August 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2020:1308-1: moderate: Recommended update for python-azure-agent
by maintenance＠opensuse.org 31 Aug '20

31 Aug '20

openSUSE Recommended Update: Recommended update for python-azure-agent ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1308-1 Rating: moderate References: #1175198 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-azure-agent contains the following fix: - Drop paa_sudo_sle15_nopwd.patch (bsc#1175198) + sudoers file is managed by cloud-init we no longer need this hack This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1308=1 Package List: - openSUSE Leap 15.1 (noarch): python-azure-agent-2.2.45-lp151.2.12.1 python-azure-agent-test-2.2.45-lp151.2.12.1 References: https://bugzilla.suse.com/1175198

1 0

openSUSE-SU-2020:1306-1: important: Security update for chromium
by opensuse-security＠opensuse.org 31 Aug '20

31 Aug '20

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1306-1 Rating: important References: #1175757 Cross-References: CVE-2020-6558 CVE-2020-6559 CVE-2020-6560 CVE-2020-6561 CVE-2020-6562 CVE-2020-6563 CVE-2020-6564 CVE-2020-6565 CVE-2020-6566 CVE-2020-6567 CVE-2020-6568 CVE-2020-6569 CVE-2020-6570 CVE-2020-6571 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes 14 vulnerabilities is now available. Description: This update for chromium fixes the following issues: Chromium was updated to version 85.0.4183.83 (boo#1175757) fixing: - CVE-2020-6558: Insufficient policy enforcement in iOS - CVE-2020-6559: Use after free in presentation API - CVE-2020-6560: Insufficient policy enforcement in autofill - CVE-2020-6561: Inappropriate implementation in Content Security Policy - CVE-2020-6562: Insufficient policy enforcement in Blink - CVE-2020-6563: Insufficient policy enforcement in intent handling. - CVE-2020-6564: Incorrect security UI in permissions - CVE-2020-6565: Incorrect security UI in Omnibox. - CVE-2020-6566: Insufficient policy enforcement in media. - CVE-2020-6567: Insufficient validation of untrusted input in command line handling. - CVE-2020-6568: Insufficient policy enforcement in intent handling. - CVE-2020-6569: Integer overflow in WebUSB. - CVE-2020-6570: Side-channel information leakage in WebRTC. - CVE-2020-6571: Incorrect security UI in Omnibox. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1306=1 Package List: - openSUSE Leap 15.2 (x86_64): chromedriver-85.0.4183.69-lp152.2.20.1 chromedriver-debuginfo-85.0.4183.69-lp152.2.20.1 chromium-85.0.4183.69-lp152.2.20.1 chromium-debuginfo-85.0.4183.69-lp152.2.20.1 chromium-debugsource-85.0.4183.69-lp152.2.20.1 References: https://www.suse.com/security/cve/CVE-2020-6558.html https://www.suse.com/security/cve/CVE-2020-6559.html https://www.suse.com/security/cve/CVE-2020-6560.html https://www.suse.com/security/cve/CVE-2020-6561.html https://www.suse.com/security/cve/CVE-2020-6562.html https://www.suse.com/security/cve/CVE-2020-6563.html https://www.suse.com/security/cve/CVE-2020-6564.html https://www.suse.com/security/cve/CVE-2020-6565.html https://www.suse.com/security/cve/CVE-2020-6566.html https://www.suse.com/security/cve/CVE-2020-6567.html https://www.suse.com/security/cve/CVE-2020-6568.html https://www.suse.com/security/cve/CVE-2020-6569.html https://www.suse.com/security/cve/CVE-2020-6570.html https://www.suse.com/security/cve/CVE-2020-6571.html https://bugzilla.suse.com/1175757

1 0

openSUSE-RU-2020:1307-1: moderate: Recommended update for salt
by maintenance＠opensuse.org 31 Aug '20

31 Aug '20

openSUSE Recommended Update: Recommended update for salt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1307-1 Rating: moderate References: #1171461 #1172211 #1173936 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for salt fixes the following issues: - Require /usr/bin/python instead of /bin/python for RHEL-family. (bsc#1173936) - Don't install SuSEfirewall2 service files in Factory. - Fix __mount_device wrapper to accept separate args and kwargs. - Fix the registration of libvirt pool and nodedev events. - Accept nested namespaces in spacewalk.api runner function. (bsc#1172211) - info_installed works without status attr now. (bsc#1171461) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1307=1 Package List: - openSUSE Leap 15.1 (x86_64): python2-salt-3000-lp151.5.24.1 python3-salt-3000-lp151.5.24.1 salt-3000-lp151.5.24.1 salt-api-3000-lp151.5.24.1 salt-cloud-3000-lp151.5.24.1 salt-doc-3000-lp151.5.24.1 salt-master-3000-lp151.5.24.1 salt-minion-3000-lp151.5.24.1 salt-proxy-3000-lp151.5.24.1 salt-ssh-3000-lp151.5.24.1 salt-standalone-formulas-configuration-3000-lp151.5.24.1 salt-syndic-3000-lp151.5.24.1 - openSUSE Leap 15.1 (noarch): salt-bash-completion-3000-lp151.5.24.1 salt-fish-completion-3000-lp151.5.24.1 salt-zsh-completion-3000-lp151.5.24.1 References: https://bugzilla.suse.com/1171461 https://bugzilla.suse.com/1172211 https://bugzilla.suse.com/1173936

1 0

openSUSE-RU-2020:1305-1: moderate: Recommended update for netcdf-fortran
by maintenance＠opensuse.org 31 Aug '20

31 Aug '20

openSUSE Recommended Update: Recommended update for netcdf-fortran ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1305-1 Rating: moderate References: #1173598 #1174177 #1174291 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for netcdf and netcdf-fortran fixes the following issues: netcdf: - NetCDF modules should be called 'netcdf' - regardless whether they are 'serial' or use MPI. (bsc#1174291) netcdf-fortran: - The convention is to use the module name 'pnetcdf' for Parallel-NetCDF (called PnetCDF now). - Fix ldconfig args for HPC packages: no caching should be done as the libs are made available via LD_LIBRARY_PATH. - Add serial HPC build flavor. (bsc#1174177) For loading serial module, run 'module load netcdf-fortran' for an MPI variant use 'module load pnetcdf-fortran'. - Fixed bug in module file. - Gfortran from gcc-10 requires -std=legacy to build the Fortran code in netcdf-fortran. (bsc#1173598) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1305=1 Package List: - openSUSE Leap 15.2 (noarch): netcdf-fortran-gnu-hpc-4.5.2-lp152.2.3.1 netcdf-fortran-gnu-hpc-devel-4.5.2-lp152.2.3.1 netcdf-fortran-gnu-mpich-hpc-4.5.2-lp152.2.3.1 netcdf-fortran-gnu-mpich-hpc-devel-4.5.2-lp152.2.3.1 netcdf-fortran-gnu-mvapich2-hpc-4.5.2-lp152.2.3.1 netcdf-fortran-gnu-mvapich2-hpc-devel-4.5.2-lp152.2.3.1 netcdf-fortran-gnu-openmpi2-hpc-4.5.2-lp152.2.3.1 netcdf-fortran-gnu-openmpi2-hpc-devel-4.5.2-lp152.2.3.1 netcdf-fortran-gnu-openmpi3-hpc-4.5.2-lp152.2.3.1 netcdf-fortran-gnu-openmpi3-hpc-devel-4.5.2-lp152.2.3.1 netcdf-gnu-hpc-4.7.3-lp152.2.3.1 netcdf-gnu-hpc-devel-4.7.3-lp152.2.3.1 netcdf-gnu-mpich-hpc-4.7.3-lp152.2.3.1 netcdf-gnu-mpich-hpc-devel-4.7.3-lp152.2.3.1 netcdf-gnu-mvapich2-hpc-4.7.3-lp152.2.3.1 netcdf-gnu-mvapich2-hpc-devel-4.7.3-lp152.2.3.1 netcdf-gnu-openmpi2-hpc-4.7.3-lp152.2.3.1 netcdf-gnu-openmpi2-hpc-devel-4.7.3-lp152.2.3.1 netcdf-gnu-openmpi3-hpc-4.7.3-lp152.2.3.1 netcdf-gnu-openmpi3-hpc-devel-4.7.3-lp152.2.3.1 - openSUSE Leap 15.2 (x86_64): libnetcdf-fortran-gnu-hpc-4.5.2-lp152.2.3.1 libnetcdf-fortran-gnu-mpich-hpc-4.5.2-lp152.2.3.1 libnetcdf-fortran-gnu-mvapich2-hpc-4.5.2-lp152.2.3.1 libnetcdf-fortran-gnu-openmpi2-hpc-4.5.2-lp152.2.3.1 libnetcdf-fortran-gnu-openmpi3-hpc-4.5.2-lp152.2.3.1 libnetcdf-fortran_4_5_2-gnu-hpc-4.5.2-lp152.2.3.1 libnetcdf-fortran_4_5_2-gnu-hpc-debuginfo-4.5.2-lp152.2.3.1 libnetcdf-fortran_4_5_2-gnu-mpich-hpc-4.5.2-lp152.2.3.1 libnetcdf-fortran_4_5_2-gnu-mpich-hpc-debuginfo-4.5.2-lp152.2.3.1 libnetcdf-fortran_4_5_2-gnu-mvapich2-hpc-4.5.2-lp152.2.3.1 libnetcdf-fortran_4_5_2-gnu-mvapich2-hpc-debuginfo-4.5.2-lp152.2.3.1 libnetcdf-fortran_4_5_2-gnu-openmpi2-hpc-4.5.2-lp152.2.3.1 libnetcdf-fortran_4_5_2-gnu-openmpi2-hpc-debuginfo-4.5.2-lp152.2.3.1 libnetcdf-fortran_4_5_2-gnu-openmpi3-hpc-4.5.2-lp152.2.3.1 libnetcdf-fortran_4_5_2-gnu-openmpi3-hpc-debuginfo-4.5.2-lp152.2.3.1 libnetcdf-gnu-hpc-4.7.3-lp152.2.3.1 libnetcdf-gnu-mpich-hpc-4.7.3-lp152.2.3.1 libnetcdf-gnu-mvapich2-hpc-4.7.3-lp152.2.3.1 libnetcdf-gnu-openmpi2-hpc-4.7.3-lp152.2.3.1 libnetcdf-gnu-openmpi3-hpc-4.7.3-lp152.2.3.1 libnetcdf_4_7_3-gnu-hpc-4.7.3-lp152.2.3.1 libnetcdf_4_7_3-gnu-hpc-debuginfo-4.7.3-lp152.2.3.1 libnetcdf_4_7_3-gnu-mpich-hpc-4.7.3-lp152.2.3.1 libnetcdf_4_7_3-gnu-mpich-hpc-debuginfo-4.7.3-lp152.2.3.1 libnetcdf_4_7_3-gnu-mvapich2-hpc-4.7.3-lp152.2.3.1 libnetcdf_4_7_3-gnu-mvapich2-hpc-debuginfo-4.7.3-lp152.2.3.1 libnetcdf_4_7_3-gnu-openmpi2-hpc-4.7.3-lp152.2.3.1 libnetcdf_4_7_3-gnu-openmpi2-hpc-debuginfo-4.7.3-lp152.2.3.1 libnetcdf_4_7_3-gnu-openmpi3-hpc-4.7.3-lp152.2.3.1 libnetcdf_4_7_3-gnu-openmpi3-hpc-debuginfo-4.7.3-lp152.2.3.1 netcdf-fortran_4_5_2-gnu-hpc-4.5.2-lp152.2.3.1 netcdf-fortran_4_5_2-gnu-hpc-debugsource-4.5.2-lp152.2.3.1 netcdf-fortran_4_5_2-gnu-hpc-devel-4.5.2-lp152.2.3.1 netcdf-fortran_4_5_2-gnu-hpc-devel-static-4.5.2-lp152.2.3.1 netcdf-fortran_4_5_2-gnu-mpich-hpc-4.5.2-lp152.2.3.1 netcdf-fortran_4_5_2-gnu-mpich-hpc-debugsource-4.5.2-lp152.2.3.1 netcdf-fortran_4_5_2-gnu-mpich-hpc-devel-4.5.2-lp152.2.3.1 netcdf-fortran_4_5_2-gnu-mpich-hpc-devel-static-4.5.2-lp152.2.3.1 netcdf-fortran_4_5_2-gnu-mvapich2-hpc-4.5.2-lp152.2.3.1 netcdf-fortran_4_5_2-gnu-mvapich2-hpc-debugsource-4.5.2-lp152.2.3.1 netcdf-fortran_4_5_2-gnu-mvapich2-hpc-devel-4.5.2-lp152.2.3.1 netcdf-fortran_4_5_2-gnu-mvapich2-hpc-devel-static-4.5.2-lp152.2.3.1 netcdf-fortran_4_5_2-gnu-openmpi2-hpc-4.5.2-lp152.2.3.1 netcdf-fortran_4_5_2-gnu-openmpi2-hpc-debugsource-4.5.2-lp152.2.3.1 netcdf-fortran_4_5_2-gnu-openmpi2-hpc-devel-4.5.2-lp152.2.3.1 netcdf-fortran_4_5_2-gnu-openmpi2-hpc-devel-static-4.5.2-lp152.2.3.1 netcdf-fortran_4_5_2-gnu-openmpi3-hpc-4.5.2-lp152.2.3.1 netcdf-fortran_4_5_2-gnu-openmpi3-hpc-debugsource-4.5.2-lp152.2.3.1 netcdf-fortran_4_5_2-gnu-openmpi3-hpc-devel-4.5.2-lp152.2.3.1 netcdf-fortran_4_5_2-gnu-openmpi3-hpc-devel-static-4.5.2-lp152.2.3.1 netcdf_4_7_3-gnu-hpc-4.7.3-lp152.2.3.1 netcdf_4_7_3-gnu-hpc-debuginfo-4.7.3-lp152.2.3.1 netcdf_4_7_3-gnu-hpc-debugsource-4.7.3-lp152.2.3.1 netcdf_4_7_3-gnu-hpc-devel-4.7.3-lp152.2.3.1 netcdf_4_7_3-gnu-hpc-devel-debuginfo-4.7.3-lp152.2.3.1 netcdf_4_7_3-gnu-hpc-devel-static-4.7.3-lp152.2.3.1 netcdf_4_7_3-gnu-mpich-hpc-4.7.3-lp152.2.3.1 netcdf_4_7_3-gnu-mpich-hpc-debuginfo-4.7.3-lp152.2.3.1 netcdf_4_7_3-gnu-mpich-hpc-debugsource-4.7.3-lp152.2.3.1 netcdf_4_7_3-gnu-mpich-hpc-devel-4.7.3-lp152.2.3.1 netcdf_4_7_3-gnu-mpich-hpc-devel-debuginfo-4.7.3-lp152.2.3.1 netcdf_4_7_3-gnu-mpich-hpc-devel-static-4.7.3-lp152.2.3.1 netcdf_4_7_3-gnu-mvapich2-hpc-4.7.3-lp152.2.3.1 netcdf_4_7_3-gnu-mvapich2-hpc-debuginfo-4.7.3-lp152.2.3.1 netcdf_4_7_3-gnu-mvapich2-hpc-debugsource-4.7.3-lp152.2.3.1 netcdf_4_7_3-gnu-mvapich2-hpc-devel-4.7.3-lp152.2.3.1 netcdf_4_7_3-gnu-mvapich2-hpc-devel-debuginfo-4.7.3-lp152.2.3.1 netcdf_4_7_3-gnu-mvapich2-hpc-devel-static-4.7.3-lp152.2.3.1 netcdf_4_7_3-gnu-openmpi2-hpc-4.7.3-lp152.2.3.1 netcdf_4_7_3-gnu-openmpi2-hpc-debuginfo-4.7.3-lp152.2.3.1 netcdf_4_7_3-gnu-openmpi2-hpc-debugsource-4.7.3-lp152.2.3.1 netcdf_4_7_3-gnu-openmpi2-hpc-devel-4.7.3-lp152.2.3.1 netcdf_4_7_3-gnu-openmpi2-hpc-devel-debuginfo-4.7.3-lp152.2.3.1 netcdf_4_7_3-gnu-openmpi2-hpc-devel-static-4.7.3-lp152.2.3.1 netcdf_4_7_3-gnu-openmpi3-hpc-4.7.3-lp152.2.3.1 netcdf_4_7_3-gnu-openmpi3-hpc-debuginfo-4.7.3-lp152.2.3.1 netcdf_4_7_3-gnu-openmpi3-hpc-debugsource-4.7.3-lp152.2.3.1 netcdf_4_7_3-gnu-openmpi3-hpc-devel-4.7.3-lp152.2.3.1 netcdf_4_7_3-gnu-openmpi3-hpc-devel-debuginfo-4.7.3-lp152.2.3.1 netcdf_4_7_3-gnu-openmpi3-hpc-devel-static-4.7.3-lp152.2.3.1 References: https://bugzilla.suse.com/1173598 https://bugzilla.suse.com/1174177 https://bugzilla.suse.com/1174291

1 0

openSUSE-SU-2020:1302-1: important: Security update for xorg-x11-server
by opensuse-security＠opensuse.org 31 Aug '20

31 Aug '20

openSUSE Security Update: Security update for xorg-x11-server ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1302-1 Rating: important References: #1174633 #1174635 #1174638 Cross-References: CVE-2020-14345 CVE-2020-14346 CVE-2020-14347 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for xorg-x11-server fixes the following issues: - CVE-2020-14347: Leak of uninitialized heap memory from the X server to clients on pixmap allocation (bsc#1174633, ZDI-CAN-11426). - CVE-2020-14346: XIChangeHierarchy Integer Underflow Privilege Escalation Vulnerability (bsc#1174638, ZDI-CAN-11429). - CVE-2020-14345: XKB out-of-bounds access privilege escalation vulnerability (bsc#1174635, ZDI-CAN-11428). This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1302=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): xorg-x11-server-1.20.3-lp152.8.3.1 xorg-x11-server-debuginfo-1.20.3-lp152.8.3.1 xorg-x11-server-debugsource-1.20.3-lp152.8.3.1 xorg-x11-server-extra-1.20.3-lp152.8.3.1 xorg-x11-server-extra-debuginfo-1.20.3-lp152.8.3.1 xorg-x11-server-sdk-1.20.3-lp152.8.3.1 xorg-x11-server-source-1.20.3-lp152.8.3.1 xorg-x11-server-wayland-1.20.3-lp152.8.3.1 xorg-x11-server-wayland-debuginfo-1.20.3-lp152.8.3.1 References: https://www.suse.com/security/cve/CVE-2020-14345.html https://www.suse.com/security/cve/CVE-2020-14346.html https://www.suse.com/security/cve/CVE-2020-14347.html https://bugzilla.suse.com/1174633 https://bugzilla.suse.com/1174635 https://bugzilla.suse.com/1174638

1 0

openSUSE-RU-2020:1301-1: moderate: Recommended update for yast2-firstboot
by maintenance＠opensuse.org 31 Aug '20

31 Aug '20

openSUSE Recommended Update: Recommended update for yast2-firstboot ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1301-1 Rating: moderate References: #1173298 #1174353 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for yast2-firstboot fixes the following issues: - Fix for an issue when YaST firstboot unable to set hostname due to an non-existing function. (bsc#1173298) This update for yast2-network fixes the following issues: - Permit to write networking config changes without touching the service and other components like the firewall. (bsc#1173298) - Permit dot characters in the hostname allowing to specify it as an FQDN. (bsc#1173298) - Fixes an issue not to crash when configuring an IPv6 route through AutoYaST. (bsc#1174353) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1301=1 Package List: - openSUSE Leap 15.2 (noarch): yast2-firstboot-4.2.15-lp152.2.3.1 yast2-network-4.2.75-lp152.2.6.1 References: https://bugzilla.suse.com/1173298 https://bugzilla.suse.com/1174353

1 0

openSUSE-RU-2020:1299-1: moderate: Recommended update for hyper-v
by maintenance＠opensuse.org 31 Aug '20

31 Aug '20

openSUSE Recommended Update: Recommended update for hyper-v ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1299-1 Rating: moderate References: #1093910 #1174443 #1174444 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for hyper-v fixes the following issues: - Remove dependency to network-online.target now that gethostname is used in kvp_daemon. (bsc#1174443, bsc#1174444) - Reopen the devices if read() or write() returns errors. - Use either python2 or python3 for lsvmbus. (bsc#1093910) - Remove sysv init scripts. - Enable build on aarch64. This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1299=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): hyper-v-8-lp152.9.3.1 hyper-v-debuginfo-8-lp152.9.3.1 hyper-v-debugsource-8-lp152.9.3.1 References: https://bugzilla.suse.com/1093910 https://bugzilla.suse.com/1174443 https://bugzilla.suse.com/1174444

1 0

openSUSE-RU-2020:1300-1: important: Recommended update for mariadb
by maintenance＠opensuse.org 31 Aug '20

31 Aug '20

openSUSE Recommended Update: Recommended update for mariadb ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1300-1 Rating: important References: #1173516 #1174559 #1175596 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for mariadb fixes the following issues: - Update to 10.4.14 [bsc#1175596] * release notes: https://mariadb.com/kb/en/library/mariadb-10414-release-notes * change log: https://mariadb.com/kb/en/library/mariadb-10414-changelog - Fix crashes that occurred while creating tables for keystone database. [bsc#1174559, bsc#1173516]. This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1300=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libmariadbd-devel-10.4.14-lp152.2.3.1 libmariadbd19-10.4.14-lp152.2.3.1 libmariadbd19-debuginfo-10.4.14-lp152.2.3.1 mariadb-10.4.14-lp152.2.3.1 mariadb-bench-10.4.14-lp152.2.3.1 mariadb-bench-debuginfo-10.4.14-lp152.2.3.1 mariadb-client-10.4.14-lp152.2.3.1 mariadb-client-debuginfo-10.4.14-lp152.2.3.1 mariadb-debuginfo-10.4.14-lp152.2.3.1 mariadb-debugsource-10.4.14-lp152.2.3.1 mariadb-galera-10.4.14-lp152.2.3.1 mariadb-rpm-macros-10.4.14-lp152.2.3.1 mariadb-test-10.4.14-lp152.2.3.1 mariadb-test-debuginfo-10.4.14-lp152.2.3.1 mariadb-tools-10.4.14-lp152.2.3.1 mariadb-tools-debuginfo-10.4.14-lp152.2.3.1 - openSUSE Leap 15.2 (noarch): mariadb-errormessages-10.4.14-lp152.2.3.1 References: https://bugzilla.suse.com/1173516 https://bugzilla.suse.com/1174559 https://bugzilla.suse.com/1175596

1 0

openSUSE-SU-2020:1304-1: moderate: Security update for inn
by opensuse-security＠opensuse.org 31 Aug '20

31 Aug '20

openSUSE Security Update: Security update for inn ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1304-1 Rating: moderate References: #1172573 Cross-References: CVE-2020-8026 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for inn fixes the following issues: - change file owners in /usr/lib/news to root [boo#1172573] [CVE-2020-8026] This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1304=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): inn-2.5.4-bp151.4.6.1 inn-devel-2.5.4-bp151.4.6.1 mininews-2.5.4-bp151.4.6.1 References: https://www.suse.com/security/cve/CVE-2020-8026.html https://bugzilla.suse.com/1172573

1 0

openSUSE-SU-2020:1303-1: Security update for graphviz
by opensuse-security＠opensuse.org 31 Aug '20

31 Aug '20

openSUSE Security Update: Security update for graphviz ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1303-1 Rating: low References: #1093447 Cross-References: CVE-2018-10196 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for graphviz fixes the following issues: - CVE-2018-10196: Fixed a null dereference in rebuild_vlis (bsc#1093447). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1303=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): graphviz-2.40.1-lp152.7.7.1 graphviz-addons-debuginfo-2.40.1-lp152.7.7.1 graphviz-addons-debugsource-2.40.1-lp152.7.7.1 graphviz-debuginfo-2.40.1-lp152.7.7.1 graphviz-debugsource-2.40.1-lp152.7.7.1 graphviz-devel-2.40.1-lp152.7.7.1 graphviz-doc-2.40.1-lp152.7.7.1 graphviz-gd-2.40.1-lp152.7.7.1 graphviz-gd-debuginfo-2.40.1-lp152.7.7.1 graphviz-gnome-2.40.1-lp152.7.7.1 graphviz-gnome-debuginfo-2.40.1-lp152.7.7.1 graphviz-guile-2.40.1-lp152.7.7.1 graphviz-guile-debuginfo-2.40.1-lp152.7.7.1 graphviz-gvedit-2.40.1-lp152.7.7.1 graphviz-gvedit-debuginfo-2.40.1-lp152.7.7.1 graphviz-java-2.40.1-lp152.7.7.1 graphviz-java-debuginfo-2.40.1-lp152.7.7.1 graphviz-lua-2.40.1-lp152.7.7.1 graphviz-lua-debuginfo-2.40.1-lp152.7.7.1 graphviz-perl-2.40.1-lp152.7.7.1 graphviz-perl-debuginfo-2.40.1-lp152.7.7.1 graphviz-php-2.40.1-lp152.7.7.1 graphviz-php-debuginfo-2.40.1-lp152.7.7.1 graphviz-plugins-core-2.40.1-lp152.7.7.1 graphviz-plugins-core-debuginfo-2.40.1-lp152.7.7.1 graphviz-python-2.40.1-lp152.7.7.1 graphviz-python-debuginfo-2.40.1-lp152.7.7.1 graphviz-ruby-2.40.1-lp152.7.7.1 graphviz-ruby-debuginfo-2.40.1-lp152.7.7.1 graphviz-smyrna-2.40.1-lp152.7.7.1 graphviz-smyrna-debuginfo-2.40.1-lp152.7.7.1 graphviz-tcl-2.40.1-lp152.7.7.1 graphviz-tcl-debuginfo-2.40.1-lp152.7.7.1 libgraphviz6-2.40.1-lp152.7.7.1 libgraphviz6-debuginfo-2.40.1-lp152.7.7.1 References: https://www.suse.com/security/cve/CVE-2018-10196.html https://bugzilla.suse.com/1093447

1 0

openSUSE-RU-2020:1298-1: moderate: Recommended update for samba
by maintenance＠opensuse.org 30 Aug '20

30 Aug '20

openSUSE Recommended Update: Recommended update for samba ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1298-1 Rating: moderate References: #1172810 #1174120 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for samba fixes the following issues: - Add 'libsmbldap0' to 'libsmbldap2' package to fix upgrades from previous versions. (bsc#1172810) - Fix for command 'net' as it is unable to negotiate with 'SMB2'. (bsc#1174120) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1298=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): ctdb-4.9.5+git.350.020abd898fa-lp151.2.30.1 ctdb-debuginfo-4.9.5+git.350.020abd898fa-lp151.2.30.1 ctdb-pcp-pmda-4.9.5+git.350.020abd898fa-lp151.2.30.1 ctdb-pcp-pmda-debuginfo-4.9.5+git.350.020abd898fa-lp151.2.30.1 ctdb-tests-4.9.5+git.350.020abd898fa-lp151.2.30.1 ctdb-tests-debuginfo-4.9.5+git.350.020abd898fa-lp151.2.30.1 libdcerpc-binding0-4.9.5+git.350.020abd898fa-lp151.2.30.1 libdcerpc-binding0-debuginfo-4.9.5+git.350.020abd898fa-lp151.2.30.1 libdcerpc-devel-4.9.5+git.350.020abd898fa-lp151.2.30.1 libdcerpc-samr-devel-4.9.5+git.350.020abd898fa-lp151.2.30.1 libdcerpc-samr0-4.9.5+git.350.020abd898fa-lp151.2.30.1 libdcerpc-samr0-debuginfo-4.9.5+git.350.020abd898fa-lp151.2.30.1 libdcerpc0-4.9.5+git.350.020abd898fa-lp151.2.30.1 libdcerpc0-debuginfo-4.9.5+git.350.020abd898fa-lp151.2.30.1 libndr-devel-4.9.5+git.350.020abd898fa-lp151.2.30.1 libndr-krb5pac-devel-4.9.5+git.350.020abd898fa-lp151.2.30.1 libndr-krb5pac0-4.9.5+git.350.020abd898fa-lp151.2.30.1 libndr-krb5pac0-debuginfo-4.9.5+git.350.020abd898fa-lp151.2.30.1 libndr-nbt-devel-4.9.5+git.350.020abd898fa-lp151.2.30.1 libndr-nbt0-4.9.5+git.350.020abd898fa-lp151.2.30.1 libndr-nbt0-debuginfo-4.9.5+git.350.020abd898fa-lp151.2.30.1 libndr-standard-devel-4.9.5+git.350.020abd898fa-lp151.2.30.1 libndr-standard0-4.9.5+git.350.020abd898fa-lp151.2.30.1 libndr-standard0-debuginfo-4.9.5+git.350.020abd898fa-lp151.2.30.1 libndr0-4.9.5+git.350.020abd898fa-lp151.2.30.1 libndr0-debuginfo-4.9.5+git.350.020abd898fa-lp151.2.30.1 libnetapi-devel-4.9.5+git.350.020abd898fa-lp151.2.30.1 libnetapi0-4.9.5+git.350.020abd898fa-lp151.2.30.1 libnetapi0-debuginfo-4.9.5+git.350.020abd898fa-lp151.2.30.1 libsamba-credentials-devel-4.9.5+git.350.020abd898fa-lp151.2.30.1 libsamba-credentials0-4.9.5+git.350.020abd898fa-lp151.2.30.1 libsamba-credentials0-debuginfo-4.9.5+git.350.020abd898fa-lp151.2.30.1 libsamba-errors-devel-4.9.5+git.350.020abd898fa-lp151.2.30.1 libsamba-errors0-4.9.5+git.350.020abd898fa-lp151.2.30.1 libsamba-errors0-debuginfo-4.9.5+git.350.020abd898fa-lp151.2.30.1 libsamba-hostconfig-devel-4.9.5+git.350.020abd898fa-lp151.2.30.1 libsamba-hostconfig0-4.9.5+git.350.020abd898fa-lp151.2.30.1 libsamba-hostconfig0-debuginfo-4.9.5+git.350.020abd898fa-lp151.2.30.1 libsamba-passdb-devel-4.9.5+git.350.020abd898fa-lp151.2.30.1 libsamba-passdb0-4.9.5+git.350.020abd898fa-lp151.2.30.1 libsamba-passdb0-debuginfo-4.9.5+git.350.020abd898fa-lp151.2.30.1 libsamba-policy-devel-4.9.5+git.350.020abd898fa-lp151.2.30.1 libsamba-policy-python-devel-4.9.5+git.350.020abd898fa-lp151.2.30.1 libsamba-policy-python3-devel-4.9.5+git.350.020abd898fa-lp151.2.30.1 libsamba-policy0-4.9.5+git.350.020abd898fa-lp151.2.30.1 libsamba-policy0-debuginfo-4.9.5+git.350.020abd898fa-lp151.2.30.1 libsamba-policy0-python3-4.9.5+git.350.020abd898fa-lp151.2.30.1 libsamba-policy0-python3-debuginfo-4.9.5+git.350.020abd898fa-lp151.2.30.1 libsamba-util-devel-4.9.5+git.350.020abd898fa-lp151.2.30.1 libsamba-util0-4.9.5+git.350.020abd898fa-lp151.2.30.1 libsamba-util0-debuginfo-4.9.5+git.350.020abd898fa-lp151.2.30.1 libsamdb-devel-4.9.5+git.350.020abd898fa-lp151.2.30.1 libsamdb0-4.9.5+git.350.020abd898fa-lp151.2.30.1 libsamdb0-debuginfo-4.9.5+git.350.020abd898fa-lp151.2.30.1 libsmbclient-devel-4.9.5+git.350.020abd898fa-lp151.2.30.1 libsmbclient0-4.9.5+git.350.020abd898fa-lp151.2.30.1 libsmbclient0-debuginfo-4.9.5+git.350.020abd898fa-lp151.2.30.1 libsmbconf-devel-4.9.5+git.350.020abd898fa-lp151.2.30.1 libsmbconf0-4.9.5+git.350.020abd898fa-lp151.2.30.1 libsmbconf0-debuginfo-4.9.5+git.350.020abd898fa-lp151.2.30.1 libsmbldap-devel-4.9.5+git.350.020abd898fa-lp151.2.30.1 libsmbldap2-4.9.5+git.350.020abd898fa-lp151.2.30.1 libsmbldap2-debuginfo-4.9.5+git.350.020abd898fa-lp151.2.30.1 libtevent-util-devel-4.9.5+git.350.020abd898fa-lp151.2.30.1 libtevent-util0-4.9.5+git.350.020abd898fa-lp151.2.30.1 libtevent-util0-debuginfo-4.9.5+git.350.020abd898fa-lp151.2.30.1 libwbclient-devel-4.9.5+git.350.020abd898fa-lp151.2.30.1 libwbclient0-4.9.5+git.350.020abd898fa-lp151.2.30.1 libwbclient0-debuginfo-4.9.5+git.350.020abd898fa-lp151.2.30.1 samba-4.9.5+git.350.020abd898fa-lp151.2.30.1 samba-ad-dc-4.9.5+git.350.020abd898fa-lp151.2.30.1 samba-ad-dc-debuginfo-4.9.5+git.350.020abd898fa-lp151.2.30.1 samba-client-4.9.5+git.350.020abd898fa-lp151.2.30.1 samba-client-debuginfo-4.9.5+git.350.020abd898fa-lp151.2.30.1 samba-core-devel-4.9.5+git.350.020abd898fa-lp151.2.30.1 samba-debuginfo-4.9.5+git.350.020abd898fa-lp151.2.30.1 samba-debugsource-4.9.5+git.350.020abd898fa-lp151.2.30.1 samba-dsdb-modules-4.9.5+git.350.020abd898fa-lp151.2.30.1 samba-dsdb-modules-debuginfo-4.9.5+git.350.020abd898fa-lp151.2.30.1 samba-libs-4.9.5+git.350.020abd898fa-lp151.2.30.1 samba-libs-debuginfo-4.9.5+git.350.020abd898fa-lp151.2.30.1 samba-libs-python-4.9.5+git.350.020abd898fa-lp151.2.30.1 samba-libs-python-debuginfo-4.9.5+git.350.020abd898fa-lp151.2.30.1 samba-libs-python3-4.9.5+git.350.020abd898fa-lp151.2.30.1 samba-libs-python3-debuginfo-4.9.5+git.350.020abd898fa-lp151.2.30.1 samba-pidl-4.9.5+git.350.020abd898fa-lp151.2.30.1 samba-python-4.9.5+git.350.020abd898fa-lp151.2.30.1 samba-python-debuginfo-4.9.5+git.350.020abd898fa-lp151.2.30.1 samba-python3-4.9.5+git.350.020abd898fa-lp151.2.30.1 samba-python3-debuginfo-4.9.5+git.350.020abd898fa-lp151.2.30.1 samba-test-4.9.5+git.350.020abd898fa-lp151.2.30.1 samba-test-debuginfo-4.9.5+git.350.020abd898fa-lp151.2.30.1 samba-winbind-4.9.5+git.350.020abd898fa-lp151.2.30.1 samba-winbind-debuginfo-4.9.5+git.350.020abd898fa-lp151.2.30.1 - openSUSE Leap 15.1 (noarch): samba-doc-4.9.5+git.350.020abd898fa-lp151.2.30.1 - openSUSE Leap 15.1 (x86_64): libdcerpc-binding0-32bit-4.9.5+git.350.020abd898fa-lp151.2.30.1 libdcerpc-binding0-32bit-debuginfo-4.9.5+git.350.020abd898fa-lp151.2.30.1 libdcerpc-samr0-32bit-4.9.5+git.350.020abd898fa-lp151.2.30.1 libdcerpc-samr0-32bit-debuginfo-4.9.5+git.350.020abd898fa-lp151.2.30.1 libdcerpc0-32bit-4.9.5+git.350.020abd898fa-lp151.2.30.1 libdcerpc0-32bit-debuginfo-4.9.5+git.350.020abd898fa-lp151.2.30.1 libndr-krb5pac0-32bit-4.9.5+git.350.020abd898fa-lp151.2.30.1 libndr-krb5pac0-32bit-debuginfo-4.9.5+git.350.020abd898fa-lp151.2.30.1 libndr-nbt0-32bit-4.9.5+git.350.020abd898fa-lp151.2.30.1 libndr-nbt0-32bit-debuginfo-4.9.5+git.350.020abd898fa-lp151.2.30.1 libndr-standard0-32bit-4.9.5+git.350.020abd898fa-lp151.2.30.1 libndr-standard0-32bit-debuginfo-4.9.5+git.350.020abd898fa-lp151.2.30.1 libndr0-32bit-4.9.5+git.350.020abd898fa-lp151.2.30.1 libndr0-32bit-debuginfo-4.9.5+git.350.020abd898fa-lp151.2.30.1 libnetapi-devel-32bit-4.9.5+git.350.020abd898fa-lp151.2.30.1 libnetapi0-32bit-4.9.5+git.350.020abd898fa-lp151.2.30.1 libnetapi0-32bit-debuginfo-4.9.5+git.350.020abd898fa-lp151.2.30.1 libsamba-credentials0-32bit-4.9.5+git.350.020abd898fa-lp151.2.30.1 libsamba-credentials0-32bit-debuginfo-4.9.5+git.350.020abd898fa-lp151.2.30.1 libsamba-errors0-32bit-4.9.5+git.350.020abd898fa-lp151.2.30.1 libsamba-errors0-32bit-debuginfo-4.9.5+git.350.020abd898fa-lp151.2.30.1 libsamba-hostconfig0-32bit-4.9.5+git.350.020abd898fa-lp151.2.30.1 libsamba-hostconfig0-32bit-debuginfo-4.9.5+git.350.020abd898fa-lp151.2.30.1 libsamba-passdb0-32bit-4.9.5+git.350.020abd898fa-lp151.2.30.1 libsamba-passdb0-32bit-debuginfo-4.9.5+git.350.020abd898fa-lp151.2.30.1 libsamba-policy0-32bit-4.9.5+git.350.020abd898fa-lp151.2.30.1 libsamba-policy0-32bit-debuginfo-4.9.5+git.350.020abd898fa-lp151.2.30.1 libsamba-policy0-python3-32bit-4.9.5+git.350.020abd898fa-lp151.2.30.1 libsamba-policy0-python3-32bit-debuginfo-4.9.5+git.350.020abd898fa-lp151.2.30.1 libsamba-util0-32bit-4.9.5+git.350.020abd898fa-lp151.2.30.1 libsamba-util0-32bit-debuginfo-4.9.5+git.350.020abd898fa-lp151.2.30.1 libsamdb0-32bit-4.9.5+git.350.020abd898fa-lp151.2.30.1 libsamdb0-32bit-debuginfo-4.9.5+git.350.020abd898fa-lp151.2.30.1 libsmbclient0-32bit-4.9.5+git.350.020abd898fa-lp151.2.30.1 libsmbclient0-32bit-debuginfo-4.9.5+git.350.020abd898fa-lp151.2.30.1 libsmbconf0-32bit-4.9.5+git.350.020abd898fa-lp151.2.30.1 libsmbconf0-32bit-debuginfo-4.9.5+git.350.020abd898fa-lp151.2.30.1 libsmbldap2-32bit-4.9.5+git.350.020abd898fa-lp151.2.30.1 libsmbldap2-32bit-debuginfo-4.9.5+git.350.020abd898fa-lp151.2.30.1 libtevent-util0-32bit-4.9.5+git.350.020abd898fa-lp151.2.30.1 libtevent-util0-32bit-debuginfo-4.9.5+git.350.020abd898fa-lp151.2.30.1 libwbclient0-32bit-4.9.5+git.350.020abd898fa-lp151.2.30.1 libwbclient0-32bit-debuginfo-4.9.5+git.350.020abd898fa-lp151.2.30.1 samba-ad-dc-32bit-4.9.5+git.350.020abd898fa-lp151.2.30.1 samba-ad-dc-32bit-debuginfo-4.9.5+git.350.020abd898fa-lp151.2.30.1 samba-ceph-4.9.5+git.350.020abd898fa-lp151.2.30.1 samba-ceph-debuginfo-4.9.5+git.350.020abd898fa-lp151.2.30.1 samba-client-32bit-4.9.5+git.350.020abd898fa-lp151.2.30.1 samba-client-32bit-debuginfo-4.9.5+git.350.020abd898fa-lp151.2.30.1 samba-libs-32bit-4.9.5+git.350.020abd898fa-lp151.2.30.1 samba-libs-32bit-debuginfo-4.9.5+git.350.020abd898fa-lp151.2.30.1 samba-libs-python-32bit-4.9.5+git.350.020abd898fa-lp151.2.30.1 samba-libs-python-32bit-debuginfo-4.9.5+git.350.020abd898fa-lp151.2.30.1 samba-libs-python3-32bit-4.9.5+git.350.020abd898fa-lp151.2.30.1 samba-libs-python3-32bit-debuginfo-4.9.5+git.350.020abd898fa-lp151.2.30.1 samba-winbind-32bit-4.9.5+git.350.020abd898fa-lp151.2.30.1 samba-winbind-32bit-debuginfo-4.9.5+git.350.020abd898fa-lp151.2.30.1 References: https://bugzilla.suse.com/1172810 https://bugzilla.suse.com/1174120

1 0

openSUSE-RU-2020:1290-1: moderate: Recommended update for gnome-shell, gnome-shell-extension-desktop-icons, gnome-shell-extensions
by maintenance＠opensuse.org 30 Aug '20

30 Aug '20

openSUSE Recommended Update: Recommended update for gnome-shell, gnome-shell-extension-desktop-icons, gnome-shell-extensions ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1290-1 Rating: moderate References: #1167276 #1169029 #1169845 #1171822 #1172424 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: This update for gnome-shell, gnome-shell-extension-desktop-icons, gnome-shell-extensions fixes the following issues: Changes in gnome-shell: Update to version 3.34.5 - Leave overview when locking the screen. - Avoid IO on the main thread. - Fix OSK layout fallback for unsupported variants. - Fix high-contrast/symbolic icon mix-up. - Updated translations. - Uniform the checks between SLE and openSUSE. (jsc#SLE-11720) - Show the network agent pop up when required. (bsc#1171822) - Set the button invisible when the user's can_switch is false or user-switch-enabled is disabled. (bsc#1167276) - Remove error in messages log when NetworkManager is not installed. (bsc#1172424) - Remove 'Getting invalid resource scale property' warnings in the log. (bsc#1169845) - Remove error in journal log. (bsc#1169029) Change in gnome-shell-extensions: - Uniform the checks between SLE and openSUSE. (jsc#SLE-11720) Change in gnome-shell-extension-desktop-icons: - Show mounted device icons. (jsc#SLE-12572) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1290=1 Package List: - openSUSE Leap 15.2 (noarch): gnome-shell-classic-3.34.2-lp152.4.3.1 gnome-shell-extension-desktop-icons-19.10.2-lp152.2.3.1 gnome-shell-extensions-common-3.34.2-lp152.4.3.1 gnome-shell-extensions-common-lang-3.34.2-lp152.4.3.1 gnome-shell-lang-3.34.5-lp152.2.3.1 - openSUSE Leap 15.2 (x86_64): gnome-shell-3.34.5-lp152.2.3.1 gnome-shell-calendar-3.34.5-lp152.2.3.1 gnome-shell-calendar-debuginfo-3.34.5-lp152.2.3.1 gnome-shell-classic-session-3.34.2-lp152.4.3.1 gnome-shell-debuginfo-3.34.5-lp152.2.3.1 gnome-shell-debugsource-3.34.5-lp152.2.3.1 gnome-shell-devel-3.34.5-lp152.2.3.1 gnome-shell-extension-user-theme-3.34.2-lp152.4.3.1 References: https://bugzilla.suse.com/1167276 https://bugzilla.suse.com/1169029 https://bugzilla.suse.com/1169845 https://bugzilla.suse.com/1171822 https://bugzilla.suse.com/1172424

1 0

openSUSE-RU-2020:1291-1: moderate: Recommended update for dracut
by maintenance＠opensuse.org 30 Aug '20

30 Aug '20

openSUSE Recommended Update: Recommended update for dracut ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1291-1 Rating: moderate References: #1172807 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for dracut fixes the following issue: - Fix typo in did setup conditional. (bsc#1172807) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1291=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): dracut-044.2-lp151.2.27.1 dracut-debuginfo-044.2-lp151.2.27.1 dracut-debugsource-044.2-lp151.2.27.1 dracut-fips-044.2-lp151.2.27.1 dracut-ima-044.2-lp151.2.27.1 dracut-tools-044.2-lp151.2.27.1 References: https://bugzilla.suse.com/1172807

1 0

openSUSE-SU-2020:1289-1: important: Security update for librepo
by opensuse-security＠opensuse.org 30 Aug '20

30 Aug '20

openSUSE Security Update: Security update for librepo ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1289-1 Rating: important References: #1175475 Cross-References: CVE-2020-14352 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for librepo fixes the following issues: - Fixed path validation to prevent directory traversal attacks (bsc#1175475, CVE-2020-14352) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1289=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): librepo-debuginfo-1.11.2-lp152.2.3.1 librepo-debugsource-1.11.2-lp152.2.3.1 librepo-devel-1.11.2-lp152.2.3.1 librepo0-1.11.2-lp152.2.3.1 librepo0-debuginfo-1.11.2-lp152.2.3.1 python3-librepo-1.11.2-lp152.2.3.1 python3-librepo-debuginfo-1.11.2-lp152.2.3.1 References: https://www.suse.com/security/cve/CVE-2020-14352.html https://bugzilla.suse.com/1175475

1 0

openSUSE-RU-2020:1297-1: moderate: Recommended update for NetworkManager
by maintenance＠opensuse.org 30 Aug '20

30 Aug '20

openSUSE Recommended Update: Recommended update for NetworkManager ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1297-1 Rating: moderate References: #1164642 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for NetworkManager fixes the following issues: - Fix for NetworkManager not to mount automatically entries which are marked as 'noauto' Modify nfs script. (bsc#1164642) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1297=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): NetworkManager-1.22.10-lp152.2.3.1 NetworkManager-debuginfo-1.22.10-lp152.2.3.1 NetworkManager-debugsource-1.22.10-lp152.2.3.1 NetworkManager-devel-1.22.10-lp152.2.3.1 libnm0-1.22.10-lp152.2.3.1 libnm0-debuginfo-1.22.10-lp152.2.3.1 typelib-1_0-NM-1_0-1.22.10-lp152.2.3.1 - openSUSE Leap 15.2 (noarch): NetworkManager-branding-openSUSE-42.1-lp152.2.6.1 NetworkManager-branding-upstream-1.22.10-lp152.2.3.1 NetworkManager-lang-1.22.10-lp152.2.3.1 - openSUSE Leap 15.2 (x86_64): NetworkManager-devel-32bit-1.22.10-lp152.2.3.1 References: https://bugzilla.suse.com/1164642

1 0

openSUSE-RU-2020:1288-1: moderate: Recommended update for gnuhealth, trytond, trytond_account, trytond_account_invoice
by maintenance＠opensuse.org 30 Aug '20

30 Aug '20

openSUSE Recommended Update: Recommended update for gnuhealth, trytond, trytond_account, trytond_account_invoice ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1288-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for gnuhealth, trytond, trytond_account, trytond_account_invoice fixes the following issues: Changes in gnuhealth: version 3.6.5 - HMIS: Update to 3.6.5 including ICD10 codes 2020 - Readme renamed (SUSE -> openSUSE) gnuhealth: Link to oS wiki added - gnuhealth-control updated to 3.6.5-openSUSE * change of translation server for language packs Changes in trytond: - changed trytond.conf to listen to all interfaces - Version 5.0.25 - Bugfix Release - Version 5.0.24 - Bugfix Release * readme renamed (SUSE -> openSUSE) Changes in trytond_account: - Version 5.0.14 - Bugfix Release Changes in trytond_account_invoice: - Version 5.0.9 - Bugfix Release Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1288=1 Package List: - openSUSE Leap 15.2 (noarch): gnuhealth-3.6.5-lp152.4.3.2 gnuhealth-orthanc-3.6.5-lp152.4.3.2 trytond-5.0.25-lp152.2.5.1 trytond_account-5.0.14-lp152.2.3.1 trytond_account_invoice-5.0.9-lp152.2.3.1 References:

1 0

openSUSE-RU-2020:1292-1: moderate: Recommended update for fftw3
by maintenance＠opensuse.org 30 Aug '20

30 Aug '20

openSUSE Recommended Update: Recommended update for fftw3 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1292-1 Rating: moderate References: #1174329 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for fftw3 fixes the following issues: - Fixes an issues when a malformatted spec file caused issues during building 'openmpi'. (bsc#1174329) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1292=1 Package List: - openSUSE Leap 15.1 (x86_64): fftw3-debugsource-3.3.6-lp151.6.3.1 fftw3-devel-3.3.6-lp151.6.3.1 fftw3-devel-debuginfo-3.3.6-lp151.6.3.1 fftw3-gnu-hpc-devel-3.3.6-lp151.6.3.1 fftw3-gnu-mpich-hpc-devel-3.3.6-lp151.6.3.1 fftw3-gnu-mvapich2-hpc-devel-3.3.6-lp151.6.3.1 fftw3-gnu-openmpi1-hpc-devel-3.3.6-lp151.6.3.1 fftw3-gnu-openmpi2-hpc-devel-3.3.6-lp151.6.3.1 fftw3-gnu-openmpi3-hpc-devel-3.3.6-lp151.6.3.1 fftw3-mpi-devel-3.3.6-lp151.6.3.1 fftw3-openmp-devel-3.3.6-lp151.6.3.1 fftw3-threads-devel-3.3.6-lp151.6.3.1 fftw3_3_3_6-gnu-hpc-debuginfo-3.3.6-lp151.6.3.1 fftw3_3_3_6-gnu-hpc-debugsource-3.3.6-lp151.6.3.1 fftw3_3_3_6-gnu-hpc-devel-3.3.6-lp151.6.3.1 fftw3_3_3_6-gnu-hpc-devel-debuginfo-3.3.6-lp151.6.3.1 fftw3_3_3_6-gnu-hpc-devel-static-3.3.6-lp151.6.3.1 fftw3_3_3_6-gnu-mpich-hpc-debuginfo-3.3.6-lp151.6.3.1 fftw3_3_3_6-gnu-mpich-hpc-debugsource-3.3.6-lp151.6.3.1 fftw3_3_3_6-gnu-mpich-hpc-devel-3.3.6-lp151.6.3.1 fftw3_3_3_6-gnu-mpich-hpc-devel-debuginfo-3.3.6-lp151.6.3.1 fftw3_3_3_6-gnu-mpich-hpc-devel-static-3.3.6-lp151.6.3.1 fftw3_3_3_6-gnu-mvapich2-hpc-debuginfo-3.3.6-lp151.6.3.1 fftw3_3_3_6-gnu-mvapich2-hpc-debugsource-3.3.6-lp151.6.3.1 fftw3_3_3_6-gnu-mvapich2-hpc-devel-3.3.6-lp151.6.3.1 fftw3_3_3_6-gnu-mvapich2-hpc-devel-debuginfo-3.3.6-lp151.6.3.1 fftw3_3_3_6-gnu-mvapich2-hpc-devel-static-3.3.6-lp151.6.3.1 fftw3_3_3_6-gnu-openmpi1-hpc-debuginfo-3.3.6-lp151.6.3.1 fftw3_3_3_6-gnu-openmpi1-hpc-debugsource-3.3.6-lp151.6.3.1 fftw3_3_3_6-gnu-openmpi1-hpc-devel-3.3.6-lp151.6.3.1 fftw3_3_3_6-gnu-openmpi1-hpc-devel-debuginfo-3.3.6-lp151.6.3.1 fftw3_3_3_6-gnu-openmpi1-hpc-devel-static-3.3.6-lp151.6.3.1 fftw3_3_3_6-gnu-openmpi2-hpc-debuginfo-3.3.6-lp151.6.3.1 fftw3_3_3_6-gnu-openmpi2-hpc-debugsource-3.3.6-lp151.6.3.1 fftw3_3_3_6-gnu-openmpi2-hpc-devel-3.3.6-lp151.6.3.1 fftw3_3_3_6-gnu-openmpi2-hpc-devel-debuginfo-3.3.6-lp151.6.3.1 fftw3_3_3_6-gnu-openmpi2-hpc-devel-static-3.3.6-lp151.6.3.1 fftw3_3_3_6-gnu-openmpi3-hpc-debuginfo-3.3.6-lp151.6.3.1 fftw3_3_3_6-gnu-openmpi3-hpc-debugsource-3.3.6-lp151.6.3.1 fftw3_3_3_6-gnu-openmpi3-hpc-devel-3.3.6-lp151.6.3.1 fftw3_3_3_6-gnu-openmpi3-hpc-devel-debuginfo-3.3.6-lp151.6.3.1 fftw3_3_3_6-gnu-openmpi3-hpc-devel-static-3.3.6-lp151.6.3.1 libfftw3-3-3.3.6-lp151.6.3.1 libfftw3-3-debuginfo-3.3.6-lp151.6.3.1 libfftw3-gnu-hpc-3.3.6-lp151.6.3.1 libfftw3-gnu-mpich-hpc-3.3.6-lp151.6.3.1 libfftw3-gnu-mvapich2-hpc-3.3.6-lp151.6.3.1 libfftw3-gnu-openmpi1-hpc-3.3.6-lp151.6.3.1 libfftw3-gnu-openmpi2-hpc-3.3.6-lp151.6.3.1 libfftw3-gnu-openmpi3-hpc-3.3.6-lp151.6.3.1 libfftw3_3_3_6-gnu-hpc-3.3.6-lp151.6.3.1 libfftw3_3_3_6-gnu-hpc-debuginfo-3.3.6-lp151.6.3.1 libfftw3_3_3_6-gnu-mpich-hpc-3.3.6-lp151.6.3.1 libfftw3_3_3_6-gnu-mpich-hpc-debuginfo-3.3.6-lp151.6.3.1 libfftw3_3_3_6-gnu-mvapich2-hpc-3.3.6-lp151.6.3.1 libfftw3_3_3_6-gnu-mvapich2-hpc-debuginfo-3.3.6-lp151.6.3.1 libfftw3_3_3_6-gnu-openmpi1-hpc-3.3.6-lp151.6.3.1 libfftw3_3_3_6-gnu-openmpi1-hpc-debuginfo-3.3.6-lp151.6.3.1 libfftw3_3_3_6-gnu-openmpi2-hpc-3.3.6-lp151.6.3.1 libfftw3_3_3_6-gnu-openmpi2-hpc-debuginfo-3.3.6-lp151.6.3.1 libfftw3_3_3_6-gnu-openmpi3-hpc-3.3.6-lp151.6.3.1 libfftw3_3_3_6-gnu-openmpi3-hpc-debuginfo-3.3.6-lp151.6.3.1 libfftw3_mpi3-3.3.6-lp151.6.3.1 libfftw3_mpi3-debuginfo-3.3.6-lp151.6.3.1 libfftw3_omp3-3.3.6-lp151.6.3.1 libfftw3_omp3-debuginfo-3.3.6-lp151.6.3.1 libfftw3_threads3-3.3.6-lp151.6.3.1 libfftw3_threads3-debuginfo-3.3.6-lp151.6.3.1 References: https://bugzilla.suse.com/1174329

1 0

openSUSE-SU-2020:1293-1: moderate: Security update for apache2
by opensuse-security＠opensuse.org 30 Aug '20

30 Aug '20

openSUSE Security Update: Security update for apache2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1293-1 Rating: moderate References: #1175070 #1175071 #1175074 Cross-References: CVE-2020-11984 CVE-2020-11993 CVE-2020-9490 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for apache2 fixes the following issues: - CVE-2020-9490: Fixed a crash caused by a specially crafted value for the 'Cache-Digest' header in a HTTP/2 request (bsc#1175071). - CVE-2020-11984: Fixed an information disclosure bug in mod_proxy_uwsgi (bsc#1175074). - CVE-2020-11993: When trace/debug was enabled for the HTTP/2 module logging statements were made on the wrong connection (bsc#1175070). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1293=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): apache2-2.4.33-lp151.8.15.1 apache2-debuginfo-2.4.33-lp151.8.15.1 apache2-debugsource-2.4.33-lp151.8.15.1 apache2-devel-2.4.33-lp151.8.15.1 apache2-event-2.4.33-lp151.8.15.1 apache2-event-debuginfo-2.4.33-lp151.8.15.1 apache2-example-pages-2.4.33-lp151.8.15.1 apache2-prefork-2.4.33-lp151.8.15.1 apache2-prefork-debuginfo-2.4.33-lp151.8.15.1 apache2-utils-2.4.33-lp151.8.15.1 apache2-utils-debuginfo-2.4.33-lp151.8.15.1 apache2-worker-2.4.33-lp151.8.15.1 apache2-worker-debuginfo-2.4.33-lp151.8.15.1 - openSUSE Leap 15.1 (noarch): apache2-doc-2.4.33-lp151.8.15.1 References: https://www.suse.com/security/cve/CVE-2020-11984.html https://www.suse.com/security/cve/CVE-2020-11993.html https://www.suse.com/security/cve/CVE-2020-9490.html https://bugzilla.suse.com/1175070 https://bugzilla.suse.com/1175071 https://bugzilla.suse.com/1175074

1 0

openSUSE-RU-2020:1296-1: moderate: Recommended update for perl-Bootloader
by maintenance＠opensuse.org 30 Aug '20

30 Aug '20

openSUSE Recommended Update: Recommended update for perl-Bootloader ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1296-1 Rating: moderate References: #1174320 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for perl-Bootloader fixes the following issues: Update from version 0.928 to version 0.931 - The *grub2* module directory has been moved to */usr/share/grub2*, the *tpm.mod* is now checked there. (bsc#1174320) - Reduce the number of warning about fstab. - Do not warn about missing *SECURE_BOOT* sysconfig on systems with a minimalistic */etc/sysconfig/bootloader*. This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1296=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): perl-Bootloader-0.931-lp152.2.3.1 perl-Bootloader-YAML-0.931-lp152.2.3.1 References: https://bugzilla.suse.com/1174320

1 0

openSUSE-SU-2020:1294-1: Security update for graphviz
by opensuse-security＠opensuse.org 30 Aug '20

30 Aug '20

openSUSE Security Update: Security update for graphviz ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1294-1 Rating: low References: #1093447 Cross-References: CVE-2018-10196 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for graphviz fixes the following issues: - CVE-2018-10196: Fixed a null dereference in rebuild_vlis (bsc#1093447). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1294=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): graphviz-2.40.1-lp151.6.6.1 graphviz-addons-debuginfo-2.40.1-lp151.6.6.1 graphviz-addons-debugsource-2.40.1-lp151.6.6.1 graphviz-debuginfo-2.40.1-lp151.6.6.1 graphviz-debugsource-2.40.1-lp151.6.6.1 graphviz-devel-2.40.1-lp151.6.6.1 graphviz-doc-2.40.1-lp151.6.6.1 graphviz-gd-2.40.1-lp151.6.6.1 graphviz-gd-debuginfo-2.40.1-lp151.6.6.1 graphviz-gnome-2.40.1-lp151.6.6.1 graphviz-gnome-debuginfo-2.40.1-lp151.6.6.1 graphviz-guile-2.40.1-lp151.6.6.1 graphviz-guile-debuginfo-2.40.1-lp151.6.6.1 graphviz-gvedit-2.40.1-lp151.6.6.1 graphviz-gvedit-debuginfo-2.40.1-lp151.6.6.1 graphviz-java-2.40.1-lp151.6.6.1 graphviz-java-debuginfo-2.40.1-lp151.6.6.1 graphviz-lua-2.40.1-lp151.6.6.1 graphviz-lua-debuginfo-2.40.1-lp151.6.6.1 graphviz-perl-2.40.1-lp151.6.6.1 graphviz-perl-debuginfo-2.40.1-lp151.6.6.1 graphviz-php-2.40.1-lp151.6.6.1 graphviz-php-debuginfo-2.40.1-lp151.6.6.1 graphviz-plugins-core-2.40.1-lp151.6.6.1 graphviz-plugins-core-debuginfo-2.40.1-lp151.6.6.1 graphviz-python-2.40.1-lp151.6.6.1 graphviz-python-debuginfo-2.40.1-lp151.6.6.1 graphviz-ruby-2.40.1-lp151.6.6.1 graphviz-ruby-debuginfo-2.40.1-lp151.6.6.1 graphviz-smyrna-2.40.1-lp151.6.6.1 graphviz-smyrna-debuginfo-2.40.1-lp151.6.6.1 graphviz-tcl-2.40.1-lp151.6.6.1 graphviz-tcl-debuginfo-2.40.1-lp151.6.6.1 libgraphviz6-2.40.1-lp151.6.6.1 libgraphviz6-debuginfo-2.40.1-lp151.6.6.1 References: https://www.suse.com/security/cve/CVE-2018-10196.html https://bugzilla.suse.com/1093447

1 0

openSUSE-RU-2020:1295-1: moderate: Recommended update for suse-prime
by maintenance＠opensuse.org 30 Aug '20

30 Aug '20

openSUSE Recommended Update: Recommended update for suse-prime ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1295-1 Rating: moderate References: #1173632 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for suse-prime fixes the following issues: Update from version 0.7.7 to version 0.7.14 - Avoid endless loop when nvidia modules cannot be unloaded. (bsc#1173632) - Fixes *user_logout_waiter* for gdm autologin. - Prevents intermittent 1s - 1.5s freezes on Turing GPU's in nvidia mode. - Improved documentation: * fixed requirements for DynamicPowerManagement to power off NVIDIA GPU (Turing GPU or later is needed!) * Better explain power-off/powersave option of NVIDIA GPU * Improved documentation about the requirements for NVIDIA's PRIME render offload support; it needs Xserver of Leap 15.2 or later * Fixed syntax in command - Use full path in invoking prime-select - Blacklist *ipmi_msghandler*, *ipmi_devintf* kernel modules Make sure these kernel modules are not loaded. Otherwise it may not be possible to turn off NVIDIA GPU. This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1295=1 Package List: - openSUSE Leap 15.2 (noarch): suse-prime-0.7.14-lp152.2.3.1 suse-prime-bbswitch-0.7.14-lp152.2.3.1 References: https://bugzilla.suse.com/1173632

1 0

openSUSE-RU-2020:1287-1: moderate: Recommended update for hyper-v
by maintenance＠opensuse.org 29 Aug '20

29 Aug '20

openSUSE Recommended Update: Recommended update for hyper-v ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1287-1 Rating: moderate References: #1093910 #1100758 #1174443 #1174444 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for hyper-v fixes the following issues: - Remove dependency to network-online.target now that gethostname is used in kvp_daemon. (bsc#1174443, bsc#1174444) - Reopen the devices if read() or write() returns errors - Use either python2 or python3 for lsvmbus. (bsc#1093910) - Remove sysv init scripts - Enable build on aarch64 - Use gethostname for async name resolution. (bsc#1100758) - Asynchronous name resolution in kvp_daemon. (bsc#1100758) - kvp: eliminate 'may be used uninitialized' warning - Fixed Python pep8/flake8 warnings for lsvmbus - Replace GPLv2 boilerplate/reference with SPDX - Fix a warning of buffer overflow with gcc 8.0.1 - fcopy: set 'error' in case an unknown operation was requested - vss: fix loop device detection. - Fix IP reporting by KVP daemon with SRIOV - Fix a bug in the key delete code - Fix compiler warnings about major/target_fname This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1287=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): hyper-v-8-lp151.6.3.1 hyper-v-debuginfo-8-lp151.6.3.1 hyper-v-debugsource-8-lp151.6.3.1 References: https://bugzilla.suse.com/1093910 https://bugzilla.suse.com/1100758 https://bugzilla.suse.com/1174443 https://bugzilla.suse.com/1174444

1 0

openSUSE-RU-2020:1284-1: moderate: Recommended update for yast2-theme
by maintenance＠opensuse.org 29 Aug '20

29 Aug '20

openSUSE Recommended Update: Recommended update for yast2-theme ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1284-1 Rating: moderate References: #1158298 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-theme fixes the following issues: - Add raleway fonts as dependency. (bsc#1158298) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1284=1 Package List: - openSUSE Leap 15.2 (noarch): yast2-theme-4.2.10-lp152.2.3.1 yast2-theme-breeze-4.2.10-lp152.2.3.1 yast2-theme-oxygen-4.2.10-lp152.2.3.1 References: https://bugzilla.suse.com/1158298

1 0

openSUSE-SU-2020:1282-1: important: Security update for grub2
by opensuse-security＠opensuse.org 29 Aug '20

29 Aug '20

openSUSE Security Update: Security update for grub2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1282-1 Rating: important References: #1172745 #1174421 Cross-References: CVE-2020-15705 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for grub2 fixes the following issue: - CVE-2020-15705: Fail kernel validation without shim protocol (bsc#1174421). - Add fibre channel device's ofpath support to grub-ofpathname and search hint to speed up root device discovery (bsc#1172745). This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1282=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): grub2-2.04-lp152.7.9.1 grub2-branding-upstream-2.04-lp152.7.9.1 grub2-debuginfo-2.04-lp152.7.9.1 grub2-debugsource-2.04-lp152.7.9.1 - openSUSE Leap 15.2 (noarch): grub2-i386-efi-2.04-lp152.7.9.1 grub2-i386-efi-debug-2.04-lp152.7.9.1 grub2-i386-pc-2.04-lp152.7.9.1 grub2-i386-pc-debug-2.04-lp152.7.9.1 grub2-i386-xen-2.04-lp152.7.9.1 grub2-snapper-plugin-2.04-lp152.7.9.1 grub2-systemd-sleep-plugin-2.04-lp152.7.9.1 grub2-x86_64-efi-2.04-lp152.7.9.1 grub2-x86_64-efi-debug-2.04-lp152.7.9.1 grub2-x86_64-xen-2.04-lp152.7.9.1 References: https://www.suse.com/security/cve/CVE-2020-15705.html https://bugzilla.suse.com/1172745 https://bugzilla.suse.com/1174421

