ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1183-1 Rating: moderate References: #1174773 Cross-References: CVE-2020-16116 Affected Products: openSUSE Leap 15.2 openSUSE Leap 15.1 openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for ark fixes the following issues: - Fixed a directory traversal bug (boo#1174773, CVE-2020-16116). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1183=1 - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1183=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1183=1 Package List: - openSUSE Leap 15.2 (x86_64): ark-20.04.2-lp152.2.3.1 ark-debuginfo-20.04.2-lp152.2.3.1 ark-debugsource-20.04.2-lp152.2.3.1 libkerfuffle20-20.04.2-lp152.2.3.1 libkerfuffle20-debuginfo-20.04.2-lp152.2.3.1 - openSUSE Leap 15.2 (noarch): ark-lang-20.04.2-lp152.2.3.1 - openSUSE Leap 15.1 (noarch): ark-lang-18.12.3-lp151.2.4.1 - openSUSE Leap 15.1 (x86_64): ark-18.12.3-lp151.2.4.1 ark-debuginfo-18.12.3-lp151.2.4.1 ark-debugsource-18.12.3-lp151.2.4.1 libkerfuffle18-18.12.3-lp151.2.4.1 libkerfuffle18-debuginfo-18.12.3-lp151.2.4.1 - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): ark-18.12.3-bp151.3.3.1 libkerfuffle18-18.12.3-bp151.3.3.1 - openSUSE Backports SLE-15-SP1 (noarch): ark-lang-18.12.3-bp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2020-16116.html https://bugzilla.suse.com/1174773

1 0

openSUSE-RU-2020:1180-1: moderate: Recommended update for cacti, cacti-spine
by maintenance＠opensuse.org 11 Aug '20

11 Aug '20

openSUSE Recommended Update: Recommended update for cacti, cacti-spine ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1180-1 Rating: moderate References: #1174850 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for cacti, cacti-spine fixes the following issues: Updated to version 1.2.14 - Fixed an XSS vulnerability due to improper escaping of error message during template import preview (boo#1174850). This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1180=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): cacti-spine-1.2.14-bp151.4.15.1 - openSUSE Backports SLE-15-SP1 (noarch): cacti-1.2.14-bp151.4.15.1 References: https://bugzilla.suse.com/1174850

1 0

openSUSE-SU-2020:1179-1: important: Security update for MozillaThunderbird
by opensuse-security＠opensuse.org 11 Aug '20

11 Aug '20

openSUSE Security Update: Security update for MozillaThunderbird ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1179-1 Rating: important References: #1174538 Cross-References: CVE-2020-15652 CVE-2020-15659 CVE-2020-6463 CVE-2020-6514 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for MozillaThunderbird fixes the following issues: - Updated to Mozilla Thunderbird 68.11: * Fixed various security issues (MFSA-2020-35, bsc#1174538). * Fixed CVE-2020-15652: Potential leak of redirect targets when loading scripts in a worker (bsc#1174538). * Fixed CVE-2020-6514: WebRTC data channel leaks internal address to peer (bsc#1174538). * Fixed CVE-2020-6463: Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture (bsc#1174538). * Fixed CVE-2020-15659: Memory safety bugs fixed in Thunderbird 68.11 (bsc#1174538). * Fixed a bug with FileLink attachments included as a link and file when added from a network drive via drag & drop (bmo#793118). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1179=1 Package List: - openSUSE Leap 15.1 (x86_64): MozillaThunderbird-68.11.0-lp151.2.47.1 MozillaThunderbird-debuginfo-68.11.0-lp151.2.47.1 MozillaThunderbird-debugsource-68.11.0-lp151.2.47.1 MozillaThunderbird-translations-common-68.11.0-lp151.2.47.1 MozillaThunderbird-translations-other-68.11.0-lp151.2.47.1 References: https://www.suse.com/security/cve/CVE-2020-15652.html https://www.suse.com/security/cve/CVE-2020-15659.html https://www.suse.com/security/cve/CVE-2020-6463.html https://www.suse.com/security/cve/CVE-2020-6514.html https://bugzilla.suse.com/1174538

1 0

openSUSE-SU-2020:1178-1: moderate: Security update for go1.13
by opensuse-security＠opensuse.org 10 Aug '20

10 Aug '20

openSUSE Security Update: Security update for go1.13 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1178-1 Rating: moderate References: #1149259 #1174977 Cross-References: CVE-2020-16845 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for go1.13 fixes the following issues: - go1.13 was updated to version 1.13.5 - CVE-2020-16845: dUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs (bsc#1174977). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1178=1 Package List: - openSUSE Leap 15.1 (x86_64): go1.13-1.13.15-lp151.8.1 go1.13-doc-1.13.15-lp151.8.1 go1.13-race-1.13.15-lp151.8.1 References: https://www.suse.com/security/cve/CVE-2020-16845.html https://bugzilla.suse.com/1149259 https://bugzilla.suse.com/1174977

1 0

openSUSE-SU-2020:1177-1: moderate: Security update for perl-XML-Twig
by opensuse-security＠opensuse.org 10 Aug '20

10 Aug '20

openSUSE Security Update: Security update for perl-XML-Twig ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1177-1 Rating: moderate References: #1008644 Cross-References: CVE-2016-9180 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for perl-XML-Twig fixes the following issues: - Security fix [bsc#1008644, CVE-2016-9180] * Setting expand_external_ents to 0 or -1 currently doesn't work as expected; To completely turn off expanding external entities use no_xxe. * Update documentation for XML::Twig to mention problems with expand_external_ents and add information about new no_xxe argument This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1177=1 Package List: - openSUSE Leap 15.1 (noarch): perl-XML-Twig-3.52-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2016-9180.html https://bugzilla.suse.com/1008644

1 0

openSUSE-RU-2020:1176-1: moderate: Recommended update for ocfs2-tools
by maintenance＠opensuse.org 10 Aug '20

10 Aug '20

openSUSE Recommended Update: Recommended update for ocfs2-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1176-1 Rating: moderate References: #1170530 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ocfs2-tools fixes the following issue: - Fix debugfs.ocfs2 error on devices with sector size 4096 (bsc#1170530) This update was imported from the SUSE:SLE-15-SP1:Update update project. This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1176=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): ocfs2-tools-1.8.5-bp151.2.3.1 ocfs2-tools-devel-1.8.5-bp151.2.3.1 ocfs2-tools-devel-static-1.8.5-bp151.2.3.1 ocfs2-tools-o2cb-1.8.5-bp151.2.3.1 References: https://bugzilla.suse.com/1170530

1 0

openSUSE-SU-2020:1175-1: important: Security update for java-11-openjdk
by opensuse-security＠opensuse.org 09 Aug '20

09 Aug '20

openSUSE Security Update: Security update for java-11-openjdk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1175-1 Rating: important References: #1174157 Cross-References: CVE-2020-14556 CVE-2020-14562 CVE-2020-14573 CVE-2020-14577 CVE-2020-14581 CVE-2020-14583 CVE-2020-14593 CVE-2020-14621 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 8 vulnerabilities is now available. Description: This update for java-11-openjdk fixes the following issues: - Update to upstream tag jdk-11.0.8+10 (July 2020 CPU, bsc#1174157) * Security fixes: + JDK-8230613: Better ASCII conversions + JDK-8231800: Better listing of arrays + JDK-8232014: Expand DTD support + JDK-8233234: Better Zip Naming + JDK-8233239, CVE-2020-14562: Enhance TIFF support + JDK-8233255: Better Swing Buttons + JDK-8234032: Improve basic calendar services + JDK-8234042: Better factory production of certificates + JDK-8234418: Better parsing with CertificateFactory + JDK-8234836: Improve serialization handling + JDK-8236191: Enhance OID processing + JDK-8236867, CVE-2020-14573: Enhance Graal interface handling + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior + JDK-8237592, CVE-2020-14577: Enhance certificate verification + JDK-8238002, CVE-2020-14581: Better matrix operations + JDK-8238013: Enhance String writing + JDK-8238804: Enhance key handling process + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable + JDK-8238843: Enhanced font handing + JDK-8238920, CVE-2020-14583: Better Buffer support + JDK-8238925: Enhance WAV file playback + JDK-8240119, CVE-2020-14593: Less Affine Transformations + JDK-8240482: Improved WAV file playback + JDK-8241379: Update JCEKS support + JDK-8241522: Manifest improved jar headers redux + JDK-8242136, CVE-2020-14621: Better XML namespace handling * Other changes: + JDK-6933331: (d3d/ogl) java.lang.IllegalStateException: Buffers have not been created + JDK-7124307: JSpinner and changing value by mouse + JDK-8022574: remove HaltNode code after uncommon trap calls + JDK-8039082: [TEST_BUG] Test java/awt/dnd/BadSerializationTest/BadSerializationTest.java fails + JDK-8040630: Popup menus and tooltips flicker with previous popup contents when first shown + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with ENOMEM when joining group (OS X 10.9) + JDK-8048215: [TESTBUG] java/lang/management/ManagementFactory/ThreadMXBeanProxy.java Expected non-null LockInfo + JDK-8051349: nsk/jvmti/scenarios/sampling/SP06/sp06t003 fails in nightly + JDK-8080353: JShell: Better error message on attempting to add default method + JDK-8139876: Exclude hanging nsk/stress/stack from execution with deoptimization enabled + JDK-8146090: java/lang/ref/ReachabilityFenceTest.java fails with -XX:+DeoptimizeALot + JDK-8153430: jdk regression test MletParserLocaleTest, ParserInfiniteLoopTest reduce default timeout + JDK-8156207: Resource allocated BitMaps are often cleared unnecessarily + JDK-8159740: JShell: corralled declarations do not have correct source to wrapper mapping + JDK-8175984: ICC_Profile has un-needed, not-empty finalize method + JDK-8176359: Frame#setMaximizedbounds not working properly in multi screen environments + JDK-8183369: RFC unconformity of HttpURLConnection with proxy + JDK-8187078: -XX:+VerifyOops finds numerous problems when running JPRT + JDK-8189861: Refactor CacheFind + JDK-8191169: java/net/Authenticator/B4769350.java failed intermittently + JDK-8191930: [Graal] emits unparseable XML into compile log + JDK-8193879: Java debugger hangs on method invocation + JDK-8196019: java/awt/Window/Grab/GrabTest.java fails on Windows + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails + JDK-8198000: java/awt/List/EmptyListEventTest/EmptyListEventTest.java debug assert on Windows + JDK-8198001: java/awt/Menu/WrongParentAfterRemoveMenu/ /WrongParentAfterRemoveMenu.java debug assert on Windows + JDK-8198339: Test javax/swing/border/Test6981576.java is unstable + JDK-8200701: jdk/jshell/ExceptionsTest.java fails on Windows, after JDK-8198801 + JDK-8203264: JNI exception pending in PlainDatagramSocketImpl.c:740 + JDK-8203672: JNI exception pending in PlainSocketImpl.c + JDK-8203673: JNI exception pending in DualStackPlainDatagramSocketImpl.c:398 + JDK-8204834: Fix confusing "allocate" naming in OopStorage + JDK-8205399: Set node color on pinned HashMap.TreeNode deletion + JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/ /RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with handshake_failure + JDK-8206179: com/sun/management/OperatingSystemMXBean/ /GetCommittedVirtualMemorySize.java fails with Committed virtual memory size illegal value + JDK-8207334: VM times out in VM_HandshakeAllThreads::doit() with RunThese30M + JDK-8208277: Code cache heap (-XX:ReservedCodeCacheSize) doesn't work with 1GB LargePages This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1175=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): java-11-openjdk-11.0.8.0-lp151.3.19.1 java-11-openjdk-accessibility-11.0.8.0-lp151.3.19.1 java-11-openjdk-accessibility-debuginfo-11.0.8.0-lp151.3.19.1 java-11-openjdk-debuginfo-11.0.8.0-lp151.3.19.1 java-11-openjdk-debugsource-11.0.8.0-lp151.3.19.1 java-11-openjdk-demo-11.0.8.0-lp151.3.19.1 java-11-openjdk-devel-11.0.8.0-lp151.3.19.1 java-11-openjdk-headless-11.0.8.0-lp151.3.19.1 java-11-openjdk-jmods-11.0.8.0-lp151.3.19.1 java-11-openjdk-src-11.0.8.0-lp151.3.19.1 - openSUSE Leap 15.1 (noarch): java-11-openjdk-javadoc-11.0.8.0-lp151.3.19.1 References: https://www.suse.com/security/cve/CVE-2020-14556.html https://www.suse.com/security/cve/CVE-2020-14562.html https://www.suse.com/security/cve/CVE-2020-14573.html https://www.suse.com/security/cve/CVE-2020-14577.html https://www.suse.com/security/cve/CVE-2020-14581.html https://www.suse.com/security/cve/CVE-2020-14583.html https://www.suse.com/security/cve/CVE-2020-14593.html https://www.suse.com/security/cve/CVE-2020-14621.html https://bugzilla.suse.com/1174157

1 0

openSUSE-RU-2020:1174-1: moderate: Recommended update for drbd
by maintenance＠opensuse.org 09 Aug '20

09 Aug '20

openSUSE Recommended Update: Recommended update for drbd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1174-1 Rating: moderate References: #1174543 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update of fwupd fixes the following issue: - rebuilt with new signing key. (bsc#1174543) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1174=1 Package List: - openSUSE Leap 15.1 (noarch): fwupd-lang-1.0.9-lp151.2.5.1 - openSUSE Leap 15.1 (x86_64): dfu-tool-1.0.9-lp151.2.5.1 dfu-tool-debuginfo-1.0.9-lp151.2.5.1 fwupd-1.0.9-lp151.2.5.1 fwupd-debuginfo-1.0.9-lp151.2.5.1 fwupd-debugsource-1.0.9-lp151.2.5.1 fwupd-devel-1.0.9-lp151.2.5.1 libfwupd2-1.0.9-lp151.2.5.1 libfwupd2-debuginfo-1.0.9-lp151.2.5.1 typelib-1_0-Fwupd-2_0-1.0.9-lp151.2.5.1 References: https://bugzilla.suse.com/1174543

1 0

openSUSE-RU-2020:1173-1: Recommended update for texlive
by maintenance＠opensuse.org 09 Aug '20

09 Aug '20

openSUSE Recommended Update: Recommended update for texlive ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1173-1 Rating: low References: #1172690 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for texlive fixes the following issues: - Uses now the predefined user id and group id 505 (bsc#1172690) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1173=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libkpathsea6-6.2.3-lp151.12.6.1 libkpathsea6-debuginfo-6.2.3-lp151.12.6.1 libptexenc1-1.3.5-lp151.12.6.1 libptexenc1-debuginfo-1.3.5-lp151.12.6.1 libsynctex1-1.18-lp151.12.6.1 libsynctex1-debuginfo-1.18-lp151.12.6.1 libtexlua52-5-5.2.4-lp151.12.6.1 libtexlua52-5-debuginfo-5.2.4-lp151.12.6.1 libtexluajit2-2.1.0beta2-lp151.12.6.1 libtexluajit2-debuginfo-2.1.0beta2-lp151.12.6.1 texlive-2017.20170520-lp151.12.6.1 texlive-a2ping-bin-2017.20170520.svn27321-lp151.12.6.1 texlive-accfonts-bin-2017.20170520.svn12688-lp151.12.6.1 texlive-adhocfilelist-bin-2017.20170520.svn28038-lp151.12.6.1 texlive-afm2pl-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-afm2pl-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-aleph-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-aleph-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-amstex-bin-2017.20170520.svn3006-lp151.12.6.1 texlive-arara-bin-2017.20170520.svn29036-lp151.12.6.1 texlive-asymptote-bin-2017.20170520.svn43843-lp151.12.6.1 texlive-asymptote-bin-debuginfo-2017.20170520.svn43843-lp151.12.6.1 texlive-authorindex-bin-2017.20170520.svn18790-lp151.12.6.1 texlive-autosp-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-autosp-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-bibexport-bin-2017.20170520.svn16219-lp151.12.6.1 texlive-bibtex-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-bibtex-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-bibtex8-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-bibtex8-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-bibtexu-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-bibtexu-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-bin-devel-2017.20170520-lp151.12.6.1 texlive-bundledoc-bin-2017.20170520.svn17794-lp151.12.6.1 texlive-cachepic-bin-2017.20170520.svn15543-lp151.12.6.1 texlive-checkcites-bin-2017.20170520.svn25623-lp151.12.6.1 texlive-checklistings-bin-2017.20170520.svn38300-lp151.12.6.1 texlive-chktex-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-chktex-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-cjk-gs-integrate-bin-2017.20170520.svn37223-lp151.12.6.1 texlive-cjkutils-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-cjkutils-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-context-bin-2017.20170520.svn34112-lp151.12.6.1 texlive-convbkmk-bin-2017.20170520.svn30408-lp151.12.6.1 texlive-crossrefware-bin-2017.20170520.svn43866-lp151.12.6.1 texlive-cslatex-bin-2017.20170520.svn3006-lp151.12.6.1 texlive-csplain-bin-2017.20170520.svn33902-lp151.12.6.1 texlive-ctanify-bin-2017.20170520.svn24061-lp151.12.6.1 texlive-ctanupload-bin-2017.20170520.svn23866-lp151.12.6.1 texlive-ctie-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-ctie-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-cweb-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-cweb-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-cyrillic-bin-bin-2017.20170520.svn29741-lp151.12.6.1 texlive-de-macro-bin-2017.20170520.svn17399-lp151.12.6.1 texlive-debuginfo-2017.20170520-lp151.12.6.1 texlive-debugsource-2017.20170520-lp151.12.6.1 texlive-detex-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-detex-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-dosepsbin-bin-2017.20170520.svn24759-lp151.12.6.1 texlive-dtl-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-dtl-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-dtxgen-bin-2017.20170520.svn29031-lp151.12.6.1 texlive-dviasm-bin-2017.20170520.svn8329-lp151.12.6.1 texlive-dvicopy-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-dvicopy-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-dvidvi-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-dvidvi-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-dviinfox-bin-2017.20170520.svn44515-lp151.12.6.1 texlive-dviljk-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-dviljk-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-dvipdfmx-bin-2017.20170520.svn40273-lp151.12.6.1 texlive-dvipng-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-dvipng-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-dvipos-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-dvipos-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-dvips-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-dvips-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-dvisvgm-bin-2017.20170520.svn40987-lp151.12.6.1 texlive-dvisvgm-bin-debuginfo-2017.20170520.svn40987-lp151.12.6.1 texlive-ebong-bin-2017.20170520.svn21000-lp151.12.6.1 texlive-eplain-bin-2017.20170520.svn3006-lp151.12.6.1 texlive-epspdf-bin-2017.20170520.svn29050-lp151.12.6.1 texlive-epstopdf-bin-2017.20170520.svn18336-lp151.12.6.1 texlive-exceltex-bin-2017.20170520.svn25860-lp151.12.6.1 texlive-fig4latex-bin-2017.20170520.svn14752-lp151.12.6.1 texlive-findhyph-bin-2017.20170520.svn14758-lp151.12.6.1 texlive-fontinst-bin-2017.20170520.svn29741-lp151.12.6.1 texlive-fontools-bin-2017.20170520.svn25997-lp151.12.6.1 texlive-fontware-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-fontware-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-fragmaster-bin-2017.20170520.svn13663-lp151.12.6.1 texlive-getmap-bin-2017.20170520.svn34971-lp151.12.6.1 texlive-glossaries-bin-2017.20170520.svn37813-lp151.12.6.1 texlive-gregoriotex-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-gregoriotex-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-gsftopk-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-gsftopk-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-jadetex-bin-2017.20170520.svn3006-lp151.12.6.1 texlive-kotex-utils-bin-2017.20170520.svn32101-lp151.12.6.1 texlive-kpathsea-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-kpathsea-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-kpathsea-devel-6.2.3-lp151.12.6.1 texlive-lacheck-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-lacheck-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-latex-bin-bin-2017.20170520.svn14050-lp151.12.6.1 texlive-latex-git-log-bin-2017.20170520.svn30983-lp151.12.6.1 texlive-latex-papersize-bin-2017.20170520.svn42296-lp151.12.6.1 texlive-latex2man-bin-2017.20170520.svn13663-lp151.12.6.1 texlive-latex2nemeth-bin-2017.20170520.svn42300-lp151.12.6.1 texlive-latexdiff-bin-2017.20170520.svn16420-lp151.12.6.1 texlive-latexfileversion-bin-2017.20170520.svn25012-lp151.12.6.1 texlive-latexindent-bin-2017.20170520.svn32150-lp151.12.6.1 texlive-latexmk-bin-2017.20170520.svn10937-lp151.12.6.1 texlive-latexpand-bin-2017.20170520.svn27025-lp151.12.6.1 texlive-lcdftypetools-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-lcdftypetools-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-lilyglyphs-bin-2017.20170520.svn31696-lp151.12.6.1 texlive-listbib-bin-2017.20170520.svn26126-lp151.12.6.1 texlive-listings-ext-bin-2017.20170520.svn15093-lp151.12.6.1 texlive-lollipop-bin-2017.20170520.svn41465-lp151.12.6.1 texlive-ltxfileinfo-bin-2017.20170520.svn29005-lp151.12.6.1 texlive-ltximg-bin-2017.20170520.svn32346-lp151.12.6.1 texlive-lua2dox-bin-2017.20170520.svn29053-lp151.12.6.1 texlive-luaotfload-bin-2017.20170520.svn34647-lp151.12.6.1 texlive-luatex-bin-2017.20170520.svn44549-lp151.12.6.1 texlive-luatex-bin-debuginfo-2017.20170520.svn44549-lp151.12.6.1 texlive-lwarp-bin-2017.20170520.svn43292-lp151.12.6.1 texlive-m-tx-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-m-tx-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-make4ht-bin-2017.20170520.svn37750-lp151.12.6.1 texlive-makedtx-bin-2017.20170520.svn38769-lp151.12.6.1 texlive-makeindex-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-makeindex-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-match_parens-bin-2017.20170520.svn23500-lp151.12.6.1 texlive-mathspic-bin-2017.20170520.svn23661-lp151.12.6.1 texlive-metafont-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-metafont-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-metapost-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-metapost-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-mex-bin-2017.20170520.svn3006-lp151.12.6.1 texlive-mf2pt1-bin-2017.20170520.svn23406-lp151.12.6.1 texlive-mflua-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-mflua-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-mfware-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-mfware-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-mkgrkindex-bin-2017.20170520.svn14428-lp151.12.6.1 texlive-mkjobtexmf-bin-2017.20170520.svn8457-lp151.12.6.1 texlive-mkpic-bin-2017.20170520.svn33688-lp151.12.6.1 texlive-mltex-bin-2017.20170520.svn3006-lp151.12.6.1 texlive-mptopdf-bin-2017.20170520.svn18674-lp151.12.6.1 texlive-multibibliography-bin-2017.20170520.svn30534-lp151.12.6.1 texlive-musixtex-bin-2017.20170520.svn37026-lp151.12.6.1 texlive-musixtnt-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-musixtnt-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-omegaware-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-omegaware-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-patgen-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-patgen-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-pax-bin-2017.20170520.svn10843-lp151.12.6.1 texlive-pdfbook2-bin-2017.20170520.svn37537-lp151.12.6.1 texlive-pdfcrop-bin-2017.20170520.svn14387-lp151.12.6.1 texlive-pdfjam-bin-2017.20170520.svn17868-lp151.12.6.1 texlive-pdflatexpicscale-bin-2017.20170520.svn41779-lp151.12.6.1 texlive-pdftex-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-pdftex-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-pdftools-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-pdftools-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-pdfxup-bin-2017.20170520.svn40690-lp151.12.6.1 texlive-pedigree-perl-bin-2017.20170520.svn25962-lp151.12.6.1 texlive-perltex-bin-2017.20170520.svn16181-lp151.12.6.1 texlive-petri-nets-bin-2017.20170520.svn39165-lp151.12.6.1 texlive-pfarrei-bin-2017.20170520.svn29348-lp151.12.6.1 texlive-pkfix-bin-2017.20170520.svn13364-lp151.12.6.1 texlive-pkfix-helper-bin-2017.20170520.svn13663-lp151.12.6.1 texlive-platex-bin-2017.20170520.svn22859-lp151.12.6.1 texlive-pmx-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-pmx-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-pmxchords-bin-2017.20170520.svn32405-lp151.12.6.1 texlive-ps2pk-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-ps2pk-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-pst-pdf-bin-2017.20170520.svn7838-lp151.12.6.1 texlive-pst2pdf-bin-2017.20170520.svn29333-lp151.12.6.1 texlive-pstools-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-pstools-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-ptex-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-ptex-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-ptex-fontmaps-bin-2017.20170520.svn44206-lp151.12.6.1 texlive-ptex2pdf-bin-2017.20170520.svn29335-lp151.12.6.1 texlive-ptexenc-devel-1.3.5-lp151.12.6.1 texlive-purifyeps-bin-2017.20170520.svn13663-lp151.12.6.1 texlive-pygmentex-bin-2017.20170520.svn34996-lp151.12.6.1 texlive-pythontex-bin-2017.20170520.svn31638-lp151.12.6.1 texlive-rubik-bin-2017.20170520.svn32919-lp151.12.6.1 texlive-seetexk-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-seetexk-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-splitindex-bin-2017.20170520.svn29688-lp151.12.6.1 texlive-srcredact-bin-2017.20170520.svn38710-lp151.12.6.1 texlive-sty2dtx-bin-2017.20170520.svn21215-lp151.12.6.1 texlive-svn-multi-bin-2017.20170520.svn13663-lp151.12.6.1 texlive-synctex-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-synctex-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-synctex-devel-1.18-lp151.12.6.1 texlive-tetex-bin-2017.20170520.svn43957-lp151.12.6.1 texlive-tex-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-tex-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-tex4ebook-bin-2017.20170520.svn37771-lp151.12.6.1 texlive-tex4ht-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-tex4ht-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-texconfig-bin-2017.20170520.svn29741-lp151.12.6.1 texlive-texcount-bin-2017.20170520.svn13013-lp151.12.6.1 texlive-texdef-bin-2017.20170520.svn21802-lp151.12.6.1 texlive-texdiff-bin-2017.20170520.svn15506-lp151.12.6.1 texlive-texdirflatten-bin-2017.20170520.svn12782-lp151.12.6.1 texlive-texdoc-bin-2017.20170520.svn29741-lp151.12.6.1 texlive-texfot-bin-2017.20170520.svn33155-lp151.12.6.1 texlive-texliveonfly-bin-2017.20170520.svn24062-lp151.12.6.1 texlive-texloganalyser-bin-2017.20170520.svn13663-lp151.12.6.1 texlive-texlua-devel-5.2.4-lp151.12.6.1 texlive-texluajit-devel-2.1.0beta2-lp151.12.6.1 texlive-texosquery-bin-2017.20170520.svn43596-lp151.12.6.1 texlive-texsis-bin-2017.20170520.svn3006-lp151.12.6.1 texlive-texware-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-texware-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-thumbpdf-bin-2017.20170520.svn6898-lp151.12.6.1 texlive-tie-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-tie-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-tpic2pdftex-bin-2017.20170520.svn29741-lp151.12.6.1 texlive-ttfutils-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-ttfutils-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-typeoutfileinfo-bin-2017.20170520.svn25648-lp151.12.6.1 texlive-ulqda-bin-2017.20170520.svn13663-lp151.12.6.1 texlive-uplatex-bin-2017.20170520.svn26326-lp151.12.6.1 texlive-uptex-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-uptex-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-urlbst-bin-2017.20170520.svn23262-lp151.12.6.1 texlive-velthuis-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-velthuis-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-vlna-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-vlna-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-vpe-bin-2017.20170520.svn6897-lp151.12.6.1 texlive-web-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-web-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-xdvi-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-xdvi-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-xetex-bin-2017.20170520.svn44361-lp151.12.6.1 texlive-xetex-bin-debuginfo-2017.20170520.svn44361-lp151.12.6.1 texlive-xmltex-bin-2017.20170520.svn3006-lp151.12.6.1 texlive-yplan-bin-2017.20170520.svn34398-lp151.12.6.1 - openSUSE Leap 15.1 (noarch): perl-biber-2017.20170520.svn30357-lp151.12.6.1 texlive-biber-bin-2017.20170520.svn42679-lp151.12.6.1 texlive-diadia-bin-2017.20170520.svn37645-lp151.12.6.1 References: https://bugzilla.suse.com/1172690