1 0

openSUSE-RU-2020:1286-1: moderate: Recommended update for yast2
by maintenance＠opensuse.org 29 Aug '20

29 Aug '20

openSUSE Recommended Update: Recommended update for yast2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1286-1 Rating: moderate References: #1173133 #1174183 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for yast2 fixes the following issues: - update 'is_wsl' function to match 'wsl1' and 'wsl2' os-release spellings. (bsc#1174183) - Fix for not to start user interface before evaluating current language settings. (bsc#1173133) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1286=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): yast2-4.2.87-lp152.2.6.1 yast2-logs-4.2.87-lp152.2.6.1 References: https://bugzilla.suse.com/1173133 https://bugzilla.suse.com/1174183

1 0

openSUSE-SU-2020:1285-1: moderate: Security update for apache2
by opensuse-security＠opensuse.org 29 Aug '20

29 Aug '20

openSUSE Security Update: Security update for apache2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1285-1 Rating: moderate References: #1174052 #1175070 #1175071 #1175074 Cross-References: CVE-2020-11984 CVE-2020-11993 CVE-2020-9490 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves three vulnerabilities and has one errata is now available. Description: This update for apache2 fixes the following issues: - CVE-2020-9490: Fixed a crash caused by a specially crafted value for the 'Cache-Digest' header in a HTTP/2 request (bsc#1175071). - CVE-2020-11984: Fixed an information disclosure bug in mod_proxy_uwsgi (bsc#1175074). - CVE-2020-11993: When trace/debug was enabled for the HTTP/2 module logging statements were made on the wrong connection (bsc#1175070). - Solve a crash in mod_proxy_uwsgi for empty values of environment variables. (bsc#1174052) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1285=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): apache2-2.4.43-lp152.2.3.1 apache2-debuginfo-2.4.43-lp152.2.3.1 apache2-debugsource-2.4.43-lp152.2.3.1 apache2-devel-2.4.43-lp152.2.3.1 apache2-event-2.4.43-lp152.2.3.1 apache2-event-debuginfo-2.4.43-lp152.2.3.1 apache2-example-pages-2.4.43-lp152.2.3.1 apache2-prefork-2.4.43-lp152.2.3.1 apache2-prefork-debuginfo-2.4.43-lp152.2.3.1 apache2-utils-2.4.43-lp152.2.3.1 apache2-utils-debuginfo-2.4.43-lp152.2.3.1 apache2-worker-2.4.43-lp152.2.3.1 apache2-worker-debuginfo-2.4.43-lp152.2.3.1 - openSUSE Leap 15.2 (noarch): apache2-doc-2.4.43-lp152.2.3.1 References: https://www.suse.com/security/cve/CVE-2020-11984.html https://www.suse.com/security/cve/CVE-2020-11993.html https://www.suse.com/security/cve/CVE-2020-9490.html https://bugzilla.suse.com/1174052 https://bugzilla.suse.com/1175070 https://bugzilla.suse.com/1175071 https://bugzilla.suse.com/1175074

1 0

openSUSE-RU-2020:1281-1: moderate: Recommended update for gstreamer
by maintenance＠opensuse.org 29 Aug '20

29 Aug '20

openSUSE Recommended Update: Recommended update for gstreamer ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1281-1 Rating: moderate References: #1097405 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gstreamer fixes the following issue: - Fix a crash in gstreamer. (bsc#1097405) GstDeviceProvider has a started_count private variable, start will add 1 to it and stop will subtract 1 from it. However, current code forget to add 1 if it was already started, so if we start it twice and then stop it twice, it will crash at the second stop call. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1281=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): gstreamer-1.12.5-lp151.3.6.1 gstreamer-debuginfo-1.12.5-lp151.3.6.1 gstreamer-debugsource-1.12.5-lp151.3.6.1 gstreamer-devel-1.12.5-lp151.3.6.1 gstreamer-doc-1.12.5-lp151.3.6.1 gstreamer-utils-1.12.5-lp151.3.6.1 gstreamer-utils-debuginfo-1.12.5-lp151.3.6.1 libgstreamer-1_0-0-1.12.5-lp151.3.6.1 libgstreamer-1_0-0-debuginfo-1.12.5-lp151.3.6.1 typelib-1_0-Gst-1_0-1.12.5-lp151.3.6.1 - openSUSE Leap 15.1 (x86_64): gstreamer-32bit-1.12.5-lp151.3.6.1 gstreamer-32bit-debuginfo-1.12.5-lp151.3.6.1 gstreamer-devel-32bit-1.12.5-lp151.3.6.1 libgstreamer-1_0-0-32bit-1.12.5-lp151.3.6.1 libgstreamer-1_0-0-32bit-debuginfo-1.12.5-lp151.3.6.1 typelib-1_0-Gst-1_0-32bit-1.12.5-lp151.3.6.1 - openSUSE Leap 15.1 (noarch): gstreamer-lang-1.12.5-lp151.3.6.1 References: https://bugzilla.suse.com/1097405

1 0

openSUSE-SU-2020:1280-1: important: Security update for grub2
by opensuse-security＠opensuse.org 29 Aug '20

29 Aug '20

openSUSE Security Update: Security update for grub2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1280-1 Rating: important References: #1172745 #1174421 Cross-References: CVE-2020-15705 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for grub2 fixes the following issues: - CVE-2020-15705: Fail kernel validation without shim protocol (bsc#1174421). - Add fibre channel device's ofpath support to grub-ofpathname and search hint to speed up root device discovery (bsc#1172745). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1280=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): grub2-2.02-lp151.21.27.1 grub2-branding-upstream-2.02-lp151.21.27.1 grub2-debuginfo-2.02-lp151.21.27.1 grub2-debugsource-2.02-lp151.21.27.1 - openSUSE Leap 15.1 (noarch): grub2-i386-efi-2.02-lp151.21.27.1 grub2-i386-pc-2.02-lp151.21.27.1 grub2-i386-xen-2.02-lp151.21.27.1 grub2-snapper-plugin-2.02-lp151.21.27.1 grub2-systemd-sleep-plugin-2.02-lp151.21.27.1 grub2-x86_64-efi-2.02-lp151.21.27.1 grub2-x86_64-xen-2.02-lp151.21.27.1 References: https://www.suse.com/security/cve/CVE-2020-15705.html https://bugzilla.suse.com/1172745 https://bugzilla.suse.com/1174421

1 0

openSUSE-RU-2020:1283-1: moderate: Recommended update for python-azure-agent
by maintenance＠opensuse.org 29 Aug '20

29 Aug '20

openSUSE Recommended Update: Recommended update for python-azure-agent ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1283-1 Rating: moderate References: #1175198 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-azure-agent contains the following fix: Drop unnecessary path for sudoers handle. (bsc#1175198) - sudoers file is managed by cloud-init we no longer need this hack This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1283=1 Package List: - openSUSE Leap 15.2 (noarch): python-azure-agent-2.2.45-lp152.3.6.1 python-azure-agent-test-2.2.45-lp152.3.6.1 References: https://bugzilla.suse.com/1175198

1 0

openSUSE-SU-2020:1279-1: important: Security update for xorg-x11-server
by opensuse-security＠opensuse.org 29 Aug '20

29 Aug '20

openSUSE Security Update: Security update for xorg-x11-server ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1279-1 Rating: important References: #1174633 #1174635 #1174638 Cross-References: CVE-2020-14345 CVE-2020-14346 CVE-2020-14347 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for xorg-x11-server fixes the following issues: - CVE-2020-14347: Leak of uninitialized heap memory from the X server to clients on pixmap allocation (bsc#1174633, ZDI-CAN-11426). - CVE-2020-14346: XIChangeHierarchy Integer Underflow Privilege Escalation Vulnerability (bsc#1174638, ZDI-CAN-11429). - CVE-2020-14345: XKB out-of-bounds access privilege escalation vulnerability (bsc#1174635, ZDI-CAN-11428). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1279=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): xorg-x11-server-1.20.3-lp151.4.3.1 xorg-x11-server-debuginfo-1.20.3-lp151.4.3.1 xorg-x11-server-debugsource-1.20.3-lp151.4.3.1 xorg-x11-server-extra-1.20.3-lp151.4.3.1 xorg-x11-server-extra-debuginfo-1.20.3-lp151.4.3.1 xorg-x11-server-sdk-1.20.3-lp151.4.3.1 xorg-x11-server-source-1.20.3-lp151.4.3.1 xorg-x11-server-wayland-1.20.3-lp151.4.3.1 xorg-x11-server-wayland-debuginfo-1.20.3-lp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2020-14345.html https://www.suse.com/security/cve/CVE-2020-14346.html https://www.suse.com/security/cve/CVE-2020-14347.html https://bugzilla.suse.com/1174633 https://bugzilla.suse.com/1174635 https://bugzilla.suse.com/1174638

1 0

openSUSE-SU-2020:1278-1: moderate: Security update for gettext-runtime
by opensuse-security＠opensuse.org 28 Aug '20

28 Aug '20

openSUSE Security Update: Security update for gettext-runtime ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1278-1 Rating: moderate References: #1106843 #1113719 #941629 Cross-References: CVE-2018-18751 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update for gettext-runtime fixes the following issues: - Fix boo941629-unnessary-rpath-on-standard-path.patch (bsc#941629) - Added msgfmt-double-free.patch to fix a double free error (CVE-2018-18751 bsc#1113719) - Add patch msgfmt-reset-msg-length-after-remove.patch which does reset the length of message string after a line has been removed (bsc#1106843) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1278=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): gettext-runtime-0.19.8.1-lp152.6.3.1 gettext-runtime-debuginfo-0.19.8.1-lp152.6.3.1 gettext-runtime-debugsource-0.19.8.1-lp152.6.3.1 gettext-runtime-mini-0.19.8.1-lp152.6.3.1 gettext-runtime-mini-debuginfo-0.19.8.1-lp152.6.3.1 gettext-runtime-mini-debugsource-0.19.8.1-lp152.6.3.1 gettext-tools-0.19.8.1-lp152.6.3.1 gettext-tools-debuginfo-0.19.8.1-lp152.6.3.1 gettext-tools-mini-0.19.8.1-lp152.6.3.1 gettext-tools-mini-debuginfo-0.19.8.1-lp152.6.3.1 - openSUSE Leap 15.2 (noarch): gettext-runtime-mini-tools-doc-0.19.8.1-lp152.6.3.1 gettext-runtime-tools-doc-0.19.8.1-lp152.6.3.1 - openSUSE Leap 15.2 (x86_64): gettext-csharp-0.19.8.1-lp152.6.3.1 gettext-java-0.19.8.1-lp152.6.3.1 gettext-runtime-32bit-0.19.8.1-lp152.6.3.1 gettext-runtime-32bit-debuginfo-0.19.8.1-lp152.6.3.1 References: https://www.suse.com/security/cve/CVE-2018-18751.html https://bugzilla.suse.com/1106843 https://bugzilla.suse.com/1113719 https://bugzilla.suse.com/941629

1 0

openSUSE-SU-2020:1271-1: moderate: Security update for inn
by opensuse-security＠opensuse.org 27 Aug '20

27 Aug '20

openSUSE Security Update: Security update for inn ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1271-1 Rating: moderate References: #1172573 Cross-References: CVE-2020-8026 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for inn fixes the following issues: - change file owners in /usr/lib/news to root [boo#1172573] [CVE-2020-8026] Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1271=1 Package List: - openSUSE Leap 15.1 (x86_64): inn-2.5.4-lp151.3.6.1 inn-debuginfo-2.5.4-lp151.3.6.1 inn-debugsource-2.5.4-lp151.3.6.1 inn-devel-2.5.4-lp151.3.6.1 mininews-2.5.4-lp151.3.6.1 mininews-debuginfo-2.5.4-lp151.3.6.1 References: https://www.suse.com/security/cve/CVE-2020-8026.html https://bugzilla.suse.com/1172573

1 0

openSUSE-RU-2020:1273-1: Recommended update for petsc
by maintenance＠opensuse.org 27 Aug '20

27 Aug '20

openSUSE Recommended Update: Recommended update for petsc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1273-1 Rating: low References: #1173269 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for petsc fixes the following issue: - Build the documentation package for SLE. (bsc#1173269) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1273=1 Package List: - openSUSE Leap 15.2 (noarch): petsc-doc-3.12.2-lp152.2.3.1 - openSUSE Leap 15.2 (x86_64): libpetsc-gnu-mpich-hpc-3.12.2-lp152.2.3.1 libpetsc-gnu-mvapich2-hpc-3.12.2-lp152.2.3.1 libpetsc-gnu-openmpi2-hpc-3.12.2-lp152.2.3.1 libpetsc-gnu-openmpi3-hpc-3.12.2-lp152.2.3.1 libpetsc3-3.12.2-lp152.2.3.1 libpetsc3-debuginfo-3.12.2-lp152.2.3.1 libpetsc3-openmpi2-3.12.2-lp152.2.3.1 libpetsc3-openmpi2-debuginfo-3.12.2-lp152.2.3.1 libpetsc3-openmpi3-3.12.2-lp152.2.3.1 libpetsc3-openmpi3-debuginfo-3.12.2-lp152.2.3.1 libpetsc_3_12_2-gnu-mpich-hpc-3.12.2-lp152.2.3.1 libpetsc_3_12_2-gnu-mpich-hpc-debuginfo-3.12.2-lp152.2.3.1 libpetsc_3_12_2-gnu-mvapich2-hpc-3.12.2-lp152.2.3.1 libpetsc_3_12_2-gnu-mvapich2-hpc-debuginfo-3.12.2-lp152.2.3.1 libpetsc_3_12_2-gnu-openmpi2-hpc-3.12.2-lp152.2.3.1 libpetsc_3_12_2-gnu-openmpi2-hpc-debuginfo-3.12.2-lp152.2.3.1 libpetsc_3_12_2-gnu-openmpi3-hpc-3.12.2-lp152.2.3.1 libpetsc_3_12_2-gnu-openmpi3-hpc-debuginfo-3.12.2-lp152.2.3.1 petsc-debugsource-3.12.2-lp152.2.3.1 petsc-devel-3.12.2-lp152.2.3.1 petsc-gnu-mpich-hpc-devel-3.12.2-lp152.2.3.1 petsc-gnu-mvapich2-hpc-devel-3.12.2-lp152.2.3.1 petsc-gnu-openmpi2-hpc-devel-3.12.2-lp152.2.3.1 petsc-gnu-openmpi3-hpc-devel-3.12.2-lp152.2.3.1 petsc-openmpi2-debugsource-3.12.2-lp152.2.3.1 petsc-openmpi2-devel-3.12.2-lp152.2.3.1 petsc-openmpi3-debugsource-3.12.2-lp152.2.3.1 petsc-openmpi3-devel-3.12.2-lp152.2.3.1 petsc_3_12_2-gnu-mpich-hpc-debugsource-3.12.2-lp152.2.3.1 petsc_3_12_2-gnu-mpich-hpc-devel-3.12.2-lp152.2.3.1 petsc_3_12_2-gnu-mpich-hpc-saws-3.12.2-lp152.2.3.1 petsc_3_12_2-gnu-mvapich2-hpc-debugsource-3.12.2-lp152.2.3.1 petsc_3_12_2-gnu-mvapich2-hpc-devel-3.12.2-lp152.2.3.1 petsc_3_12_2-gnu-mvapich2-hpc-saws-3.12.2-lp152.2.3.1 petsc_3_12_2-gnu-openmpi2-hpc-debugsource-3.12.2-lp152.2.3.1 petsc_3_12_2-gnu-openmpi2-hpc-devel-3.12.2-lp152.2.3.1 petsc_3_12_2-gnu-openmpi2-hpc-saws-3.12.2-lp152.2.3.1 petsc_3_12_2-gnu-openmpi3-hpc-debugsource-3.12.2-lp152.2.3.1 petsc_3_12_2-gnu-openmpi3-hpc-devel-3.12.2-lp152.2.3.1 petsc_3_12_2-gnu-openmpi3-hpc-saws-3.12.2-lp152.2.3.1 References: https://bugzilla.suse.com/1173269

1 0

openSUSE-RU-2020:1277-1: moderate: Recommended update for devscripts
by maintenance＠opensuse.org 27 Aug '20

27 Aug '20

openSUSE Recommended Update: Recommended update for devscripts ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1277-1 Rating: moderate References: #1174163 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for devscripts fixes the following issue: Update from version 2.15.1 to version 2.19.5 (bsc#1174163) - Add conflicts on packages with the same binaries. - Fixed license tag as suggested by licensedigger. - Changed download location for source tarball from Debian package pool to salsa.debian.org to avoid download errors. - Remove support for ancient openSUSE and non-SUSE distributions. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1277=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): devscripts-2.19.5-lp152.4.3.1 devscripts-debuginfo-2.19.5-lp152.4.3.1 - openSUSE Leap 15.2 (noarch): checkbashisms-2.19.5-lp152.4.3.1 References: https://bugzilla.suse.com/1174163

1 0

openSUSE-RU-2020:1274-1: moderate: Recommended update for shim
by maintenance＠opensuse.org 27 Aug '20

27 Aug '20

openSUSE Recommended Update: Recommended update for shim ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1274-1 Rating: moderate References: #1113225 #1121268 #1153953 #1168104 #1168994 #1173411 #1174320 #1175626 #1175656 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 9 recommended fixes can now be installed. Description: This update for shim fixes the following issues: - Updated openSUSE signature - Update the path to grub-tpm.efi in shim-install (boo#1174320) - Use vendor-dbx to block old SUSE/openSUSE signkeys (boo#1168994) + Add dbx-cert.tar.xz which contains the certificates to block and a script, generate-vendor-dbx.sh, to generate vendor-dbx.bin + Add vendor-dbx.bin as the vendor dbx to block unwanted keys - Only check EFI variable copying when Secure Boot is enabled (boo#1173411) - Use the full path of efibootmgr to avoid errors when invoking shim-install from packagekitd (boo#1168104) - shim-install: add check for btrfs is used as root file system to enable relative path lookup for file. (boo#1153953) - Add shim-opensuse-signed.efi, the openSUSE shim-15+git47 binary (boo#1113225) - shim-install: install MokManager to \EFI\boot to process the pending MOK request (bsc#1175626, bsc#1175656) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1274=1 Package List: - openSUSE Leap 15.2 (x86_64): shim-15+git47-lp152.4.5.1 shim-debuginfo-15+git47-lp152.4.5.1 shim-debugsource-15+git47-lp152.4.5.1 References: https://bugzilla.suse.com/1113225 https://bugzilla.suse.com/1121268 https://bugzilla.suse.com/1153953 https://bugzilla.suse.com/1168104 https://bugzilla.suse.com/1168994 https://bugzilla.suse.com/1173411 https://bugzilla.suse.com/1174320 https://bugzilla.suse.com/1175626 https://bugzilla.suse.com/1175656

1 0

openSUSE-SU-2020:1272-1: moderate: Security update for inn
by opensuse-security＠opensuse.org 27 Aug '20

27 Aug '20

openSUSE Security Update: Security update for inn ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1272-1 Rating: moderate References: #1172573 Cross-References: CVE-2020-8026 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for inn fixes the following issues: - change file owners in /usr/lib/news to root [boo#1172573] [CVE-2020-8026] Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1272=1 Package List: - openSUSE Leap 15.2 (x86_64): inn-2.6.2-lp152.2.3.1 inn-debuginfo-2.6.2-lp152.2.3.1 inn-debugsource-2.6.2-lp152.2.3.1 inn-devel-2.6.2-lp152.2.3.1 mininews-2.6.2-lp152.2.3.1 mininews-debuginfo-2.6.2-lp152.2.3.1 References: https://www.suse.com/security/cve/CVE-2020-8026.html https://bugzilla.suse.com/1172573

1 0

openSUSE-SU-2020:1275-1: important: Security update for webkit2gtk3
by opensuse-security＠opensuse.org 27 Aug '20

27 Aug '20

openSUSE Security Update: Security update for webkit2gtk3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1275-1 Rating: important References: #1174662 Cross-References: CVE-2020-9862 CVE-2020-9893 CVE-2020-9894 CVE-2020-9895 CVE-2020-9915 CVE-2020-9925 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update for webkit2gtk3 fixes the following issues: - Update to version 2.28.4 (bsc#1174662): + Fix several crashes and rendering issues. + Security fixes: CVE-2020-9862, CVE-2020-9893, CVE-2020-9894, CVE-2020-9895, CVE-2020-9915, CVE-2020-9925. This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1275=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libjavascriptcoregtk-4_0-18-2.28.4-lp152.2.4.3 libjavascriptcoregtk-4_0-18-debuginfo-2.28.4-lp152.2.4.3 libwebkit2gtk-4_0-37-2.28.4-lp152.2.4.3 libwebkit2gtk-4_0-37-debuginfo-2.28.4-lp152.2.4.3 typelib-1_0-JavaScriptCore-4_0-2.28.4-lp152.2.4.3 typelib-1_0-WebKit2-4_0-2.28.4-lp152.2.4.3 typelib-1_0-WebKit2WebExtension-4_0-2.28.4-lp152.2.4.3 webkit-jsc-4-2.28.4-lp152.2.4.3 webkit-jsc-4-debuginfo-2.28.4-lp152.2.4.3 webkit2gtk-4_0-injected-bundles-2.28.4-lp152.2.4.3 webkit2gtk-4_0-injected-bundles-debuginfo-2.28.4-lp152.2.4.3 webkit2gtk3-debugsource-2.28.4-lp152.2.4.3 webkit2gtk3-devel-2.28.4-lp152.2.4.3 webkit2gtk3-minibrowser-2.28.4-lp152.2.4.3 webkit2gtk3-minibrowser-debuginfo-2.28.4-lp152.2.4.3 - openSUSE Leap 15.2 (x86_64): libjavascriptcoregtk-4_0-18-32bit-2.28.4-lp152.2.4.3 libjavascriptcoregtk-4_0-18-32bit-debuginfo-2.28.4-lp152.2.4.3 libwebkit2gtk-4_0-37-32bit-2.28.4-lp152.2.4.3 libwebkit2gtk-4_0-37-32bit-debuginfo-2.28.4-lp152.2.4.3 - openSUSE Leap 15.2 (noarch): libwebkit2gtk3-lang-2.28.4-lp152.2.4.3 References: https://www.suse.com/security/cve/CVE-2020-9862.html https://www.suse.com/security/cve/CVE-2020-9893.html https://www.suse.com/security/cve/CVE-2020-9894.html https://www.suse.com/security/cve/CVE-2020-9895.html https://www.suse.com/security/cve/CVE-2020-9915.html https://www.suse.com/security/cve/CVE-2020-9925.html https://bugzilla.suse.com/1174662

1 0

openSUSE-RU-2020:1276-1: moderate: Recommended update for strawberry
by maintenance＠opensuse.org 27 Aug '20

27 Aug '20

openSUSE Recommended Update: Recommended update for strawberry ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1276-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for strawberry fixes the following issues: Update to version 0.7.2: * Bugfixes: + Fixed installation directory for translations. + Fixed collection sorting for non-ASCII characters. + Fixed closing connected devices on exit. Update to version 0.7.1: * Bugfixes: + Fixed incorrectly mapped global shortcuts keys "2" and "3". + Fixed Last.fm scrobbling to correctly start array notation for parameters at 0 and not 1. + Fixed sending trackNumber correctly for Last.fm and Libre.fm scrobbling. + Fixed collection search when using special characters in the search query. + Fixed reading and saving MP4 lyrics tag. + Fixed reading ASF comment tag. + Fixed adding playlist songs outside the collection when there are multiple files with the same URL. + Fixed the rescan songs option to work with local songs outside of the collection. + Fixed problems with editing song metadata in the playlists. * Enhancements: + Simplified and improved startup behaviour code. + Adapted all source code to be compatible with Qt 6, and increased required Qt version to 5.8. + Added option to compile with Qt 6 (-DWITH_QT6=ON). + Base warning for show in file browser on unique directories to avoid unneeded warning about opening many files. + Use album artist instead of artist for album repeat mode when available. + Added extra safety for overwriting files for filesystem storages when organizing files. + Remove diacritics in FTS search. + Improved playlist context menu. + Added fatal CMake error for missing protobuf compiler. + Added support for parsing radio streams metadata with tilde in title. + Added CMake option to install translation files. + (Unix) Added playback actions to desktop file. * Removed features: + Removed Xine engine support. + Removed broken imobiledevice (iPhone) support. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1276=1 Package List: - openSUSE Leap 15.2 (x86_64): strawberry-0.7.2-lp152.2.9.1 strawberry-debuginfo-0.7.2-lp152.2.9.1 strawberry-debugsource-0.7.2-lp152.2.9.1 References:

1 0

openSUSE-SU-2020:1270-1: moderate: Security update for gettext-runtime
by opensuse-security＠opensuse.org 27 Aug '20

27 Aug '20

openSUSE Security Update: Security update for gettext-runtime ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1270-1 Rating: moderate References: #1106843 #1113719 #941629 Cross-References: CVE-2018-18751 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update for gettext-runtime fixes the following issues: - Fix boo941629-unnessary-rpath-on-standard-path.patch (bsc#941629) - Added msgfmt-double-free.patch to fix a double free error (CVE-2018-18751 bsc#1113719) - Add patch msgfmt-reset-msg-length-after-remove.patch which does reset the length of message string after a line has been removed (bsc#1106843) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1270=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): gettext-runtime-0.19.8.1-lp151.5.3.1 gettext-runtime-debuginfo-0.19.8.1-lp151.5.3.1 gettext-runtime-debugsource-0.19.8.1-lp151.5.3.1 gettext-runtime-mini-0.19.8.1-lp151.5.3.1 gettext-runtime-mini-debuginfo-0.19.8.1-lp151.5.3.1 gettext-runtime-mini-debugsource-0.19.8.1-lp151.5.3.1 gettext-tools-0.19.8.1-lp151.5.3.1 gettext-tools-debuginfo-0.19.8.1-lp151.5.3.1 gettext-tools-mini-0.19.8.1-lp151.5.3.1 gettext-tools-mini-debuginfo-0.19.8.1-lp151.5.3.1 - openSUSE Leap 15.1 (noarch): gettext-runtime-mini-tools-doc-0.19.8.1-lp151.5.3.1 gettext-runtime-tools-doc-0.19.8.1-lp151.5.3.1 - openSUSE Leap 15.1 (x86_64): gettext-csharp-0.19.8.1-lp151.5.3.1 gettext-java-0.19.8.1-lp151.5.3.1 gettext-runtime-32bit-0.19.8.1-lp151.5.3.1 gettext-runtime-32bit-debuginfo-0.19.8.1-lp151.5.3.1 References: https://www.suse.com/security/cve/CVE-2018-18751.html https://bugzilla.suse.com/1106843 https://bugzilla.suse.com/1113719 https://bugzilla.suse.com/941629

1 0

openSUSE-SU-2020:1269-1: moderate: Security update for claws-mail
by opensuse-security＠opensuse.org 27 Aug '20

27 Aug '20

openSUSE Security Update: Security update for claws-mail ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1269-1 Rating: moderate References: #1174457 Cross-References: CVE-2020-15917 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for claws-mail fixes the following issues: - CVE-2020-15917: Fixed an improper handling of suffix data after STARTTLS is mishandled (boo#1174457). This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1269=1 Package List: - openSUSE Backports SLE-15-SP1 (noarch): claws-mail-lang-3.17.3-bp151.3.3.1 - openSUSE Backports SLE-15-SP1 (x86_64): claws-mail-3.17.3-bp151.3.3.1 claws-mail-devel-3.17.3-bp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2020-15917.html https://bugzilla.suse.com/1174457

1 0

openSUSE-SU-2020:1262-1: important: Security update for dovecot23
by opensuse-security＠opensuse.org 26 Aug '20

26 Aug '20

openSUSE Security Update: Security update for dovecot23 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1262-1 Rating: important References: #1174922 #1174923 Cross-References: CVE-2020-12673 CVE-2020-12674 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for dovecot23 fixes the following issues: - CVE-2020-12673: improper implementation of NTLM does not check message buffer size (bsc#1174922). - CVE-2020-12674: improper implementation of RPA mechanism (bsc#1174923). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1262=1 Package List: - openSUSE Leap 15.2 (x86_64): dovecot23-2.3.10-lp152.2.3.1 dovecot23-backend-mysql-2.3.10-lp152.2.3.1 dovecot23-backend-mysql-debuginfo-2.3.10-lp152.2.3.1 dovecot23-backend-pgsql-2.3.10-lp152.2.3.1 dovecot23-backend-pgsql-debuginfo-2.3.10-lp152.2.3.1 dovecot23-backend-sqlite-2.3.10-lp152.2.3.1 dovecot23-backend-sqlite-debuginfo-2.3.10-lp152.2.3.1 dovecot23-debuginfo-2.3.10-lp152.2.3.1 dovecot23-debugsource-2.3.10-lp152.2.3.1 dovecot23-devel-2.3.10-lp152.2.3.1 dovecot23-fts-2.3.10-lp152.2.3.1 dovecot23-fts-debuginfo-2.3.10-lp152.2.3.1 dovecot23-fts-lucene-2.3.10-lp152.2.3.1 dovecot23-fts-lucene-debuginfo-2.3.10-lp152.2.3.1 dovecot23-fts-solr-2.3.10-lp152.2.3.1 dovecot23-fts-solr-debuginfo-2.3.10-lp152.2.3.1 dovecot23-fts-squat-2.3.10-lp152.2.3.1 dovecot23-fts-squat-debuginfo-2.3.10-lp152.2.3.1 References: https://www.suse.com/security/cve/CVE-2020-12673.html https://www.suse.com/security/cve/CVE-2020-12674.html https://bugzilla.suse.com/1174922 https://bugzilla.suse.com/1174923

1 0

openSUSE-RU-2020:1268-1: moderate: Recommended update for openssl-1_0_0
by maintenance＠opensuse.org 26 Aug '20

26 Aug '20

openSUSE Recommended Update: Recommended update for openssl-1_0_0 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1268-1 Rating: moderate References: #1174459 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for openssl-1_0_0 fixes the following issue: - Versioning the exported symbols and avoid failures due to the lack of versioning. (bsc#1174459) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1268=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libopenssl-1_0_0-devel-1.0.2p-lp152.8.3.1 libopenssl1_0_0-1.0.2p-lp152.8.3.1 libopenssl1_0_0-debuginfo-1.0.2p-lp152.8.3.1 libopenssl1_0_0-hmac-1.0.2p-lp152.8.3.1 libopenssl1_0_0-steam-1.0.2p-lp152.8.3.1 libopenssl1_0_0-steam-debuginfo-1.0.2p-lp152.8.3.1 openssl-1_0_0-1.0.2p-lp152.8.3.1 openssl-1_0_0-cavs-1.0.2p-lp152.8.3.1 openssl-1_0_0-cavs-debuginfo-1.0.2p-lp152.8.3.1 openssl-1_0_0-debuginfo-1.0.2p-lp152.8.3.1 openssl-1_0_0-debugsource-1.0.2p-lp152.8.3.1 - openSUSE Leap 15.2 (x86_64): libopenssl-1_0_0-devel-32bit-1.0.2p-lp152.8.3.1 libopenssl1_0_0-32bit-1.0.2p-lp152.8.3.1 libopenssl1_0_0-32bit-debuginfo-1.0.2p-lp152.8.3.1 libopenssl1_0_0-hmac-32bit-1.0.2p-lp152.8.3.1 libopenssl1_0_0-steam-32bit-1.0.2p-lp152.8.3.1 libopenssl1_0_0-steam-32bit-debuginfo-1.0.2p-lp152.8.3.1 - openSUSE Leap 15.2 (noarch): openssl-1_0_0-doc-1.0.2p-lp152.8.3.1 References: https://bugzilla.suse.com/1174459

1 0

openSUSE-SU-2020:1261-1: moderate: Security update for libreoffice
by opensuse-security＠opensuse.org 26 Aug '20

26 Aug '20

openSUSE Security Update: Security update for libreoffice ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1261-1 Rating: moderate References: #1062631 #1146025 #1157627 #1165849 #1172053 #1172189 #1172795 #1172796 Cross-References: CVE-2020-12802 CVE-2020-12803 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves two vulnerabilities and has 6 fixes is now available. Description: This update for libreoffice fixes the following issues: - Update to 6.4.5.2: * Various fixes all around - Remove mime-info and application-registry dirs bsc#1062631 - Fix bsc#1172053 - LO-L3: Image disappears during roundtrip 365->Impress->365 * bsc1172053.diff - Fix bsc#1172189 - LO-L3: Impress crashes midway opening a PPTX document * bsc1172189.diff - Fix bsc#1157627 - LO-L3: Some XML-created shapes simply lost upon PPTX import (= earth loses countries) * bsc1157627.diff - Fix bsc#1146025 - LO-L3: Colored textboxes in PPTX look very odd (SmartArt) - Fix bsc#1165849 - LO-L3: Shadow size for rectangle is only a fraction of Office 365 * bsc1165849-1.diff * bsc1165849-2.diff * bsc1165849-3.diff This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1261=1 Package List: - openSUSE Leap 15.2 (noarch): libreoffice-branding-upstream-6.4.5.2-lp152.2.3.1 libreoffice-gdb-pretty-printers-6.4.5.2-lp152.2.3.1 libreoffice-glade-6.4.5.2-lp152.2.3.1 libreoffice-icon-themes-6.4.5.2-lp152.2.3.1 libreoffice-l10n-af-6.4.5.2-lp152.2.3.1 libreoffice-l10n-am-6.4.5.2-lp152.2.3.1 libreoffice-l10n-ar-6.4.5.2-lp152.2.3.1 libreoffice-l10n-as-6.4.5.2-lp152.2.3.1 libreoffice-l10n-ast-6.4.5.2-lp152.2.3.1 libreoffice-l10n-be-6.4.5.2-lp152.2.3.1 libreoffice-l10n-bg-6.4.5.2-lp152.2.3.1 libreoffice-l10n-bn-6.4.5.2-lp152.2.3.1 libreoffice-l10n-bn_IN-6.4.5.2-lp152.2.3.1 libreoffice-l10n-bo-6.4.5.2-lp152.2.3.1 libreoffice-l10n-br-6.4.5.2-lp152.2.3.1 libreoffice-l10n-brx-6.4.5.2-lp152.2.3.1 libreoffice-l10n-bs-6.4.5.2-lp152.2.3.1 libreoffice-l10n-ca-6.4.5.2-lp152.2.3.1 libreoffice-l10n-ca_valencia-6.4.5.2-lp152.2.3.1 libreoffice-l10n-cs-6.4.5.2-lp152.2.3.1 libreoffice-l10n-cy-6.4.5.2-lp152.2.3.1 libreoffice-l10n-da-6.4.5.2-lp152.2.3.1 libreoffice-l10n-de-6.4.5.2-lp152.2.3.1 libreoffice-l10n-dgo-6.4.5.2-lp152.2.3.1 libreoffice-l10n-dsb-6.4.5.2-lp152.2.3.1 libreoffice-l10n-dz-6.4.5.2-lp152.2.3.1 libreoffice-l10n-el-6.4.5.2-lp152.2.3.1 libreoffice-l10n-en-6.4.5.2-lp152.2.3.1 libreoffice-l10n-en_GB-6.4.5.2-lp152.2.3.1 libreoffice-l10n-en_ZA-6.4.5.2-lp152.2.3.1 libreoffice-l10n-eo-6.4.5.2-lp152.2.3.1 libreoffice-l10n-es-6.4.5.2-lp152.2.3.1 libreoffice-l10n-et-6.4.5.2-lp152.2.3.1 libreoffice-l10n-eu-6.4.5.2-lp152.2.3.1 libreoffice-l10n-fa-6.4.5.2-lp152.2.3.1 libreoffice-l10n-fi-6.4.5.2-lp152.2.3.1 libreoffice-l10n-fr-6.4.5.2-lp152.2.3.1 libreoffice-l10n-fy-6.4.5.2-lp152.2.3.1 libreoffice-l10n-ga-6.4.5.2-lp152.2.3.1 libreoffice-l10n-gd-6.4.5.2-lp152.2.3.1 libreoffice-l10n-gl-6.4.5.2-lp152.2.3.1 libreoffice-l10n-gu-6.4.5.2-lp152.2.3.1 libreoffice-l10n-gug-6.4.5.2-lp152.2.3.1 libreoffice-l10n-he-6.4.5.2-lp152.2.3.1 libreoffice-l10n-hi-6.4.5.2-lp152.2.3.1 libreoffice-l10n-hr-6.4.5.2-lp152.2.3.1 libreoffice-l10n-hsb-6.4.5.2-lp152.2.3.1 libreoffice-l10n-hu-6.4.5.2-lp152.2.3.1 libreoffice-l10n-id-6.4.5.2-lp152.2.3.1 libreoffice-l10n-is-6.4.5.2-lp152.2.3.1 libreoffice-l10n-it-6.4.5.2-lp152.2.3.1 libreoffice-l10n-ja-6.4.5.2-lp152.2.3.1 libreoffice-l10n-ka-6.4.5.2-lp152.2.3.1 libreoffice-l10n-kab-6.4.5.2-lp152.2.3.1 libreoffice-l10n-kk-6.4.5.2-lp152.2.3.1 libreoffice-l10n-km-6.4.5.2-lp152.2.3.1 libreoffice-l10n-kmr_Latn-6.4.5.2-lp152.2.3.1 libreoffice-l10n-kn-6.4.5.2-lp152.2.3.1 libreoffice-l10n-ko-6.4.5.2-lp152.2.3.1 libreoffice-l10n-kok-6.4.5.2-lp152.2.3.1 libreoffice-l10n-ks-6.4.5.2-lp152.2.3.1 libreoffice-l10n-lb-6.4.5.2-lp152.2.3.1 libreoffice-l10n-lo-6.4.5.2-lp152.2.3.1 libreoffice-l10n-lt-6.4.5.2-lp152.2.3.1 libreoffice-l10n-lv-6.4.5.2-lp152.2.3.1 libreoffice-l10n-mai-6.4.5.2-lp152.2.3.1 libreoffice-l10n-mk-6.4.5.2-lp152.2.3.1 libreoffice-l10n-ml-6.4.5.2-lp152.2.3.1 libreoffice-l10n-mn-6.4.5.2-lp152.2.3.1 libreoffice-l10n-mni-6.4.5.2-lp152.2.3.1 libreoffice-l10n-mr-6.4.5.2-lp152.2.3.1 libreoffice-l10n-my-6.4.5.2-lp152.2.3.1 libreoffice-l10n-nb-6.4.5.2-lp152.2.3.1 libreoffice-l10n-ne-6.4.5.2-lp152.2.3.1 libreoffice-l10n-nl-6.4.5.2-lp152.2.3.1 libreoffice-l10n-nn-6.4.5.2-lp152.2.3.1 libreoffice-l10n-nr-6.4.5.2-lp152.2.3.1 libreoffice-l10n-nso-6.4.5.2-lp152.2.3.1 libreoffice-l10n-oc-6.4.5.2-lp152.2.3.1 libreoffice-l10n-om-6.4.5.2-lp152.2.3.1 libreoffice-l10n-or-6.4.5.2-lp152.2.3.1 libreoffice-l10n-pa-6.4.5.2-lp152.2.3.1 libreoffice-l10n-pl-6.4.5.2-lp152.2.3.1 libreoffice-l10n-pt_BR-6.4.5.2-lp152.2.3.1 libreoffice-l10n-pt_PT-6.4.5.2-lp152.2.3.1 libreoffice-l10n-ro-6.4.5.2-lp152.2.3.1 libreoffice-l10n-ru-6.4.5.2-lp152.2.3.1 libreoffice-l10n-rw-6.4.5.2-lp152.2.3.1 libreoffice-l10n-sa_IN-6.4.5.2-lp152.2.3.1 libreoffice-l10n-sat-6.4.5.2-lp152.2.3.1 libreoffice-l10n-sd-6.4.5.2-lp152.2.3.1 libreoffice-l10n-si-6.4.5.2-lp152.2.3.1 libreoffice-l10n-sid-6.4.5.2-lp152.2.3.1 libreoffice-l10n-sk-6.4.5.2-lp152.2.3.1 libreoffice-l10n-sl-6.4.5.2-lp152.2.3.1 libreoffice-l10n-sq-6.4.5.2-lp152.2.3.1 libreoffice-l10n-sr-6.4.5.2-lp152.2.3.1 libreoffice-l10n-ss-6.4.5.2-lp152.2.3.1 libreoffice-l10n-st-6.4.5.2-lp152.2.3.1 libreoffice-l10n-sv-6.4.5.2-lp152.2.3.1 libreoffice-l10n-sw_TZ-6.4.5.2-lp152.2.3.1 libreoffice-l10n-szl-6.4.5.2-lp152.2.3.1 libreoffice-l10n-ta-6.4.5.2-lp152.2.3.1 libreoffice-l10n-te-6.4.5.2-lp152.2.3.1 libreoffice-l10n-tg-6.4.5.2-lp152.2.3.1 libreoffice-l10n-th-6.4.5.2-lp152.2.3.1 libreoffice-l10n-tn-6.4.5.2-lp152.2.3.1 libreoffice-l10n-tr-6.4.5.2-lp152.2.3.1 libreoffice-l10n-ts-6.4.5.2-lp152.2.3.1 libreoffice-l10n-tt-6.4.5.2-lp152.2.3.1 libreoffice-l10n-ug-6.4.5.2-lp152.2.3.1 libreoffice-l10n-uk-6.4.5.2-lp152.2.3.1 libreoffice-l10n-uz-6.4.5.2-lp152.2.3.1 libreoffice-l10n-ve-6.4.5.2-lp152.2.3.1 libreoffice-l10n-vec-6.4.5.2-lp152.2.3.1 libreoffice-l10n-vi-6.4.5.2-lp152.2.3.1 libreoffice-l10n-xh-6.4.5.2-lp152.2.3.1 libreoffice-l10n-zh_CN-6.4.5.2-lp152.2.3.1 libreoffice-l10n-zh_TW-6.4.5.2-lp152.2.3.1 libreoffice-l10n-zu-6.4.5.2-lp152.2.3.1 - openSUSE Leap 15.2 (x86_64): libreoffice-6.4.5.2-lp152.2.3.1 libreoffice-base-6.4.5.2-lp152.2.3.1 libreoffice-base-debuginfo-6.4.5.2-lp152.2.3.1 libreoffice-base-drivers-firebird-6.4.5.2-lp152.2.3.1 libreoffice-base-drivers-firebird-debuginfo-6.4.5.2-lp152.2.3.1 libreoffice-base-drivers-postgresql-6.4.5.2-lp152.2.3.1 libreoffice-base-drivers-postgresql-debuginfo-6.4.5.2-lp152.2.3.1 libreoffice-calc-6.4.5.2-lp152.2.3.1 libreoffice-calc-debuginfo-6.4.5.2-lp152.2.3.1 libreoffice-calc-extensions-6.4.5.2-lp152.2.3.1 libreoffice-debuginfo-6.4.5.2-lp152.2.3.1 libreoffice-debugsource-6.4.5.2-lp152.2.3.1 libreoffice-draw-6.4.5.2-lp152.2.3.1 libreoffice-draw-debuginfo-6.4.5.2-lp152.2.3.1 libreoffice-filters-optional-6.4.5.2-lp152.2.3.1 libreoffice-gnome-6.4.5.2-lp152.2.3.1 libreoffice-gnome-debuginfo-6.4.5.2-lp152.2.3.1 libreoffice-gtk3-6.4.5.2-lp152.2.3.1 libreoffice-gtk3-debuginfo-6.4.5.2-lp152.2.3.1 libreoffice-impress-6.4.5.2-lp152.2.3.1 libreoffice-impress-debuginfo-6.4.5.2-lp152.2.3.1 libreoffice-librelogo-6.4.5.2-lp152.2.3.1 libreoffice-mailmerge-6.4.5.2-lp152.2.3.1 libreoffice-math-6.4.5.2-lp152.2.3.1 libreoffice-math-debuginfo-6.4.5.2-lp152.2.3.1 libreoffice-officebean-6.4.5.2-lp152.2.3.1 libreoffice-officebean-debuginfo-6.4.5.2-lp152.2.3.1 libreoffice-pyuno-6.4.5.2-lp152.2.3.1 libreoffice-pyuno-debuginfo-6.4.5.2-lp152.2.3.1 libreoffice-qt5-6.4.5.2-lp152.2.3.1 libreoffice-qt5-debuginfo-6.4.5.2-lp152.2.3.1 libreoffice-sdk-6.4.5.2-lp152.2.3.1 libreoffice-sdk-debuginfo-6.4.5.2-lp152.2.3.1 libreoffice-sdk-doc-6.4.5.2-lp152.2.3.1 libreoffice-writer-6.4.5.2-lp152.2.3.1 libreoffice-writer-debuginfo-6.4.5.2-lp152.2.3.1 libreoffice-writer-extensions-6.4.5.2-lp152.2.3.1 libreofficekit-6.4.5.2-lp152.2.3.1 libreofficekit-devel-6.4.5.2-lp152.2.3.1 References: https://www.suse.com/security/cve/CVE-2020-12802.html https://www.suse.com/security/cve/CVE-2020-12803.html https://bugzilla.suse.com/1062631 https://bugzilla.suse.com/1146025 https://bugzilla.suse.com/1157627 https://bugzilla.suse.com/1165849 https://bugzilla.suse.com/1172053 https://bugzilla.suse.com/1172189 https://bugzilla.suse.com/1172795 https://bugzilla.suse.com/1172796

1 0

openSUSE-RU-2020:1266-1: moderate: Recommended update for davfs2
by maintenance＠opensuse.org 26 Aug '20

26 Aug '20

openSUSE Recommended Update: Recommended update for davfs2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1266-1 Rating: moderate References: #1173419 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for davfs2 fixes the following issue: - Respect nofail option and avoid to fail upon boot if the remote resource is not available. (bsc#1173419) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1266=1 Package List: - openSUSE Leap 15.2 (x86_64): davfs2-1.5.4-lp152.4.3.1 davfs2-debuginfo-1.5.4-lp152.4.3.1 davfs2-debugsource-1.5.4-lp152.4.3.1 References: https://bugzilla.suse.com/1173419

1 0

openSUSE-SU-2020:1263-1: moderate: Security update for chromium
by opensuse-security＠opensuse.org 26 Aug '20

26 Aug '20

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1263-1 Rating: moderate References: #1175505 Cross-References: CVE-2020-6556 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for chromium fixes the following issues: - Update to 84.0.4147.135 (boo#1175505): * CVE-2020-6556: Heap buffer overflow in SwiftShader Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1263=1 Package List: - openSUSE Leap 15.2 (x86_64): chromedriver-84.0.4147.135-lp152.2.17.1 chromedriver-debuginfo-84.0.4147.135-lp152.2.17.1 chromium-84.0.4147.135-lp152.2.17.1 chromium-debuginfo-84.0.4147.135-lp152.2.17.1 chromium-debugsource-84.0.4147.135-lp152.2.17.1 References: https://www.suse.com/security/cve/CVE-2020-6556.html https://bugzilla.suse.com/1175505

1 0

openSUSE-SU-2020:1265-1: moderate: Security update for python3
by opensuse-security＠opensuse.org 26 Aug '20

26 Aug '20

openSUSE Security Update: Security update for python3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1265-1 Rating: moderate References: #1174091 Cross-References: CVE-2019-20907 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python3 fixes the following issues: - bsc#1174091, CVE-2019-20907: avoiding possible infinite loop in specifically crafted tarball. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1265=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libpython3_6m1_0-3.6.10-lp152.4.6.2 libpython3_6m1_0-debuginfo-3.6.10-lp152.4.6.2 python3-3.6.10-lp152.4.6.2 python3-base-3.6.10-lp152.4.6.2 python3-base-debuginfo-3.6.10-lp152.4.6.2 python3-base-debugsource-3.6.10-lp152.4.6.2 python3-curses-3.6.10-lp152.4.6.2 python3-curses-debuginfo-3.6.10-lp152.4.6.2 python3-dbm-3.6.10-lp152.4.6.2 python3-dbm-debuginfo-3.6.10-lp152.4.6.2 python3-debuginfo-3.6.10-lp152.4.6.2 python3-debugsource-3.6.10-lp152.4.6.2 python3-devel-3.6.10-lp152.4.6.2 python3-devel-debuginfo-3.6.10-lp152.4.6.2 python3-idle-3.6.10-lp152.4.6.2 python3-testsuite-3.6.10-lp152.4.6.2 python3-testsuite-debuginfo-3.6.10-lp152.4.6.2 python3-tk-3.6.10-lp152.4.6.2 python3-tk-debuginfo-3.6.10-lp152.4.6.2 python3-tools-3.6.10-lp152.4.6.2 - openSUSE Leap 15.2 (x86_64): libpython3_6m1_0-32bit-3.6.10-lp152.4.6.2 libpython3_6m1_0-32bit-debuginfo-3.6.10-lp152.4.6.2 python3-32bit-3.6.10-lp152.4.6.2 python3-32bit-debuginfo-3.6.10-lp152.4.6.2 python3-base-32bit-3.6.10-lp152.4.6.2 python3-base-32bit-debuginfo-3.6.10-lp152.4.6.2 - openSUSE Leap 15.2 (noarch): python3-doc-3.6.10-lp152.4.6.3 References: https://www.suse.com/security/cve/CVE-2019-20907.html https://bugzilla.suse.com/1174091

1 0

openSUSE-RU-2020:1267-1: moderate: Recommended update for krunner
by maintenance＠opensuse.org 26 Aug '20

26 Aug '20

openSUSE Recommended Update: Recommended update for krunner ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1267-1 Rating: moderate References: #1175563 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for krunner fixes the following issues: - Add patch to fix ABI mismatch (kde#423003, boo#1175563): Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1267=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): krunner-debugsource-5.71.0-lp152.2.3.1 krunner-devel-5.71.0-lp152.2.3.1 libKF5Runner5-5.71.0-lp152.2.3.1 libKF5Runner5-debuginfo-5.71.0-lp152.2.3.1 - openSUSE Leap 15.2 (x86_64): krunner-devel-32bit-5.71.0-lp152.2.3.1 libKF5Runner5-32bit-5.71.0-lp152.2.3.1 libKF5Runner5-32bit-debuginfo-5.71.0-lp152.2.3.1 References: https://bugzilla.suse.com/1175563

1 0

openSUSE-RU-2020:1264-1: important: Recommended update for ca-certificates-mozilla
by maintenance＠opensuse.org 26 Aug '20

26 Aug '20

openSUSE Recommended Update: Recommended update for ca-certificates-mozilla ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1264-1 Rating: important References: #1010996 #1071152 #1071390 #1154871 #1174673 #973042 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 6 recommended fixes can now be installed. Description: This update for ca-certificates-mozilla fixes the following issues: update to 2.42 state of the Mozilla NSS Certificate store (bsc#1174673) Removed CAs: * AddTrust External CA Root * AddTrust Class 1 CA Root * LuxTrust Global Root 2 * Staat der Nederlanden Root CA - G2 * Symantec Class 1 Public Primary Certification Authority - G4 * Symantec Class 2 Public Primary Certification Authority - G4 * VeriSign Class 3 Public Primary Certification Authority - G3 Added CAs: * certSIGN Root CA G2 * e-Szigno Root CA 2017 * Microsoft ECC Root Certificate Authority 2017 * Microsoft RSA Root Certificate Authority 2017 - reverted p11-kit nss trust integration as it breaks in fresh installations (bsc#1154871) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1264=1 Package List: - openSUSE Leap 15.2 (noarch): ca-certificates-mozilla-2.42-lp152.2.4.2 References: https://bugzilla.suse.com/1010996 https://bugzilla.suse.com/1071152 https://bugzilla.suse.com/1071390 https://bugzilla.suse.com/1154871 https://bugzilla.suse.com/1174673 https://bugzilla.suse.com/973042

1 0

openSUSE-SU-2020:1260-1: moderate: Security update for chromium
by opensuse-security＠opensuse.org 26 Aug '20

26 Aug '20

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1260-1 Rating: moderate References: #1175505 Cross-References: CVE-2020-6556 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for chromium fixes the following issues: - Update to 84.0.4147.135 (boo#1175505): * CVE-2020-6556: Heap buffer overflow in SwiftShader Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1260=1 Package List: - openSUSE Leap 15.1 (x86_64): chromedriver-84.0.4147.135-lp151.2.120.1 chromedriver-debuginfo-84.0.4147.135-lp151.2.120.1 chromium-84.0.4147.135-lp151.2.120.1 chromium-debuginfo-84.0.4147.135-lp151.2.120.1 chromium-debugsource-84.0.4147.135-lp151.2.120.1 References: https://www.suse.com/security/cve/CVE-2020-6556.html https://bugzilla.suse.com/1175505

1 0

openSUSE-SU-2020:1256-1: important: Security update for webkit2gtk3
by opensuse-security＠opensuse.org 24 Aug '20

24 Aug '20

openSUSE Security Update: Security update for webkit2gtk3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1256-1 Rating: important References: #1174662 Cross-References: CVE-2020-9862 CVE-2020-9893 CVE-2020-9894 CVE-2020-9895 CVE-2020-9915 CVE-2020-9925 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update for webkit2gtk3 fixes the following issues: - Update to version 2.28.4 (bsc#1174662): + Fix several crashes and rendering issues. + Security fixes: CVE-2020-9862, CVE-2020-9893, CVE-2020-9894, CVE-2020-9895, CVE-2020-9915, CVE-2020-9925. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1256=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libjavascriptcoregtk-4_0-18-2.28.4-lp151.2.24.3 libjavascriptcoregtk-4_0-18-debuginfo-2.28.4-lp151.2.24.3 libwebkit2gtk-4_0-37-2.28.4-lp151.2.24.3 libwebkit2gtk-4_0-37-debuginfo-2.28.4-lp151.2.24.3 typelib-1_0-JavaScriptCore-4_0-2.28.4-lp151.2.24.3 typelib-1_0-WebKit2-4_0-2.28.4-lp151.2.24.3 typelib-1_0-WebKit2WebExtension-4_0-2.28.4-lp151.2.24.3 webkit-jsc-4-2.28.4-lp151.2.24.3 webkit-jsc-4-debuginfo-2.28.4-lp151.2.24.3 webkit2gtk-4_0-injected-bundles-2.28.4-lp151.2.24.3 webkit2gtk-4_0-injected-bundles-debuginfo-2.28.4-lp151.2.24.3 webkit2gtk3-debugsource-2.28.4-lp151.2.24.3 webkit2gtk3-devel-2.28.4-lp151.2.24.3 webkit2gtk3-minibrowser-2.28.4-lp151.2.24.3 webkit2gtk3-minibrowser-debuginfo-2.28.4-lp151.2.24.3 - openSUSE Leap 15.1 (x86_64): libjavascriptcoregtk-4_0-18-32bit-2.28.4-lp151.2.24.3 libjavascriptcoregtk-4_0-18-32bit-debuginfo-2.28.4-lp151.2.24.3 libwebkit2gtk-4_0-37-32bit-2.28.4-lp151.2.24.3 libwebkit2gtk-4_0-37-32bit-debuginfo-2.28.4-lp151.2.24.3 - openSUSE Leap 15.1 (noarch): libwebkit2gtk3-lang-2.28.4-lp151.2.24.3 References: https://www.suse.com/security/cve/CVE-2020-9862.html https://www.suse.com/security/cve/CVE-2020-9893.html https://www.suse.com/security/cve/CVE-2020-9894.html https://www.suse.com/security/cve/CVE-2020-9895.html https://www.suse.com/security/cve/CVE-2020-9915.html https://www.suse.com/security/cve/CVE-2020-9925.html https://bugzilla.suse.com/1174662

1 0

openSUSE-SU-2020:1258-1: moderate: Security update for python3
by opensuse-security＠opensuse.org 24 Aug '20

24 Aug '20

openSUSE Security Update: Security update for python3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1258-1 Rating: moderate References: #1174091 Cross-References: CVE-2019-20907 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python3 fixes the following issues: - bsc#1174091, CVE-2019-20907: avoiding possible infinite loop in specifically crafted tarball. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1258=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libpython3_6m1_0-3.6.10-lp151.6.24.1 libpython3_6m1_0-debuginfo-3.6.10-lp151.6.24.1 python3-3.6.10-lp151.6.24.1 python3-base-3.6.10-lp151.6.24.1 python3-base-debuginfo-3.6.10-lp151.6.24.1 python3-base-debugsource-3.6.10-lp151.6.24.1 python3-curses-3.6.10-lp151.6.24.1 python3-curses-debuginfo-3.6.10-lp151.6.24.1 python3-dbm-3.6.10-lp151.6.24.1 python3-dbm-debuginfo-3.6.10-lp151.6.24.1 python3-debuginfo-3.6.10-lp151.6.24.1 python3-debugsource-3.6.10-lp151.6.24.1 python3-devel-3.6.10-lp151.6.24.1 python3-devel-debuginfo-3.6.10-lp151.6.24.1 python3-idle-3.6.10-lp151.6.24.1 python3-testsuite-3.6.10-lp151.6.24.1 python3-testsuite-debuginfo-3.6.10-lp151.6.24.1 python3-tk-3.6.10-lp151.6.24.1 python3-tk-debuginfo-3.6.10-lp151.6.24.1 python3-tools-3.6.10-lp151.6.24.1 - openSUSE Leap 15.1 (x86_64): libpython3_6m1_0-32bit-3.6.10-lp151.6.24.1 libpython3_6m1_0-32bit-debuginfo-3.6.10-lp151.6.24.1 python3-32bit-3.6.10-lp151.6.24.1 python3-32bit-debuginfo-3.6.10-lp151.6.24.1 python3-base-32bit-3.6.10-lp151.6.24.1 python3-base-32bit-debuginfo-3.6.10-lp151.6.24.1 References: https://www.suse.com/security/cve/CVE-2019-20907.html https://bugzilla.suse.com/1174091

1 0

openSUSE-RU-2020:1255-1: moderate: Recommended update for rt-tests
by maintenance＠opensuse.org 24 Aug '20

24 Aug '20

openSUSE Recommended Update: Recommended update for rt-tests ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1255-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for rt-tests fixes the following issues: Update to version 1.6 (jsc#SLE-12981) * New feature to get a snapshot of a running instance of cyclictest without stopping it by sending SIGUSR2 to the PID and reading a shared memory segment. This is especially useful if running cyclictest over a long period of time * Add SPDX tags V3 * New programs to the rt-tests suite - queuelat: simulates a network queue checking for latency violations in packet processing. - cyclicdeadline: used to test the deadline scheduler (SCHED_DEADLINE) - deadline_test: tests the deadline scheduler in a cyclictest manner - ssdd: a tracer to do a bunch of PTRACE_SINGLESTEPs This update was imported from the SUSE:SLE-15-SP1:Update update project. This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1255=1 Package List: - openSUSE Backports SLE-15-SP1 (x86_64): rt-tests-1.6-bp151.2.3.1 References:

1 0

openSUSE-OU-2020:1259-1: Optional update for xmltooling
by maintenance＠opensuse.org 24 Aug '20

24 Aug '20

openSUSE Optional Update: Optional update for xmltooling ______________________________________________________________________________ Announcement ID: openSUSE-OU-2020:1259-1 Rating: low References: #1172351 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update for xmltooling doesn't fix any user visible bugs. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Optional Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1259=1 Package List: - openSUSE Leap 15.1 (x86_64): libxmltooling-devel-1.6.4-lp151.4.3.1 libxmltooling7-1.6.4-lp151.4.3.1 libxmltooling7-debuginfo-1.6.4-lp151.4.3.1 xmltooling-debugsource-1.6.4-lp151.4.3.1 xmltooling-schemas-1.6.4-lp151.4.3.1 References: https://bugzilla.suse.com/1172351

1 0

openSUSE-SU-2020:1257-1: moderate: Security update for python
by opensuse-security＠opensuse.org 24 Aug '20

24 Aug '20

openSUSE Security Update: Security update for python ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1257-1 Rating: moderate References: #1174091 Cross-References: CVE-2019-20907 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python fixes the following issues: - CVE-2019-20907: Avoid a possible infinite loop caused by specifically crafted tarballs (bsc#1174091). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1257=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libpython2_7-1_0-2.7.17-lp151.10.21.1 libpython2_7-1_0-debuginfo-2.7.17-lp151.10.21.1 python-2.7.17-lp151.10.21.1 python-base-2.7.17-lp151.10.21.1 python-base-debuginfo-2.7.17-lp151.10.21.1 python-base-debugsource-2.7.17-lp151.10.21.1 python-curses-2.7.17-lp151.10.21.1 python-curses-debuginfo-2.7.17-lp151.10.21.1 python-debuginfo-2.7.17-lp151.10.21.1 python-debugsource-2.7.17-lp151.10.21.1 python-demo-2.7.17-lp151.10.21.1 python-devel-2.7.17-lp151.10.21.1 python-gdbm-2.7.17-lp151.10.21.1 python-gdbm-debuginfo-2.7.17-lp151.10.21.1 python-idle-2.7.17-lp151.10.21.1 python-tk-2.7.17-lp151.10.21.1 python-tk-debuginfo-2.7.17-lp151.10.21.1 python-xml-2.7.17-lp151.10.21.1 python-xml-debuginfo-2.7.17-lp151.10.21.1 - openSUSE Leap 15.1 (x86_64): libpython2_7-1_0-32bit-2.7.17-lp151.10.21.1 libpython2_7-1_0-32bit-debuginfo-2.7.17-lp151.10.21.1 python-32bit-2.7.17-lp151.10.21.1 python-32bit-debuginfo-2.7.17-lp151.10.21.1 python-base-32bit-2.7.17-lp151.10.21.1 python-base-32bit-debuginfo-2.7.17-lp151.10.21.1 - openSUSE Leap 15.1 (noarch): python-doc-2.7.17-lp151.10.21.1 python-doc-pdf-2.7.17-lp151.10.21.1 References: https://www.suse.com/security/cve/CVE-2019-20907.html https://bugzilla.suse.com/1174091

1 0

openSUSE-SU-2020:1254-1: moderate: Security update for python
by opensuse-security＠opensuse.org 24 Aug '20

24 Aug '20

openSUSE Security Update: Security update for python ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1254-1 Rating: moderate References: #1174091 Cross-References: CVE-2019-20907 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python fixes the following issues: - CVE-2019-20907: Avoid a possible infinite loop caused by specifically crafted tarballs (bsc#1174091). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1254=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libpython2_7-1_0-2.7.17-lp152.3.3.1 libpython2_7-1_0-debuginfo-2.7.17-lp152.3.3.1 python-2.7.17-lp152.3.3.1 python-base-2.7.17-lp152.3.3.1 python-base-debuginfo-2.7.17-lp152.3.3.1 python-base-debugsource-2.7.17-lp152.3.3.1 python-curses-2.7.17-lp152.3.3.1 python-curses-debuginfo-2.7.17-lp152.3.3.1 python-debuginfo-2.7.17-lp152.3.3.1 python-debugsource-2.7.17-lp152.3.3.1 python-demo-2.7.17-lp152.3.3.1 python-devel-2.7.17-lp152.3.3.1 python-gdbm-2.7.17-lp152.3.3.1 python-gdbm-debuginfo-2.7.17-lp152.3.3.1 python-idle-2.7.17-lp152.3.3.1 python-tk-2.7.17-lp152.3.3.1 python-tk-debuginfo-2.7.17-lp152.3.3.1 python-xml-2.7.17-lp152.3.3.1 python-xml-debuginfo-2.7.17-lp152.3.3.1 - openSUSE Leap 15.2 (noarch): python-doc-2.7.17-lp152.3.3.1 python-doc-pdf-2.7.17-lp152.3.3.1 - openSUSE Leap 15.2 (x86_64): libpython2_7-1_0-32bit-2.7.17-lp152.3.3.1 libpython2_7-1_0-32bit-debuginfo-2.7.17-lp152.3.3.1 python-32bit-2.7.17-lp152.3.3.1 python-32bit-debuginfo-2.7.17-lp152.3.3.1 python-base-32bit-2.7.17-lp152.3.3.1 python-base-32bit-debuginfo-2.7.17-lp152.3.3.1 References: https://www.suse.com/security/cve/CVE-2019-20907.html https://bugzilla.suse.com/1174091

1 0

openSUSE-RU-2020:1252-1: moderate: Recommended update for fwupd
by maintenance＠opensuse.org 23 Aug '20

23 Aug '20

openSUSE Recommended Update: Recommended update for fwupd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1252-1 Rating: moderate References: #1174543 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update of fwupd fixes the following issue: - rebuilt with new signing key. (bsc#1174543) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1252=1 Package List: - openSUSE Leap 15.2 (x86_64): dfu-tool-1.2.11-lp152.3.3.1 dfu-tool-debuginfo-1.2.11-lp152.3.3.1 fwupd-1.2.11-lp152.3.3.1 fwupd-debuginfo-1.2.11-lp152.3.3.1 fwupd-debugsource-1.2.11-lp152.3.3.1 fwupd-devel-1.2.11-lp152.3.3.1 libfwupd2-1.2.11-lp152.3.3.1 libfwupd2-debuginfo-1.2.11-lp152.3.3.1 typelib-1_0-Fwupd-2_0-1.2.11-lp152.3.3.1 - openSUSE Leap 15.2 (noarch): fwupd-lang-1.2.11-lp152.3.3.1 References: https://bugzilla.suse.com/1174543

1 0

openSUSE-RU-2020:1253-1: important: Recommended update for ca-certificates-mozilla
by maintenance＠opensuse.org 23 Aug '20

23 Aug '20

openSUSE Recommended Update: Recommended update for ca-certificates-mozilla ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1253-1 Rating: important References: #1010996 #1071152 #1071390 #1154871 #1174673 #973042 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 6 recommended fixes can now be installed. Description: This update for ca-certificates-mozilla fixes the following issues: update to 2.42 state of the Mozilla NSS Certificate store (bsc#1174673) Removed CAs: * AddTrust External CA Root * AddTrust Class 1 CA Root * LuxTrust Global Root 2 * Staat der Nederlanden Root CA - G2 * Symantec Class 1 Public Primary Certification Authority - G4 * Symantec Class 2 Public Primary Certification Authority - G4 * VeriSign Class 3 Public Primary Certification Authority - G3 Added CAs: * certSIGN Root CA G2 * e-Szigno Root CA 2017 * Microsoft ECC Root Certificate Authority 2017 * Microsoft RSA Root Certificate Authority 2017 - reverted p11-kit nss trust integration as it breaks in fresh installations (bsc#1154871) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1253=1 Package List: - openSUSE Leap 15.1 (noarch): ca-certificates-mozilla-2.42-lp151.2.9.1 References: https://bugzilla.suse.com/1010996 https://bugzilla.suse.com/1071152 https://bugzilla.suse.com/1071390 https://bugzilla.suse.com/1154871 https://bugzilla.suse.com/1174673 https://bugzilla.suse.com/973042

1 0

openSUSE-RU-2020:1251-1: moderate: Recommended update for fwupdate
by maintenance＠opensuse.org 23 Aug '20

23 Aug '20

openSUSE Recommended Update: Recommended update for fwupdate ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1251-1 Rating: moderate References: #1174543 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update of fwupdate fixes the following issue: - rebuilt with new signing key. (bsc#1174543) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1251=1 Package List: - openSUSE Leap 15.2 (x86_64): fwupdate-12-lp152.6.3.1 fwupdate-debuginfo-12-lp152.6.3.1 fwupdate-debugsource-12-lp152.6.3.1 fwupdate-devel-12-lp152.6.3.1 fwupdate-efi-12-lp152.6.3.1 fwupdate-efi-debuginfo-12-lp152.6.3.1 libfwup1-12-lp152.6.3.1 libfwup1-debuginfo-12-lp152.6.3.1 References: https://bugzilla.suse.com/1174543

1 0

openSUSE-RU-2020:1250-1: moderate: Recommended update for util-linux
by maintenance＠opensuse.org 23 Aug '20

23 Aug '20

openSUSE Recommended Update: Recommended update for util-linux ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1250-1 Rating: moderate References: #1149911 #1151708 #1168235 #1168389 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for util-linux fixes the following issues: - blockdev: Do not fail --report on kpartx-style partitions on multipath. (bsc#1168235) - nologin: Add support for -c to prevent error from su -c. (bsc#1151708) - Avoid triggering autofs in lookup_umount_fs_by_statfs. (bsc#1168389) - mount: Fall back to device node name if /dev/mapper link not found. (bsc#1149911) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1250=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libblkid-devel-2.33.1-lp152.5.3.1 libblkid-devel-static-2.33.1-lp152.5.3.1 libblkid1-2.33.1-lp152.5.3.1 libblkid1-debuginfo-2.33.1-lp152.5.3.1 libfdisk-devel-2.33.1-lp152.5.3.1 libfdisk-devel-static-2.33.1-lp152.5.3.1 libfdisk1-2.33.1-lp152.5.3.1 libfdisk1-debuginfo-2.33.1-lp152.5.3.1 libmount-devel-2.33.1-lp152.5.3.1 libmount-devel-static-2.33.1-lp152.5.3.1 libmount1-2.33.1-lp152.5.3.1 libmount1-debuginfo-2.33.1-lp152.5.3.1 libsmartcols-devel-2.33.1-lp152.5.3.1 libsmartcols-devel-static-2.33.1-lp152.5.3.1 libsmartcols1-2.33.1-lp152.5.3.1 libsmartcols1-debuginfo-2.33.1-lp152.5.3.1 libuuid-devel-2.33.1-lp152.5.3.1 libuuid-devel-static-2.33.1-lp152.5.3.1 libuuid1-2.33.1-lp152.5.3.1 libuuid1-debuginfo-2.33.1-lp152.5.3.1 util-linux-2.33.1-lp152.5.3.1 util-linux-debuginfo-2.33.1-lp152.5.3.1 util-linux-debugsource-2.33.1-lp152.5.3.1 util-linux-systemd-2.33.1-lp152.5.3.1 util-linux-systemd-debuginfo-2.33.1-lp152.5.3.1 util-linux-systemd-debugsource-2.33.1-lp152.5.3.1 uuidd-2.33.1-lp152.5.3.1 uuidd-debuginfo-2.33.1-lp152.5.3.1 - openSUSE Leap 15.2 (x86_64): libblkid-devel-32bit-2.33.1-lp152.5.3.1 libblkid1-32bit-2.33.1-lp152.5.3.1 libblkid1-32bit-debuginfo-2.33.1-lp152.5.3.1 libmount-devel-32bit-2.33.1-lp152.5.3.1 libmount1-32bit-2.33.1-lp152.5.3.1 libmount1-32bit-debuginfo-2.33.1-lp152.5.3.1 libuuid-devel-32bit-2.33.1-lp152.5.3.1 libuuid1-32bit-2.33.1-lp152.5.3.1 libuuid1-32bit-debuginfo-2.33.1-lp152.5.3.1 python3-libmount-2.33.1-lp152.5.3.1 python3-libmount-debuginfo-2.33.1-lp152.5.3.1 python3-libmount-debugsource-2.33.1-lp152.5.3.1 - openSUSE Leap 15.2 (noarch): util-linux-lang-2.33.1-lp152.5.3.1 References: https://bugzilla.suse.com/1149911 https://bugzilla.suse.com/1151708 https://bugzilla.suse.com/1168235 https://bugzilla.suse.com/1168389

1 0

openSUSE-RU-2020:1248-1: moderate: Recommended update for inkscape
by maintenance＠opensuse.org 23 Aug '20

23 Aug '20

openSUSE Recommended Update: Recommended update for inkscape ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1248-1 Rating: moderate References: #1171258 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for inkscape fixes the following issue: - Remove inkscape-extension-skencil completely for Leap 15.2 by now. (jsc#SLE-12254, bsc#1171258) The extension was built only on openSUSE in the past, nowadays: * Tumbleweed does not build it since skencil does not support python 3. * SLE has never built and shipped the extension. Hence this submission actually disables the extension on Leap 15.2 and above to keep it consistent with SLE and TW. The stub for packaging the extension is still kept in the spec for future needs when we bring skencil back to the release. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1248=1 Package List: - openSUSE Leap 15.2 (noarch): inkscape-lang-0.92.2-lp152.8.3.1 - openSUSE Leap 15.2 (x86_64): inkscape-0.92.2-lp152.8.3.1 inkscape-debuginfo-0.92.2-lp152.8.3.1 inkscape-debugsource-0.92.2-lp152.8.3.1 inkscape-extensions-dia-0.92.2-lp152.8.3.1 inkscape-extensions-extra-0.92.2-lp152.8.3.1 inkscape-extensions-fig-0.92.2-lp152.8.3.1 inkscape-extensions-gimp-0.92.2-lp152.8.3.1 References: https://bugzilla.suse.com/1171258

1 0

openSUSE-RU-2020:1249-1: moderate: Recommended update for util-linux
by maintenance＠opensuse.org 23 Aug '20

23 Aug '20

openSUSE Recommended Update: Recommended update for util-linux ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1249-1 Rating: moderate References: #1149911 #1151708 #1168235 #1168389 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for util-linux fixes the following issues: - blockdev: Do not fail --report on kpartx-style partitions on multipath. (bsc#1168235) - nologin: Add support for -c to prevent error from su -c. (bsc#1151708) - Avoid triggering autofs in lookup_umount_fs_by_statfs. (bsc#1168389) - mount: Fall back to device node name if /dev/mapper link not found. (bsc#1149911) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1249=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libblkid-devel-2.33.1-lp151.3.6.1 libblkid-devel-static-2.33.1-lp151.3.6.1 libblkid1-2.33.1-lp151.3.6.1 libblkid1-debuginfo-2.33.1-lp151.3.6.1 libfdisk-devel-2.33.1-lp151.3.6.1 libfdisk-devel-static-2.33.1-lp151.3.6.1 libfdisk1-2.33.1-lp151.3.6.1 libfdisk1-debuginfo-2.33.1-lp151.3.6.1 libmount-devel-2.33.1-lp151.3.6.1 libmount-devel-static-2.33.1-lp151.3.6.1 libmount1-2.33.1-lp151.3.6.1 libmount1-debuginfo-2.33.1-lp151.3.6.1 libsmartcols-devel-2.33.1-lp151.3.6.1 libsmartcols-devel-static-2.33.1-lp151.3.6.1 libsmartcols1-2.33.1-lp151.3.6.1 libsmartcols1-debuginfo-2.33.1-lp151.3.6.1 libuuid-devel-2.33.1-lp151.3.6.1 libuuid-devel-static-2.33.1-lp151.3.6.1 libuuid1-2.33.1-lp151.3.6.1 libuuid1-debuginfo-2.33.1-lp151.3.6.1 util-linux-2.33.1-lp151.3.6.1 util-linux-debuginfo-2.33.1-lp151.3.6.1 util-linux-debugsource-2.33.1-lp151.3.6.1 util-linux-systemd-2.33.1-lp151.3.6.1 util-linux-systemd-debuginfo-2.33.1-lp151.3.6.1 util-linux-systemd-debugsource-2.33.1-lp151.3.6.1 uuidd-2.33.1-lp151.3.6.1 uuidd-debuginfo-2.33.1-lp151.3.6.1 - openSUSE Leap 15.1 (noarch): util-linux-lang-2.33.1-lp151.3.6.1 - openSUSE Leap 15.1 (x86_64): libblkid-devel-32bit-2.33.1-lp151.3.6.1 libblkid1-32bit-2.33.1-lp151.3.6.1 libblkid1-32bit-debuginfo-2.33.1-lp151.3.6.1 libmount-devel-32bit-2.33.1-lp151.3.6.1 libmount1-32bit-2.33.1-lp151.3.6.1 libmount1-32bit-debuginfo-2.33.1-lp151.3.6.1 libuuid-devel-32bit-2.33.1-lp151.3.6.1 libuuid1-32bit-2.33.1-lp151.3.6.1 libuuid1-32bit-debuginfo-2.33.1-lp151.3.6.1 python3-libmount-2.33.1-lp151.3.6.1 python3-libmount-debuginfo-2.33.1-lp151.3.6.1 python3-libmount-debugsource-2.33.1-lp151.3.6.1 References: https://bugzilla.suse.com/1149911 https://bugzilla.suse.com/1151708 https://bugzilla.suse.com/1168235 https://bugzilla.suse.com/1168389

1 0

openSUSE-RU-2020:1247-1: moderate: Recommended update for devscripts
by maintenance＠opensuse.org 23 Aug '20

23 Aug '20

openSUSE Recommended Update: Recommended update for devscripts ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1247-1 Rating: moderate References: #1174163 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for devscripts fixes the following issue: Update from version 2.15.1 to version 2.19.5 (bsc#1174163) - Add conflicts on packages with the same binaries. - Fixed license tag as suggested by licensedigger. - Changed download location for source tarball from Debian package pool to salsa.debian.org to avoid download errors. - Remove support for ancient openSUSE and non-SUSE distributions. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1247=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): devscripts-2.19.5-lp151.3.8.1 devscripts-debuginfo-2.19.5-lp151.3.8.1 - openSUSE Leap 15.1 (noarch): checkbashisms-2.19.5-lp151.3.8.1 References: https://bugzilla.suse.com/1174163

1 0

openSUSE-SU-2020:1243-1: important: Security update for postgresql12
by opensuse-security＠opensuse.org 22 Aug '20

22 Aug '20

openSUSE Security Update: Security update for postgresql12 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1243-1 Rating: important References: #1175193 #1175194 Cross-References: CVE-2020-14349 CVE-2020-14350 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for postgresql12 fixes the following issues: - update to 12.4: * CVE-2020-14349, bsc#1175193: Set a secure search_path in logical replication walsenders and apply workers * CVE-2020-14350, bsc#1175194: Make contrib modules' installation scripts more secure. * https://www.postgresql.org/docs/12/release-12-4.html This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1243=1 Package List: - openSUSE Leap 15.1 (x86_64): libecpg6-12.4-lp151.6.1 libecpg6-debuginfo-12.4-lp151.6.1 libpq5-12.4-lp151.6.1 libpq5-debuginfo-12.4-lp151.6.1 postgresql12-12.4-lp151.6.1 postgresql12-contrib-12.4-lp151.6.1 postgresql12-contrib-debuginfo-12.4-lp151.6.1 postgresql12-debuginfo-12.4-lp151.6.1 postgresql12-debugsource-12.4-lp151.6.1 postgresql12-devel-12.4-lp151.6.1 postgresql12-devel-debuginfo-12.4-lp151.6.1 postgresql12-llvmjit-12.4-lp151.6.1 postgresql12-llvmjit-debuginfo-12.4-lp151.6.1 postgresql12-plperl-12.4-lp151.6.1 postgresql12-plperl-debuginfo-12.4-lp151.6.1 postgresql12-plpython-12.4-lp151.6.1 postgresql12-plpython-debuginfo-12.4-lp151.6.1 postgresql12-pltcl-12.4-lp151.6.1 postgresql12-pltcl-debuginfo-12.4-lp151.6.1 postgresql12-server-12.4-lp151.6.1 postgresql12-server-debuginfo-12.4-lp151.6.1 postgresql12-server-devel-12.4-lp151.6.1 postgresql12-server-devel-debuginfo-12.4-lp151.6.1 postgresql12-test-12.4-lp151.6.1 - openSUSE Leap 15.1 (noarch): postgresql12-docs-12.4-lp151.6.1 References: https://www.suse.com/security/cve/CVE-2020-14349.html https://www.suse.com/security/cve/CVE-2020-14350.html https://bugzilla.suse.com/1175193 https://bugzilla.suse.com/1175194

1 0

openSUSE-RU-2020:1245-1: moderate: Recommended update for sysfsutils
by maintenance＠opensuse.org 22 Aug '20

22 Aug '20

openSUSE Recommended Update: Recommended update for sysfsutils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1245-1 Rating: moderate References: #1155305 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for sysfsutils fixes the following issue: - Fix cdev name comparison. (bsc#1155305) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1245=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): sysfsutils-2.1.0-lp152.4.3.1 sysfsutils-debuginfo-2.1.0-lp152.4.3.1 sysfsutils-debugsource-2.1.0-lp152.4.3.1 sysfsutils-devel-2.1.0-lp152.4.3.1 - openSUSE Leap 15.2 (x86_64): sysfsutils-32bit-2.1.0-lp152.4.3.1 sysfsutils-32bit-debuginfo-2.1.0-lp152.4.3.1 References: https://bugzilla.suse.com/1155305

1 0

openSUSE-SU-2020:1244-1: important: Security update for postgresql12
by opensuse-security＠opensuse.org 22 Aug '20

22 Aug '20

openSUSE Security Update: Security update for postgresql12 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1244-1 Rating: important References: #1175193 #1175194 Cross-References: CVE-2020-14349 CVE-2020-14350 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for postgresql12 fixes the following issues: - update to 12.4: * CVE-2020-14349, bsc#1175193: Set a secure search_path in logical replication walsenders and apply workers * CVE-2020-14350, bsc#1175194: Make contrib modules' installation scripts more secure. * https://www.postgresql.org/docs/12/release-12-4.html This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1244=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libecpg6-12.4-lp152.3.7.1 libecpg6-debuginfo-12.4-lp152.3.7.1 libpq5-12.4-lp152.3.7.1 libpq5-debuginfo-12.4-lp152.3.7.1 postgresql12-12.4-lp152.3.7.1 postgresql12-contrib-12.4-lp152.3.7.1 postgresql12-contrib-debuginfo-12.4-lp152.3.7.1 postgresql12-debuginfo-12.4-lp152.3.7.1 postgresql12-debugsource-12.4-lp152.3.7.1 postgresql12-devel-12.4-lp152.3.7.1 postgresql12-devel-debuginfo-12.4-lp152.3.7.1 postgresql12-llvmjit-12.4-lp152.3.7.1 postgresql12-llvmjit-debuginfo-12.4-lp152.3.7.1 postgresql12-plperl-12.4-lp152.3.7.1 postgresql12-plperl-debuginfo-12.4-lp152.3.7.1 postgresql12-plpython-12.4-lp152.3.7.1 postgresql12-plpython-debuginfo-12.4-lp152.3.7.1 postgresql12-pltcl-12.4-lp152.3.7.1 postgresql12-pltcl-debuginfo-12.4-lp152.3.7.1 postgresql12-server-12.4-lp152.3.7.1 postgresql12-server-debuginfo-12.4-lp152.3.7.1 postgresql12-server-devel-12.4-lp152.3.7.1 postgresql12-server-devel-debuginfo-12.4-lp152.3.7.1 postgresql12-test-12.4-lp152.3.7.1 - openSUSE Leap 15.2 (x86_64): libecpg6-32bit-12.4-lp152.3.7.1 libecpg6-32bit-debuginfo-12.4-lp152.3.7.1 libpq5-32bit-12.4-lp152.3.7.1 libpq5-32bit-debuginfo-12.4-lp152.3.7.1 - openSUSE Leap 15.2 (noarch): postgresql12-docs-12.4-lp152.3.7.1 References: https://www.suse.com/security/cve/CVE-2020-14349.html https://www.suse.com/security/cve/CVE-2020-14350.html https://bugzilla.suse.com/1175193 https://bugzilla.suse.com/1175194

1 0

openSUSE-RU-2020:1246-1: moderate: Recommended update for rt-tests
by maintenance＠opensuse.org 22 Aug '20

22 Aug '20

openSUSE Recommended Update: Recommended update for rt-tests ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1246-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for rt-tests fixes the following issues: Update to version 1.6 (jsc#SLE-12981) * New feature to get a snapshot of a running instance of cyclictest without stopping it by sending SIGUSR2 to the PID and reading a shared memory segment. This is especially useful if running cyclictest over a long period of time * Add SPDX tags V3 * New programs to the rt-tests suite - queuelat: simulates a network queue checking for latency violations in packet processing. - cyclicdeadline: used to test the deadline scheduler (SCHED_DEADLINE) - deadline_test: tests the deadline scheduler in a cyclictest manner - ssdd: a tracer to do a bunch of PTRACE_SINGLESTEPs This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1246=1 Package List: - openSUSE Leap 15.2 (x86_64): rt-tests-1.6-lp152.3.3.1 rt-tests-debuginfo-1.6-lp152.3.3.1 rt-tests-debugsource-1.6-lp152.3.3.1 References:

1 0

openSUSE-RU-2020:1240-1: important: Recommended update for ca-certificates-mozilla
by maintenance＠opensuse.org 21 Aug '20

21 Aug '20

openSUSE Recommended Update: Recommended update for ca-certificates-mozilla ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1240-1 Rating: important References: #1174673 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ca-certificates-mozilla fixes the following issues: Update to 2.42 state of the Mozilla NSS Certificate store (bsc#1174673) Removed CAs: * AddTrust External CA Root * AddTrust Class 1 CA Root * LuxTrust Global Root 2 * Staat der Nederlanden Root CA - G2 * Symantec Class 1 Public Primary Certification Authority - G4 * Symantec Class 2 Public Primary Certification Authority - G4 * VeriSign Class 3 Public Primary Certification Authority - G3 Added CAs: * certSIGN Root CA G2 * e-Szigno Root CA 2017 * Microsoft ECC Root Certificate Authority 2017 * Microsoft RSA Root Certificate Authority 2017 This update was imported from the SUSE:SLE-15-SP2:Update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1240=1 Package List: - openSUSE Leap 15.2 (noarch): ca-certificates-mozilla-2.42-lp152.2.3.1 References: https://bugzilla.suse.com/1174673

1 0

openSUSE-SU-2020:1241-1: important: Security update for dovecot23
by opensuse-security＠opensuse.org 21 Aug '20

21 Aug '20

openSUSE Security Update: Security update for dovecot23 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1241-1 Rating: important References: #1174922 #1174923 Cross-References: CVE-2020-12673 CVE-2020-12674 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for dovecot23 fixes the following issues: - CVE-2020-12673: improper implementation of NTLM does not check message buffer size (bsc#1174922). - CVE-2020-12674: improper implementation of RPA mechanism (bsc#1174923). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1241=1 Package List: - openSUSE Leap 15.1 (x86_64): dovecot23-2.3.10-lp151.2.12.1 dovecot23-backend-mysql-2.3.10-lp151.2.12.1 dovecot23-backend-mysql-debuginfo-2.3.10-lp151.2.12.1 dovecot23-backend-pgsql-2.3.10-lp151.2.12.1 dovecot23-backend-pgsql-debuginfo-2.3.10-lp151.2.12.1 dovecot23-backend-sqlite-2.3.10-lp151.2.12.1 dovecot23-backend-sqlite-debuginfo-2.3.10-lp151.2.12.1 dovecot23-debuginfo-2.3.10-lp151.2.12.1 dovecot23-debugsource-2.3.10-lp151.2.12.1 dovecot23-devel-2.3.10-lp151.2.12.1 dovecot23-fts-2.3.10-lp151.2.12.1 dovecot23-fts-debuginfo-2.3.10-lp151.2.12.1 dovecot23-fts-lucene-2.3.10-lp151.2.12.1 dovecot23-fts-lucene-debuginfo-2.3.10-lp151.2.12.1 dovecot23-fts-solr-2.3.10-lp151.2.12.1 dovecot23-fts-solr-debuginfo-2.3.10-lp151.2.12.1 dovecot23-fts-squat-2.3.10-lp151.2.12.1 dovecot23-fts-squat-debuginfo-2.3.10-lp151.2.12.1 References: https://www.suse.com/security/cve/CVE-2020-12673.html https://www.suse.com/security/cve/CVE-2020-12674.html https://bugzilla.suse.com/1174922 https://bugzilla.suse.com/1174923

1 0

openSUSE-RU-2020:1242-1: moderate: Recommended update for python-jaraco.functools
by maintenance＠opensuse.org 21 Aug '20

21 Aug '20

openSUSE Recommended Update: Recommended update for python-jaraco.functools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1242-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for python-jaraco.functools fixes the following issues: Downgrade to 2.0 to support the python 2 variant. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1242=1 Package List: - openSUSE Leap 15.2 (noarch): python2-jaraco.classes-2.0-lp152.2.3.1 python2-jaraco.functools-2.0-lp152.2.3.1 python3-jaraco.classes-2.0-lp152.2.3.1 python3-jaraco.functools-2.0-lp152.2.3.1 References:

1 0

openSUSE-RU-2020:1239-1: moderate: Recommended update for rt-tests
by maintenance＠opensuse.org 21 Aug '20

21 Aug '20

openSUSE Recommended Update: Recommended update for rt-tests ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1239-1 Rating: moderate References: Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for rt-tests fixes the following issues: Update to version 1.6 (jsc#SLE-12981) * New feature to get a snapshot of a running instance of cyclictest without stopping it by sending SIGUSR2 to the PID and reading a shared memory segment. This is especially useful if running cyclictest over a long period of time * Add SPDX tags V3 * New programs to the rt-tests suite - queuelat: simulates a network queue checking for latency violations in packet processing. - cyclicdeadline: used to test the deadline scheduler (SCHED_DEADLINE) - deadline_test: tests the deadline scheduler in a cyclictest manner - ssdd: a tracer to do a bunch of PTRACE_SINGLESTEPs This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1239=1 Package List: - openSUSE Leap 15.1 (x86_64): rt-tests-1.6-lp151.2.3.1 rt-tests-debuginfo-1.6-lp151.2.3.1 rt-tests-debugsource-1.6-lp151.2.3.1 References:

1 0

openSUSE-RU-2020:1238-1: moderate: Recommended update for python-parallax
by maintenance＠opensuse.org 21 Aug '20

21 Aug '20

openSUSE Recommended Update: Recommended update for python-parallax ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1238-1 Rating: moderate References: #1174894 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-parallax fixes the following issue: - Change format of scp command for ipv6 compatibility. (bsc#1174894) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1238=1 Package List: - openSUSE Leap 15.2 (noarch): python2-parallax-1.0.6-lp152.3.3.1 python3-parallax-1.0.6-lp152.3.3.1 References: https://bugzilla.suse.com/1174894

1 0

openSUSE-RU-2020:1237-1: moderate: Recommended update for prometheus-sap_host_exporter and prometheus-ha_cluster_exporter
by maintenance＠opensuse.org 21 Aug '20

21 Aug '20

openSUSE Recommended Update: Recommended update for prometheus-sap_host_exporter and prometheus-ha_cluster_exporter ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1237-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for prometheus-sap_host_exporter and prometheus-ha_cluster_exporter fixes the following issues: prometheus-sap_host_exporter: - Added * --version command line parameter - Fixed * Some usage details are now further clarified prometheus-ha_cluster_exporter: - Features * Added support for corosync v3 - Changed * The CLI flag --enable-timestamps and its config option have been marked as deprecated - Fixes * Fixed an issue with `corosync-quorumtool` parsing in Corosync v2.3.6 This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1237=1 Package List: - openSUSE Leap 15.2 (x86_64): prometheus-ha_cluster_exporter-1.1.0+git.1594637514.c1eae0c-lp152.2.3.1 prometheus-sap_host_exporter-0.5.1+git.1593777035.a5d05f8-lp152.3.3.1 References:

1 0

openSUSE-SU-2020:1236-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 21 Aug '20