1 0

openSUSE-SU-2020:1172-1: moderate: Security update for opera
by opensuse-security＠opensuse.org 09 Aug '20

09 Aug '20

openSUSE Security Update: Security update for opera ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1172-1 Rating: moderate References: Cross-References: CVE-2020-6510 CVE-2020-6511 CVE-2020-6512 CVE-2020-6513 CVE-2020-6514 CVE-2020-6515 CVE-2020-6516 CVE-2020-6517 CVE-2020-6518 CVE-2020-6519 CVE-2020-6520 CVE-2020-6521 CVE-2020-6522 CVE-2020-6523 CVE-2020-6524 CVE-2020-6525 CVE-2020-6526 CVE-2020-6527 CVE-2020-6528 CVE-2020-6529 CVE-2020-6530 CVE-2020-6531 CVE-2020-6533 CVE-2020-6534 CVE-2020-6535 CVE-2020-6536 Affected Products: openSUSE Leap 15.2:NonFree ______________________________________________________________________________ An update that fixes 26 vulnerabilities is now available. Description: This update for opera fixes the following issues: - Update to version 70.0.3728.71 - DNA-86267 Make `Recently closed tabs` appearance consistent with `Search for open tabs`. - DNA-86988 Opera 70 translations - DNA-87530 Zen news leads not loading - DNA-87636 Fix displaying folder icon for closed windows in recently closed list - DNA-87682 Replace Extensions icon in toolbar with icon from sidebar - DNA-87756 Extend chrome.sessions.getRecentlyClosed with information about last active tab in window. - DNA-87778 Crash at opera::InstantSearchViewViews:: ~InstantSearchViewViews() - DNA-87815 Change affiliate links for AliExpress Search - Update to version 70.0.3728.59 - CHR-8010 Update chromium on desktop-stable-84-3728 to 84.0.4147.89 - DNA-87019 The video image does not respond to the pressing after closed the “Quit Opera?” dialog - DNA-87342 Fix right padding in settings > weather section - DNA-87427 Remove unneeded information from the requests’ diagnostics - DNA-87560 Crash at views::Widget::GetNativeView() - DNA-87561 Crash at CRYPTO_BUFFER_len - DNA-87599 Bypass VPN for default search engines doesn’t work - DNA-87611 Unittests fails on declarativeNetRequest and declarativeNetRequestFeedback permissions - DNA-87612 [Mac] Misaligned icon in address bar - DNA-87619 [Win/Lin] Misaligned icon in address bar - DNA-87716 [macOS/Windows] Crash when Search in tabs is open and Opera is minimised - DNA-87749 Crash at opera::InstantSearchSuggestionLineView:: SetIsHighlighted(bool) - The update to chromium 84.0.4147.89 fixes following issues: - CVE-2020-6510, CVE-2020-6511, CVE-2020-6512, CVE-2020-6513, CVE-2020-6514, CVE-2020-6515, CVE-2020-6516, CVE-2020-6517, CVE-2020-6518, CVE-2020-6519, CVE-2020-6520, CVE-2020-6521, CVE-2020-6522, CVE-2020-6523, CVE-2020-6524, CVE-2020-6525, CVE-2020-6526, CVE-2020-6527, CVE-2020-6528, CVE-2020-6529, CVE-2020-6530, CVE-2020-6531, CVE-2020-6533, CVE-2020-6534, CVE-2020-6535, CVE-2020-6536 - Complete Opera 70.0 changelog at: https://blogs.opera.com/desktop/changelog-for-70/ - Update to version 69.0.3686.77 - DNA-84207 New Yubikey enrollment is not working - DNA-87185 Lost translation - DNA-87382 Integrate scrolling to top of the feed with the existing scroll position restoration - DNA-87535 Sort out news on startpage state - DNA-87588 Merge “Prevent pointer from being sent in the clear over SCTP” to desktop-stable-83-3686 - Update to version 69.0.3686.57 - DNA-86682 Title case in Russian translation - DNA-86807 Title case in O69 BR Portuguese translation - DNA-87104 Right click context menu becomes scrollable sometimes - DNA-87376 Search in tabs opens significantly slower in O69 - DNA-87505 [Welcome Pages][Stats] Session stats for Welcome and Upgrade pages - DNA-87535 Sort out news on startpage state Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2:NonFree: zypper in -t patch openSUSE-2020-1172=1 Package List: - openSUSE Leap 15.2:NonFree (x86_64): opera-70.0.3728.71-lp152.2.12.1 References: https://www.suse.com/security/cve/CVE-2020-6510.html https://www.suse.com/security/cve/CVE-2020-6511.html https://www.suse.com/security/cve/CVE-2020-6512.html https://www.suse.com/security/cve/CVE-2020-6513.html https://www.suse.com/security/cve/CVE-2020-6514.html https://www.suse.com/security/cve/CVE-2020-6515.html https://www.suse.com/security/cve/CVE-2020-6516.html https://www.suse.com/security/cve/CVE-2020-6517.html https://www.suse.com/security/cve/CVE-2020-6518.html https://www.suse.com/security/cve/CVE-2020-6519.html https://www.suse.com/security/cve/CVE-2020-6520.html https://www.suse.com/security/cve/CVE-2020-6521.html https://www.suse.com/security/cve/CVE-2020-6522.html https://www.suse.com/security/cve/CVE-2020-6523.html https://www.suse.com/security/cve/CVE-2020-6524.html https://www.suse.com/security/cve/CVE-2020-6525.html https://www.suse.com/security/cve/CVE-2020-6526.html https://www.suse.com/security/cve/CVE-2020-6527.html https://www.suse.com/security/cve/CVE-2020-6528.html https://www.suse.com/security/cve/CVE-2020-6529.html https://www.suse.com/security/cve/CVE-2020-6530.html https://www.suse.com/security/cve/CVE-2020-6531.html https://www.suse.com/security/cve/CVE-2020-6533.html https://www.suse.com/security/cve/CVE-2020-6534.html https://www.suse.com/security/cve/CVE-2020-6535.html https://www.suse.com/security/cve/CVE-2020-6536.html

1 0

openSUSE-RU-2020:1171-1: important: Recommended update for python-azure-agent
by maintenance＠opensuse.org 08 Aug '20

08 Aug '20

openSUSE Recommended Update: Recommended update for python-azure-agent ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1171-1 Rating: important References: #1173866 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-azure-agent fixes the following issues: - Properly set the DHCP configuration to push the hostname to the DHCP server. (bsc#1173866) - Do not bring the interface down to push the hostname, just use 'ifup'. (bsc#1173866) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1171=1 Package List: - openSUSE Leap 15.1 (noarch): python-azure-agent-2.2.45-lp151.2.9.1 python-azure-agent-test-2.2.45-lp151.2.9.1 References: https://bugzilla.suse.com/1173866

1 0

openSUSE-SU-2020:1169-1: important: Security update for grub2
by opensuse-security＠opensuse.org 08 Aug '20

08 Aug '20

openSUSE Security Update: Security update for grub2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1169-1 Rating: important References: #1168994 #1173812 #1174463 #1174570 Cross-References: CVE-2020-10713 CVE-2020-14308 CVE-2020-14309 CVE-2020-14310 CVE-2020-14311 CVE-2020-15706 CVE-2020-15707 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: This update for grub2 fixes the following issues: - Fix for CVE-2020-10713 (bsc#1168994) - Fix for CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311 (bsc#1173812) - Fix for CVE-2020-15706 (bsc#1174463) - Fix for CVE-2020-15707 (bsc#1174570) - Use overflow checking primitives where the arithmetic expression for buffer - Use grub_calloc for overflow check and return NULL when it would occur This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1169=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): grub2-2.04-lp152.7.3.4 grub2-branding-upstream-2.04-lp152.7.3.4 grub2-debuginfo-2.04-lp152.7.3.4 grub2-debugsource-2.04-lp152.7.3.4 - openSUSE Leap 15.2 (noarch): grub2-i386-efi-2.04-lp152.7.3.4 grub2-i386-efi-debug-2.04-lp152.7.3.4 grub2-i386-pc-2.04-lp152.7.3.4 grub2-i386-pc-debug-2.04-lp152.7.3.4 grub2-i386-xen-2.04-lp152.7.3.4 grub2-snapper-plugin-2.04-lp152.7.3.4 grub2-systemd-sleep-plugin-2.04-lp152.7.3.4 grub2-x86_64-efi-2.04-lp152.7.3.4 grub2-x86_64-efi-debug-2.04-lp152.7.3.4 grub2-x86_64-xen-2.04-lp152.7.3.4 References: https://www.suse.com/security/cve/CVE-2020-10713.html https://www.suse.com/security/cve/CVE-2020-14308.html https://www.suse.com/security/cve/CVE-2020-14309.html https://www.suse.com/security/cve/CVE-2020-14310.html https://www.suse.com/security/cve/CVE-2020-14311.html https://www.suse.com/security/cve/CVE-2020-15706.html https://www.suse.com/security/cve/CVE-2020-15707.html https://bugzilla.suse.com/1168994 https://bugzilla.suse.com/1173812 https://bugzilla.suse.com/1174463 https://bugzilla.suse.com/1174570

1 0

openSUSE-RU-2020:1167-1: moderate: Recommended update for cacti, cacti-spine
by maintenance＠opensuse.org 08 Aug '20

08 Aug '20

openSUSE Recommended Update: Recommended update for cacti, cacti-spine ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1167-1 Rating: moderate References: #1174850 Affected Products: openSUSE Leap 15.2 openSUSE Leap 15.1 SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for cacti, cacti-spine fixes the following issues: Updated to version 1.2.14 - Fixed an XSS vulnerability due to improper escaping of error message during template import preview (boo#1174850). Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1167=1 - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1167=1 - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2020-1167=1 Package List: - openSUSE Leap 15.2 (x86_64): cacti-spine-1.2.14-lp152.2.6.1 cacti-spine-debuginfo-1.2.14-lp152.2.6.1 cacti-spine-debugsource-1.2.14-lp152.2.6.1 - openSUSE Leap 15.2 (noarch): cacti-1.2.14-lp152.2.6.1 - openSUSE Leap 15.1 (noarch): cacti-1.2.14-lp151.3.15.1 - openSUSE Leap 15.1 (x86_64): cacti-spine-1.2.14-lp151.3.15.1 cacti-spine-debuginfo-1.2.14-lp151.3.15.1 cacti-spine-debugsource-1.2.14-lp151.3.15.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): cacti-spine-1.2.14-11.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 s390x x86_64): cacti-spine-debuginfo-1.2.14-11.1 cacti-spine-debugsource-1.2.14-11.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): cacti-1.2.14-14.1 References: https://bugzilla.suse.com/1174850

1 0

openSUSE-SU-2020:1168-1: important: Security update for grub2
by opensuse-security＠opensuse.org 08 Aug '20

08 Aug '20

openSUSE Security Update: Security update for grub2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1168-1 Rating: important References: #1168994 #1173812 #1174463 #1174570 Cross-References: CVE-2020-10713 CVE-2020-14308 CVE-2020-14309 CVE-2020-14310 CVE-2020-14311 CVE-2020-15706 CVE-2020-15707 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: This update for grub2 fixes the following issues: - CVE-2020-10713 (bsc#1168994) - CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311 (bsc#1173812) - CVE-2020-15706 (bsc#1174463) - CVE-2020-15707 (bsc#1174570) - Use overflow checking primitives where the arithmetic expression for buffer allocations may include unvalidated data - Use grub_calloc for overflow check and return NULL when it would occur This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1168=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): grub2-2.02-lp151.21.21.4 grub2-branding-upstream-2.02-lp151.21.21.4 grub2-debuginfo-2.02-lp151.21.21.4 grub2-debugsource-2.02-lp151.21.21.4 - openSUSE Leap 15.1 (noarch): grub2-i386-efi-2.02-lp151.21.21.4 grub2-i386-pc-2.02-lp151.21.21.4 grub2-i386-xen-2.02-lp151.21.21.4 grub2-snapper-plugin-2.02-lp151.21.21.4 grub2-systemd-sleep-plugin-2.02-lp151.21.21.4 grub2-x86_64-efi-2.02-lp151.21.21.4 grub2-x86_64-xen-2.02-lp151.21.21.4 References: https://www.suse.com/security/cve/CVE-2020-10713.html https://www.suse.com/security/cve/CVE-2020-14308.html https://www.suse.com/security/cve/CVE-2020-14309.html https://www.suse.com/security/cve/CVE-2020-14310.html https://www.suse.com/security/cve/CVE-2020-14311.html https://www.suse.com/security/cve/CVE-2020-15706.html https://www.suse.com/security/cve/CVE-2020-15707.html https://bugzilla.suse.com/1168994 https://bugzilla.suse.com/1173812 https://bugzilla.suse.com/1174463 https://bugzilla.suse.com/1174570

1 0

openSUSE-RU-2020:1167-1: moderate: Recommended update for cacti, cacti-spine
by maintenance＠opensuse.org 08 Aug '20

08 Aug '20

openSUSE Recommended Update: Recommended update for cacti, cacti-spine ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1167-1 Rating: moderate References: #1174850 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for cacti, cacti-spine fixes the following issues: Updated to version 1.2.14 - Fixed an XSS vulnerability due to improper escaping of error message during template import preview (boo#1174850). Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2020-1167=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): cacti-spine-1.2.14-11.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 s390x x86_64): cacti-spine-debuginfo-1.2.14-11.1 cacti-spine-debugsource-1.2.14-11.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): cacti-1.2.14-14.1 References: https://bugzilla.suse.com/1174850

1 0

openSUSE-RU-2020:1170-1: moderate: Recommended update for lvm2
by maintenance＠opensuse.org 08 Aug '20

08 Aug '20

openSUSE Recommended Update: Recommended update for lvm2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1170-1 Rating: moderate References: #1172597 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for lvm2 fixes the following issues: - Fixed an issue where the system hangs for 90 seconds before it actually shuts down (bsc#1172597) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1170=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): device-mapper-1.02.149-lp151.4.18.1 device-mapper-debuginfo-1.02.149-lp151.4.18.1 device-mapper-debugsource-1.02.149-lp151.4.18.1 device-mapper-devel-1.02.149-lp151.4.18.1 libdevmapper-event1_03-1.02.149-lp151.4.18.1 libdevmapper-event1_03-debuginfo-1.02.149-lp151.4.18.1 libdevmapper1_03-1.02.149-lp151.4.18.1 libdevmapper1_03-debuginfo-1.02.149-lp151.4.18.1 liblvm2app2_2-2.02.180-lp151.4.18.1 liblvm2app2_2-debuginfo-2.02.180-lp151.4.18.1 liblvm2cmd2_02-2.02.180-lp151.4.18.1 liblvm2cmd2_02-debuginfo-2.02.180-lp151.4.18.1 lvm2-2.02.180-lp151.4.18.1 lvm2-clvm-2.02.180-lp151.4.18.1 lvm2-clvm-debuginfo-2.02.180-lp151.4.18.1 lvm2-clvm-debugsource-2.02.180-lp151.4.18.1 lvm2-cmirrord-2.02.180-lp151.4.18.1 lvm2-cmirrord-debuginfo-2.02.180-lp151.4.18.1 lvm2-debuginfo-2.02.180-lp151.4.18.1 lvm2-debugsource-2.02.180-lp151.4.18.1 lvm2-devel-2.02.180-lp151.4.18.1 lvm2-lockd-2.02.180-lp151.4.18.1 lvm2-lockd-debuginfo-2.02.180-lp151.4.18.1 lvm2-testsuite-2.02.180-lp151.4.18.1 lvm2-testsuite-debuginfo-2.02.180-lp151.4.18.1 - openSUSE Leap 15.1 (x86_64): device-mapper-devel-32bit-1.02.149-lp151.4.18.1 libdevmapper-event1_03-32bit-1.02.149-lp151.4.18.1 libdevmapper-event1_03-32bit-debuginfo-1.02.149-lp151.4.18.1 libdevmapper1_03-32bit-1.02.149-lp151.4.18.1 libdevmapper1_03-32bit-debuginfo-1.02.149-lp151.4.18.1 References: https://bugzilla.suse.com/1172597

1 0

openSUSE-RU-2020:1166-1: moderate: Recommended update for gnome-initial-setup
by maintenance＠opensuse.org 08 Aug '20

08 Aug '20

openSUSE Recommended Update: Recommended update for gnome-initial-setup ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1166-1 Rating: moderate References: #1172910 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gnome-initial-setup fixes the following issues: - Fix to start 'gnome-initial-setup' via 'xdg autostart' as an alternative to systemd user units on SLE-15-SP2. (bsc#1172910) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1166=1 Package List: - openSUSE Leap 15.2 (noarch): gnome-initial-setup-lang-3.34.6-lp152.2.3.1 - openSUSE Leap 15.2 (x86_64): gnome-initial-setup-3.34.6-lp152.2.3.1 gnome-initial-setup-debuginfo-3.34.6-lp152.2.3.1 gnome-initial-setup-debugsource-3.34.6-lp152.2.3.1 References: https://bugzilla.suse.com/1172910

1 0

openSUSE-SU-2020:1164-1: important: Security update for libX11
by opensuse-security＠opensuse.org 08 Aug '20