21 Aug '20

openSUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1236-1 Rating: important References: #1065600 #1065729 #1120163 #1133021 #1149032 #1152472 #1152489 #1153274 #1154353 #1154488 #1155518 #1155798 #1165933 #1167773 #1168959 #1169771 #1171857 #1171988 #1172197 #1172201 #1172247 #1172963 #1173074 #1173468 #1173573 #1173813 #1173849 #1173941 #1173954 #1174002 #1174072 #1174116 #1174126 #1174127 #1174128 #1174129 #1174185 #1174205 #1174263 #1174264 #1174331 #1174332 #1174333 #1174356 #1174362 #1174396 #1174398 #1174407 #1174409 #1174411 #1174438 #1174462 #1174484 #1174513 #1174527 #1174543 #1174625 #1174627 #1174645 #1174689 #1174737 #1174757 #1174762 #1174770 #1174805 #1174824 #1174825 #1174852 #1174865 #1174880 #1174897 #1174906 #1174969 #1175009 #1175010 #1175011 #1175012 #1175013 #1175014 #1175015 #1175016 #1175017 #1175018 #1175019 #1175020 #1175021 #1175052 #1175112 #1175116 #1175149 #1175175 #1175176 #1175180 #1175181 #1175182 #1175183 #1175184 #1175185 #1175186 #1175187 #1175188 #1175189 #1175190 #1175191 #1175192 #1175195 #1175213 #1175263 #1175284 #1175296 #1175344 #1175345 #1175346 #1175347 #1175367 #1175377 Cross-References: CVE-2020-0305 CVE-2020-10135 CVE-2020-10781 CVE-2020-14331 CVE-2020-14356 CVE-2020-15780 CVE-2020-16166 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves 7 vulnerabilities and has 109 fixes is now available. Description: The openSUSE Leap 15.2 kernel was updated to receive various security and bugfixes. This update is signed with the new UEFI signing key for openSUSE. It contains rebuilds of all available KMP packages also rebuilt with the new UEFi signing key. (boo#1174543) The following security bugs were fixed: - CVE-2020-14356: A use after free vulnerability in cgroup BPF component was fixed (bsc#1175213). - CVE-2020-14331: A buffer over write in vgacon_scroll was fixed (bnc#1174205). - CVE-2020-16166: The Linux kernel allowed remote attackers to make observations that help to obtain sensitive information about the internal state of the network RNG, aka CID-f227e3ec3b5c. This is related to drivers/char/random.c and kernel/time/timer.c (bnc#1174757). - CVE-2020-10135: Legacy pairing and secure-connections pairing authentication in Bluetooth® BR/EDR Core Specification v5.2 and earlier may have allowed an unauthenticated user to complete authentication without pairing credentials via adjacent access. An unauthenticated, adjacent attacker could impersonate a Bluetooth BR/EDR master or slave to pair with a previously paired remote device to successfully complete the authentication procedure without knowing the link key (bnc#1171988). - CVE-2020-0305: In cdev_get of char_dev.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation (bnc#1174462). - CVE-2020-15780: An issue was discovered in drivers/acpi/acpi_configfs.c in the Linux kernel Injection of malicious ACPI tables via configfs could be used by attackers to bypass lockdown and secure boot restrictions, aka CID-75b0cea7bf30 (bnc#1173573). - CVE-2020-10781: zram sysfs resource consumption was fixed (bnc#1173074). The following non-security bugs were fixed: - 9p/trans_fd: Fix concurrency del of req_list in p9_fd_cancelled/p9_read_work (git-fixes). - ACPICA: Dispatcher: add status checks (git-fixes). - ACPI/IORT: Fix PMCG node single ID mapping handling (git-fixes). - ACPI: video: Use native backlight on Acer Aspire 5783z (git-fixes). - ACPI: video: Use native backlight on Acer TravelMate 5735Z (git-fixes). - af_key: pfkey_dump needs parameter validation (git-fixes). - agp/intel: Fix a memory leak on module initialisation failure (git-fixes). - ALSA: asihpi: delete duplicated word (git-fixes). - ALSA: atmel: Remove invalid "fall through" comments (git-fixes). - ALSA: core: pcm_iec958: fix kernel-doc (git-fixes). - ALSA: echoaduio: Drop superfluous volatile modifier (git-fixes). - ALSA: echoaudio: Address bugs in the interrupt handling (git-fixes). - ALSA: echoaudio: Fix potential Oops in snd_echo_resume() (git-fixes). - ALSA: echoaudio: Prevent races in calls to set_audio_format() (git-fixes). - ALSA: echoaudio: Prevent some noise on unloading the module (git-fixes). - ALSA: echoaudio: Race conditions around "opencount" (git-fixes). - ALSA: echoaudio: re-enable IRQs on failure path (git-fixes). - ALSA: echoaudio: Remove redundant check (git-fixes). - ALSA: firewire: fix kernel-doc (git-fixes). - ALSA: hda: Add support for Loongson 7A1000 controller (git-fixes). - ALSA: hda/ca0132 - Add new quirk ID for Recon3D (git-fixes). - ALSA: hda/ca0132 - Fix AE-5 microphone selection commands (git-fixes). - ALSA: hda/ca0132 - Fix ZxR Headphone gain control get value (git-fixes). - ALSA: hda: Enable sync-write operation as default for all controllers (git-fixes). - ALSA: hda: fix NULL pointer dereference during suspend (git-fixes). - ALSA: hda: fix snd_hda_codec_cleanup() documentation (git-fixes). - ALSA: hda - fix the micmute led status for Lenovo ThinkCentre AIO (git-fixes). - ALSA: hda/hdmi: Add quirk to force connectivity (git-fixes). - ALSA: hda/hdmi: Fix keep_power assignment for non-component devices (git-fixes). - ALSA: hda/hdmi: Use force connectivity quirk on another HP desktop (git-fixes). - ALSA: hda: Intel: add missing PCI IDs for ICL-H, TGL-H and EKL (jsc#SLE-13261). - ALSA: hda: Intel: add missing PCI IDs for ICL-H, TGL-H and EKL (jsc#SLE-13261). - ALSA: hda/realtek: Add alc269/alc662 pin-tables for Loongson-3 laptops (git-fixes). - ALSA: hda/realtek - change to suitable link model for ASUS platform (git-fixes). - ALSA: hda/realtek: Enable headset mic of Acer TravelMate B311R-31 with ALC256 (git-fixes). - ALSA: hda/realtek: enable headset mic of ASUS ROG Zephyrus G14(G401) series with ALC289 (git-fixes). - ALSA: hda/realtek: enable headset mic of ASUS ROG Zephyrus G15(GA502) series with ALC289 (git-fixes). - ALSA: hda/realtek - Enable Speaker for ASUS UX533 and UX534 (git-fixes). - ALSA: hda/realtek - Enable Speaker for ASUS UX563 (git-fixes). - ALSA: hda/realtek: Fix add a "ultra_low_power" function for intel reference board (alc256) (git-fixes). - ALSA: hda/realtek: Fixed ALC298 sound bug by adding quirk for Samsung Notebook Pen S (git-fixes). - ALSA: hda/realtek - Fixed HP right speaker no sound (git-fixes). - ALSA: hda/realtek: Fix pin default on Intel NUC 8 Rugged (git-fixes). - ALSA: hda/realtek - Fix unused variable warning (git-fixes). - ALSA: hda/realtek - fixup for yet another Intel reference board (git-fixes). - ALSA: hda/realtek: typo_fix: enable headset mic of ASUS ROG Zephyrus G14(GA401) series with ALC289 (git-fixes). - ALSA: hda - reverse the setting value in the micmute_led_set (git-fixes). - ALSA: hda/tegra: Disable sync-write operation (git-fixes). - ALSA: hda: Workaround for spurious wakeups on some Intel platforms (git-fixes). - ALSA: info: Drop WARN_ON() from buffer NULL sanity check (git-fixes). - ALSA: isa: delete repeated words in comments (git-fixes). - ALSA: isa/gus: remove 'set but not used' warning (git-fixes). - ALSA: isa/gus: remove -Wmissing-prototypes warnings (git-fixes). - ALSA: line6: add hw monitor volume control for POD HD500 (git-fixes). - ALSA: line6: Perform sanity check for each URB creation (git-fixes). - ALSA: line6: Sync the pending work cancel at disconnection (git-fixes). - ALSA: line6: Use kmemdup in podhd_set_monitor_level() (git-fixes). - ALSA: pci/asihpi: fix kernel-doc (git-fixes). - ALSA: pci/asihpi: remove 'set but not used' warning (git-fixes). - ALSA: pci/asihpi: remove 'set but not used' warnings (git-fixes). - ALSA: pci/au88x0: remove "defined but not used" warnings (git-fixes). - ALSA: pci/aw2-saa7146: remove 'set but not used' warning (git-fixes). - ALSA: pci/ctxfi/ctatc: fix kernel-doc (git-fixes). - ALSA: pci/ctxfi: fix kernel-doc warnings (git-fixes). - ALSA: pci: delete repeated words in comments (git-fixes). - ALSA: pci/echoaudio: remove 'set but not used' warning (git-fixes). - ALSA: pci/emu10k1: remove 'set but not used' warning (git-fixes). - ALSA: pci/es1938: remove 'set but not used' warning (git-fixes). - ALSA: pci/fm801: fix kernel-doc (git-fixes). - ALSA: pci/korg1212: remove 'set but not used' warnings (git-fixes). - ALSA: pci/oxygen/xonar_wm87x6: remove always true condition (git-fixes). - ALSA: pci/rme9652/hdspm: remove always true condition (git-fixes). - ALSA: pci/via82xx: remove 'set but not used' warnings (git-fixes). - ALSA: pcmcia/pdaudiocf: fix kernel-doc (git-fixes). - ALSA: seq: oss: Serialize ioctls (git-fixes). - ALSA: usb-audio: Add implicit feedback quirk for SSL2 (git-fixes). - ALSA: usb-audio: add quirk for Pioneer DDJ-RB (git-fixes). - ALSA: usb-audio: Add registration quirk for Kingston HyperX Cloud Flight S (git-fixes). - ALSA: usb-audio: add startech usb audio dock name (git-fixes). - ALSA: usb-audio: Add support for Lenovo ThinkStation P620 (git-fixes). - ALSA: usb-audio: Creative USB X-Fi Pro SB1095 volume knob support (git-fixes). - ALSA: usb-audio: Disable Lenovo P620 Rear line-in volume control (git-fixes). - ALSA: usb-audio: endpoint : remove needless check before usb_free_coherent() (git-fixes). - ALSA: usb-audio: fix overeager device match for MacroSilicon MS2109 (bsc#1174625). - ALSA: usb-audio: Fix race against the error recovery URB submission (git-fixes). - ALSA: usb-audio: Fix some typos (git-fixes). - ALSA: usb-audio: fix spelling mistake "buss" -> "bus" (git-fixes). - ALSA: usb-audio: work around streaming quirk for MacroSilicon MS2109 (git-fixes). - ALSA: usb/line6: remove 'defined but not used' warning (git-fixes). - ALSA: vx_core: remove warning for empty loop body (git-fixes). - ALSA: xen: remove 'set but not used' warning (git-fixes). - ALSA: xen: Remove superfluous fall through comments (git-fixes). - apparmor: ensure that dfa state tables have entries (git-fixes). - apparmor: fix introspection of of task mode for unconfined tasks (git-fixes). - apparmor: Fix memory leak of profile proxy (git-fixes). - apparmor: Fix use-after-free in aa_audit_rule_init (git-fixes). - apparmor: remove useless aafs_create_symlink (git-fixes). - appletalk: Fix atalk_proc_init() return path (git-fixes). - arm64: armv8_deprecated: Fix undef_hook mask for thumb setend (bsc#1175180). - arm64: cacheflush: Fix KGDB trap detection (bsc#1175188). - arm64: csum: Fix handling of bad packets (bsc#1175192). - arm64: dts: allwinner: a64: Remove unused SPDIF sound card (none bsc#1175016). - arm64: dts: clearfog-gt-8k: set gigabit PHY reset deassert delay (bsc#1175347). - arm64: dts: exynos: Fix silent hang after boot on Espresso (bsc#1175346). - arm64: dts: imx8mm-evk: correct ldo1/ldo2 voltage range (none bsc#1175019). - arm64: dts: imx8qxp-mek: Remove unexisting Ethernet PHY (bsc#1175345). - arm64: dts: librem5-devkit: add a vbus supply to usb0 (none bsc#1175013). - arm64: dts: ls1028a: delete extraneous #interrupt-cells for ENETC RCIE (none bsc#1175012). - arm64: dts: ls1043a-rdb: correct RGMII delay mode to rgmii-id (bsc#1174398). - arm64: dts: ls1046ardb: set RGMII interfaces to RGMII_ID mode (bsc#1174398). - arm64: dts: qcom: msm8998-clamshell: Fix label on l15 regulator (git-fixes). - arm64: dts: rockchip: fix rk3399-puma gmac reset gpio (none bsc#1175021). - arm64: dts: rockchip: fix rk3399-puma vcc5v0-host gpio (none bsc#1175020). - arm64: dts: rockchip: Rename dwc3 device nodes on rk3399 to make dtc happy (none bsc#1175015). - arm64: dts: rockchip: Replace RK805 PMIC node name with "pmic" on rk3328 boards (none bsc#1175014). - arm64: dts: uDPU: fix broken ethernet (bsc#1175344). - arm64: dts: uniphier: Set SCSSI clock and reset IDs for each channel (none bsc#1175011). - arm64: errata: use arm_smccc_1_1_get_conduit() (bsc#1174906). - arm64: Fix PTRACE_SYSEMU semantics (bsc#1175185). - arm64: fix the flush_icache_range arguments in machine_kexec (bsc#1175184). - arm64: hugetlb: avoid potential NULL dereference (bsc#1175183). - arm64: hw_breakpoint: Do not invoke overflow handler on uaccess watchpoints (bsc#1175189). - arm64: insn: Fix two bugs in encoding 32-bit logical immediates (bsc#1175186). - arm64: kexec_file: print appropriate variable (bsc#1175187). - arm64: kgdb: Fix single-step exception handling oops (bsc#1175191). - arm64: Retrieve stolen time as paravirtualized guest (bsc#1172197 jsc#SLE-13593). - arm64: Retrieve stolen time as paravirtualized guest (bsc#1172197 jsc#SLE-13593). - arm64: tegra: Enable I2C controller for EEPROM (none bsc#1175010). - arm64: tegra: Fix ethernet phy-mode for Jetson Xavier (none bsc#1175017). - arm64: tegra: Fix flag for 64-bit resources in 'ranges' property (none bsc#1175018). - arm64: tegra: Fix Tegra194 PCIe compatible string (none bsc#1175009). - arm64: vdso: Add -fasynchronous-unwind-tables to cflags (bsc#1175182). - arm64: vdso: do not free unallocated pages (bsc#1175181). - arm/arm64: Make use of the SMCCC 1.1 wrapper (bsc#1174906). - arm/arm64: Provide a wrapper for SMCCC 1.1 calls (bsc#1174906). - arm/arm64: smccc/psci: add arm_smccc_1_1_get_conduit() (bsc#1174906). - ARM: percpu.h: fix build error (git-fixes). - arm: spectre-v2: use arm_smccc_1_1_get_conduit() (bsc#1174906). - ASoC: codecs: max98373: Removed superfluous volume control from chip default (git-fixes). - ASoc: codecs: max98373: remove Idle_bias_on to let codec suspend (git-fixes). - ASoC: fsl_sai: Fix value of FSL_SAI_CR1_RFW_MASK (git-fixes). - ASoC: hdac_hda: fix deadlock after PCM open error (git-fixes). - ASoC: Intel: bxt_rt298: add missing .owner field (git-fixes). - ASoC: Intel: bytcht_es8316: Add missed put_device() (git-fixes). - ASoC: meson: axg-tdmin: fix g12a skew (git-fixes). - ASoC: meson: axg-tdm-interface: fix link fmt setup (git-fixes). - ASoC: meson: fixes the missed kfree() for axg_card_add_tdm_loopback (git-fixes). - ASoC: rockchip: add format and rate constraints on rk3399 (git-fixes). - ASoC: rt286: fix unexpected interrupt happens (git-fixes). - ASoC: rt5670: Add new gpio1_is_ext_spk_en quirk and enable it on the Lenovo Miix 2 10 (git-fixes). - ASoC: rt5670: Correct RT5670_LDO_SEL_MASK (git-fixes). - ASoC: rt5670: Fix dac- and adc- vol-tlv values being off by a factor of 10 (git-fixes). - ASoC: rt5682: Report the button event in the headset type only (git-fixes). - ASoC: SOF: nocodec: add missing .owner field (git-fixes). - ASoC: topology: fix kernel oops on route addition error (git-fixes). - ASoC: topology: fix tlvs in error handling for widget_dmixer (git-fixes). - ASoC: wm8974: fix Boost Mixer Aux Switch (git-fixes). - ASoC: wm8974: remove unsupported clock mode (git-fixes). - ath10k: Acquire tx_lock in tx error paths (git-fixes). - ath10k: enable transmit data ack RSSI for QCA9884 (git-fixes). - ath9k: Fix general protection fault in ath9k_hif_usb_rx_cb (git-fixes). - ath9k: Fix regression with Atheros 9271 (git-fixes). - atm: fix atm_dev refcnt leaks in atmtcp_remove_persistent (git-fixes). - AX.25: Fix out-of-bounds read in ax25_connect() (git-fixes). - AX.25: Prevent integer overflows in connect and sendmsg (git-fixes). - AX.25: Prevent out-of-bounds read in ax25_sendmsg() (git-fixes). - ax88172a: fix ax88172a_unbind() failures (git-fixes). - b43: Remove uninitialized_var() usage (git-fixes). - blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (bsc#1165933). - Bluetooth: btmtksdio: fix up firmware download sequence (git-fixes). - Bluetooth: btusb: fix up firmware download sequence (git-fixes). - Bluetooth: fix kernel oops in store_pending_adv_report (git-fixes). - Bluetooth: Fix slab-out-of-bounds read in hci_extended_inquiry_result_evt() (git-fixes). - Bluetooth: Fix update of connection state in `hci_encrypt_cfm` (git-fixes). - Bluetooth: hci_h5: Set HCI_UART_RESET_ON_INIT to correct flags (git-fixes). - Bluetooth: hci_serdev: Only unregister device if it was registered (git-fixes). - Bluetooth: Prevent out-of-bounds read in hci_inquiry_result_evt() (git-fixes). - Bluetooth: Prevent out-of-bounds read in hci_inquiry_result_with_rssi_evt() (git-fixes). - bnxt_en: Init ethtool link settings after reading updated PHY configuration (jsc#SLE-8371 bsc#1153274). - bnxt_en: Init ethtool link settings after reading updated PHY configuration (jsc#SLE-8371 bsc#1153274). - bpf: Do not allow btf_ctx_access with __int128 types (bsc#1155518). - bpf: Fix map leak in HASH_OF_MAPS map (bsc#1155518). - bpfilter: fix up a sparse annotation (bsc#1155518). - bpfilter: Initialize pos variable (bsc#1155518). - bpfilter: reject kernel addresses (bsc#1155518). - bpfilter: switch to kernel_write (bsc#1155518). - bpf: net: Avoid copying sk_user_data of reuseport_array during sk_clone (bsc#1155518). - bpf: net: Avoid incorrect bpf_sk_reuseport_detach call (bsc#1155518). - brcmfmac: Set timeout value when configuring power save (bsc#1173468). - brcmfmac: Transform compatible string for FW loading (bsc#1169771). - bridge: Avoid infinite loop when suppressing NS messages with invalid options (networking-stable-20_06_10). - bridge: mcast: Fix MLD2 Report IPv6 payload length check (git-fixes). - btmrvl: Fix firmware filename for sd8977 chipset (git-fixes). - btmrvl: Fix firmware filename for sd8997 chipset (git-fixes). - btrfs: add assertions for tree == inode->io_tree to extent IO helpers (bsc#1174438). - btrfs: avoid unnecessary splits when setting bits on an extent io tree (bsc#1175377). - btrfs: change timing for qgroup reserved space for ordered extents to fix reserved space leak (bsc#1172247). - btrfs: delete the ordered isize update code (bsc#1175377). - btrfs: do not set path->leave_spinning for truncate (bsc#1175377). - btrfs: drop argument tree from btrfs_lock_and_flush_ordered_range (bsc#1174438). - btrfs: file: reserve qgroup space after the hole punch range is locked (bsc#1172247). - btrfs: fix a block group ref counter leak after failure to remove block group (bsc#1175149). - btrfs: fix block group leak when removing fails (bsc#1175149). - btrfs: fix bytes_may_use underflow when running balance and scrub in parallel (bsc#1175149). - btrfs: fix corrupt log due to concurrent fsync of inodes with shared extents (bsc#1175149). - btrfs: fix data block group relocation failure due to concurrent scrub (bsc#1175149). - btrfs: fix deadlock during fast fsync when logging prealloc extents beyond eof (bsc#1175377). - btrfs: fix double free on ulist after backref resolution failure (bsc#1175149). - btrfs: fix failure of RWF_NOWAIT write into prealloc extent beyond eof (bsc#1174438). - btrfs: fix fatal extent_buffer readahead vs releasepage race (bsc#1175149). - btrfs: fix hang on snapshot creation after RWF_NOWAIT write (bsc#1174438). - btrfs: fix lost i_size update after cloning inline extent (bsc#1175377). - btrfs: fix page leaks after failure to lock page for delalloc (bsc#1175149). - btrfs: fix race between block group removal and block group creation (bsc#1175149). - btrfs: fix race between shrinking truncate and fiemap (bsc#1175377). - btrfs: fix RWF_NOWAIT write not failling when we need to cow (bsc#1174438). - btrfs: fix RWF_NOWAIT writes blocking on extent locks and waiting for IO (bsc#1174438). - btrfs: fix space_info bytes_may_use underflow after nocow buffered write (bsc#1175149). - btrfs: fix space_info bytes_may_use underflow during space cache writeout (bsc#1175149). - btrfs: fix wrong file range cleanup after an error filling dealloc range (bsc#1175149). - btrfs: inode: fix NULL pointer dereference if inode does not need compression (bsc#1174484). - btrfs: inode: move qgroup reserved space release to the callers of insert_reserved_file_extent() (bsc#1172247). - btrfs: inode: refactor the parameters of insert_reserved_file_extent() (bsc#1172247). - btrfs: introduce per-inode file extent tree (bsc#1175377). - btrfs: make btrfs_ordered_extent naming consistent with btrfs_file_extent_item (bsc#1172247). - btrfs: move extent_io_tree defs to their own header (bsc#1175377). - btrfs: Move free_pages_out label in inline extent handling branch in compress_file_range (bsc#1175263). - btrfs: qgroup: allow to unreserve range without releasing other ranges (bsc#1120163). - btrfs: qgroup: fix data leak caused by race between writeback and truncate (bsc#1172247). - btrfs: qgroup: remove ASYNC_COMMIT mechanism in favor of reserve retry-after-EDQUOT (bsc#1120163). - btrfs: qgroup: try to flush qgroup space when we get -EDQUOT (bsc#1120163). - btrfs: Remove delalloc_end argument from extent_clear_unlock_delalloc (bsc#1175149). - btrfs: Remove leftover of in-band dedupe (bsc#1175149). - btrfs: remove unnecessary delalloc mutex for inodes (bsc#1175377). - btrfs: Rename btrfs_join_transaction_nolock (bsc#1175377). - btrfs: replace all uses of btrfs_ordered_update_i_size (bsc#1175377). - btrfs: separate out the extent io init function (bsc#1175377). - btrfs: separate out the extent leak code (bsc#1175377). - btrfs: trim: fix underflow in trim length to prevent access beyond device boundary (bsc#1175263). - btrfs: use btrfs_ordered_update_i_size in clone_finish_inode_update (bsc#1175377). - btrfs: use correct count in btrfs_file_write_iter() (bsc#1174438). - btrfs: use the file extent tree infrastructure (bsc#1175377). - bus: ti-sysc: Do not disable on suspend for no-idle (git-fixes). - cfg80211: check vendor command doit pointer before use (git-fixes). - clk: actions: Fix h_clk for Actions S500 SoC (git-fixes). - clk: at91: clk-generated: check best_rate against ranges (git-fixes). - clk: at91: clk-generated: continue if __clk_determine_rate() returns error (git-fixes). - clk: at91: sam9x60: fix main rc oscillator frequency (git-fixes). - clk: at91: sam9x60-pll: check fcore against ranges (git-fixes). - clk: at91: sam9x60-pll: use logical or for range check (git-fixes). - clk: at91: sckc: register slow_rc with accuracy option (git-fixes). - clk: bcm2835: Do not use prediv with bcm2711's PLLs (bsc#1174865). - clk: bcm63xx-gate: fix last clock availability (git-fixes). - clk: clk-atlas6: fix return value check in atlas6_clk_init() (git-fixes). - clk: iproc: round clock rate to the closest (git-fixes). - clk: qcom: gcc-sdm660: Add missing modem reset (git-fixes). - clk: qcom: gcc-sdm660: Fix up gcc_mss_mnoc_bimc_axi_clk (git-fixes). - clk: rockchip: Revert "fix wrong mmc sample phase shift for rk3328" (git-fixes). - clk: scmi: Fix min and max rate when registering clocks with discrete rates (git-fixes). - clk: spear: Remove uninitialized_var() usage (git-fixes). - clk: st: Remove uninitialized_var() usage (git-fixes). - console: newport_con: fix an issue about leak related system resources (git-fixes). - crc-t10dif: Fix potential crypto notify dead-lock (git-fixes). - crypto: caam - Fix argument type in handle_imx6_err005766 (git-fixes). - crypto: ccp - Fix use of merged scatterlists (git-fixes). - crypto: ccree - fix resource leak on error path (git-fixes). - crypto: cpt - do not sleep of CRYPTO_TFM_REQ_MAY_SLEEP was not specified (git-fixes). - crypto: hisilicon - do not sleep of CRYPTO_TFM_REQ_MAY_SLEEP was not specified (git-fixes). - crypto: qat - fix double free in qat_uclo_create_batch_init_list (git-fixes). - dccp: Fix possible memleak in dccp_init and dccp_fini (networking-stable-20_06_16). - Delete patches.suse/apparmor-Fix-memory-leak-of-profile-proxy.patch (bsc#1174627) - devinet: fix memleak in inetdev_init() (networking-stable-20_06_07). - devlink: ignore -EOPNOTSUPP errors on dumpit (bsc#1154353). - /dev/mem: Add missing memory barriers for devmem_inode (git-fixes). - /dev/mem: Revoke mappings when a driver claims the region (git-fixes). - devres: keep both device name and resource name in pretty name (git-fixes). - dlm: remove BUG() before panic() (git-fixes). - dmaengine: dmatest: stop completed threads when running without set channel (git-fixes). - dmaengine: dw: Initialize channel before each transfer (git-fixes). - dmaengine: fsl-edma-common: correct DSIZE_32BYTE (git-fixes). - dmaengine: fsl-edma: Fix NULL pointer exception in fsl_edma_tx_handler (git-fixes). - dmaengine: fsl-edma: fix wrong tcd endianness for big-endian cpu (git-fixes). - dmaengine: imx-sdma: Fix: Remove 'always true' comparison (git-fixes). - dmaengine: ioat setting ioat timeout as module parameter (git-fixes). - dmaengine: mcf-edma: Fix NULL pointer exception in mcf_edma_tx_handler (git-fixes). - dmaengine: sh: usb-dmac: set tx_result parameters (git-fixes). - dmaengine: tegra210-adma: Fix runtime PM imbalance on error (git-fixes). - dm: do not use waitqueue for request-based DM (bsc#1165933). - docs: fix memory.low description in cgroup-v2.rst (git-fixes). (SLE documentation might refer to cgroup-v2.rst.) - dpaa_eth: FMan erratum A050385 workaround (bsc#1174396). - dpaa_eth: Make dpaa_a050385_wa static (bsc#1174396). - drbd: Remove uninitialized_var() usage (git-fixes). - driver core: Avoid binding drivers to dead devices (git-fixes). - drivers/firmware/psci: Fix memory leakage in alloc_init_cpu_groups() (git-fixes). - drivers/net/wan: lapb: Corrected the usage of skb_cow (git-fixes). - drm/amd/display: Clear dm_state for fast updates (git-fixes). - drm/amd/display: Use kfree() to free rgb_user in calculate_user_regamma_ramp() (git-fixes). - drm/amdgpu/atomfirmware: fix vram_info fetching for renoir (git-fixes). - drm/amdgpu/display: use blanked rather than plane state for sync (bsc#1152489) * refreshed for context changes * protect code with CONFIG_DRM_AMD_DC_DCN2_0 - drm/amdgpu: do not do soft recovery if gpu_recovery=0 (git-fixes). - drm/amdgpu: Fix NULL dereference in dpm sysfs handlers (git-fixes). - drm/amdgpu: fix preemption unit test (git-fixes). - drm/amdgpu/gfx10: fix race condition for kiq (git-fixes). - drm/amdgpu: Prevent kernel-infoleak in amdgpu_info_ioctl() (git-fixes). - drm/amdgpu/sdma5: fix wptr overwritten in ->get_wptr() (git-fixes). - drm/amdgpu: use %u rather than %d for sclk/mclk (git-fixes). - drm/amd/powerplay: fix a crash when overclocking Vega M (bsc#1152472) - drm/amd/powerplay: fix a crash when overclocking Vega M (git-fixes). - drm/arm: fix unintentional integer overflow on left shift (git-fixes). - drm/bridge: dw-hdmi: Do not cleanup i2c adapter and ddc ptr in (bsc#1152472) * refreshed for context changes - drm/bridge: sil_sii8620: initialize return of sii8620_readb (git-fixes). - drm/bridge: ti-sn65dsi86: Clear old error bits before AUX transfers (git-fixes). - drm/bridge: ti-sn65dsi86: Do not use kernel-doc comment for local array (git-fixes). - drm/bridge: ti-sn65dsi86: Fix off-by-one error in clock choice (bsc#1152489) * refreshed for context changes - drm/dbi: Fix SPI Type 1 (9-bit) transfer (bsc#1152472) * move drm_mipi_dbi.c -> tinydrm/mipi-dbi.c - drm/etnaviv: Fix error path on failure to enable bus clk (git-fixes). - drm/exynos: fix ref count leak in mic_pre_enable (git-fixes). - drm/exynos: Properly propagate return value in drm_iommu_attach_device() (git-fixes). - drm: fix drm_dp_mst_port refcount leaks in drm_dp_mst_allocate_vcpi (git-fixes). - drm/gem: Fix a leak in drm_gem_objects_lookup() (git-fixes). - drm: hold gem reference until object is no longer accessed (git-fixes). - drm/i915: Actually emit the await_start (bsc#1174737). - drm/i915: Copy across scheduler behaviour flags across submit fences (bsc#1174737). - drm/i915: Do not poison i915_request.link on removal (bsc#1174737). - drm/i915: Drop no-semaphore boosting (bsc#1174737). - drm/i915: Eliminate the trylock for awaiting an earlier request (bsc#1174737). - drm/i915/fbc: Fix fence_y_offset handling (bsc#1152489) * context changes - drm/i915: Flush execution tasklets before checking request status (bsc#1174737). - drm/i915: Flush tasklet submission before sleeping on i915_request_wait (bsc#1174737). - drm/i915/gt: Close race between engine_park and intel_gt_retire_requests (git-fixes). - drm/i915/gt: Flush submission tasklet before waiting/retiring (bsc#1174737). - drm/i915/gt: Ignore irq enabling on the virtual engines (git-fixes). - drm/i915/gt: Move new timelines to the end of active_list (git-fixes). - drm/i915/gt: Only swap to a random sibling once upon creation (bsc#1152489) * context changes - drm/i915/gt: Unlock engine-pm after queuing the kernel context switch (git-fixes). - drm/i915: Ignore submit-fences on the same timeline (bsc#1174737). - drm/i915: Improve the start alignment of bonded pairs (bsc#1174737). - drm/i915: Keep track of request among the scheduling lists (bsc#1174737). - drm/i915: Lock signaler timeline while navigating (bsc#1174737). - drm/i915: Mark i915_request.timeline as a volatile, rcu pointer (bsc#1174737). - drm/i915: Mark racy read of intel_engine_cs.saturated (bsc#1174737). - drm/i915: Mark up unlocked update of i915_request.hwsp_seqno (bsc#1174737). - drm/i915: Move cec_notifier to intel_hdmi_connector_unregister, v2. (bsc#1152489) * context changes - drm/i915: Peel dma-fence-chains for await (bsc#1174737). - drm/i915: Prevent using semaphores to chain up to external fences (bsc#1174737). - drm/i915: Protect i915_request_await_start from early waits (bsc#1174737). - drm/i915: Pull waiting on an external dma-fence into its routine (bsc#1174737). - drm/i915: Rely on direct submission to the queue (bsc#1174737). - drm/i915: Remove wait priority boosting (bsc#1174737). - drm/i915: Reorder await_execution before await_request (bsc#1174737). - drm/i915: Return early for await_start on same timeline (bsc#1174737). - drm/i915: Use EAGAIN for trylock failures (bsc#1174737). - drm/imx: fix use after free (git-fixes). - drm/imx: imx-ldb: Disable both channels for split mode in enc->disable() (git-fixes). - drm/imx: tve: fix regulator_disable error path (git-fixes). - drm/ingenic: Fix incorrect assumption about plane->index (bsc#1152489) * refreshed for context changes - drm: mcde: Fix display initialization problem (git-fixes). - drm/mediatek: Check plane visibility in atomic_update (git-fixes). - drm/mipi: use dcs write for mipi_dsi_dcs_set_tear_scanline (git-fixes). - drm/msm/dpu: allow initialization of encoder locks during encoder init (git-fixes). - drm/msm: fix potential memleak in error branch (git-fixes). - drm/nouveau/fbcon: fix module unload when fbcon init has failed for some reason (git-fixes). - drm/nouveau/fbcon: zero-initialise the mode_cmd2 structure (git-fixes). - drm/nouveau/i2c/g94-: increase NV_PMGR_DP_AUXCTL_TRANSACTREQ timeout (git-fixes). - drm: panel-orientation-quirks: Add quirk for Asus T101HA panel (git-fixes). - drm: panel-orientation-quirks: Use generic orientation-data for Acer S1003 (git-fixes). - drm/panel: otm8009a: Drop unnessary backlight_device_unregister() (git-fixes). - drm: panel: simple: Fix bpc for LG LB070WV8 panel (git-fixes). - drm/radeon: fix array out-of-bounds read and write issues (git-fixes). - drm/radeon: fix double free (git-fixes). - drm/stm: repair runtime power management (git-fixes). - drm: sun4i: hdmi: Fix inverted HPD result (git-fixes). - drm/sun4i: tcon: Separate quirks for tcon0 and tcon1 on A20 (git-fixes). - drm/tegra: hub: Do not enable orphaned window group (git-fixes). - drm/vgem: Replace opencoded version of drm_gem_dumb_map_offset() (bsc#1152489) * refreshed for context changes - drm/vmwgfx: Fix two list_for_each loop exit tests (git-fixes). - drm/vmwgfx: Use correct vmw_legacy_display_unit pointer (git-fixes). - exfat: add missing brelse() calls on error paths (git-fixes). - exfat: fix incorrect update of stream entry in __exfat_truncate() (git-fixes). - exfat: fix memory leak in exfat_parse_param() (git-fixes). - exfat: move setting VOL_DIRTY over exfat_remove_entries() (git-fixes). - fbdev: Detect integer underflow at "struct fbcon_ops"->clear_margins (git-fixes). - firmware: arm_scmi: Fix SCMI genpd domain probing (git-fixes). - firmware: arm_scmi: Keep the discrete clock rates sorted (git-fixes). - firmware: arm_sdei: use common SMCCC_CONDUIT_* (bsc#1174906). - firmware: Fix a reference count leak (git-fixes). - firmware_loader: fix memory leak for paged buffer (bsc#1175367). - firmware/psci: use common SMCCC_CONDUIT_* (bsc#1174906). - firmware: smccc: Add ARCH_SOC_ID support (bsc#1174906). - firmware: smccc: Add function to fetch SMCCC version (bsc#1174906). - firmware: smccc: Add HAVE_ARM_SMCCC_DISCOVERY to identify SMCCC v1.1 and above (bsc#1174906). - firmware: smccc: Add the definition for SMCCCv1.2 version/error codes (bsc#1174906). - firmware: smccc: Drop smccc_version enum and use ARM_SMCCC_VERSION_1_x instead (bsc#1174906). - firmware: smccc: Refactor SMCCC specific bits into separate file (bsc#1174906). - firmware: smccc: Update link to latest SMCCC specification (bsc#1174906). - fpga: dfl: fix bug in port reset handshake (git-fixes). - fsl/fman: detect FMan erratum A050385 (bsc#1174396) Update arm64 config file - fuse: copy_file_range should truncate cache (git-fixes). - fuse: fix copy_file_range cache issues (git-fixes). - fuse: Fix parameter for FS_IOC_{GET,SET}FLAGS (bsc#1175176). - fuse: fix weird page warning (bsc#1175175). - geneve: fix an uninitialized value in geneve_changelink() (git-fixes). - genirq/affinity: Improve __irq_build_affinity_masks() (bsc#1174897 ltc#187090). - genirq/affinity: Remove const qualifier from node_to_cpumask argument (bsc#1174897 ltc#187090). - genirq/affinity: Spread vectors on node according to nr_cpu ratio (bsc#1174897 ltc#187090). - gfs2: Another gfs2_find_jhead fix (bsc#1174824). - gfs2: fix gfs2_find_jhead that returns uninitialized jhead with seq 0 (bsc#1174825). - go7007: add sanity checking for endpoints (git-fixes). - gpio: arizona: handle pm_runtime_get_sync failure case (git-fixes). - gpio: arizona: put pm_runtime in case of failure (git-fixes). - gpio: max77620: Fix missing release of interrupt (git-fixes). - gpio: pca953x: disable regmap locking for automatic address incrementing (git-fixes). - gpio: pca953x: Fix GPIO resource leak on Intel Galileo Gen 2 (git-fixes). - gpio: pca953x: Override IRQ for one of the expanders on Galileo Gen 2 (git-fixes). - gpu: host1x: Detach driver on unregister (git-fixes). - habanalabs: increase timeout during reset (git-fixes). - HID: alps: support devices with report id 2 (git-fixes). - HID: apple: Disable Fn-key key-re-mapping on clone keyboards (git-fixes). - HID: i2c-hid: add Mediacom FlexBook edge13 to descriptor override (git-fixes). - HID: logitech-hidpp: avoid repeated "multiplier = " log messages (git-fixes). - HID: magicmouse: do not set up autorepeat (git-fixes). - HID: quirks: Always poll Obins Anne Pro 2 keyboard (git-fixes). - HID: quirks: Ignore Simply Automated UPB PIM (git-fixes). - HID: quirks: Remove ITE 8595 entry from hid_have_special_driver (git-fixes). - HID: steam: fixes race in handling device list (git-fixes). - hippi: Fix a size used in a 'pci_free_consistent()' in an error handling path (git-fixes). - hwmon: (adm1275) Make sure we are reading enough data for different chips (git-fixes). - hwmon: (aspeed-pwm-tacho) Avoid possible buffer overflow (git-fixes). - hwmon: (emc2103) fix unable to change fan pwm1_enable attribute (git-fixes). - hwmon: (nct6775) Accept PECI Calibration as temperature source for NCT6798D (git-fixes). - hwmon: (scmi) Fix potential buffer overflow in scmi_hwmon_probe() (git-fixes). - hwrng: ks-sa - Fix runtime PM imbalance on error (git-fixes). - i2c: also convert placeholder function to return errno (git-fixes). - i2c: eg20t: Load module automatically if ID matches (git-fixes). - i2c: i2c-qcom-geni: Fix DMA transfer race (git-fixes). - i2c: iproc: fix race between client unreg and isr (git-fixes). - i2c: rcar: always clear ICSAR to avoid side effects (git-fixes). - i2c: rcar: avoid race when unregistering slave (git-fixes). - i2c: rcar: slave: only send STOP event when we have been addressed (git-fixes). - i2c: slave: add sanity check when unregistering (git-fixes). - i2c: slave: improve sanity check when registering (git-fixes). - i40iw: Do an RCU lookup in i40iw_add_ipv4_addr (git-fixes). - i40iw: Fix error handling in i40iw_manage_arp_cache() (git-fixes). - i40iw: fix null pointer dereference on a null wqe pointer (git-fixes). - i40iw: Report correct firmware version (git-fixes). - IB/cma: Fix ports memory leak in cma_configfs (git-fixes). - IB/core: Fix potential NULL pointer dereference in pkey cache (git-fixes). - IB/hfi1: Do not destroy hfi1_wq when the device is shut down (bsc#1174409). - IB/hfi1: Do not destroy link_wq when the device is shut down (bsc#1174409). - IB/hfi1: Ensure pq is not left on waitlist (git-fixes). - IB/hfi1: Fix another case where pq is left on waitlist (bsc#1174411). - IB/hfi1: Fix memory leaks in sysfs registration and unregistration (git-fixes). - IB/hfi1: Fix module use count flaw due to leftover module put calls (bsc#1174407). - IB/hfi1, qib: Ensure RCU is locked when accessing list (git-fixes). - IB/ipoib: Fix double free of skb in case of multicast traffic in CM mode (git-fixes). - IB/mad: Fix use after free when destroying MAD agent (git-fixes). - IB/mlx4: Test return value of calls to ib_get_cached_pkey (git-fixes). - IB/mlx5: Fix 50G per lane indication (git-fixes). - IB/mlx5: Fix DEVX support for MLX5_CMD_OP_INIT2INIT_QP command (git-fixes). - IB/mlx5: Fix missing congestion control debugfs on rep rdma device (git-fixes). - IB/mlx5: Replace tunnel mpls capability bits for tunnel_offloads (git-fixes). - ibmvnic: Fix IRQ mapping disposal in error path (bsc#1175112 ltc#187459). - IB/qib: Call kobject_put() when kobject_init_and_add() fails (git-fixes). - IB/rdmavt: Always return ERR_PTR from rvt_create_mmap_info() (git-fixes). - IB/rdmavt: Delete unused routine (git-fixes). - IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (bsc#1174770). - IB/sa: Resolv use-after-free in ib_nl_make_request() (git-fixes). - ide: Remove uninitialized_var() usage (git-fixes). - ieee802154: fix one possible memleak in adf7242_probe (git-fixes). - iio: adc: ad7780: Fix a resource handling path in 'ad7780_probe()' (git-fixes). - iio: core: add missing IIO_MOD_H2/ETHANOL string identifiers (git-fixes). - iio:health:afe4404 Fix timestamp alignment and prevent data leak (git-fixes). - iio:humidity:hdc100x Fix alignment and data leak issues (git-fixes). - iio:humidity:hts221 Fix alignment and data leak issues (git-fixes). - iio: improve IIO_CONCENTRATION channel type description (git-fixes). - iio:magnetometer:ak8974: Fix alignment and data leak issues (git-fixes). - iio: magnetometer: ak8974: Fix runtime PM imbalance on error (git-fixes). - iio: mma8452: Add missed iio_device_unregister() call in mma8452_probe() (git-fixes). - iio:pressure:ms5611 Fix buffer element alignment (git-fixes). - iio: pressure: zpa2326: handle pm_runtime_get_sync failure (git-fixes). - Input: elan_i2c - add more hardware ID for Lenovo laptops (git-fixes). - Input: elan_i2c - only increment wakeup count on touch (git-fixes). - Input: goodix - fix touch coordinates on Cube I15-TC (git-fixes). - Input: i8042 - add Lenovo XiaoXin Air 12 to i8042 nomux list (git-fixes). - Input: mms114 - add extra compatible for mms345l (git-fixes). - Input: sentelic - fix error return when fsp_reg_write fails (git-fixes). - Input: synaptics - enable InterTouch for ThinkPad X1E 1st gen (git-fixes). - integrity: remove redundant initialization of variable ret (git-fixes). - intel_th: Fix a NULL dereference when hub driver is not loaded (git-fixes). - intel_th: pci: Add Emmitsburg PCH support (git-fixes). - intel_th: pci: Add Jasper Lake CPU support (git-fixes). - intel_th: pci: Add Tiger Lake PCH-H support (git-fixes). - io-mapping: indicate mapping failure (git-fixes). - iommu/arm-smmu-v3: Do not reserve implementation defined register space (bsc#1174126). - iommu/vt-d: Enable PCI ACS for platform opt in hint (bsc#1174127). - iommu/vt-d: Update scalable mode paging structure coherency (bsc#1174128). - ionic: centralize queue reset code (bsc#1167773). - ionic: fix up filter locks and debug msgs (bsc#1167773). - ionic: keep rss hash after fw update (bsc#1167773). - ionic: unlock queue mutex in error path (bsc#1167773). - ionic: update filter id after replay (bsc#1167773). - ionic: update the queue count on open (bsc#1167773). - ionic: use mutex to protect queue operations (bsc#1167773). - ionic: use offset for ethtool regs data (bsc#1167773). - irqchip/gic: Atomically update affinity (bsc#1175195). - kabi fix for SUNRPC-dont-update-timeout-value-on-connection-reset.patch (bsc1174263). - kABI: reintroduce inet_hashtables.h include to l2tp_ip (kabi). - kABI: restore signature of xfrm_policy_bysel_ctx() and xfrm_policy_byid() (bsc#1174645). - kABI workaround for enum cpuhp_state (git-fixes). - kABI workaround for struct kvm_device (git-fixes). Just change an variable to "const" type in kvm_device. - kABI workaround for struct kvm_vcpu_arch (git-fixes). - kernel.h: remove duplicate include of asm/div64.h (git-fixes). - keys: asymmetric: fix error return code in software_key_query() (git-fixes). - kobject: Avoid premature parent object freeing in kobject_cleanup() (git-fixes). - KVM: Allow kvm_device_ops to be const (bsc#1172197 jsc#SLE-13593). - KVM: Allow kvm_device_ops to be const (bsc#1172197 jsc#SLE-13593). - KVM: arm64: Annotate hyp NMI-related functions as __always_inline (bsc#1175190). - KVM: arm64: Correct PSTATE on exception entry (bsc#1133021). - KVM: arm64: Document PV-time interface (bsc#1172197 jsc#SLE-13593). - KVM: arm64: Document PV-time interface (bsc#1172197 jsc#SLE-13593). - KVM: arm64: Fix 32bit PC wrap-around (bsc#1133021). - KVM: arm64: Implement PV_TIME_FEATURES call (bsc#1172197 jsc#SLE-13593). - KVM: arm64: Implement PV_TIME_FEATURES call (bsc#1172197 jsc#SLE-13593). - KVM: arm64: Make vcpu_cp1x() work on Big Endian hosts (bsc#1133021). - KVM: arm64: Provide VCPU attributes for stolen time (bsc#1172197 jsc#SLE-13593). - KVM: arm64: Provide VCPU attributes for stolen time (bsc#1172197 jsc#SLE-13593). - KVM: arm64: Select TASK_DELAY_ACCT+TASKSTATS rather than SCHEDSTATS (bsc#1172197 jsc#SLE-13593). - KVM: arm64: Select TASK_DELAY_ACCT+TASKSTATS rather than SCHEDSTATS (bsc#1172197 jsc#SLE-13593). - KVM: arm64: Stop writing aarch32's CSSELR into ACTLR (bsc#1133021). - KVM: arm64: Support stolen time reporting via shared structure (bsc#1172197 jsc#SLE-13593). - KVM: arm64: Support stolen time reporting via shared structure (bsc#1172197 jsc#SLE-13593). - KVM: arm64: Use the correct timer structure to access the physical counter (bsc#1133021). - KVM: arm/arm64: Correct AArch32 SPSR on exception entry (bsc#1133021). - KVM: arm/arm64: Correct CPSR on exception entry (bsc#1133021). - KVM: arm/arm64: Factor out hypercall handling from PSCI code (bsc#1172197 jsc#SLE-13593). - KVM: arm/arm64: Factor out hypercall handling from PSCI code (bsc#1172197 jsc#SLE-13593). - KVM: arm: vgic: Fix limit condition when writing to GICD_IACTIVER (bsc#1133021). - KVM: Implement kvm_put_guest() (bsc#1172197 jsc#SLE-13593). - KVM: nVMX: always update CR3 in VMCS (git-fixes). - KVM: Play nice with read-only memslots when querying host page size (bsc#1133021). - KVM: s390: Remove false WARN_ON_ONCE for the PQAP instruction (bsc#1133021). - l2tp: add sk_family checks to l2tp_validate_socket (networking-stable-20_06_07). - l2tp: do not use inet_hash()/inet_unhash() (networking-stable-20_06_07). - leds: 88pm860x: fix use-after-free on unbind (git-fixes). - leds: core: Flush scheduled work for system suspend (git-fixes). - leds: da903x: fix use-after-free on unbind (git-fixes). - leds: gpio: Fix semantic error (git-fixes). - leds: lm3533: fix use-after-free on unbind (git-fixes). - leds: lm355x: avoid enum conversion warning (git-fixes). - leds: lm36274: fix use-after-free on unbind (git-fixes). - leds: wm831x-status: fix use-after-free on unbind (git-fixes). - libbpf: Wrap source argument of BPF_CORE_READ macro in parentheses (bsc#1155518). - lib: Reduce user_access_begin() boundaries in strncpy_from_user() and strnlen_user() (bsc#1174331). - liquidio: Fix wrong return value in cn23xx_get_pf_num() (git-fixes). - locktorture: Print ratio of acquisitions, not failures (bsc#1149032). - mac80211: allow rx of mesh eapol frames with default rx key (git-fixes). - mac80211: fix misplaced while instead of if (git-fixes). - mac80211: mesh: Free ie data when leaving mesh (git-fixes). - mac80211: mesh: Free pending skb when destroying a mpath (git-fixes). - media: cec: silence shift wrapping warning in __cec_s_log_addrs() (git-fixes). - media: cxusb-analog: fix V4L2 dependency (git-fixes). - media: exynos4-is: Add missed check for pinctrl_lookup_state() (git-fixes). - media: firewire: Using uninitialized values in node_probe() (git-fixes). - media: marvell-ccic: Add missed v4l2_async_notifier_cleanup() (git-fixes). - media: media-request: Fix crash if memory allocation fails (git-fixes). - media: nuvoton-cir: remove setting tx carrier functions (git-fixes). - media: omap3isp: Add missed v4l2_ctrl_handler_free() for preview_init_entities() (git-fixes). - media: sur40: Remove uninitialized_var() usage (git-fixes). - media: vsp1: dl: Fix NULL pointer dereference on unbind (git-fixes). - mei: bus: do not clean driver pointer (git-fixes). - mfd: arizona: Ensure 32k clock is put on driver unbind and error (git-fixes). - mfd: dln2: Run event handler loop under spinlock (git-fixes). - mfd: intel-lpss: Add Intel Jasper Lake PCI IDs (jsc#SLE-12602). - mlxsw: core: Fix wrong SFP EEPROM reading for upper pages 1-3 (bsc#1154488). - mlxsw: core: Use different get_trend() callbacks for different thermal zones (networking-stable-20_06_10). - mmc: meson-gx: limit segments to 1 when dram-access-quirk is needed (git-fixes). - mmc: sdhci: do not enable card detect interrupt for gpio cd type (git-fixes). - mm: Fix protection usage propagation (bsc#1174002). - mm/mmap.c: close race between munmap() and expand_upwards()/downwards() (bsc#1174527). - mtd: properly check all write ioctls for permissions (git-fixes). - mtd: rawnand: fsl_upm: Remove unused mtd var (git-fixes). - mtd: rawnand: qcom: avoid write to unavailable register (git-fixes). - mwifiex: Fix firmware filename for sd8977 chipset (git-fixes). - mwifiex: Fix firmware filename for sd8997 chipset (git-fixes). - mwifiex: Prevent memory corruption handling keys (git-fixes). - nbd: Fix memory leak in nbd_add_socket (git-fixes). - ndctl/papr_scm,uapi: Add support for PAPR nvdimm specific methods (bsc#1175052 jsc#SLE-13823 bsc#1174969 jsc#SLE-12769). - net: be more gentle about silly gso requests coming from user (networking-stable-20_06_07). - net/bpfilter: Initialize pos in __bpfilter_process_sockopt (bsc#1155518). - net/bpfilter: split __bpfilter_process_sockopt (bsc#1155518). - net: check untrusted gso_size at kernel entry (networking-stable-20_06_07). - netdevsim: fix unbalaced locking in nsim_create() (git-fixes). - net: dsa: bcm_sf2: Fix node reference count (git-fixes). - net: ena: add reserved PCI device ID (bsc#1174852). - net: ena: add support for reporting of packet drops (bsc#1174852). - net: ena: add support for the rx offset feature (bsc#1174852). - net: ena: add support for traffic mirroring (bsc#1174852). - net: ena: add unmask interrupts statistics to ethtool (bsc#1174852). - net: ena: allow setting the hash function without changing the key (bsc#1174852). - net: ena: avoid memory access violation by validating req_id properly (bsc#1174852). - net: ena: avoid unnecessary admin command when RSS function set fails (bsc#1174852). - net: ena: avoid unnecessary rearming of interrupt vector when busy-polling (bsc#1174852). - net: ena: change default RSS hash function to Toeplitz (bsc#1174852). - net: ena: changes to RSS hash key allocation (bsc#1174852). - net: ena: cosmetic: change ena_com_stats_admin stats to u64 (bsc#1174852). - net: ena: cosmetic: code reorderings (bsc#1174852). - net: ena: cosmetic: extract code to ena_indirection_table_set() (bsc#1174852). - net: ena: cosmetic: fix line break issues (bsc#1174852). - net: ena: cosmetic: fix spacing issues (bsc#1174852). - net: ena: cosmetic: fix spelling and grammar mistakes in comments (bsc#1174852). - net: ena: cosmetic: minor code changes (bsc#1174852). - net: ena: cosmetic: remove unnecessary code (bsc#1174852). - net: ena: cosmetic: remove unnecessary spaces and tabs in ena_com.h macros (bsc#1174852). - net: ena: cosmetic: rename ena_update_tx/rx_rings_intr_moderation() (bsc#1174852). - net: ena: cosmetic: satisfy gcc warning (bsc#1174852). - net: ena: cosmetic: set queue sizes to u32 for consistency (bsc#1174852). - net: ena: drop superfluous prototype (bsc#1174852). - net: ena: enable support of rss hash key and function changes (bsc#1174852). - net: ena: ethtool: clean up minor indentation issue (bsc#1174852). - net: ena: ethtool: remove redundant non-zero check on rc (bsc#1174852). - net/ena: Fix build warning in ena_xdp_set() (bsc#1174852). - net: ena: fix continuous keep-alive resets (bsc#1174852). - net: ena: fix ena_com_comp_status_to_errno() return value (bsc#1174852). - net: ena: fix error returning in ena_com_get_hash_function() (bsc#1174852). - net: ena: fix request of incorrect number of IRQ vectors (bsc#1174852). - net: ena: Fix using plain integer as NULL pointer in ena_init_napi_in_range (bsc#1174852). - net: ena: Make some functions static (bsc#1174852). - net: ena: move llq configuration from ena_probe to ena_device_init() (bsc#1174852). - net: ena: reduce driver load time (bsc#1174852). - net: ena: remove code that does nothing (bsc#1174852). - net: ena: remove set but not used variable 'hash_key' (bsc#1174852). - net: ena: rename ena_com_free_desc to make API more uniform (bsc#1174852). - net: ena: simplify ena_com_update_intr_delay_resolution() (bsc#1174852). - net: ena: support new LLQ acceleration mode (bsc#1174852). - net: ena: use explicit variable size for clarity (bsc#1174852). - net: ena: use SHUTDOWN as reset reason when closing interface (bsc#1174852). - net_failover: fixed rollback in net_failover_open() (networking-stable-20_06_10). - netfilter: ip6tables: Add a .pre_exit hook in all ip6table_foo.c (bsc#1171857). - netfilter: ip6tables: Split ip6t_unregister_table() into pre_exit and exit helpers (bsc#1171857). - netfilter: iptables: Add a .pre_exit hook in all iptable_foo.c (bsc#1171857). - netfilter: iptables: Split ipt_unregister_table() into pre_exit and exit helpers (bsc#1171857). - net: Fix a documentation bug wrt. ip_unprivileged_port_start (git-fixes). (SLES tuning guide refers to ip-sysctl.txt.) - net: fsl/fman: treat all RGMII modes in memac_adjust_link() (bsc#1174398). - net: hns3: check reset pending after FLR prepare (bsc#1154353). - net: hns3: fix error handling for desc filling (git-fixes). - net: hns3: fix for not calculating TX BD send size correctly (git-fixes). - net: hns3: fix return value error when query MAC link status fail (git-fixes). - net: ipv4: Fix wrong type conversion from hint to rt in ip_route_use_hint() (bsc#1154353). - net: lan78xx: add missing endpoint sanity check (git-fixes). - net: lan78xx: fix transfer-buffer memory leak (git-fixes). - net: lan78xx: replace bogus endpoint lookup (git-fixes). - net: macb: call pm_runtime_put_sync on failure path (git-fixes). - net/mlx5: drain health workqueue in case of driver load error (networking-stable-20_06_16). - net/mlx5e: Fix CPU mapping after function reload to avoid aRFS RX crash (jsc#SLE-8464). - net/mlx5e: Fix CPU mapping after function reload to avoid aRFS RX crash (jsc#SLE-8464). - net/mlx5e: Fix kernel crash when setting vf VLANID on a VF dev (jsc#SLE-8464). - net/mlx5e: Fix kernel crash when setting vf VLANID on a VF dev (jsc#SLE-8464). - net/mlx5e: Fix repeated XSK usage on one channel (networking-stable-20_06_16). - net/mlx5e: Fix VXLAN configuration restore after function reload (jsc#SLE-8464). - net/mlx5e: Fix VXLAN configuration restore after function reload (jsc#SLE-8464). - net/mlx5: E-switch, Destroy TSAR when fail to enable the mode (jsc#SLE-8464). - net/mlx5: E-switch, Destroy TSAR when fail to enable the mode (jsc#SLE-8464). - net/mlx5: Fix fatal error handling during device load (networking-stable-20_06_16). - net: phy: Check harder for errors in get_phy_id() (git-fixes). - net: phy: fix memory leak in device-create error path (git-fixes). - net: phy: realtek: add support for configuring the RX delay on RTL8211F (bsc#1174398). - net, sk_msg: Clear sk_user_data pointer on clone if tagged (bsc#1155518). - net, sk_msg: Do not use RCU_INIT_POINTER on sk_user_data (bsc#1155518). - net/smc: fix restoring of fallback changes (git-fixes). - net: stmmac: do not attach interface until resume finishes (bsc#1174072). - net: stmmac: dwc-qos: avoid clk and reset for acpi device (bsc#1174072). - net: stmmac: dwc-qos: use generic device api (bsc#1174072). - net: stmmac: enable timestamp snapshot for required PTP packets in dwmac v5.10a (networking-stable-20_06_07). - net: stmmac: platform: fix probe for ACPI devices (bsc#1174072). - net/tls: fix encryption error checking (git-fixes). - net/tls: free record only on encryption error (git-fixes). - net: usb: qmi_wwan: add Telit LE910C1-EUX composition (networking-stable-20_06_07). - nfc: nci: add missed destroy_workqueue in nci_register_device (git-fixes). - nfc: s3fwrn5: add missing release on skb in s3fwrn5_recv_frame (git-fixes). - nfp: flower: fix used time of merge flow statistics (networking-stable-20_06_07). - NFS: Fix interrupted slots by sending a solo SEQUENCE operation (bsc#1174264). - NTB: Fix static check warning in perf_clear_test (git-fixes). - NTB: Fix the default port and peer numbers for legacy drivers (git-fixes). - ntb: hw: remove the code that sets the DMA mask (git-fixes). - NTB: ntb_pingpong: Choose doorbells based on port number (git-fixes). - NTB: ntb_test: Fix bug when counting remote files (git-fixes). - NTB: ntb_tool: reading the link file should not end in a NULL byte (git-fixes). - NTB: perf: Do not require one more memory window than number of peers (git-fixes). - NTB: perf: Fix race condition when run with ntb_test (git-fixes). - NTB: perf: Fix support for hardware that does not have port numbers (git-fixes). - ntb_perf: pass correct struct device to dma_alloc_coherent (git-fixes). - NTB: Revert the change to use the NTB device dev for DMA allocations (git-fixes). - ntb_tool: pass correct struct device to dma_alloc_coherent (git-fixes). - ocfs2: avoid inode removal while nfsd is accessing it (bsc#1172963). - ocfs2: fix panic on nfs server over ocfs2 (bsc#1172963). - ocfs2: fix remounting needed after setfacl command (bsc#1173954). - ocfs2: load global_inode_alloc (bsc#1172963). - omapfb: dss: Fix max fclk divider for omap36xx (git-fixes). - ovl: inode reference leak in ovl_is_inuse true case (git-fixes). - padata: add separate cpuhp node for CPUHP_PADATA_DEAD (git-fixes). - padata: kABI fixup for struct padata_instance splitting nodes (git-fixes). - PCI/AER: Remove HEST/FIRMWARE_FIRST parsing for AER ownership (bsc#1174356). - PCI/AER: Use only _OSC to determine AER ownership (bsc#1174356). - PCI/ASPM: Add missing newline in sysfs 'policy' (git-fixes). - PCI/ASPM: Disable ASPM on ASMedia ASM1083/1085 PCIe-to-PCI bridge (git-fixes). - PCI: cadence: Fix updating Vendor ID and Subsystem Vendor ID register (git-fixes). - PCI/EDR: Log only ACPI_NOTIFY_DISCONNECT_RECOVER events (bsc#1174513). - PCI: Fix pci_cfg_wait queue locking problem (git-fixes). - PCI: hotplug: ACPI: Fix context refcounting in acpiphp_grab_context() (git-fixes). - PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (bsc#1172201). - PCI: qcom: Add missing ipq806x clocks in PCIe driver (git-fixes). - PCI: qcom: Add missing reset for ipq806x (git-fixes). - PCI: qcom: Add support for tx term offset for rev 2.1.0 (git-fixes). - PCI: qcom: Define some PARF params needed for ipq8064 SoC (git-fixes). - PCI: rcar: Fix runtime PM imbalance on error (git-fixes). - PCI: Release IVRS table in AMD ACS quirk (git-fixes). - pci: Revive pci_dev __aer_firmware_first* fields for kABI (bsc#1174356). - PCI: switchtec: Add missing __iomem and __user tags to fix sparse warnings (git-fixes). - PCI: switchtec: Add missing __iomem tag to fix sparse warnings (git-fixes). - PCI: tegra: Revert tegra124 raw_violation_fixup (git-fixes). - percpu: Separate decrypted varaibles anytime encryption can be enabled (bsc#1174332). - phy: armada-38x: fix NETA lockup when repeatedly switching speeds (git-fixes). - phy: exynos5-usbdrd: Calibrating makes sense only for USB2.0 PHY (git-fixes). - phy: renesas: rcar-gen3-usb2: move irq registration to init (git-fixes). - phy: sun4i-usb: fix dereference of pointer phy0 before it is null checked (git-fixes). - pinctrl: amd: fix npins for uart0 in kerncz_groups (git-fixes). - pinctrl: ingenic: Enhance support for IRQ_TYPE_EDGE_BOTH (git-fixes). - pinctrl: single: fix function name in documentation (git-fixes). - pinctrl-single: fix pcs_parse_pinconf() return value (git-fixes). - platform/chrome: cros_ec_ishtp: Fix a double-unlock issue (git-fixes). - platform/x86: intel-hid: Fix return value check in check_acpi_dev() (git-fixes). - platform/x86: intel-vbtn: Fix return value check in check_acpi_dev() (git-fixes). - platform/x86: ISST: Increase timeout (bsc#1174185). - PM: wakeup: Show statistics for deleted wakeup sources again (git-fixes). - powerpc/64s: Fix early_init_mmu section mismatch (bsc#1065729). - powerpc: Allow 4224 bytes of stack expansion for the signal frame (bsc#1065729). - powerpc/book3s64/pkeys: Fix pkey_access_permitted() for execute disable pkey (bsc#1065729). - powerpc/book3s64/pkeys: Use PVR check instead of cpu feature (bsc#1065729). - powerpc/boot: Fix CONFIG_PPC_MPC52XX references (bsc#1065729). - powerpc: Document details on H_SCM_HEALTH hcall (bsc#1175052 jsc#SLE-13823 bsc#1174969 jsc#SLE-12769). - powerpc/eeh: Fix pseries_eeh_configure_bridge() (bsc#1174689). - powerpc/fadump: fix race between pstore write and fadump crash trigger (bsc#1168959 ltc#185010). - powerpc/kasan: Fix issues by lowering KASAN_SHADOW_END (git-fixes). - powerpc/nvdimm: Use HCALL error as the return value (bsc#1175284). - powerpc/nvdimm: use H_SCM_QUERY hcall on H_OVERLAP error (bsc#1175284). - powerpc/papr_scm: Add support for fetching nvdimm 'fuel-gauge' metric (bsc#1175052 jsc#SLE-13823 bsc#1174969 jsc#SLE-12769). - powerpc/papr_scm: Fetch nvdimm health information from PHYP (bsc#1175052 jsc#SLE-13823 bsc#1174969 jsc#SLE-12769). - powerpc/papr_scm: Fetch nvdimm performance stats from PHYP (bsc#1175052 jsc#SLE-13823 bsc#1174969 jsc#SLE-12769). - powerpc/papr_scm: Implement support for PAPR_PDSM_HEALTH (bsc#1175052 jsc#SLE-13823 bsc#1174969 jsc#SLE-12769). - powerpc/papr_scm: Improve error logging and handling papr_scm_ndctl() (bsc#1175052 jsc#SLE-13823 bsc#1174969 jsc#SLE-12769). - powerpc/papr_scm: Mark papr_scm_ndctl() as static (bsc#1175052 jsc#SLE-13823 bsc#1174969 jsc#SLE-12769). - powerpc/pseries/hotplug-cpu: Remove double free in error path (bsc#1065729). - powerpc/pseries: PCIE PHB reset (bsc#1174689). - powerpc/pseries: remove cede offline state for CPUs (bsc#1065729). - powerpc/rtas: do not online CPUs for partition suspend (bsc#1065729). - powerpc/vdso: Fix vdso cpu truncation (bsc#1065729). - powerpc/xmon: Reset RCU and soft lockup watchdogs (bsc#1065729). - power: supply: check if calc_soc succeeded in pm860x_init_battery (git-fixes). - pwm: bcm-iproc: handle clk_get_rate() return (git-fixes). - qed: suppress "do not support RoCE & iWARP" flooding on HW init (git-fixes). - qed: suppress false-positives interrupt error messages on HW init (git-fixes). - r8169: fix jumbo configuration for RTL8168evl (bsc#1175296). - r8169: fix jumbo packet handling on resume from suspend (bsc#1175296). - r8169: fix resume on cable plug-in (bsc#1175296). - r8169: fix rtl_hw_jumbo_disable for RTL8168evl (bsc#1175296). - r8169: move disabling interrupt coalescing to RTL8169/RTL8168 init (bsc#1175296). - r8169: read common register for PCI commit (bsc#1175296). - random32: move the pseudo-random 32-bit definitions to prandom.h (git-fixes). - random32: remove net_rand_state from the latent entropy gcc plugin (git-fixes). - random: fix circular include dependency on arm64 after addition of percpu.h (git-fixes). - RDMA/cm: Add missing locking around id.state in cm_dup_req_handler (git-fixes). - RDMA/cma: Protect bind_list and listen_list while finding matching cm id (git-fixes). - RDMA/cm: Fix an error check in cm_alloc_id_priv() (git-fixes). - RDMA/cm: Fix checking for allowed duplicate listens (git-fixes). - RDMA/cm: Fix ordering of xa_alloc_cyclic() in ib_create_cm_id() (git-fixes). - RDMA/cm: Read id.state under lock when doing pr_debug() (git-fixes). - RDMA/cm: Remove a race freeing timewait_info (git-fixes). - RDMA/cm: Update num_paths in cma_resolve_iboe_route error flow (git-fixes). - RDMA/core: Fix double destruction of uobject (git-fixes). - RDMA/core: Fix double put of resource (git-fixes). - RDMA/core: Fix missing error check on dev_set_name() (git-fixes). - RDMA/core: Fix protection fault in ib_mr_pool_destroy (git-fixes). - RDMA/core: Fix race between destroy and release FD object (git-fixes). - RDMA/core: Fix race in rdma_alloc_commit_uobject() (git-fixes). - RDMA/core: Prevent mixed use of FDs between shared ufiles (git-fixes). - RDMA/counter: Query a counter before release (git-fixes). - RDMA/efa: Set maximum pkeys device attribute (git-fixes). - RDMA/hns: Bugfix for querying qkey (git-fixes). - RDMA/hns: Fix cmdq parameter of querying pf timer resource (git-fixes). - RDMA/iwcm: Fix iwcm work deallocation (git-fixes). - RDMA/iw_cxgb4: Fix incorrect function parameters (git-fixes). - RDMA/mad: Do not crash if the rdma device does not have a umad interface (git-fixes). - RDMA/mad: Fix possible memory leak in ib_mad_post_receive_mads() (git-fixes). - RDMA/mlx4: Initialize ib_spec on the stack (git-fixes). - RDMA/mlx5: Add init2init as a modify command (git-fixes). - RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (git-fixes). - RDMA/mlx5: Fix prefetch memory leak if get_prefetchable_mr fails (jsc#SLE-8446). - RDMA/mlx5: Fix prefetch memory leak if get_prefetchable_mr fails (jsc#SLE-8446). - RDMA/mlx5: Fix the number of hwcounters of a dynamic counter (git-fixes). - RDMA/mlx5: Fix udata response upon SRQ creation (git-fixes). - RDMA/mlx5: Prevent prefetch from racing with implicit destruction (jsc#SLE-8446). - RDMA/mlx5: Prevent prefetch from racing with implicit destruction (jsc#SLE-8446). - RDMA/mlx5: Set GRH fields in query QP on RoCE (git-fixes). - RDMA/mlx5: Use xa_lock_irq when access to SRQ table (git-fixes). - RDMA/mlx5: Verify that QP is created with RQ or SQ (git-fixes). - RDMA/nldev: Fix crash when set a QP to a new counter but QPN is missing (git-fixes). - RDMA/pvrdma: Fix missing pci disable in pvrdma_pci_probe() (git-fixes). - RDMA/qedr: Fix KASAN: use-after-free in ucma_event_handler+0x532 (git-fixes). - RDMA/rvt: Fix potential memory leak caused by rvt_alloc_rq (git-fixes). - RDMA/rxe: Always return ERR_PTR from rxe_create_mmap_info() (git-fixes). - RDMA/rxe: Fix configuration of atomic queue pair attributes (git-fixes). - RDMA/rxe: Set default vendor ID (git-fixes). - RDMA/rxe: Set sys_image_guid to be aligned with HW IB devices (git-fixes). - RDMA/siw: Fix failure handling during device creation (git-fixes). - RDMA/siw: Fix passive connection establishment (git-fixes). - RDMA/siw: Fix pointer-to-int-cast warning in siw_rx_pbl() (git-fixes). - RDMA/siw: Fix potential siw_mem refcnt leak in siw_fastreg_mr() (git-fixes). - RDMA/siw: Fix reporting vendor_part_id (git-fixes). - RDMA/siw: Fix setting active_mtu attribute (git-fixes). - RDMA/siw: Fix setting active_{speed, width} attributes (git-fixes). - RDMA/ucma: Put a lock around every call to the rdma_cm layer (git-fixes). - RDMA/uverbs: Fix create WQ to use the given user handle (git-fixes). - regmap: debugfs: check count when read regmap file (git-fixes). - regmap: debugfs: Do not sleep while atomic for fast_io regmaps (git-fixes). - regmap: dev_get_regmap_match(): fix string comparison (git-fixes). - regmap: fix alignment issue (git-fixes). - regmap: Fix memory leak from regmap_register_patch (git-fixes). - regulator: gpio: Honor regulator-boot-on property (git-fixes). - remoteproc: qcom_q6v5_mss: Validate MBA firmware size before load (git-fixes). - remoteproc: qcom_q6v5_mss: Validate modem blob firmware size before load (git-fixes). - remoteproc: qcom: q6v5: Update running state before requesting stop (git-fixes). - Revert "ALSA: hda: call runtime_allow() for all hda controllers" (git-fixes). - Revert "drm/amd/display: Expose connector VRR range via debugfs" (bsc#1152489) * refreshed for context changes - Revert "drm/amdgpu: Fix NULL dereference in dpm sysfs handlers" (git-fixes). - Revert "i2c: cadence: Fix the hold bit setting" (git-fixes). - Revert "RDMA/cma: Simplify rdma_resolve_addr() error flow" (git-fixes). - Revert "thermal: mediatek: fix register index error" (git-fixes). - rhashtable: Document the right function parameters (bsc#1174880). - rhashtable: drop duplicated word in <linux/rhashtable.h> (bsc#1174880). - rhashtable: Drop raw RCU deref in nested_table_free (bsc#1174880). - rhashtable: Fix unprotected RCU dereference in __rht_ptr (bsc#1174880). - rhashtable: Restore RCU marking on rhash_lock_head (bsc#1174880). - RMDA/cm: Fix missing ib_cm_destroy_id() in ib_cm_insert_listen() (git-fixes). - rpm/kernel-obs-build.spec.in: Enable overlayfs Overlayfs is needed for podman or docker builds when no more specific driver can be used (like lvm or btrfs). As the default build fs is ext4 currently, we need overlayfs kernel modules to be available. - rpm/modules.fips: add ecdh_generic (boo#1173813) - rtlwifi: rtl8192cu: Remove uninitialized_var() usage (git-fixes). - rtnetlink: Fix memory(net_device) leak when ->newlink fails (bsc#1154353). - rtnetlink: Fix memory(net_device) leak when ->newlink fails (git-fixes). - rtw88: fix LDPC field for RA info (git-fixes). - rtw88: fix short GI capability based on current bandwidth (git-fixes). - s390: fix syscall_get_error for compat processes (git-fixes). - s390/ism: fix error return code in ism_probe() (git-fixes). - s390/kaslr: add support for R_390_JMP_SLOT relocation type (git-fixes). - s390/pci: Fix s390_mmio_read/write with MIO (git-fixes). - s390/qdio: consistently restore the IRQ handler (git-fixes). - s390/qdio: put thinint indicator after early error (git-fixes). - s390/qdio: tear down thinint indicator after early error (git-fixes). - s390/qeth: fix error handling for isolation mode cmds (git-fixes). - sched/fair: handle case of task_h_load() returning 0 (bnc#1155798 (CPU scheduler functional and performance backports)). - scsi: ipr: Fix softlockup when rescanning devices in petitboot (jsc#SLE-13654). - scsi: ipr: Fix softlockup when rescanning devices in petitboot (jsc#SLE-13654). - scsi: ipr: remove unneeded semicolon (jsc#SLE-13654). - scsi: ipr: Use scnprintf() for avoiding potential buffer overflow (jsc#SLE-13654). - scsi: ipr: Use scnprintf() for avoiding potential buffer overflow (jsc#SLE-13654). - scsi: libfc: free response frame from GPN_ID (bsc#1173849). - scsi: libfc: Handling of extra kref (bsc#1173849). - scsi: libfc: If PRLI rejected, move rport to PLOGI state (bsc#1173849). - scsi: libfc: rport state move to PLOGI if all PRLI retry exhausted (bsc#1173849). - scsi: libfc: Skip additional kref updating work event (bsc#1173849). - scsi: ufs-bsg: Fix runtime PM imbalance on error (git-fixes). - scsi: zfcp: Fix panic on ERP timeout for previously dismissed ERP action (git-fixes). - selftests/net: in rxtimestamp getopt_long needs terminating null entry (networking-stable-20_06_16). - selinux: fall back to ref-walk if audit is required (bsc#1174333). - selinux: revert "stop passing MAY_NOT_BLOCK to the AVC upon follow_link" (bsc#1174333). - seq_buf: Export seq_buf_printf (bsc#1175052 jsc#SLE-13823 bsc#1174969 jsc#SLE-12769). - seq_buf: Export seq_buf_printf (bsc#1175052 jsc#SLE-13823 bsc#1174969 jsc#SLE-12769). - serial: 8250: fix null-ptr-deref in serial8250_start_tx() (git-fixes). - serial: 8250_mtk: Fix high-speed baud rates clamping (git-fixes). - serial: 8250_pci: Move Pericom IDs to pci_ids.h (git-fixes). - serial: 8250_tegra: Create Tegra specific 8250 driver (bsc#1173941). - serial: amba-pl011: Make sure we initialize the port.lock spinlock (git-fixes). - serial: exar: Fix GPIO configuration for Sealevel cards based on XR17V35X (git-fixes). - serial: mxs-auart: add missed iounmap() in probe failure and remove (git-fixes). - serial: tegra: fix CREAD handling for PIO (git-fixes). - SMB3: Honor lease disabling for multiuser mounts (git-fixes). - soc/tegra: pmc: Enable PMIC wake event on Tegra210 (bsc#1175116). - soundwire: intel: fix memory leak with devm_kasprintf (git-fixes). - spi: davinci: Remove uninitialized_var() usage (git-fixes). - spi: lantiq: fix: Rx overflow error in full duplex mode (git-fixes). - spi: lantiq-ssc: Fix warning by using WQ_MEM_RECLAIM (git-fixes). - spi: mediatek: use correct SPI_CFG2_REG MACRO (git-fixes). - spi: rockchip: Fix error in SPI slave pio read (git-fixes). - spi: spidev: fix a potential use-after-free in spidev_release() (git-fixes). - spi: spidev: fix a race between spidev_release and spidev_remove (git-fixes). - spi: spi-geni-qcom: Actually use our FIFO (git-fixes). - spi: spi-sun6i: sun6i_spi_transfer_one(): fix setting of clock rate (git-fixes). - spi: sun4i: update max transfer size reported (git-fixes). - staging: comedi: addi_apci_1032: check INSN_CONFIG_DIGITAL_TRIG shift (git-fixes). - staging: comedi: addi_apci_1500: check INSN_CONFIG_DIGITAL_TRIG shift (git-fixes). - staging: comedi: addi_apci_1564: check INSN_CONFIG_DIGITAL_TRIG shift (git-fixes). - staging: comedi: ni_6527: fix INSN_CONFIG_DIGITAL_TRIG support (git-fixes). - staging: comedi: verify array index is correct before using it (git-fixes). - Staging: rtl8188eu: rtw_mlme: Fix uninitialized variable authmode (git-fixes). - staging: rtl8192u: fix a dubious looking mask before a shift (git-fixes). - staging: rtl8712: handle firmware load failure (git-fixes). - staging: vchiq_arm: Add a matching unregister call (git-fixes). - staging: wlan-ng: properly check endpoint types (git-fixes). - SUNRPC dont update timeout value on connection reset (bsc#1174263). - sunrpc: Fix gss_unwrap_resp_integ() again (bsc#1174116). - tcp: md5: allow changing MD5 keys in all socket states (git-fixes). - thermal/drivers: imx: Fix missing of_node_put() at probe time (git-fixes). - thermal: int3403_thermal: Downgrade error message (git-fixes). - thermal: ti-soc-thermal: Fix reversed condition in ti_thermal_expose_sensor() (git-fixes). - tpm_crb: fix fTPM on AMD Zen+ CPUs (bsc#1174362). - tpm: Require that all digests are present in TCG_PCR_EVENT2 structures (git-fixes). - tpm_tis: extra chip->ops check on error path in tpm_tis_core_init (git-fixes). - tty: hvc_console, fix crashes on parallel open/close (git-fixes). - ubsan: check panic_on_warn (bsc#1174805). - udp: Copy has_conns in reuseport_grow() (git-fixes). - udp: Improve load balancing for SO_REUSEPORT (git-fixes). - uio_pdrv_genirq: Remove warning when irq is not specified (bsc#1174762). - USB: c67x00: fix use after free in c67x00_giveback_urb (git-fixes). - usb: chipidea: core: add wakeup support for extcon (git-fixes). - usb: core: fix quirks_param_set() writing to a const pointer (git-fixes). - usb: dwc2: Fix shutdown callback in platform (git-fixes). - usb: dwc2: gadget: Make use of GINTMSK2 (git-fixes). - usb: dwc3: pci: add support for the Intel Jasper Lake (git-fixes). - usb: dwc3: pci: add support for the Intel Tiger Lake PCH -H variant (git-fixes). - usb: dwc3: pci: Fix reference count leak in dwc3_pci_resume_work (git-fixes). - usb: gadget: Fix issue with config_ep_by_speed function (git-fixes). - usb: gadget: f_uac2: fix AC Interface Header Descriptor wTotalLength (git-fixes). - usb: gadget: function: fix missing spinlock in f_uac1_legacy (git-fixes). - usb: gadget: udc: atmel: fix uninitialized read in debug printk (git-fixes). - usb: gadget: udc: atmel: remove outdated comment in usba_ep_disable() (git-fixes). - usb: gadget: udc: gr_udc: fix memleak on error handling path in gr_ep_init() (git-fixes). - usb: hso: check for return value in hso_serial_common_create() (git-fixes). - usb: hso: Fix debug compile warning on sparc32 (git-fixes). - USB: iowarrior: fix up report size handling for some devices (git-fixes). - usbip: tools: fix module name in man page (git-fixes). - usbnet: smsc95xx: Fix use-after-free after removal (git-fixes). - USB: serial: ch341: add new Product ID for CH340 (git-fixes). - USB: serial: cp210x: enable usb generic throttle/unthrottle (git-fixes). - USB: serial: cp210x: re-enable auto-RTS on open (git-fixes). - USB: serial: cypress_m8: enable Simply Automated UPB PIM (git-fixes). - USB: serial: iuu_phoenix: fix led-activity helpers (git-fixes). - USB: serial: iuu_phoenix: fix memory corruption (git-fixes). - USB: serial: option: add GosunCn GM500 series (git-fixes). - USB: serial: option: add Quectel EG95 LTE modem (git-fixes). - USB: serial: qcserial: add EM7305 QDL product ID (git-fixes). - usb: tegra: Fix allocation for the FPCI context (git-fixes). - usb: xhci: define IDs for various ASMedia host controllers (git-fixes). - usb: xhci: Fix ASM2142/ASM3142 DMA addressing (git-fixes). - usb: xhci: Fix ASMedia ASM1142 DMA addressing (git-fixes). - usb: xhci-mtk: fix the failure of bandwidth allocation (git-fixes). - vfio/pci: Fix SR-IOV VF handling with MMIO blocking (bsc#1174129). - video: fbdev: sm712fb: fix an issue about iounmap for a wrong address (git-fixes). - video: pxafb: Fix the function used to balance a 'dma_alloc_coherent()' call (git-fixes). - virtio: virtio_console: add missing MODULE_DEVICE_TABLE() for rproc serial (git-fixes). - virt: vbox: Fix guest capabilities mask check (git-fixes). - virt: vbox: Fix VBGL_IOCTL_VMMDEV_REQUEST_BIG and _LOG req numbers to match upstream (git-fixes). - vsock: fix timeout in vsock_accept() (networking-stable-20_06_07). - vt: Reject zero-sized screen buffer size (git-fixes). - vxlan: Avoid infinite loop when suppressing NS messages with invalid options (networking-stable-20_06_10). - watchdog: f71808e_wdt: clear watchdog timeout occurred flag (git-fixes). - watchdog: f71808e_wdt: indicate WDIOF_CARDRESET support in watchdog_info.options (git-fixes). - watchdog: f71808e_wdt: remove use of wrong watchdog_info option (git-fixes). - watchdog: initialize device before misc_register (git-fixes). - watchdog: iTCO: Add support for Cannon Lake PCH iTCO (jsc#SLE-13202). - watchdog: iTCO: Add support for Cannon Lake PCH iTCO (jsc#SLE-13202). - wireless: Use linux/stddef.h instead of stddef.h (git-fixes). - wireless: Use offsetof instead of custom macro (git-fixes). - wl1251: fix always return 0 error (git-fixes). - workqueue: Remove unnecessary kfree() call in rcu_free_wq() (git-fixes). - xen/pvcalls-back: test for errors when calling backend_connect() (bsc#1065600). - xfrm: fix a warning in xfrm_policy_insert_list (bsc#1174645). - xfrm: policy: match with both mark and mask on user interfaces (bsc#1174645). - xfs: do not eat an EIO/ENOSPC writeback error when scrubbing data fork (git-fixes). - xfs: fix inode allocation block res calculation precedence (git-fixes). - xfs: fix reflink quota reservation accounting error (git-fixes). - xfs: preserve rmapbt swapext block reservation from freed blocks (git-fixes). Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1236=1 Package List: - openSUSE Leap 15.2 (noarch): dpdk-doc-19.11.1-lp152.2.5.1 kernel-devel-5.3.18-lp152.36.1 kernel-docs-5.3.18-lp152.36.1 kernel-docs-html-5.3.18-lp152.36.1 kernel-macros-5.3.18-lp152.36.1 kernel-source-5.3.18-lp152.36.1 kernel-source-vanilla-5.3.18-lp152.36.1 virtualbox-guest-desktop-icons-6.1.10-lp152.2.2.1 virtualbox-guest-source-6.1.10-lp152.2.2.1 virtualbox-host-source-6.1.10-lp152.2.2.1 - openSUSE Leap 15.2 (x86_64): bbswitch-0.8-lp152.6.2.1 bbswitch-debugsource-0.8-lp152.6.2.1 bbswitch-kmp-default-0.8_k5.3.18_lp152.36-lp152.6.2.1 bbswitch-kmp-default-debuginfo-0.8_k5.3.18_lp152.36-lp152.6.2.1 bbswitch-kmp-preempt-0.8_k5.3.18_lp152.36-lp152.6.2.1 bbswitch-kmp-preempt-debuginfo-0.8_k5.3.18_lp152.36-lp152.6.2.1 crash-7.2.8-lp152.3.2.1 crash-debuginfo-7.2.8-lp152.3.2.1 crash-debugsource-7.2.8-lp152.3.2.1 crash-devel-7.2.8-lp152.3.2.1 crash-doc-7.2.8-lp152.3.2.1 crash-eppic-7.2.8-lp152.3.2.1 crash-eppic-debuginfo-7.2.8-lp152.3.2.1 crash-gcore-7.2.8-lp152.3.2.1 crash-gcore-debuginfo-7.2.8-lp152.3.2.1 crash-kmp-default-7.2.8_k5.3.18_lp152.36-lp152.3.2.1 crash-kmp-default-debuginfo-7.2.8_k5.3.18_lp152.36-lp152.3.2.1 crash-kmp-preempt-7.2.8_k5.3.18_lp152.36-lp152.3.2.1 crash-kmp-preempt-debuginfo-7.2.8_k5.3.18_lp152.36-lp152.3.2.1 dpdk-19.11.1-lp152.2.5.1 dpdk-debuginfo-19.11.1-lp152.2.5.1 dpdk-debugsource-19.11.1-lp152.2.5.1 dpdk-devel-19.11.1-lp152.2.5.1 dpdk-devel-debuginfo-19.11.1-lp152.2.5.1 dpdk-examples-19.11.1-lp152.2.5.1 dpdk-examples-debuginfo-19.11.1-lp152.2.5.1 dpdk-kmp-default-19.11.1_k5.3.18_lp152.36-lp152.2.5.1 dpdk-kmp-default-debuginfo-19.11.1_k5.3.18_lp152.36-lp152.2.5.1 dpdk-kmp-preempt-19.11.1_k5.3.18_lp152.36-lp152.2.5.1 dpdk-kmp-preempt-debuginfo-19.11.1_k5.3.18_lp152.36-lp152.2.5.1 dpdk-tools-19.11.1-lp152.2.5.1 dpdk-tools-debuginfo-19.11.1-lp152.2.5.1 drbd-9.0.22~1+git.fe2b5983-lp152.2.2.1 drbd-debugsource-9.0.22~1+git.fe2b5983-lp152.2.2.1 drbd-kmp-default-9.0.22~1+git.fe2b5983_k5.3.18_lp152.36-lp152.2.2.1 drbd-kmp-default-debuginfo-9.0.22~1+git.fe2b5983_k5.3.18_lp152.36-lp152.2.2.1 drbd-kmp-preempt-9.0.22~1+git.fe2b5983_k5.3.18_lp152.36-lp152.2.2.1 drbd-kmp-preempt-debuginfo-9.0.22~1+git.fe2b5983_k5.3.18_lp152.36-lp152.2.2.1 hdjmod-debugsource-1.28-lp152.6.2.1 hdjmod-kmp-default-1.28_k5.3.18_lp152.36-lp152.6.2.1 hdjmod-kmp-default-debuginfo-1.28_k5.3.18_lp152.36-lp152.6.2.1 hdjmod-kmp-preempt-1.28_k5.3.18_lp152.36-lp152.6.2.1 hdjmod-kmp-preempt-debuginfo-1.28_k5.3.18_lp152.36-lp152.6.2.1 kernel-debug-5.3.18-lp152.36.1 kernel-debug-debuginfo-5.3.18-lp152.36.1 kernel-debug-debugsource-5.3.18-lp152.36.1 kernel-debug-devel-5.3.18-lp152.36.1 kernel-debug-devel-debuginfo-5.3.18-lp152.36.1 kernel-default-5.3.18-lp152.36.1 kernel-default-debuginfo-5.3.18-lp152.36.1 kernel-default-debugsource-5.3.18-lp152.36.1 kernel-default-devel-5.3.18-lp152.36.1 kernel-default-devel-debuginfo-5.3.18-lp152.36.1 kernel-kvmsmall-5.3.18-lp152.36.1 kernel-kvmsmall-debuginfo-5.3.18-lp152.36.1 kernel-kvmsmall-debugsource-5.3.18-lp152.36.1 kernel-kvmsmall-devel-5.3.18-lp152.36.1 kernel-kvmsmall-devel-debuginfo-5.3.18-lp152.36.1 kernel-obs-build-5.3.18-lp152.36.1 kernel-obs-build-debugsource-5.3.18-lp152.36.1 kernel-obs-qa-5.3.18-lp152.36.1 kernel-preempt-5.3.18-lp152.36.1 kernel-preempt-debuginfo-5.3.18-lp152.36.1 kernel-preempt-debugsource-5.3.18-lp152.36.1 kernel-preempt-devel-5.3.18-lp152.36.1 kernel-preempt-devel-debuginfo-5.3.18-lp152.36.1 kernel-syms-5.3.18-lp152.36.1 libdpdk-20_0-19.11.1-lp152.2.5.1 libdpdk-20_0-debuginfo-19.11.1-lp152.2.5.1 mhvtl-1.62-lp152.2.2.1 mhvtl-debuginfo-1.62-lp152.2.2.1 mhvtl-debugsource-1.62-lp152.2.2.1 mhvtl-kmp-default-1.62_k5.3.18_lp152.36-lp152.2.2.1 mhvtl-kmp-default-debuginfo-1.62_k5.3.18_lp152.36-lp152.2.2.1 mhvtl-kmp-preempt-1.62_k5.3.18_lp152.36-lp152.2.2.1 mhvtl-kmp-preempt-debuginfo-1.62_k5.3.18_lp152.36-lp152.2.2.1 openafs-1.8.5-lp152.2.2.1 openafs-authlibs-1.8.5-lp152.2.2.1 openafs-authlibs-debuginfo-1.8.5-lp152.2.2.1 openafs-authlibs-devel-1.8.5-lp152.2.2.1 openafs-client-1.8.5-lp152.2.2.1 openafs-client-debuginfo-1.8.5-lp152.2.2.1 openafs-debuginfo-1.8.5-lp152.2.2.1 openafs-debugsource-1.8.5-lp152.2.2.1 openafs-devel-1.8.5-lp152.2.2.1 openafs-devel-debuginfo-1.8.5-lp152.2.2.1 openafs-fuse_client-1.8.5-lp152.2.2.1 openafs-fuse_client-debuginfo-1.8.5-lp152.2.2.1 openafs-kernel-source-1.8.5-lp152.2.2.1 openafs-kmp-default-1.8.5_k5.3.18_lp152.36-lp152.2.2.1 openafs-kmp-default-debuginfo-1.8.5_k5.3.18_lp152.36-lp152.2.2.1 openafs-kmp-preempt-1.8.5_k5.3.18_lp152.36-lp152.2.2.1 openafs-kmp-preempt-debuginfo-1.8.5_k5.3.18_lp152.36-lp152.2.2.1 openafs-server-1.8.5-lp152.2.2.1 openafs-server-debuginfo-1.8.5-lp152.2.2.1 pcfclock-0.44-lp152.4.2.1 pcfclock-debuginfo-0.44-lp152.4.2.1 pcfclock-debugsource-0.44-lp152.4.2.1 pcfclock-kmp-default-0.44_k5.3.18_lp152.36-lp152.4.2.1 pcfclock-kmp-default-debuginfo-0.44_k5.3.18_lp152.36-lp152.4.2.1 pcfclock-kmp-preempt-0.44_k5.3.18_lp152.36-lp152.4.2.1 pcfclock-kmp-preempt-debuginfo-0.44_k5.3.18_lp152.36-lp152.4.2.1 python3-virtualbox-6.1.10-lp152.2.2.1 python3-virtualbox-debuginfo-6.1.10-lp152.2.2.1 rtl8812au-5.6.4.2+git20200318.49e98ff-lp152.2.2.1 rtl8812au-debugsource-5.6.4.2+git20200318.49e98ff-lp152.2.2.1 rtl8812au-kmp-default-5.6.4.2+git20200318.49e98ff_k5.3.18_lp152.36-lp152.2.2.1 rtl8812au-kmp-default-debuginfo-5.6.4.2+git20200318.49e98ff_k5.3.18_lp152.36-lp152.2.2.1 rtl8812au-kmp-preempt-5.6.4.2+git20200318.49e98ff_k5.3.18_lp152.36-lp152.2.2.1 rtl8812au-kmp-preempt-debuginfo-5.6.4.2+git20200318.49e98ff_k5.3.18_lp152.36-lp152.2.2.1 sysdig-0.26.5-lp152.3.2.1 sysdig-debuginfo-0.26.5-lp152.3.2.1 sysdig-debugsource-0.26.5-lp152.3.2.1 sysdig-kmp-default-0.26.5_k5.3.18_lp152.36-lp152.3.2.1 sysdig-kmp-default-debuginfo-0.26.5_k5.3.18_lp152.36-lp152.3.2.1 sysdig-kmp-preempt-0.26.5_k5.3.18_lp152.36-lp152.3.2.1 sysdig-kmp-preempt-debuginfo-0.26.5_k5.3.18_lp152.36-lp152.3.2.1 v4l2loopback-debugsource-0.12.5-lp152.2.2.1 v4l2loopback-kmp-default-0.12.5_k5.3.18_lp152.36-lp152.2.2.1 v4l2loopback-kmp-default-debuginfo-0.12.5_k5.3.18_lp152.36-lp152.2.2.1 v4l2loopback-kmp-preempt-0.12.5_k5.3.18_lp152.36-lp152.2.2.1 v4l2loopback-kmp-preempt-debuginfo-0.12.5_k5.3.18_lp152.36-lp152.2.2.1 v4l2loopback-utils-0.12.5-lp152.2.2.1 vhba-kmp-default-20200106_k5.3.18_lp152.36-lp152.2.2.1 vhba-kmp-default-debuginfo-20200106_k5.3.18_lp152.36-lp152.2.2.1 vhba-kmp-preempt-20200106_k5.3.18_lp152.36-lp152.2.2.1 vhba-kmp-preempt-debuginfo-20200106_k5.3.18_lp152.36-lp152.2.2.1 virtualbox-6.1.10-lp152.2.2.1 virtualbox-debuginfo-6.1.10-lp152.2.2.1 virtualbox-debugsource-6.1.10-lp152.2.2.1 virtualbox-devel-6.1.10-lp152.2.2.1 virtualbox-guest-tools-6.1.10-lp152.2.2.1 virtualbox-guest-tools-debuginfo-6.1.10-lp152.2.2.1 virtualbox-guest-x11-6.1.10-lp152.2.2.1 virtualbox-guest-x11-debuginfo-6.1.10-lp152.2.2.1 virtualbox-kmp-default-6.1.10_k5.3.18_lp152.36-lp152.2.2.1 virtualbox-kmp-default-debuginfo-6.1.10_k5.3.18_lp152.36-lp152.2.2.1 virtualbox-kmp-preempt-6.1.10_k5.3.18_lp152.36-lp152.2.2.1 virtualbox-kmp-preempt-debuginfo-6.1.10_k5.3.18_lp152.36-lp152.2.2.1 virtualbox-qt-6.1.10-lp152.2.2.1 virtualbox-qt-debuginfo-6.1.10-lp152.2.2.1 virtualbox-vnc-6.1.10-lp152.2.2.1 virtualbox-websrv-6.1.10-lp152.2.2.1 virtualbox-websrv-debuginfo-6.1.10-lp152.2.2.1 xtables-addons-3.9-lp152.2.2.1 xtables-addons-debuginfo-3.9-lp152.2.2.1 xtables-addons-kmp-default-3.9_k5.3.18_lp152.36-lp152.2.2.1 xtables-addons-kmp-default-debuginfo-3.9_k5.3.18_lp152.36-lp152.2.2.1 xtables-addons-kmp-preempt-3.9_k5.3.18_lp152.36-lp152.2.2.1 xtables-addons-kmp-preempt-debuginfo-3.9_k5.3.18_lp152.36-lp152.2.2.1 References: https://www.suse.com/security/cve/CVE-2020-0305.html https://www.suse.com/security/cve/CVE-2020-10135.html https://www.suse.com/security/cve/CVE-2020-10781.html https://www.suse.com/security/cve/CVE-2020-14331.html https://www.suse.com/security/cve/CVE-2020-14356.html https://www.suse.com/security/cve/CVE-2020-15780.html https://www.suse.com/security/cve/CVE-2020-16166.html https://bugzilla.suse.com/1065600 https://bugzilla.suse.com/1065729 https://bugzilla.suse.com/1120163 https://bugzilla.suse.com/1133021 https://bugzilla.suse.com/1149032 https://bugzilla.suse.com/1152472 https://bugzilla.suse.com/1152489 https://bugzilla.suse.com/1153274 https://bugzilla.suse.com/1154353 https://bugzilla.suse.com/1154488 https://bugzilla.suse.com/1155518 https://bugzilla.suse.com/1155798 https://bugzilla.suse.com/1165933 https://bugzilla.suse.com/1167773 https://bugzilla.suse.com/1168959 https://bugzilla.suse.com/1169771 https://bugzilla.suse.com/1171857 https://bugzilla.suse.com/1171988 https://bugzilla.suse.com/1172197 https://bugzilla.suse.com/1172201 https://bugzilla.suse.com/1172247 https://bugzilla.suse.com/1172963 https://bugzilla.suse.com/1173074 https://bugzilla.suse.com/1173468 https://bugzilla.suse.com/1173573 https://bugzilla.suse.com/1173813 https://bugzilla.suse.com/1173849 https://bugzilla.suse.com/1173941 https://bugzilla.suse.com/1173954 https://bugzilla.suse.com/1174002 https://bugzilla.suse.com/1174072 https://bugzilla.suse.com/1174116 https://bugzilla.suse.com/1174126 https://bugzilla.suse.com/1174127 https://bugzilla.suse.com/1174128 https://bugzilla.suse.com/1174129 https://bugzilla.suse.com/1174185 https://bugzilla.suse.com/1174205 https://bugzilla.suse.com/1174263 https://bugzilla.suse.com/1174264 https://bugzilla.suse.com/1174331 https://bugzilla.suse.com/1174332 https://bugzilla.suse.com/1174333 https://bugzilla.suse.com/1174356 https://bugzilla.suse.com/1174362 https://bugzilla.suse.com/1174396 https://bugzilla.suse.com/1174398 https://bugzilla.suse.com/1174407 https://bugzilla.suse.com/1174409 https://bugzilla.suse.com/1174411 https://bugzilla.suse.com/1174438 https://bugzilla.suse.com/1174462 https://bugzilla.suse.com/1174484 https://bugzilla.suse.com/1174513 https://bugzilla.suse.com/1174527 https://bugzilla.suse.com/1174543 https://bugzilla.suse.com/1174625 https://bugzilla.suse.com/1174627 https://bugzilla.suse.com/1174645 https://bugzilla.suse.com/1174689 https://bugzilla.suse.com/1174737 https://bugzilla.suse.com/1174757 https://bugzilla.suse.com/1174762 https://bugzilla.suse.com/1174770 https://bugzilla.suse.com/1174805 https://bugzilla.suse.com/1174824 https://bugzilla.suse.com/1174825 https://bugzilla.suse.com/1174852 https://bugzilla.suse.com/1174865 https://bugzilla.suse.com/1174880 https://bugzilla.suse.com/1174897 https://bugzilla.suse.com/1174906 https://bugzilla.suse.com/1174969 https://bugzilla.suse.com/1175009 https://bugzilla.suse.com/1175010 https://bugzilla.suse.com/1175011 https://bugzilla.suse.com/1175012 https://bugzilla.suse.com/1175013 https://bugzilla.suse.com/1175014 https://bugzilla.suse.com/1175015 https://bugzilla.suse.com/1175016 https://bugzilla.suse.com/1175017 https://bugzilla.suse.com/1175018 https://bugzilla.suse.com/1175019 https://bugzilla.suse.com/1175020 https://bugzilla.suse.com/1175021 https://bugzilla.suse.com/1175052 https://bugzilla.suse.com/1175112 https://bugzilla.suse.com/1175116 https://bugzilla.suse.com/1175149 https://bugzilla.suse.com/1175175 https://bugzilla.suse.com/1175176 https://bugzilla.suse.com/1175180 https://bugzilla.suse.com/1175181 https://bugzilla.suse.com/1175182 https://bugzilla.suse.com/1175183 https://bugzilla.suse.com/1175184 https://bugzilla.suse.com/1175185 https://bugzilla.suse.com/1175186 https://bugzilla.suse.com/1175187 https://bugzilla.suse.com/1175188 https://bugzilla.suse.com/1175189 https://bugzilla.suse.com/1175190 https://bugzilla.suse.com/1175191 https://bugzilla.suse.com/1175192 https://bugzilla.suse.com/1175195 https://bugzilla.suse.com/1175213 https://bugzilla.suse.com/1175263 https://bugzilla.suse.com/1175284 https://bugzilla.suse.com/1175296 https://bugzilla.suse.com/1175344 https://bugzilla.suse.com/1175345 https://bugzilla.suse.com/1175346 https://bugzilla.suse.com/1175347 https://bugzilla.suse.com/1175367 https://bugzilla.suse.com/1175377

1 0

openSUSE-RU-2020:1235-1: moderate: Recommended update for shim-leap
by maintenance＠opensuse.org 20 Aug '20

20 Aug '20

openSUSE Recommended Update: Recommended update for shim-leap ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1235-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for shim-leap fixes the following issues: - Update shim to 15+git47-lp152.4.3.1 from openSUSE Leap 15.2 This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1235=1 Package List: - openSUSE Leap 15.2 (x86_64): shim-15+git47-lp152.4.3.1 References:

1 0

openSUSE-RU-2020:1234-1: moderate: Recommended update for sysfsutils
by maintenance＠opensuse.org 20 Aug '20

20 Aug '20

openSUSE Recommended Update: Recommended update for sysfsutils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1234-1 Rating: moderate References: #1155305 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for sysfsutils fixes the following issue: - Fix cdev name comparison. (bsc#1155305) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1234=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): sysfsutils-2.1.0-lp151.3.3.1 sysfsutils-debuginfo-2.1.0-lp151.3.3.1 sysfsutils-debugsource-2.1.0-lp151.3.3.1 sysfsutils-devel-2.1.0-lp151.3.3.1 - openSUSE Leap 15.1 (x86_64): sysfsutils-32bit-2.1.0-lp151.3.3.1 sysfsutils-32bit-debuginfo-2.1.0-lp151.3.3.1 References: https://bugzilla.suse.com/1155305

1 0

openSUSE-SU-2020:1231-1: moderate: Security update for hylafax+
by opensuse-security＠opensuse.org 18 Aug '20

18 Aug '20

openSUSE Security Update: Security update for hylafax+ ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1231-1 Rating: moderate References: #1173519 #1173521 Cross-References: CVE-2020-15396 CVE-2020-15397 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for hylafax+ fixes the following issues: Hylafax was updated to upstream version 7.0.3. Security issues fixed: - CVE-2020-15396: Secure temporary directory creation for faxsetup, faxaddmodem, and probemodem (boo#1173521). - CVE-2020-15397: Sourcing of files into binaries from user writeable directories (boo#1173519). Non-security issues fixed: * add UseSSLFax feature in sendfax, sendfax.conf, hyla.conf, and JobControl (31 Jul 2020) * be more resilient in listening for the Phase C carrier (30 Jul 2020) * make sure to return to command mode if HDLC receive times out (29 Jul 2020) * make faxmail ignore boundaries on parts other than multiparts (29 Jul 2020) * don't attempt to write zero bytes of data to a TIFF (29 Jul 2020) * don't ever respond to CRP with CRP (28 Jul 2020) * reset frame counter when a sender retransmits PPS for a previously confirmed ECM block (26 Jul 2020) * scrutinize PPM before concluding that the sender missed our MCF (23 Jul 2020) * fix modem recovery after SSL Fax failure (22, 26 Jul 2020) * ignore echo of PPR, RTN, CRP (10, 13, 21 Jul 2020) * attempt to handle NSF/CSI/DIS in Class 1 sending Phase D (6 Jul 2020) * run scripts directly rather than invoking them via a shell for security hardening (3-5 Jul 2020) * add senderFumblesECM feature (3 Jul 2020) * add support for PIN/PIP/PRI-Q/PPS-PRI-Q signals, add senderConfusesPIN feature, and utilize PIN for rare conditions where it may be helpful (2, 6, 13-14 Jul 2020) * add senderConfusesRTN feature (25-26 Jun 2020) * add MissedPageHandling feature (24 Jun 2020) * use and handle CFR in Phase D to retransmit Phase C (16, 23 Jun 2020) * cope with hearing echo of RR, CTC during Class 1 sending (15-17 Jun 2020) * fix listening for retransmission of MPS/EOP/EOM if it was received corrupt on the first attempt (15 Jun 2020) * don't use CRP when receiving PPS/PPM as some senders think we are sending MCF (12 Jun 2020) * add BR_SSLFAX to show SSL Fax in notify and faxinfo output (1 Jun 2020) * have faxinfo put units on non-standard page dimensions (28 May 2020) * improve error messages for JobHost connection errors (22 May 2020) * fix perpetual blocking of jobs when a job preparation fails, attempt to fix similar blocking problems for bad jobs in batches, and add "unblock" faxconfig feature (21 May 2020) * ignore TCF if we're receiving an SSL Fax (31 Jan 2020) * fixes for build on FreeBSD 12.1 (31 Jan - 3 Feb 2020) This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1231=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): hylafax+-7.0.3-bp151.6.4.1 hylafax+-client-7.0.3-bp151.6.4.1 libfaxutil7_0_3-7.0.3-bp151.6.4.1 References: https://www.suse.com/security/cve/CVE-2020-15396.html https://www.suse.com/security/cve/CVE-2020-15397.html https://bugzilla.suse.com/1173519 https://bugzilla.suse.com/1173521

1 0

openSUSE-SU-2020:1230-1: moderate: Security update for balsa
by opensuse-security＠opensuse.org 18 Aug '20

18 Aug '20

openSUSE Security Update: Security update for balsa ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1230-1 Rating: moderate References: #1174711 Cross-References: CVE-2020-16118 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for balsa fixes the following issues: - CVE-2020-16118: Fixed a NULL pointer dereference (boo#1174711). This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1230=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): balsa-2.5.5-bp151.4.3.1 - openSUSE Backports SLE-15-SP1 (noarch): balsa-lang-2.5.5-bp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2020-16118.html https://bugzilla.suse.com/1174711

1 0

openSUSE-RU-2020:1229-1: moderate: Recommended update for glibc
by maintenance＠opensuse.org 17 Aug '20

17 Aug '20

openSUSE Recommended Update: Recommended update for glibc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1229-1 Rating: moderate References: #1171878 #1172085 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for glibc fixes the following issues: - Fix concurrent changes on nscd aware files appeared by 'getent' when the NSCD cache was enabled. (bsc#1171878, BZ #23178) - Implement correct locking and cancellation cleanup in syslog functions. (bsc#1172085, BZ #26100) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1229=1 Package List: - openSUSE Leap 15.2 (i586 i686 x86_64): glibc-2.26-lp152.26.3.1 glibc-debuginfo-2.26-lp152.26.3.1 glibc-debugsource-2.26-lp152.26.3.1 glibc-devel-2.26-lp152.26.3.1 glibc-devel-debuginfo-2.26-lp152.26.3.1 glibc-devel-static-2.26-lp152.26.3.1 glibc-locale-2.26-lp152.26.3.1 glibc-locale-base-2.26-lp152.26.3.1 glibc-locale-base-debuginfo-2.26-lp152.26.3.1 glibc-profile-2.26-lp152.26.3.1 - openSUSE Leap 15.2 (i586 x86_64): glibc-extra-2.26-lp152.26.3.1 glibc-extra-debuginfo-2.26-lp152.26.3.1 glibc-utils-2.26-lp152.26.3.1 glibc-utils-debuginfo-2.26-lp152.26.3.1 glibc-utils-src-debugsource-2.26-lp152.26.3.1 nscd-2.26-lp152.26.3.1 nscd-debuginfo-2.26-lp152.26.3.1 - openSUSE Leap 15.2 (x86_64): glibc-32bit-2.26-lp152.26.3.1 glibc-32bit-debuginfo-2.26-lp152.26.3.1 glibc-devel-32bit-2.26-lp152.26.3.1 glibc-devel-32bit-debuginfo-2.26-lp152.26.3.1 glibc-devel-static-32bit-2.26-lp152.26.3.1 glibc-locale-base-32bit-2.26-lp152.26.3.1 glibc-locale-base-32bit-debuginfo-2.26-lp152.26.3.1 glibc-profile-32bit-2.26-lp152.26.3.1 glibc-utils-32bit-2.26-lp152.26.3.1 glibc-utils-32bit-debuginfo-2.26-lp152.26.3.1 - openSUSE Leap 15.2 (noarch): glibc-html-2.26-lp152.26.3.1 glibc-i18ndata-2.26-lp152.26.3.1 glibc-info-2.26-lp152.26.3.1 References: https://bugzilla.suse.com/1171878 https://bugzilla.suse.com/1172085

1 0

openSUSE-SU-2020:1228-1: moderate: Security update for postgresql, postgresql96, postgresql10, postgresql12
by opensuse-security＠opensuse.org 17 Aug '20

17 Aug '20

openSUSE Security Update: Security update for postgresql, postgresql96, postgresql10, postgresql12 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1228-1 Rating: moderate References: #1148643 #1171924 #1175193 #1175194 Cross-References: CVE-2020-14349 CVE-2020-14350 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves two vulnerabilities and has two fixes is now available. Description: This update for postgresql, postgresql96, postgresql10, postgresql12 fixes the following issues: Postgresql12 was updated to 12.3 (bsc#1171924). - https://www.postgresql.org/about/news/2038/ - https://www.postgresql.org/docs/12/release-12-3.html - Let postgresqlXX conflict with postgresql-noarch < 12.0.1 to get a clean and complete cutover to the new packaging schema. Also changed in the postgresql wrapper package: - Bump version to 12.0.1, so that the binary packages also have a cut-point to conflict with. - Conflict with versions of the binary packages prior to the May 2020 update, because we changed the package layout at that point and need a clean cutover. - Bump package version to 12, but leave default at 10 for SLE-15 and SLE-15-SP1. postgresql11 was updated to 11.9: * CVE-2020-14349, bsc#1175193: Set a secure search_path in logical replication walsenders and apply workers * CVE-2020-14350, bsc#1175194: Make contrib modules' installation scripts more secure. * https://www.postgresql.org/docs/11/release-11-9.html - Pack the /usr/lib/postgresql symlink only into the main package. postgresql11 was updated to 11.8 (bsc#1171924). * https://www.postgresql.org/about/news/2038/ * https://www.postgresql.org/docs/11/release-11-8.html - Unify the spec file to work across all current PostgreSQL versions to simplify future maintenance. - Move from the "libs" build flavour to a "mini" package that will only be used inside the build service and not get shipped, to avoid confusion with the debuginfo packages (bsc#1148643). postgresql10 was updated to 10.13 (bsc#1171924). - https://www.postgresql.org/about/news/2038/ - https://www.postgresql.org/docs/10/release-10-13.html - Unify the spec file to work across all current PostgreSQL versions to simplify future maintenance. - Move from the "libs" build flavour to a "mini" package that will only be used inside the build service and not get shipped, to avoid confusion with the debuginfo packages (bsc#1148643). postgresql96 was updated to 9.6.19: * CVE-2020-14350, boo#1175194: Make contrib modules' installation scripts more secure. * https://www.postgresql.org/docs/9.6/release-9-6-19.html - Pack the /usr/lib/postgresql symlink only into the main package. - Let postgresqlXX conflict with postgresql-noarch < 12.0.1 to get a clean and complete cutover to the new packaging schema. - update to 9.6.18 (boo#1171924). https://www.postgresql.org/about/news/2038/ https://www.postgresql.org/docs/9.6/release-9-6-18.html - Unify the spec file to work across all current PostgreSQL versions to simplify future maintenance. - Move from the "libs" build flavour to a "mini" package that will only be used inside the build service and not get shipped, to avoid confusion with the debuginfo packages (boo#1148643). This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1228=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libecpg6-12.3-lp152.3.4.1 libecpg6-debuginfo-12.3-lp152.3.4.1 libpq5-12.3-lp152.3.4.1 libpq5-debuginfo-12.3-lp152.3.4.1 postgresql10-10.13-lp152.2.3.1 postgresql10-contrib-10.13-lp152.2.3.1 postgresql10-contrib-debuginfo-10.13-lp152.2.3.1 postgresql10-debuginfo-10.13-lp152.2.3.1 postgresql10-debugsource-10.13-lp152.2.3.1 postgresql10-devel-10.13-lp152.2.3.1 postgresql10-devel-debuginfo-10.13-lp152.2.3.1 postgresql10-plperl-10.13-lp152.2.3.1 postgresql10-plperl-debuginfo-10.13-lp152.2.3.1 postgresql10-plpython-10.13-lp152.2.3.1 postgresql10-plpython-debuginfo-10.13-lp152.2.3.1 postgresql10-pltcl-10.13-lp152.2.3.1 postgresql10-pltcl-debuginfo-10.13-lp152.2.3.1 postgresql10-server-10.13-lp152.2.3.1 postgresql10-server-debuginfo-10.13-lp152.2.3.1 postgresql10-test-10.13-lp152.2.3.1 postgresql12-12.3-lp152.3.4.1 postgresql12-contrib-12.3-lp152.3.4.1 postgresql12-contrib-debuginfo-12.3-lp152.3.4.1 postgresql12-debuginfo-12.3-lp152.3.4.1 postgresql12-debugsource-12.3-lp152.3.4.1 postgresql12-devel-12.3-lp152.3.4.1 postgresql12-devel-debuginfo-12.3-lp152.3.4.1 postgresql12-llvmjit-12.3-lp152.3.4.1 postgresql12-llvmjit-debuginfo-12.3-lp152.3.4.1 postgresql12-plperl-12.3-lp152.3.4.1 postgresql12-plperl-debuginfo-12.3-lp152.3.4.1 postgresql12-plpython-12.3-lp152.3.4.1 postgresql12-plpython-debuginfo-12.3-lp152.3.4.1 postgresql12-pltcl-12.3-lp152.3.4.1 postgresql12-pltcl-debuginfo-12.3-lp152.3.4.1 postgresql12-server-12.3-lp152.3.4.1 postgresql12-server-debuginfo-12.3-lp152.3.4.1 postgresql12-server-devel-12.3-lp152.3.4.1 postgresql12-server-devel-debuginfo-12.3-lp152.3.4.1 postgresql12-test-12.3-lp152.3.4.1 postgresql96-9.6.19-lp152.2.3.1 postgresql96-contrib-9.6.19-lp152.2.3.1 postgresql96-contrib-debuginfo-9.6.19-lp152.2.3.1 postgresql96-debuginfo-9.6.19-lp152.2.3.1 postgresql96-debugsource-9.6.19-lp152.2.3.1 postgresql96-devel-9.6.19-lp152.2.3.1 postgresql96-devel-debuginfo-9.6.19-lp152.2.3.1 postgresql96-plperl-9.6.19-lp152.2.3.1 postgresql96-plperl-debuginfo-9.6.19-lp152.2.3.1 postgresql96-plpython-9.6.19-lp152.2.3.1 postgresql96-plpython-debuginfo-9.6.19-lp152.2.3.1 postgresql96-pltcl-9.6.19-lp152.2.3.1 postgresql96-pltcl-debuginfo-9.6.19-lp152.2.3.1 postgresql96-server-9.6.19-lp152.2.3.1 postgresql96-server-debuginfo-9.6.19-lp152.2.3.1 postgresql96-test-9.6.19-lp152.2.3.1 - openSUSE Leap 15.2 (noarch): postgresql-12.0.1-lp152.3.3.2 postgresql-contrib-12.0.1-lp152.3.3.2 postgresql-devel-12.0.1-lp152.3.3.2 postgresql-docs-12.0.1-lp152.3.3.2 postgresql-llvmjit-12.0.1-lp152.3.3.2 postgresql-plperl-12.0.1-lp152.3.3.2 postgresql-plpython-12.0.1-lp152.3.3.2 postgresql-pltcl-12.0.1-lp152.3.3.2 postgresql-server-12.0.1-lp152.3.3.2 postgresql-server-devel-12.0.1-lp152.3.3.2 postgresql-test-12.0.1-lp152.3.3.2 postgresql10-docs-10.13-lp152.2.3.1 postgresql11-docs-11.9-lp152.3.3.1 postgresql12-docs-12.3-lp152.3.4.1 postgresql96-docs-9.6.19-lp152.2.3.1 - openSUSE Leap 15.2 (x86_64): libecpg6-32bit-12.3-lp152.3.4.1 libecpg6-32bit-debuginfo-12.3-lp152.3.4.1 libpq5-32bit-12.3-lp152.3.4.1 libpq5-32bit-debuginfo-12.3-lp152.3.4.1 postgresql11-11.9-lp152.3.3.1 postgresql11-contrib-11.9-lp152.3.3.1 postgresql11-contrib-debuginfo-11.9-lp152.3.3.1 postgresql11-debuginfo-11.9-lp152.3.3.1 postgresql11-debugsource-11.9-lp152.3.3.1 postgresql11-devel-11.9-lp152.3.3.1 postgresql11-devel-debuginfo-11.9-lp152.3.3.1 postgresql11-llvmjit-11.9-lp152.3.3.1 postgresql11-llvmjit-debuginfo-11.9-lp152.3.3.1 postgresql11-plperl-11.9-lp152.3.3.1 postgresql11-plperl-debuginfo-11.9-lp152.3.3.1 postgresql11-plpython-11.9-lp152.3.3.1 postgresql11-plpython-debuginfo-11.9-lp152.3.3.1 postgresql11-pltcl-11.9-lp152.3.3.1 postgresql11-pltcl-debuginfo-11.9-lp152.3.3.1 postgresql11-server-11.9-lp152.3.3.1 postgresql11-server-debuginfo-11.9-lp152.3.3.1 postgresql11-server-devel-11.9-lp152.3.3.1 postgresql11-server-devel-debuginfo-11.9-lp152.3.3.1 postgresql11-test-11.9-lp152.3.3.1 References: https://www.suse.com/security/cve/CVE-2020-14349.html https://www.suse.com/security/cve/CVE-2020-14350.html https://bugzilla.suse.com/1148643 https://bugzilla.suse.com/1171924 https://bugzilla.suse.com/1175193 https://bugzilla.suse.com/1175194

1 0

openSUSE-SU-2020:1227-1: moderate: Security update for postgresql96, postgresql10 and postgresql12
by opensuse-security＠opensuse.org 17 Aug '20

17 Aug '20

openSUSE Security Update: Security update for postgresql96, postgresql10 and postgresql12 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1227-1 Rating: moderate References: #1091610 #1104199 #1104202 #1134689 #1145092 #1148643 #1163985 #1171924 #1175194 Cross-References: CVE-2018-10915 CVE-2018-10925 CVE-2018-1115 CVE-2019-10130 CVE-2019-10208 CVE-2020-14350 CVE-2020-1720 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves 7 vulnerabilities and has two fixes is now available. Description: This update for postgresql96, postgresql10 and postgresql12 fixes the following issues: postgresql10 was updated to 10.13 (bsc#1171924). https://www.postgresql.org/about/news/2038/ https://www.postgresql.org/docs/10/release-10-13.html postgresql10 was updated to 10.12 (CVE-2020-1720, bsc#1163985) - https://www.postgresql.org/about/news/2011/ - https://www.postgresql.org/docs/10/release-10-12.html postgresql10 was updated to 10.11: - https://www.postgresql.org/about/news/1994/ - https://www.postgresql.org/docs/10/release-10-11.html postgresql12 was updated to 12.3 (bsc#1171924). Bug Fixes and Improvements: - Several fixes for GENERATED columns, including an issue where it was possible to crash or corrupt data in a table when the output of the generated column was the exact copy of a physical column on the table, e.g. if the expression called a function which could return its own input. - Several fixes for ALTER TABLE, including ensuring the SET STORAGE directive is propagated to a table's indexes. - Fix a potential race condition when using DROP OWNED BY while another session is deleting the same objects. - Allow for a partition to be detached when it has inherited ROW triggers. - Several fixes for REINDEX CONCURRENTLY, particularly with issues when a REINDEX CONCURRENTLY operation fails. - Fix crash when COLLATE is applied to an uncollatable type in a partition bound expression. - Fix performance regression in floating point overflow/underflow detection. - Several fixes for full text search, particularly with phrase searching. - Fix query-lifespan memory leak for a set-returning function used in a query's FROM clause. - Several reporting fixes for the output of VACUUM VERBOSE. - Allow input of type circle to accept the format (x,y),r, which is specified in the documentation. - Allow for the get_bit() and set_bit() functions to not fail on bytea strings longer than 256MB. - Avoid premature recycling of WAL segments during crash recovery, which could lead to WAL segments being recycled before being archived. - Avoid attempting to fetch nonexistent WAL files from archive storage during recovery by skipping irrelevant timelines. - Several fixes for logical replication and replication slots. - Fix several race conditions in synchronous standby management, including one that occurred when changing the synchronous_standby_names setting. - Several fixes for GSSAPI support, include a fix for a memory leak that occurred when using GSSAPI encryption. - Ensure that members of the pg_read_all_stats role can read all statistics views. - Fix performance regression in information_schema.triggers view. - Fix memory leak in libpq when using sslmode=verify-full. - Fix crash in psql when attempting to re-establish a failed connection. - Allow tab-completion of the filename argument to \gx command in psql. - Add pg_dump support for ALTER ... DEPENDS ON EXTENSION. - Several other fixes for pg_dump, which include dumping comments on RLS policies and postponing restore of event triggers until the end. - Ensure pg_basebackup generates valid tar files. - pg_checksums skips tablespace subdirectories that belong to a different PostgreSQL major version - Several Windows compatibility fixes This update also contains timezone tzdata release 2020a for DST law changes in Morocco and the Canadian Yukon, plus historical corrections for Shanghai. The America/Godthab zone has been renamed to America/Nuuk to reflect current English usage ; however, the old name remains available as a compatibility link. This also updates initdb's list of known Windows time zone names to include recent additions. For more details, check out: - https://www.postgresql.org/docs/12/release-12-3.html Other fixes: - Let postgresqlXX conflict with postgresql-noarch < 12.0.1 to get a clean and complete cutover to the new packaging schema. postgresql96 was updated to 9.6.19: * CVE-2020-14350, boo#1175194: Make contrib modules' installation scripts more secure. * https://www.postgresql.org/docs/9.6/release-9-6-19.html - Pack the /usr/lib/postgresql symlink only into the main package. - Let postgresqlXX conflict with postgresql-noarch < 12.0.1 to get a clean and complete cutover to the new packaging schema. - update to 9.6.18 (boo#1171924). https://www.postgresql.org/about/news/2038/ https://www.postgresql.org/docs/9.6/release-9-6-18.html - Unify the spec file to work across all current PostgreSQL versions to simplify future maintenance. - Move from the "libs" build flavour to a "mini" package that will only be used inside the build service and not get shipped, to avoid confusion with the debuginfo packages (boo#1148643). - update to 9.6.17 (CVE-2020-1720, boo#1163985) https://www.postgresql.org/about/news/2011/ https://www.postgresql.org/docs/9.6/release-9-6-17.html - use and package the sha256 checksum for for source - update to 9.6.16: https://www.postgresql.org/about/news/1994/ https://www.postgresql.org/docs/9.6/release-9-6-16.html - add requires to the devel package for the libs that are returned by pg_config --libs - Update to 9.6.15: * https://www.postgresql.org/about/news/1960/ * https://www.postgresql.org/docs/9.6/release-9-6-15.html * CVE-2019-10208, boo#1145092: TYPE in pg_temp executes arbitrary SQL during SECURITY DEFINER execution. - Use FAT LTO objects in order to provide proper static library. - Update to 9.6.14: https://www.postgresql.org/docs/9.6/release-9-6-14.html - Update to 9.6.13: * https://www.postgresql.org/docs/9.6/release-9-6-13.html * https://www.postgresql.org/about/news/1939/ * CVE-2019-10130, boo#1134689: Prevent row-level security policies from being bypassed via selectivity estimators. - Make the server-devel package exclusive across versions. - Update to 9.6.12: * https://www.postgresql.org/docs/9.6/release-9-6-12.html * https://www.postgresql.org/about/news/1920/ * By default, panic instead of retrying after fsync() failure, to avoid possible data corruption. * Numerous other bug fixes. - Overhaul README.SUSE - Update to 9.6.11: * Numerous bug fixes, see the release notes: https://www.postgresql.org/docs/9.6/release-9-6-11.html * Remove unneeded library dependencies from PGXS. - add provides for the new server-devel package that will be introduced in postgresql 11 - Update to 9.6.10: https://www.postgresql.org/docs/current/static/release-9-6-10.html * CVE-2018-10915, boo#1104199: Fix failure to reset libpq's state fully between connection attempts. * CVE-2018-10925, boo#1104202: Fix INSERT ... ON CONFLICT UPDATE through a view that isn't just SELECT * FROM ... - Update to 9.6.9: https://www.postgresql.org/about/news/1851/ https://www.postgresql.org/docs/current/static/release-9-6-9.html A dump/restore is not required for those running 9.6.X. However, if you use the adminpack extension, you should update it as per the first changelog entry below. Also, if the function marking mistakes mentioned in the second and third changelog entries below affect you, you will want to take steps to correct your database catalogs. * CVE-2018-1115, boo#1091610: Remove public execute privilege from contrib/adminpack's pg_logfile_rotate() function pg_logfile_rotate() is a deprecated wrapper for the core function pg_rotate_logfile(). When that function was changed to rely on SQL privileges for access control rather than a hard-coded superuser check, pg_logfile_rotate() should have been updated as well, but the need for this was missed. Hence, if adminpack is installed, any user could request a logfile rotation, creating a minor security issue. After installing this update, administrators should update adminpack by performing ALTER EXTENSION adminpack UPDATE in each database in which adminpack is installed. * Fix incorrect volatility markings on a few built-in functions * Fix incorrect parallel-safety markings on a few built-in functions. This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1227=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): postgresql10-10.13-lp151.2.14.1 postgresql10-contrib-10.13-lp151.2.14.1 postgresql10-contrib-debuginfo-10.13-lp151.2.14.1 postgresql10-debuginfo-10.13-lp151.2.14.1 postgresql10-debugsource-10.13-lp151.2.14.1 postgresql10-devel-10.13-lp151.2.14.1 postgresql10-devel-debuginfo-10.13-lp151.2.14.1 postgresql10-plperl-10.13-lp151.2.14.1 postgresql10-plperl-debuginfo-10.13-lp151.2.14.1 postgresql10-plpython-10.13-lp151.2.14.1 postgresql10-plpython-debuginfo-10.13-lp151.2.14.1 postgresql10-pltcl-10.13-lp151.2.14.1 postgresql10-pltcl-debuginfo-10.13-lp151.2.14.1 postgresql10-server-10.13-lp151.2.14.1 postgresql10-server-debuginfo-10.13-lp151.2.14.1 postgresql10-test-10.13-lp151.2.14.1 postgresql96-9.6.19-lp151.3.3.1 postgresql96-contrib-9.6.19-lp151.3.3.1 postgresql96-contrib-debuginfo-9.6.19-lp151.3.3.1 postgresql96-debuginfo-9.6.19-lp151.3.3.1 postgresql96-debugsource-9.6.19-lp151.3.3.1 postgresql96-devel-9.6.19-lp151.3.3.1 postgresql96-devel-debuginfo-9.6.19-lp151.3.3.1 postgresql96-plperl-9.6.19-lp151.3.3.1 postgresql96-plperl-debuginfo-9.6.19-lp151.3.3.1 postgresql96-plpython-9.6.19-lp151.3.3.1 postgresql96-plpython-debuginfo-9.6.19-lp151.3.3.1 postgresql96-pltcl-9.6.19-lp151.3.3.1 postgresql96-pltcl-debuginfo-9.6.19-lp151.3.3.1 postgresql96-server-9.6.19-lp151.3.3.1 postgresql96-server-debuginfo-9.6.19-lp151.3.3.1 postgresql96-test-9.6.19-lp151.3.3.1 - openSUSE Leap 15.1 (x86_64): libecpg6-12.3-lp151.2.1 libecpg6-debuginfo-12.3-lp151.2.1 libpq5-12.3-lp151.2.1 libpq5-debuginfo-12.3-lp151.2.1 postgresql12-12.3-lp151.2.1 postgresql12-contrib-12.3-lp151.2.1 postgresql12-contrib-debuginfo-12.3-lp151.2.1 postgresql12-debuginfo-12.3-lp151.2.1 postgresql12-debugsource-12.3-lp151.2.1 postgresql12-devel-12.3-lp151.2.1 postgresql12-devel-debuginfo-12.3-lp151.2.1 postgresql12-llvmjit-12.3-lp151.2.1 postgresql12-llvmjit-debuginfo-12.3-lp151.2.1 postgresql12-plperl-12.3-lp151.2.1 postgresql12-plperl-debuginfo-12.3-lp151.2.1 postgresql12-plpython-12.3-lp151.2.1 postgresql12-plpython-debuginfo-12.3-lp151.2.1 postgresql12-pltcl-12.3-lp151.2.1 postgresql12-pltcl-debuginfo-12.3-lp151.2.1 postgresql12-server-12.3-lp151.2.1 postgresql12-server-debuginfo-12.3-lp151.2.1 postgresql12-server-devel-12.3-lp151.2.1 postgresql12-server-devel-debuginfo-12.3-lp151.2.1 postgresql12-test-12.3-lp151.2.1 - openSUSE Leap 15.1 (noarch): postgresql-12.0.1-lp151.6.9.1 postgresql-contrib-12.0.1-lp151.6.9.1 postgresql-devel-12.0.1-lp151.6.9.1 postgresql-docs-12.0.1-lp151.6.9.1 postgresql-llvmjit-12.0.1-lp151.6.9.1 postgresql-plperl-12.0.1-lp151.6.9.1 postgresql-plpython-12.0.1-lp151.6.9.1 postgresql-pltcl-12.0.1-lp151.6.9.1 postgresql-server-12.0.1-lp151.6.9.1 postgresql-server-devel-12.0.1-lp151.6.9.1 postgresql-test-12.0.1-lp151.6.9.1 postgresql10-docs-10.13-lp151.2.14.1 postgresql12-docs-12.3-lp151.2.1 postgresql96-docs-9.6.19-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2018-10915.html https://www.suse.com/security/cve/CVE-2018-10925.html https://www.suse.com/security/cve/CVE-2018-1115.html https://www.suse.com/security/cve/CVE-2019-10130.html https://www.suse.com/security/cve/CVE-2019-10208.html https://www.suse.com/security/cve/CVE-2020-14350.html https://www.suse.com/security/cve/CVE-2020-1720.html https://bugzilla.suse.com/1091610 https://bugzilla.suse.com/1104199 https://bugzilla.suse.com/1104202 https://bugzilla.suse.com/1134689 https://bugzilla.suse.com/1145092 https://bugzilla.suse.com/1148643 https://bugzilla.suse.com/1163985 https://bugzilla.suse.com/1171924 https://bugzilla.suse.com/1175194

1 0

openSUSE-RU-2020:1226-1: moderate: Recommended update for dpdk
by maintenance＠opensuse.org 17 Aug '20

17 Aug '20

openSUSE Recommended Update: Recommended update for dpdk ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1226-1 Rating: moderate References: #1174543 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update of dpdk fixes the following issue: - rebuilt with new signing key. (bsc#1174543) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1226=1 Package List: - openSUSE Leap 15.2 (noarch): dpdk-doc-19.11.1-lp152.2.3.1 - openSUSE Leap 15.2 (x86_64): dpdk-19.11.1-lp152.2.3.1 dpdk-debuginfo-19.11.1-lp152.2.3.1 dpdk-debugsource-19.11.1-lp152.2.3.1 dpdk-devel-19.11.1-lp152.2.3.1 dpdk-devel-debuginfo-19.11.1-lp152.2.3.1 dpdk-examples-19.11.1-lp152.2.3.1 dpdk-examples-debuginfo-19.11.1-lp152.2.3.1 dpdk-kmp-default-19.11.1_k5.3.18_lp152.33-lp152.2.3.1 dpdk-kmp-default-debuginfo-19.11.1_k5.3.18_lp152.33-lp152.2.3.1 dpdk-kmp-preempt-19.11.1_k5.3.18_lp152.33-lp152.2.3.1 dpdk-kmp-preempt-debuginfo-19.11.1_k5.3.18_lp152.33-lp152.2.3.1 dpdk-tools-19.11.1-lp152.2.3.1 dpdk-tools-debuginfo-19.11.1-lp152.2.3.1 libdpdk-20_0-19.11.1-lp152.2.3.1 libdpdk-20_0-debuginfo-19.11.1-lp152.2.3.1 References: https://bugzilla.suse.com/1174543

1 0

openSUSE-RU-2020:1225-1: moderate: Recommended update for glibc
by maintenance＠opensuse.org 16 Aug '20

16 Aug '20

openSUSE Recommended Update: Recommended update for glibc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1225-1 Rating: moderate References: #1171878 #1172085 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for glibc fixes the following issues: - Fix concurrent changes on nscd aware files appeared by 'getent' when the NSCD cache was enabled. (bsc#1171878, BZ #23178) - Implement correct locking and cancellation cleanup in syslog functions. (bsc#1172085, BZ #26100) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1225=1 Package List: - openSUSE Leap 15.1 (i586 i686 x86_64): glibc-2.26-lp151.19.19.1 glibc-debuginfo-2.26-lp151.19.19.1 glibc-debugsource-2.26-lp151.19.19.1 glibc-devel-2.26-lp151.19.19.1 glibc-devel-debuginfo-2.26-lp151.19.19.1 glibc-devel-static-2.26-lp151.19.19.1 glibc-locale-2.26-lp151.19.19.1 glibc-locale-base-2.26-lp151.19.19.1 glibc-locale-base-debuginfo-2.26-lp151.19.19.1 glibc-profile-2.26-lp151.19.19.1 - openSUSE Leap 15.1 (i586 x86_64): glibc-extra-2.26-lp151.19.19.1 glibc-extra-debuginfo-2.26-lp151.19.19.1 glibc-utils-2.26-lp151.19.19.1 glibc-utils-debuginfo-2.26-lp151.19.19.1 glibc-utils-src-debugsource-2.26-lp151.19.19.1 nscd-2.26-lp151.19.19.1 nscd-debuginfo-2.26-lp151.19.19.1 - openSUSE Leap 15.1 (x86_64): glibc-32bit-2.26-lp151.19.19.1 glibc-32bit-debuginfo-2.26-lp151.19.19.1 glibc-devel-32bit-2.26-lp151.19.19.1 glibc-devel-32bit-debuginfo-2.26-lp151.19.19.1 glibc-devel-static-32bit-2.26-lp151.19.19.1 glibc-locale-base-32bit-2.26-lp151.19.19.1 glibc-locale-base-32bit-debuginfo-2.26-lp151.19.19.1 glibc-profile-32bit-2.26-lp151.19.19.1 glibc-utils-32bit-2.26-lp151.19.19.1 glibc-utils-32bit-debuginfo-2.26-lp151.19.19.1 - openSUSE Leap 15.1 (noarch): glibc-html-2.26-lp151.19.19.1 glibc-i18ndata-2.26-lp151.19.19.1 glibc-info-2.26-lp151.19.19.1 References: https://bugzilla.suse.com/1171878 https://bugzilla.suse.com/1172085

1 0

openSUSE-RU-2020:1223-1: moderate: Recommended update for shim-leap
by maintenance＠opensuse.org 16 Aug '20

16 Aug '20

openSUSE Recommended Update: Recommended update for shim-leap ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1223-1 Rating: moderate References: Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for shim-leap fixes the following issues: - Update shim to 15+git47-lp152.4.3.1 from openSUSE Leap 15.2 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1223=1 Package List: - openSUSE Leap 15.1 (x86_64): shim-15+git47-lp151.2.8.1 References:

1 0

openSUSE-SU-2020:1222-1: moderate: Security update for libreoffice
by opensuse-security＠opensuse.org 16 Aug '20

16 Aug '20

openSUSE Security Update: Security update for libreoffice ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1222-1 Rating: moderate References: #1062631 #1146025 #1157627 #1165849 #1172053 #1172189 #1172795 #1172796 Cross-References: CVE-2020-12802 CVE-2020-12803 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves two vulnerabilities and has 6 fixes is now available. Description: This update for libreoffice fixes the following issues: - Update to 6.4.5.2: * Various fixes all around - Remove mime-info and application-registry dirs bsc#1062631 - Fix bsc#1172053 - LO-L3: Image disappears during roundtrip 365->Impress->365 * bsc1172053.diff - Fix bsc#1172189 - LO-L3: Impress crashes midway opening a PPTX document * bsc1172189.diff - Fix bsc#1157627 - LO-L3: Some XML-created shapes simply lost upon PPTX import (= earth loses countries) * bsc1157627.diff - Fix bsc#1146025 - LO-L3: Colored textboxes in PPTX look very odd (SmartArt) - Fix bsc#1165849 - LO-L3: Shadow size for rectangle is only a fraction of Office 365 * bsc1165849-1.diff * bsc1165849-2.diff * bsc1165849-3.diff This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1222=1 Package List: - openSUSE Leap 15.1 (noarch): libreoffice-branding-upstream-6.4.5.2-lp151.3.18.1 libreoffice-gdb-pretty-printers-6.4.5.2-lp151.3.18.1 libreoffice-glade-6.4.5.2-lp151.3.18.1 libreoffice-icon-themes-6.4.5.2-lp151.3.18.1 libreoffice-l10n-af-6.4.5.2-lp151.3.18.1 libreoffice-l10n-am-6.4.5.2-lp151.3.18.1 libreoffice-l10n-ar-6.4.5.2-lp151.3.18.1 libreoffice-l10n-as-6.4.5.2-lp151.3.18.1 libreoffice-l10n-ast-6.4.5.2-lp151.3.18.1 libreoffice-l10n-be-6.4.5.2-lp151.3.18.1 libreoffice-l10n-bg-6.4.5.2-lp151.3.18.1 libreoffice-l10n-bn-6.4.5.2-lp151.3.18.1 libreoffice-l10n-bn_IN-6.4.5.2-lp151.3.18.1 libreoffice-l10n-bo-6.4.5.2-lp151.3.18.1 libreoffice-l10n-br-6.4.5.2-lp151.3.18.1 libreoffice-l10n-brx-6.4.5.2-lp151.3.18.1 libreoffice-l10n-bs-6.4.5.2-lp151.3.18.1 libreoffice-l10n-ca-6.4.5.2-lp151.3.18.1 libreoffice-l10n-ca_valencia-6.4.5.2-lp151.3.18.1 libreoffice-l10n-cs-6.4.5.2-lp151.3.18.1 libreoffice-l10n-cy-6.4.5.2-lp151.3.18.1 libreoffice-l10n-da-6.4.5.2-lp151.3.18.1 libreoffice-l10n-de-6.4.5.2-lp151.3.18.1 libreoffice-l10n-dgo-6.4.5.2-lp151.3.18.1 libreoffice-l10n-dsb-6.4.5.2-lp151.3.18.1 libreoffice-l10n-dz-6.4.5.2-lp151.3.18.1 libreoffice-l10n-el-6.4.5.2-lp151.3.18.1 libreoffice-l10n-en-6.4.5.2-lp151.3.18.1 libreoffice-l10n-en_GB-6.4.5.2-lp151.3.18.1 libreoffice-l10n-en_ZA-6.4.5.2-lp151.3.18.1 libreoffice-l10n-eo-6.4.5.2-lp151.3.18.1 libreoffice-l10n-es-6.4.5.2-lp151.3.18.1 libreoffice-l10n-et-6.4.5.2-lp151.3.18.1 libreoffice-l10n-eu-6.4.5.2-lp151.3.18.1 libreoffice-l10n-fa-6.4.5.2-lp151.3.18.1 libreoffice-l10n-fi-6.4.5.2-lp151.3.18.1 libreoffice-l10n-fr-6.4.5.2-lp151.3.18.1 libreoffice-l10n-fy-6.4.5.2-lp151.3.18.1 libreoffice-l10n-ga-6.4.5.2-lp151.3.18.1 libreoffice-l10n-gd-6.4.5.2-lp151.3.18.1 libreoffice-l10n-gl-6.4.5.2-lp151.3.18.1 libreoffice-l10n-gu-6.4.5.2-lp151.3.18.1 libreoffice-l10n-gug-6.4.5.2-lp151.3.18.1 libreoffice-l10n-he-6.4.5.2-lp151.3.18.1 libreoffice-l10n-hi-6.4.5.2-lp151.3.18.1 libreoffice-l10n-hr-6.4.5.2-lp151.3.18.1 libreoffice-l10n-hsb-6.4.5.2-lp151.3.18.1 libreoffice-l10n-hu-6.4.5.2-lp151.3.18.1 libreoffice-l10n-id-6.4.5.2-lp151.3.18.1 libreoffice-l10n-is-6.4.5.2-lp151.3.18.1 libreoffice-l10n-it-6.4.5.2-lp151.3.18.1 libreoffice-l10n-ja-6.4.5.2-lp151.3.18.1 libreoffice-l10n-ka-6.4.5.2-lp151.3.18.1 libreoffice-l10n-kab-6.4.5.2-lp151.3.18.1 libreoffice-l10n-kk-6.4.5.2-lp151.3.18.1 libreoffice-l10n-km-6.4.5.2-lp151.3.18.1 libreoffice-l10n-kmr_Latn-6.4.5.2-lp151.3.18.1 libreoffice-l10n-kn-6.4.5.2-lp151.3.18.1 libreoffice-l10n-ko-6.4.5.2-lp151.3.18.1 libreoffice-l10n-kok-6.4.5.2-lp151.3.18.1 libreoffice-l10n-ks-6.4.5.2-lp151.3.18.1 libreoffice-l10n-lb-6.4.5.2-lp151.3.18.1 libreoffice-l10n-lo-6.4.5.2-lp151.3.18.1 libreoffice-l10n-lt-6.4.5.2-lp151.3.18.1 libreoffice-l10n-lv-6.4.5.2-lp151.3.18.1 libreoffice-l10n-mai-6.4.5.2-lp151.3.18.1 libreoffice-l10n-mk-6.4.5.2-lp151.3.18.1 libreoffice-l10n-ml-6.4.5.2-lp151.3.18.1 libreoffice-l10n-mn-6.4.5.2-lp151.3.18.1 libreoffice-l10n-mni-6.4.5.2-lp151.3.18.1 libreoffice-l10n-mr-6.4.5.2-lp151.3.18.1 libreoffice-l10n-my-6.4.5.2-lp151.3.18.1 libreoffice-l10n-nb-6.4.5.2-lp151.3.18.1 libreoffice-l10n-ne-6.4.5.2-lp151.3.18.1 libreoffice-l10n-nl-6.4.5.2-lp151.3.18.1 libreoffice-l10n-nn-6.4.5.2-lp151.3.18.1 libreoffice-l10n-nr-6.4.5.2-lp151.3.18.1 libreoffice-l10n-nso-6.4.5.2-lp151.3.18.1 libreoffice-l10n-oc-6.4.5.2-lp151.3.18.1 libreoffice-l10n-om-6.4.5.2-lp151.3.18.1 libreoffice-l10n-or-6.4.5.2-lp151.3.18.1 libreoffice-l10n-pa-6.4.5.2-lp151.3.18.1 libreoffice-l10n-pl-6.4.5.2-lp151.3.18.1 libreoffice-l10n-pt_BR-6.4.5.2-lp151.3.18.1 libreoffice-l10n-pt_PT-6.4.5.2-lp151.3.18.1 libreoffice-l10n-ro-6.4.5.2-lp151.3.18.1 libreoffice-l10n-ru-6.4.5.2-lp151.3.18.1 libreoffice-l10n-rw-6.4.5.2-lp151.3.18.1 libreoffice-l10n-sa_IN-6.4.5.2-lp151.3.18.1 libreoffice-l10n-sat-6.4.5.2-lp151.3.18.1 libreoffice-l10n-sd-6.4.5.2-lp151.3.18.1 libreoffice-l10n-si-6.4.5.2-lp151.3.18.1 libreoffice-l10n-sid-6.4.5.2-lp151.3.18.1 libreoffice-l10n-sk-6.4.5.2-lp151.3.18.1 libreoffice-l10n-sl-6.4.5.2-lp151.3.18.1 libreoffice-l10n-sq-6.4.5.2-lp151.3.18.1 libreoffice-l10n-sr-6.4.5.2-lp151.3.18.1 libreoffice-l10n-ss-6.4.5.2-lp151.3.18.1 libreoffice-l10n-st-6.4.5.2-lp151.3.18.1 libreoffice-l10n-sv-6.4.5.2-lp151.3.18.1 libreoffice-l10n-sw_TZ-6.4.5.2-lp151.3.18.1 libreoffice-l10n-szl-6.4.5.2-lp151.3.18.1 libreoffice-l10n-ta-6.4.5.2-lp151.3.18.1 libreoffice-l10n-te-6.4.5.2-lp151.3.18.1 libreoffice-l10n-tg-6.4.5.2-lp151.3.18.1 libreoffice-l10n-th-6.4.5.2-lp151.3.18.1 libreoffice-l10n-tn-6.4.5.2-lp151.3.18.1 libreoffice-l10n-tr-6.4.5.2-lp151.3.18.1 libreoffice-l10n-ts-6.4.5.2-lp151.3.18.1 libreoffice-l10n-tt-6.4.5.2-lp151.3.18.1 libreoffice-l10n-ug-6.4.5.2-lp151.3.18.1 libreoffice-l10n-uk-6.4.5.2-lp151.3.18.1 libreoffice-l10n-uz-6.4.5.2-lp151.3.18.1 libreoffice-l10n-ve-6.4.5.2-lp151.3.18.1 libreoffice-l10n-vec-6.4.5.2-lp151.3.18.1 libreoffice-l10n-vi-6.4.5.2-lp151.3.18.1 libreoffice-l10n-xh-6.4.5.2-lp151.3.18.1 libreoffice-l10n-zh_CN-6.4.5.2-lp151.3.18.1 libreoffice-l10n-zh_TW-6.4.5.2-lp151.3.18.1 libreoffice-l10n-zu-6.4.5.2-lp151.3.18.1 - openSUSE Leap 15.1 (x86_64): libreoffice-6.4.5.2-lp151.3.18.1 libreoffice-base-6.4.5.2-lp151.3.18.1 libreoffice-base-debuginfo-6.4.5.2-lp151.3.18.1 libreoffice-base-drivers-firebird-6.4.5.2-lp151.3.18.1 libreoffice-base-drivers-firebird-debuginfo-6.4.5.2-lp151.3.18.1 libreoffice-base-drivers-postgresql-6.4.5.2-lp151.3.18.1 libreoffice-base-drivers-postgresql-debuginfo-6.4.5.2-lp151.3.18.1 libreoffice-calc-6.4.5.2-lp151.3.18.1 libreoffice-calc-debuginfo-6.4.5.2-lp151.3.18.1 libreoffice-calc-extensions-6.4.5.2-lp151.3.18.1 libreoffice-debuginfo-6.4.5.2-lp151.3.18.1 libreoffice-debugsource-6.4.5.2-lp151.3.18.1 libreoffice-draw-6.4.5.2-lp151.3.18.1 libreoffice-draw-debuginfo-6.4.5.2-lp151.3.18.1 libreoffice-filters-optional-6.4.5.2-lp151.3.18.1 libreoffice-gnome-6.4.5.2-lp151.3.18.1 libreoffice-gnome-debuginfo-6.4.5.2-lp151.3.18.1 libreoffice-gtk3-6.4.5.2-lp151.3.18.1 libreoffice-gtk3-debuginfo-6.4.5.2-lp151.3.18.1 libreoffice-impress-6.4.5.2-lp151.3.18.1 libreoffice-impress-debuginfo-6.4.5.2-lp151.3.18.1 libreoffice-librelogo-6.4.5.2-lp151.3.18.1 libreoffice-mailmerge-6.4.5.2-lp151.3.18.1 libreoffice-math-6.4.5.2-lp151.3.18.1 libreoffice-math-debuginfo-6.4.5.2-lp151.3.18.1 libreoffice-officebean-6.4.5.2-lp151.3.18.1 libreoffice-officebean-debuginfo-6.4.5.2-lp151.3.18.1 libreoffice-pyuno-6.4.5.2-lp151.3.18.1 libreoffice-pyuno-debuginfo-6.4.5.2-lp151.3.18.1 libreoffice-qt5-6.4.5.2-lp151.3.18.1 libreoffice-qt5-debuginfo-6.4.5.2-lp151.3.18.1 libreoffice-sdk-6.4.5.2-lp151.3.18.1 libreoffice-sdk-debuginfo-6.4.5.2-lp151.3.18.1 libreoffice-sdk-doc-6.4.5.2-lp151.3.18.1 libreoffice-writer-6.4.5.2-lp151.3.18.1 libreoffice-writer-debuginfo-6.4.5.2-lp151.3.18.1 libreoffice-writer-extensions-6.4.5.2-lp151.3.18.1 libreofficekit-6.4.5.2-lp151.3.18.1 libreofficekit-devel-6.4.5.2-lp151.3.18.1 References: https://www.suse.com/security/cve/CVE-2020-12802.html https://www.suse.com/security/cve/CVE-2020-12803.html https://bugzilla.suse.com/1062631 https://bugzilla.suse.com/1146025 https://bugzilla.suse.com/1157627 https://bugzilla.suse.com/1165849 https://bugzilla.suse.com/1172053 https://bugzilla.suse.com/1172189 https://bugzilla.suse.com/1172795 https://bugzilla.suse.com/1172796

1 0

openSUSE-RU-2020:1224-1: moderate: Recommended update for SUSEConnect
by maintenance＠opensuse.org 16 Aug '20

16 Aug '20

openSUSE Recommended Update: Recommended update for SUSEConnect ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1224-1 Rating: moderate References: #1130864 #1155911 #1160007 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for SUSEConnect fixes the following issues: Update from version 0.3.22 to version 0.3.25 - Don't fail de-activation when '-release' package already got removed. - Fix cloud_provider detection on AWS large instances. (bsc#1160007) - Forbid de-registration for on-demand Public Cloud instances. (bsc#1155911) - Setup customer_center on read-only boot system. (bsc#1130864) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1224=1 Package List: - openSUSE Leap 15.1 (x86_64): SUSEConnect-0.3.25-lp151.2.12.1 References: https://bugzilla.suse.com/1130864 https://bugzilla.suse.com/1155911 https://bugzilla.suse.com/1160007

1 0

openSUSE-RU-2020:1220-1: important: Recommended update for grub2
by maintenance＠opensuse.org 16 Aug '20

16 Aug '20

openSUSE Recommended Update: Recommended update for grub2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1220-1 Rating: important References: #1174782 #1175036 #1175060 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for grub2 fixes the following issues: - A potential regression has been fixed that would cause systems with an updated 'grub2' to boot no longer due to a missing 'grub-calloc' linker symbol. (bsc#1174782) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1220=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): grub2-2.02-lp151.21.24.1 grub2-branding-upstream-2.02-lp151.21.24.1 grub2-debuginfo-2.02-lp151.21.24.1 grub2-debugsource-2.02-lp151.21.24.1 - openSUSE Leap 15.1 (noarch): grub2-i386-efi-2.02-lp151.21.24.1 grub2-i386-pc-2.02-lp151.21.24.1 grub2-i386-xen-2.02-lp151.21.24.1 grub2-snapper-plugin-2.02-lp151.21.24.1 grub2-systemd-sleep-plugin-2.02-lp151.21.24.1 grub2-x86_64-efi-2.02-lp151.21.24.1 grub2-x86_64-xen-2.02-lp151.21.24.1 References: https://bugzilla.suse.com/1174782 https://bugzilla.suse.com/1175036 https://bugzilla.suse.com/1175060

1 0

openSUSE-RU-2020:1221-1: important: Recommended update for grub2
by maintenance＠opensuse.org 16 Aug '20

16 Aug '20

openSUSE Recommended Update: Recommended update for grub2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1221-1 Rating: important References: #1174782 #1175036 #1175060 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for grub2 fixes the following issues: - A potential regression has been fixed that would cause systems with an updated 'grub2' to boot no longer due to a missing 'grub-calloc' linker symbol. (bsc#1174782) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1221=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): grub2-2.04-lp152.7.6.1 grub2-branding-upstream-2.04-lp152.7.6.1 grub2-debuginfo-2.04-lp152.7.6.1 grub2-debugsource-2.04-lp152.7.6.1 - openSUSE Leap 15.2 (noarch): grub2-i386-efi-2.04-lp152.7.6.1 grub2-i386-efi-debug-2.04-lp152.7.6.1 grub2-i386-pc-2.04-lp152.7.6.1 grub2-i386-pc-debug-2.04-lp152.7.6.1 grub2-i386-xen-2.04-lp152.7.6.1 grub2-snapper-plugin-2.04-lp152.7.6.1 grub2-systemd-sleep-plugin-2.04-lp152.7.6.1 grub2-x86_64-efi-2.04-lp152.7.6.1 grub2-x86_64-efi-debug-2.04-lp152.7.6.1 grub2-x86_64-xen-2.04-lp152.7.6.1 References: https://bugzilla.suse.com/1174782 https://bugzilla.suse.com/1175036 https://bugzilla.suse.com/1175060

1 0

openSUSE-RU-2020:1219-1: moderate: Recommended update for hawk2
by maintenance＠opensuse.org 16 Aug '20

16 Aug '20

openSUSE Recommended Update: Recommended update for hawk2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1219-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for hawk2 fixes the following issue: Update to version 2.1.2+git.1594886920.d00b94aa: - Update puma rubygem requirement to version 4.3.5 for disabling TLSv1.0 and TLSv1.1 (jsc#SLE-6965) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1219=1 Package List: - openSUSE Leap 15.2 (x86_64): hawk2-2.1.2+git.1594886920.d00b94aa-lp152.2.3.1 hawk2-debuginfo-2.1.2+git.1594886920.d00b94aa-lp152.2.3.1 hawk2-debugsource-2.1.2+git.1594886920.d00b94aa-lp152.2.3.1 References:

1 0

openSUSE-RU-2020:1217-1: moderate: Recommended update for supportutils-plugin-suse-public-cloud and python3-azuremetadata
by maintenance＠opensuse.org 16 Aug '20

16 Aug '20

openSUSE Recommended Update: Recommended update for supportutils-plugin-suse-public-cloud and python3-azuremetadata ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1217-1 Rating: moderate References: #1170475 #1170476 #1173238 #1173240 #1173357 #1174618 #1174847 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 7 recommended fixes can now be installed. Description: This update for supportutils-plugin-suse-public-cloud and python3-azuremetadata fixes the following issues: supportutils-plugin-suse-public-cloud: - Fixes an error when supportutils-plugin-suse-public-cloud and supportutils-plugin-salt are installed at the same time (bsc#1174618) - Sensitive information like credentials (such as access keys) will be removed when the metadata is being collected (bsc#1170475, bsc#1170476) python3-azuremetadata: - Added latest support for `--listapis` and `--api` (bsc#1173238, bsc#1173240) - Detects when the VM is running in ASM (Azure Classic) and does now handle the condition to generate the data without requiring access to the full IMDS available, only in ARM instances (bsc#1173357, bsc#1174847) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1217=1 Package List: - openSUSE Leap 15.2 (noarch): python3-azuremetadata-5.1.2-lp152.2.3.1 References: https://bugzilla.suse.com/1170475 https://bugzilla.suse.com/1170476 https://bugzilla.suse.com/1173238 https://bugzilla.suse.com/1173240 https://bugzilla.suse.com/1173357 https://bugzilla.suse.com/1174618 https://bugzilla.suse.com/1174847

1 0

openSUSE-RU-2020:1218-1: moderate: Recommended update for osc
by maintenance＠opensuse.org 16 Aug '20

16 Aug '20

openSUSE Recommended Update: Recommended update for osc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1218-1 Rating: moderate References: #1173926 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for osc fixes the following issues: - Fix for performance issues by assuming utf-8 or latin-1 as default, and speed up decoding. (bsc#1173926) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1218=1 Package List: - openSUSE Leap 15.2 (noarch): osc-0.170.0-lp152.2.3.1 References: https://bugzilla.suse.com/1173926

1 0

openSUSE-RU-2020:1216-1: moderate: Recommended update for hawk2
by maintenance＠opensuse.org 15 Aug '20

15 Aug '20

openSUSE Recommended Update: Recommended update for hawk2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1216-1 Rating: moderate References: Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for hawk2 fixes the following issue: Update to version 2.1.2+git.1594886920.d00b94aa: - Update puma rubygem requirement to version 4.3.5 for disabling TLSv1.0 and TLSv1.1 (jsc#SLE-6965) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1216=1 Package List: - openSUSE Leap 15.1 (x86_64): hawk2-2.1.2+git.1594886920.d00b94aa-lp151.2.12.1 hawk2-debuginfo-2.1.2+git.1594886920.d00b94aa-lp151.2.12.1 hawk2-debugsource-2.1.2+git.1594886920.d00b94aa-lp151.2.12.1 References:

1 0

openSUSE-SU-2020:1214-1: important: Security update for chromium
by opensuse-security＠opensuse.org 15 Aug '20

15 Aug '20

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1214-1 Rating: important References: #1174497 #1175044 #1175085 Cross-References: CVE-2020-6542 CVE-2020-6543 CVE-2020-6544 CVE-2020-6545 CVE-2020-6546 CVE-2020-6547 CVE-2020-6548 CVE-2020-6549 CVE-2020-6550 CVE-2020-6551 CVE-2020-6552 CVE-2020-6553 CVE-2020-6554 CVE-2020-6555 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes 14 vulnerabilities is now available. Description: This update for chromium fixes the following issues: - Chromium updated to 84.0.4147.125 (boo#1175085) * CVE-2020-6542: Use after free in ANGLE * CVE-2020-6543: Use after free in task scheduling * CVE-2020-6544: Use after free in media * CVE-2020-6545: Use after free in audio * CVE-2020-6546: Inappropriate implementation in installer * CVE-2020-6547: Incorrect security UI in media * CVE-2020-6548: Heap buffer overflow in Skia * CVE-2020-6549: Use after free in media * CVE-2020-6550: Use after free in IndexedDB * CVE-2020-6551: Use after free in WebXR * CVE-2020-6552: Use after free in Blink * CVE-2020-6553: Use after free in offline mode * CVE-2020-6554: Use after free in extensions * CVE-2020-6555: Out of bounds read in WebGL * Various fixes from internal audits, fuzzing and other initiatives - Disable wayland everywhere as it breaks headless and middle mouse copy everywhere: boo#1174497 boo#1175044 This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1214=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 x86_64): chromedriver-84.0.4147.125-bp151.3.100.1 chromium-84.0.4147.125-bp151.3.100.1 References: https://www.suse.com/security/cve/CVE-2020-6542.html https://www.suse.com/security/cve/CVE-2020-6543.html https://www.suse.com/security/cve/CVE-2020-6544.html https://www.suse.com/security/cve/CVE-2020-6545.html https://www.suse.com/security/cve/CVE-2020-6546.html https://www.suse.com/security/cve/CVE-2020-6547.html https://www.suse.com/security/cve/CVE-2020-6548.html https://www.suse.com/security/cve/CVE-2020-6549.html https://www.suse.com/security/cve/CVE-2020-6550.html https://www.suse.com/security/cve/CVE-2020-6551.html https://www.suse.com/security/cve/CVE-2020-6552.html https://www.suse.com/security/cve/CVE-2020-6553.html https://www.suse.com/security/cve/CVE-2020-6554.html https://www.suse.com/security/cve/CVE-2020-6555.html https://bugzilla.suse.com/1174497 https://bugzilla.suse.com/1175044 https://bugzilla.suse.com/1175085

1 0

openSUSE-RU-2020:1213-1: important: Recommended update for rsyslog
by maintenance＠opensuse.org 15 Aug '20

15 Aug '20

openSUSE Recommended Update: Recommended update for rsyslog ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1213-1 Rating: important References: #1173338 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for rsyslog fixes the following issues: - Fix for logrotate to avoid unexpected exit with coredump after logrotate. (bsc#1173338) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1213=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): rsyslog-8.33.1-lp151.6.13.1 rsyslog-debuginfo-8.33.1-lp151.6.13.1 rsyslog-debugsource-8.33.1-lp151.6.13.1 rsyslog-diag-tools-8.33.1-lp151.6.13.1 rsyslog-diag-tools-debuginfo-8.33.1-lp151.6.13.1 rsyslog-doc-8.33.1-lp151.6.13.1 rsyslog-module-dbi-8.33.1-lp151.6.13.1 rsyslog-module-dbi-debuginfo-8.33.1-lp151.6.13.1 rsyslog-module-elasticsearch-8.33.1-lp151.6.13.1 rsyslog-module-elasticsearch-debuginfo-8.33.1-lp151.6.13.1 rsyslog-module-gcrypt-8.33.1-lp151.6.13.1 rsyslog-module-gcrypt-debuginfo-8.33.1-lp151.6.13.1 rsyslog-module-gssapi-8.33.1-lp151.6.13.1 rsyslog-module-gssapi-debuginfo-8.33.1-lp151.6.13.1 rsyslog-module-gtls-8.33.1-lp151.6.13.1 rsyslog-module-gtls-debuginfo-8.33.1-lp151.6.13.1 rsyslog-module-mmnormalize-8.33.1-lp151.6.13.1 rsyslog-module-mmnormalize-debuginfo-8.33.1-lp151.6.13.1 rsyslog-module-mysql-8.33.1-lp151.6.13.1 rsyslog-module-mysql-debuginfo-8.33.1-lp151.6.13.1 rsyslog-module-omamqp1-8.33.1-lp151.6.13.1 rsyslog-module-omamqp1-debuginfo-8.33.1-lp151.6.13.1 rsyslog-module-omhttpfs-8.33.1-lp151.6.13.1 rsyslog-module-omhttpfs-debuginfo-8.33.1-lp151.6.13.1 rsyslog-module-omtcl-8.33.1-lp151.6.13.1 rsyslog-module-omtcl-debuginfo-8.33.1-lp151.6.13.1 rsyslog-module-pgsql-8.33.1-lp151.6.13.1 rsyslog-module-pgsql-debuginfo-8.33.1-lp151.6.13.1 rsyslog-module-relp-8.33.1-lp151.6.13.1 rsyslog-module-relp-debuginfo-8.33.1-lp151.6.13.1 rsyslog-module-snmp-8.33.1-lp151.6.13.1 rsyslog-module-snmp-debuginfo-8.33.1-lp151.6.13.1 rsyslog-module-udpspoof-8.33.1-lp151.6.13.1 rsyslog-module-udpspoof-debuginfo-8.33.1-lp151.6.13.1 References: https://bugzilla.suse.com/1173338

1 0

openSUSE-RU-2020:1212-1: moderate: Recommended update for osc
by maintenance＠opensuse.org 15 Aug '20

15 Aug '20

openSUSE Recommended Update: Recommended update for osc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1212-1 Rating: moderate References: #1173926 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for osc fixes the following issues: - Fix for performance issues by assuming utf-8 or latin-1 as default, and speed up decoding. (bsc#1173926) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1212=1 Package List: - openSUSE Leap 15.1 (noarch): osc-0.170.0-lp151.2.18.1 References: https://bugzilla.suse.com/1173926

1 0

openSUSE-RU-2020:1211-1: moderate: Recommended update for nvme-cli
by maintenance＠opensuse.org 15 Aug '20

15 Aug '20

openSUSE Recommended Update: Recommended update for nvme-cli ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1211-1 Rating: moderate References: #1172111 #1173561 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for nvme-cli fixes the following issues: - Fix for an issue when nvme 'show-regs' fails with 'seahawk2' on 'zz' server. (bsc#1173561) - Fix for nvme reconnect delay option. (bsc#1172111) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1211=1 Package List: - openSUSE Leap 15.1 (x86_64): nvme-cli-1.8.1-lp151.5.12.1 nvme-cli-debuginfo-1.8.1-lp151.5.12.1 nvme-cli-debugsource-1.8.1-lp151.5.12.1 nvme-cli-regress-script-1.8.1-lp151.5.12.1 References: https://bugzilla.suse.com/1172111 https://bugzilla.suse.com/1173561

1 0

openSUSE-SU-2020:1210-1: moderate: Security update for hylafax+
by opensuse-security＠opensuse.org 14 Aug '20

14 Aug '20

openSUSE Security Update: Security update for hylafax+ ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1210-1 Rating: moderate References: #1173519 #1173521 Cross-References: CVE-2020-15396 CVE-2020-15397 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for hylafax+ fixes the following issues: Hylafax was updated to upstream version 7.0.3. Security issues fixed: - CVE-2020-15396: Secure temporary directory creation for faxsetup, faxaddmodem, and probemodem (boo#1173521). - CVE-2020-15397: Sourcing of files into binaries from user writeable directories (boo#1173519). Non-security issues fixed: * add UseSSLFax feature in sendfax, sendfax.conf, hyla.conf, and JobControl (31 Jul 2020) * be more resilient in listening for the Phase C carrier (30 Jul 2020) * make sure to return to command mode if HDLC receive times out (29 Jul 2020) * make faxmail ignore boundaries on parts other than multiparts (29 Jul 2020) * don't attempt to write zero bytes of data to a TIFF (29 Jul 2020) * don't ever respond to CRP with CRP (28 Jul 2020) * reset frame counter when a sender retransmits PPS for a previously confirmed ECM block (26 Jul 2020) * scrutinize PPM before concluding that the sender missed our MCF (23 Jul 2020) * fix modem recovery after SSL Fax failure (22, 26 Jul 2020) * ignore echo of PPR, RTN, CRP (10, 13, 21 Jul 2020) * attempt to handle NSF/CSI/DIS in Class 1 sending Phase D (6 Jul 2020) * run scripts directly rather than invoking them via a shell for security hardening (3-5 Jul 2020) * add senderFumblesECM feature (3 Jul 2020) * add support for PIN/PIP/PRI-Q/PPS-PRI-Q signals, add senderConfusesPIN feature, and utilize PIN for rare conditions where it may be helpful (2, 6, 13-14 Jul 2020) * add senderConfusesRTN feature (25-26 Jun 2020) * add MissedPageHandling feature (24 Jun 2020) * use and handle CFR in Phase D to retransmit Phase C (16, 23 Jun 2020) * cope with hearing echo of RR, CTC during Class 1 sending (15-17 Jun 2020) * fix listening for retransmission of MPS/EOP/EOM if it was received corrupt on the first attempt (15 Jun 2020) * don't use CRP when receiving PPS/PPM as some senders think we are sending MCF (12 Jun 2020) * add BR_SSLFAX to show SSL Fax in notify and faxinfo output (1 Jun 2020) * have faxinfo put units on non-standard page dimensions (28 May 2020) * improve error messages for JobHost connection errors (22 May 2020) * fix perpetual blocking of jobs when a job preparation fails, attempt to fix similar blocking problems for bad jobs in batches, and add "unblock" faxconfig feature (21 May 2020) * ignore TCF if we're receiving an SSL Fax (31 Jan 2020) * fixes for build on FreeBSD 12.1 (31 Jan - 3 Feb 2020) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1210=1 Package List: - openSUSE Leap 15.1 (x86_64): hylafax+-7.0.3-lp151.4.6.1 hylafax+-client-7.0.3-lp151.4.6.1 hylafax+-client-debuginfo-7.0.3-lp151.4.6.1 hylafax+-debuginfo-7.0.3-lp151.4.6.1 hylafax+-debugsource-7.0.3-lp151.4.6.1 libfaxutil7_0_3-7.0.3-lp151.4.6.1 libfaxutil7_0_3-debuginfo-7.0.3-lp151.4.6.1 References: https://www.suse.com/security/cve/CVE-2020-15396.html https://www.suse.com/security/cve/CVE-2020-15397.html https://bugzilla.suse.com/1173519 https://bugzilla.suse.com/1173521

1 0

openSUSE-SU-2020:1209-1: moderate: Security update for hylafax+
by opensuse-security＠opensuse.org 14 Aug '20