08 Aug '20

openSUSE Security Update: Security update for libX11 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1164-1 Rating: important References: #1174628 Cross-References: CVE-2020-14344 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libX11 fixes the following issues: - Fixed XIM client heap overflows (CVE-2020-14344, bsc#1174628) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1164=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libX11-6-1.6.5-lp152.5.3.1 libX11-6-debuginfo-1.6.5-lp152.5.3.1 libX11-debugsource-1.6.5-lp152.5.3.1 libX11-devel-1.6.5-lp152.5.3.1 libX11-xcb1-1.6.5-lp152.5.3.1 libX11-xcb1-debuginfo-1.6.5-lp152.5.3.1 libxcb-composite0-1.13-lp152.5.3.1 libxcb-composite0-debuginfo-1.13-lp152.5.3.1 libxcb-damage0-1.13-lp152.5.3.1 libxcb-damage0-debuginfo-1.13-lp152.5.3.1 libxcb-debugsource-1.13-lp152.5.3.1 libxcb-devel-1.13-lp152.5.3.1 libxcb-dpms0-1.13-lp152.5.3.1 libxcb-dpms0-debuginfo-1.13-lp152.5.3.1 libxcb-dri2-0-1.13-lp152.5.3.1 libxcb-dri2-0-debuginfo-1.13-lp152.5.3.1 libxcb-dri3-0-1.13-lp152.5.3.1 libxcb-dri3-0-debuginfo-1.13-lp152.5.3.1 libxcb-glx0-1.13-lp152.5.3.1 libxcb-glx0-debuginfo-1.13-lp152.5.3.1 libxcb-present0-1.13-lp152.5.3.1 libxcb-present0-debuginfo-1.13-lp152.5.3.1 libxcb-randr0-1.13-lp152.5.3.1 libxcb-randr0-debuginfo-1.13-lp152.5.3.1 libxcb-record0-1.13-lp152.5.3.1 libxcb-record0-debuginfo-1.13-lp152.5.3.1 libxcb-render0-1.13-lp152.5.3.1 libxcb-render0-debuginfo-1.13-lp152.5.3.1 libxcb-res0-1.13-lp152.5.3.1 libxcb-res0-debuginfo-1.13-lp152.5.3.1 libxcb-screensaver0-1.13-lp152.5.3.1 libxcb-screensaver0-debuginfo-1.13-lp152.5.3.1 libxcb-shape0-1.13-lp152.5.3.1 libxcb-shape0-debuginfo-1.13-lp152.5.3.1 libxcb-shm0-1.13-lp152.5.3.1 libxcb-shm0-debuginfo-1.13-lp152.5.3.1 libxcb-sync1-1.13-lp152.5.3.1 libxcb-sync1-debuginfo-1.13-lp152.5.3.1 libxcb-xf86dri0-1.13-lp152.5.3.1 libxcb-xf86dri0-debuginfo-1.13-lp152.5.3.1 libxcb-xfixes0-1.13-lp152.5.3.1 libxcb-xfixes0-debuginfo-1.13-lp152.5.3.1 libxcb-xinerama0-1.13-lp152.5.3.1 libxcb-xinerama0-debuginfo-1.13-lp152.5.3.1 libxcb-xinput0-1.13-lp152.5.3.1 libxcb-xinput0-debuginfo-1.13-lp152.5.3.1 libxcb-xkb1-1.13-lp152.5.3.1 libxcb-xkb1-debuginfo-1.13-lp152.5.3.1 libxcb-xtest0-1.13-lp152.5.3.1 libxcb-xtest0-debuginfo-1.13-lp152.5.3.1 libxcb-xv0-1.13-lp152.5.3.1 libxcb-xv0-debuginfo-1.13-lp152.5.3.1 libxcb-xvmc0-1.13-lp152.5.3.1 libxcb-xvmc0-debuginfo-1.13-lp152.5.3.1 libxcb1-1.13-lp152.5.3.1 libxcb1-debuginfo-1.13-lp152.5.3.1 - openSUSE Leap 15.2 (x86_64): libX11-6-32bit-1.6.5-lp152.5.3.1 libX11-6-32bit-debuginfo-1.6.5-lp152.5.3.1 libX11-devel-32bit-1.6.5-lp152.5.3.1 libX11-xcb1-32bit-1.6.5-lp152.5.3.1 libX11-xcb1-32bit-debuginfo-1.6.5-lp152.5.3.1 libxcb-composite0-32bit-1.13-lp152.5.3.1 libxcb-composite0-32bit-debuginfo-1.13-lp152.5.3.1 libxcb-damage0-32bit-1.13-lp152.5.3.1 libxcb-damage0-32bit-debuginfo-1.13-lp152.5.3.1 libxcb-devel-32bit-1.13-lp152.5.3.1 libxcb-dpms0-32bit-1.13-lp152.5.3.1 libxcb-dpms0-32bit-debuginfo-1.13-lp152.5.3.1 libxcb-dri2-0-32bit-1.13-lp152.5.3.1 libxcb-dri2-0-32bit-debuginfo-1.13-lp152.5.3.1 libxcb-dri3-0-32bit-1.13-lp152.5.3.1 libxcb-dri3-0-32bit-debuginfo-1.13-lp152.5.3.1 libxcb-glx0-32bit-1.13-lp152.5.3.1 libxcb-glx0-32bit-debuginfo-1.13-lp152.5.3.1 libxcb-present0-32bit-1.13-lp152.5.3.1 libxcb-present0-32bit-debuginfo-1.13-lp152.5.3.1 libxcb-randr0-32bit-1.13-lp152.5.3.1 libxcb-randr0-32bit-debuginfo-1.13-lp152.5.3.1 libxcb-record0-32bit-1.13-lp152.5.3.1 libxcb-record0-32bit-debuginfo-1.13-lp152.5.3.1 libxcb-render0-32bit-1.13-lp152.5.3.1 libxcb-render0-32bit-debuginfo-1.13-lp152.5.3.1 libxcb-res0-32bit-1.13-lp152.5.3.1 libxcb-res0-32bit-debuginfo-1.13-lp152.5.3.1 libxcb-screensaver0-32bit-1.13-lp152.5.3.1 libxcb-screensaver0-32bit-debuginfo-1.13-lp152.5.3.1 libxcb-shape0-32bit-1.13-lp152.5.3.1 libxcb-shape0-32bit-debuginfo-1.13-lp152.5.3.1 libxcb-shm0-32bit-1.13-lp152.5.3.1 libxcb-shm0-32bit-debuginfo-1.13-lp152.5.3.1 libxcb-sync1-32bit-1.13-lp152.5.3.1 libxcb-sync1-32bit-debuginfo-1.13-lp152.5.3.1 libxcb-xf86dri0-32bit-1.13-lp152.5.3.1 libxcb-xf86dri0-32bit-debuginfo-1.13-lp152.5.3.1 libxcb-xfixes0-32bit-1.13-lp152.5.3.1 libxcb-xfixes0-32bit-debuginfo-1.13-lp152.5.3.1 libxcb-xinerama0-32bit-1.13-lp152.5.3.1 libxcb-xinerama0-32bit-debuginfo-1.13-lp152.5.3.1 libxcb-xinput0-32bit-1.13-lp152.5.3.1 libxcb-xinput0-32bit-debuginfo-1.13-lp152.5.3.1 libxcb-xkb1-32bit-1.13-lp152.5.3.1 libxcb-xkb1-32bit-debuginfo-1.13-lp152.5.3.1 libxcb-xtest0-32bit-1.13-lp152.5.3.1 libxcb-xtest0-32bit-debuginfo-1.13-lp152.5.3.1 libxcb-xv0-32bit-1.13-lp152.5.3.1 libxcb-xv0-32bit-debuginfo-1.13-lp152.5.3.1 libxcb-xvmc0-32bit-1.13-lp152.5.3.1 libxcb-xvmc0-32bit-debuginfo-1.13-lp152.5.3.1 libxcb1-32bit-1.13-lp152.5.3.1 libxcb1-32bit-debuginfo-1.13-lp152.5.3.1 - openSUSE Leap 15.2 (noarch): libX11-data-1.6.5-lp152.5.3.1 libxcb-devel-doc-1.13-lp152.5.3.1 References: https://www.suse.com/security/cve/CVE-2020-14344.html https://bugzilla.suse.com/1174628

1 0

openSUSE-RU-2020:1165-1: moderate: Recommended update for ocfs2-tools
by maintenance＠opensuse.org 08 Aug '20

08 Aug '20

openSUSE Recommended Update: Recommended update for ocfs2-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1165-1 Rating: moderate References: #1170530 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ocfs2-tools fixes the following issue: - Fix debugfs.ocfs2 error on devices with sector size 4096 (bsc#1170530) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1165=1 Package List: - openSUSE Leap 15.2 (x86_64): ocfs2-tools-1.8.5-lp152.7.3.1 ocfs2-tools-debuginfo-1.8.5-lp152.7.3.1 ocfs2-tools-debugsource-1.8.5-lp152.7.3.1 ocfs2-tools-devel-1.8.5-lp152.7.3.1 ocfs2-tools-devel-static-1.8.5-lp152.7.3.1 ocfs2-tools-o2cb-1.8.5-lp152.7.3.1 ocfs2-tools-o2cb-debuginfo-1.8.5-lp152.7.3.1 References: https://bugzilla.suse.com/1170530

1 0

openSUSE-RU-2020:1163-1: moderate: Recommended update for opus
by maintenance＠opensuse.org 08 Aug '20

08 Aug '20

openSUSE Recommended Update: Recommended update for opus ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1163-1 Rating: moderate References: #1172526 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for opus fixes the following issues: - Fix for an issue when the 'CELTDecoder' can be larger than 21 and cauese crash by builds with custom modes or hardening. (bsc#1172526) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1163=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libopus-devel-1.3.1-lp152.2.3.1 libopus0-1.3.1-lp152.2.3.1 libopus0-debuginfo-1.3.1-lp152.2.3.1 opus-debugsource-1.3.1-lp152.2.3.1 - openSUSE Leap 15.2 (x86_64): libopus0-32bit-1.3.1-lp152.2.3.1 libopus0-32bit-debuginfo-1.3.1-lp152.2.3.1 References: https://bugzilla.suse.com/1172526

1 0

openSUSE-SU-2020:1162-1: important: Security update for libX11
by opensuse-security＠opensuse.org 07 Aug '20

07 Aug '20

openSUSE Security Update: Security update for libX11 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1162-1 Rating: important References: #1174628 Cross-References: CVE-2020-14344 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libX11 fixes the following issues: - Fixed XIM client heap overflows (CVE-2020-14344, bsc#1174628) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1162=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libX11-6-1.6.5-lp151.4.3.1 libX11-6-debuginfo-1.6.5-lp151.4.3.1 libX11-debugsource-1.6.5-lp151.4.3.1 libX11-devel-1.6.5-lp151.4.3.1 libX11-xcb1-1.6.5-lp151.4.3.1 libX11-xcb1-debuginfo-1.6.5-lp151.4.3.1 libxcb-composite0-1.13-lp151.4.3.1 libxcb-composite0-debuginfo-1.13-lp151.4.3.1 libxcb-damage0-1.13-lp151.4.3.1 libxcb-damage0-debuginfo-1.13-lp151.4.3.1 libxcb-debugsource-1.13-lp151.4.3.1 libxcb-devel-1.13-lp151.4.3.1 libxcb-dpms0-1.13-lp151.4.3.1 libxcb-dpms0-debuginfo-1.13-lp151.4.3.1 libxcb-dri2-0-1.13-lp151.4.3.1 libxcb-dri2-0-debuginfo-1.13-lp151.4.3.1 libxcb-dri3-0-1.13-lp151.4.3.1 libxcb-dri3-0-debuginfo-1.13-lp151.4.3.1 libxcb-glx0-1.13-lp151.4.3.1 libxcb-glx0-debuginfo-1.13-lp151.4.3.1 libxcb-present0-1.13-lp151.4.3.1 libxcb-present0-debuginfo-1.13-lp151.4.3.1 libxcb-randr0-1.13-lp151.4.3.1 libxcb-randr0-debuginfo-1.13-lp151.4.3.1 libxcb-record0-1.13-lp151.4.3.1 libxcb-record0-debuginfo-1.13-lp151.4.3.1 libxcb-render0-1.13-lp151.4.3.1 libxcb-render0-debuginfo-1.13-lp151.4.3.1 libxcb-res0-1.13-lp151.4.3.1 libxcb-res0-debuginfo-1.13-lp151.4.3.1 libxcb-screensaver0-1.13-lp151.4.3.1 libxcb-screensaver0-debuginfo-1.13-lp151.4.3.1 libxcb-shape0-1.13-lp151.4.3.1 libxcb-shape0-debuginfo-1.13-lp151.4.3.1 libxcb-shm0-1.13-lp151.4.3.1 libxcb-shm0-debuginfo-1.13-lp151.4.3.1 libxcb-sync1-1.13-lp151.4.3.1 libxcb-sync1-debuginfo-1.13-lp151.4.3.1 libxcb-xf86dri0-1.13-lp151.4.3.1 libxcb-xf86dri0-debuginfo-1.13-lp151.4.3.1 libxcb-xfixes0-1.13-lp151.4.3.1 libxcb-xfixes0-debuginfo-1.13-lp151.4.3.1 libxcb-xinerama0-1.13-lp151.4.3.1 libxcb-xinerama0-debuginfo-1.13-lp151.4.3.1 libxcb-xinput0-1.13-lp151.4.3.1 libxcb-xinput0-debuginfo-1.13-lp151.4.3.1 libxcb-xkb1-1.13-lp151.4.3.1 libxcb-xkb1-debuginfo-1.13-lp151.4.3.1 libxcb-xtest0-1.13-lp151.4.3.1 libxcb-xtest0-debuginfo-1.13-lp151.4.3.1 libxcb-xv0-1.13-lp151.4.3.1 libxcb-xv0-debuginfo-1.13-lp151.4.3.1 libxcb-xvmc0-1.13-lp151.4.3.1 libxcb-xvmc0-debuginfo-1.13-lp151.4.3.1 libxcb1-1.13-lp151.4.3.1 libxcb1-debuginfo-1.13-lp151.4.3.1 - openSUSE Leap 15.1 (noarch): libX11-data-1.6.5-lp151.4.3.1 libxcb-devel-doc-1.13-lp151.4.3.1 - openSUSE Leap 15.1 (x86_64): libX11-6-32bit-1.6.5-lp151.4.3.1 libX11-6-32bit-debuginfo-1.6.5-lp151.4.3.1 libX11-devel-32bit-1.6.5-lp151.4.3.1 libX11-xcb1-32bit-1.6.5-lp151.4.3.1 libX11-xcb1-32bit-debuginfo-1.6.5-lp151.4.3.1 libxcb-composite0-32bit-1.13-lp151.4.3.1 libxcb-composite0-32bit-debuginfo-1.13-lp151.4.3.1 libxcb-damage0-32bit-1.13-lp151.4.3.1 libxcb-damage0-32bit-debuginfo-1.13-lp151.4.3.1 libxcb-devel-32bit-1.13-lp151.4.3.1 libxcb-dpms0-32bit-1.13-lp151.4.3.1 libxcb-dpms0-32bit-debuginfo-1.13-lp151.4.3.1 libxcb-dri2-0-32bit-1.13-lp151.4.3.1 libxcb-dri2-0-32bit-debuginfo-1.13-lp151.4.3.1 libxcb-dri3-0-32bit-1.13-lp151.4.3.1 libxcb-dri3-0-32bit-debuginfo-1.13-lp151.4.3.1 libxcb-glx0-32bit-1.13-lp151.4.3.1 libxcb-glx0-32bit-debuginfo-1.13-lp151.4.3.1 libxcb-present0-32bit-1.13-lp151.4.3.1 libxcb-present0-32bit-debuginfo-1.13-lp151.4.3.1 libxcb-randr0-32bit-1.13-lp151.4.3.1 libxcb-randr0-32bit-debuginfo-1.13-lp151.4.3.1 libxcb-record0-32bit-1.13-lp151.4.3.1 libxcb-record0-32bit-debuginfo-1.13-lp151.4.3.1 libxcb-render0-32bit-1.13-lp151.4.3.1 libxcb-render0-32bit-debuginfo-1.13-lp151.4.3.1 libxcb-res0-32bit-1.13-lp151.4.3.1 libxcb-res0-32bit-debuginfo-1.13-lp151.4.3.1 libxcb-screensaver0-32bit-1.13-lp151.4.3.1 libxcb-screensaver0-32bit-debuginfo-1.13-lp151.4.3.1 libxcb-shape0-32bit-1.13-lp151.4.3.1 libxcb-shape0-32bit-debuginfo-1.13-lp151.4.3.1 libxcb-shm0-32bit-1.13-lp151.4.3.1 libxcb-shm0-32bit-debuginfo-1.13-lp151.4.3.1 libxcb-sync1-32bit-1.13-lp151.4.3.1 libxcb-sync1-32bit-debuginfo-1.13-lp151.4.3.1 libxcb-xf86dri0-32bit-1.13-lp151.4.3.1 libxcb-xf86dri0-32bit-debuginfo-1.13-lp151.4.3.1 libxcb-xfixes0-32bit-1.13-lp151.4.3.1 libxcb-xfixes0-32bit-debuginfo-1.13-lp151.4.3.1 libxcb-xinerama0-32bit-1.13-lp151.4.3.1 libxcb-xinerama0-32bit-debuginfo-1.13-lp151.4.3.1 libxcb-xinput0-32bit-1.13-lp151.4.3.1 libxcb-xinput0-32bit-debuginfo-1.13-lp151.4.3.1 libxcb-xkb1-32bit-1.13-lp151.4.3.1 libxcb-xkb1-32bit-debuginfo-1.13-lp151.4.3.1 libxcb-xtest0-32bit-1.13-lp151.4.3.1 libxcb-xtest0-32bit-debuginfo-1.13-lp151.4.3.1 libxcb-xv0-32bit-1.13-lp151.4.3.1 libxcb-xv0-32bit-debuginfo-1.13-lp151.4.3.1 libxcb-xvmc0-32bit-1.13-lp151.4.3.1 libxcb-xvmc0-32bit-debuginfo-1.13-lp151.4.3.1 libxcb1-32bit-1.13-lp151.4.3.1 libxcb1-32bit-debuginfo-1.13-lp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2020-14344.html https://bugzilla.suse.com/1174628

1 0

openSUSE-RU-2020:1159-1: moderate: Recommended update for ocfs2-tools
by maintenance＠opensuse.org 07 Aug '20

07 Aug '20

openSUSE Recommended Update: Recommended update for ocfs2-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1159-1 Rating: moderate References: #1170530 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ocfs2-tools fixes the following issue: - Fix debugfs.ocfs2 error on devices with sector size 4096 (bsc#1170530) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1159=1 Package List: - openSUSE Leap 15.1 (x86_64): ocfs2-tools-1.8.5-lp151.6.3.1 ocfs2-tools-debuginfo-1.8.5-lp151.6.3.1 ocfs2-tools-debugsource-1.8.5-lp151.6.3.1 ocfs2-tools-devel-1.8.5-lp151.6.3.1 ocfs2-tools-devel-static-1.8.5-lp151.6.3.1 ocfs2-tools-o2cb-1.8.5-lp151.6.3.1 ocfs2-tools-o2cb-debuginfo-1.8.5-lp151.6.3.1 References: https://bugzilla.suse.com/1170530

1 0

openSUSE-RU-2020:1158-1: Recommended update for ovmf
by maintenance＠opensuse.org 07 Aug '20

07 Aug '20

openSUSE Recommended Update: Recommended update for ovmf ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1158-1 Rating: low References: #1174543 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ovmf rebuilds with the new UEFI signing key. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1158=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): ovmf-201911-lp152.6.2.1 ovmf-tools-201911-lp152.6.2.1 - openSUSE Leap 15.2 (noarch): qemu-ovmf-ia32-201911-lp152.6.2.1 qemu-ovmf-x86_64-201911-lp152.6.2.1 - openSUSE Leap 15.2 (x86_64): qemu-ovmf-x86_64-debug-201911-lp152.6.2.1 References: https://bugzilla.suse.com/1174543

1 0

openSUSE-SU-2020:1161-1: Security update of chromium
by opensuse-security＠opensuse.org 07 Aug '20

07 Aug '20

openSUSE Security Update: Security update of chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1161-1 Rating: low References: #1174582 Cross-References: CVE-2020-6532 CVE-2020-6537 CVE-2020-6538 CVE-2020-6539 CVE-2020-6540 CVE-2020-6541 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: Chromium was updated to 84.0.4147.105 (boo#1174582): * CVE-2020-6537: Type Confusion in V8 * CVE-2020-6538: Inappropriate implementation in WebView * CVE-2020-6532: Use after free in SCTP * CVE-2020-6539: Use after free in CSS * CVE-2020-6540: Heap buffer overflow in Skia * CVE-2020-6541: Use after free in WebUSB This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1161=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 x86_64): chromedriver-84.0.4147.105-bp151.3.97.1 chromium-84.0.4147.105-bp151.3.97.1 References: https://www.suse.com/security/cve/CVE-2020-6532.html https://www.suse.com/security/cve/CVE-2020-6537.html https://www.suse.com/security/cve/CVE-2020-6538.html https://www.suse.com/security/cve/CVE-2020-6539.html https://www.suse.com/security/cve/CVE-2020-6540.html https://www.suse.com/security/cve/CVE-2020-6541.html https://bugzilla.suse.com/1174582

1 0

openSUSE-RU-2020:1160-1: moderate: Recommended update for opus
by maintenance＠opensuse.org 07 Aug '20

07 Aug '20

openSUSE Recommended Update: Recommended update for opus ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1160-1 Rating: moderate References: #1172526 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for opus fixes the following issues: - Fix for an issue when the 'CELTDecoder' can be larger than 21 and cauese crash by builds with custom modes or hardening. (bsc#1172526) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1160=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libopus-devel-1.3.1-lp151.3.6.1 libopus0-1.3.1-lp151.3.6.1 libopus0-debuginfo-1.3.1-lp151.3.6.1 opus-debugsource-1.3.1-lp151.3.6.1 - openSUSE Leap 15.1 (x86_64): libopus0-32bit-1.3.1-lp151.3.6.1 libopus0-32bit-debuginfo-1.3.1-lp151.3.6.1 References: https://bugzilla.suse.com/1172526

1 0

openSUSE-RU-2020:1157-1: Recommended update for crmsh
by maintenance＠opensuse.org 07 Aug '20

07 Aug '20

openSUSE Recommended Update: Recommended update for crmsh ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1157-1 Rating: low References: #1174588 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for crmsh fixes the following issues: - Fix for corosync to handle the return code of 'corosync-quorumtool' correctly. (bsc#1174588) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1157=1 Package List: - openSUSE Leap 15.2 (noarch): crmsh-4.2.0+git.1595940615.c452cc00-lp152.4.11.1 crmsh-scripts-4.2.0+git.1595940615.c452cc00-lp152.4.11.1 crmsh-test-4.2.0+git.1595940615.c452cc00-lp152.4.11.1 References: https://bugzilla.suse.com/1174588

1 0

openSUSE-SU-2020:1156-1: moderate: Security update for python-rtslib-fb
by opensuse-security＠opensuse.org 07 Aug '20

07 Aug '20

openSUSE Security Update: Security update for python-rtslib-fb ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1156-1 Rating: moderate References: #1173257 Cross-References: CVE-2020-14019 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-rtslib-fb fixes the following issues: - Update to version v2.1.73 (bsc#1173257 CVE-2020-14019): * version 2.1.73 * save_to_file: fix fd open mode * saveconfig: copy temp configfile with permissions * saveconfig: open the temp configfile with modes set * Fix "is not" with a literal SyntaxWarning * Fix an incorrect config path in two comments * version 2.1.72 * Do not change dbroot after drivers have been registered * Remove '_if_needed' from RTSRoot._set_dbroot()'s name Replacing old tarball with python-rtslib-fb-v2.1.73.tar.xz This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1156=1 Package List: - openSUSE Leap 15.2 (noarch): python2-rtslib-fb-2.1.73-lp152.2.3.1 python3-rtslib-fb-2.1.73-lp152.2.3.1 References: https://www.suse.com/security/cve/CVE-2020-14019.html https://bugzilla.suse.com/1173257

1 0

openSUSE-SU-2020:1155-1: important: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 07 Aug '20

07 Aug '20

openSUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1155-1 Rating: important References: #1174538 Cross-References: CVE-2020-15652 CVE-2020-15653 CVE-2020-15654 CVE-2020-15655 CVE-2020-15656 CVE-2020-15657 CVE-2020-15658 CVE-2020-15659 CVE-2020-6463 CVE-2020-6514 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes 10 vulnerabilities is now available. Description: This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 78.1.0 ESR * Fixed: Various stability, functionality, and security fixes (bsc#1174538) * CVE-2020-15652: Potential leak of redirect targets when loading scripts in a worker * CVE-2020-6514: WebRTC data channel leaks internal address to peer * CVE-2020-15655: Extension APIs could be used to bypass Same-Origin Policy * CVE-2020-15653: Bypassing iframe sandbox when allowing popups * CVE-2020-6463: Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture * CVE-2020-15656: Type confusion for special arguments in IonMonkey * CVE-2020-15658: Overriding file type when saving to disk * CVE-2020-15657: DLL hijacking due to incorrect loading path * CVE-2020-15654: Custom cursor can overlay user interface * CVE-2020-15659: Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1 This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1155=1 Package List: - openSUSE Leap 15.2 (x86_64): MozillaFirefox-78.1.0-lp152.2.12.1 MozillaFirefox-branding-upstream-78.1.0-lp152.2.12.1 MozillaFirefox-buildsymbols-78.1.0-lp152.2.12.1 MozillaFirefox-debuginfo-78.1.0-lp152.2.12.1 MozillaFirefox-debugsource-78.1.0-lp152.2.12.1 MozillaFirefox-devel-78.1.0-lp152.2.12.1 MozillaFirefox-translations-common-78.1.0-lp152.2.12.1 MozillaFirefox-translations-other-78.1.0-lp152.2.12.1 References: https://www.suse.com/security/cve/CVE-2020-15652.html https://www.suse.com/security/cve/CVE-2020-15653.html https://www.suse.com/security/cve/CVE-2020-15654.html https://www.suse.com/security/cve/CVE-2020-15655.html https://www.suse.com/security/cve/CVE-2020-15656.html https://www.suse.com/security/cve/CVE-2020-15657.html https://www.suse.com/security/cve/CVE-2020-15658.html https://www.suse.com/security/cve/CVE-2020-15659.html https://www.suse.com/security/cve/CVE-2020-6463.html https://www.suse.com/security/cve/CVE-2020-6514.html https://bugzilla.suse.com/1174538

1 0

openSUSE-SU-2020:1154-1: Security update of chromium
by opensuse-security＠opensuse.org 06 Aug '20

06 Aug '20

openSUSE Security Update: Security update of chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1154-1 Rating: low References: #1174582 Cross-References: CVE-2020-6532 CVE-2020-6537 CVE-2020-6538 CVE-2020-6539 CVE-2020-6540 CVE-2020-6541 Affected Products: openSUSE Leap 15.2 openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: Chromium was updated to 84.0.4147.105 (boo#1174582): * CVE-2020-6537: Type Confusion in V8 * CVE-2020-6538: Inappropriate implementation in WebView * CVE-2020-6532: Use after free in SCTP * CVE-2020-6539: Use after free in CSS * CVE-2020-6540: Heap buffer overflow in Skia * CVE-2020-6541: Use after free in WebUSB Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1154=1 - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1154=1 Package List: - openSUSE Leap 15.2 (x86_64): chromedriver-84.0.4147.105-lp152.2.9.1 chromedriver-debuginfo-84.0.4147.105-lp152.2.9.1 chromium-84.0.4147.105-lp152.2.9.1 chromium-debuginfo-84.0.4147.105-lp152.2.9.1 chromium-debugsource-84.0.4147.105-lp152.2.9.1 - openSUSE Leap 15.1 (x86_64): chromedriver-84.0.4147.105-lp151.2.112.1 chromedriver-debuginfo-84.0.4147.105-lp151.2.112.1 chromium-84.0.4147.105-lp151.2.112.1 chromium-debuginfo-84.0.4147.105-lp151.2.112.1 chromium-debugsource-84.0.4147.105-lp151.2.112.1 References: https://www.suse.com/security/cve/CVE-2020-6532.html https://www.suse.com/security/cve/CVE-2020-6537.html https://www.suse.com/security/cve/CVE-2020-6538.html https://www.suse.com/security/cve/CVE-2020-6539.html https://www.suse.com/security/cve/CVE-2020-6540.html https://www.suse.com/security/cve/CVE-2020-6541.html https://bugzilla.suse.com/1174582

1 0

openSUSE-SU-2020:1153-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 06 Aug '20