14 Aug '20

openSUSE Security Update: Security update for hylafax+ ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1209-1 Rating: moderate References: #1173519 #1173521 Cross-References: CVE-2020-15396 CVE-2020-15397 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for hylafax+ fixes the following issues: Hylafax was updated to upstream version 7.0.3. Security issues fixed: - CVE-2020-15396: Secure temporary directory creation for faxsetup, faxaddmodem, and probemodem (boo#1173521). - CVE-2020-15397: Sourcing of files into binaries from user writeable directories (boo#1173519). Non-security issues fixed: * add UseSSLFax feature in sendfax, sendfax.conf, hyla.conf, and JobControl (31 Jul 2020) * be more resilient in listening for the Phase C carrier (30 Jul 2020) * make sure to return to command mode if HDLC receive times out (29 Jul 2020) * make faxmail ignore boundaries on parts other than multiparts (29 Jul 2020) * don't attempt to write zero bytes of data to a TIFF (29 Jul 2020) * don't ever respond to CRP with CRP (28 Jul 2020) * reset frame counter when a sender retransmits PPS for a previously confirmed ECM block (26 Jul 2020) * scrutinize PPM before concluding that the sender missed our MCF (23 Jul 2020) * fix modem recovery after SSL Fax failure (22, 26 Jul 2020) * ignore echo of PPR, RTN, CRP (10, 13, 21 Jul 2020) * attempt to handle NSF/CSI/DIS in Class 1 sending Phase D (6 Jul 2020) * run scripts directly rather than invoking them via a shell for security hardening (3-5 Jul 2020) * add senderFumblesECM feature (3 Jul 2020) * add support for PIN/PIP/PRI-Q/PPS-PRI-Q signals, add senderConfusesPIN feature, and utilize PIN for rare conditions where it may be helpful (2, 6, 13-14 Jul 2020) * add senderConfusesRTN feature (25-26 Jun 2020) * add MissedPageHandling feature (24 Jun 2020) * use and handle CFR in Phase D to retransmit Phase C (16, 23 Jun 2020) * cope with hearing echo of RR, CTC during Class 1 sending (15-17 Jun 2020) * fix listening for retransmission of MPS/EOP/EOM if it was received corrupt on the first attempt (15 Jun 2020) * don't use CRP when receiving PPS/PPM as some senders think we are sending MCF (12 Jun 2020) * add BR_SSLFAX to show SSL Fax in notify and faxinfo output (1 Jun 2020) * have faxinfo put units on non-standard page dimensions (28 May 2020) * improve error messages for JobHost connection errors (22 May 2020) * fix perpetual blocking of jobs when a job preparation fails, attempt to fix similar blocking problems for bad jobs in batches, and add "unblock" faxconfig feature (21 May 2020) * ignore TCF if we're receiving an SSL Fax (31 Jan 2020) * fixes for build on FreeBSD 12.1 (31 Jan - 3 Feb 2020) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1209=1 Package List: - openSUSE Leap 15.2 (x86_64): hylafax+-7.0.3-lp152.3.6.1 hylafax+-client-7.0.3-lp152.3.6.1 hylafax+-client-debuginfo-7.0.3-lp152.3.6.1 hylafax+-debuginfo-7.0.3-lp152.3.6.1 hylafax+-debugsource-7.0.3-lp152.3.6.1 libfaxutil7_0_3-7.0.3-lp152.3.6.1 libfaxutil7_0_3-debuginfo-7.0.3-lp152.3.6.1 References: https://www.suse.com/security/cve/CVE-2020-15396.html https://www.suse.com/security/cve/CVE-2020-15397.html https://bugzilla.suse.com/1173519 https://bugzilla.suse.com/1173521

1 0

openSUSE-SU-2020:1199-1: moderate: Security update for wireshark
by opensuse-security＠opensuse.org 14 Aug '20

14 Aug '20

openSUSE Security Update: Security update for wireshark ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1199-1 Rating: moderate References: #1169063 #1171899 #1173606 Cross-References: CVE-2020-11647 CVE-2020-13164 CVE-2020-15466 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for wireshark fixes the following issues: - Wireshark to 3.2.5: * CVE-2020-15466: GVCP dissector infinite loop (bsc#1173606) * CVE-2020-13164: NFS dissector crash (bsc#1171899) * CVE-2020-11647: The BACapp dissector could crash (bsc#1169063) - Further features, bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-3.2.5.html This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1199=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libwireshark13-3.2.5-lp152.2.3.1 libwireshark13-debuginfo-3.2.5-lp152.2.3.1 libwiretap10-3.2.5-lp152.2.3.1 libwiretap10-debuginfo-3.2.5-lp152.2.3.1 libwsutil11-3.2.5-lp152.2.3.1 libwsutil11-debuginfo-3.2.5-lp152.2.3.1 wireshark-3.2.5-lp152.2.3.1 wireshark-debuginfo-3.2.5-lp152.2.3.1 wireshark-debugsource-3.2.5-lp152.2.3.1 wireshark-devel-3.2.5-lp152.2.3.1 wireshark-ui-qt-3.2.5-lp152.2.3.1 wireshark-ui-qt-debuginfo-3.2.5-lp152.2.3.1 References: https://www.suse.com/security/cve/CVE-2020-11647.html https://www.suse.com/security/cve/CVE-2020-13164.html https://www.suse.com/security/cve/CVE-2020-15466.html https://bugzilla.suse.com/1169063 https://bugzilla.suse.com/1171899 https://bugzilla.suse.com/1173606

1 0

openSUSE-SU-2020:1200-1: important: Security update for xrdp
by opensuse-security＠opensuse.org 14 Aug '20

14 Aug '20

openSUSE Security Update: Security update for xrdp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1200-1 Rating: important References: #1173580 Cross-References: CVE-2020-4044 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for xrdp fixes the following issues: - Update to version 0.9.13.1 + This is a security fix release that includes fixes for the following local buffer overflow vulnerability (bsc#1173580): CVE-2020-4044 This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1200=1 Package List: - openSUSE Leap 15.2 (x86_64): libpainter0-0.9.13.1-lp152.3.3.1 libpainter0-debuginfo-0.9.13.1-lp152.3.3.1 librfxencode0-0.9.13.1-lp152.3.3.1 librfxencode0-debuginfo-0.9.13.1-lp152.3.3.1 xrdp-0.9.13.1-lp152.3.3.1 xrdp-debuginfo-0.9.13.1-lp152.3.3.1 xrdp-debugsource-0.9.13.1-lp152.3.3.1 xrdp-devel-0.9.13.1-lp152.3.3.1 References: https://www.suse.com/security/cve/CVE-2020-4044.html https://bugzilla.suse.com/1173580

1 0

openSUSE-SU-2020:1208-1: moderate: Security update for firejail
by opensuse-security＠opensuse.org 14 Aug '20

14 Aug '20

openSUSE Security Update: Security update for firejail ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1208-1 Rating: moderate References: #1174986 Cross-References: CVE-2020-17367 CVE-2020-17368 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for firejail fixes the following issues: - CVE-2020-17367: The end-of-options separator -- was not handled correctly (boo#1174986). - CVE-2020-17368: An attacker who has control over the command line arguments could run arbitrary commands (boo#1174986). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1208=1 Package List: - openSUSE Leap 15.2 (x86_64): firejail-0.9.62-lp152.3.3.1 firejail-debuginfo-0.9.62-lp152.3.3.1 firejail-debugsource-0.9.62-lp152.3.3.1 References: https://www.suse.com/security/cve/CVE-2020-17367.html https://www.suse.com/security/cve/CVE-2020-17368.html https://bugzilla.suse.com/1174986

1 0

openSUSE-SU-2020:1207-1: moderate: Security update for balsa
by opensuse-security＠opensuse.org 14 Aug '20

14 Aug '20

openSUSE Security Update: Security update for balsa ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1207-1 Rating: moderate References: #1174711 Cross-References: CVE-2020-16118 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for balsa fixes the following issues: - CVE-2020-16118: Fixed a NULL pointer dereference (boo#1174711). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1207=1 Package List: - openSUSE Leap 15.1 (noarch): balsa-lang-2.5.5-lp151.3.3.1 - openSUSE Leap 15.1 (x86_64): balsa-2.5.5-lp151.3.3.1 balsa-debuginfo-2.5.5-lp151.3.3.1 balsa-debugsource-2.5.5-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2020-16118.html https://bugzilla.suse.com/1174711

1 0

openSUSE-RU-2020:1202-1: moderate: Recommended update for libstorage-ng
by maintenance＠opensuse.org 14 Aug '20

14 Aug '20

openSUSE Recommended Update: Recommended update for libstorage-ng ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1202-1 Rating: moderate References: #1172866 #1173610 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for libstorage-ng fixes the following issues: - merge gh#openSUSE/libstorage-ng#754 - Fix for an issue when NVME client is not installing if the root partition is an NVME device. (bsc#1172866) - Delegate to initial guided proposal when no partitions are defined in the profile. (bsc#1173610) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1202=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libstorage-ng-debuginfo-4.2.76-lp152.2.3.1 libstorage-ng-debugsource-4.2.76-lp152.2.3.1 libstorage-ng-devel-4.2.76-lp152.2.3.1 libstorage-ng-integration-tests-4.2.76-lp152.2.3.1 libstorage-ng-python3-4.2.76-lp152.2.3.1 libstorage-ng-python3-debuginfo-4.2.76-lp152.2.3.1 libstorage-ng-ruby-4.2.76-lp152.2.3.1 libstorage-ng-ruby-debuginfo-4.2.76-lp152.2.3.1 libstorage-ng-utils-4.2.76-lp152.2.3.1 libstorage-ng-utils-debuginfo-4.2.76-lp152.2.3.1 libstorage-ng1-4.2.76-lp152.2.3.1 libstorage-ng1-debuginfo-4.2.76-lp152.2.3.1 yast2-storage-ng-4.2.111-lp152.2.3.1 - openSUSE Leap 15.2 (noarch): libstorage-ng-lang-4.2.76-lp152.2.3.1 References: https://bugzilla.suse.com/1172866 https://bugzilla.suse.com/1173610

1 0

openSUSE-SU-2020:1206-1: important: Security update for chromium
by opensuse-security＠opensuse.org 14 Aug '20

14 Aug '20

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1206-1 Rating: important References: #1174497 #1175044 #1175085 Cross-References: CVE-2020-6542 CVE-2020-6543 CVE-2020-6544 CVE-2020-6545 CVE-2020-6546 CVE-2020-6547 CVE-2020-6548 CVE-2020-6549 CVE-2020-6550 CVE-2020-6551 CVE-2020-6552 CVE-2020-6553 CVE-2020-6554 CVE-2020-6555 Affected Products: openSUSE Leap 15.2 openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 14 vulnerabilities is now available. Description: This update for chromium fixes the following issues: - Chromium updated to 84.0.4147.125 (boo#1175085) * CVE-2020-6542: Use after free in ANGLE * CVE-2020-6543: Use after free in task scheduling * CVE-2020-6544: Use after free in media * CVE-2020-6545: Use after free in audio * CVE-2020-6546: Inappropriate implementation in installer * CVE-2020-6547: Incorrect security UI in media * CVE-2020-6548: Heap buffer overflow in Skia * CVE-2020-6549: Use after free in media * CVE-2020-6550: Use after free in IndexedDB * CVE-2020-6551: Use after free in WebXR * CVE-2020-6552: Use after free in Blink * CVE-2020-6553: Use after free in offline mode * CVE-2020-6554: Use after free in extensions * CVE-2020-6555: Out of bounds read in WebGL * Various fixes from internal audits, fuzzing and other initiatives - Disable wayland everywhere as it breaks headless and middle mouse copy everywhere: boo#1174497 boo#1175044 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1206=1 - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1206=1 Package List: - openSUSE Leap 15.2 (x86_64): chromedriver-84.0.4147.125-lp152.2.12.2 chromedriver-debuginfo-84.0.4147.125-lp152.2.12.2 chromium-84.0.4147.125-lp152.2.12.2 chromium-debuginfo-84.0.4147.125-lp152.2.12.2 chromium-debugsource-84.0.4147.125-lp152.2.12.2 - openSUSE Leap 15.1 (x86_64): chromedriver-84.0.4147.125-lp151.2.115.1 chromedriver-debuginfo-84.0.4147.125-lp151.2.115.1 chromium-84.0.4147.125-lp151.2.115.1 chromium-debuginfo-84.0.4147.125-lp151.2.115.1 chromium-debugsource-84.0.4147.125-lp151.2.115.1 References: https://www.suse.com/security/cve/CVE-2020-6542.html https://www.suse.com/security/cve/CVE-2020-6543.html https://www.suse.com/security/cve/CVE-2020-6544.html https://www.suse.com/security/cve/CVE-2020-6545.html https://www.suse.com/security/cve/CVE-2020-6546.html https://www.suse.com/security/cve/CVE-2020-6547.html https://www.suse.com/security/cve/CVE-2020-6548.html https://www.suse.com/security/cve/CVE-2020-6549.html https://www.suse.com/security/cve/CVE-2020-6550.html https://www.suse.com/security/cve/CVE-2020-6551.html https://www.suse.com/security/cve/CVE-2020-6552.html https://www.suse.com/security/cve/CVE-2020-6553.html https://www.suse.com/security/cve/CVE-2020-6554.html https://www.suse.com/security/cve/CVE-2020-6555.html https://bugzilla.suse.com/1174497 https://bugzilla.suse.com/1175044 https://bugzilla.suse.com/1175085

1 0

openSUSE-RU-2020:1203-1: important: Recommended update for python-azure-agent
by maintenance＠opensuse.org 14 Aug '20

14 Aug '20

openSUSE Recommended Update: Recommended update for python-azure-agent ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1203-1 Rating: important References: #1173866 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-azure-agent fixes the following issues: - Properly set the DHCP configuration to push the hostname to the DHCP server. (bsc#1173866) - Do not bring the interface down to push the hostname, just use 'ifup'. (bsc#1173866) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1203=1 Package List: - openSUSE Leap 15.2 (noarch): python-azure-agent-2.2.45-lp152.3.3.1 python-azure-agent-test-2.2.45-lp152.3.3.1 References: https://bugzilla.suse.com/1173866

1 0

openSUSE-RU-2020:1201-1: moderate: Recommended update for gnome-control-center
by maintenance＠opensuse.org 14 Aug '20

14 Aug '20

openSUSE Recommended Update: Recommended update for gnome-control-center ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1201-1 Rating: moderate References: #1160173 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gnome-control-center fixes the following issues: - Fix the resolution list as it shows only the currently used resolution. (bsc#1160173 glgo#GNOME/Settings#903) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1201=1 Package List: - openSUSE Leap 15.2 (noarch): gnome-control-center-lang-3.34.6-lp152.2.3.1 - openSUSE Leap 15.2 (x86_64): gnome-control-center-3.34.6-lp152.2.3.1 gnome-control-center-color-3.34.6-lp152.2.3.1 gnome-control-center-debuginfo-3.34.6-lp152.2.3.1 gnome-control-center-debugsource-3.34.6-lp152.2.3.1 gnome-control-center-devel-3.34.6-lp152.2.3.1 gnome-control-center-goa-3.34.6-lp152.2.3.1 gnome-control-center-user-faces-3.34.6-lp152.2.3.1 References: https://bugzilla.suse.com/1160173

1 0

openSUSE-SU-2020:1204-1: moderate: Security update for perl-XML-Twig
by opensuse-security＠opensuse.org 14 Aug '20

14 Aug '20

openSUSE Security Update: Security update for perl-XML-Twig ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1204-1 Rating: moderate References: #1008644 Cross-References: CVE-2016-9180 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for perl-XML-Twig fixes the following issues: - Security fix [bsc#1008644, CVE-2016-9180] * Setting expand_external_ents to 0 or -1 currently doesn't work as expected; To completely turn off expanding external entities use no_xxe. * Update documentation for XML::Twig to mention problems with expand_external_ents and add information about new no_xxe argument This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1204=1 Package List: - openSUSE Leap 15.2 (noarch): perl-XML-Twig-3.52-lp152.4.3.1 References: https://www.suse.com/security/cve/CVE-2016-9180.html https://bugzilla.suse.com/1008644

1 0

openSUSE-SU-2020:1205-1: important: Security update for MozillaThunderbird
by opensuse-security＠opensuse.org 14 Aug '20

14 Aug '20

openSUSE Security Update: Security update for MozillaThunderbird ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1205-1 Rating: important References: #1174538 Cross-References: CVE-2020-15652 CVE-2020-15659 CVE-2020-6463 CVE-2020-6514 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for MozillaThunderbird fixes the following issues: - Updated to Mozilla Thunderbird 68.11: * Fixed various security issues (MFSA-2020-35, bsc#1174538). * Fixed CVE-2020-15652: Potential leak of redirect targets when loading scripts in a worker (bsc#1174538). * Fixed CVE-2020-6514: WebRTC data channel leaks internal address to peer (bsc#1174538). * Fixed CVE-2020-6463: Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture (bsc#1174538). * Fixed CVE-2020-15659: Memory safety bugs fixed in Thunderbird 68.11 (bsc#1174538). * Fixed a bug with FileLink attachments included as a link and file when added from a network drive via drag & drop (bmo#793118). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1205=1 Package List: - openSUSE Leap 15.2 (x86_64): MozillaThunderbird-68.11.0-lp152.2.7.1 MozillaThunderbird-debuginfo-68.11.0-lp152.2.7.1 MozillaThunderbird-debugsource-68.11.0-lp152.2.7.1 MozillaThunderbird-translations-common-68.11.0-lp152.2.7.1 MozillaThunderbird-translations-other-68.11.0-lp152.2.7.1 References: https://www.suse.com/security/cve/CVE-2020-15652.html https://www.suse.com/security/cve/CVE-2020-15659.html https://www.suse.com/security/cve/CVE-2020-6463.html https://www.suse.com/security/cve/CVE-2020-6514.html https://bugzilla.suse.com/1174538

1 0

openSUSE-SU-2020:1198-1: important: Security update for libX11
by opensuse-security＠opensuse.org 14 Aug '20

14 Aug '20

openSUSE Security Update: Security update for libX11 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1198-1 Rating: important References: #1174628 Cross-References: CVE-2020-14344 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libX11 fixes the following issues: - Fixed XIM client heap overflows (CVE-2020-14344, bsc#1174628). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1198=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libX11-6-1.6.5-lp151.4.6.1 libX11-6-debuginfo-1.6.5-lp151.4.6.1 libX11-debugsource-1.6.5-lp151.4.6.1 libX11-devel-1.6.5-lp151.4.6.1 libX11-xcb1-1.6.5-lp151.4.6.1 libX11-xcb1-debuginfo-1.6.5-lp151.4.6.1 - openSUSE Leap 15.1 (x86_64): libX11-6-32bit-1.6.5-lp151.4.6.1 libX11-6-32bit-debuginfo-1.6.5-lp151.4.6.1 libX11-devel-32bit-1.6.5-lp151.4.6.1 libX11-xcb1-32bit-1.6.5-lp151.4.6.1 libX11-xcb1-32bit-debuginfo-1.6.5-lp151.4.6.1 - openSUSE Leap 15.1 (noarch): libX11-data-1.6.5-lp151.4.6.1 References: https://www.suse.com/security/cve/CVE-2020-14344.html https://bugzilla.suse.com/1174628

1 0

openSUSE-RU-2020:1197-1: moderate: Recommended update for open-lldp
by maintenance＠opensuse.org 13 Aug '20

13 Aug '20

openSUSE Recommended Update: Recommended update for open-lldp ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1197-1 Rating: moderate References: #1153520 #1170745 #1171284 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for open-lldp fixes the following issues: - Fix for a segementation fault, when agents change their MAC address (bsc#1171284) - lldapd will now transmit the permanent MAC address (the MAC address of the underlying physical device) as port id, thus allowing the switch or any management application to differentiate between those ports. (bsc#1153520) - Fix for a segmentation fault, when lldapd registers an interface and it gets shortly removed afterwards. (bsc#1170745) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1197=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): liblldp_clif1-1.0.1+63.f977e67-lp151.2.3.1 liblldp_clif1-debuginfo-1.0.1+63.f977e67-lp151.2.3.1 open-lldp-1.0.1+63.f977e67-lp151.2.3.1 open-lldp-debuginfo-1.0.1+63.f977e67-lp151.2.3.1 open-lldp-debugsource-1.0.1+63.f977e67-lp151.2.3.1 open-lldp-devel-1.0.1+63.f977e67-lp151.2.3.1 References: https://bugzilla.suse.com/1153520 https://bugzilla.suse.com/1170745 https://bugzilla.suse.com/1171284

1 0

openSUSE-SU-2020:1196-1: important: Security update for xen
by opensuse-security＠opensuse.org 13 Aug '20

13 Aug '20

openSUSE Security Update: Security update for xen ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1196-1 Rating: important References: #1172356 #1174543 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for xen fixes the following issues: - bsc#1174543 - secure boot related fixes - bsc#1172356 - Not able to hot-plug NIC via virt-manager, asks to attach on next reboot while it should be live attached This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1196=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): xen-debugsource-4.12.3_06-lp151.2.24.1 xen-devel-4.12.3_06-lp151.2.24.1 xen-libs-4.12.3_06-lp151.2.24.1 xen-libs-debuginfo-4.12.3_06-lp151.2.24.1 xen-tools-domU-4.12.3_06-lp151.2.24.1 xen-tools-domU-debuginfo-4.12.3_06-lp151.2.24.1 - openSUSE Leap 15.1 (x86_64): xen-4.12.3_06-lp151.2.24.1 xen-doc-html-4.12.3_06-lp151.2.24.1 xen-libs-32bit-4.12.3_06-lp151.2.24.1 xen-libs-32bit-debuginfo-4.12.3_06-lp151.2.24.1 xen-tools-4.12.3_06-lp151.2.24.1 xen-tools-debuginfo-4.12.3_06-lp151.2.24.1 References: https://bugzilla.suse.com/1172356 https://bugzilla.suse.com/1174543

1 0

openSUSE-RU-2020:1195-1: moderate: Recommended update for php7
by maintenance＠opensuse.org 12 Aug '20

12 Aug '20

openSUSE Recommended Update: Recommended update for php7 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1195-1 Rating: moderate References: #1173786 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for php7 fixes the following issues: - Add 'tmpfiles.d' for 'php-fpm' to provide a base for a socket and fix this error accordingly. (bsc#1173786) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1195=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): apache2-mod_php7-7.4.6-lp152.2.3.2 apache2-mod_php7-debuginfo-7.4.6-lp152.2.3.2 php7-7.4.6-lp152.2.3.2 php7-bcmath-7.4.6-lp152.2.3.2 php7-bcmath-debuginfo-7.4.6-lp152.2.3.2 php7-bz2-7.4.6-lp152.2.3.2 php7-bz2-debuginfo-7.4.6-lp152.2.3.2 php7-calendar-7.4.6-lp152.2.3.2 php7-calendar-debuginfo-7.4.6-lp152.2.3.2 php7-ctype-7.4.6-lp152.2.3.2 php7-ctype-debuginfo-7.4.6-lp152.2.3.2 php7-curl-7.4.6-lp152.2.3.2 php7-curl-debuginfo-7.4.6-lp152.2.3.2 php7-dba-7.4.6-lp152.2.3.2 php7-dba-debuginfo-7.4.6-lp152.2.3.2 php7-debuginfo-7.4.6-lp152.2.3.2 php7-debugsource-7.4.6-lp152.2.3.2 php7-devel-7.4.6-lp152.2.3.2 php7-dom-7.4.6-lp152.2.3.2 php7-dom-debuginfo-7.4.6-lp152.2.3.2 php7-embed-7.4.6-lp152.2.3.2 php7-embed-debuginfo-7.4.6-lp152.2.3.2 php7-enchant-7.4.6-lp152.2.3.2 php7-enchant-debuginfo-7.4.6-lp152.2.3.2 php7-exif-7.4.6-lp152.2.3.2 php7-exif-debuginfo-7.4.6-lp152.2.3.2 php7-fastcgi-7.4.6-lp152.2.3.2 php7-fastcgi-debuginfo-7.4.6-lp152.2.3.2 php7-fileinfo-7.4.6-lp152.2.3.2 php7-fileinfo-debuginfo-7.4.6-lp152.2.3.2 php7-firebird-7.4.6-lp152.2.3.2 php7-firebird-debuginfo-7.4.6-lp152.2.3.2 php7-fpm-7.4.6-lp152.2.3.2 php7-fpm-debuginfo-7.4.6-lp152.2.3.2 php7-ftp-7.4.6-lp152.2.3.2 php7-ftp-debuginfo-7.4.6-lp152.2.3.2 php7-gd-7.4.6-lp152.2.3.2 php7-gd-debuginfo-7.4.6-lp152.2.3.2 php7-gettext-7.4.6-lp152.2.3.2 php7-gettext-debuginfo-7.4.6-lp152.2.3.2 php7-gmp-7.4.6-lp152.2.3.2 php7-gmp-debuginfo-7.4.6-lp152.2.3.2 php7-iconv-7.4.6-lp152.2.3.2 php7-iconv-debuginfo-7.4.6-lp152.2.3.2 php7-intl-7.4.6-lp152.2.3.2 php7-intl-debuginfo-7.4.6-lp152.2.3.2 php7-json-7.4.6-lp152.2.3.2 php7-json-debuginfo-7.4.6-lp152.2.3.2 php7-ldap-7.4.6-lp152.2.3.2 php7-ldap-debuginfo-7.4.6-lp152.2.3.2 php7-mbstring-7.4.6-lp152.2.3.2 php7-mbstring-debuginfo-7.4.6-lp152.2.3.2 php7-mysql-7.4.6-lp152.2.3.2 php7-mysql-debuginfo-7.4.6-lp152.2.3.2 php7-odbc-7.4.6-lp152.2.3.2 php7-odbc-debuginfo-7.4.6-lp152.2.3.2 php7-opcache-7.4.6-lp152.2.3.2 php7-opcache-debuginfo-7.4.6-lp152.2.3.2 php7-openssl-7.4.6-lp152.2.3.2 php7-openssl-debuginfo-7.4.6-lp152.2.3.2 php7-pcntl-7.4.6-lp152.2.3.2 php7-pcntl-debuginfo-7.4.6-lp152.2.3.2 php7-pdo-7.4.6-lp152.2.3.2 php7-pdo-debuginfo-7.4.6-lp152.2.3.2 php7-pgsql-7.4.6-lp152.2.3.2 php7-pgsql-debuginfo-7.4.6-lp152.2.3.2 php7-phar-7.4.6-lp152.2.3.2 php7-phar-debuginfo-7.4.6-lp152.2.3.2 php7-posix-7.4.6-lp152.2.3.2 php7-posix-debuginfo-7.4.6-lp152.2.3.2 php7-readline-7.4.6-lp152.2.3.2 php7-readline-debuginfo-7.4.6-lp152.2.3.2 php7-shmop-7.4.6-lp152.2.3.2 php7-shmop-debuginfo-7.4.6-lp152.2.3.2 php7-snmp-7.4.6-lp152.2.3.2 php7-snmp-debuginfo-7.4.6-lp152.2.3.2 php7-soap-7.4.6-lp152.2.3.2 php7-soap-debuginfo-7.4.6-lp152.2.3.2 php7-sockets-7.4.6-lp152.2.3.2 php7-sockets-debuginfo-7.4.6-lp152.2.3.2 php7-sodium-7.4.6-lp152.2.3.2 php7-sodium-debuginfo-7.4.6-lp152.2.3.2 php7-sqlite-7.4.6-lp152.2.3.2 php7-sqlite-debuginfo-7.4.6-lp152.2.3.2 php7-sysvmsg-7.4.6-lp152.2.3.2 php7-sysvmsg-debuginfo-7.4.6-lp152.2.3.2 php7-sysvsem-7.4.6-lp152.2.3.2 php7-sysvsem-debuginfo-7.4.6-lp152.2.3.2 php7-sysvshm-7.4.6-lp152.2.3.2 php7-sysvshm-debuginfo-7.4.6-lp152.2.3.2 php7-test-7.4.6-lp152.2.3.2 php7-tidy-7.4.6-lp152.2.3.2 php7-tidy-debuginfo-7.4.6-lp152.2.3.2 php7-tokenizer-7.4.6-lp152.2.3.2 php7-tokenizer-debuginfo-7.4.6-lp152.2.3.2 php7-xmlreader-7.4.6-lp152.2.3.2 php7-xmlreader-debuginfo-7.4.6-lp152.2.3.2 php7-xmlrpc-7.4.6-lp152.2.3.2 php7-xmlrpc-debuginfo-7.4.6-lp152.2.3.2 php7-xmlwriter-7.4.6-lp152.2.3.2 php7-xmlwriter-debuginfo-7.4.6-lp152.2.3.2 php7-xsl-7.4.6-lp152.2.3.2 php7-xsl-debuginfo-7.4.6-lp152.2.3.2 php7-zip-7.4.6-lp152.2.3.2 php7-zip-debuginfo-7.4.6-lp152.2.3.2 php7-zlib-7.4.6-lp152.2.3.2 php7-zlib-debuginfo-7.4.6-lp152.2.3.2 References: https://bugzilla.suse.com/1173786

1 0

openSUSE-SU-2020:1190-1: important: Security update for xen
by opensuse-security＠opensuse.org 12 Aug '20

12 Aug '20

openSUSE Security Update: Security update for xen ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1190-1 Rating: important References: #1172356 #1174543 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for xen fixes the following issues: - bsc#1174543 - secure boot related fixes - bsc#1172356 - Not able to hot-plug NIC via virt-manager, asks to attach on next reboot while it should be live attached This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1190=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): xen-debugsource-4.13.1_06-lp152.2.6.1 xen-devel-4.13.1_06-lp152.2.6.1 xen-libs-4.13.1_06-lp152.2.6.1 xen-libs-debuginfo-4.13.1_06-lp152.2.6.1 xen-tools-domU-4.13.1_06-lp152.2.6.1 xen-tools-domU-debuginfo-4.13.1_06-lp152.2.6.1 - openSUSE Leap 15.2 (x86_64): xen-4.13.1_06-lp152.2.6.1 xen-doc-html-4.13.1_06-lp152.2.6.1 xen-libs-32bit-4.13.1_06-lp152.2.6.1 xen-libs-32bit-debuginfo-4.13.1_06-lp152.2.6.1 xen-tools-4.13.1_06-lp152.2.6.1 xen-tools-debuginfo-4.13.1_06-lp152.2.6.1 - openSUSE Leap 15.2 (noarch): xen-tools-xendomains-wait-disk-4.13.1_06-lp152.2.6.1 References: https://bugzilla.suse.com/1172356 https://bugzilla.suse.com/1174543

1 0

openSUSE-SU-2020:1194-1: moderate: Security update for go1.13
by opensuse-security＠opensuse.org 12 Aug '20

12 Aug '20

openSUSE Security Update: Security update for go1.13 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1194-1 Rating: moderate References: #1149259 #1174977 Cross-References: CVE-2020-16845 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for go1.13 fixes the following issues: - go1.13 was updated to version 1.13.5 - CVE-2020-16845: dUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs (bsc#1174977). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1194=1 Package List: - openSUSE Leap 15.2 (x86_64): go1.13-1.13.15-lp152.2.7.1 go1.13-doc-1.13.15-lp152.2.7.1 go1.13-race-1.13.15-lp152.2.7.1 References: https://www.suse.com/security/cve/CVE-2020-16845.html https://bugzilla.suse.com/1149259 https://bugzilla.suse.com/1174977

1 0

openSUSE-SU-2020:1191-1: important: Security update for java-11-openjdk
by opensuse-security＠opensuse.org 12 Aug '20

12 Aug '20

openSUSE Security Update: Security update for java-11-openjdk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1191-1 Rating: important References: #1174157 Cross-References: CVE-2020-14556 CVE-2020-14562 CVE-2020-14573 CVE-2020-14577 CVE-2020-14581 CVE-2020-14583 CVE-2020-14593 CVE-2020-14621 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes 8 vulnerabilities is now available. Description: This update for java-11-openjdk fixes the following issues: - Update to upstream tag jdk-11.0.8+10 (July 2020 CPU, bsc#1174157) * Security fixes: + JDK-8230613: Better ASCII conversions + JDK-8231800: Better listing of arrays + JDK-8232014: Expand DTD support + JDK-8233234: Better Zip Naming + JDK-8233239, CVE-2020-14562: Enhance TIFF support + JDK-8233255: Better Swing Buttons + JDK-8234032: Improve basic calendar services + JDK-8234042: Better factory production of certificates + JDK-8234418: Better parsing with CertificateFactory + JDK-8234836: Improve serialization handling + JDK-8236191: Enhance OID processing + JDK-8236867, CVE-2020-14573: Enhance Graal interface handling + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior + JDK-8237592, CVE-2020-14577: Enhance certificate verification + JDK-8238002, CVE-2020-14581: Better matrix operations + JDK-8238013: Enhance String writing + JDK-8238804: Enhance key handling process + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable + JDK-8238843: Enhanced font handing + JDK-8238920, CVE-2020-14583: Better Buffer support + JDK-8238925: Enhance WAV file playback + JDK-8240119, CVE-2020-14593: Less Affine Transformations + JDK-8240482: Improved WAV file playback + JDK-8241379: Update JCEKS support + JDK-8241522: Manifest improved jar headers redux + JDK-8242136, CVE-2020-14621: Better XML namespace handling * Other changes: + JDK-6933331: (d3d/ogl) java.lang.IllegalStateException: Buffers have not been created + JDK-7124307: JSpinner and changing value by mouse + JDK-8022574: remove HaltNode code after uncommon trap calls + JDK-8039082: [TEST_BUG] Test java/awt/dnd/BadSerializationTest/BadSerializationTest.java fails + JDK-8040630: Popup menus and tooltips flicker with previous popup contents when first shown + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with ENOMEM when joining group (OS X 10.9) + JDK-8048215: [TESTBUG] java/lang/management/ManagementFactory/ThreadMXBeanProxy.java Expected non-null LockInfo + JDK-8051349: nsk/jvmti/scenarios/sampling/SP06/sp06t003 fails in nightly + JDK-8080353: JShell: Better error message on attempting to add default method + JDK-8139876: Exclude hanging nsk/stress/stack from execution with deoptimization enabled + JDK-8146090: java/lang/ref/ReachabilityFenceTest.java fails with -XX:+DeoptimizeALot + JDK-8153430: jdk regression test MletParserLocaleTest, ParserInfiniteLoopTest reduce default timeout + JDK-8156207: Resource allocated BitMaps are often cleared unnecessarily + JDK-8159740: JShell: corralled declarations do not have correct source to wrapper mapping + JDK-8175984: ICC_Profile has un-needed, not-empty finalize method + JDK-8176359: Frame#setMaximizedbounds not working properly in multi screen environments + JDK-8183369: RFC unconformity of HttpURLConnection with proxy + JDK-8187078: -XX:+VerifyOops finds numerous problems when running JPRT + JDK-8189861: Refactor CacheFind + JDK-8191169: java/net/Authenticator/B4769350.java failed intermittently + JDK-8191930: [Graal] emits unparseable XML into compile log + JDK-8193879: Java debugger hangs on method invocation + JDK-8196019: java/awt/Window/Grab/GrabTest.java fails on Windows + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails + JDK-8198000: java/awt/List/EmptyListEventTest/EmptyListEventTest.java debug assert on Windows + JDK-8198001: java/awt/Menu/WrongParentAfterRemoveMenu/ /WrongParentAfterRemoveMenu.java debug assert on Windows + JDK-8198339: Test javax/swing/border/Test6981576.java is unstable + JDK-8200701: jdk/jshell/ExceptionsTest.java fails on Windows, after JDK-8198801 + JDK-8203264: JNI exception pending in PlainDatagramSocketImpl.c:740 + JDK-8203672: JNI exception pending in PlainSocketImpl.c + JDK-8203673: JNI exception pending in DualStackPlainDatagramSocketImpl.c:398 + JDK-8204834: Fix confusing "allocate" naming in OopStorage + JDK-8205399: Set node color on pinned HashMap.TreeNode deletion + JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/ /RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with handshake_failure + JDK-8206179: com/sun/management/OperatingSystemMXBean/ /GetCommittedVirtualMemorySize.java fails with Committed virtual memory size illegal value + JDK-8207334: VM times out in VM_HandshakeAllThreads::doit() with RunThese30M + JDK-8208277: Code cache heap (-XX:ReservedCodeCacheSize) doesn't work with 1GB LargePages This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1191=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): java-11-openjdk-11.0.8.0-lp152.2.3.1 java-11-openjdk-accessibility-11.0.8.0-lp152.2.3.1 java-11-openjdk-accessibility-debuginfo-11.0.8.0-lp152.2.3.1 java-11-openjdk-debuginfo-11.0.8.0-lp152.2.3.1 java-11-openjdk-debugsource-11.0.8.0-lp152.2.3.1 java-11-openjdk-demo-11.0.8.0-lp152.2.3.1 java-11-openjdk-devel-11.0.8.0-lp152.2.3.1 java-11-openjdk-headless-11.0.8.0-lp152.2.3.1 java-11-openjdk-jmods-11.0.8.0-lp152.2.3.1 java-11-openjdk-src-11.0.8.0-lp152.2.3.1 - openSUSE Leap 15.2 (noarch): java-11-openjdk-javadoc-11.0.8.0-lp152.2.3.1 References: https://www.suse.com/security/cve/CVE-2020-14556.html https://www.suse.com/security/cve/CVE-2020-14562.html https://www.suse.com/security/cve/CVE-2020-14573.html https://www.suse.com/security/cve/CVE-2020-14577.html https://www.suse.com/security/cve/CVE-2020-14581.html https://www.suse.com/security/cve/CVE-2020-14583.html https://www.suse.com/security/cve/CVE-2020-14593.html https://www.suse.com/security/cve/CVE-2020-14621.html https://bugzilla.suse.com/1174157

1 0

openSUSE-RU-2020:1187-1: Recommended update for go1.10
by maintenance＠opensuse.org 12 Aug '20

12 Aug '20

openSUSE Recommended Update: Recommended update for go1.10 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1187-1 Rating: low References: #1169832 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for go1.10 fixes the following issues: - Fix for an issue when installing on Raspberry Pi causes illegal instruction due to unproper ARM arch set. (bsc#1169832) This update was imported from the SUSE:SLE-15:Update update project. This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1187=1 Package List: - openSUSE Backports SLE-15-SP1 (x86_64): go1.10-1.10.8-bp151.2.6.1 go1.10-doc-1.10.8-bp151.2.6.1 go1.10-race-1.10.8-bp151.2.6.1 References: https://bugzilla.suse.com/1169832

1 0

openSUSE-SU-2020:1188-1: moderate: Security update for wireshark
by opensuse-security＠opensuse.org 12 Aug '20

12 Aug '20

openSUSE Security Update: Security update for wireshark ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1188-1 Rating: moderate References: #1169063 #1171899 #1173606 Cross-References: CVE-2020-11647 CVE-2020-13164 CVE-2020-15466 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for wireshark fixes the following issues: - Wireshark to 3.2.5: * CVE-2020-15466: GVCP dissector infinite loop (bsc#1173606) * CVE-2020-13164: NFS dissector crash (bsc#1171899) * CVE-2020-11647: The BACapp dissector could crash (bsc#1169063) - Further features, bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-3.2.5.html This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1188=1 Package List: - openSUSE Leap 15.1 (x86_64): libwireshark13-3.2.5-lp151.2.12.1 libwireshark13-debuginfo-3.2.5-lp151.2.12.1 libwiretap10-3.2.5-lp151.2.12.1 libwiretap10-debuginfo-3.2.5-lp151.2.12.1 libwsutil11-3.2.5-lp151.2.12.1 libwsutil11-debuginfo-3.2.5-lp151.2.12.1 wireshark-3.2.5-lp151.2.12.1 wireshark-debuginfo-3.2.5-lp151.2.12.1 wireshark-debugsource-3.2.5-lp151.2.12.1 wireshark-devel-3.2.5-lp151.2.12.1 wireshark-ui-qt-3.2.5-lp151.2.12.1 wireshark-ui-qt-debuginfo-3.2.5-lp151.2.12.1 References: https://www.suse.com/security/cve/CVE-2020-11647.html https://www.suse.com/security/cve/CVE-2020-13164.html https://www.suse.com/security/cve/CVE-2020-15466.html https://bugzilla.suse.com/1169063 https://bugzilla.suse.com/1171899 https://bugzilla.suse.com/1173606

1 0

openSUSE-SU-2020:1189-1: important: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 12 Aug '20

12 Aug '20

openSUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1189-1 Rating: important References: #1171433 #1174538 Cross-References: CVE-2020-15652 CVE-2020-15653 CVE-2020-15654 CVE-2020-15655 CVE-2020-15656 CVE-2020-15657 CVE-2020-15658 CVE-2020-15659 CVE-2020-6463 CVE-2020-6514 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes 10 vulnerabilities is now available. Description: This update for MozillaFirefox fixes the following issues: This update for MozillaFirefox and pipewire fixes the following issues: MozillaFirefox Extended Support Release 78.1.0 ESR * Fixed: Various stability, functionality, and security fixes (bsc#1174538) * CVE-2020-15652: Potential leak of redirect targets when loading scripts in a worker * CVE-2020-6514: WebRTC data channel leaks internal address to peer * CVE-2020-15655: Extension APIs could be used to bypass Same-Origin Policy * CVE-2020-15653: Bypassing iframe sandbox when allowing popups * CVE-2020-6463: Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture * CVE-2020-15656: Type confusion for special arguments in IonMonkey * CVE-2020-15658: Overriding file type when saving to disk * CVE-2020-15657: DLL hijacking due to incorrect loading path * CVE-2020-15654: Custom cursor can overlay user interface * CVE-2020-15659: Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1 pipewire was updated to version 0.3.6 (bsc#1171433, jsc#ECO-2308): * Extensive memory leak fixing and stress testing was done. A big leak in screen sharing with DMA-BUF was fixed. * Compile fixes * Stability improvements in jack and pulseaudio layers. * Added the old portal module to make the Camera portal work again. This will be moved to the session manager in future versions. * Improvements to the GStreamer source and sink shutdown. * Fix compatibility with v2 clients again when negotiating buffers. This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1189=1 Package List: - openSUSE Leap 15.2 (x86_64): MozillaFirefox-78.1.0-lp152.2.15.1 MozillaFirefox-branding-upstream-78.1.0-lp152.2.15.1 MozillaFirefox-buildsymbols-78.1.0-lp152.2.15.1 MozillaFirefox-debuginfo-78.1.0-lp152.2.15.1 MozillaFirefox-debugsource-78.1.0-lp152.2.15.1 MozillaFirefox-devel-78.1.0-lp152.2.15.1 MozillaFirefox-translations-common-78.1.0-lp152.2.15.1 MozillaFirefox-translations-other-78.1.0-lp152.2.15.1 gstreamer-plugin-pipewire-0.3.6-lp152.2.3.1 gstreamer-plugin-pipewire-debuginfo-0.3.6-lp152.2.3.1 libpipewire-0_3-0-0.3.6-lp152.2.3.1 libpipewire-0_3-0-debuginfo-0.3.6-lp152.2.3.1 pipewire-0.3.6-lp152.2.3.1 pipewire-debuginfo-0.3.6-lp152.2.3.1 pipewire-debugsource-0.3.6-lp152.2.3.1 pipewire-devel-0.3.6-lp152.2.3.1 pipewire-doc-0.3.6-lp152.2.3.1 pipewire-libjack-0_3-0.3.6-lp152.2.3.1 pipewire-libjack-0_3-debuginfo-0.3.6-lp152.2.3.1 pipewire-libpulse-0_3-0.3.6-lp152.2.3.1 pipewire-libpulse-0_3-debuginfo-0.3.6-lp152.2.3.1 pipewire-modules-0.3.6-lp152.2.3.1 pipewire-modules-debuginfo-0.3.6-lp152.2.3.1 pipewire-spa-plugins-0_2-0.3.6-lp152.2.3.1 pipewire-spa-plugins-0_2-debuginfo-0.3.6-lp152.2.3.1 pipewire-spa-tools-0.3.6-lp152.2.3.1 pipewire-spa-tools-debuginfo-0.3.6-lp152.2.3.1 pipewire-tools-0.3.6-lp152.2.3.1 pipewire-tools-debuginfo-0.3.6-lp152.2.3.1 References: https://www.suse.com/security/cve/CVE-2020-15652.html https://www.suse.com/security/cve/CVE-2020-15653.html https://www.suse.com/security/cve/CVE-2020-15654.html https://www.suse.com/security/cve/CVE-2020-15655.html https://www.suse.com/security/cve/CVE-2020-15656.html https://www.suse.com/security/cve/CVE-2020-15657.html https://www.suse.com/security/cve/CVE-2020-15658.html https://www.suse.com/security/cve/CVE-2020-15659.html https://www.suse.com/security/cve/CVE-2020-6463.html https://www.suse.com/security/cve/CVE-2020-6514.html https://bugzilla.suse.com/1171433 https://bugzilla.suse.com/1174538

1 0

openSUSE-RU-2020:1186-1: Recommended update for go1.9
by maintenance＠opensuse.org 12 Aug '20

12 Aug '20

openSUSE Recommended Update: Recommended update for go1.9 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1186-1 Rating: low References: #1169832 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for go1.9 fixes the following issues: - Fix for an issue when installing on Raspberry Pi causes illegal instruction due to unproper ARM arch set. (bsc#1169832) This update was imported from the SUSE:SLE-15:Update update project. This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1186=1 Package List: - openSUSE Backports SLE-15-SP1 (x86_64): go1.9-1.9.7-bp151.2.6.1 go1.9-doc-1.9.7-bp151.2.6.1 go1.9-race-1.9.7-bp151.2.6.1 References: https://bugzilla.suse.com/1169832

1 0

openSUSE-SU-2020:1182-1: important: Security update for libX11
by opensuse-security＠opensuse.org 12 Aug '20

12 Aug '20

openSUSE Security Update: Security update for libX11 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1182-1 Rating: important References: #1174628 Cross-References: CVE-2020-14344 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libX11 fixes the following issues: - Fixed XIM client heap overflows (CVE-2020-14344, bsc#1174628). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1182=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libX11-6-1.6.5-lp152.5.6.1 libX11-6-debuginfo-1.6.5-lp152.5.6.1 libX11-debugsource-1.6.5-lp152.5.6.1 libX11-devel-1.6.5-lp152.5.6.1 libX11-xcb1-1.6.5-lp152.5.6.1 libX11-xcb1-debuginfo-1.6.5-lp152.5.6.1 - openSUSE Leap 15.2 (x86_64): libX11-6-32bit-1.6.5-lp152.5.6.1 libX11-6-32bit-debuginfo-1.6.5-lp152.5.6.1 libX11-devel-32bit-1.6.5-lp152.5.6.1 libX11-xcb1-32bit-1.6.5-lp152.5.6.1 libX11-xcb1-32bit-debuginfo-1.6.5-lp152.5.6.1 - openSUSE Leap 15.2 (noarch): libX11-data-1.6.5-lp152.5.6.1 References: https://www.suse.com/security/cve/CVE-2020-14344.html https://bugzilla.suse.com/1174628

1 0

openSUSE-RU-2020:1184-1: moderate: Recommended update for wireguard, wireguard-tools
by maintenance＠opensuse.org 12 Aug '20

12 Aug '20

openSUSE Recommended Update: Recommended update for wireguard, wireguard-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1184-1 Rating: moderate References: Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for wireguard, wireguard-tools fixes the following issues: This adds wireguard to openSUSE Leap 15.1. wireguard is shipped in version 1.0.20200729. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1184=1 Package List: - openSUSE Leap 15.1 (x86_64): wireguard-1.0.20200729-lp151.2.1 wireguard-debugsource-1.0.20200729-lp151.2.1 wireguard-kmp-default-1.0.20200729_k4.12.14_lp151.28.59-lp151.2.1 wireguard-kmp-default-debuginfo-1.0.20200729_k4.12.14_lp151.28.59-lp151.2.1 wireguard-tools-1.0.20200513-lp151.2.1 wireguard-tools-debuginfo-1.0.20200513-lp151.2.1 wireguard-tools-debugsource-1.0.20200513-lp151.2.1 References:

1 0

openSUSE-RU-2020:1185-1: moderate: Recommended update for wireguard-tools
by maintenance＠opensuse.org 12 Aug '20

12 Aug '20

openSUSE Recommended Update: Recommended update for wireguard-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1185-1 Rating: moderate References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for wireguard-tools fixes the following issues: wireguard-tools is added in version 1.0.20200513 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2020-1185=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): wireguard-tools-1.0.20200513-2.1 References:

1 0

openSUSE-SU-2020:1183-1: moderate: Security update for ark
by opensuse-security＠opensuse.org 12 Aug '20

12 Aug '20

openSUSE Security Update: Security update for ark ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1183-1 Rating: moderate References: #1174773 Cross-References: CVE-2020-16116 Affected Products: openSUSE Leap 15.2 openSUSE Leap 15.1 openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for ark fixes the following issues: - Fixed a directory traversal bug (boo#1174773, CVE-2020-16116). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1183=1 - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1183=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1183=1 Package List: - openSUSE Leap 15.2 (x86_64): ark-20.04.2-lp152.2.3.1 ark-debuginfo-20.04.2-lp152.2.3.1 ark-debugsource-20.04.2-lp152.2.3.1 libkerfuffle20-20.04.2-lp152.2.3.1 libkerfuffle20-debuginfo-20.04.2-lp152.2.3.1 - openSUSE Leap 15.2 (noarch): ark-lang-20.04.2-lp152.2.3.1 - openSUSE Leap 15.1 (noarch): ark-lang-18.12.3-lp151.2.4.1 - openSUSE Leap 15.1 (x86_64): ark-18.12.3-lp151.2.4.1 ark-debuginfo-18.12.3-lp151.2.4.1 ark-debugsource-18.12.3-lp151.2.4.1 libkerfuffle18-18.12.3-lp151.2.4.1 libkerfuffle18-debuginfo-18.12.3-lp151.2.4.1 - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): ark-18.12.3-bp151.3.3.1 libkerfuffle18-18.12.3-bp151.3.3.1 - openSUSE Backports SLE-15-SP1 (noarch): ark-lang-18.12.3-bp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2020-16116.html https://bugzilla.suse.com/1174773

1 0

openSUSE-RU-2020:1180-1: moderate: Recommended update for cacti, cacti-spine
by maintenance＠opensuse.org 11 Aug '20

11 Aug '20

openSUSE Recommended Update: Recommended update for cacti, cacti-spine ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1180-1 Rating: moderate References: #1174850 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for cacti, cacti-spine fixes the following issues: Updated to version 1.2.14 - Fixed an XSS vulnerability due to improper escaping of error message during template import preview (boo#1174850). This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1180=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): cacti-spine-1.2.14-bp151.4.15.1 - openSUSE Backports SLE-15-SP1 (noarch): cacti-1.2.14-bp151.4.15.1 References: https://bugzilla.suse.com/1174850

1 0

openSUSE-SU-2020:1179-1: important: Security update for MozillaThunderbird
by opensuse-security＠opensuse.org 11 Aug '20

11 Aug '20

openSUSE Security Update: Security update for MozillaThunderbird ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1179-1 Rating: important References: #1174538 Cross-References: CVE-2020-15652 CVE-2020-15659 CVE-2020-6463 CVE-2020-6514 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for MozillaThunderbird fixes the following issues: - Updated to Mozilla Thunderbird 68.11: * Fixed various security issues (MFSA-2020-35, bsc#1174538). * Fixed CVE-2020-15652: Potential leak of redirect targets when loading scripts in a worker (bsc#1174538). * Fixed CVE-2020-6514: WebRTC data channel leaks internal address to peer (bsc#1174538). * Fixed CVE-2020-6463: Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture (bsc#1174538). * Fixed CVE-2020-15659: Memory safety bugs fixed in Thunderbird 68.11 (bsc#1174538). * Fixed a bug with FileLink attachments included as a link and file when added from a network drive via drag & drop (bmo#793118). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1179=1 Package List: - openSUSE Leap 15.1 (x86_64): MozillaThunderbird-68.11.0-lp151.2.47.1 MozillaThunderbird-debuginfo-68.11.0-lp151.2.47.1 MozillaThunderbird-debugsource-68.11.0-lp151.2.47.1 MozillaThunderbird-translations-common-68.11.0-lp151.2.47.1 MozillaThunderbird-translations-other-68.11.0-lp151.2.47.1 References: https://www.suse.com/security/cve/CVE-2020-15652.html https://www.suse.com/security/cve/CVE-2020-15659.html https://www.suse.com/security/cve/CVE-2020-6463.html https://www.suse.com/security/cve/CVE-2020-6514.html https://bugzilla.suse.com/1174538

1 0

openSUSE-SU-2020:1178-1: moderate: Security update for go1.13
by opensuse-security＠opensuse.org 10 Aug '20

10 Aug '20

openSUSE Security Update: Security update for go1.13 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1178-1 Rating: moderate References: #1149259 #1174977 Cross-References: CVE-2020-16845 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for go1.13 fixes the following issues: - go1.13 was updated to version 1.13.5 - CVE-2020-16845: dUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs (bsc#1174977). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1178=1 Package List: - openSUSE Leap 15.1 (x86_64): go1.13-1.13.15-lp151.8.1 go1.13-doc-1.13.15-lp151.8.1 go1.13-race-1.13.15-lp151.8.1 References: https://www.suse.com/security/cve/CVE-2020-16845.html https://bugzilla.suse.com/1149259 https://bugzilla.suse.com/1174977

1 0

openSUSE-SU-2020:1177-1: moderate: Security update for perl-XML-Twig
by opensuse-security＠opensuse.org 10 Aug '20

10 Aug '20

openSUSE Security Update: Security update for perl-XML-Twig ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1177-1 Rating: moderate References: #1008644 Cross-References: CVE-2016-9180 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for perl-XML-Twig fixes the following issues: - Security fix [bsc#1008644, CVE-2016-9180] * Setting expand_external_ents to 0 or -1 currently doesn't work as expected; To completely turn off expanding external entities use no_xxe. * Update documentation for XML::Twig to mention problems with expand_external_ents and add information about new no_xxe argument This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1177=1 Package List: - openSUSE Leap 15.1 (noarch): perl-XML-Twig-3.52-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2016-9180.html https://bugzilla.suse.com/1008644

1 0

openSUSE-RU-2020:1176-1: moderate: Recommended update for ocfs2-tools
by maintenance＠opensuse.org 10 Aug '20

10 Aug '20

openSUSE Recommended Update: Recommended update for ocfs2-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1176-1 Rating: moderate References: #1170530 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ocfs2-tools fixes the following issue: - Fix debugfs.ocfs2 error on devices with sector size 4096 (bsc#1170530) This update was imported from the SUSE:SLE-15-SP1:Update update project. This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1176=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): ocfs2-tools-1.8.5-bp151.2.3.1 ocfs2-tools-devel-1.8.5-bp151.2.3.1 ocfs2-tools-devel-static-1.8.5-bp151.2.3.1 ocfs2-tools-o2cb-1.8.5-bp151.2.3.1 References: https://bugzilla.suse.com/1170530

1 0

openSUSE-SU-2020:1175-1: important: Security update for java-11-openjdk
by opensuse-security＠opensuse.org 09 Aug '20

09 Aug '20

openSUSE Security Update: Security update for java-11-openjdk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1175-1 Rating: important References: #1174157 Cross-References: CVE-2020-14556 CVE-2020-14562 CVE-2020-14573 CVE-2020-14577 CVE-2020-14581 CVE-2020-14583 CVE-2020-14593 CVE-2020-14621 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 8 vulnerabilities is now available. Description: This update for java-11-openjdk fixes the following issues: - Update to upstream tag jdk-11.0.8+10 (July 2020 CPU, bsc#1174157) * Security fixes: + JDK-8230613: Better ASCII conversions + JDK-8231800: Better listing of arrays + JDK-8232014: Expand DTD support + JDK-8233234: Better Zip Naming + JDK-8233239, CVE-2020-14562: Enhance TIFF support + JDK-8233255: Better Swing Buttons + JDK-8234032: Improve basic calendar services + JDK-8234042: Better factory production of certificates + JDK-8234418: Better parsing with CertificateFactory + JDK-8234836: Improve serialization handling + JDK-8236191: Enhance OID processing + JDK-8236867, CVE-2020-14573: Enhance Graal interface handling + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior + JDK-8237592, CVE-2020-14577: Enhance certificate verification + JDK-8238002, CVE-2020-14581: Better matrix operations + JDK-8238013: Enhance String writing + JDK-8238804: Enhance key handling process + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable + JDK-8238843: Enhanced font handing + JDK-8238920, CVE-2020-14583: Better Buffer support + JDK-8238925: Enhance WAV file playback + JDK-8240119, CVE-2020-14593: Less Affine Transformations + JDK-8240482: Improved WAV file playback + JDK-8241379: Update JCEKS support + JDK-8241522: Manifest improved jar headers redux + JDK-8242136, CVE-2020-14621: Better XML namespace handling * Other changes: + JDK-6933331: (d3d/ogl) java.lang.IllegalStateException: Buffers have not been created + JDK-7124307: JSpinner and changing value by mouse + JDK-8022574: remove HaltNode code after uncommon trap calls + JDK-8039082: [TEST_BUG] Test java/awt/dnd/BadSerializationTest/BadSerializationTest.java fails + JDK-8040630: Popup menus and tooltips flicker with previous popup contents when first shown + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with ENOMEM when joining group (OS X 10.9) + JDK-8048215: [TESTBUG] java/lang/management/ManagementFactory/ThreadMXBeanProxy.java Expected non-null LockInfo + JDK-8051349: nsk/jvmti/scenarios/sampling/SP06/sp06t003 fails in nightly + JDK-8080353: JShell: Better error message on attempting to add default method + JDK-8139876: Exclude hanging nsk/stress/stack from execution with deoptimization enabled + JDK-8146090: java/lang/ref/ReachabilityFenceTest.java fails with -XX:+DeoptimizeALot + JDK-8153430: jdk regression test MletParserLocaleTest, ParserInfiniteLoopTest reduce default timeout + JDK-8156207: Resource allocated BitMaps are often cleared unnecessarily + JDK-8159740: JShell: corralled declarations do not have correct source to wrapper mapping + JDK-8175984: ICC_Profile has un-needed, not-empty finalize method + JDK-8176359: Frame#setMaximizedbounds not working properly in multi screen environments + JDK-8183369: RFC unconformity of HttpURLConnection with proxy + JDK-8187078: -XX:+VerifyOops finds numerous problems when running JPRT + JDK-8189861: Refactor CacheFind + JDK-8191169: java/net/Authenticator/B4769350.java failed intermittently + JDK-8191930: [Graal] emits unparseable XML into compile log + JDK-8193879: Java debugger hangs on method invocation + JDK-8196019: java/awt/Window/Grab/GrabTest.java fails on Windows + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails + JDK-8198000: java/awt/List/EmptyListEventTest/EmptyListEventTest.java debug assert on Windows + JDK-8198001: java/awt/Menu/WrongParentAfterRemoveMenu/ /WrongParentAfterRemoveMenu.java debug assert on Windows + JDK-8198339: Test javax/swing/border/Test6981576.java is unstable + JDK-8200701: jdk/jshell/ExceptionsTest.java fails on Windows, after JDK-8198801 + JDK-8203264: JNI exception pending in PlainDatagramSocketImpl.c:740 + JDK-8203672: JNI exception pending in PlainSocketImpl.c + JDK-8203673: JNI exception pending in DualStackPlainDatagramSocketImpl.c:398 + JDK-8204834: Fix confusing "allocate" naming in OopStorage + JDK-8205399: Set node color on pinned HashMap.TreeNode deletion + JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/ /RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with handshake_failure + JDK-8206179: com/sun/management/OperatingSystemMXBean/ /GetCommittedVirtualMemorySize.java fails with Committed virtual memory size illegal value + JDK-8207334: VM times out in VM_HandshakeAllThreads::doit() with RunThese30M + JDK-8208277: Code cache heap (-XX:ReservedCodeCacheSize) doesn't work with 1GB LargePages This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1175=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): java-11-openjdk-11.0.8.0-lp151.3.19.1 java-11-openjdk-accessibility-11.0.8.0-lp151.3.19.1 java-11-openjdk-accessibility-debuginfo-11.0.8.0-lp151.3.19.1 java-11-openjdk-debuginfo-11.0.8.0-lp151.3.19.1 java-11-openjdk-debugsource-11.0.8.0-lp151.3.19.1 java-11-openjdk-demo-11.0.8.0-lp151.3.19.1 java-11-openjdk-devel-11.0.8.0-lp151.3.19.1 java-11-openjdk-headless-11.0.8.0-lp151.3.19.1 java-11-openjdk-jmods-11.0.8.0-lp151.3.19.1 java-11-openjdk-src-11.0.8.0-lp151.3.19.1 - openSUSE Leap 15.1 (noarch): java-11-openjdk-javadoc-11.0.8.0-lp151.3.19.1 References: https://www.suse.com/security/cve/CVE-2020-14556.html https://www.suse.com/security/cve/CVE-2020-14562.html https://www.suse.com/security/cve/CVE-2020-14573.html https://www.suse.com/security/cve/CVE-2020-14577.html https://www.suse.com/security/cve/CVE-2020-14581.html https://www.suse.com/security/cve/CVE-2020-14583.html https://www.suse.com/security/cve/CVE-2020-14593.html https://www.suse.com/security/cve/CVE-2020-14621.html https://bugzilla.suse.com/1174157

1 0

openSUSE-RU-2020:1174-1: moderate: Recommended update for drbd
by maintenance＠opensuse.org 09 Aug '20

09 Aug '20

openSUSE Recommended Update: Recommended update for drbd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1174-1 Rating: moderate References: #1174543 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update of fwupd fixes the following issue: - rebuilt with new signing key. (bsc#1174543) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1174=1 Package List: - openSUSE Leap 15.1 (noarch): fwupd-lang-1.0.9-lp151.2.5.1 - openSUSE Leap 15.1 (x86_64): dfu-tool-1.0.9-lp151.2.5.1 dfu-tool-debuginfo-1.0.9-lp151.2.5.1 fwupd-1.0.9-lp151.2.5.1 fwupd-debuginfo-1.0.9-lp151.2.5.1 fwupd-debugsource-1.0.9-lp151.2.5.1 fwupd-devel-1.0.9-lp151.2.5.1 libfwupd2-1.0.9-lp151.2.5.1 libfwupd2-debuginfo-1.0.9-lp151.2.5.1 typelib-1_0-Fwupd-2_0-1.0.9-lp151.2.5.1 References: https://bugzilla.suse.com/1174543

1 0

openSUSE-RU-2020:1173-1: Recommended update for texlive
by maintenance＠opensuse.org 09 Aug '20