06 Aug '20

openSUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1153-1 Rating: important References: #1051510 #1065729 #1071995 #1085030 #1111666 #1112178 #1113956 #1114279 #1120163 #1144333 #1148868 #1150660 #1151927 #1152107 #1152624 #1158983 #1159058 #1161016 #1162002 #1162063 #1163309 #1166985 #1167104 #1168081 #1168959 #1169194 #1169514 #1169771 #1169795 #1170011 #1170442 #1170592 #1170617 #1170618 #1171124 #1171424 #1171529 #1171530 #1171558 #1171732 #1171739 #1171743 #1171753 #1171759 #1171835 #1171841 #1171868 #1171904 #1171988 #1172247 #1172257 #1172344 #1172458 #1172484 #1172537 #1172538 #1172687 #1172719 #1172759 #1172775 #1172781 #1172782 #1172783 #1172871 #1172872 #1172963 #1172999 #1173060 #1173074 #1173146 #1173265 #1173280 #1173284 #1173428 #1173514 #1173567 #1173573 #1173659 #1173746 #1173818 #1173820 #1173825 #1173826 #1173833 #1173838 #1173839 #1173845 #1173857 #1174070 #1174113 #1174115 #1174122 #1174123 #1174205 #1174296 #1174343 #1174356 #1174409 #1174438 #1174462 #1174543 #1174549 #1174658 #1174685 #1174757 #1174840 #1174841 #1174843 #1174844 #1174845 #1174887 Cross-References: CVE-2019-16746 CVE-2019-20810 CVE-2019-20908 CVE-2020-0305 CVE-2020-10135 CVE-2020-10766 CVE-2020-10767 CVE-2020-10768 CVE-2020-10769 CVE-2020-10773 CVE-2020-10781 CVE-2020-12771 CVE-2020-12888 CVE-2020-13974 CVE-2020-14331 CVE-2020-14416 CVE-2020-15393 CVE-2020-15780 CVE-2020-16166 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves 19 vulnerabilities and has 92 fixes is now available. Description: The openSUSE Leap 15.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-16746: An issue was discovered in net/wireless/nl80211.c where it did not check the length of variable elements in a beacon head, leading to a buffer overflow (bnc#1152107 1173659). - CVE-2019-20810: go7007_snd_init in drivers/media/usb/go7007/snd-go7007.c did not call snd_card_free for a failure path, which causes a memory leak, aka CID-9453264ef586 (bnc#1172458). - CVE-2019-20908: An issue was discovered in drivers/firmware/efi/efi.c where Incorrect access permissions for the efivar_ssdt ACPI variable could be used by attackers to bypass lockdown or secure boot restrictions, aka CID-1957a85b0032 (bnc#1173567). - CVE-2020-0305: In cdev_get of char_dev.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation (bnc#1174462). - CVE-2020-10135: Legacy pairing and secure-connections pairing authentication in Bluetooth® BR/EDR Core Specification v5.2 and earlier may have allowed an unauthenticated user to complete authentication without pairing credentials via adjacent access. An unauthenticated, adjacent attacker could impersonate a Bluetooth BR/EDR master or slave to pair with a previously paired remote device to successfully complete the authentication procedure without knowing the link key (bnc#1171988). - CVE-2020-10766: Fixed rogue cross-process SSBD shutdown. Linux scheduler logical bug allowed an attacker to turn off the SSBD protection. (bnc#1172781). - CVE-2020-10767: Fixed indirect Branch Prediction Barrier is force-disabled when STIBP is unavailable or enhanced IBRS is available. (bnc#1172782). - CVE-2020-10768: Fixed indirect branch speculation can be enabled after it was force-disabled by the PR_SPEC_FORCE_DISABLE prctl command. (bnc#1172783). - CVE-2020-10769: A buffer over-read flaw was found in crypto_authenc_extractkeys in crypto/authenc.c in the IPsec Cryptographic algorithm's module, authenc. When a payload longer than 4 bytes, and is not following 4-byte alignment boundary guidelines, it causes a buffer over-read threat, leading to a system crash. This flaw allowed a local attacker with user privileges to cause a denial of service (bnc#1173265). - CVE-2020-10773: Fixed a kernel stack information leak on s390/s390x. (bnc#1172999). - CVE-2020-10781: A zram sysfs resource consumption was fixed. (bnc#1173074). - CVE-2020-12771: btree_gc_coalesce in drivers/md/bcache/btree.c has a deadlock if a coalescing operation fails (bnc#1171732). - CVE-2020-12888: The VFIO PCI driver mishandled attempts to access disabled memory space (bnc#1171868). - CVE-2020-13974: drivers/tty/vt/keyboard.c had an integer overflow if k_ascii was called several times in a row, aka CID-b86dab054059. (bnc#1172775). - CVE-2020-14331: Fixed a buffer over write in vgacon_scroll (bnc#1174205). - CVE-2020-14331: Fixed an out of bounds write to the vgacon scrollback buffer (bsc#1174205). - CVE-2020-14416: A race condition in tty->disc_data handling in the slip and slcan line discipline could lead to a use-after-free, aka CID-0ace17d56824. This affects drivers/net/slip/slip.c and drivers/net/can/slcan.c (bnc#1162002). - CVE-2020-15393: usbtest_disconnect in drivers/usb/misc/usbtest.c has a memory leak, aka CID-28ebeb8db770 (bnc#1173514). - CVE-2020-15780: An issue was discovered in drivers/acpi/acpi_configfs.c where injection of malicious ACPI tables via configfs could be used by attackers to bypass lockdown and secure boot restrictions, aka CID-75b0cea7bf30 (bnc#1173573). - CVE-2020-16166: The Linux kernel allowed remote attackers to make observations that help to obtain sensitive information about the internal state of the network RNG, aka CID-f227e3ec3b5c. This is related to drivers/char/random.c and kernel/time/timer.c (bnc#1174757). The following non-security bugs were fixed: - ACPI: GED: add support for _Exx / _Lxx handler methods (bsc#1111666). - ACPI: GED: use correct trigger type field in _Exx / _Lxx handling (bsc#1111666). - ACPI: NFIT: Fix unlock on error in scrub_show() (bsc#1171753). - ACPI: PM: Avoid using power resources if there are none for D0 (bsc#1051510). - ACPI: sysfs: Fix pm_profile_attr type (bsc#1111666). - ACPI: video: Use native backlight on Acer Aspire 5783z (bsc#1111666). - ACPI: video: Use native backlight on Acer TravelMate 5735Z (bsc#1111666). - ALSA: es1688: Add the missed snd_card_free() (bsc#1051510). - ALSA: hda: Add ElkhartLake HDMI codec vid (bsc#1111666). - ALSA: hda: add sienna_cichlid audio asic id for sienna_cichlid up (bsc#1111666). - ALSA: hda: fix NULL pointer dereference during suspend (git-fixes). - ALSA: hda/hdmi - enable runtime pm for newer AMD display audio (bsc#1111666). - ALSA: hda - let hs_mic be picked ahead of hp_mic (bsc#1111666). - ALSA: hda/realtek - add a pintbl quirk for several Lenovo machines (bsc#1111666). - ALSA: hda/realtek - Add LED class support for micmute LED (bsc#1111666). - ALSA: hda/realtek: Add mute LED and micmute LED support for HP systems (bsc#1111666). - ALSA: hda/realtek - Add quirk for Lenovo Carbon X1 8th gen (bsc#1111666). - ALSA: hda/realtek - Add quirk for MSI GE63 laptop (bsc#1111666). - ALSA: hda/realtek - Add quirk for MSI GL63 (bsc#1111666). - ALSA: hda/realtek - change to suitable link model for ASUS platform (bsc#1111666). - ALSA: hda/realtek - Check headset type by unplug and resume (bsc#1111666). - ALSA: hda/realtek - Enable audio jacks of Acer vCopperbox with ALC269VC (bsc#1111666). - ALSA: hda/realtek: Enable headset mic of Acer C20-820 with ALC269VC (bsc#1111666). - ALSA: hda/realtek: Enable headset mic of Acer TravelMate B311R-31 with ALC256 (bsc#1111666). - ALSA: hda/realtek: Enable headset mic of Acer Veriton N4660G with ALC269VC (bsc#1111666). - ALSA: hda/realtek: enable headset mic of ASUS ROG Zephyrus G14(G401) series with ALC289 (bsc#1111666). - ALSA: hda/realtek: enable headset mic of ASUS ROG Zephyrus G15(GA502) series with ALC289 (bsc#1111666). - ALSA: hda/realtek - Enable micmute LED on and HP system (bsc#1111666). - ALSA: hda/realtek - Enable Speaker for ASUS UX533 and UX534 (bsc#1111666). - ALSA: hda/realtek - Enable Speaker for ASUS UX563 (bsc#1111666). - ALSA: hda/realtek: Fix add a "ultra_low_power" function for intel reference board (alc256) (bsc#1111666). - ALSA: hda/realtek: Fixed ALC298 sound bug by adding quirk for Samsung Notebook Pen S (bsc#1111666). - ALSA: hda/realtek - Fixed HP right speaker no sound (bsc#1111666). - ALSA: hda/realtek - Fix Lenovo Thinkpad X1 Carbon 7th quirk subdevice id (bsc#1111666). - ALSA: hda/realtek - Fix unused variable warning w/o CONFIG_LEDS_TRIGGER_AUDIO (bsc#1111666). - ALSA: hda/realtek - Introduce polarity for micmute LED GPIO (bsc#1111666). - ALSA: hda/realtek: typo_fix: enable headset mic of ASUS ROG Zephyrus G14(GA401) series with ALC289 (bsc#1111666). - ALSA: hda: Workaround for spurious wakeups on some Intel platforms (git-fixes). - ALSA: lx6464es - add support for LX6464ESe pci express variant (bsc#1111666). - ALSA: opl3: fix infoleak in opl3 (bsc#1111666). - ALSA: pcm: disallow linking stream to itself (bsc#1111666). - ALSA: usb-audio: Add duplex sound support for USB devices using implicit feedback (bsc#1111666). - ALSA: usb-audio: Add Pioneer DJ DJM-900NXS2 support (bsc#1111666). - ALSA: usb-audio: add quirk for MacroSilicon MS2109 (bsc#1111666). - ALSA: usb-audio: Add vendor, product and profile name for HP Thunderbolt Dock (bsc#1111666). - ALSA: usb-audio: Clean up quirk entries with macros (bsc#1111666). - ALSA: usb-audio: Fix inconsistent card PM state after resume (bsc#1111666). - ALSA: usb-audio: Fix packet size calculation (bsc#1111666). - ALSA: usb-audio: Fix racy list management in output queue (bsc#1111666). - ALSA: usb-audio: Improve frames size computation (bsc#1111666). - ALSA: usb-audio: Manage auto-pm of all bundled interfaces (bsc#1111666). - ALSA: usb-audio: Use the new macro for HP Dock rename quirks (bsc#1111666). - amdgpu: a NULL ->mm does not mean a thread is a kthread (git-fixes). - arm64: map FDT as RW for early_init_dt_scan() (jsc#SLE-12423). - ath9k: Fix general protection fault in ath9k_hif_usb_rx_cb (bsc#1111666). - ath9k: Fix use-after-free Read in ath9k_wmi_ctrl_rx (bsc#1111666). - ath9k: Fix use-after-free Write in ath9k_htc_rx_msg (bsc#1111666). - ath9x: Fix stack-out-of-bounds Write in ath9k_hif_usb_rx_cb (bsc#1111666). - ax25: fix setsockopt(SO_BINDTODEVICE) (networking-stable-20_05_27). - b43: Fix connection problem with WPA3 (bsc#1111666). - b43_legacy: Fix connection problem with WPA3 (bsc#1111666). - bcache: Fix an error code in bch_dump_read() (git fixes (block drivers)). - be2net: fix link failure after ethtool offline test (git-fixes). - block: Fix use-after-free in blkdev_get() (bsc#1174843). - block: nr_sects_write(): Disable preemption on seqcount write (bsc#1173818). - block: remove QUEUE_FLAG_STACKABLE (git fixes (block drivers)). - block: sed-opal: fix sparse warning: convert __be64 data (git fixes (block drivers)). - Bluetooth: Add SCO fallback for invalid LMP parameters error (bsc#1111666). - bnxt_en: Fix AER reset logic on 57500 chips (git-fixes). - bnxt_en: Fix ethtool selftest crash under error conditions (git-fixes). - bnxt_en: Fix handling FRAG_ERR when NVM_INSTALL_UPDATE cmd fails (git-fixes). - bnxt_en: Fix ipv6 RFS filter matching logic (git-fixes). - bnxt_en: fix NULL dereference in case SR-IOV configuration fails (git-fixes). - bnxt_en: Fix VF anti-spoof filter setup (networking-stable-20_05_12). - bnxt_en: Fix VLAN acceleration handling in bnxt_fix_features() (networking-stable-20_05_12). - bnxt_en: Improve AER slot reset (networking-stable-20_05_12). - brcmfmac: fix wrong location to get firmware feature (bsc#1111666). - brcmfmac: Transform compatible string for FW loading (bsc#1169771). - btrfs: add assertions for tree == inode->io_tree to extent IO helpers (bsc#1174438). - btrfs: add new helper btrfs_lock_and_flush_ordered_range (bsc#1174438). - btrfs: Always use a cached extent_state in btrfs_lock_and_flush_ordered_range (bsc#1174438). - btrfs: change timing for qgroup reserved space for ordered extents to fix reserved space leak (bsc#1172247). - btrfs: do not zero f_bavail if we have available space (bsc#1168081). - btrfs: drop argument tree from btrfs_lock_and_flush_ordered_range (bsc#1174438). - btrfs: file: reserve qgroup space after the hole punch range is locked (bsc#1172247). - btrfs: fix extent_state leak in btrfs_lock_and_flush_ordered_range (bsc#1174438). - btrfs: fix failure of RWF_NOWAIT write into prealloc extent beyond eof (bsc#1174438). - btrfs: fix hang on snapshot creation after RWF_NOWAIT write (bsc#1174438). - btrfs: fix RWF_NOWAIT write not failling when we need to cow (bsc#1174438). - btrfs: fix RWF_NOWAIT writes blocking on extent locks and waiting for IO (bsc#1174438). - btrfs: inode: move qgroup reserved space release to the callers of insert_reserved_file_extent() (bsc#1172247). - btrfs: inode: refactor the parameters of insert_reserved_file_extent() (bsc#1172247). - btrfs: make btrfs_ordered_extent naming consistent with btrfs_file_extent_item (bsc#1172247). - btrfs: qgroup: allow to unreserve range without releasing other ranges (bsc#1120163). - btrfs: qgroup: Fix a bug that prevents qgroup to be re-enabled after disable (bsc#1172247). - btrfs: qgroup: fix data leak caused by race between writeback and truncate (bsc#1172247). - btrfs: qgroup: remove ASYNC_COMMIT mechanism in favor of reserve retry-after-EDQUOT (bsc#1120163). - btrfs: qgroup: try to flush qgroup space when we get -EDQUOT (bsc#1120163). - btrfs: Return EAGAIN if we can't start no snpashot write in check_can_nocow (bsc#1174438). - btrfs: use correct count in btrfs_file_write_iter() (bsc#1174438). - btrfs: Use newly introduced btrfs_lock_and_flush_ordered_range (bsc#1174438). - btrfs: volumes: Remove ENOSPC-prone btrfs_can_relocate() (bsc#1171124). - bus: hisi_lpc: Add .remove method to avoid driver unbind crash (bsc#1174658). - bus: hisi_lpc: Do not fail probe for unrecognised child devices (bsc#1174658). - bus: hisi_lpc: Unregister logical PIO range to avoid potential use-after-free (bsc#1174658). - bus: sunxi-rsb: Return correct data when mixing 16-bit and 8-bit reads (bsc#1111666). - carl9170: remove P2P_GO support (bsc#1111666). - cdc-acm: Add DISABLE_ECHO quirk for Microchip/SMSC chip (git-fixes). - CDC-ACM: heed quirk also in error handling (git-fixes). - ceph: convert mdsc->cap_dirty to a per-session list (bsc#1167104). - ceph: request expedited service on session's last cap flush (bsc#1167104). - cgroup, blkcg: Prepare some symbols for module and !CONFIG_CGROUP usages (bsc#1173857). - char/random: Add a newline at the end of the file (jsc#SLE-12423). - cifs: get rid of unused parameter in reconn_setup_dfs_targets() (bsc#1144333). - cifs: handle hostnames that resolve to same ip in failover (bsc#1144333 bsc#1161016). - cifs: set up next DFS target before generic_ip_connect() (bsc#1144333 bsc#1161016). - clk: bcm2835: Fix return type of bcm2835_register_gate (bsc#1051510). - clk: clk-flexgen: fix clock-critical handling (bsc#1051510). - clk: sunxi: Fix incorrect usage of round_down() (bsc#1051510). - clocksource: dw_apb_timer: Make CPU-affiliation being optional (bsc#1111666). - compat_ioctl: block: handle BLKREPORTZONE/BLKRESETZONE (git fixes (block drivers)). - compat_ioctl: block: handle Persistent Reservations (git fixes (block drivers)). - config: arm64: enable CONFIG_IOMMU_DEFAULT_PASSTHROUGH References: bsc#1174549 - copy_{to,from}_user(): consolidate object size checks (git fixes). - crypto: algboss - do not wait during notifier callback (bsc#1111666). - crypto: algif_skcipher - Cap recv SG list at ctx->used (bsc#1111666). - crypto: caam - update xts sector size for large input length (bsc#1111666). - crypto: cavium/nitrox - Fix 'nitrox_get_first_device()' when ndevlist is fully iterated (bsc#1111666). - crypto: cavium/nitrox - Fix 'nitrox_get_first_device()' when ndevlist is fully iterated (git-fixes). - crypto/chcr: fix for ccm(aes) failed test (bsc#1111666). - crypto: chelsio/chtls: properly set tp->lsndtime (bsc#1111666). - crypto: rockchip - fix scatterlist nents error (git-fixes). - crypto: stm32/crc32 - fix ext4 chksum BUG_ON() (git-fixes). - crypto: talitos - check AES key size (git-fixes). - crypto: talitos - fix ablkcipher for CONFIG_VMAP_STACK (git-fixes). - crypto: talitos - fix IPsec cipher in length (git-fixes). - crypto: talitos - reorder code in talitos_edesc_alloc() (git-fixes). - crypto: virtio: Fix src/dst scatterlist calculation in __virtio_crypto_skcipher_do_req() (git-fixes). - debugfs: Check module state before warning in {full/open}_proxy_open() (bsc#1173746). - devinet: fix memleak in inetdev_init() (networking-stable-20_06_07). - /dev/mem: Add missing memory barriers for devmem_inode (git-fixes). - /dev/mem: Revoke mappings when a driver claims the region (git-fixes). - dlm: remove BUG() before panic() (bsc#1174844). - dmaengine: tegra210-adma: Fix an error handling path in 'tegra_adma_probe()' (bsc#1111666). - dm btree: increase rebalance threshold in __rebalance2() (git fixes (block drivers)). - dm cache: fix a crash due to incorrect work item cancelling (git fixes (block drivers)). - dm crypt: fix benbi IV constructor crash if used in authenticated mode (git fixes (block drivers)). - dm: fix potential for q->make_request_fn NULL pointer (git fixes (block drivers)). - dm space map common: fix to ensure new block isn't already in use (git fixes (block drivers)). - dm: various cleanups to md->queue initialization code (git fixes). - dm verity fec: fix hash block number in verity_fec_decode (git fixes (block drivers)). - dm verity fec: fix memory leak in verity_fec_dtr (git fixes (block drivers)). - dpaa_eth: fix usage as DSA master, try 3 (networking-stable-20_05_27). - driver-core, libnvdimm: Let device subsystems add local lockdep coverage (bsc#1171753) - Drivers: hv: Change flag to write log level in panic msg to false (bsc#1170617, bsc#1170618). - drivers: soc: ti: knav_qmss_queue: Make knav_gp_range_ops static (bsc#1051510). - drm: amd/display: fix Kconfig help text (bsc#1113956) * only fix DEBUG_KERNEL_DC - drm: bridge: adv7511: Extend list of audio sample rates (bsc#1111666). - drm/dp_mst: Increase ACT retry timeout to 3s (bsc#1113956) * context changes - drm: encoder_slave: fix refcouting error for modules (bsc#1111666). - drm: encoder_slave: fix refcouting error for modules (bsc#1114279) - drm/i915/icl+: Fix hotplug interrupt disabling after storm detection (bsc#1112178) - drm/i915: Whitelist context-local timestamp in the gen9 cmdparser (bsc#1111666). - drm/mediatek: Check plane visibility in atomic_update (bsc#1113956) * context changes - drm/msm/dpu: fix error return code in dpu_encoder_init (bsc#1111666). - drm: panel-orientation-quirks: Add quirk for Asus T101HA panel (bsc#1111666). - drm: panel-orientation-quirks: Use generic orientation-data for Acer S1003 (bsc#1111666). - drm/qxl: Use correct notify port address when creating cursor ring (bsc#1113956) - drm/radeon: fix double free (bsc#1113956) - drm/radeon: fix fb_div check in ni_init_smc_spll_table() (bsc#1113956) - drm/sun4i: hdmi ddc clk: Fix size of m divider (bsc#1111666). - drm/tegra: hub: Do not enable orphaned window group (bsc#1111666). - drm/vkms: Hold gem object while still in-use (bsc#1113956) * context changes - e1000: Distribute switch variables for initialization (bsc#1111666). - e1000e: Disable TSO for buffer overrun workaround (bsc#1051510). - e1000e: Do not wake up the system via WOL if device wakeup is disabled (bsc#1051510). - e1000e: Relax condition to trigger reset for ME workaround (bsc#1111666). - EDAC/amd64: Read back the scrub rate PCI register on F15h (bsc#1114279). - efi/memreserve: deal with memreserve entries in unmapped memory (bsc#1174685). - efi/random: Increase size of firmware supplied randomness (jsc#SLE-12423). - efi/random: Treat EFI_RNG_PROTOCOL output as bootloader randomness (jsc#SLE-12423). - efi: READ_ONCE rng seed size before munmap (jsc#SLE-12423). - efi: Reorder pr_notice() with add_device_randomness() call (jsc#SLE-12423). - evm: Check also if *tfm is an error pointer in init_desc() (bsc#1051510). - evm: Fix a small race in init_desc() (bsc#1051510). - ext4: fix a data race at inode->i_blocks (bsc#1171835). - ext4: fix EXT_MAX_EXTENT/INDEX to check for zeroed eh_max (bsc#1174840). - ext4: fix partial cluster initialization when splitting extent (bsc#1173839). - ext4: fix race between ext4_sync_parent() and rename() (bsc#1173838). - ext4, jbd2: ensure panic by fix a race between jbd2 abort and ext4 error handlers (bsc#1173833). - extcon: adc-jack: Fix an error handling path in 'adc_jack_probe()' (bsc#1051510). - fanotify: fix ignore mask logic for events on child and on dir (bsc#1172719). - fat: do not allow to mount if the FAT length == 0 (bsc#1174845). - fdt: add support for rng-seed (jsc#SLE-12423). - fdt: Update CRC check for rng-seed (jsc#SLE-12423). - firmware: imx: scu: Fix corruption of header (git-fixes). - firmware: imx: scu: Fix possible memory leak in imx_scu_probe() (bsc#1111666). - fix multiplication overflow in copy_fdtable() (bsc#1173825). - Fix Patch-mainline tag in the previous zram fix patch - fpga: dfl: fix bug in port reset handshake (git-fixes). - fq_codel: fix TCA_FQ_CODEL_DROP_BATCH_SIZE sanity checks (networking-stable-20_05_12). - gpiolib: Document that GPIO line names are not globally unique (bsc#1051510). - gpu: host1x: Detach driver on unregister (bsc#1111666). - gpu: ipu-v3: pre: do not trigger update if buffer address does not change (bsc#1111666). - HID: hiddev: fix mess in hiddev_open() (git-fixes). - HID: magicmouse: do not set up autorepeat (git-fixes). - HID: sony: Fix for broken buttons on DS3 USB dongles (bsc#1051510). - HISI LPC: Re-Add ACPI child enumeration support (bsc#1174658). - HISI LPC: Stop using MFD APIs (bsc#1174658). - hv_netvsc: Fix netvsc_start_xmit's return type (git-fixes). - hwmon: (acpi_power_meter) Fix potential memory leak in acpi_power_meter_add() (bsc#1111666). - hwmon: (emc2103) fix unable to change fan pwm1_enable attribute (bsc#1111666). - hwmon: (max6697) Make sure the OVERT mask is set correctly (bsc#1111666). - i2c: algo-pca: Add 0x78 as SCL stuck low status for PCA9665 (bsc#1111666). - i2c: eg20t: Load module automatically if ID matches (bsc#1111666). - i2c: mlxcpld: check correct size of maximum RECV_LEN packet (bsc#1111666). - i40e: reduce stack usage in i40e_set_fc (git-fixes). - IB/hfi1: Do not destroy hfi1_wq when the device is shut down (bsc#1174409). - IB/hfi1: Do not destroy link_wq when the device is shut down (bsc#1174409). - ibmveth: Fix max MTU limit (bsc#1173428 ltc#186397). - ibmvnic: continue to init in CRQ reset returns H_CLOSED (bsc#1173280 ltc#185369). - ibmvnic: Flush existing work items before device removal (bsc#1065729). - ibmvnic: Harden device login requests (bsc#1170011 ltc#183538). - iio: buffer: Do not allow buffers without any channels enabled to be activated (bsc#1051510). - iio:health:afe4404 Fix timestamp alignment and prevent data leak (bsc#1111666). - iio:humidity:hdc100x Fix alignment and data leak issues (bsc#1111666). - iio:magnetometer:ak8974: Fix alignment and data leak issues (bsc#1111666). - iio: mma8452: Add missed iio_device_unregister() call in mma8452_probe() (bsc#1111666). - iio: pressure: bmp280: Tolerate IRQ before registering (bsc#1051510). - iio:pressure:ms5611 Fix buffer element alignment (bsc#1111666). - iio: pressure: zpa2326: handle pm_runtime_get_sync failure (bsc#1111666). - ima: Directly assign the ima_default_policy pointer to ima_rules (bsc#1051510). - ima: Fix ima digest hash table key calculation (bsc#1051510). - include/asm-generic/topology.h: guard cpumask_of_node() macro argument (bsc#1148868). - input: i8042 - add Lenovo XiaoXin Air 12 to i8042 nomux list (bsc#1111666). - input: i8042 - Remove special PowerPC handling (git-fixes). - input: synaptics - add a second working PNP_ID for Lenovo T470s (bsc#1111666). - intel_idle: Graceful probe failure when MWAIT is disabled (bsc#1174115). - intel_th: Fix a NULL dereference when hub driver is not loaded (bsc#1111666). - io-mapping: indicate mapping failure (git-fixes). - ipvlan: call dev_change_flags when ipvlan mode is reset (git-fixes). - ixgbevf: Remove limit of 10 entries for unicast filter list (git-fixes). - jbd2: avoid leaking transaction credits when unreserving handle (bsc#1173845). - jbd2: Preserve kABI when adding j_abort_mutex (bsc#1173833). - kabi: hv: prevent struct device_node to become defined (bsc#1172871). - kabi: ppc64le: prevent struct dma_map_ops to become defined (jsc#SLE-12423). - kABI: protect struct mlx5_cmd_work_ent (kabi). - kABI: reintroduce inet_hashtables.h include to l2tp_ip (kabi). - kernfs: fix barrier usage in __kernfs_new_node() (bsc#1111666). - kvm: nVMX: Do not reread VMCS-agnostic state when switching VMCS (bsc#1114279). - kvm: nVMX: Skip IBPB when switching between vmcs01 and vmcs02 (bsc#1114279). - kvm: x86: Fix APIC page invalidation race (bsc#1174122). - kvm: x86: Fix L1TF mitigation for shadow MMU (bsc#1171904). - kvm: x86/mmu: Set mmio_value to '0' if reserved #PF can't be generated (bsc#1171904). - kvm: x86: only do L1TF workaround on affected processors (bsc#1171904). - l2tp: add sk_family checks to l2tp_validate_socket (networking-stable-20_06_07). - l2tp: do not use inet_hash()/inet_unhash() (networking-stable-20_06_07). - libceph: do not omit recovery_deletes in target_copy() (bsc#1174113). - libceph: ignore pool overlay and cache logic on redirects (bsc#1173146). - lib: logic_pio: Add logic_pio_unregister_range() (bsc#1174658). - lib: logic_pio: Avoid possible overlap for unregistering regions (bsc#1174658). - lib: logic_pio: Fix RCU usage (bsc#1174658). - libnvdimm/bus: Fix wait_nvdimm_bus_probe_idle() ABBA deadlock (bsc#1171753). - libnvdimm/bus: Prepare the nd_ioctl() path to be re-entrant (bsc#1171753). - libnvdimm/bus: Stop holding nvdimm_bus_list_mutex over __nd_ioctl() (bsc#1171753). - libnvdimm: cover up changes in struct nvdimm_bus (bsc#1171753). - libnvdimm: cover up nd_pfn_sb changes (bsc#1171759). - libnvdimm/dax: Pick the right alignment default when creating dax devices (bsc#1171759). - libnvdimm/label: Remove the dpa align check (bsc#1171759). - libnvdimm/of_pmem: Provide a unique name for bus provider (bsc#1171739). - libnvdimm/pfn_dev: Add a build check to make sure we notice when struct page size change (bsc#1171743). - libnvdimm/pfn_dev: Add page size and struct page size to pfn superblock (bsc#1171759). - libnvdimm/pfn: Prevent raw mode fallback if pfn-infoblock valid (bsc#1171743). - libnvdimm/pmem: Advance namespace seed for specific probe errors (bsc#1171743). - libnvdimm/region: Initialize bad block for volatile namespaces (bnc#1151927 5.3.6). - libnvdimm/region: Rewrite _probe_success() to _advance_seeds() (bsc#1171743). - libnvdimm: Use PAGE_SIZE instead of SZ_4K for align check (bsc#1171759). - livepatch: Apply vmlinux-specific KLP relocations early (bsc#1071995). - livepatch: Disallow vmlinux.ko (bsc#1071995). - livepatch: Make klp_apply_object_relocs static (bsc#1071995). - livepatch: Prevent module-specific KLP rela sections from referencing vmlinux symbols (bsc#1071995). - livepatch: Remove .klp.arch (bsc#1071995). - loop: replace kill_bdev with invalidate_bdev (bsc#1173820). - lpfc_debugfs: get rid of pointless access_ok() (bsc#1172687 bsc#1171530). - lpfc: Synchronize NVME transport and lpfc driver devloss_tmo (bcs#1173060). - mac80211: add option for setting control flags (bsc#1111666). - mac80211: set IEEE80211_TX_CTRL_PORT_CTRL_PROTO for nl80211 TX (bsc#1111666). - mailbox: imx: Disable the clock on devm_mbox_controller_register() failure (git-fixes). - md: Avoid namespace collision with bitmap API (git fixes (block drivers)). - mdraid: fix read/write bytes accounting (bsc#1172537). - md: use memalloc scope APIs in mddev_suspend()/mddev_resume() (bsc#1166985)). - media: cec: silence shift wrapping warning in __cec_s_log_addrs() (git-fixes). - media: si2157: Better check for running tuner in init (bsc#1111666). - mlxsw: core: Do not use WQ_MEM_RECLAIM for mlxsw ordered workqueue (git-fixes). - mlxsw: core: Do not use WQ_MEM_RECLAIM for mlxsw workqueue (git-fixes). - mlxsw: pci: Return error on PCI reset timeout (git-fixes). - mlxsw: spectrum_acl_tcam: Position vchunk in a vregion list properly (networking-stable-20_05_12). - mlxsw: spectrum: Disallow prio-tagged packets when PVID is removed (git-fixes). - mlxsw: spectrum_dpipe: Add missing error path (git-fixes). - mlxsw: spectrum: Prevent force of 56G (git-fixes). - mlxsw: spectrum_router: Refresh nexthop neighbour when it becomes dead (git-fixes). - mlxsw: spectrum_router: Remove inappropriate usage of WARN_ON() (git-fixes). - mlxsw: spectrum_switchdev: Add MDB entries in prepare phase (git-fixes). - mlxsw: spectrum_switchdev: Do not treat static FDB entries as sticky (git-fixes). - mmc: block: Fix request completion in the CQE timeout path (bsc#1111666). - mmc: block: Fix use-after-free issue for rpmb (bsc#1111666). - mmc: fix compilation of user API (bsc#1051510). - mmc: sdhci: do not enable card detect interrupt for gpio cd type (bsc#1111666). - mmc: sdhci-msm: Set SDHCI_QUIRK_MULTIBLOCK_READ_ACMD12 quirk (bsc#1111666). - Move kabi patch into the right place - Move upstreamed lpfc patches into sorted section - mvpp2: remove misleading comment (git-fixes). - net: be more gentle about silly gso requests coming from user (networking-stable-20_06_07). - net: check untrusted gso_size at kernel entry (networking-stable-20_06_07). - net/cxgb4: Check the return from t4_query_params properly (git-fixes). - net: dsa: bcm_sf2: Fix node reference count (git-fixes). - net: dsa: loop: Add module soft dependency (networking-stable-20_05_16). - net: dsa: mt7530: fix roaming from DSA user ports (networking-stable-20_05_27). - net: ena: add intr_moder_rx_interval to struct ena_com_dev and use it (git-fixes). - net: ena: add missing ethtool TX timestamping indication (git-fixes). - net: ena: avoid memory access violation by validating req_id properly (git-fixes). - net: ena: do not wake up tx queue when down (git-fixes). - net: ena: ena-com.c: prevent NULL pointer dereference (git-fixes). - net: ena: ethtool: use correct value for crc32 hash (git-fixes). - net: ena: fix continuous keep-alive resets (git-fixes). - net: ena: fix corruption of dev_idx_to_host_tbl (git-fixes). - net: ena: fix default tx interrupt moderation interval (git-fixes). - net: ena: fix incorrect default RSS key (git-fixes). - net: ena: fix incorrectly saving queue numbers when setting RSS indirection table (git-fixes). - net: ena: fix issues in setting interrupt moderation params in ethtool (git-fixes). - net: ena: fix potential crash when rxfh key is NULL (git-fixes). - net: ena: fix retrieval of nonadaptive interrupt moderation intervals (git-fixes). - net: ena: fix uses of round_jiffies() (git-fixes). - net: ena: make ena rxfh support ETH_RSS_HASH_NO_CHANGE (git-fixes). - net: ena: reimplement set/get_coalesce() (git-fixes). - net: ena: rss: do not allocate key when not supported (git-fixes). - net: ena: rss: fix failure to get indirection table (git-fixes). - net: ena: rss: store hash function as values and not bits (git-fixes). - netfilter: connlabels: prefer static lock initialiser (git-fixes). - netfilter: ctnetlink: netns exit must wait for callbacks (bsc#1169795). - netfilter: not mark a spinlock as __read_mostly (git-fixes). - net: fix a potential recursive NETDEV_FEAT_CHANGE (networking-stable-20_05_16). - net: hns3: add autoneg and change speed support for fibre port (bsc#1174070). - net: hns3: add support for FEC encoding control (bsc#1174070). - net: hns3: add support for multiple media type (bsc#1174070). - net: hns3: fix a not link up issue when fibre port supports autoneg (bsc#1174070). - net: hns3: fix for FEC configuration (bsc#1174070). - net: hns3: fix port capbility updating issue (bsc#1174070). - net: hns3: fix port setting handle for fibre port (bsc#1174070). - net: hns3: fix selftest fail issue for fibre port with autoneg on (bsc#1174070). - net: hns3: restore the MAC autoneg state after reset (bsc#1174070). - net: inet_csk: Fix so_reuseport bind-address cache in tb->fast* (networking-stable-20_05_27). - net: ipip: fix wrong address family in init error path (networking-stable-20_05_27). - net: ipvlan: Fix ipvlan device tso disabled while NETIF_F_IP_CSUM is set (git-fixes). - net: macsec: preserve ingress frame ordering (networking-stable-20_05_12). - net/mlx4_core: drop useless LIST_HEAD (git-fixes). - net/mlx4_core: fix a memory leak bug (git-fixes). - net/mlx4_core: Fix use of ENOSPC around mlx4_counter_alloc() (networking-stable-20_05_12). - net/mlx5: Add command entry handling completion (networking-stable-20_05_27). - net/mlx5: Avoid panic when setting vport rate (git-fixes). - net/mlx5: Continue driver initialization despite debugfs failure (git-fixes). - net/mlx5e: ethtool, Fix a typo in WOL function names (git-fixes). - net/mlx5e: Fix traffic duplication in ethtool steering (git-fixes). - net/mlx5e: Remove unnecessary clear_bit()s (git-fixes). - net/mlx5e: Update netdev txq on completions during closure (networking-stable-20_05_27). - net/mlx5: Fix command entry leak in Internal Error State (networking-stable-20_05_12). - net/mlx5: Fix crash upon suspend/resume (networking-stable-20_06_07). - net/mlx5: Fix forced completion access non initialized command entry (networking-stable-20_05_12). - net: mvmdio: allow up to four clocks to be specified for orion-mdio (git-fixes). - net: mvpp2: prs: Do not override the sign bit in SRAM parser shift (git-fixes). - net: phy: fix aneg restart in phy_ethtool_set_eee (networking-stable-20_05_16). - netprio_cgroup: Fix unlimited memory leak of v2 cgroups (networking-stable-20_05_16). - net: qede: stop adding events on an already destroyed workqueue (git-fixes). - net: qed: fix excessive QM ILT lines consumption (git-fixes). - net: qed: fix NVMe login fails over VFs (git-fixes). - net: qrtr: Fix passing invalid reference to qrtr_local_enqueue() (networking-stable-20_05_27). - net: revert "net: get rid of an signed integer overflow in ip_idents_reserve()" (networking-stable-20_05_27). - net sched: fix reporting the first-time use timestamp (networking-stable-20_05_27). - net: stricter validation of untrusted gso packets (networking-stable-20_05_12). - net/tls: Fix sk_psock refcnt leak in bpf_exec_tx_verdict() (networking-stable-20_05_12). - net/tls: Fix sk_psock refcnt leak when in tls_data_ready() (networking-stable-20_05_12). - net: usb: qmi_wwan: add support for DW5816e (networking-stable-20_05_12). - net: usb: qmi_wwan: add Telit 0x1050 composition (networking-stable-20_06_07). - net: usb: qmi_wwan: add Telit LE910C1-EUX composition (networking-stable-20_06_07). - net: vmxnet3: fix possible buffer overflow caused by bad DMA value in vmxnet3_get_rss() (bsc#1172484). - nfp: bpf: fix code-gen bug on BPF_ALU | BPF_XOR | BPF_K (git-fixes). - NFS: Fix an RCU lock leak in nfs4_refresh_delegation_stateid() (bsc#1170592). - NFSv4: Retry CLOSE and DELEGRETURN on NFS4ERR_OLD_STATEID (bsc#1170592). - nilfs2: fix null pointer dereference at nilfs_segctor_do_construct() (bsc#1173857). - nl80211: fix NL80211_ATTR_CHANNEL_WIDTH attribute type (bsc#1111666). - nvdimm: Avoid race between probe and reading device attributes (bsc#1170442). - nvme: check for NVME_CTRL_LIVE in nvme_report_ns_ids() (bcs#1171558 bsc#1159058). - nvme: do not update multipath disk information if the controller is down (bcs#1171558 bsc#1159058). - nvme: fail cancelled commands with NVME_SC_HOST_PATH_ERROR (bsc#1158983 bsc#1172538). - nvme-fc: Fail transport errors with NVME_SC_HOST_PATH (bsc#1158983 bsc#1172538). - nvme-tcp: fail command with NVME_SC_HOST_PATH_ERROR send failed (bsc#1158983 bsc#1172538). - objtool: Clean instruction state before each function validation (bsc#1169514). - objtool: Ignore empty alternatives (bsc#1169514). - ocfs2: avoid inode removal while nfsd is accessing it (bsc#1172963). - ocfs2: fix panic on nfs server over ocfs2 (bsc#1172963). - ocfs2: load global_inode_alloc (bsc#1172963). - ocfs2: no need try to truncate file beyond i_size (bsc#1171841). - overflow: Fix -Wtype-limits compilation warnings (git fixes). - overflow.h: Add arithmetic shift helper (git fixes). - p54usb: add AirVasT USB stick device-id (bsc#1051510). - padata: ensure the reorder timer callback runs on the correct CPU (git-fixes). - padata: reorder work kABI fixup (git-fixes). - PCI/AER: Remove HEST/FIRMWARE_FIRST parsing for AER ownership (bsc#1174356). - PCI/AER: Use only _OSC to determine AER ownership (bsc#1174356). - PCI: Allow pci_resize_resource() for devices on root bus (bsc#1051510). - PCI: Fix pci_register_host_bridge() device_register() error handling (bsc#1051510). - PCI: Fix "try" semantics of bus and slot reset (git-fixes). - PCI: Generalize multi-function power dependency device links (bsc#1111666). - PCI: hv: Change pci_protocol_version to per-hbus (bsc#1172871, bsc#1172872). - PCI: hv: Fix the PCI HyperV probe failure path to release resource properly (bsc#1172871, bsc#1172872). - PCI: hv: Introduce hv_msi_entry (bsc#1172871, bsc#1172872). - PCI: hv: Move hypercall related definitions into tlfs header (bsc#1172871, bsc#1172872). - PCI: hv: Move retarget related structures into tlfs header (bsc#1172871, bsc#1172872). - PCI: hv: Reorganize the code in preparation of hibernation (bsc#1172871, bsc#1172872). - PCI: hv: Retry PCI bus D0 entry on invalid device state (bsc#1172871, bsc#1172872). - PCI: pciehp: Fix indefinite wait on sysfs requests (git-fixes). - PCI: pciehp: Support interrupts sent from D3hot (git-fixes). - PCI: Program MPS for RCiEP devices (bsc#1051510). - PCI/PTM: Inherit Switch Downstream Port PTM settings from Upstream Port (bsc#1051510). - pci: Revive pci_dev __aer_firmware_first* fields for kABI (bsc#1174356). - pcm_native: result of put_user() needs to be checked (bsc#1111666). - perf/x86/amd: Constrain Large Increment per Cycle events (git-fixes). - perf/x86/amd/ibs: Fix reading of the IBS OpData register and thus precise RIP validity (git-fixes). - perf/x86/amd/ibs: Fix sample bias for dispatched micro-ops (git-fixes). - perf/x86/amd/ibs: Handle erratum #420 only on the affected CPU family (10h) (git-fixes). - perf/x86/amd/iommu: Make the 'amd_iommu_attr_groups' symbol static (git-fixes). - perf/x86/amd/uncore: Do not set 'ThreadMask' and 'SliceMask' for non-L3 PMCs (git-fixes stable). - perf/x86/amd/uncore: Set the thread mask for F17h L3 PMCs (git-fixes). - perf/x86/amd/uncore: Set ThreadMask and SliceMask for L3 Cache perf events (git-fixes stable). - perf/x86: Enable free running PEBS for REGS_USER/INTR (git-fixes). - perf/x86: Fix incorrect PEBS_REGS (git-fixes). - perf/x86/intel: Add generic branch tracing check to intel_pmu_has_bts() (git-fixes). - perf/x86/intel: Add proper condition to run sched_task callbacks (git-fixes). - perf/x86/intel/bts: Fix the use of page_private() (git-fixes). - perf/x86/intel: Fix PT PMI handling (git-fixes). - perf/x86/intel: Move branch tracing setup to the Intel-specific source file (git-fixes). - perf/x86/intel/uncore: Add Node ID mask (git-fixes). - perf/x86/intel/uncore: Fix PCI BDF address of M3UPI on SKX (git-fixes). - perf/x86/intel/uncore: Handle invalid event coding for free-running counter (git-fixes). - perf/x86/uncore: Fix event group support (git-fixes). - pid: Improve the comment about waiting in zap_pid_ns_processes (git fixes)). - pinctrl: freescale: imx: Fix an error handling path in 'imx_pinctrl_probe()' (bsc#1051510). - pinctrl: imxl: Fix an error handling path in 'imx1_pinctrl_core_probe()' (bsc#1051510). - pinctrl: samsung: Save/restore eint_mask over suspend for EINT_TYPE GPIOs (bsc#1051510). - platform/x86: dell-laptop: do not register micmute LED if there is no token (bsc#1111666). - platform/x86: hp-wmi: Convert simple_strtoul() to kstrtou32() (bsc#1111666). - PM / Domains: Allow genpd users to specify default active wakeup behavior (git-fixes). - pnp: Use list_for_each_entry() instead of open coding (git fixes). - powerpc/64s: Do not let DT CPU features set FSCR_DSCR (bsc#1065729). - powerpc/64s: Save FSCR to init_task.thread.fscr after feature init (bsc#1065729). - powerpc/book3s64: Export has_transparent_hugepage() related functions (bsc#1171759). - powerpc/book3s64/pkeys: Fix pkey_access_permitted() for execute disable pkey (bsc#1065729). - powerpc/fadump: fix race between pstore write and fadump crash trigger (bsc#1168959 ltc#185010). - powerpc-mm-Remove-kvm-radix-prefetch-workaround-for-.patch - powerpc/xive: Clear the page tables for the ESB IO mapping (bsc#1085030). - powerpc-xmon-don-t-access-ASDR-in-VMs.patch - powerpc/xmon: Reset RCU and soft lockup watchdogs (bsc#1065729). - power: supply: bq24257_charger: Replace depends on REGMAP_I2C with select (bsc#1051510). - power: supply: lp8788: Fix an error handling path in 'lp8788_charger_probe()' (bsc#1051510). - power: supply: smb347-charger: IRQSTAT_D is volatile (bsc#1051510). - power: vexpress: add suppress_bind_attrs to true (bsc#1111666). - pppoe: only process PADT targeted at local interfaces (networking-stable-20_05_16). - propagate_one(): mnt_set_mountpoint() needs mount_lock (bsc#1174841). - qed: reduce maximum stack frame size (git-fixes). - qlcnic: fix missing release in qlcnic_83xx_interrupt_test (git-fixes). - r8152: support additional Microsoft Surface Ethernet Adapter variant (networking-stable-20_05_27). - raid5: remove gfp flags from scribble_alloc() (bsc#1166985). - RDMA/efa: Fix setting of wrong bit in get/set_feature commands (bsc#1111666) - RDMA/efa: Set maximum pkeys device attribute (bsc#1111666) - RDMA/efa: Support remote read access in MR registration (bsc#1111666) - RDMA/efa: Unified getters/setters for device structs bitmask access (bsc#1111666) - README.BRANCH: Add Takashi Iwai as primary maintainer. - regmap: debugfs: Do not sleep while atomic for fast_io regmaps (bsc#1111666). - Revert "bcache: ignore pending signals when creating gc and allocator thread" (git fixes (block drivers)). - Revert commit e918e570415c ("tpm_tis: Remove the HID IFX0102") (bsc#1111666). - Revert "dm crypt: use WQ_HIGHPRI for the IO and crypt workqueues" (git fixes (block drivers)). - Revert "ipv6: add mtu lock check in __ip6_rt_update_pmtu" (networking-stable-20_05_16). - Revert pciehp patches that broke booting (bsc#1174887) - Revert "thermal: mediatek: fix register index error" (bsc#1111666). - Revert "tools lib traceevent: Remove unneeded qsort and uses memmove" - rtnetlink: Fix memory(net_device) leak when ->newlink fails (git-fixes). - s390/bpf: Maintain 8-byte stack alignment (bsc#1169194). - s390: fix syscall_get_error for compat processes (git-fixes). - s390/qdio: consistently restore the IRQ handler (git-fixes). - s390/qdio: lock device while installing IRQ handler (git-fixes). - s390/qdio: put thinint indicator after early error (git-fixes). - s390/qdio: tear down thinint indicator after early error (git-fixes). - s390/qeth: fix error handling for isolation mode cmds (git-fixes). - sch_choke: avoid potential panic in choke_reset() (networking-stable-20_05_12). - sch_sfq: validate silly quantum values (networking-stable-20_05_12). - scripts/git_sort/git_sort.py: add bluetooth/bluetooth-next.git repository - scsi: aacraid: fix a signedness bug (bsc#1174296). - scsi: hisi_sas: fix calls to dma_set_mask_and_coherent() (bsc#1174296). - scsi: ibmvscsi: Do not send host info in adapter info MAD after LPM (bsc#1172759 ltc#184814). - scsi: lpfc: Add an internal trace log buffer (bsc#1172687 bsc#1171530). - scsi: lpfc: Add blk_io_poll support for latency improvment (bsc#1172687 bsc#1171530). - scsi: lpfc: Add support to display if adapter dumps are available (bsc#1172687 bsc#1171530). - scsi: lpfc: Allow applications to issue Common Set Features mailbox command (bsc#1172687 bsc#1171530). - scsi: lpfc: Avoid another null dereference in lpfc_sli4_hba_unset() (bsc#1172687 bsc#1171530). - scsi: lpfc: Fix inconsistent indenting (bsc#1158983). - scsi: lpfc: Fix interrupt assignments when multiple vectors are supported on same CPU (bsc#1158983). - scsi: lpfc: Fix kdump hang on PPC (bsc#1172687 bsc#1171530). - scsi: lpfc: Fix language in 0373 message to reflect non-error message (bsc#1172687 bsc#1171530). - scsi: lpfc: Fix less-than-zero comparison of unsigned value (bsc#1158983). - scsi: lpfc: Fix missing MDS functionality (bsc#1172687 bsc#1171530). - scsi: lpfc: Fix NVMe rport deregister and registration during ADISC (bsc#1172687 bsc#1171530). - scsi: lpfc: Fix oops due to overrun when reading SLI3 data (bsc#1172687 bsc#1171530). - scsi: lpfc: Fix shost refcount mismatch when deleting vport (bsc#1172687 bsc#1171530). - scsi: lpfc: Fix stack trace seen while setting rrq active (bsc#1172687 bsc#1171530). - scsi: lpfc: Fix unused assignment in lpfc_sli4_bsg_link_diag_test (bsc#1172687 bsc#1171530). - scsi: lpfc: Update lpfc version to 12.8.0.2 (bsc#1158983). - scsi: megaraid_sas: Fix a compilation warning (bsc#1174296). - scsi: mpt3sas: Fix double free in attach error handling (bsc#1174296). - scsi: qedf: Add port_id getter (bsc#1150660). - scsi: qla2xxx: Fix a condition in qla2x00_find_all_fabric_devs() (bsc#1174296). - scsi: qla2xxx: Set NVMe status code for failed NVMe FCP request (bsc#1158983). - sctp: Do not add the shutdown timer if its already been added (networking-stable-20_05_27). - sctp: Start shutdown on association restart if in SHUTDOWN-SENT state and socket is closed (networking-stable-20_05_27). - spi: dw: use "smp_mb()" to avoid sending spi data error (bsc#1051510). - spi: fix initial SPI_SR value in spi-fsl-dspi (bsc#1111666). - spi: pxa2xx: Apply CS clk quirk to BXT (bsc#1111666). - spi: spidev: fix a race between spidev_release and spidev_remove (bsc#1111666). - spi: spi-mem: Fix Dual/Quad modes on Octal-capable devices (bsc#1111666). - spi: spi-sun6i: sun6i_spi_transfer_one(): fix setting of clock rate (bsc#1111666). - staging: comedi: verify array index is correct before using it (bsc#1111666). - staging: rtl8712: Fix IEEE80211_ADDBA_PARAM_BUF_SIZE_MASK (bsc#1051510). - staging: sm750fb: add missing case while setting FB_VISUAL (bsc#1051510). - SUNRPC: The TCP back channel mustn't disappear while requests are outstanding (bsc#1152624). - tg3: driver sleeps indefinitely when EEH errors exceed eeh_max_freezes (bsc#1173284). - timers: Add a function to start/reduce a timer (networking-stable-20_05_27). - tpm_tis: extra chip->ops check on error path in tpm_tis_core_init (bsc#1111666). - tpm_tis: Remove the HID IFX0102 (bsc#1111666). - tracing: Fix event trigger to accept redundant spaces (git-fixes). - tty: hvc_console, fix crashes on parallel open/close (git-fixes). - tty: n_gsm: Fix bogus i++ in gsm_data_kick (bsc#1051510). - tty: n_gsm: Fix SOF skipping (bsc#1051510). - tty: n_gsm: Fix waking up upper tty layer when room available (bsc#1051510). - tunnel: Propagate ECT(1) when decapsulating as recommended by RFC6040 (networking-stable-20_05_12). - ubifs: remove broken lazytime support (bsc#1173826). - usb: add USB_QUIRK_DELAY_INIT for Logitech C922 (git-fixes). - usb: c67x00: fix use after free in c67x00_giveback_urb (bsc#1111666). - usb: chipidea: core: add wakeup support for extcon (bsc#1111666). - usb: dwc2: Fix shutdown callback in platform (bsc#1111666). - usb: dwc2: gadget: move gadget resume after the core is in L0 state (bsc#1051510). - usb: dwc3: gadget: introduce cancelled_list (git-fixes). - usb: dwc3: gadget: never call ->complete() from ->ep_queue() (git-fixes). - usb: dwc3: gadget: Properly handle ClearFeature(halt) (git-fixes). - usb: dwc3: gadget: Properly handle failed kick_transfer (git-fixes). - usb: ehci: reopen solution for Synopsys HC bug (git-fixes). - usb: gadget: fix potential double-free in m66592_probe (bsc#1111666). - usb: gadget: lpc32xx_udc: do not dereference ep pointer before null check (bsc#1051510). - usb: gadget: udc: atmel: fix uninitialized read in debug printk (bsc#1111666). - usb: gadget: udc: atmel: remove outdated comment in usba_ep_disable() (bsc#1111666). - usb: gadget: udc: Potential Oops in error handling code (bsc#1111666). - usb: gadget: udc: s3c2410_udc: Remove pointless NULL check in s3c2410_udc_nuke (bsc#1051510). - usb: host: ehci-exynos: Fix error check in exynos_ehci_probe() (bsc#1111666). - usb: host: ehci-mxc: Add error handling in ehci_mxc_drv_probe() (bsc#1051510). - usb: musb: Fix runtime PM imbalance on error (bsc#1051510). - usb: musb: start session in resume for host port (bsc#1051510). - usbnet: smsc95xx: Fix use-after-free after removal (bsc#1111666). - usb: ohci-sm501: Add missed iounmap() in remove (bsc#1111666). - usb: serial: ch341: add new Product ID for CH340 (bsc#1111666). - usb: serial: cypress_m8: enable Simply Automated UPB PIM (bsc#1111666). - usb: serial: iuu_phoenix: fix memory corruption (bsc#1111666). - usb: serial: option: add GosunCn GM500 series (bsc#1111666). - usb: serial: option: add Quectel EG95 LTE modem (bsc#1111666). - usb: serial: option: add Telit LE910C1-EUX compositions (bsc#1051510). - usb: serial: qcserial: add DW5816e QDL support (bsc#1051510). - usb: serial: usb_wwan: do not resubmit rx urb on fatal errors (bsc#1051510). - usb: serial: usb_wwan: do not resubmit rx urb on fatal errors (git-fixes). - vfio/pci: Fix SR-IOV VF handling with MMIO blocking (bsc#1174123). - vfs: Fix EOVERFLOW testing in put_compat_statfs64 (bnc#1151927 5.3.6). - virtio-blk: handle block_device_operations callbacks after hot unplug (git fixes (block drivers)). - virtio: virtio_console: add missing MODULE_DEVICE_TABLE() for rproc serial (git-fixes). - vmxnet3: add geneve and vxlan tunnel offload support (bsc#1172484). - vmxnet3: add support to get/set rx flow hash (bsc#1172484). - vmxnet3: allow rx flow hash ops only when rss is enabled (bsc#1172484). - vmxnet3: avoid format strint overflow warning (bsc#1172484). - vmxnet3: prepare for version 4 changes (bsc#1172484). - vmxnet3: Remove always false conditional statement (bsc#1172484). - vmxnet3: remove redundant initialization of pointer 'rq' (bsc#1172484). - vmxnet3: remove unused flag "rxcsum" from struct vmxnet3_adapter (bsc#1172484). - vmxnet3: Replace msleep(1) with usleep_range() (bsc#1172484). - vmxnet3: update to version 4 (bsc#1172484). - vmxnet3: use correct hdr reference when packet is encapsulated (bsc#1172484). - vsock: fix timeout in vsock_accept() (networking-stable-20_06_07). - vt_compat_ioctl(): clean up, use compat_ptr() properly (git-fixes). - vxlan: Avoid infinite loop when suppressing NS messages with invalid options (git-fixes). - w1: omap-hdq: cleanup to add missing newline for some dev_dbg (bsc#1051510). - watchdog: sp805: fix restart handler (bsc#1111666). - wil6210: add general initialization/size checks (bsc#1111666). - wil6210: check rx_buff_mgmt before accessing it (bsc#1111666). - wil6210: ignore HALP ICR if already handled (bsc#1111666). - wil6210: make sure Rx ring sizes are correlated (git-fixes). - work around mvfs bug (bsc#1162063). - x86/apic: Install an empty physflat_init_apic_ldr (bsc#1163309). - x86/cpu/amd: Make erratum #1054 a legacy erratum (bsc#1114279). - x86/events/intel/ds: Add PERF_SAMPLE_PERIOD into PEBS_FREERUNNING_FLAGS (git-fixes). - x86: Fix early boot crash on gcc-10, third try (bsc#1114279). - x86/{mce,mm}: Unmap the entire page if the whole page is affected and poisoned (bsc#1172257). - x86/reboot/quirks: Add MacBook6,1 reboot quirk (bsc#1114279). - xfrm: fix error in comment (git fixes). - xhci: Fix enumeration issue when setting max packet size for FS devices (git-fixes). - xhci: Fix incorrect EP_STATE_MASK (git-fixes). - vt: vt_ioctl: remove unnecessary console allocation checks (git-fixes). Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1153=1 Package List: - openSUSE Leap 15.1 (x86_64): kernel-debug-4.12.14-lp151.28.59.1 kernel-debug-base-4.12.14-lp151.28.59.1 kernel-debug-base-debuginfo-4.12.14-lp151.28.59.1 kernel-debug-debuginfo-4.12.14-lp151.28.59.1 kernel-debug-debugsource-4.12.14-lp151.28.59.1 kernel-debug-devel-4.12.14-lp151.28.59.1 kernel-debug-devel-debuginfo-4.12.14-lp151.28.59.1 kernel-default-4.12.14-lp151.28.59.1 kernel-default-base-4.12.14-lp151.28.59.1 kernel-default-base-debuginfo-4.12.14-lp151.28.59.1 kernel-default-debuginfo-4.12.14-lp151.28.59.1 kernel-default-debugsource-4.12.14-lp151.28.59.1 kernel-default-devel-4.12.14-lp151.28.59.1 kernel-default-devel-debuginfo-4.12.14-lp151.28.59.1 kernel-kvmsmall-4.12.14-lp151.28.59.1 kernel-kvmsmall-base-4.12.14-lp151.28.59.1 kernel-kvmsmall-base-debuginfo-4.12.14-lp151.28.59.1 kernel-kvmsmall-debuginfo-4.12.14-lp151.28.59.1 kernel-kvmsmall-debugsource-4.12.14-lp151.28.59.1 kernel-kvmsmall-devel-4.12.14-lp151.28.59.1 kernel-kvmsmall-devel-debuginfo-4.12.14-lp151.28.59.1 kernel-obs-build-4.12.14-lp151.28.59.1 kernel-obs-build-debugsource-4.12.14-lp151.28.59.1 kernel-obs-qa-4.12.14-lp151.28.59.1 kernel-syms-4.12.14-lp151.28.59.1 kernel-vanilla-4.12.14-lp151.28.59.1 kernel-vanilla-base-4.12.14-lp151.28.59.1 kernel-vanilla-base-debuginfo-4.12.14-lp151.28.59.1 kernel-vanilla-debuginfo-4.12.14-lp151.28.59.1 kernel-vanilla-debugsource-4.12.14-lp151.28.59.1 kernel-vanilla-devel-4.12.14-lp151.28.59.1 kernel-vanilla-devel-debuginfo-4.12.14-lp151.28.59.1 - openSUSE Leap 15.1 (noarch): kernel-devel-4.12.14-lp151.28.59.1 kernel-docs-4.12.14-lp151.28.59.1 kernel-docs-html-4.12.14-lp151.28.59.1 kernel-macros-4.12.14-lp151.28.59.1 kernel-source-4.12.14-lp151.28.59.1 kernel-source-vanilla-4.12.14-lp151.28.59.1 References: https://www.suse.com/security/cve/CVE-2019-16746.html https://www.suse.com/security/cve/CVE-2019-20810.html https://www.suse.com/security/cve/CVE-2019-20908.html https://www.suse.com/security/cve/CVE-2020-0305.html https://www.suse.com/security/cve/CVE-2020-10135.html https://www.suse.com/security/cve/CVE-2020-10766.html https://www.suse.com/security/cve/CVE-2020-10767.html https://www.suse.com/security/cve/CVE-2020-10768.html https://www.suse.com/security/cve/CVE-2020-10769.html https://www.suse.com/security/cve/CVE-2020-10773.html https://www.suse.com/security/cve/CVE-2020-10781.html https://www.suse.com/security/cve/CVE-2020-12771.html https://www.suse.com/security/cve/CVE-2020-12888.html https://www.suse.com/security/cve/CVE-2020-13974.html https://www.suse.com/security/cve/CVE-2020-14331.html https://www.suse.com/security/cve/CVE-2020-14416.html https://www.suse.com/security/cve/CVE-2020-15393.html https://www.suse.com/security/cve/CVE-2020-15780.html https://www.suse.com/security/cve/CVE-2020-16166.html https://bugzilla.suse.com/1051510 https://bugzilla.suse.com/1065729 https://bugzilla.suse.com/1071995 https://bugzilla.suse.com/1085030 https://bugzilla.suse.com/1111666 https://bugzilla.suse.com/1112178 https://bugzilla.suse.com/1113956 https://bugzilla.suse.com/1114279 https://bugzilla.suse.com/1120163 https://bugzilla.suse.com/1144333 https://bugzilla.suse.com/1148868 https://bugzilla.suse.com/1150660 https://bugzilla.suse.com/1151927 https://bugzilla.suse.com/1152107 https://bugzilla.suse.com/1152624 https://bugzilla.suse.com/1158983 https://bugzilla.suse.com/1159058 https://bugzilla.suse.com/1161016 https://bugzilla.suse.com/1162002 https://bugzilla.suse.com/1162063 https://bugzilla.suse.com/1163309 https://bugzilla.suse.com/1166985 https://bugzilla.suse.com/1167104 https://bugzilla.suse.com/1168081 https://bugzilla.suse.com/1168959 https://bugzilla.suse.com/1169194 https://bugzilla.suse.com/1169514 https://bugzilla.suse.com/1169771 https://bugzilla.suse.com/1169795 https://bugzilla.suse.com/1170011 https://bugzilla.suse.com/1170442 https://bugzilla.suse.com/1170592 https://bugzilla.suse.com/1170617 https://bugzilla.suse.com/1170618 https://bugzilla.suse.com/1171124 https://bugzilla.suse.com/1171424 https://bugzilla.suse.com/1171529 https://bugzilla.suse.com/1171530 https://bugzilla.suse.com/1171558 https://bugzilla.suse.com/1171732 https://bugzilla.suse.com/1171739 https://bugzilla.suse.com/1171743 https://bugzilla.suse.com/1171753 https://bugzilla.suse.com/1171759 https://bugzilla.suse.com/1171835 https://bugzilla.suse.com/1171841 https://bugzilla.suse.com/1171868 https://bugzilla.suse.com/1171904 https://bugzilla.suse.com/1171988 https://bugzilla.suse.com/1172247 https://bugzilla.suse.com/1172257 https://bugzilla.suse.com/1172344 https://bugzilla.suse.com/1172458 https://bugzilla.suse.com/1172484 https://bugzilla.suse.com/1172537 https://bugzilla.suse.com/1172538 https://bugzilla.suse.com/1172687 https://bugzilla.suse.com/1172719 https://bugzilla.suse.com/1172759 https://bugzilla.suse.com/1172775 https://bugzilla.suse.com/1172781 https://bugzilla.suse.com/1172782 https://bugzilla.suse.com/1172783 https://bugzilla.suse.com/1172871 https://bugzilla.suse.com/1172872 https://bugzilla.suse.com/1172963 https://bugzilla.suse.com/1172999 https://bugzilla.suse.com/1173060 https://bugzilla.suse.com/1173074 https://bugzilla.suse.com/1173146 https://bugzilla.suse.com/1173265 https://bugzilla.suse.com/1173280 https://bugzilla.suse.com/1173284 https://bugzilla.suse.com/1173428 https://bugzilla.suse.com/1173514 https://bugzilla.suse.com/1173567 https://bugzilla.suse.com/1173573 https://bugzilla.suse.com/1173659 https://bugzilla.suse.com/1173746 https://bugzilla.suse.com/1173818 https://bugzilla.suse.com/1173820 https://bugzilla.suse.com/1173825 https://bugzilla.suse.com/1173826 https://bugzilla.suse.com/1173833 https://bugzilla.suse.com/1173838 https://bugzilla.suse.com/1173839 https://bugzilla.suse.com/1173845 https://bugzilla.suse.com/1173857 https://bugzilla.suse.com/1174070 https://bugzilla.suse.com/1174113 https://bugzilla.suse.com/1174115 https://bugzilla.suse.com/1174122 https://bugzilla.suse.com/1174123 https://bugzilla.suse.com/1174205 https://bugzilla.suse.com/1174296 https://bugzilla.suse.com/1174343 https://bugzilla.suse.com/1174356 https://bugzilla.suse.com/1174409 https://bugzilla.suse.com/1174438 https://bugzilla.suse.com/1174462 https://bugzilla.suse.com/1174543 https://bugzilla.suse.com/1174549 https://bugzilla.suse.com/1174658 https://bugzilla.suse.com/1174685 https://bugzilla.suse.com/1174757 https://bugzilla.suse.com/1174840 https://bugzilla.suse.com/1174841 https://bugzilla.suse.com/1174843 https://bugzilla.suse.com/1174844 https://bugzilla.suse.com/1174845 https://bugzilla.suse.com/1174887