09 Aug '20

openSUSE Recommended Update: Recommended update for texlive ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1173-1 Rating: low References: #1172690 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for texlive fixes the following issues: - Uses now the predefined user id and group id 505 (bsc#1172690) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1173=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libkpathsea6-6.2.3-lp151.12.6.1 libkpathsea6-debuginfo-6.2.3-lp151.12.6.1 libptexenc1-1.3.5-lp151.12.6.1 libptexenc1-debuginfo-1.3.5-lp151.12.6.1 libsynctex1-1.18-lp151.12.6.1 libsynctex1-debuginfo-1.18-lp151.12.6.1 libtexlua52-5-5.2.4-lp151.12.6.1 libtexlua52-5-debuginfo-5.2.4-lp151.12.6.1 libtexluajit2-2.1.0beta2-lp151.12.6.1 libtexluajit2-debuginfo-2.1.0beta2-lp151.12.6.1 texlive-2017.20170520-lp151.12.6.1 texlive-a2ping-bin-2017.20170520.svn27321-lp151.12.6.1 texlive-accfonts-bin-2017.20170520.svn12688-lp151.12.6.1 texlive-adhocfilelist-bin-2017.20170520.svn28038-lp151.12.6.1 texlive-afm2pl-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-afm2pl-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-aleph-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-aleph-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-amstex-bin-2017.20170520.svn3006-lp151.12.6.1 texlive-arara-bin-2017.20170520.svn29036-lp151.12.6.1 texlive-asymptote-bin-2017.20170520.svn43843-lp151.12.6.1 texlive-asymptote-bin-debuginfo-2017.20170520.svn43843-lp151.12.6.1 texlive-authorindex-bin-2017.20170520.svn18790-lp151.12.6.1 texlive-autosp-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-autosp-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-bibexport-bin-2017.20170520.svn16219-lp151.12.6.1 texlive-bibtex-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-bibtex-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-bibtex8-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-bibtex8-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-bibtexu-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-bibtexu-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-bin-devel-2017.20170520-lp151.12.6.1 texlive-bundledoc-bin-2017.20170520.svn17794-lp151.12.6.1 texlive-cachepic-bin-2017.20170520.svn15543-lp151.12.6.1 texlive-checkcites-bin-2017.20170520.svn25623-lp151.12.6.1 texlive-checklistings-bin-2017.20170520.svn38300-lp151.12.6.1 texlive-chktex-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-chktex-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-cjk-gs-integrate-bin-2017.20170520.svn37223-lp151.12.6.1 texlive-cjkutils-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-cjkutils-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-context-bin-2017.20170520.svn34112-lp151.12.6.1 texlive-convbkmk-bin-2017.20170520.svn30408-lp151.12.6.1 texlive-crossrefware-bin-2017.20170520.svn43866-lp151.12.6.1 texlive-cslatex-bin-2017.20170520.svn3006-lp151.12.6.1 texlive-csplain-bin-2017.20170520.svn33902-lp151.12.6.1 texlive-ctanify-bin-2017.20170520.svn24061-lp151.12.6.1 texlive-ctanupload-bin-2017.20170520.svn23866-lp151.12.6.1 texlive-ctie-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-ctie-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-cweb-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-cweb-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-cyrillic-bin-bin-2017.20170520.svn29741-lp151.12.6.1 texlive-de-macro-bin-2017.20170520.svn17399-lp151.12.6.1 texlive-debuginfo-2017.20170520-lp151.12.6.1 texlive-debugsource-2017.20170520-lp151.12.6.1 texlive-detex-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-detex-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-dosepsbin-bin-2017.20170520.svn24759-lp151.12.6.1 texlive-dtl-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-dtl-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-dtxgen-bin-2017.20170520.svn29031-lp151.12.6.1 texlive-dviasm-bin-2017.20170520.svn8329-lp151.12.6.1 texlive-dvicopy-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-dvicopy-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-dvidvi-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-dvidvi-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-dviinfox-bin-2017.20170520.svn44515-lp151.12.6.1 texlive-dviljk-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-dviljk-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-dvipdfmx-bin-2017.20170520.svn40273-lp151.12.6.1 texlive-dvipng-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-dvipng-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-dvipos-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-dvipos-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-dvips-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-dvips-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-dvisvgm-bin-2017.20170520.svn40987-lp151.12.6.1 texlive-dvisvgm-bin-debuginfo-2017.20170520.svn40987-lp151.12.6.1 texlive-ebong-bin-2017.20170520.svn21000-lp151.12.6.1 texlive-eplain-bin-2017.20170520.svn3006-lp151.12.6.1 texlive-epspdf-bin-2017.20170520.svn29050-lp151.12.6.1 texlive-epstopdf-bin-2017.20170520.svn18336-lp151.12.6.1 texlive-exceltex-bin-2017.20170520.svn25860-lp151.12.6.1 texlive-fig4latex-bin-2017.20170520.svn14752-lp151.12.6.1 texlive-findhyph-bin-2017.20170520.svn14758-lp151.12.6.1 texlive-fontinst-bin-2017.20170520.svn29741-lp151.12.6.1 texlive-fontools-bin-2017.20170520.svn25997-lp151.12.6.1 texlive-fontware-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-fontware-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-fragmaster-bin-2017.20170520.svn13663-lp151.12.6.1 texlive-getmap-bin-2017.20170520.svn34971-lp151.12.6.1 texlive-glossaries-bin-2017.20170520.svn37813-lp151.12.6.1 texlive-gregoriotex-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-gregoriotex-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-gsftopk-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-gsftopk-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-jadetex-bin-2017.20170520.svn3006-lp151.12.6.1 texlive-kotex-utils-bin-2017.20170520.svn32101-lp151.12.6.1 texlive-kpathsea-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-kpathsea-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-kpathsea-devel-6.2.3-lp151.12.6.1 texlive-lacheck-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-lacheck-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-latex-bin-bin-2017.20170520.svn14050-lp151.12.6.1 texlive-latex-git-log-bin-2017.20170520.svn30983-lp151.12.6.1 texlive-latex-papersize-bin-2017.20170520.svn42296-lp151.12.6.1 texlive-latex2man-bin-2017.20170520.svn13663-lp151.12.6.1 texlive-latex2nemeth-bin-2017.20170520.svn42300-lp151.12.6.1 texlive-latexdiff-bin-2017.20170520.svn16420-lp151.12.6.1 texlive-latexfileversion-bin-2017.20170520.svn25012-lp151.12.6.1 texlive-latexindent-bin-2017.20170520.svn32150-lp151.12.6.1 texlive-latexmk-bin-2017.20170520.svn10937-lp151.12.6.1 texlive-latexpand-bin-2017.20170520.svn27025-lp151.12.6.1 texlive-lcdftypetools-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-lcdftypetools-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-lilyglyphs-bin-2017.20170520.svn31696-lp151.12.6.1 texlive-listbib-bin-2017.20170520.svn26126-lp151.12.6.1 texlive-listings-ext-bin-2017.20170520.svn15093-lp151.12.6.1 texlive-lollipop-bin-2017.20170520.svn41465-lp151.12.6.1 texlive-ltxfileinfo-bin-2017.20170520.svn29005-lp151.12.6.1 texlive-ltximg-bin-2017.20170520.svn32346-lp151.12.6.1 texlive-lua2dox-bin-2017.20170520.svn29053-lp151.12.6.1 texlive-luaotfload-bin-2017.20170520.svn34647-lp151.12.6.1 texlive-luatex-bin-2017.20170520.svn44549-lp151.12.6.1 texlive-luatex-bin-debuginfo-2017.20170520.svn44549-lp151.12.6.1 texlive-lwarp-bin-2017.20170520.svn43292-lp151.12.6.1 texlive-m-tx-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-m-tx-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-make4ht-bin-2017.20170520.svn37750-lp151.12.6.1 texlive-makedtx-bin-2017.20170520.svn38769-lp151.12.6.1 texlive-makeindex-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-makeindex-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-match_parens-bin-2017.20170520.svn23500-lp151.12.6.1 texlive-mathspic-bin-2017.20170520.svn23661-lp151.12.6.1 texlive-metafont-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-metafont-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-metapost-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-metapost-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-mex-bin-2017.20170520.svn3006-lp151.12.6.1 texlive-mf2pt1-bin-2017.20170520.svn23406-lp151.12.6.1 texlive-mflua-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-mflua-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-mfware-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-mfware-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-mkgrkindex-bin-2017.20170520.svn14428-lp151.12.6.1 texlive-mkjobtexmf-bin-2017.20170520.svn8457-lp151.12.6.1 texlive-mkpic-bin-2017.20170520.svn33688-lp151.12.6.1 texlive-mltex-bin-2017.20170520.svn3006-lp151.12.6.1 texlive-mptopdf-bin-2017.20170520.svn18674-lp151.12.6.1 texlive-multibibliography-bin-2017.20170520.svn30534-lp151.12.6.1 texlive-musixtex-bin-2017.20170520.svn37026-lp151.12.6.1 texlive-musixtnt-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-musixtnt-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-omegaware-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-omegaware-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-patgen-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-patgen-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-pax-bin-2017.20170520.svn10843-lp151.12.6.1 texlive-pdfbook2-bin-2017.20170520.svn37537-lp151.12.6.1 texlive-pdfcrop-bin-2017.20170520.svn14387-lp151.12.6.1 texlive-pdfjam-bin-2017.20170520.svn17868-lp151.12.6.1 texlive-pdflatexpicscale-bin-2017.20170520.svn41779-lp151.12.6.1 texlive-pdftex-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-pdftex-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-pdftools-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-pdftools-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-pdfxup-bin-2017.20170520.svn40690-lp151.12.6.1 texlive-pedigree-perl-bin-2017.20170520.svn25962-lp151.12.6.1 texlive-perltex-bin-2017.20170520.svn16181-lp151.12.6.1 texlive-petri-nets-bin-2017.20170520.svn39165-lp151.12.6.1 texlive-pfarrei-bin-2017.20170520.svn29348-lp151.12.6.1 texlive-pkfix-bin-2017.20170520.svn13364-lp151.12.6.1 texlive-pkfix-helper-bin-2017.20170520.svn13663-lp151.12.6.1 texlive-platex-bin-2017.20170520.svn22859-lp151.12.6.1 texlive-pmx-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-pmx-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-pmxchords-bin-2017.20170520.svn32405-lp151.12.6.1 texlive-ps2pk-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-ps2pk-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-pst-pdf-bin-2017.20170520.svn7838-lp151.12.6.1 texlive-pst2pdf-bin-2017.20170520.svn29333-lp151.12.6.1 texlive-pstools-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-pstools-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-ptex-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-ptex-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-ptex-fontmaps-bin-2017.20170520.svn44206-lp151.12.6.1 texlive-ptex2pdf-bin-2017.20170520.svn29335-lp151.12.6.1 texlive-ptexenc-devel-1.3.5-lp151.12.6.1 texlive-purifyeps-bin-2017.20170520.svn13663-lp151.12.6.1 texlive-pygmentex-bin-2017.20170520.svn34996-lp151.12.6.1 texlive-pythontex-bin-2017.20170520.svn31638-lp151.12.6.1 texlive-rubik-bin-2017.20170520.svn32919-lp151.12.6.1 texlive-seetexk-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-seetexk-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-splitindex-bin-2017.20170520.svn29688-lp151.12.6.1 texlive-srcredact-bin-2017.20170520.svn38710-lp151.12.6.1 texlive-sty2dtx-bin-2017.20170520.svn21215-lp151.12.6.1 texlive-svn-multi-bin-2017.20170520.svn13663-lp151.12.6.1 texlive-synctex-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-synctex-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-synctex-devel-1.18-lp151.12.6.1 texlive-tetex-bin-2017.20170520.svn43957-lp151.12.6.1 texlive-tex-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-tex-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-tex4ebook-bin-2017.20170520.svn37771-lp151.12.6.1 texlive-tex4ht-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-tex4ht-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-texconfig-bin-2017.20170520.svn29741-lp151.12.6.1 texlive-texcount-bin-2017.20170520.svn13013-lp151.12.6.1 texlive-texdef-bin-2017.20170520.svn21802-lp151.12.6.1 texlive-texdiff-bin-2017.20170520.svn15506-lp151.12.6.1 texlive-texdirflatten-bin-2017.20170520.svn12782-lp151.12.6.1 texlive-texdoc-bin-2017.20170520.svn29741-lp151.12.6.1 texlive-texfot-bin-2017.20170520.svn33155-lp151.12.6.1 texlive-texliveonfly-bin-2017.20170520.svn24062-lp151.12.6.1 texlive-texloganalyser-bin-2017.20170520.svn13663-lp151.12.6.1 texlive-texlua-devel-5.2.4-lp151.12.6.1 texlive-texluajit-devel-2.1.0beta2-lp151.12.6.1 texlive-texosquery-bin-2017.20170520.svn43596-lp151.12.6.1 texlive-texsis-bin-2017.20170520.svn3006-lp151.12.6.1 texlive-texware-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-texware-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-thumbpdf-bin-2017.20170520.svn6898-lp151.12.6.1 texlive-tie-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-tie-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-tpic2pdftex-bin-2017.20170520.svn29741-lp151.12.6.1 texlive-ttfutils-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-ttfutils-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-typeoutfileinfo-bin-2017.20170520.svn25648-lp151.12.6.1 texlive-ulqda-bin-2017.20170520.svn13663-lp151.12.6.1 texlive-uplatex-bin-2017.20170520.svn26326-lp151.12.6.1 texlive-uptex-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-uptex-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-urlbst-bin-2017.20170520.svn23262-lp151.12.6.1 texlive-velthuis-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-velthuis-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-vlna-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-vlna-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-vpe-bin-2017.20170520.svn6897-lp151.12.6.1 texlive-web-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-web-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-xdvi-bin-2017.20170520.svn44143-lp151.12.6.1 texlive-xdvi-bin-debuginfo-2017.20170520.svn44143-lp151.12.6.1 texlive-xetex-bin-2017.20170520.svn44361-lp151.12.6.1 texlive-xetex-bin-debuginfo-2017.20170520.svn44361-lp151.12.6.1 texlive-xmltex-bin-2017.20170520.svn3006-lp151.12.6.1 texlive-yplan-bin-2017.20170520.svn34398-lp151.12.6.1 - openSUSE Leap 15.1 (noarch): perl-biber-2017.20170520.svn30357-lp151.12.6.1 texlive-biber-bin-2017.20170520.svn42679-lp151.12.6.1 texlive-diadia-bin-2017.20170520.svn37645-lp151.12.6.1 References: https://bugzilla.suse.com/1172690

1 0

openSUSE-SU-2020:1172-1: moderate: Security update for opera
by opensuse-security＠opensuse.org 09 Aug '20

09 Aug '20

openSUSE Security Update: Security update for opera ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1172-1 Rating: moderate References: Cross-References: CVE-2020-6510 CVE-2020-6511 CVE-2020-6512 CVE-2020-6513 CVE-2020-6514 CVE-2020-6515 CVE-2020-6516 CVE-2020-6517 CVE-2020-6518 CVE-2020-6519 CVE-2020-6520 CVE-2020-6521 CVE-2020-6522 CVE-2020-6523 CVE-2020-6524 CVE-2020-6525 CVE-2020-6526 CVE-2020-6527 CVE-2020-6528 CVE-2020-6529 CVE-2020-6530 CVE-2020-6531 CVE-2020-6533 CVE-2020-6534 CVE-2020-6535 CVE-2020-6536 Affected Products: openSUSE Leap 15.2:NonFree ______________________________________________________________________________ An update that fixes 26 vulnerabilities is now available. Description: This update for opera fixes the following issues: - Update to version 70.0.3728.71 - DNA-86267 Make `Recently closed tabs` appearance consistent with `Search for open tabs`. - DNA-86988 Opera 70 translations - DNA-87530 Zen news leads not loading - DNA-87636 Fix displaying folder icon for closed windows in recently closed list - DNA-87682 Replace Extensions icon in toolbar with icon from sidebar - DNA-87756 Extend chrome.sessions.getRecentlyClosed with information about last active tab in window. - DNA-87778 Crash at opera::InstantSearchViewViews:: ~InstantSearchViewViews() - DNA-87815 Change affiliate links for AliExpress Search - Update to version 70.0.3728.59 - CHR-8010 Update chromium on desktop-stable-84-3728 to 84.0.4147.89 - DNA-87019 The video image does not respond to the pressing after closed the “Quit Opera?” dialog - DNA-87342 Fix right padding in settings > weather section - DNA-87427 Remove unneeded information from the requests’ diagnostics - DNA-87560 Crash at views::Widget::GetNativeView() - DNA-87561 Crash at CRYPTO_BUFFER_len - DNA-87599 Bypass VPN for default search engines doesn’t work - DNA-87611 Unittests fails on declarativeNetRequest and declarativeNetRequestFeedback permissions - DNA-87612 [Mac] Misaligned icon in address bar - DNA-87619 [Win/Lin] Misaligned icon in address bar - DNA-87716 [macOS/Windows] Crash when Search in tabs is open and Opera is minimised - DNA-87749 Crash at opera::InstantSearchSuggestionLineView:: SetIsHighlighted(bool) - The update to chromium 84.0.4147.89 fixes following issues: - CVE-2020-6510, CVE-2020-6511, CVE-2020-6512, CVE-2020-6513, CVE-2020-6514, CVE-2020-6515, CVE-2020-6516, CVE-2020-6517, CVE-2020-6518, CVE-2020-6519, CVE-2020-6520, CVE-2020-6521, CVE-2020-6522, CVE-2020-6523, CVE-2020-6524, CVE-2020-6525, CVE-2020-6526, CVE-2020-6527, CVE-2020-6528, CVE-2020-6529, CVE-2020-6530, CVE-2020-6531, CVE-2020-6533, CVE-2020-6534, CVE-2020-6535, CVE-2020-6536 - Complete Opera 70.0 changelog at: https://blogs.opera.com/desktop/changelog-for-70/ - Update to version 69.0.3686.77 - DNA-84207 New Yubikey enrollment is not working - DNA-87185 Lost translation - DNA-87382 Integrate scrolling to top of the feed with the existing scroll position restoration - DNA-87535 Sort out news on startpage state - DNA-87588 Merge “Prevent pointer from being sent in the clear over SCTP” to desktop-stable-83-3686 - Update to version 69.0.3686.57 - DNA-86682 Title case in Russian translation - DNA-86807 Title case in O69 BR Portuguese translation - DNA-87104 Right click context menu becomes scrollable sometimes - DNA-87376 Search in tabs opens significantly slower in O69 - DNA-87505 [Welcome Pages][Stats] Session stats for Welcome and Upgrade pages - DNA-87535 Sort out news on startpage state Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2:NonFree: zypper in -t patch openSUSE-2020-1172=1 Package List: - openSUSE Leap 15.2:NonFree (x86_64): opera-70.0.3728.71-lp152.2.12.1 References: https://www.suse.com/security/cve/CVE-2020-6510.html https://www.suse.com/security/cve/CVE-2020-6511.html https://www.suse.com/security/cve/CVE-2020-6512.html https://www.suse.com/security/cve/CVE-2020-6513.html https://www.suse.com/security/cve/CVE-2020-6514.html https://www.suse.com/security/cve/CVE-2020-6515.html https://www.suse.com/security/cve/CVE-2020-6516.html https://www.suse.com/security/cve/CVE-2020-6517.html https://www.suse.com/security/cve/CVE-2020-6518.html https://www.suse.com/security/cve/CVE-2020-6519.html https://www.suse.com/security/cve/CVE-2020-6520.html https://www.suse.com/security/cve/CVE-2020-6521.html https://www.suse.com/security/cve/CVE-2020-6522.html https://www.suse.com/security/cve/CVE-2020-6523.html https://www.suse.com/security/cve/CVE-2020-6524.html https://www.suse.com/security/cve/CVE-2020-6525.html https://www.suse.com/security/cve/CVE-2020-6526.html https://www.suse.com/security/cve/CVE-2020-6527.html https://www.suse.com/security/cve/CVE-2020-6528.html https://www.suse.com/security/cve/CVE-2020-6529.html https://www.suse.com/security/cve/CVE-2020-6530.html https://www.suse.com/security/cve/CVE-2020-6531.html https://www.suse.com/security/cve/CVE-2020-6533.html https://www.suse.com/security/cve/CVE-2020-6534.html https://www.suse.com/security/cve/CVE-2020-6535.html https://www.suse.com/security/cve/CVE-2020-6536.html

1 0

openSUSE-RU-2020:1171-1: important: Recommended update for python-azure-agent
by maintenance＠opensuse.org 08 Aug '20

08 Aug '20

openSUSE Recommended Update: Recommended update for python-azure-agent ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1171-1 Rating: important References: #1173866 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-azure-agent fixes the following issues: - Properly set the DHCP configuration to push the hostname to the DHCP server. (bsc#1173866) - Do not bring the interface down to push the hostname, just use 'ifup'. (bsc#1173866) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1171=1 Package List: - openSUSE Leap 15.1 (noarch): python-azure-agent-2.2.45-lp151.2.9.1 python-azure-agent-test-2.2.45-lp151.2.9.1 References: https://bugzilla.suse.com/1173866

1 0

openSUSE-SU-2020:1169-1: important: Security update for grub2
by opensuse-security＠opensuse.org 08 Aug '20

08 Aug '20

openSUSE Security Update: Security update for grub2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1169-1 Rating: important References: #1168994 #1173812 #1174463 #1174570 Cross-References: CVE-2020-10713 CVE-2020-14308 CVE-2020-14309 CVE-2020-14310 CVE-2020-14311 CVE-2020-15706 CVE-2020-15707 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: This update for grub2 fixes the following issues: - Fix for CVE-2020-10713 (bsc#1168994) - Fix for CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311 (bsc#1173812) - Fix for CVE-2020-15706 (bsc#1174463) - Fix for CVE-2020-15707 (bsc#1174570) - Use overflow checking primitives where the arithmetic expression for buffer - Use grub_calloc for overflow check and return NULL when it would occur This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1169=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): grub2-2.04-lp152.7.3.4 grub2-branding-upstream-2.04-lp152.7.3.4 grub2-debuginfo-2.04-lp152.7.3.4 grub2-debugsource-2.04-lp152.7.3.4 - openSUSE Leap 15.2 (noarch): grub2-i386-efi-2.04-lp152.7.3.4 grub2-i386-efi-debug-2.04-lp152.7.3.4 grub2-i386-pc-2.04-lp152.7.3.4 grub2-i386-pc-debug-2.04-lp152.7.3.4 grub2-i386-xen-2.04-lp152.7.3.4 grub2-snapper-plugin-2.04-lp152.7.3.4 grub2-systemd-sleep-plugin-2.04-lp152.7.3.4 grub2-x86_64-efi-2.04-lp152.7.3.4 grub2-x86_64-efi-debug-2.04-lp152.7.3.4 grub2-x86_64-xen-2.04-lp152.7.3.4 References: https://www.suse.com/security/cve/CVE-2020-10713.html https://www.suse.com/security/cve/CVE-2020-14308.html https://www.suse.com/security/cve/CVE-2020-14309.html https://www.suse.com/security/cve/CVE-2020-14310.html https://www.suse.com/security/cve/CVE-2020-14311.html https://www.suse.com/security/cve/CVE-2020-15706.html https://www.suse.com/security/cve/CVE-2020-15707.html https://bugzilla.suse.com/1168994 https://bugzilla.suse.com/1173812 https://bugzilla.suse.com/1174463 https://bugzilla.suse.com/1174570

1 0

openSUSE-RU-2020:1167-1: moderate: Recommended update for cacti, cacti-spine
by maintenance＠opensuse.org 08 Aug '20

08 Aug '20

openSUSE Recommended Update: Recommended update for cacti, cacti-spine ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1167-1 Rating: moderate References: #1174850 Affected Products: openSUSE Leap 15.2 openSUSE Leap 15.1 SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for cacti, cacti-spine fixes the following issues: Updated to version 1.2.14 - Fixed an XSS vulnerability due to improper escaping of error message during template import preview (boo#1174850). Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1167=1 - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1167=1 - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2020-1167=1 Package List: - openSUSE Leap 15.2 (x86_64): cacti-spine-1.2.14-lp152.2.6.1 cacti-spine-debuginfo-1.2.14-lp152.2.6.1 cacti-spine-debugsource-1.2.14-lp152.2.6.1 - openSUSE Leap 15.2 (noarch): cacti-1.2.14-lp152.2.6.1 - openSUSE Leap 15.1 (noarch): cacti-1.2.14-lp151.3.15.1 - openSUSE Leap 15.1 (x86_64): cacti-spine-1.2.14-lp151.3.15.1 cacti-spine-debuginfo-1.2.14-lp151.3.15.1 cacti-spine-debugsource-1.2.14-lp151.3.15.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): cacti-spine-1.2.14-11.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 s390x x86_64): cacti-spine-debuginfo-1.2.14-11.1 cacti-spine-debugsource-1.2.14-11.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): cacti-1.2.14-14.1 References: https://bugzilla.suse.com/1174850

1 0

openSUSE-SU-2020:1168-1: important: Security update for grub2
by opensuse-security＠opensuse.org 08 Aug '20

08 Aug '20

openSUSE Security Update: Security update for grub2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1168-1 Rating: important References: #1168994 #1173812 #1174463 #1174570 Cross-References: CVE-2020-10713 CVE-2020-14308 CVE-2020-14309 CVE-2020-14310 CVE-2020-14311 CVE-2020-15706 CVE-2020-15707 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: This update for grub2 fixes the following issues: - CVE-2020-10713 (bsc#1168994) - CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311 (bsc#1173812) - CVE-2020-15706 (bsc#1174463) - CVE-2020-15707 (bsc#1174570) - Use overflow checking primitives where the arithmetic expression for buffer allocations may include unvalidated data - Use grub_calloc for overflow check and return NULL when it would occur This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1168=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): grub2-2.02-lp151.21.21.4 grub2-branding-upstream-2.02-lp151.21.21.4 grub2-debuginfo-2.02-lp151.21.21.4 grub2-debugsource-2.02-lp151.21.21.4 - openSUSE Leap 15.1 (noarch): grub2-i386-efi-2.02-lp151.21.21.4 grub2-i386-pc-2.02-lp151.21.21.4 grub2-i386-xen-2.02-lp151.21.21.4 grub2-snapper-plugin-2.02-lp151.21.21.4 grub2-systemd-sleep-plugin-2.02-lp151.21.21.4 grub2-x86_64-efi-2.02-lp151.21.21.4 grub2-x86_64-xen-2.02-lp151.21.21.4 References: https://www.suse.com/security/cve/CVE-2020-10713.html https://www.suse.com/security/cve/CVE-2020-14308.html https://www.suse.com/security/cve/CVE-2020-14309.html https://www.suse.com/security/cve/CVE-2020-14310.html https://www.suse.com/security/cve/CVE-2020-14311.html https://www.suse.com/security/cve/CVE-2020-15706.html https://www.suse.com/security/cve/CVE-2020-15707.html https://bugzilla.suse.com/1168994 https://bugzilla.suse.com/1173812 https://bugzilla.suse.com/1174463 https://bugzilla.suse.com/1174570

1 0

openSUSE-RU-2020:1167-1: moderate: Recommended update for cacti, cacti-spine
by maintenance＠opensuse.org 08 Aug '20

08 Aug '20

openSUSE Recommended Update: Recommended update for cacti, cacti-spine ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1167-1 Rating: moderate References: #1174850 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for cacti, cacti-spine fixes the following issues: Updated to version 1.2.14 - Fixed an XSS vulnerability due to improper escaping of error message during template import preview (boo#1174850). Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2020-1167=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): cacti-spine-1.2.14-11.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 s390x x86_64): cacti-spine-debuginfo-1.2.14-11.1 cacti-spine-debugsource-1.2.14-11.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): cacti-1.2.14-14.1 References: https://bugzilla.suse.com/1174850

1 0

openSUSE-RU-2020:1170-1: moderate: Recommended update for lvm2
by maintenance＠opensuse.org 08 Aug '20

08 Aug '20

openSUSE Recommended Update: Recommended update for lvm2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1170-1 Rating: moderate References: #1172597 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for lvm2 fixes the following issues: - Fixed an issue where the system hangs for 90 seconds before it actually shuts down (bsc#1172597) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1170=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): device-mapper-1.02.149-lp151.4.18.1 device-mapper-debuginfo-1.02.149-lp151.4.18.1 device-mapper-debugsource-1.02.149-lp151.4.18.1 device-mapper-devel-1.02.149-lp151.4.18.1 libdevmapper-event1_03-1.02.149-lp151.4.18.1 libdevmapper-event1_03-debuginfo-1.02.149-lp151.4.18.1 libdevmapper1_03-1.02.149-lp151.4.18.1 libdevmapper1_03-debuginfo-1.02.149-lp151.4.18.1 liblvm2app2_2-2.02.180-lp151.4.18.1 liblvm2app2_2-debuginfo-2.02.180-lp151.4.18.1 liblvm2cmd2_02-2.02.180-lp151.4.18.1 liblvm2cmd2_02-debuginfo-2.02.180-lp151.4.18.1 lvm2-2.02.180-lp151.4.18.1 lvm2-clvm-2.02.180-lp151.4.18.1 lvm2-clvm-debuginfo-2.02.180-lp151.4.18.1 lvm2-clvm-debugsource-2.02.180-lp151.4.18.1 lvm2-cmirrord-2.02.180-lp151.4.18.1 lvm2-cmirrord-debuginfo-2.02.180-lp151.4.18.1 lvm2-debuginfo-2.02.180-lp151.4.18.1 lvm2-debugsource-2.02.180-lp151.4.18.1 lvm2-devel-2.02.180-lp151.4.18.1 lvm2-lockd-2.02.180-lp151.4.18.1 lvm2-lockd-debuginfo-2.02.180-lp151.4.18.1 lvm2-testsuite-2.02.180-lp151.4.18.1 lvm2-testsuite-debuginfo-2.02.180-lp151.4.18.1 - openSUSE Leap 15.1 (x86_64): device-mapper-devel-32bit-1.02.149-lp151.4.18.1 libdevmapper-event1_03-32bit-1.02.149-lp151.4.18.1 libdevmapper-event1_03-32bit-debuginfo-1.02.149-lp151.4.18.1 libdevmapper1_03-32bit-1.02.149-lp151.4.18.1 libdevmapper1_03-32bit-debuginfo-1.02.149-lp151.4.18.1 References: https://bugzilla.suse.com/1172597

1 0

openSUSE-RU-2020:1166-1: moderate: Recommended update for gnome-initial-setup
by maintenance＠opensuse.org 08 Aug '20

08 Aug '20

openSUSE Recommended Update: Recommended update for gnome-initial-setup ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1166-1 Rating: moderate References: #1172910 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gnome-initial-setup fixes the following issues: - Fix to start 'gnome-initial-setup' via 'xdg autostart' as an alternative to systemd user units on SLE-15-SP2. (bsc#1172910) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1166=1 Package List: - openSUSE Leap 15.2 (noarch): gnome-initial-setup-lang-3.34.6-lp152.2.3.1 - openSUSE Leap 15.2 (x86_64): gnome-initial-setup-3.34.6-lp152.2.3.1 gnome-initial-setup-debuginfo-3.34.6-lp152.2.3.1 gnome-initial-setup-debugsource-3.34.6-lp152.2.3.1 References: https://bugzilla.suse.com/1172910

1 0

openSUSE-SU-2020:1164-1: important: Security update for libX11
by opensuse-security＠opensuse.org 08 Aug '20

08 Aug '20

openSUSE Security Update: Security update for libX11 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1164-1 Rating: important References: #1174628 Cross-References: CVE-2020-14344 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libX11 fixes the following issues: - Fixed XIM client heap overflows (CVE-2020-14344, bsc#1174628) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1164=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libX11-6-1.6.5-lp152.5.3.1 libX11-6-debuginfo-1.6.5-lp152.5.3.1 libX11-debugsource-1.6.5-lp152.5.3.1 libX11-devel-1.6.5-lp152.5.3.1 libX11-xcb1-1.6.5-lp152.5.3.1 libX11-xcb1-debuginfo-1.6.5-lp152.5.3.1 libxcb-composite0-1.13-lp152.5.3.1 libxcb-composite0-debuginfo-1.13-lp152.5.3.1 libxcb-damage0-1.13-lp152.5.3.1 libxcb-damage0-debuginfo-1.13-lp152.5.3.1 libxcb-debugsource-1.13-lp152.5.3.1 libxcb-devel-1.13-lp152.5.3.1 libxcb-dpms0-1.13-lp152.5.3.1 libxcb-dpms0-debuginfo-1.13-lp152.5.3.1 libxcb-dri2-0-1.13-lp152.5.3.1 libxcb-dri2-0-debuginfo-1.13-lp152.5.3.1 libxcb-dri3-0-1.13-lp152.5.3.1 libxcb-dri3-0-debuginfo-1.13-lp152.5.3.1 libxcb-glx0-1.13-lp152.5.3.1 libxcb-glx0-debuginfo-1.13-lp152.5.3.1 libxcb-present0-1.13-lp152.5.3.1 libxcb-present0-debuginfo-1.13-lp152.5.3.1 libxcb-randr0-1.13-lp152.5.3.1 libxcb-randr0-debuginfo-1.13-lp152.5.3.1 libxcb-record0-1.13-lp152.5.3.1 libxcb-record0-debuginfo-1.13-lp152.5.3.1 libxcb-render0-1.13-lp152.5.3.1 libxcb-render0-debuginfo-1.13-lp152.5.3.1 libxcb-res0-1.13-lp152.5.3.1 libxcb-res0-debuginfo-1.13-lp152.5.3.1 libxcb-screensaver0-1.13-lp152.5.3.1 libxcb-screensaver0-debuginfo-1.13-lp152.5.3.1 libxcb-shape0-1.13-lp152.5.3.1 libxcb-shape0-debuginfo-1.13-lp152.5.3.1 libxcb-shm0-1.13-lp152.5.3.1 libxcb-shm0-debuginfo-1.13-lp152.5.3.1 libxcb-sync1-1.13-lp152.5.3.1 libxcb-sync1-debuginfo-1.13-lp152.5.3.1 libxcb-xf86dri0-1.13-lp152.5.3.1 libxcb-xf86dri0-debuginfo-1.13-lp152.5.3.1 libxcb-xfixes0-1.13-lp152.5.3.1 libxcb-xfixes0-debuginfo-1.13-lp152.5.3.1 libxcb-xinerama0-1.13-lp152.5.3.1 libxcb-xinerama0-debuginfo-1.13-lp152.5.3.1 libxcb-xinput0-1.13-lp152.5.3.1 libxcb-xinput0-debuginfo-1.13-lp152.5.3.1 libxcb-xkb1-1.13-lp152.5.3.1 libxcb-xkb1-debuginfo-1.13-lp152.5.3.1 libxcb-xtest0-1.13-lp152.5.3.1 libxcb-xtest0-debuginfo-1.13-lp152.5.3.1 libxcb-xv0-1.13-lp152.5.3.1 libxcb-xv0-debuginfo-1.13-lp152.5.3.1 libxcb-xvmc0-1.13-lp152.5.3.1 libxcb-xvmc0-debuginfo-1.13-lp152.5.3.1 libxcb1-1.13-lp152.5.3.1 libxcb1-debuginfo-1.13-lp152.5.3.1 - openSUSE Leap 15.2 (x86_64): libX11-6-32bit-1.6.5-lp152.5.3.1 libX11-6-32bit-debuginfo-1.6.5-lp152.5.3.1 libX11-devel-32bit-1.6.5-lp152.5.3.1 libX11-xcb1-32bit-1.6.5-lp152.5.3.1 libX11-xcb1-32bit-debuginfo-1.6.5-lp152.5.3.1 libxcb-composite0-32bit-1.13-lp152.5.3.1 libxcb-composite0-32bit-debuginfo-1.13-lp152.5.3.1 libxcb-damage0-32bit-1.13-lp152.5.3.1 libxcb-damage0-32bit-debuginfo-1.13-lp152.5.3.1 libxcb-devel-32bit-1.13-lp152.5.3.1 libxcb-dpms0-32bit-1.13-lp152.5.3.1 libxcb-dpms0-32bit-debuginfo-1.13-lp152.5.3.1 libxcb-dri2-0-32bit-1.13-lp152.5.3.1 libxcb-dri2-0-32bit-debuginfo-1.13-lp152.5.3.1 libxcb-dri3-0-32bit-1.13-lp152.5.3.1 libxcb-dri3-0-32bit-debuginfo-1.13-lp152.5.3.1 libxcb-glx0-32bit-1.13-lp152.5.3.1 libxcb-glx0-32bit-debuginfo-1.13-lp152.5.3.1 libxcb-present0-32bit-1.13-lp152.5.3.1 libxcb-present0-32bit-debuginfo-1.13-lp152.5.3.1 libxcb-randr0-32bit-1.13-lp152.5.3.1 libxcb-randr0-32bit-debuginfo-1.13-lp152.5.3.1 libxcb-record0-32bit-1.13-lp152.5.3.1 libxcb-record0-32bit-debuginfo-1.13-lp152.5.3.1 libxcb-render0-32bit-1.13-lp152.5.3.1 libxcb-render0-32bit-debuginfo-1.13-lp152.5.3.1 libxcb-res0-32bit-1.13-lp152.5.3.1 libxcb-res0-32bit-debuginfo-1.13-lp152.5.3.1 libxcb-screensaver0-32bit-1.13-lp152.5.3.1 libxcb-screensaver0-32bit-debuginfo-1.13-lp152.5.3.1 libxcb-shape0-32bit-1.13-lp152.5.3.1 libxcb-shape0-32bit-debuginfo-1.13-lp152.5.3.1 libxcb-shm0-32bit-1.13-lp152.5.3.1 libxcb-shm0-32bit-debuginfo-1.13-lp152.5.3.1 libxcb-sync1-32bit-1.13-lp152.5.3.1 libxcb-sync1-32bit-debuginfo-1.13-lp152.5.3.1 libxcb-xf86dri0-32bit-1.13-lp152.5.3.1 libxcb-xf86dri0-32bit-debuginfo-1.13-lp152.5.3.1 libxcb-xfixes0-32bit-1.13-lp152.5.3.1 libxcb-xfixes0-32bit-debuginfo-1.13-lp152.5.3.1 libxcb-xinerama0-32bit-1.13-lp152.5.3.1 libxcb-xinerama0-32bit-debuginfo-1.13-lp152.5.3.1 libxcb-xinput0-32bit-1.13-lp152.5.3.1 libxcb-xinput0-32bit-debuginfo-1.13-lp152.5.3.1 libxcb-xkb1-32bit-1.13-lp152.5.3.1 libxcb-xkb1-32bit-debuginfo-1.13-lp152.5.3.1 libxcb-xtest0-32bit-1.13-lp152.5.3.1 libxcb-xtest0-32bit-debuginfo-1.13-lp152.5.3.1 libxcb-xv0-32bit-1.13-lp152.5.3.1 libxcb-xv0-32bit-debuginfo-1.13-lp152.5.3.1 libxcb-xvmc0-32bit-1.13-lp152.5.3.1 libxcb-xvmc0-32bit-debuginfo-1.13-lp152.5.3.1 libxcb1-32bit-1.13-lp152.5.3.1 libxcb1-32bit-debuginfo-1.13-lp152.5.3.1 - openSUSE Leap 15.2 (noarch): libX11-data-1.6.5-lp152.5.3.1 libxcb-devel-doc-1.13-lp152.5.3.1 References: https://www.suse.com/security/cve/CVE-2020-14344.html https://bugzilla.suse.com/1174628

1 0

openSUSE-RU-2020:1165-1: moderate: Recommended update for ocfs2-tools
by maintenance＠opensuse.org 08 Aug '20

08 Aug '20

openSUSE Recommended Update: Recommended update for ocfs2-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1165-1 Rating: moderate References: #1170530 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ocfs2-tools fixes the following issue: - Fix debugfs.ocfs2 error on devices with sector size 4096 (bsc#1170530) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1165=1 Package List: - openSUSE Leap 15.2 (x86_64): ocfs2-tools-1.8.5-lp152.7.3.1 ocfs2-tools-debuginfo-1.8.5-lp152.7.3.1 ocfs2-tools-debugsource-1.8.5-lp152.7.3.1 ocfs2-tools-devel-1.8.5-lp152.7.3.1 ocfs2-tools-devel-static-1.8.5-lp152.7.3.1 ocfs2-tools-o2cb-1.8.5-lp152.7.3.1 ocfs2-tools-o2cb-debuginfo-1.8.5-lp152.7.3.1 References: https://bugzilla.suse.com/1170530

1 0

openSUSE-RU-2020:1163-1: moderate: Recommended update for opus
by maintenance＠opensuse.org 08 Aug '20

08 Aug '20

openSUSE Recommended Update: Recommended update for opus ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1163-1 Rating: moderate References: #1172526 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for opus fixes the following issues: - Fix for an issue when the 'CELTDecoder' can be larger than 21 and cauese crash by builds with custom modes or hardening. (bsc#1172526) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1163=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libopus-devel-1.3.1-lp152.2.3.1 libopus0-1.3.1-lp152.2.3.1 libopus0-debuginfo-1.3.1-lp152.2.3.1 opus-debugsource-1.3.1-lp152.2.3.1 - openSUSE Leap 15.2 (x86_64): libopus0-32bit-1.3.1-lp152.2.3.1 libopus0-32bit-debuginfo-1.3.1-lp152.2.3.1 References: https://bugzilla.suse.com/1172526

1 0

openSUSE-SU-2020:1162-1: important: Security update for libX11
by opensuse-security＠opensuse.org 07 Aug '20

07 Aug '20

openSUSE Security Update: Security update for libX11 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1162-1 Rating: important References: #1174628 Cross-References: CVE-2020-14344 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libX11 fixes the following issues: - Fixed XIM client heap overflows (CVE-2020-14344, bsc#1174628) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1162=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libX11-6-1.6.5-lp151.4.3.1 libX11-6-debuginfo-1.6.5-lp151.4.3.1 libX11-debugsource-1.6.5-lp151.4.3.1 libX11-devel-1.6.5-lp151.4.3.1 libX11-xcb1-1.6.5-lp151.4.3.1 libX11-xcb1-debuginfo-1.6.5-lp151.4.3.1 libxcb-composite0-1.13-lp151.4.3.1 libxcb-composite0-debuginfo-1.13-lp151.4.3.1 libxcb-damage0-1.13-lp151.4.3.1 libxcb-damage0-debuginfo-1.13-lp151.4.3.1 libxcb-debugsource-1.13-lp151.4.3.1 libxcb-devel-1.13-lp151.4.3.1 libxcb-dpms0-1.13-lp151.4.3.1 libxcb-dpms0-debuginfo-1.13-lp151.4.3.1 libxcb-dri2-0-1.13-lp151.4.3.1 libxcb-dri2-0-debuginfo-1.13-lp151.4.3.1 libxcb-dri3-0-1.13-lp151.4.3.1 libxcb-dri3-0-debuginfo-1.13-lp151.4.3.1 libxcb-glx0-1.13-lp151.4.3.1 libxcb-glx0-debuginfo-1.13-lp151.4.3.1 libxcb-present0-1.13-lp151.4.3.1 libxcb-present0-debuginfo-1.13-lp151.4.3.1 libxcb-randr0-1.13-lp151.4.3.1 libxcb-randr0-debuginfo-1.13-lp151.4.3.1 libxcb-record0-1.13-lp151.4.3.1 libxcb-record0-debuginfo-1.13-lp151.4.3.1 libxcb-render0-1.13-lp151.4.3.1 libxcb-render0-debuginfo-1.13-lp151.4.3.1 libxcb-res0-1.13-lp151.4.3.1 libxcb-res0-debuginfo-1.13-lp151.4.3.1 libxcb-screensaver0-1.13-lp151.4.3.1 libxcb-screensaver0-debuginfo-1.13-lp151.4.3.1 libxcb-shape0-1.13-lp151.4.3.1 libxcb-shape0-debuginfo-1.13-lp151.4.3.1 libxcb-shm0-1.13-lp151.4.3.1 libxcb-shm0-debuginfo-1.13-lp151.4.3.1 libxcb-sync1-1.13-lp151.4.3.1 libxcb-sync1-debuginfo-1.13-lp151.4.3.1 libxcb-xf86dri0-1.13-lp151.4.3.1 libxcb-xf86dri0-debuginfo-1.13-lp151.4.3.1 libxcb-xfixes0-1.13-lp151.4.3.1 libxcb-xfixes0-debuginfo-1.13-lp151.4.3.1 libxcb-xinerama0-1.13-lp151.4.3.1 libxcb-xinerama0-debuginfo-1.13-lp151.4.3.1 libxcb-xinput0-1.13-lp151.4.3.1 libxcb-xinput0-debuginfo-1.13-lp151.4.3.1 libxcb-xkb1-1.13-lp151.4.3.1 libxcb-xkb1-debuginfo-1.13-lp151.4.3.1 libxcb-xtest0-1.13-lp151.4.3.1 libxcb-xtest0-debuginfo-1.13-lp151.4.3.1 libxcb-xv0-1.13-lp151.4.3.1 libxcb-xv0-debuginfo-1.13-lp151.4.3.1 libxcb-xvmc0-1.13-lp151.4.3.1 libxcb-xvmc0-debuginfo-1.13-lp151.4.3.1 libxcb1-1.13-lp151.4.3.1 libxcb1-debuginfo-1.13-lp151.4.3.1 - openSUSE Leap 15.1 (noarch): libX11-data-1.6.5-lp151.4.3.1 libxcb-devel-doc-1.13-lp151.4.3.1 - openSUSE Leap 15.1 (x86_64): libX11-6-32bit-1.6.5-lp151.4.3.1 libX11-6-32bit-debuginfo-1.6.5-lp151.4.3.1 libX11-devel-32bit-1.6.5-lp151.4.3.1 libX11-xcb1-32bit-1.6.5-lp151.4.3.1 libX11-xcb1-32bit-debuginfo-1.6.5-lp151.4.3.1 libxcb-composite0-32bit-1.13-lp151.4.3.1 libxcb-composite0-32bit-debuginfo-1.13-lp151.4.3.1 libxcb-damage0-32bit-1.13-lp151.4.3.1 libxcb-damage0-32bit-debuginfo-1.13-lp151.4.3.1 libxcb-devel-32bit-1.13-lp151.4.3.1 libxcb-dpms0-32bit-1.13-lp151.4.3.1 libxcb-dpms0-32bit-debuginfo-1.13-lp151.4.3.1 libxcb-dri2-0-32bit-1.13-lp151.4.3.1 libxcb-dri2-0-32bit-debuginfo-1.13-lp151.4.3.1 libxcb-dri3-0-32bit-1.13-lp151.4.3.1 libxcb-dri3-0-32bit-debuginfo-1.13-lp151.4.3.1 libxcb-glx0-32bit-1.13-lp151.4.3.1 libxcb-glx0-32bit-debuginfo-1.13-lp151.4.3.1 libxcb-present0-32bit-1.13-lp151.4.3.1 libxcb-present0-32bit-debuginfo-1.13-lp151.4.3.1 libxcb-randr0-32bit-1.13-lp151.4.3.1 libxcb-randr0-32bit-debuginfo-1.13-lp151.4.3.1 libxcb-record0-32bit-1.13-lp151.4.3.1 libxcb-record0-32bit-debuginfo-1.13-lp151.4.3.1 libxcb-render0-32bit-1.13-lp151.4.3.1 libxcb-render0-32bit-debuginfo-1.13-lp151.4.3.1 libxcb-res0-32bit-1.13-lp151.4.3.1 libxcb-res0-32bit-debuginfo-1.13-lp151.4.3.1 libxcb-screensaver0-32bit-1.13-lp151.4.3.1 libxcb-screensaver0-32bit-debuginfo-1.13-lp151.4.3.1 libxcb-shape0-32bit-1.13-lp151.4.3.1 libxcb-shape0-32bit-debuginfo-1.13-lp151.4.3.1 libxcb-shm0-32bit-1.13-lp151.4.3.1 libxcb-shm0-32bit-debuginfo-1.13-lp151.4.3.1 libxcb-sync1-32bit-1.13-lp151.4.3.1 libxcb-sync1-32bit-debuginfo-1.13-lp151.4.3.1 libxcb-xf86dri0-32bit-1.13-lp151.4.3.1 libxcb-xf86dri0-32bit-debuginfo-1.13-lp151.4.3.1 libxcb-xfixes0-32bit-1.13-lp151.4.3.1 libxcb-xfixes0-32bit-debuginfo-1.13-lp151.4.3.1 libxcb-xinerama0-32bit-1.13-lp151.4.3.1 libxcb-xinerama0-32bit-debuginfo-1.13-lp151.4.3.1 libxcb-xinput0-32bit-1.13-lp151.4.3.1 libxcb-xinput0-32bit-debuginfo-1.13-lp151.4.3.1 libxcb-xkb1-32bit-1.13-lp151.4.3.1 libxcb-xkb1-32bit-debuginfo-1.13-lp151.4.3.1 libxcb-xtest0-32bit-1.13-lp151.4.3.1 libxcb-xtest0-32bit-debuginfo-1.13-lp151.4.3.1 libxcb-xv0-32bit-1.13-lp151.4.3.1 libxcb-xv0-32bit-debuginfo-1.13-lp151.4.3.1 libxcb-xvmc0-32bit-1.13-lp151.4.3.1 libxcb-xvmc0-32bit-debuginfo-1.13-lp151.4.3.1 libxcb1-32bit-1.13-lp151.4.3.1 libxcb1-32bit-debuginfo-1.13-lp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2020-14344.html https://bugzilla.suse.com/1174628

1 0

openSUSE-RU-2020:1159-1: moderate: Recommended update for ocfs2-tools
by maintenance＠opensuse.org 07 Aug '20

07 Aug '20

openSUSE Recommended Update: Recommended update for ocfs2-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1159-1 Rating: moderate References: #1170530 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ocfs2-tools fixes the following issue: - Fix debugfs.ocfs2 error on devices with sector size 4096 (bsc#1170530) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1159=1 Package List: - openSUSE Leap 15.1 (x86_64): ocfs2-tools-1.8.5-lp151.6.3.1 ocfs2-tools-debuginfo-1.8.5-lp151.6.3.1 ocfs2-tools-debugsource-1.8.5-lp151.6.3.1 ocfs2-tools-devel-1.8.5-lp151.6.3.1 ocfs2-tools-devel-static-1.8.5-lp151.6.3.1 ocfs2-tools-o2cb-1.8.5-lp151.6.3.1 ocfs2-tools-o2cb-debuginfo-1.8.5-lp151.6.3.1 References: https://bugzilla.suse.com/1170530

1 0

openSUSE-RU-2020:1158-1: Recommended update for ovmf
by maintenance＠opensuse.org 07 Aug '20

07 Aug '20

openSUSE Recommended Update: Recommended update for ovmf ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1158-1 Rating: low References: #1174543 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ovmf rebuilds with the new UEFI signing key. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1158=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): ovmf-201911-lp152.6.2.1 ovmf-tools-201911-lp152.6.2.1 - openSUSE Leap 15.2 (noarch): qemu-ovmf-ia32-201911-lp152.6.2.1 qemu-ovmf-x86_64-201911-lp152.6.2.1 - openSUSE Leap 15.2 (x86_64): qemu-ovmf-x86_64-debug-201911-lp152.6.2.1 References: https://bugzilla.suse.com/1174543

1 0

openSUSE-SU-2020:1161-1: Security update of chromium
by opensuse-security＠opensuse.org 07 Aug '20

07 Aug '20

openSUSE Security Update: Security update of chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1161-1 Rating: low References: #1174582 Cross-References: CVE-2020-6532 CVE-2020-6537 CVE-2020-6538 CVE-2020-6539 CVE-2020-6540 CVE-2020-6541 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: Chromium was updated to 84.0.4147.105 (boo#1174582): * CVE-2020-6537: Type Confusion in V8 * CVE-2020-6538: Inappropriate implementation in WebView * CVE-2020-6532: Use after free in SCTP * CVE-2020-6539: Use after free in CSS * CVE-2020-6540: Heap buffer overflow in Skia * CVE-2020-6541: Use after free in WebUSB This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1161=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 x86_64): chromedriver-84.0.4147.105-bp151.3.97.1 chromium-84.0.4147.105-bp151.3.97.1 References: https://www.suse.com/security/cve/CVE-2020-6532.html https://www.suse.com/security/cve/CVE-2020-6537.html https://www.suse.com/security/cve/CVE-2020-6538.html https://www.suse.com/security/cve/CVE-2020-6539.html https://www.suse.com/security/cve/CVE-2020-6540.html https://www.suse.com/security/cve/CVE-2020-6541.html https://bugzilla.suse.com/1174582

1 0

openSUSE-RU-2020:1160-1: moderate: Recommended update for opus
by maintenance＠opensuse.org 07 Aug '20

07 Aug '20

openSUSE Recommended Update: Recommended update for opus ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1160-1 Rating: moderate References: #1172526 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for opus fixes the following issues: - Fix for an issue when the 'CELTDecoder' can be larger than 21 and cauese crash by builds with custom modes or hardening. (bsc#1172526) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1160=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libopus-devel-1.3.1-lp151.3.6.1 libopus0-1.3.1-lp151.3.6.1 libopus0-debuginfo-1.3.1-lp151.3.6.1 opus-debugsource-1.3.1-lp151.3.6.1 - openSUSE Leap 15.1 (x86_64): libopus0-32bit-1.3.1-lp151.3.6.1 libopus0-32bit-debuginfo-1.3.1-lp151.3.6.1 References: https://bugzilla.suse.com/1172526

1 0

openSUSE-RU-2020:1157-1: Recommended update for crmsh
by maintenance＠opensuse.org 07 Aug '20

07 Aug '20

openSUSE Recommended Update: Recommended update for crmsh ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1157-1 Rating: low References: #1174588 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for crmsh fixes the following issues: - Fix for corosync to handle the return code of 'corosync-quorumtool' correctly. (bsc#1174588) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1157=1 Package List: - openSUSE Leap 15.2 (noarch): crmsh-4.2.0+git.1595940615.c452cc00-lp152.4.11.1 crmsh-scripts-4.2.0+git.1595940615.c452cc00-lp152.4.11.1 crmsh-test-4.2.0+git.1595940615.c452cc00-lp152.4.11.1 References: https://bugzilla.suse.com/1174588

1 0

openSUSE-SU-2020:1156-1: moderate: Security update for python-rtslib-fb
by opensuse-security＠opensuse.org 07 Aug '20

07 Aug '20

openSUSE Security Update: Security update for python-rtslib-fb ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1156-1 Rating: moderate References: #1173257 Cross-References: CVE-2020-14019 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-rtslib-fb fixes the following issues: - Update to version v2.1.73 (bsc#1173257 CVE-2020-14019): * version 2.1.73 * save_to_file: fix fd open mode * saveconfig: copy temp configfile with permissions * saveconfig: open the temp configfile with modes set * Fix "is not" with a literal SyntaxWarning * Fix an incorrect config path in two comments * version 2.1.72 * Do not change dbroot after drivers have been registered * Remove '_if_needed' from RTSRoot._set_dbroot()'s name Replacing old tarball with python-rtslib-fb-v2.1.73.tar.xz This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1156=1 Package List: - openSUSE Leap 15.2 (noarch): python2-rtslib-fb-2.1.73-lp152.2.3.1 python3-rtslib-fb-2.1.73-lp152.2.3.1 References: https://www.suse.com/security/cve/CVE-2020-14019.html https://bugzilla.suse.com/1173257

1 0

openSUSE-SU-2020:1155-1: important: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 07 Aug '20

07 Aug '20

openSUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1155-1 Rating: important References: #1174538 Cross-References: CVE-2020-15652 CVE-2020-15653 CVE-2020-15654 CVE-2020-15655 CVE-2020-15656 CVE-2020-15657 CVE-2020-15658 CVE-2020-15659 CVE-2020-6463 CVE-2020-6514 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes 10 vulnerabilities is now available. Description: This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 78.1.0 ESR * Fixed: Various stability, functionality, and security fixes (bsc#1174538) * CVE-2020-15652: Potential leak of redirect targets when loading scripts in a worker * CVE-2020-6514: WebRTC data channel leaks internal address to peer * CVE-2020-15655: Extension APIs could be used to bypass Same-Origin Policy * CVE-2020-15653: Bypassing iframe sandbox when allowing popups * CVE-2020-6463: Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture * CVE-2020-15656: Type confusion for special arguments in IonMonkey * CVE-2020-15658: Overriding file type when saving to disk * CVE-2020-15657: DLL hijacking due to incorrect loading path * CVE-2020-15654: Custom cursor can overlay user interface * CVE-2020-15659: Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1 This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1155=1 Package List: - openSUSE Leap 15.2 (x86_64): MozillaFirefox-78.1.0-lp152.2.12.1 MozillaFirefox-branding-upstream-78.1.0-lp152.2.12.1 MozillaFirefox-buildsymbols-78.1.0-lp152.2.12.1 MozillaFirefox-debuginfo-78.1.0-lp152.2.12.1 MozillaFirefox-debugsource-78.1.0-lp152.2.12.1 MozillaFirefox-devel-78.1.0-lp152.2.12.1 MozillaFirefox-translations-common-78.1.0-lp152.2.12.1 MozillaFirefox-translations-other-78.1.0-lp152.2.12.1 References: https://www.suse.com/security/cve/CVE-2020-15652.html https://www.suse.com/security/cve/CVE-2020-15653.html https://www.suse.com/security/cve/CVE-2020-15654.html https://www.suse.com/security/cve/CVE-2020-15655.html https://www.suse.com/security/cve/CVE-2020-15656.html https://www.suse.com/security/cve/CVE-2020-15657.html https://www.suse.com/security/cve/CVE-2020-15658.html https://www.suse.com/security/cve/CVE-2020-15659.html https://www.suse.com/security/cve/CVE-2020-6463.html https://www.suse.com/security/cve/CVE-2020-6514.html https://bugzilla.suse.com/1174538

1 0

openSUSE-SU-2020:1154-1: Security update of chromium
by opensuse-security＠opensuse.org 06 Aug '20

06 Aug '20

openSUSE Security Update: Security update of chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1154-1 Rating: low References: #1174582 Cross-References: CVE-2020-6532 CVE-2020-6537 CVE-2020-6538 CVE-2020-6539 CVE-2020-6540 CVE-2020-6541 Affected Products: openSUSE Leap 15.2 openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: Chromium was updated to 84.0.4147.105 (boo#1174582): * CVE-2020-6537: Type Confusion in V8 * CVE-2020-6538: Inappropriate implementation in WebView * CVE-2020-6532: Use after free in SCTP * CVE-2020-6539: Use after free in CSS * CVE-2020-6540: Heap buffer overflow in Skia * CVE-2020-6541: Use after free in WebUSB Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1154=1 - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1154=1 Package List: - openSUSE Leap 15.2 (x86_64): chromedriver-84.0.4147.105-lp152.2.9.1 chromedriver-debuginfo-84.0.4147.105-lp152.2.9.1 chromium-84.0.4147.105-lp152.2.9.1 chromium-debuginfo-84.0.4147.105-lp152.2.9.1 chromium-debugsource-84.0.4147.105-lp152.2.9.1 - openSUSE Leap 15.1 (x86_64): chromedriver-84.0.4147.105-lp151.2.112.1 chromedriver-debuginfo-84.0.4147.105-lp151.2.112.1 chromium-84.0.4147.105-lp151.2.112.1 chromium-debuginfo-84.0.4147.105-lp151.2.112.1 chromium-debugsource-84.0.4147.105-lp151.2.112.1 References: https://www.suse.com/security/cve/CVE-2020-6532.html https://www.suse.com/security/cve/CVE-2020-6537.html https://www.suse.com/security/cve/CVE-2020-6538.html https://www.suse.com/security/cve/CVE-2020-6539.html https://www.suse.com/security/cve/CVE-2020-6540.html https://www.suse.com/security/cve/CVE-2020-6541.html https://bugzilla.suse.com/1174582

1 0

openSUSE-SU-2020:1153-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 06 Aug '20