1 0

openSUSE-RU-2020:1151-1: moderate: Recommended update for icewm, icewm-theme-branding
by maintenance＠opensuse.org 05 Aug '20

05 Aug '20

openSUSE Recommended Update: Recommended update for icewm, icewm-theme-branding ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1151-1 Rating: moderate References: #1170420 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for icewm, icewm-theme-branding fixes the following issues: Changes in icewm: - Explicitly require icewm-theme-branding on SLE and Leap. (jsc#SLE-11888, bsc#1170420). - Add Conflicts between icewm-config-upstream and icewm-theme-branding. - Improve build tag consistency between SLE and Leap. (jsc#SLE-11888, bsc#1170420). * Recommend polkit-gnome to both Leap and SLE. Changes in icewm-theme-branding: - Improve build tag consistency between SLE and Leap. (jsc#SLE-11888, bsc#1170420). * Build the branding package separately for openSUSE and SLE, like most of other branding packages did. - Fix the "zypper dup" issue on Leap by explicitly obsoleting icewm-config-upstream. (bsc#1170420) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1151=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): icewm-1.4.2-lp152.12.3.1 icewm-debuginfo-1.4.2-lp152.12.3.1 icewm-debugsource-1.4.2-lp152.12.3.1 icewm-default-1.4.2-lp152.12.3.1 icewm-default-debuginfo-1.4.2-lp152.12.3.1 icewm-lite-1.4.2-lp152.12.3.1 icewm-lite-debuginfo-1.4.2-lp152.12.3.1 - openSUSE Leap 15.2 (noarch): icewm-config-upstream-1.4.2-lp152.12.3.1 icewm-lang-1.4.2-lp152.12.3.1 icewm-theme-branding-1.2.4-lp152.6.5.1 References: https://bugzilla.suse.com/1170420

1 0

openSUSE-RU-2020:1152-1: moderate: Recommended update for python-kiwi
by maintenance＠opensuse.org 05 Aug '20

05 Aug '20

openSUSE Recommended Update: Recommended update for python-kiwi ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1152-1 Rating: moderate References: #1156677 #1168973 #1172928 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for python-kiwi fixes the following issues: - Fixed checking for root device in grub config. (bsc#1172928) - Fix for conflicting files of man-pages between different versions. (bsc#1168973, bsc#1156677) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1152=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): dracut-kiwi-lib-9.20.5-lp152.5.4.1 dracut-kiwi-live-9.20.5-lp152.5.4.1 dracut-kiwi-oem-dump-9.20.5-lp152.5.4.1 dracut-kiwi-oem-repart-9.20.5-lp152.5.4.1 dracut-kiwi-overlay-9.20.5-lp152.5.4.1 kiwi-man-pages-9.20.5-lp152.5.4.1 kiwi-pxeboot-9.20.5-lp152.5.4.1 kiwi-tools-9.20.5-lp152.5.4.1 kiwi-tools-debuginfo-9.20.5-lp152.5.4.1 python-kiwi-debugsource-9.20.5-lp152.5.4.1 python3-kiwi-9.20.5-lp152.5.4.1 References: https://bugzilla.suse.com/1156677 https://bugzilla.suse.com/1168973 https://bugzilla.suse.com/1172928

1 0

openSUSE-RU-2020:1150-1: moderate: Recommended update for lxd
by maintenance＠opensuse.org 05 Aug '20

05 Aug '20

openSUSE Recommended Update: Recommended update for lxd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1150-1 Rating: moderate References: #1174789 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for lxd fixes the following issues: - Update to LXD 4.4. The full upstream changelog is available from: https://discuss.linuxcontainers.org/t/lxd-4-4-has-been-released/8574 boo#1174789 + VGA console for virtual machines + Clustering failure domains + /dev/lxd API in virtual machines + Graceful daemon shutdown + macvlan and sriov managed network types + Disk usage limits in projects + AppAmor confinement for dnsmasq + GPU mediated devices in resources API + --console option in lxc launch Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1150=1 Package List: - openSUSE Leap 15.2 (x86_64): lxd-4.4-lp152.2.6.1 - openSUSE Leap 15.2 (noarch): lxd-bash-completion-4.4-lp152.2.6.1 References: https://bugzilla.suse.com/1174789

1 0

openSUSE-RU-2020:1149-1: moderate: Recommended update for lxd
by maintenance＠opensuse.org 05 Aug '20

05 Aug '20

openSUSE Recommended Update: Recommended update for lxd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1149-1 Rating: moderate References: #1174789 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for lxd fixes the following issues: - Update to LXD 4.4. The full upstream changelog is available from: https://discuss.linuxcontainers.org/t/lxd-4-4-has-been-released/8574 boo#1174789 + VGA console for virtual machines + Clustering failure domains + /dev/lxd API in virtual machines + Graceful daemon shutdown + macvlan and sriov managed network types + Disk usage limits in projects + AppAmor confinement for dnsmasq + GPU mediated devices in resources API + --console option in lxc launch Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1149=1 Package List: - openSUSE Leap 15.1 (x86_64): lxd-4.4-lp151.45.1 - openSUSE Leap 15.1 (noarch): lxd-bash-completion-4.4-lp151.45.1 References: https://bugzilla.suse.com/1174789

1 0

openSUSE-SU-2020:1147-1: important: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 05 Aug '20

05 Aug '20

openSUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1147-1 Rating: important References: #1174538 Cross-References: CVE-2020-15652 CVE-2020-15653 CVE-2020-15654 CVE-2020-15655 CVE-2020-15656 CVE-2020-15657 CVE-2020-15658 CVE-2020-15659 CVE-2020-6463 CVE-2020-6514 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 10 vulnerabilities is now available. Description: This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 78.1.0 ESR * Fixed: Various stability, functionality, and security fixes (bsc#1174538) * CVE-2020-15652: Potential leak of redirect targets when loading scripts in a worker * CVE-2020-6514: WebRTC data channel leaks internal address to peer * CVE-2020-15655: Extension APIs could be used to bypass Same-Origin Policy * CVE-2020-15653: Bypassing iframe sandbox when allowing popups * CVE-2020-6463: Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture * CVE-2020-15656: Type confusion for special arguments in IonMonkey * CVE-2020-15658: Overriding file type when saving to disk * CVE-2020-15657: DLL hijacking due to incorrect loading path * CVE-2020-15654: Custom cursor can overlay user interface * CVE-2020-15659: Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1 This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1147=1 Package List: - openSUSE Leap 15.1 (x86_64): MozillaFirefox-78.1.0-lp151.2.61.1 MozillaFirefox-branding-upstream-78.1.0-lp151.2.61.1 MozillaFirefox-buildsymbols-78.1.0-lp151.2.61.1 MozillaFirefox-debuginfo-78.1.0-lp151.2.61.1 MozillaFirefox-debugsource-78.1.0-lp151.2.61.1 MozillaFirefox-devel-78.1.0-lp151.2.61.1 MozillaFirefox-translations-common-78.1.0-lp151.2.61.1 MozillaFirefox-translations-other-78.1.0-lp151.2.61.1 References: https://www.suse.com/security/cve/CVE-2020-15652.html https://www.suse.com/security/cve/CVE-2020-15653.html https://www.suse.com/security/cve/CVE-2020-15654.html https://www.suse.com/security/cve/CVE-2020-15655.html https://www.suse.com/security/cve/CVE-2020-15656.html https://www.suse.com/security/cve/CVE-2020-15657.html https://www.suse.com/security/cve/CVE-2020-15658.html https://www.suse.com/security/cve/CVE-2020-15659.html https://www.suse.com/security/cve/CVE-2020-6463.html https://www.suse.com/security/cve/CVE-2020-6514.html https://bugzilla.suse.com/1174538

1 0

openSUSE-SU-2020:1148-1: moderate: Security update for opera
by opensuse-security＠opensuse.org 05 Aug '20

05 Aug '20

openSUSE Security Update: Security update for opera ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1148-1 Rating: moderate References: Cross-References: CVE-2020-6510 CVE-2020-6511 CVE-2020-6512 CVE-2020-6513 CVE-2020-6514 CVE-2020-6515 CVE-2020-6516 CVE-2020-6517 CVE-2020-6518 CVE-2020-6519 CVE-2020-6520 CVE-2020-6521 CVE-2020-6522 CVE-2020-6523 CVE-2020-6524 CVE-2020-6525 CVE-2020-6526 CVE-2020-6527 CVE-2020-6528 CVE-2020-6529 CVE-2020-6530 CVE-2020-6531 CVE-2020-6533 CVE-2020-6534 CVE-2020-6535 CVE-2020-6536 Affected Products: openSUSE Leap 15.1:NonFree ______________________________________________________________________________ An update that fixes 26 vulnerabilities is now available. Description: This update for opera fixes the following issues: - Update to version 70.0.3728.71 - DNA-86267 Make `Recently closed tabs` appearance consistent with `Search for open tabs`. - DNA-86988 Opera 70 translations - DNA-87530 Zen news leads not loading - DNA-87636 Fix displaying folder icon for closed windows in recently closed list - DNA-87682 Replace Extensions icon in toolbar with icon from sidebar - DNA-87756 Extend chrome.sessions.getRecentlyClosed with information about last active tab in window. - DNA-87778 Crash at opera::InstantSearchViewViews:: ~InstantSearchViewViews() - DNA-87815 Change affiliate links for AliExpress Search - Update to version 70.0.3728.59 - CHR-8010 Update chromium on desktop-stable-84-3728 to 84.0.4147.89 - DNA-87019 The video image does not respond to the pressing after closed the “Quit Opera?” dialog - DNA-87342 Fix right padding in settings > weather section - DNA-87427 Remove unneeded information from the requests’ diagnostics - DNA-87560 Crash at views::Widget::GetNativeView() - DNA-87561 Crash at CRYPTO_BUFFER_len - DNA-87599 Bypass VPN for default search engines doesn’t work - DNA-87611 Unittests fails on declarativeNetRequest and declarativeNetRequestFeedback permissions - DNA-87612 [Mac] Misaligned icon in address bar - DNA-87619 [Win/Lin] Misaligned icon in address bar - DNA-87716 [macOS/Windows] Crash when Search in tabs is open and Opera is minimized - DNA-87749 Crash at opera::InstantSearchSuggestionLineView:: SetIsHighlighted(bool) - The update to chromium 84.0.4147.89 fixes following issues: - CVE-2020-6510, CVE-2020-6511, CVE-2020-6512, CVE-2020-6513, CVE-2020-6514, CVE-2020-6515, CVE-2020-6516, CVE-2020-6517, CVE-2020-6518, CVE-2020-6519, CVE-2020-6520, CVE-2020-6521, CVE-2020-6522, CVE-2020-6523, CVE-2020-6524, CVE-2020-6525, CVE-2020-6526, CVE-2020-6527, CVE-2020-6528, CVE-2020-6529, CVE-2020-6530, CVE-2020-6531, CVE-2020-6533, CVE-2020-6534, CVE-2020-6535, CVE-2020-6536 - Complete Opera 70.0 changelog at: https://blogs.opera.com/desktop/changelog-for-70/ - Update to version 69.0.3686.77 - DNA-84207 New Yubikey enrollment is not working - DNA-87185 Lost translation - DNA-87382 Integrate scrolling to top of the feed with the existing scroll position restoration - DNA-87535 Sort out news on start page state - DNA-87588 Merge “Prevent pointer from being sent in the clear over SCTP” to desktop-stable-83-3686 - Update to version 69.0.3686.57 - DNA-86682 Title case in Russian translation - DNA-86807 Title case in O69 BR Portuguese translation - DNA-87104 Right click context menu becomes scrollable sometimes - DNA-87376 Search in tabs opens significantly slower in O69 - DNA-87505 [Welcome Pages][Stats] Session stats for Welcome and Upgrade pages - DNA-87535 Sort out news on start page state Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1:NonFree: zypper in -t patch openSUSE-2020-1148=1 Package List: - openSUSE Leap 15.1:NonFree (x86_64): opera-70.0.3728.71-lp151.2.24.1 References: https://www.suse.com/security/cve/CVE-2020-6510.html https://www.suse.com/security/cve/CVE-2020-6511.html https://www.suse.com/security/cve/CVE-2020-6512.html https://www.suse.com/security/cve/CVE-2020-6513.html https://www.suse.com/security/cve/CVE-2020-6514.html https://www.suse.com/security/cve/CVE-2020-6515.html https://www.suse.com/security/cve/CVE-2020-6516.html https://www.suse.com/security/cve/CVE-2020-6517.html https://www.suse.com/security/cve/CVE-2020-6518.html https://www.suse.com/security/cve/CVE-2020-6519.html https://www.suse.com/security/cve/CVE-2020-6520.html https://www.suse.com/security/cve/CVE-2020-6521.html https://www.suse.com/security/cve/CVE-2020-6522.html https://www.suse.com/security/cve/CVE-2020-6523.html https://www.suse.com/security/cve/CVE-2020-6524.html https://www.suse.com/security/cve/CVE-2020-6525.html https://www.suse.com/security/cve/CVE-2020-6526.html https://www.suse.com/security/cve/CVE-2020-6527.html https://www.suse.com/security/cve/CVE-2020-6528.html https://www.suse.com/security/cve/CVE-2020-6529.html https://www.suse.com/security/cve/CVE-2020-6530.html https://www.suse.com/security/cve/CVE-2020-6531.html https://www.suse.com/security/cve/CVE-2020-6533.html https://www.suse.com/security/cve/CVE-2020-6534.html https://www.suse.com/security/cve/CVE-2020-6535.html https://www.suse.com/security/cve/CVE-2020-6536.html

1 0

openSUSE-SU-2020:1146-1: important: Security update for ghostscript
by opensuse-security＠opensuse.org 04 Aug '20

04 Aug '20

openSUSE Security Update: Security update for ghostscript ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1146-1 Rating: important References: #1174415 Cross-References: CVE-2020-15900 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for ghostscript fixes the following issues: - fixed CVE-2020-15900 Memory Corruption (SAFER Sandbox Breakout) cf. https://bugs.ghostscript.com/show_bug.cgi?id=702582 (bsc#1174415) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1146=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): ghostscript-9.52-lp152.2.4.1 ghostscript-debuginfo-9.52-lp152.2.4.1 ghostscript-debugsource-9.52-lp152.2.4.1 ghostscript-devel-9.52-lp152.2.4.1 ghostscript-mini-9.52-lp152.2.4.1 ghostscript-mini-debuginfo-9.52-lp152.2.4.1 ghostscript-mini-debugsource-9.52-lp152.2.4.1 ghostscript-mini-devel-9.52-lp152.2.4.1 ghostscript-x11-9.52-lp152.2.4.1 ghostscript-x11-debuginfo-9.52-lp152.2.4.1 References: https://www.suse.com/security/cve/CVE-2020-15900.html https://bugzilla.suse.com/1174415

1 0

openSUSE-RU-2020:1145-1: Recommended update for icewm-theme-branding
by maintenance＠opensuse.org 04 Aug '20

04 Aug '20

openSUSE Recommended Update: Recommended update for icewm-theme-branding ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1145-1 Rating: low References: #1170420 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for icewm-theme-branding fixes an update issue. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1145=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): icewm-1.4.2-lp151.8.10.1 icewm-debuginfo-1.4.2-lp151.8.10.1 icewm-debugsource-1.4.2-lp151.8.10.1 icewm-default-1.4.2-lp151.8.10.1 icewm-default-debuginfo-1.4.2-lp151.8.10.1 icewm-lite-1.4.2-lp151.8.10.1 icewm-lite-debuginfo-1.4.2-lp151.8.10.1 - openSUSE Leap 15.1 (noarch): icewm-config-upstream-1.4.2-lp151.8.10.1 icewm-lang-1.4.2-lp151.8.10.1 icewm-theme-branding-1.2.4-lp151.3.13.1 References: https://bugzilla.suse.com/1170420

1 0

openSUSE-SU-2020:1144-1: moderate: Security update for targetcli-fb
by opensuse-security＠opensuse.org 04 Aug '20

04 Aug '20

openSUSE Security Update: Security update for targetcli-fb ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1144-1 Rating: moderate References: #1172743 Cross-References: CVE-2020-13867 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for targetcli-fb fixes the following issues: - CVE-2020-13867: Fixed the permissions in /etc/target (bsc#1172743) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1144=1 Package List: - openSUSE Leap 15.2 (noarch): python2-targetcli-fb-2.1.52-lp152.2.3.1 python3-targetcli-fb-2.1.52-lp152.2.3.1 targetcli-fb-common-2.1.52-lp152.2.3.1 References: https://www.suse.com/security/cve/CVE-2020-13867.html https://bugzilla.suse.com/1172743

1 0

openSUSE-SU-2020:1142-1: important: Security update for ghostscript
by opensuse-security＠opensuse.org 03 Aug '20

03 Aug '20

openSUSE Security Update: Security update for ghostscript ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1142-1 Rating: important References: #1174415 Cross-References: CVE-2020-15900 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for ghostscript fixes the following issues: - fixed CVE-2020-15900 Memory Corruption (SAFER Sandbox Breakout) cf. https://bugs.ghostscript.com/show_bug.cgi?id=702582 (bsc#1174415) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1142=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): ghostscript-9.52-lp151.3.15.1 ghostscript-debuginfo-9.52-lp151.3.15.1 ghostscript-debugsource-9.52-lp151.3.15.1 ghostscript-devel-9.52-lp151.3.15.1 ghostscript-mini-9.52-lp151.3.15.1 ghostscript-mini-debuginfo-9.52-lp151.3.15.1 ghostscript-mini-debugsource-9.52-lp151.3.15.1 ghostscript-mini-devel-9.52-lp151.3.15.1 ghostscript-x11-9.52-lp151.3.15.1 ghostscript-x11-debuginfo-9.52-lp151.3.15.1 References: https://www.suse.com/security/cve/CVE-2020-15900.html https://bugzilla.suse.com/1174415

1 0

openSUSE-RU-2020:1143-1: moderate: Recommended update for systemd
by maintenance＠opensuse.org 03 Aug '20

03 Aug '20

openSUSE Recommended Update: Recommended update for systemd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1143-1 Rating: moderate References: #1157315 #1162698 #1164538 #1169488 #1171145 #1172072 #1173227 #1173229 #1173422 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 9 recommended fixes can now be installed. Description: This update for systemd fixes the following issues: - units: starting suspend.target should not fail when suspend is successful (bsc#1172072) - core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set - mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488) - mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too - udev: rename the persistent link for ATA devices (bsc#1164538) - shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315) - tmpfiles: remove unnecessary assert (bsc#1171145) - test-engine: manager_free() was called too early - pid1: by default make user units inherit their umask from the user manager (bsc#1162698) - migrate-sysconfig-i18n.sh: fixed marker handling (bsc#1173229) The marker is used to make sure the script is run only once. Instead of storing it in /usr, use /var which is more appropriate for such file. Also make it owned by systemd package. - Fix inconsistent file modes for some ghost files (bsc#1173227) Ghost files are assumed by rpm to have mode 000 by default which is not consistent with file permissions set at runtime. Also /var/lib/systemd/random-seed was tracked wrongly as a directory. Also don't track (ghost) /etc/systemd/system/runlevel*.target aliases since we're not supposed to track units or aliases user might define/override. - Fix build of systemd on openSUSE Leap 15.2 (bsc#1173422) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1143=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libsystemd0-234-lp152.31.4.1 libsystemd0-debuginfo-234-lp152.31.4.1 libsystemd0-mini-234-lp152.31.4.1 libsystemd0-mini-debuginfo-234-lp152.31.4.1 libudev-devel-234-lp152.31.4.1 libudev-mini-devel-234-lp152.31.4.1 libudev-mini1-234-lp152.31.4.1 libudev-mini1-debuginfo-234-lp152.31.4.1 libudev1-234-lp152.31.4.1 libudev1-debuginfo-234-lp152.31.4.1 nss-myhostname-234-lp152.31.4.1 nss-myhostname-debuginfo-234-lp152.31.4.1 nss-mymachines-234-lp152.31.4.1 nss-mymachines-debuginfo-234-lp152.31.4.1 nss-systemd-234-lp152.31.4.1 nss-systemd-debuginfo-234-lp152.31.4.1 systemd-234-lp152.31.4.1 systemd-container-234-lp152.31.4.1 systemd-container-debuginfo-234-lp152.31.4.1 systemd-coredump-234-lp152.31.4.1 systemd-coredump-debuginfo-234-lp152.31.4.1 systemd-debuginfo-234-lp152.31.4.1 systemd-debugsource-234-lp152.31.4.1 systemd-devel-234-lp152.31.4.1 systemd-journal-remote-234-lp152.31.4.1 systemd-journal-remote-debuginfo-234-lp152.31.4.1 systemd-logger-234-lp152.31.4.1 systemd-mini-234-lp152.31.4.1 systemd-mini-container-mini-234-lp152.31.4.1 systemd-mini-container-mini-debuginfo-234-lp152.31.4.1 systemd-mini-coredump-mini-234-lp152.31.4.1 systemd-mini-coredump-mini-debuginfo-234-lp152.31.4.1 systemd-mini-debuginfo-234-lp152.31.4.1 systemd-mini-debugsource-234-lp152.31.4.1 systemd-mini-devel-234-lp152.31.4.1 systemd-mini-sysvinit-234-lp152.31.4.1 systemd-network-234-lp152.31.4.1 systemd-network-debuginfo-234-lp152.31.4.1 systemd-sysvinit-234-lp152.31.4.1 udev-234-lp152.31.4.1 udev-debuginfo-234-lp152.31.4.1 udev-mini-234-lp152.31.4.1 udev-mini-debuginfo-234-lp152.31.4.1 - openSUSE Leap 15.2 (noarch): systemd-bash-completion-234-lp152.31.4.1 systemd-mini-bash-completion-234-lp152.31.4.1 - openSUSE Leap 15.2 (x86_64): libsystemd0-32bit-234-lp152.31.4.1 libsystemd0-32bit-debuginfo-234-lp152.31.4.1 libudev-devel-32bit-234-lp152.31.4.1 libudev1-32bit-234-lp152.31.4.1 libudev1-32bit-debuginfo-234-lp152.31.4.1 nss-myhostname-32bit-234-lp152.31.4.1 nss-myhostname-32bit-debuginfo-234-lp152.31.4.1 nss-mymachines-32bit-234-lp152.31.4.1 nss-mymachines-32bit-debuginfo-234-lp152.31.4.1 systemd-32bit-234-lp152.31.4.1 systemd-32bit-debuginfo-234-lp152.31.4.1 References: https://bugzilla.suse.com/1157315 https://bugzilla.suse.com/1162698 https://bugzilla.suse.com/1164538 https://bugzilla.suse.com/1169488 https://bugzilla.suse.com/1171145 https://bugzilla.suse.com/1172072 https://bugzilla.suse.com/1173227 https://bugzilla.suse.com/1173229 https://bugzilla.suse.com/1173422

1 0

openSUSE-SU-2020:1141-1: moderate: Security update for targetcli-fb
by opensuse-security＠opensuse.org 03 Aug '20

03 Aug '20

openSUSE Security Update: Security update for targetcli-fb ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1141-1 Rating: moderate References: #1172743 Cross-References: CVE-2020-13867 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for targetcli-fb fixes the following issues: - CVE-2020-13867: Fixed the permissions in /etc/target (bsc#1172743) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1141=1 Package List: - openSUSE Leap 15.1 (noarch): python2-targetcli-fb-2.1.49-lp151.2.10.1 python3-targetcli-fb-2.1.49-lp151.2.10.1 targetcli-fb-common-2.1.49-lp151.2.10.1 References: https://www.suse.com/security/cve/CVE-2020-13867.html https://bugzilla.suse.com/1172743

1 0

openSUSE-RU-2020:1140-1: important: Recommended update for crmsh
by maintenance＠opensuse.org 03 Aug '20

03 Aug '20

openSUSE Recommended Update: Recommended update for crmsh ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1140-1 Rating: important References: #1174385 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for crmsh fixes the following issues: - Fix for SSH communication between HA nodes by copying ssh key to 'qnetd' while detect need a password. (bsc#1174385) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1140=1 Package List: - openSUSE Leap 15.2 (noarch): crmsh-4.2.0+git.1595517298.a06e892f-lp152.4.7.1 crmsh-scripts-4.2.0+git.1595517298.a06e892f-lp152.4.7.1 crmsh-test-4.2.0+git.1595517298.a06e892f-lp152.4.7.1 References: https://bugzilla.suse.com/1174385

1 0

openSUSE-SU-2020:1139-1: moderate: Security update for claws-mail
by opensuse-security＠opensuse.org 03 Aug '20

03 Aug '20

openSUSE Security Update: Security update for claws-mail ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1139-1 Rating: moderate References: #1174457 Cross-References: CVE-2020-15917 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for claws-mail fixes the following issues: - Update to 3.17.6: * It is now possible to 'Inherit Folder properties and processing rules from parent folder' when creating new folders with the move message and copy message dialogues. * A Phishing warning is now shown when copying a phishing URL, (in addition to clicking a phishing URL). * The progress window when importing an mbox file is now more responsive. * A warning dialogue is shown if the selected privacy system is 'None' and automatic signing amd/or encrypting is enabled. * Python plugin: pkgconfig is now used to check for python2. This enables the Python plugin (which uses python2) to be built on newer systems which have both python2 and python3. - CVE-2020-15917: Fixed an improper handling of suffix data after STARTTLS is mishandled (boo#1174457). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1139=1 Package List: - openSUSE Leap 15.2 (x86_64): claws-mail-3.17.6-lp152.3.3.1 claws-mail-debuginfo-3.17.6-lp152.3.3.1 claws-mail-debugsource-3.17.6-lp152.3.3.1 claws-mail-devel-3.17.6-lp152.3.3.1 - openSUSE Leap 15.2 (noarch): claws-mail-lang-3.17.6-lp152.3.3.1 References: https://www.suse.com/security/cve/CVE-2020-15917.html https://bugzilla.suse.com/1174457

1 0

openSUSE-RU-2020:1138-1: moderate: Recommended update for systemd
by maintenance＠opensuse.org 03 Aug '20

03 Aug '20

openSUSE Recommended Update: Recommended update for systemd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1138-1 Rating: moderate References: #1173227 #1173229 #1173422 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for systemd fixes the following issues: - migrate-sysconfig-i18n.sh: fixed marker handling (bsc#1173229) The marker is used to make sure the script is run only once. Instead of storing it in /usr, use /var which is more appropriate for such file. Also make it owned by systemd package. - Fix inconsistent file modes for some ghost files (bsc#1173227) Ghost files are assumed by rpm to have mode 000 by default which is not consistent with file permissions set at runtime. Also /var/lib/systemd/random-seed was tracked wrongly as a directory. Also don't track (ghost) /etc/systemd/system/runlevel*.target aliases since we're not supposed to track units or aliases user might define/override. - Fix build of systemd on openSUSE Leap 15.2 (bsc#1173422) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1138=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libsystemd0-234-lp151.26.22.1 libsystemd0-debuginfo-234-lp151.26.22.1 libsystemd0-mini-234-lp151.26.22.1 libsystemd0-mini-debuginfo-234-lp151.26.22.1 libudev-devel-234-lp151.26.22.1 libudev-mini-devel-234-lp151.26.22.1 libudev-mini1-234-lp151.26.22.1 libudev-mini1-debuginfo-234-lp151.26.22.1 libudev1-234-lp151.26.22.1 libudev1-debuginfo-234-lp151.26.22.1 nss-myhostname-234-lp151.26.22.1 nss-myhostname-debuginfo-234-lp151.26.22.1 nss-mymachines-234-lp151.26.22.1 nss-mymachines-debuginfo-234-lp151.26.22.1 nss-systemd-234-lp151.26.22.1 nss-systemd-debuginfo-234-lp151.26.22.1 systemd-234-lp151.26.22.1 systemd-container-234-lp151.26.22.1 systemd-container-debuginfo-234-lp151.26.22.1 systemd-coredump-234-lp151.26.22.1 systemd-coredump-debuginfo-234-lp151.26.22.1 systemd-debuginfo-234-lp151.26.22.1 systemd-debugsource-234-lp151.26.22.1 systemd-devel-234-lp151.26.22.1 systemd-journal-remote-234-lp151.26.22.1 systemd-journal-remote-debuginfo-234-lp151.26.22.1 systemd-logger-234-lp151.26.22.1 systemd-mini-234-lp151.26.22.1 systemd-mini-container-mini-234-lp151.26.22.1 systemd-mini-container-mini-debuginfo-234-lp151.26.22.1 systemd-mini-coredump-mini-234-lp151.26.22.1 systemd-mini-coredump-mini-debuginfo-234-lp151.26.22.1 systemd-mini-debuginfo-234-lp151.26.22.1 systemd-mini-debugsource-234-lp151.26.22.1 systemd-mini-devel-234-lp151.26.22.1 systemd-mini-sysvinit-234-lp151.26.22.1 systemd-network-234-lp151.26.22.1 systemd-network-debuginfo-234-lp151.26.22.1 systemd-sysvinit-234-lp151.26.22.1 udev-234-lp151.26.22.1 udev-debuginfo-234-lp151.26.22.1 udev-mini-234-lp151.26.22.1 udev-mini-debuginfo-234-lp151.26.22.1 - openSUSE Leap 15.1 (noarch): systemd-bash-completion-234-lp151.26.22.1 systemd-mini-bash-completion-234-lp151.26.22.1 - openSUSE Leap 15.1 (x86_64): libsystemd0-32bit-234-lp151.26.22.1 libsystemd0-32bit-debuginfo-234-lp151.26.22.1 libudev-devel-32bit-234-lp151.26.22.1 libudev1-32bit-234-lp151.26.22.1 libudev1-32bit-debuginfo-234-lp151.26.22.1 nss-myhostname-32bit-234-lp151.26.22.1 nss-myhostname-32bit-debuginfo-234-lp151.26.22.1 nss-mymachines-32bit-234-lp151.26.22.1 nss-mymachines-32bit-debuginfo-234-lp151.26.22.1 systemd-32bit-234-lp151.26.22.1 systemd-32bit-debuginfo-234-lp151.26.22.1 References: https://bugzilla.suse.com/1173227 https://bugzilla.suse.com/1173229 https://bugzilla.suse.com/1173422

1 0

openSUSE-RU-2020:1137-1: moderate: Recommended update for steam
by maintenance＠opensuse.org 03 Aug '20

03 Aug '20

openSUSE Recommended Update: Recommended update for steam ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1137-1 Rating: moderate References: #1157832 #1157903 Affected Products: openSUSE Leap 15.2:NonFree openSUSE Leap 15.1:NonFree ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for steam fixes the following issues: Steam was updated to version 1.0.0.66 * Bootstrap using updated Steam client: - Client timestamp 1595977781 (2020-07-28) - Steam Runtime version 0.20200604.0 * Update steam-devices subproject up to 2020-07-28 - Replace escaped double quotes in udev rules with single quotes, for compatibility with udev < 235 and eudev. - Add Recommends: bubblewrap, required by the experimental container runtime system - Switch to FirewallD Update to version 1.0.0.63 * Update steam-devices subproject up to 2020-06-05 - Add HORIPAD for Nintendo Switch (thanks, @BrokenGale) (Fixes: steam-for-linux#6944, steam-devices#7) - Add ASTRO C40 controller (thanks, @exhumer2) (Fixes: steam-devices#5) - Add PowerA Nintendo Switch Controller (thanks, @blazingkin) (Fixes: steam-devices#6) - Add a workaround for PowerA Wireless Controller (thanks, Andrey Smirnov) (Fixes: steam-devices#9; T21767) * debian/steam-launcher.postinst: Notify udevd to reload its rules. This means the steam-devices rules should take effect immediately, instead of being deferred until after the next reboot. (T19535) * bin_steam.sh: Don't overwrite steam.desktop if it's a symlink. In a pre-configured distro like SteamOS, ~/Desktop/steam.desktop might already be a symlink to /usr/share/applications/steam.desktop, in which case overwriting it is pointless. (T21633) Update to version 1.0.0.64 * steam.list: Download updates via https (T21740) In older versions of apt (lower than 1.6) we need to install apt-transport-https to use https repositories, so do that. * steam.list: Switch the suite from precise to stable (Fixes: steam-for-linux#4436) * steam.list: Add commented-out apt sources for the beta launcher - Added recommend lsb-release to provide OS info and to support hw survey boo#1157832 - Merge steam-controller and steam-vr into steam-devices like other distros. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2:NonFree: zypper in -t patch openSUSE-2020-1137=1 - openSUSE Leap 15.1:NonFree: zypper in -t patch openSUSE-2020-1137=1 Package List: - openSUSE Leap 15.2:NonFree (x86_64): steam-1.0.0.66-lp152.2.6.1 steam-devices-1.0.0.66-lp152.2.6.1 - openSUSE Leap 15.1:NonFree (x86_64): steam-1.0.0.66-lp151.3.3.1 steam-devices-1.0.0.66-lp151.3.3.1 References: https://bugzilla.suse.com/1157832 https://bugzilla.suse.com/1157903

1 0

openSUSE-RU-2020:1136-1: moderate: Recommended update for 389-ds
by maintenance＠opensuse.org 03 Aug '20

03 Aug '20

openSUSE Recommended Update: Recommended update for 389-ds ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1136-1 Rating: moderate References: #1172328 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for 389-ds fixes the following issues: - This corrects a failure to install on SUSE due to incorrect hostname generation, and a python3 utf8 issue that is triggered by systemd. (bsc#1172328) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1136=1 Package List: - openSUSE Leap 15.2 (x86_64): 389-ds-1.4.3.9~git0.3eb8617f6-lp152.2.3.1 389-ds-debuginfo-1.4.3.9~git0.3eb8617f6-lp152.2.3.1 389-ds-debugsource-1.4.3.9~git0.3eb8617f6-lp152.2.3.1 389-ds-devel-1.4.3.9~git0.3eb8617f6-lp152.2.3.1 389-ds-snmp-1.4.3.9~git0.3eb8617f6-lp152.2.3.1 389-ds-snmp-debuginfo-1.4.3.9~git0.3eb8617f6-lp152.2.3.1 lib389-1.4.3.9~git0.3eb8617f6-lp152.2.3.1 libsvrcore0-1.4.3.9~git0.3eb8617f6-lp152.2.3.1 libsvrcore0-debuginfo-1.4.3.9~git0.3eb8617f6-lp152.2.3.1 References: https://bugzilla.suse.com/1172328

1 0

openSUSE-RU-2020:1132-1: moderate: Recommended update for diffutils
by maintenance＠opensuse.org 02 Aug '20

02 Aug '20

openSUSE Recommended Update: Recommended update for diffutils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1132-1 Rating: moderate References: #1156913 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for diffutils fixes the following issue: - Disable a sporadically failing test for ppc64 and ppc64le builds. (bsc#1156913) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1132=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): diffutils-3.6-lp152.5.3.1 diffutils-debuginfo-3.6-lp152.5.3.1 diffutils-debugsource-3.6-lp152.5.3.1 - openSUSE Leap 15.2 (noarch): diffutils-lang-3.6-lp152.5.3.1 References: https://bugzilla.suse.com/1156913

1 0

openSUSE-RU-2020:1133-1: moderate: Recommended update for python-kiwi
by maintenance＠opensuse.org 02 Aug '20

02 Aug '20

openSUSE Recommended Update: Recommended update for python-kiwi ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1133-1 Rating: moderate References: #1156677 #1168973 #1172928 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for python-kiwi fixes the following issues: - Fixed checking for root device in grub config. (bsc#1172928) - Fix for conflicting files of man-pages between different versions. (bsc#1168973, bsc#1156677) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1133=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): dracut-kiwi-lib-9.20.5-lp151.2.10.1 dracut-kiwi-live-9.20.5-lp151.2.10.1 dracut-kiwi-oem-dump-9.20.5-lp151.2.10.1 dracut-kiwi-oem-repart-9.20.5-lp151.2.10.1 dracut-kiwi-overlay-9.20.5-lp151.2.10.1 kiwi-man-pages-9.20.5-lp151.2.10.1 kiwi-pxeboot-9.20.5-lp151.2.10.1 kiwi-tools-9.20.5-lp151.2.10.1 kiwi-tools-debuginfo-9.20.5-lp151.2.10.1 python-kiwi-debugsource-9.20.5-lp151.2.10.1 python3-kiwi-9.20.5-lp151.2.10.1 References: https://bugzilla.suse.com/1156677 https://bugzilla.suse.com/1168973 https://bugzilla.suse.com/1172928

1 0

openSUSE-RU-2020:1131-1: moderate: Recommended update for python-kiwi
by maintenance＠opensuse.org 02 Aug '20

02 Aug '20

openSUSE Recommended Update: Recommended update for python-kiwi ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1131-1 Rating: moderate References: #1165823 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-kiwi fixes the following issues: - Fixed _get_grub2_mkconfig_tool Last patch on this method breaks the search for alternative mkconfig names. It returns always on the first lookup which could be none. This breaks on systems that uses a different name than grub2-mkconfig, like on Ubuntu. - Increase spare space on disk repart (bsc#1165823) The sizing of the virtual cylinders in parted seems to be unfavorable, as with some disks and SD cards here the device size is not a multiple of the cylinder size, so the last incomplete cylinder is wasted. If this wasted space is more than 5MiB, kiwi tries to resize indefinitely. Therefore min_additional_mbytes gets increased to prevent running into this situation. This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1131=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): dracut-kiwi-lib-9.20.5-lp152.5.3.1 dracut-kiwi-live-9.20.5-lp152.5.3.1 dracut-kiwi-oem-dump-9.20.5-lp152.5.3.1 dracut-kiwi-oem-repart-9.20.5-lp152.5.3.1 dracut-kiwi-overlay-9.20.5-lp152.5.3.1 kiwi-man-pages-9.20.5-lp152.5.3.1 kiwi-pxeboot-9.20.5-lp152.5.3.1 kiwi-tools-9.20.5-lp152.5.3.1 kiwi-tools-debuginfo-9.20.5-lp152.5.3.1 python-kiwi-debugsource-9.20.5-lp152.5.3.1 python3-kiwi-9.20.5-lp152.5.3.1 References: https://bugzilla.suse.com/1165823

1 0

openSUSE-RU-2020:1134-1: moderate: Recommended update for petsc
by maintenance＠opensuse.org 02 Aug '20

02 Aug '20

openSUSE Recommended Update: Recommended update for petsc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1134-1 Rating: moderate References: #1173065 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for petsc fixes the following issue: - Fix incorrect dependency of the HPC devel packages. (bsc#1173065) Now the devel packages are not wrongly uninstalled on a petsc version upgrade. - Provide the documentation package This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1134=1 Package List: - openSUSE Leap 15.1 (noarch): petsc-doc-3.8.3-lp151.8.3.1 - openSUSE Leap 15.1 (x86_64): libpetsc-gnu-mpich-hpc-3.8.3-lp151.8.3.1 libpetsc-gnu-mvapich2-hpc-3.8.3-lp151.8.3.1 libpetsc-gnu-openmpi1-hpc-3.8.3-lp151.8.3.1 libpetsc-gnu-openmpi2-hpc-3.8.3-lp151.8.3.1 libpetsc-gnu-openmpi3-hpc-3.8.3-lp151.8.3.1 libpetsc_3_8_3-gnu-mpich-hpc-3.8.3-lp151.8.3.1 libpetsc_3_8_3-gnu-mpich-hpc-debuginfo-3.8.3-lp151.8.3.1 libpetsc_3_8_3-gnu-mvapich2-hpc-3.8.3-lp151.8.3.1 libpetsc_3_8_3-gnu-mvapich2-hpc-debuginfo-3.8.3-lp151.8.3.1 libpetsc_3_8_3-gnu-openmpi1-hpc-3.8.3-lp151.8.3.1 libpetsc_3_8_3-gnu-openmpi1-hpc-debuginfo-3.8.3-lp151.8.3.1 libpetsc_3_8_3-gnu-openmpi2-hpc-3.8.3-lp151.8.3.1 libpetsc_3_8_3-gnu-openmpi2-hpc-debuginfo-3.8.3-lp151.8.3.1 libpetsc_3_8_3-gnu-openmpi3-hpc-3.8.3-lp151.8.3.1 libpetsc_3_8_3-gnu-openmpi3-hpc-debuginfo-3.8.3-lp151.8.3.1 petsc-gnu-mpich-hpc-devel-3.8.3-lp151.8.3.1 petsc-gnu-mvapich2-hpc-devel-3.8.3-lp151.8.3.1 petsc-gnu-openmpi1-hpc-devel-3.8.3-lp151.8.3.1 petsc-gnu-openmpi2-hpc-devel-3.8.3-lp151.8.3.1 petsc-gnu-openmpi3-hpc-devel-3.8.3-lp151.8.3.1 petsc_3_8_3-gnu-mpich-hpc-debugsource-3.8.3-lp151.8.3.1 petsc_3_8_3-gnu-mpich-hpc-devel-3.8.3-lp151.8.3.1 petsc_3_8_3-gnu-mpich-hpc-saws-3.8.3-lp151.8.3.1 petsc_3_8_3-gnu-mvapich2-hpc-debugsource-3.8.3-lp151.8.3.1 petsc_3_8_3-gnu-mvapich2-hpc-devel-3.8.3-lp151.8.3.1 petsc_3_8_3-gnu-mvapich2-hpc-saws-3.8.3-lp151.8.3.1 petsc_3_8_3-gnu-openmpi1-hpc-debugsource-3.8.3-lp151.8.3.1 petsc_3_8_3-gnu-openmpi1-hpc-devel-3.8.3-lp151.8.3.1 petsc_3_8_3-gnu-openmpi1-hpc-saws-3.8.3-lp151.8.3.1 petsc_3_8_3-gnu-openmpi2-hpc-debugsource-3.8.3-lp151.8.3.1 petsc_3_8_3-gnu-openmpi2-hpc-devel-3.8.3-lp151.8.3.1 petsc_3_8_3-gnu-openmpi2-hpc-saws-3.8.3-lp151.8.3.1 petsc_3_8_3-gnu-openmpi3-hpc-debugsource-3.8.3-lp151.8.3.1 petsc_3_8_3-gnu-openmpi3-hpc-devel-3.8.3-lp151.8.3.1 petsc_3_8_3-gnu-openmpi3-hpc-saws-3.8.3-lp151.8.3.1 References: https://bugzilla.suse.com/1173065

1 0

openSUSE-RU-2020:1135-1: moderate: Recommended update for android-udev-rules
by maintenance＠opensuse.org 02 Aug '20

02 Aug '20

openSUSE Recommended Update: Recommended update for android-udev-rules ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1135-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for android-udev-rules fixes the following issues: - This package replaces android-tools-udev version 5 add the missing Provides/Obsoletes to avoid fileconflicts Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1135=1 Package List: - openSUSE Leap 15.2 (noarch): android-udev-rules-20191103-lp152.2.3.1 References:

1 0

openSUSE-RU-2020:1130-1: moderate: Recommended update for diffutils
by maintenance＠opensuse.org 02 Aug '20

02 Aug '20

openSUSE Recommended Update: Recommended update for diffutils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1130-1 Rating: moderate References: #1156913 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for diffutils fixes the following issue: - Disable a sporadically failing test for ppc64 and ppc64le builds. (bsc#1156913) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1130=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): diffutils-3.6-lp151.4.3.1 diffutils-debuginfo-3.6-lp151.4.3.1 diffutils-debugsource-3.6-lp151.4.3.1 - openSUSE Leap 15.1 (noarch): diffutils-lang-3.6-lp151.4.3.1 References: https://bugzilla.suse.com/1156913

1 0

openSUSE-RU-2020:1127-1: Recommended update for go1.10
by maintenance＠opensuse.org 02 Aug '20

02 Aug '20

openSUSE Recommended Update: Recommended update for go1.10 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1127-1 Rating: low References: #1169832 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for go1.10 fixes the following issues: - Fix for an issue when installing on Raspberry Pi causes illegal instruction due to unproper ARM arch set. (bsc#1169832) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1127=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): go1.10-1.10.8-lp151.2.9.1 go1.10-doc-1.10.8-lp151.2.9.1 - openSUSE Leap 15.1 (x86_64): go1.10-race-1.10.8-lp151.2.9.1 References: https://bugzilla.suse.com/1169832

1 0

openSUSE-SU-2020:1128-1: moderate: Security update for libraw
by opensuse-security＠opensuse.org 02 Aug '20

02 Aug '20

openSUSE Security Update: Security update for libraw ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1128-1 Rating: moderate References: #1173674 Cross-References: CVE-2020-15503 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libraw fixes the following issues: - security update - added patches fix CVE-2020-15503 [bsc#1173674], lack of thumbnail size range check can lead to buffer overflow + libraw-CVE-2020-15503.patch This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1128=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libraw-debuginfo-0.18.9-lp152.5.3.1 libraw-debugsource-0.18.9-lp152.5.3.1 libraw-devel-0.18.9-lp152.5.3.1 libraw-devel-static-0.18.9-lp152.5.3.1 libraw-tools-0.18.9-lp152.5.3.1 libraw-tools-debuginfo-0.18.9-lp152.5.3.1 libraw16-0.18.9-lp152.5.3.1 libraw16-debuginfo-0.18.9-lp152.5.3.1 References: https://www.suse.com/security/cve/CVE-2020-15503.html https://bugzilla.suse.com/1173674

1 0

openSUSE-RU-2020:1129-1: Recommended update for go1.12
by maintenance＠opensuse.org 02 Aug '20

02 Aug '20

openSUSE Recommended Update: Recommended update for go1.12 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1129-1 Rating: low References: #1169832 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for go1.12 fixes the following issues: - Fix for an issue when installing on Raspberry Pi causes illegal instruction due to unproper ARM arch set. (bsc#1169832) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1129=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): go1.12-1.12.17-lp152.3.4.1 go1.12-doc-1.12.17-lp152.3.4.1 - openSUSE Leap 15.2 (x86_64): go1.12-race-1.12.17-lp152.3.4.1 References: https://bugzilla.suse.com/1169832

1 0

openSUSE-RU-2020:1126-1: moderate: Recommended update for installation-images
by maintenance＠opensuse.org 02 Aug '20

02 Aug '20

openSUSE Recommended Update: Recommended update for installation-images ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1126-1 Rating: moderate References: #1158522 #1172853 #1173204 #1173336 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for installation-images fixes the following issues: - Fixes an issue with no hostqn and hostid and generate them for NVMe in the install system. (bsc#1172853) - Add missed file to instsys to fix failing openQA test in 'windows_client_remotelogin'. (bsc#1158522) - Do not ask for registration when install= points to a repository, (bsc#1173336) - Make it possible to use unsigned repositories. (bsc#1173204) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1126=1 Package List: - openSUSE Leap 15.2 (noarch): tftpboot-installation-openSUSE-Leap-15.2-x86_64-14.472-lp152.2.3.1 - openSUSE Leap 15.2 (x86_64): install-initrd-openSUSE-14.472-lp152.2.3.1 installation-images-debuginfodeps-openSUSE-14.472-lp152.2.3.1 installation-images-openSUSE-14.472-lp152.2.3.1 skelcd-installer-net-openSUSE-14.472-lp152.2.3.1 skelcd-installer-openSUSE-14.472-lp152.2.3.1 References: https://bugzilla.suse.com/1158522 https://bugzilla.suse.com/1172853 https://bugzilla.suse.com/1173204 https://bugzilla.suse.com/1173336

1 0

openSUSE-RU-2020:1122-1: moderate: Recommended update for mkdud
by maintenance＠opensuse.org 01 Aug '20

01 Aug '20

openSUSE Recommended Update: Recommended update for mkdud ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1122-1 Rating: moderate References: #1173988 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for mkdud fixes the following issues: - ensure DUD repos are removed at the end of the installation (boo#1173988) - add --sign-key-id option to allow specifying a gpg signing key by id Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1122=1 Package List: - openSUSE Leap 15.2 (noarch): mkdud-1.50-lp152.2.3.1 References: https://bugzilla.suse.com/1173988

1 0

openSUSE-RU-2020:1120-1: moderate: Recommended update for fence-agents
by maintenance＠opensuse.org 01 Aug '20

01 Aug '20

openSUSE Recommended Update: Recommended update for fence-agents ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1120-1 Rating: moderate References: #1169485 #1169852 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for fence-agents fixes the following issues: - Disable cache discovery for "gcp-vpc-move-route" resource agent. (bsc#1169852) - fence_vmware_rest Failed: 'error' object does not support indexing. (bsc#1169485) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1120=1 Package List: - openSUSE Leap 15.2 (x86_64): fence-agents-4.4.0+git.1558595666.5f79f9e9-lp152.3.3.1 fence-agents-amt_ws-4.4.0+git.1558595666.5f79f9e9-lp152.3.3.1 fence-agents-debuginfo-4.4.0+git.1558595666.5f79f9e9-lp152.3.3.1 fence-agents-debugsource-4.4.0+git.1558595666.5f79f9e9-lp152.3.3.1 fence-agents-devel-4.4.0+git.1558595666.5f79f9e9-lp152.3.3.1 References: https://bugzilla.suse.com/1169485 https://bugzilla.suse.com/1169852

1 0

openSUSE-SU-2020:1121-1: moderate: Security update for ldb
by opensuse-security＠opensuse.org 01 Aug '20

01 Aug '20

openSUSE Security Update: Security update for ldb ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1121-1 Rating: moderate References: #1173159 Cross-References: CVE-2020-10730 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for ldb fixes the following issues: - CVE-2020-10730: Fixed a null de-reference in AD DC LDAP server when ASQ and VLV combined (bsc#1173159). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1121=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): ldb-debugsource-1.4.6-lp151.2.3.1 ldb-tools-1.4.6-lp151.2.3.1 ldb-tools-debuginfo-1.4.6-lp151.2.3.1 libldb-devel-1.4.6-lp151.2.3.1 libldb1-1.4.6-lp151.2.3.1 libldb1-debuginfo-1.4.6-lp151.2.3.1 python-ldb-1.4.6-lp151.2.3.1 python-ldb-debuginfo-1.4.6-lp151.2.3.1 python-ldb-devel-1.4.6-lp151.2.3.1 python3-ldb-1.4.6-lp151.2.3.1 python3-ldb-debuginfo-1.4.6-lp151.2.3.1 python3-ldb-devel-1.4.6-lp151.2.3.1 - openSUSE Leap 15.1 (x86_64): libldb1-32bit-1.4.6-lp151.2.3.1 libldb1-32bit-debuginfo-1.4.6-lp151.2.3.1 python-ldb-32bit-1.4.6-lp151.2.3.1 python-ldb-32bit-debuginfo-1.4.6-lp151.2.3.1 python3-ldb-32bit-1.4.6-lp151.2.3.1 python3-ldb-32bit-debuginfo-1.4.6-lp151.2.3.1 References: https://www.suse.com/security/cve/CVE-2020-10730.html https://bugzilla.suse.com/1173159

1 0

openSUSE-RU-2020:1119-1: moderate: Recommended update for fence-agents
by maintenance＠opensuse.org 01 Aug '20

01 Aug '20

openSUSE Recommended Update: Recommended update for fence-agents ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1119-1 Rating: moderate References: #1169485 #1169852 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for fence-agents fixes the following issues: - Disable cache discovery for "gcp-vpc-move-route" resource agent. (bsc#1169852) - fence_vmware_rest Failed: 'error' object does not support indexing. (bsc#1169485) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1119=1 Package List: - openSUSE Leap 15.1 (x86_64): fence-agents-4.4.0+git.1558595666.5f79f9e9-lp151.2.9.1 fence-agents-amt_ws-4.4.0+git.1558595666.5f79f9e9-lp151.2.9.1 fence-agents-debuginfo-4.4.0+git.1558595666.5f79f9e9-lp151.2.9.1 fence-agents-debugsource-4.4.0+git.1558595666.5f79f9e9-lp151.2.9.1 fence-agents-devel-4.4.0+git.1558595666.5f79f9e9-lp151.2.9.1 References: https://bugzilla.suse.com/1169485 https://bugzilla.suse.com/1169852

1 0