06 Aug '20

openSUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1153-1 Rating: important References: #1051510 #1065729 #1071995 #1085030 #1111666 #1112178 #1113956 #1114279 #1120163 #1144333 #1148868 #1150660 #1151927 #1152107 #1152624 #1158983 #1159058 #1161016 #1162002 #1162063 #1163309 #1166985 #1167104 #1168081 #1168959 #1169194 #1169514 #1169771 #1169795 #1170011 #1170442 #1170592 #1170617 #1170618 #1171124 #1171424 #1171529 #1171530 #1171558 #1171732 #1171739 #1171743 #1171753 #1171759 #1171835 #1171841 #1171868 #1171904 #1171988 #1172247 #1172257 #1172344 #1172458 #1172484 #1172537 #1172538 #1172687 #1172719 #1172759 #1172775 #1172781 #1172782 #1172783 #1172871 #1172872 #1172963 #1172999 #1173060 #1173074 #1173146 #1173265 #1173280 #1173284 #1173428 #1173514 #1173567 #1173573 #1173659 #1173746 #1173818 #1173820 #1173825 #1173826 #1173833 #1173838 #1173839 #1173845 #1173857 #1174070 #1174113 #1174115 #1174122 #1174123 #1174205 #1174296 #1174343 #1174356 #1174409 #1174438 #1174462 #1174543 #1174549 #1174658 #1174685 #1174757 #1174840 #1174841 #1174843 #1174844 #1174845 #1174887 Cross-References: CVE-2019-16746 CVE-2019-20810 CVE-2019-20908 CVE-2020-0305 CVE-2020-10135 CVE-2020-10766 CVE-2020-10767 CVE-2020-10768 CVE-2020-10769 CVE-2020-10773 CVE-2020-10781 CVE-2020-12771 CVE-2020-12888 CVE-2020-13974 CVE-2020-14331 CVE-2020-14416 CVE-2020-15393 CVE-2020-15780 CVE-2020-16166 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves 19 vulnerabilities and has 92 fixes is now available. Description: The openSUSE Leap 15.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-16746: An issue was discovered in net/wireless/nl80211.c where it did not check the length of variable elements in a beacon head, leading to a buffer overflow (bnc#1152107 1173659). - CVE-2019-20810: go7007_snd_init in drivers/media/usb/go7007/snd-go7007.c did not call snd_card_free for a failure path, which causes a memory leak, aka CID-9453264ef586 (bnc#1172458). - CVE-2019-20908: An issue was discovered in drivers/firmware/efi/efi.c where Incorrect access permissions for the efivar_ssdt ACPI variable could be used by attackers to bypass lockdown or secure boot restrictions, aka CID-1957a85b0032 (bnc#1173567). - CVE-2020-0305: In cdev_get of char_dev.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation (bnc#1174462). - CVE-2020-10135: Legacy pairing and secure-connections pairing authentication in Bluetooth® BR/EDR Core Specification v5.2 and earlier may have allowed an unauthenticated user to complete authentication without pairing credentials via adjacent access. An unauthenticated, adjacent attacker could impersonate a Bluetooth BR/EDR master or slave to pair with a previously paired remote device to successfully complete the authentication procedure without knowing the link key (bnc#1171988). - CVE-2020-10766: Fixed rogue cross-process SSBD shutdown. Linux scheduler logical bug allowed an attacker to turn off the SSBD protection. (bnc#1172781). - CVE-2020-10767: Fixed indirect Branch Prediction Barrier is force-disabled when STIBP is unavailable or enhanced IBRS is available. (bnc#1172782). - CVE-2020-10768: Fixed indirect branch speculation can be enabled after it was force-disabled by the PR_SPEC_FORCE_DISABLE prctl command. (bnc#1172783). - CVE-2020-10769: A buffer over-read flaw was found in crypto_authenc_extractkeys in crypto/authenc.c in the IPsec Cryptographic algorithm's module, authenc. When a payload longer than 4 bytes, and is not following 4-byte alignment boundary guidelines, it causes a buffer over-read threat, leading to a system crash. This flaw allowed a local attacker with user privileges to cause a denial of service (bnc#1173265). - CVE-2020-10773: Fixed a kernel stack information leak on s390/s390x. (bnc#1172999). - CVE-2020-10781: A zram sysfs resource consumption was fixed. (bnc#1173074). - CVE-2020-12771: btree_gc_coalesce in drivers/md/bcache/btree.c has a deadlock if a coalescing operation fails (bnc#1171732). - CVE-2020-12888: The VFIO PCI driver mishandled attempts to access disabled memory space (bnc#1171868). - CVE-2020-13974: drivers/tty/vt/keyboard.c had an integer overflow if k_ascii was called several times in a row, aka CID-b86dab054059. (bnc#1172775). - CVE-2020-14331: Fixed a buffer over write in vgacon_scroll (bnc#1174205). - CVE-2020-14331: Fixed an out of bounds write to the vgacon scrollback buffer (bsc#1174205). - CVE-2020-14416: A race condition in tty->disc_data handling in the slip and slcan line discipline could lead to a use-after-free, aka CID-0ace17d56824. This affects drivers/net/slip/slip.c and drivers/net/can/slcan.c (bnc#1162002). - CVE-2020-15393: usbtest_disconnect in drivers/usb/misc/usbtest.c has a memory leak, aka CID-28ebeb8db770 (bnc#1173514). - CVE-2020-15780: An issue was discovered in drivers/acpi/acpi_configfs.c where injection of malicious ACPI tables via configfs could be used by attackers to bypass lockdown and secure boot restrictions, aka CID-75b0cea7bf30 (bnc#1173573). - CVE-2020-16166: The Linux kernel allowed remote attackers to make observations that help to obtain sensitive information about the internal state of the network RNG, aka CID-f227e3ec3b5c. This is related to drivers/char/random.c and kernel/time/timer.c (bnc#1174757). The following non-security bugs were fixed: - ACPI: GED: add support for _Exx / _Lxx handler methods (bsc#1111666). - ACPI: GED: use correct trigger type field in _Exx / _Lxx handling (bsc#1111666). - ACPI: NFIT: Fix unlock on error in scrub_show() (bsc#1171753). - ACPI: PM: Avoid using power resources if there are none for D0 (bsc#1051510). - ACPI: sysfs: Fix pm_profile_attr type (bsc#1111666). - ACPI: video: Use native backlight on Acer Aspire 5783z (bsc#1111666). - ACPI: video: Use native backlight on Acer TravelMate 5735Z (bsc#1111666). - ALSA: es1688: Add the missed snd_card_free() (bsc#1051510). - ALSA: hda: Add ElkhartLake HDMI codec vid (bsc#1111666). - ALSA: hda: add sienna_cichlid audio asic id for sienna_cichlid up (bsc#1111666). - ALSA: hda: fix NULL pointer dereference during suspend (git-fixes). - ALSA: hda/hdmi - enable runtime pm for newer AMD display audio (bsc#1111666). - ALSA: hda - let hs_mic be picked ahead of hp_mic (bsc#1111666). - ALSA: hda/realtek - add a pintbl quirk for several Lenovo machines (bsc#1111666). - ALSA: hda/realtek - Add LED class support for micmute LED (bsc#1111666). - ALSA: hda/realtek: Add mute LED and micmute LED support for HP systems (bsc#1111666). - ALSA: hda/realtek - Add quirk for Lenovo Carbon X1 8th gen (bsc#1111666). - ALSA: hda/realtek - Add quirk for MSI GE63 laptop (bsc#1111666). - ALSA: hda/realtek - Add quirk for MSI GL63 (bsc#1111666). - ALSA: hda/realtek - change to suitable link model for ASUS platform (bsc#1111666). - ALSA: hda/realtek - Check headset type by unplug and resume (bsc#1111666). - ALSA: hda/realtek - Enable audio jacks of Acer vCopperbox with ALC269VC (bsc#1111666). - ALSA: hda/realtek: Enable headset mic of Acer C20-820 with ALC269VC (bsc#1111666). - ALSA: hda/realtek: Enable headset mic of Acer TravelMate B311R-31 with ALC256 (bsc#1111666). - ALSA: hda/realtek: Enable headset mic of Acer Veriton N4660G with ALC269VC (bsc#1111666). - ALSA: hda/realtek: enable headset mic of ASUS ROG Zephyrus G14(G401) series with ALC289 (bsc#1111666). - ALSA: hda/realtek: enable headset mic of ASUS ROG Zephyrus G15(GA502) series with ALC289 (bsc#1111666). - ALSA: hda/realtek - Enable micmute LED on and HP system (bsc#1111666). - ALSA: hda/realtek - Enable Speaker for ASUS UX533 and UX534 (bsc#1111666). - ALSA: hda/realtek - Enable Speaker for ASUS UX563 (bsc#1111666). - ALSA: hda/realtek: Fix add a "ultra_low_power" function for intel reference board (alc256) (bsc#1111666). - ALSA: hda/realtek: Fixed ALC298 sound bug by adding quirk for Samsung Notebook Pen S (bsc#1111666). - ALSA: hda/realtek - Fixed HP right speaker no sound (bsc#1111666). - ALSA: hda/realtek - Fix Lenovo Thinkpad X1 Carbon 7th quirk subdevice id (bsc#1111666). - ALSA: hda/realtek - Fix unused variable warning w/o CONFIG_LEDS_TRIGGER_AUDIO (bsc#1111666). - ALSA: hda/realtek - Introduce polarity for micmute LED GPIO (bsc#1111666). - ALSA: hda/realtek: typo_fix: enable headset mic of ASUS ROG Zephyrus G14(GA401) series with ALC289 (bsc#1111666). - ALSA: hda: Workaround for spurious wakeups on some Intel platforms (git-fixes). - ALSA: lx6464es - add support for LX6464ESe pci express variant (bsc#1111666). - ALSA: opl3: fix infoleak in opl3 (bsc#1111666). - ALSA: pcm: disallow linking stream to itself (bsc#1111666). - ALSA: usb-audio: Add duplex sound support for USB devices using implicit feedback (bsc#1111666). - ALSA: usb-audio: Add Pioneer DJ DJM-900NXS2 support (bsc#1111666). - ALSA: usb-audio: add quirk for MacroSilicon MS2109 (bsc#1111666). - ALSA: usb-audio: Add vendor, product and profile name for HP Thunderbolt Dock (bsc#1111666). - ALSA: usb-audio: Clean up quirk entries with macros (bsc#1111666). - ALSA: usb-audio: Fix inconsistent card PM state after resume (bsc#1111666). - ALSA: usb-audio: Fix packet size calculation (bsc#1111666). - ALSA: usb-audio: Fix racy list management in output queue (bsc#1111666). - ALSA: usb-audio: Improve frames size computation (bsc#1111666). - ALSA: usb-audio: Manage auto-pm of all bundled interfaces (bsc#1111666). - ALSA: usb-audio: Use the new macro for HP Dock rename quirks (bsc#1111666). - amdgpu: a NULL ->mm does not mean a thread is a kthread (git-fixes). - arm64: map FDT as RW for early_init_dt_scan() (jsc#SLE-12423). - ath9k: Fix general protection fault in ath9k_hif_usb_rx_cb (bsc#1111666). - ath9k: Fix use-after-free Read in ath9k_wmi_ctrl_rx (bsc#1111666). - ath9k: Fix use-after-free Write in ath9k_htc_rx_msg (bsc#1111666). - ath9x: Fix stack-out-of-bounds Write in ath9k_hif_usb_rx_cb (bsc#1111666). - ax25: fix setsockopt(SO_BINDTODEVICE) (networking-stable-20_05_27). - b43: Fix connection problem with WPA3 (bsc#1111666). - b43_legacy: Fix connection problem with WPA3 (bsc#1111666). - bcache: Fix an error code in bch_dump_read() (git fixes (block drivers)). - be2net: fix link failure after ethtool offline test (git-fixes). - block: Fix use-after-free in blkdev_get() (bsc#1174843). - block: nr_sects_write(): Disable preemption on seqcount write (bsc#1173818). - block: remove QUEUE_FLAG_STACKABLE (git fixes (block drivers)). - block: sed-opal: fix sparse warning: convert __be64 data (git fixes (block drivers)). - Bluetooth: Add SCO fallback for invalid LMP parameters error (bsc#1111666). - bnxt_en: Fix AER reset logic on 57500 chips (git-fixes). - bnxt_en: Fix ethtool selftest crash under error conditions (git-fixes). - bnxt_en: Fix handling FRAG_ERR when NVM_INSTALL_UPDATE cmd fails (git-fixes). - bnxt_en: Fix ipv6 RFS filter matching logic (git-fixes). - bnxt_en: fix NULL dereference in case SR-IOV configuration fails (git-fixes). - bnxt_en: Fix VF anti-spoof filter setup (networking-stable-20_05_12). - bnxt_en: Fix VLAN acceleration handling in bnxt_fix_features() (networking-stable-20_05_12). - bnxt_en: Improve AER slot reset (networking-stable-20_05_12). - brcmfmac: fix wrong location to get firmware feature (bsc#1111666). - brcmfmac: Transform compatible string for FW loading (bsc#1169771). - btrfs: add assertions for tree == inode->io_tree to extent IO helpers (bsc#1174438). - btrfs: add new helper btrfs_lock_and_flush_ordered_range (bsc#1174438). - btrfs: Always use a cached extent_state in btrfs_lock_and_flush_ordered_range (bsc#1174438). - btrfs: change timing for qgroup reserved space for ordered extents to fix reserved space leak (bsc#1172247). - btrfs: do not zero f_bavail if we have available space (bsc#1168081). - btrfs: drop argument tree from btrfs_lock_and_flush_ordered_range (bsc#1174438). - btrfs: file: reserve qgroup space after the hole punch range is locked (bsc#1172247). - btrfs: fix extent_state leak in btrfs_lock_and_flush_ordered_range (bsc#1174438). - btrfs: fix failure of RWF_NOWAIT write into prealloc extent beyond eof (bsc#1174438). - btrfs: fix hang on snapshot creation after RWF_NOWAIT write (bsc#1174438). - btrfs: fix RWF_NOWAIT write not failling when we need to cow (bsc#1174438). - btrfs: fix RWF_NOWAIT writes blocking on extent locks and waiting for IO (bsc#1174438). - btrfs: inode: move qgroup reserved space release to the callers of insert_reserved_file_extent() (bsc#1172247). - btrfs: inode: refactor the parameters of insert_reserved_file_extent() (bsc#1172247). - btrfs: make btrfs_ordered_extent naming consistent with btrfs_file_extent_item (bsc#1172247). - btrfs: qgroup: allow to unreserve range without releasing other ranges (bsc#1120163). - btrfs: qgroup: Fix a bug that prevents qgroup to be re-enabled after disable (bsc#1172247). - btrfs: qgroup: fix data leak caused by race between writeback and truncate (bsc#1172247). - btrfs: qgroup: remove ASYNC_COMMIT mechanism in favor of reserve retry-after-EDQUOT (bsc#1120163). - btrfs: qgroup: try to flush qgroup space when we get -EDQUOT (bsc#1120163). - btrfs: Return EAGAIN if we can't start no snpashot write in check_can_nocow (bsc#1174438). - btrfs: use correct count in btrfs_file_write_iter() (bsc#1174438). - btrfs: Use newly introduced btrfs_lock_and_flush_ordered_range (bsc#1174438). - btrfs: volumes: Remove ENOSPC-prone btrfs_can_relocate() (bsc#1171124). - bus: hisi_lpc: Add .remove method to avoid driver unbind crash (bsc#1174658). - bus: hisi_lpc: Do not fail probe for unrecognised child devices (bsc#1174658). - bus: hisi_lpc: Unregister logical PIO range to avoid potential use-after-free (bsc#1174658). - bus: sunxi-rsb: Return correct data when mixing 16-bit and 8-bit reads (bsc#1111666). - carl9170: remove P2P_GO support (bsc#1111666). - cdc-acm: Add DISABLE_ECHO quirk for Microchip/SMSC chip (git-fixes). - CDC-ACM: heed quirk also in error handling (git-fixes). - ceph: convert mdsc->cap_dirty to a per-session list (bsc#1167104). - ceph: request expedited service on session's last cap flush (bsc#1167104). - cgroup, blkcg: Prepare some symbols for module and !CONFIG_CGROUP usages (bsc#1173857). - char/random: Add a newline at the end of the file (jsc#SLE-12423). - cifs: get rid of unused parameter in reconn_setup_dfs_targets() (bsc#1144333). - cifs: handle hostnames that resolve to same ip in failover (bsc#1144333 bsc#1161016). - cifs: set up next DFS target before generic_ip_connect() (bsc#1144333 bsc#1161016). - clk: bcm2835: Fix return type of bcm2835_register_gate (bsc#1051510). - clk: clk-flexgen: fix clock-critical handling (bsc#1051510). - clk: sunxi: Fix incorrect usage of round_down() (bsc#1051510). - clocksource: dw_apb_timer: Make CPU-affiliation being optional (bsc#1111666). - compat_ioctl: block: handle BLKREPORTZONE/BLKRESETZONE (git fixes (block drivers)). - compat_ioctl: block: handle Persistent Reservations (git fixes (block drivers)). - config: arm64: enable CONFIG_IOMMU_DEFAULT_PASSTHROUGH References: bsc#1174549 - copy_{to,from}_user(): consolidate object size checks (git fixes). - crypto: algboss - do not wait during notifier callback (bsc#1111666). - crypto: algif_skcipher - Cap recv SG list at ctx->used (bsc#1111666). - crypto: caam - update xts sector size for large input length (bsc#1111666). - crypto: cavium/nitrox - Fix 'nitrox_get_first_device()' when ndevlist is fully iterated (bsc#1111666). - crypto: cavium/nitrox - Fix 'nitrox_get_first_device()' when ndevlist is fully iterated (git-fixes). - crypto/chcr: fix for ccm(aes) failed test (bsc#1111666). - crypto: chelsio/chtls: properly set tp->lsndtime (bsc#1111666). - crypto: rockchip - fix scatterlist nents error (git-fixes). - crypto: stm32/crc32 - fix ext4 chksum BUG_ON() (git-fixes). - crypto: talitos - check AES key size (git-fixes). - crypto: talitos - fix ablkcipher for CONFIG_VMAP_STACK (git-fixes). - crypto: talitos - fix IPsec cipher in length (git-fixes). - crypto: talitos - reorder code in talitos_edesc_alloc() (git-fixes). - crypto: virtio: Fix src/dst scatterlist calculation in __virtio_crypto_skcipher_do_req() (git-fixes). - debugfs: Check module state before warning in {full/open}_proxy_open() (bsc#1173746). - devinet: fix memleak in inetdev_init() (networking-stable-20_06_07). - /dev/mem: Add missing memory barriers for devmem_inode (git-fixes). - /dev/mem: Revoke mappings when a driver claims the region (git-fixes). - dlm: remove BUG() before panic() (bsc#1174844). - dmaengine: tegra210-adma: Fix an error handling path in 'tegra_adma_probe()' (bsc#1111666). - dm btree: increase rebalance threshold in __rebalance2() (git fixes (block drivers)). - dm cache: fix a crash due to incorrect work item cancelling (git fixes (block drivers)). - dm crypt: fix benbi IV constructor crash if used in authenticated mode (git fixes (block drivers)). - dm: fix potential for q->make_request_fn NULL pointer (git fixes (block drivers)). - dm space map common: fix to ensure new block isn't already in use (git fixes (block drivers)). - dm: various cleanups to md->queue initialization code (git fixes). - dm verity fec: fix hash block number in verity_fec_decode (git fixes (block drivers)). - dm verity fec: fix memory leak in verity_fec_dtr (git fixes (block drivers)). - dpaa_eth: fix usage as DSA master, try 3 (networking-stable-20_05_27). - driver-core, libnvdimm: Let device subsystems add local lockdep coverage (bsc#1171753) - Drivers: hv: Change flag to write log level in panic msg to false (bsc#1170617, bsc#1170618). - drivers: soc: ti: knav_qmss_queue: Make knav_gp_range_ops static (bsc#1051510). - drm: amd/display: fix Kconfig help text (bsc#1113956) * only fix DEBUG_KERNEL_DC - drm: bridge: adv7511: Extend list of audio sample rates (bsc#1111666). - drm/dp_mst: Increase ACT retry timeout to 3s (bsc#1113956) * context changes - drm: encoder_slave: fix refcouting error for modules (bsc#1111666). - drm: encoder_slave: fix refcouting error for modules (bsc#1114279) - drm/i915/icl+: Fix hotplug interrupt disabling after storm detection (bsc#1112178) - drm/i915: Whitelist context-local timestamp in the gen9 cmdparser (bsc#1111666). - drm/mediatek: Check plane visibility in atomic_update (bsc#1113956) * context changes - drm/msm/dpu: fix error return code in dpu_encoder_init (bsc#1111666). - drm: panel-orientation-quirks: Add quirk for Asus T101HA panel (bsc#1111666). - drm: panel-orientation-quirks: Use generic orientation-data for Acer S1003 (bsc#1111666). - drm/qxl: Use correct notify port address when creating cursor ring (bsc#1113956) - drm/radeon: fix double free (bsc#1113956) - drm/radeon: fix fb_div check in ni_init_smc_spll_table() (bsc#1113956) - drm/sun4i: hdmi ddc clk: Fix size of m divider (bsc#1111666). - drm/tegra: hub: Do not enable orphaned window group (bsc#1111666). - drm/vkms: Hold gem object while still in-use (bsc#1113956) * context changes - e1000: Distribute switch variables for initialization (bsc#1111666). - e1000e: Disable TSO for buffer overrun workaround (bsc#1051510). - e1000e: Do not wake up the system via WOL if device wakeup is disabled (bsc#1051510). - e1000e: Relax condition to trigger reset for ME workaround (bsc#1111666). - EDAC/amd64: Read back the scrub rate PCI register on F15h (bsc#1114279). - efi/memreserve: deal with memreserve entries in unmapped memory (bsc#1174685). - efi/random: Increase size of firmware supplied randomness (jsc#SLE-12423). - efi/random: Treat EFI_RNG_PROTOCOL output as bootloader randomness (jsc#SLE-12423). - efi: READ_ONCE rng seed size before munmap (jsc#SLE-12423). - efi: Reorder pr_notice() with add_device_randomness() call (jsc#SLE-12423). - evm: Check also if *tfm is an error pointer in init_desc() (bsc#1051510). - evm: Fix a small race in init_desc() (bsc#1051510). - ext4: fix a data race at inode->i_blocks (bsc#1171835). - ext4: fix EXT_MAX_EXTENT/INDEX to check for zeroed eh_max (bsc#1174840). - ext4: fix partial cluster initialization when splitting extent (bsc#1173839). - ext4: fix race between ext4_sync_parent() and rename() (bsc#1173838). - ext4, jbd2: ensure panic by fix a race between jbd2 abort and ext4 error handlers (bsc#1173833). - extcon: adc-jack: Fix an error handling path in 'adc_jack_probe()' (bsc#1051510). - fanotify: fix ignore mask logic for events on child and on dir (bsc#1172719). - fat: do not allow to mount if the FAT length == 0 (bsc#1174845). - fdt: add support for rng-seed (jsc#SLE-12423). - fdt: Update CRC check for rng-seed (jsc#SLE-12423). - firmware: imx: scu: Fix corruption of header (git-fixes). - firmware: imx: scu: Fix possible memory leak in imx_scu_probe() (bsc#1111666). - fix multiplication overflow in copy_fdtable() (bsc#1173825). - Fix Patch-mainline tag in the previous zram fix patch - fpga: dfl: fix bug in port reset handshake (git-fixes). - fq_codel: fix TCA_FQ_CODEL_DROP_BATCH_SIZE sanity checks (networking-stable-20_05_12). - gpiolib: Document that GPIO line names are not globally unique (bsc#1051510). - gpu: host1x: Detach driver on unregister (bsc#1111666). - gpu: ipu-v3: pre: do not trigger update if buffer address does not change (bsc#1111666). - HID: hiddev: fix mess in hiddev_open() (git-fixes). - HID: magicmouse: do not set up autorepeat (git-fixes). - HID: sony: Fix for broken buttons on DS3 USB dongles (bsc#1051510). - HISI LPC: Re-Add ACPI child enumeration support (bsc#1174658). - HISI LPC: Stop using MFD APIs (bsc#1174658). - hv_netvsc: Fix netvsc_start_xmit's return type (git-fixes). - hwmon: (acpi_power_meter) Fix potential memory leak in acpi_power_meter_add() (bsc#1111666). - hwmon: (emc2103) fix unable to change fan pwm1_enable attribute (bsc#1111666). - hwmon: (max6697) Make sure the OVERT mask is set correctly (bsc#1111666). - i2c: algo-pca: Add 0x78 as SCL stuck low status for PCA9665 (bsc#1111666). - i2c: eg20t: Load module automatically if ID matches (bsc#1111666). - i2c: mlxcpld: check correct size of maximum RECV_LEN packet (bsc#1111666). - i40e: reduce stack usage in i40e_set_fc (git-fixes). - IB/hfi1: Do not destroy hfi1_wq when the device is shut down (bsc#1174409). - IB/hfi1: Do not destroy link_wq when the device is shut down (bsc#1174409). - ibmveth: Fix max MTU limit (bsc#1173428 ltc#186397). - ibmvnic: continue to init in CRQ reset returns H_CLOSED (bsc#1173280 ltc#185369). - ibmvnic: Flush existing work items before device removal (bsc#1065729). - ibmvnic: Harden device login requests (bsc#1170011 ltc#183538). - iio: buffer: Do not allow buffers without any channels enabled to be activated (bsc#1051510). - iio:health:afe4404 Fix timestamp alignment and prevent data leak (bsc#1111666). - iio:humidity:hdc100x Fix alignment and data leak issues (bsc#1111666). - iio:magnetometer:ak8974: Fix alignment and data leak issues (bsc#1111666). - iio: mma8452: Add missed iio_device_unregister() call in mma8452_probe() (bsc#1111666). - iio: pressure: bmp280: Tolerate IRQ before registering (bsc#1051510). - iio:pressure:ms5611 Fix buffer element alignment (bsc#1111666). - iio: pressure: zpa2326: handle pm_runtime_get_sync failure (bsc#1111666). - ima: Directly assign the ima_default_policy pointer to ima_rules (bsc#1051510). - ima: Fix ima digest hash table key calculation (bsc#1051510). - include/asm-generic/topology.h: guard cpumask_of_node() macro argument (bsc#1148868). - input: i8042 - add Lenovo XiaoXin Air 12 to i8042 nomux list (bsc#1111666). - input: i8042 - Remove special PowerPC handling (git-fixes). - input: synaptics - add a second working PNP_ID for Lenovo T470s (bsc#1111666). - intel_idle: Graceful probe failure when MWAIT is disabled (bsc#1174115). - intel_th: Fix a NULL dereference when hub driver is not loaded (bsc#1111666). - io-mapping: indicate mapping failure (git-fixes). - ipvlan: call dev_change_flags when ipvlan mode is reset (git-fixes). - ixgbevf: Remove limit of 10 entries for unicast filter list (git-fixes). - jbd2: avoid leaking transaction credits when unreserving handle (bsc#1173845). - jbd2: Preserve kABI when adding j_abort_mutex (bsc#1173833). - kabi: hv: prevent struct device_node to become defined (bsc#1172871). - kabi: ppc64le: prevent struct dma_map_ops to become defined (jsc#SLE-12423). - kABI: protect struct mlx5_cmd_work_ent (kabi). - kABI: reintroduce inet_hashtables.h include to l2tp_ip (kabi). - kernfs: fix barrier usage in __kernfs_new_node() (bsc#1111666). - kvm: nVMX: Do not reread VMCS-agnostic state when switching VMCS (bsc#1114279). - kvm: nVMX: Skip IBPB when switching between vmcs01 and vmcs02 (bsc#1114279). - kvm: x86: Fix APIC page invalidation race (bsc#1174122). - kvm: x86: Fix L1TF mitigation for shadow MMU (bsc#1171904). - kvm: x86/mmu: Set mmio_value to '0' if reserved #PF can't be generated (bsc#1171904). - kvm: x86: only do L1TF workaround on affected processors (bsc#1171904). - l2tp: add sk_family checks to l2tp_validate_socket (networking-stable-20_06_07). - l2tp: do not use inet_hash()/inet_unhash() (networking-stable-20_06_07). - libceph: do not omit recovery_deletes in target_copy() (bsc#1174113). - libceph: ignore pool overlay and cache logic on redirects (bsc#1173146). - lib: logic_pio: Add logic_pio_unregister_range() (bsc#1174658). - lib: logic_pio: Avoid possible overlap for unregistering regions (bsc#1174658). - lib: logic_pio: Fix RCU usage (bsc#1174658). - libnvdimm/bus: Fix wait_nvdimm_bus_probe_idle() ABBA deadlock (bsc#1171753). - libnvdimm/bus: Prepare the nd_ioctl() path to be re-entrant (bsc#1171753). - libnvdimm/bus: Stop holding nvdimm_bus_list_mutex over __nd_ioctl() (bsc#1171753). - libnvdimm: cover up changes in struct nvdimm_bus (bsc#1171753). - libnvdimm: cover up nd_pfn_sb changes (bsc#1171759). - libnvdimm/dax: Pick the right alignment default when creating dax devices (bsc#1171759). - libnvdimm/label: Remove the dpa align check (bsc#1171759). - libnvdimm/of_pmem: Provide a unique name for bus provider (bsc#1171739). - libnvdimm/pfn_dev: Add a build check to make sure we notice when struct page size change (bsc#1171743). - libnvdimm/pfn_dev: Add page size and struct page size to pfn superblock (bsc#1171759). - libnvdimm/pfn: Prevent raw mode fallback if pfn-infoblock valid (bsc#1171743). - libnvdimm/pmem: Advance namespace seed for specific probe errors (bsc#1171743). - libnvdimm/region: Initialize bad block for volatile namespaces (bnc#1151927 5.3.6). - libnvdimm/region: Rewrite _probe_success() to _advance_seeds() (bsc#1171743). - libnvdimm: Use PAGE_SIZE instead of SZ_4K for align check (bsc#1171759). - livepatch: Apply vmlinux-specific KLP relocations early (bsc#1071995). - livepatch: Disallow vmlinux.ko (bsc#1071995). - livepatch: Make klp_apply_object_relocs static (bsc#1071995). - livepatch: Prevent module-specific KLP rela sections from referencing vmlinux symbols (bsc#1071995). - livepatch: Remove .klp.arch (bsc#1071995). - loop: replace kill_bdev with invalidate_bdev (bsc#1173820). - lpfc_debugfs: get rid of pointless access_ok() (bsc#1172687 bsc#1171530). - lpfc: Synchronize NVME transport and lpfc driver devloss_tmo (bcs#1173060). - mac80211: add option for setting control flags (bsc#1111666). - mac80211: set IEEE80211_TX_CTRL_PORT_CTRL_PROTO for nl80211 TX (bsc#1111666). - mailbox: imx: Disable the clock on devm_mbox_controller_register() failure (git-fixes). - md: Avoid namespace collision with bitmap API (git fixes (block drivers)). - mdraid: fix read/write bytes accounting (bsc#1172537). - md: use memalloc scope APIs in mddev_suspend()/mddev_resume() (bsc#1166985)). - media: cec: silence shift wrapping warning in __cec_s_log_addrs() (git-fixes). - media: si2157: Better check for running tuner in init (bsc#1111666). - mlxsw: core: Do not use WQ_MEM_RECLAIM for mlxsw ordered workqueue (git-fixes). - mlxsw: core: Do not use WQ_MEM_RECLAIM for mlxsw workqueue (git-fixes). - mlxsw: pci: Return error on PCI reset timeout (git-fixes). - mlxsw: spectrum_acl_tcam: Position vchunk in a vregion list properly (networking-stable-20_05_12). - mlxsw: spectrum: Disallow prio-tagged packets when PVID is removed (git-fixes). - mlxsw: spectrum_dpipe: Add missing error path (git-fixes). - mlxsw: spectrum: Prevent force of 56G (git-fixes). - mlxsw: spectrum_router: Refresh nexthop neighbour when it becomes dead (git-fixes). - mlxsw: spectrum_router: Remove inappropriate usage of WARN_ON() (git-fixes). - mlxsw: spectrum_switchdev: Add MDB entries in prepare phase (git-fixes). - mlxsw: spectrum_switchdev: Do not treat static FDB entries as sticky (git-fixes). - mmc: block: Fix request completion in the CQE timeout path (bsc#1111666). - mmc: block: Fix use-after-free issue for rpmb (bsc#1111666). - mmc: fix compilation of user API (bsc#1051510). - mmc: sdhci: do not enable card detect interrupt for gpio cd type (bsc#1111666). - mmc: sdhci-msm: Set SDHCI_QUIRK_MULTIBLOCK_READ_ACMD12 quirk (bsc#1111666). - Move kabi patch into the right place - Move upstreamed lpfc patches into sorted section - mvpp2: remove misleading comment (git-fixes). - net: be more gentle about silly gso requests coming from user (networking-stable-20_06_07). - net: check untrusted gso_size at kernel entry (networking-stable-20_06_07). - net/cxgb4: Check the return from t4_query_params properly (git-fixes). - net: dsa: bcm_sf2: Fix node reference count (git-fixes). - net: dsa: loop: Add module soft dependency (networking-stable-20_05_16). - net: dsa: mt7530: fix roaming from DSA user ports (networking-stable-20_05_27). - net: ena: add intr_moder_rx_interval to struct ena_com_dev and use it (git-fixes). - net: ena: add missing ethtool TX timestamping indication (git-fixes). - net: ena: avoid memory access violation by validating req_id properly (git-fixes). - net: ena: do not wake up tx queue when down (git-fixes). - net: ena: ena-com.c: prevent NULL pointer dereference (git-fixes). - net: ena: ethtool: use correct value for crc32 hash (git-fixes). - net: ena: fix continuous keep-alive resets (git-fixes). - net: ena: fix corruption of dev_idx_to_host_tbl (git-fixes). - net: ena: fix default tx interrupt moderation interval (git-fixes). - net: ena: fix incorrect default RSS key (git-fixes). - net: ena: fix incorrectly saving queue numbers when setting RSS indirection table (git-fixes). - net: ena: fix issues in setting interrupt moderation params in ethtool (git-fixes). - net: ena: fix potential crash when rxfh key is NULL (git-fixes). - net: ena: fix retrieval of nonadaptive interrupt moderation intervals (git-fixes). - net: ena: fix uses of round_jiffies() (git-fixes). - net: ena: make ena rxfh support ETH_RSS_HASH_NO_CHANGE (git-fixes). - net: ena: reimplement set/get_coalesce() (git-fixes). - net: ena: rss: do not allocate key when not supported (git-fixes). - net: ena: rss: fix failure to get indirection table (git-fixes). - net: ena: rss: store hash function as values and not bits (git-fixes). - netfilter: connlabels: prefer static lock initialiser (git-fixes). - netfilter: ctnetlink: netns exit must wait for callbacks (bsc#1169795). - netfilter: not mark a spinlock as __read_mostly (git-fixes). - net: fix a potential recursive NETDEV_FEAT_CHANGE (networking-stable-20_05_16). - net: hns3: add autoneg and change speed support for fibre port (bsc#1174070). - net: hns3: add support for FEC encoding control (bsc#1174070). - net: hns3: add support for multiple media type (bsc#1174070). - net: hns3: fix a not link up issue when fibre port supports autoneg (bsc#1174070). - net: hns3: fix for FEC configuration (bsc#1174070). - net: hns3: fix port capbility updating issue (bsc#1174070). - net: hns3: fix port setting handle for fibre port (bsc#1174070). - net: hns3: fix selftest fail issue for fibre port with autoneg on (bsc#1174070). - net: hns3: restore the MAC autoneg state after reset (bsc#1174070). - net: inet_csk: Fix so_reuseport bind-address cache in tb->fast* (networking-stable-20_05_27). - net: ipip: fix wrong address family in init error path (networking-stable-20_05_27). - net: ipvlan: Fix ipvlan device tso disabled while NETIF_F_IP_CSUM is set (git-fixes). - net: macsec: preserve ingress frame ordering (networking-stable-20_05_12). - net/mlx4_core: drop useless LIST_HEAD (git-fixes). - net/mlx4_core: fix a memory leak bug (git-fixes). - net/mlx4_core: Fix use of ENOSPC around mlx4_counter_alloc() (networking-stable-20_05_12). - net/mlx5: Add command entry handling completion (networking-stable-20_05_27). - net/mlx5: Avoid panic when setting vport rate (git-fixes). - net/mlx5: Continue driver initialization despite debugfs failure (git-fixes). - net/mlx5e: ethtool, Fix a typo in WOL function names (git-fixes). - net/mlx5e: Fix traffic duplication in ethtool steering (git-fixes). - net/mlx5e: Remove unnecessary clear_bit()s (git-fixes). - net/mlx5e: Update netdev txq on completions during closure (networking-stable-20_05_27). - net/mlx5: Fix command entry leak in Internal Error State (networking-stable-20_05_12). - net/mlx5: Fix crash upon suspend/resume (networking-stable-20_06_07). - net/mlx5: Fix forced completion access non initialized command entry (networking-stable-20_05_12). - net: mvmdio: allow up to four clocks to be specified for orion-mdio (git-fixes). - net: mvpp2: prs: Do not override the sign bit in SRAM parser shift (git-fixes). - net: phy: fix aneg restart in phy_ethtool_set_eee (networking-stable-20_05_16). - netprio_cgroup: Fix unlimited memory leak of v2 cgroups (networking-stable-20_05_16). - net: qede: stop adding events on an already destroyed workqueue (git-fixes). - net: qed: fix excessive QM ILT lines consumption (git-fixes). - net: qed: fix NVMe login fails over VFs (git-fixes). - net: qrtr: Fix passing invalid reference to qrtr_local_enqueue() (networking-stable-20_05_27). - net: revert "net: get rid of an signed integer overflow in ip_idents_reserve()" (networking-stable-20_05_27). - net sched: fix reporting the first-time use timestamp (networking-stable-20_05_27). - net: stricter validation of untrusted gso packets (networking-stable-20_05_12). - net/tls: Fix sk_psock refcnt leak in bpf_exec_tx_verdict() (networking-stable-20_05_12). - net/tls: Fix sk_psock refcnt leak when in tls_data_ready() (networking-stable-20_05_12). - net: usb: qmi_wwan: add support for DW5816e (networking-stable-20_05_12). - net: usb: qmi_wwan: add Telit 0x1050 composition (networking-stable-20_06_07). - net: usb: qmi_wwan: add Telit LE910C1-EUX composition (networking-stable-20_06_07). - net: vmxnet3: fix possible buffer overflow caused by bad DMA value in vmxnet3_get_rss() (bsc#1172484). - nfp: bpf: fix code-gen bug on BPF_ALU | BPF_XOR | BPF_K (git-fixes). - NFS: Fix an RCU lock leak in nfs4_refresh_delegation_stateid() (bsc#1170592). - NFSv4: Retry CLOSE and DELEGRETURN on NFS4ERR_OLD_STATEID (bsc#1170592). - nilfs2: fix null pointer dereference at nilfs_segctor_do_construct() (bsc#1173857). - nl80211: fix NL80211_ATTR_CHANNEL_WIDTH attribute type (bsc#1111666). - nvdimm: Avoid race between probe and reading device attributes (bsc#1170442). - nvme: check for NVME_CTRL_LIVE in nvme_report_ns_ids() (bcs#1171558 bsc#1159058). - nvme: do not update multipath disk information if the controller is down (bcs#1171558 bsc#1159058). - nvme: fail cancelled commands with NVME_SC_HOST_PATH_ERROR (bsc#1158983 bsc#1172538). - nvme-fc: Fail transport errors with NVME_SC_HOST_PATH (bsc#1158983 bsc#1172538). - nvme-tcp: fail command with NVME_SC_HOST_PATH_ERROR send failed (bsc#1158983 bsc#1172538). - objtool: Clean instruction state before each function validation (bsc#1169514). - objtool: Ignore empty alternatives (bsc#1169514). - ocfs2: avoid inode removal while nfsd is accessing it (bsc#1172963). - ocfs2: fix panic on nfs server over ocfs2 (bsc#1172963). - ocfs2: load global_inode_alloc (bsc#1172963). - ocfs2: no need try to truncate file beyond i_size (bsc#1171841). - overflow: Fix -Wtype-limits compilation warnings (git fixes). - overflow.h: Add arithmetic shift helper (git fixes). - p54usb: add AirVasT USB stick device-id (bsc#1051510). - padata: ensure the reorder timer callback runs on the correct CPU (git-fixes). - padata: reorder work kABI fixup (git-fixes). - PCI/AER: Remove HEST/FIRMWARE_FIRST parsing for AER ownership (bsc#1174356). - PCI/AER: Use only _OSC to determine AER ownership (bsc#1174356). - PCI: Allow pci_resize_resource() for devices on root bus (bsc#1051510). - PCI: Fix pci_register_host_bridge() device_register() error handling (bsc#1051510). - PCI: Fix "try" semantics of bus and slot reset (git-fixes). - PCI: Generalize multi-function power dependency device links (bsc#1111666). - PCI: hv: Change pci_protocol_version to per-hbus (bsc#1172871, bsc#1172872). - PCI: hv: Fix the PCI HyperV probe failure path to release resource properly (bsc#1172871, bsc#1172872). - PCI: hv: Introduce hv_msi_entry (bsc#1172871, bsc#1172872). - PCI: hv: Move hypercall related definitions into tlfs header (bsc#1172871, bsc#1172872). - PCI: hv: Move retarget related structures into tlfs header (bsc#1172871, bsc#1172872). - PCI: hv: Reorganize the code in preparation of hibernation (bsc#1172871, bsc#1172872). - PCI: hv: Retry PCI bus D0 entry on invalid device state (bsc#1172871, bsc#1172872). - PCI: pciehp: Fix indefinite wait on sysfs requests (git-fixes). - PCI: pciehp: Support interrupts sent from D3hot (git-fixes). - PCI: Program MPS for RCiEP devices (bsc#1051510). - PCI/PTM: Inherit Switch Downstream Port PTM settings from Upstream Port (bsc#1051510). - pci: Revive pci_dev __aer_firmware_first* fields for kABI (bsc#1174356). - pcm_native: result of put_user() needs to be checked (bsc#1111666). - perf/x86/amd: Constrain Large Increment per Cycle events (git-fixes). - perf/x86/amd/ibs: Fix reading of the IBS OpData register and thus precise RIP validity (git-fixes). - perf/x86/amd/ibs: Fix sample bias for dispatched micro-ops (git-fixes). - perf/x86/amd/ibs: Handle erratum #420 only on the affected CPU family (10h) (git-fixes). - perf/x86/amd/iommu: Make the 'amd_iommu_attr_groups' symbol static (git-fixes). - perf/x86/amd/uncore: Do not set 'ThreadMask' and 'SliceMask' for non-L3 PMCs (git-fixes stable). - perf/x86/amd/uncore: Set the thread mask for F17h L3 PMCs (git-fixes). - perf/x86/amd/uncore: Set ThreadMask and SliceMask for L3 Cache perf events (git-fixes stable). - perf/x86: Enable free running PEBS for REGS_USER/INTR (git-fixes). - perf/x86: Fix incorrect PEBS_REGS (git-fixes). - perf/x86/intel: Add generic branch tracing check to intel_pmu_has_bts() (git-fixes). - perf/x86/intel: Add proper condition to run sched_task callbacks (git-fixes). - perf/x86/intel/bts: Fix the use of page_private() (git-fixes). - perf/x86/intel: Fix PT PMI handling (git-fixes). - perf/x86/intel: Move branch tracing setup to the Intel-specific source file (git-fixes). - perf/x86/intel/uncore: Add Node ID mask (git-fixes). - perf/x86/intel/uncore: Fix PCI BDF address of M3UPI on SKX (git-fixes). - perf/x86/intel/uncore: Handle invalid event coding for free-running counter (git-fixes). - perf/x86/uncore: Fix event group support (git-fixes). - pid: Improve the comment about waiting in zap_pid_ns_processes (git fixes)). - pinctrl: freescale: imx: Fix an error handling path in 'imx_pinctrl_probe()' (bsc#1051510). - pinctrl: imxl: Fix an error handling path in 'imx1_pinctrl_core_probe()' (bsc#1051510). - pinctrl: samsung: Save/restore eint_mask over suspend for EINT_TYPE GPIOs (bsc#1051510). - platform/x86: dell-laptop: do not register micmute LED if there is no token (bsc#1111666). - platform/x86: hp-wmi: Convert simple_strtoul() to kstrtou32() (bsc#1111666). - PM / Domains: Allow genpd users to specify default active wakeup behavior (git-fixes). - pnp: Use list_for_each_entry() instead of open coding (git fixes). - powerpc/64s: Do not let DT CPU features set FSCR_DSCR (bsc#1065729). - powerpc/64s: Save FSCR to init_task.thread.fscr after feature init (bsc#1065729). - powerpc/book3s64: Export has_transparent_hugepage() related functions (bsc#1171759). - powerpc/book3s64/pkeys: Fix pkey_access_permitted() for execute disable pkey (bsc#1065729). - powerpc/fadump: fix race between pstore write and fadump crash trigger (bsc#1168959 ltc#185010). - powerpc-mm-Remove-kvm-radix-prefetch-workaround-for-.patch - powerpc/xive: Clear the page tables for the ESB IO mapping (bsc#1085030). - powerpc-xmon-don-t-access-ASDR-in-VMs.patch - powerpc/xmon: Reset RCU and soft lockup watchdogs (bsc#1065729). - power: supply: bq24257_charger: Replace depends on REGMAP_I2C with select (bsc#1051510). - power: supply: lp8788: Fix an error handling path in 'lp8788_charger_probe()' (bsc#1051510). - power: supply: smb347-charger: IRQSTAT_D is volatile (bsc#1051510). - power: vexpress: add suppress_bind_attrs to true (bsc#1111666). - pppoe: only process PADT targeted at local interfaces (networking-stable-20_05_16). - propagate_one(): mnt_set_mountpoint() needs mount_lock (bsc#1174841). - qed: reduce maximum stack frame size (git-fixes). - qlcnic: fix missing release in qlcnic_83xx_interrupt_test (git-fixes). - r8152: support additional Microsoft Surface Ethernet Adapter variant (networking-stable-20_05_27). - raid5: remove gfp flags from scribble_alloc() (bsc#1166985). - RDMA/efa: Fix setting of wrong bit in get/set_feature commands (bsc#1111666) - RDMA/efa: Set maximum pkeys device attribute (bsc#1111666) - RDMA/efa: Support remote read access in MR registration (bsc#1111666) - RDMA/efa: Unified getters/setters for device structs bitmask access (bsc#1111666) - README.BRANCH: Add Takashi Iwai as primary maintainer. - regmap: debugfs: Do not sleep while atomic for fast_io regmaps (bsc#1111666). - Revert "bcache: ignore pending signals when creating gc and allocator thread" (git fixes (block drivers)). - Revert commit e918e570415c ("tpm_tis: Remove the HID IFX0102") (bsc#1111666). - Revert "dm crypt: use WQ_HIGHPRI for the IO and crypt workqueues" (git fixes (block drivers)). - Revert "ipv6: add mtu lock check in __ip6_rt_update_pmtu" (networking-stable-20_05_16). - Revert pciehp patches that broke booting (bsc#1174887) - Revert "thermal: mediatek: fix register index error" (bsc#1111666). - Revert "tools lib traceevent: Remove unneeded qsort and uses memmove" - rtnetlink: Fix memory(net_device) leak when ->newlink fails (git-fixes). - s390/bpf: Maintain 8-byte stack alignment (bsc#1169194). - s390: fix syscall_get_error for compat processes (git-fixes). - s390/qdio: consistently restore the IRQ handler (git-fixes). - s390/qdio: lock device while installing IRQ handler (git-fixes). - s390/qdio: put thinint indicator after early error (git-fixes). - s390/qdio: tear down thinint indicator after early error (git-fixes). - s390/qeth: fix error handling for isolation mode cmds (git-fixes). - sch_choke: avoid potential panic in choke_reset() (networking-stable-20_05_12). - sch_sfq: validate silly quantum values (networking-stable-20_05_12). - scripts/git_sort/git_sort.py: add bluetooth/bluetooth-next.git repository - scsi: aacraid: fix a signedness bug (bsc#1174296). - scsi: hisi_sas: fix calls to dma_set_mask_and_coherent() (bsc#1174296). - scsi: ibmvscsi: Do not send host info in adapter info MAD after LPM (bsc#1172759 ltc#184814). - scsi: lpfc: Add an internal trace log buffer (bsc#1172687 bsc#1171530). - scsi: lpfc: Add blk_io_poll support for latency improvment (bsc#1172687 bsc#1171530). - scsi: lpfc: Add support to display if adapter dumps are available (bsc#1172687 bsc#1171530). - scsi: lpfc: Allow applications to issue Common Set Features mailbox command (bsc#1172687 bsc#1171530). - scsi: lpfc: Avoid another null dereference in lpfc_sli4_hba_unset() (bsc#1172687 bsc#1171530). - scsi: lpfc: Fix inconsistent indenting (bsc#1158983). - scsi: lpfc: Fix interrupt assignments when multiple vectors are supported on same CPU (bsc#1158983). - scsi: lpfc: Fix kdump hang on PPC (bsc#1172687 bsc#1171530). - scsi: lpfc: Fix language in 0373 message to reflect non-error message (bsc#1172687 bsc#1171530). - scsi: lpfc: Fix less-than-zero comparison of unsigned value (bsc#1158983). - scsi: lpfc: Fix missing MDS functionality (bsc#1172687 bsc#1171530). - scsi: lpfc: Fix NVMe rport deregister and registration during ADISC (bsc#1172687 bsc#1171530). - scsi: lpfc: Fix oops due to overrun when reading SLI3 data (bsc#1172687 bsc#1171530). - scsi: lpfc: Fix shost refcount mismatch when deleting vport (bsc#1172687 bsc#1171530). - scsi: lpfc: Fix stack trace seen while setting rrq active (bsc#1172687 bsc#1171530). - scsi: lpfc: Fix unused assignment in lpfc_sli4_bsg_link_diag_test (bsc#1172687 bsc#1171530). - scsi: lpfc: Update lpfc version to 12.8.0.2 (bsc#1158983). - scsi: megaraid_sas: Fix a compilation warning (bsc#1174296). - scsi: mpt3sas: Fix double free in attach error handling (bsc#1174296). - scsi: qedf: Add port_id getter (bsc#1150660). - scsi: qla2xxx: Fix a condition in qla2x00_find_all_fabric_devs() (bsc#1174296). - scsi: qla2xxx: Set NVMe status code for failed NVMe FCP request (bsc#1158983). - sctp: Do not add the shutdown timer if its already been added (networking-stable-20_05_27). - sctp: Start shutdown on association restart if in SHUTDOWN-SENT state and socket is closed (networking-stable-20_05_27). - spi: dw: use "smp_mb()" to avoid sending spi data error (bsc#1051510). - spi: fix initial SPI_SR value in spi-fsl-dspi (bsc#1111666). - spi: pxa2xx: Apply CS clk quirk to BXT (bsc#1111666). - spi: spidev: fix a race between spidev_release and spidev_remove (bsc#1111666). - spi: spi-mem: Fix Dual/Quad modes on Octal-capable devices (bsc#1111666). - spi: spi-sun6i: sun6i_spi_transfer_one(): fix setting of clock rate (bsc#1111666). - staging: comedi: verify array index is correct before using it (bsc#1111666). - staging: rtl8712: Fix IEEE80211_ADDBA_PARAM_BUF_SIZE_MASK (bsc#1051510). - staging: sm750fb: add missing case while setting FB_VISUAL (bsc#1051510). - SUNRPC: The TCP back channel mustn't disappear while requests are outstanding (bsc#1152624). - tg3: driver sleeps indefinitely when EEH errors exceed eeh_max_freezes (bsc#1173284). - timers: Add a function to start/reduce a timer (networking-stable-20_05_27). - tpm_tis: extra chip->ops check on error path in tpm_tis_core_init (bsc#1111666). - tpm_tis: Remove the HID IFX0102 (bsc#1111666). - tracing: Fix event trigger to accept redundant spaces (git-fixes). - tty: hvc_console, fix crashes on parallel open/close (git-fixes). - tty: n_gsm: Fix bogus i++ in gsm_data_kick (bsc#1051510). - tty: n_gsm: Fix SOF skipping (bsc#1051510). - tty: n_gsm: Fix waking up upper tty layer when room available (bsc#1051510). - tunnel: Propagate ECT(1) when decapsulating as recommended by RFC6040 (networking-stable-20_05_12). - ubifs: remove broken lazytime support (bsc#1173826). - usb: add USB_QUIRK_DELAY_INIT for Logitech C922 (git-fixes). - usb: c67x00: fix use after free in c67x00_giveback_urb (bsc#1111666). - usb: chipidea: core: add wakeup support for extcon (bsc#1111666). - usb: dwc2: Fix shutdown callback in platform (bsc#1111666). - usb: dwc2: gadget: move gadget resume after the core is in L0 state (bsc#1051510). - usb: dwc3: gadget: introduce cancelled_list (git-fixes). - usb: dwc3: gadget: never call ->complete() from ->ep_queue() (git-fixes). - usb: dwc3: gadget: Properly handle ClearFeature(halt) (git-fixes). - usb: dwc3: gadget: Properly handle failed kick_transfer (git-fixes). - usb: ehci: reopen solution for Synopsys HC bug (git-fixes). - usb: gadget: fix potential double-free in m66592_probe (bsc#1111666). - usb: gadget: lpc32xx_udc: do not dereference ep pointer before null check (bsc#1051510). - usb: gadget: udc: atmel: fix uninitialized read in debug printk (bsc#1111666). - usb: gadget: udc: atmel: remove outdated comment in usba_ep_disable() (bsc#1111666). - usb: gadget: udc: Potential Oops in error handling code (bsc#1111666). - usb: gadget: udc: s3c2410_udc: Remove pointless NULL check in s3c2410_udc_nuke (bsc#1051510). - usb: host: ehci-exynos: Fix error check in exynos_ehci_probe() (bsc#1111666). - usb: host: ehci-mxc: Add error handling in ehci_mxc_drv_probe() (bsc#1051510). - usb: musb: Fix runtime PM imbalance on error (bsc#1051510). - usb: musb: start session in resume for host port (bsc#1051510). - usbnet: smsc95xx: Fix use-after-free after removal (bsc#1111666). - usb: ohci-sm501: Add missed iounmap() in remove (bsc#1111666). - usb: serial: ch341: add new Product ID for CH340 (bsc#1111666). - usb: serial: cypress_m8: enable Simply Automated UPB PIM (bsc#1111666). - usb: serial: iuu_phoenix: fix memory corruption (bsc#1111666). - usb: serial: option: add GosunCn GM500 series (bsc#1111666). - usb: serial: option: add Quectel EG95 LTE modem (bsc#1111666). - usb: serial: option: add Telit LE910C1-EUX compositions (bsc#1051510). - usb: serial: qcserial: add DW5816e QDL support (bsc#1051510). - usb: serial: usb_wwan: do not resubmit rx urb on fatal errors (bsc#1051510). - usb: serial: usb_wwan: do not resubmit rx urb on fatal errors (git-fixes). - vfio/pci: Fix SR-IOV VF handling with MMIO blocking (bsc#1174123). - vfs: Fix EOVERFLOW testing in put_compat_statfs64 (bnc#1151927 5.3.6). - virtio-blk: handle block_device_operations callbacks after hot unplug (git fixes (block drivers)). - virtio: virtio_console: add missing MODULE_DEVICE_TABLE() for rproc serial (git-fixes). - vmxnet3: add geneve and vxlan tunnel offload support (bsc#1172484). - vmxnet3: add support to get/set rx flow hash (bsc#1172484). - vmxnet3: allow rx flow hash ops only when rss is enabled (bsc#1172484). - vmxnet3: avoid format strint overflow warning (bsc#1172484). - vmxnet3: prepare for version 4 changes (bsc#1172484). - vmxnet3: Remove always false conditional statement (bsc#1172484). - vmxnet3: remove redundant initialization of pointer 'rq' (bsc#1172484). - vmxnet3: remove unused flag "rxcsum" from struct vmxnet3_adapter (bsc#1172484). - vmxnet3: Replace msleep(1) with usleep_range() (bsc#1172484). - vmxnet3: update to version 4 (bsc#1172484). - vmxnet3: use correct hdr reference when packet is encapsulated (bsc#1172484). - vsock: fix timeout in vsock_accept() (networking-stable-20_06_07). - vt_compat_ioctl(): clean up, use compat_ptr() properly (git-fixes). - vxlan: Avoid infinite loop when suppressing NS messages with invalid options (git-fixes). - w1: omap-hdq: cleanup to add missing newline for some dev_dbg (bsc#1051510). - watchdog: sp805: fix restart handler (bsc#1111666). - wil6210: add general initialization/size checks (bsc#1111666). - wil6210: check rx_buff_mgmt before accessing it (bsc#1111666). - wil6210: ignore HALP ICR if already handled (bsc#1111666). - wil6210: make sure Rx ring sizes are correlated (git-fixes). - work around mvfs bug (bsc#1162063). - x86/apic: Install an empty physflat_init_apic_ldr (bsc#1163309). - x86/cpu/amd: Make erratum #1054 a legacy erratum (bsc#1114279). - x86/events/intel/ds: Add PERF_SAMPLE_PERIOD into PEBS_FREERUNNING_FLAGS (git-fixes). - x86: Fix early boot crash on gcc-10, third try (bsc#1114279). - x86/{mce,mm}: Unmap the entire page if the whole page is affected and poisoned (bsc#1172257). - x86/reboot/quirks: Add MacBook6,1 reboot quirk (bsc#1114279). - xfrm: fix error in comment (git fixes). - xhci: Fix enumeration issue when setting max packet size for FS devices (git-fixes). - xhci: Fix incorrect EP_STATE_MASK (git-fixes). - vt: vt_ioctl: remove unnecessary console allocation checks (git-fixes). Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1153=1 Package List: - openSUSE Leap 15.1 (x86_64): kernel-debug-4.12.14-lp151.28.59.1 kernel-debug-base-4.12.14-lp151.28.59.1 kernel-debug-base-debuginfo-4.12.14-lp151.28.59.1 kernel-debug-debuginfo-4.12.14-lp151.28.59.1 kernel-debug-debugsource-4.12.14-lp151.28.59.1 kernel-debug-devel-4.12.14-lp151.28.59.1 kernel-debug-devel-debuginfo-4.12.14-lp151.28.59.1 kernel-default-4.12.14-lp151.28.59.1 kernel-default-base-4.12.14-lp151.28.59.1 kernel-default-base-debuginfo-4.12.14-lp151.28.59.1 kernel-default-debuginfo-4.12.14-lp151.28.59.1 kernel-default-debugsource-4.12.14-lp151.28.59.1 kernel-default-devel-4.12.14-lp151.28.59.1 kernel-default-devel-debuginfo-4.12.14-lp151.28.59.1 kernel-kvmsmall-4.12.14-lp151.28.59.1 kernel-kvmsmall-base-4.12.14-lp151.28.59.1 kernel-kvmsmall-base-debuginfo-4.12.14-lp151.28.59.1 kernel-kvmsmall-debuginfo-4.12.14-lp151.28.59.1 kernel-kvmsmall-debugsource-4.12.14-lp151.28.59.1 kernel-kvmsmall-devel-4.12.14-lp151.28.59.1 kernel-kvmsmall-devel-debuginfo-4.12.14-lp151.28.59.1 kernel-obs-build-4.12.14-lp151.28.59.1 kernel-obs-build-debugsource-4.12.14-lp151.28.59.1 kernel-obs-qa-4.12.14-lp151.28.59.1 kernel-syms-4.12.14-lp151.28.59.1 kernel-vanilla-4.12.14-lp151.28.59.1 kernel-vanilla-base-4.12.14-lp151.28.59.1 kernel-vanilla-base-debuginfo-4.12.14-lp151.28.59.1 kernel-vanilla-debuginfo-4.12.14-lp151.28.59.1 kernel-vanilla-debugsource-4.12.14-lp151.28.59.1 kernel-vanilla-devel-4.12.14-lp151.28.59.1 kernel-vanilla-devel-debuginfo-4.12.14-lp151.28.59.1 - openSUSE Leap 15.1 (noarch): kernel-devel-4.12.14-lp151.28.59.1 kernel-docs-4.12.14-lp151.28.59.1 kernel-docs-html-4.12.14-lp151.28.59.1 kernel-macros-4.12.14-lp151.28.59.1 kernel-source-4.12.14-lp151.28.59.1 kernel-source-vanilla-4.12.14-lp151.28.59.1 References: https://www.suse.com/security/cve/CVE-2019-16746.html https://www.suse.com/security/cve/CVE-2019-20810.html https://www.suse.com/security/cve/CVE-2019-20908.html https://www.suse.com/security/cve/CVE-2020-0305.html https://www.suse.com/security/cve/CVE-2020-10135.html https://www.suse.com/security/cve/CVE-2020-10766.html https://www.suse.com/security/cve/CVE-2020-10767.html https://www.suse.com/security/cve/CVE-2020-10768.html https://www.suse.com/security/cve/CVE-2020-10769.html https://www.suse.com/security/cve/CVE-2020-10773.html https://www.suse.com/security/cve/CVE-2020-10781.html https://www.suse.com/security/cve/CVE-2020-12771.html https://www.suse.com/security/cve/CVE-2020-12888.html https://www.suse.com/security/cve/CVE-2020-13974.html https://www.suse.com/security/cve/CVE-2020-14331.html https://www.suse.com/security/cve/CVE-2020-14416.html https://www.suse.com/security/cve/CVE-2020-15393.html https://www.suse.com/security/cve/CVE-2020-15780.html https://www.suse.com/security/cve/CVE-2020-16166.html https://bugzilla.suse.com/1051510 https://bugzilla.suse.com/1065729 https://bugzilla.suse.com/1071995 https://bugzilla.suse.com/1085030 https://bugzilla.suse.com/1111666 https://bugzilla.suse.com/1112178 https://bugzilla.suse.com/1113956 https://bugzilla.suse.com/1114279 https://bugzilla.suse.com/1120163 https://bugzilla.suse.com/1144333 https://bugzilla.suse.com/1148868 https://bugzilla.suse.com/1150660 https://bugzilla.suse.com/1151927 https://bugzilla.suse.com/1152107 https://bugzilla.suse.com/1152624 https://bugzilla.suse.com/1158983 https://bugzilla.suse.com/1159058 https://bugzilla.suse.com/1161016 https://bugzilla.suse.com/1162002 https://bugzilla.suse.com/1162063 https://bugzilla.suse.com/1163309 https://bugzilla.suse.com/1166985 https://bugzilla.suse.com/1167104 https://bugzilla.suse.com/1168081 https://bugzilla.suse.com/1168959 https://bugzilla.suse.com/1169194 https://bugzilla.suse.com/1169514 https://bugzilla.suse.com/1169771 https://bugzilla.suse.com/1169795 https://bugzilla.suse.com/1170011 https://bugzilla.suse.com/1170442 https://bugzilla.suse.com/1170592 https://bugzilla.suse.com/1170617 https://bugzilla.suse.com/1170618 https://bugzilla.suse.com/1171124 https://bugzilla.suse.com/1171424 https://bugzilla.suse.com/1171529 https://bugzilla.suse.com/1171530 https://bugzilla.suse.com/1171558 https://bugzilla.suse.com/1171732 https://bugzilla.suse.com/1171739 https://bugzilla.suse.com/1171743 https://bugzilla.suse.com/1171753 https://bugzilla.suse.com/1171759 https://bugzilla.suse.com/1171835 https://bugzilla.suse.com/1171841 https://bugzilla.suse.com/1171868 https://bugzilla.suse.com/1171904 https://bugzilla.suse.com/1171988 https://bugzilla.suse.com/1172247 https://bugzilla.suse.com/1172257 https://bugzilla.suse.com/1172344 https://bugzilla.suse.com/1172458 https://bugzilla.suse.com/1172484 https://bugzilla.suse.com/1172537 https://bugzilla.suse.com/1172538 https://bugzilla.suse.com/1172687 https://bugzilla.suse.com/1172719 https://bugzilla.suse.com/1172759 https://bugzilla.suse.com/1172775 https://bugzilla.suse.com/1172781 https://bugzilla.suse.com/1172782 https://bugzilla.suse.com/1172783 https://bugzilla.suse.com/1172871 https://bugzilla.suse.com/1172872 https://bugzilla.suse.com/1172963 https://bugzilla.suse.com/1172999 https://bugzilla.suse.com/1173060 https://bugzilla.suse.com/1173074 https://bugzilla.suse.com/1173146 https://bugzilla.suse.com/1173265 https://bugzilla.suse.com/1173280 https://bugzilla.suse.com/1173284 https://bugzilla.suse.com/1173428 https://bugzilla.suse.com/1173514 https://bugzilla.suse.com/1173567 https://bugzilla.suse.com/1173573 https://bugzilla.suse.com/1173659 https://bugzilla.suse.com/1173746 https://bugzilla.suse.com/1173818 https://bugzilla.suse.com/1173820 https://bugzilla.suse.com/1173825 https://bugzilla.suse.com/1173826 https://bugzilla.suse.com/1173833 https://bugzilla.suse.com/1173838 https://bugzilla.suse.com/1173839 https://bugzilla.suse.com/1173845 https://bugzilla.suse.com/1173857 https://bugzilla.suse.com/1174070 https://bugzilla.suse.com/1174113 https://bugzilla.suse.com/1174115 https://bugzilla.suse.com/1174122 https://bugzilla.suse.com/1174123 https://bugzilla.suse.com/1174205 https://bugzilla.suse.com/1174296 https://bugzilla.suse.com/1174343 https://bugzilla.suse.com/1174356 https://bugzilla.suse.com/1174409 https://bugzilla.suse.com/1174438 https://bugzilla.suse.com/1174462 https://bugzilla.suse.com/1174543 https://bugzilla.suse.com/1174549 https://bugzilla.suse.com/1174658 https://bugzilla.suse.com/1174685 https://bugzilla.suse.com/1174757 https://bugzilla.suse.com/1174840 https://bugzilla.suse.com/1174841 https://bugzilla.suse.com/1174843 https://bugzilla.suse.com/1174844 https://bugzilla.suse.com/1174845 https://bugzilla.suse.com/1174887

1 0

openSUSE-RU-2020:1151-1: moderate: Recommended update for icewm, icewm-theme-branding
by maintenance＠opensuse.org 05 Aug '20

05 Aug '20

openSUSE Recommended Update: Recommended update for icewm, icewm-theme-branding ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1151-1 Rating: moderate References: #1170420 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for icewm, icewm-theme-branding fixes the following issues: Changes in icewm: - Explicitly require icewm-theme-branding on SLE and Leap. (jsc#SLE-11888, bsc#1170420). - Add Conflicts between icewm-config-upstream and icewm-theme-branding. - Improve build tag consistency between SLE and Leap. (jsc#SLE-11888, bsc#1170420). * Recommend polkit-gnome to both Leap and SLE. Changes in icewm-theme-branding: - Improve build tag consistency between SLE and Leap. (jsc#SLE-11888, bsc#1170420). * Build the branding package separately for openSUSE and SLE, like most of other branding packages did. - Fix the "zypper dup" issue on Leap by explicitly obsoleting icewm-config-upstream. (bsc#1170420) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1151=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): icewm-1.4.2-lp152.12.3.1 icewm-debuginfo-1.4.2-lp152.12.3.1 icewm-debugsource-1.4.2-lp152.12.3.1 icewm-default-1.4.2-lp152.12.3.1 icewm-default-debuginfo-1.4.2-lp152.12.3.1 icewm-lite-1.4.2-lp152.12.3.1 icewm-lite-debuginfo-1.4.2-lp152.12.3.1 - openSUSE Leap 15.2 (noarch): icewm-config-upstream-1.4.2-lp152.12.3.1 icewm-lang-1.4.2-lp152.12.3.1 icewm-theme-branding-1.2.4-lp152.6.5.1 References: https://bugzilla.suse.com/1170420

1 0

openSUSE-RU-2020:1152-1: moderate: Recommended update for python-kiwi
by maintenance＠opensuse.org 05 Aug '20

05 Aug '20

openSUSE Recommended Update: Recommended update for python-kiwi ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1152-1 Rating: moderate References: #1156677 #1168973 #1172928 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for python-kiwi fixes the following issues: - Fixed checking for root device in grub config. (bsc#1172928) - Fix for conflicting files of man-pages between different versions. (bsc#1168973, bsc#1156677) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1152=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): dracut-kiwi-lib-9.20.5-lp152.5.4.1 dracut-kiwi-live-9.20.5-lp152.5.4.1 dracut-kiwi-oem-dump-9.20.5-lp152.5.4.1 dracut-kiwi-oem-repart-9.20.5-lp152.5.4.1 dracut-kiwi-overlay-9.20.5-lp152.5.4.1 kiwi-man-pages-9.20.5-lp152.5.4.1 kiwi-pxeboot-9.20.5-lp152.5.4.1 kiwi-tools-9.20.5-lp152.5.4.1 kiwi-tools-debuginfo-9.20.5-lp152.5.4.1 python-kiwi-debugsource-9.20.5-lp152.5.4.1 python3-kiwi-9.20.5-lp152.5.4.1 References: https://bugzilla.suse.com/1156677 https://bugzilla.suse.com/1168973 https://bugzilla.suse.com/1172928

1 0

openSUSE-RU-2020:1150-1: moderate: Recommended update for lxd
by maintenance＠opensuse.org 05 Aug '20

05 Aug '20

openSUSE Recommended Update: Recommended update for lxd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1150-1 Rating: moderate References: #1174789 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for lxd fixes the following issues: - Update to LXD 4.4. The full upstream changelog is available from: https://discuss.linuxcontainers.org/t/lxd-4-4-has-been-released/8574 boo#1174789 + VGA console for virtual machines + Clustering failure domains + /dev/lxd API in virtual machines + Graceful daemon shutdown + macvlan and sriov managed network types + Disk usage limits in projects + AppAmor confinement for dnsmasq + GPU mediated devices in resources API + --console option in lxc launch Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1150=1 Package List: - openSUSE Leap 15.2 (x86_64): lxd-4.4-lp152.2.6.1 - openSUSE Leap 15.2 (noarch): lxd-bash-completion-4.4-lp152.2.6.1 References: https://bugzilla.suse.com/1174789

1 0

openSUSE-RU-2020:1149-1: moderate: Recommended update for lxd
by maintenance＠opensuse.org 05 Aug '20

05 Aug '20

openSUSE Recommended Update: Recommended update for lxd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1149-1 Rating: moderate References: #1174789 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for lxd fixes the following issues: - Update to LXD 4.4. The full upstream changelog is available from: https://discuss.linuxcontainers.org/t/lxd-4-4-has-been-released/8574 boo#1174789 + VGA console for virtual machines + Clustering failure domains + /dev/lxd API in virtual machines + Graceful daemon shutdown + macvlan and sriov managed network types + Disk usage limits in projects + AppAmor confinement for dnsmasq + GPU mediated devices in resources API + --console option in lxc launch Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1149=1 Package List: - openSUSE Leap 15.1 (x86_64): lxd-4.4-lp151.45.1 - openSUSE Leap 15.1 (noarch): lxd-bash-completion-4.4-lp151.45.1 References: https://bugzilla.suse.com/1174789

1 0

openSUSE-SU-2020:1147-1: important: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 05 Aug '20

05 Aug '20

openSUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1147-1 Rating: important References: #1174538 Cross-References: CVE-2020-15652 CVE-2020-15653 CVE-2020-15654 CVE-2020-15655 CVE-2020-15656 CVE-2020-15657 CVE-2020-15658 CVE-2020-15659 CVE-2020-6463 CVE-2020-6514 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 10 vulnerabilities is now available. Description: This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 78.1.0 ESR * Fixed: Various stability, functionality, and security fixes (bsc#1174538) * CVE-2020-15652: Potential leak of redirect targets when loading scripts in a worker * CVE-2020-6514: WebRTC data channel leaks internal address to peer * CVE-2020-15655: Extension APIs could be used to bypass Same-Origin Policy * CVE-2020-15653: Bypassing iframe sandbox when allowing popups * CVE-2020-6463: Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture * CVE-2020-15656: Type confusion for special arguments in IonMonkey * CVE-2020-15658: Overriding file type when saving to disk * CVE-2020-15657: DLL hijacking due to incorrect loading path * CVE-2020-15654: Custom cursor can overlay user interface * CVE-2020-15659: Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1 This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1147=1 Package List: - openSUSE Leap 15.1 (x86_64): MozillaFirefox-78.1.0-lp151.2.61.1 MozillaFirefox-branding-upstream-78.1.0-lp151.2.61.1 MozillaFirefox-buildsymbols-78.1.0-lp151.2.61.1 MozillaFirefox-debuginfo-78.1.0-lp151.2.61.1 MozillaFirefox-debugsource-78.1.0-lp151.2.61.1 MozillaFirefox-devel-78.1.0-lp151.2.61.1 MozillaFirefox-translations-common-78.1.0-lp151.2.61.1 MozillaFirefox-translations-other-78.1.0-lp151.2.61.1 References: https://www.suse.com/security/cve/CVE-2020-15652.html https://www.suse.com/security/cve/CVE-2020-15653.html https://www.suse.com/security/cve/CVE-2020-15654.html https://www.suse.com/security/cve/CVE-2020-15655.html https://www.suse.com/security/cve/CVE-2020-15656.html https://www.suse.com/security/cve/CVE-2020-15657.html https://www.suse.com/security/cve/CVE-2020-15658.html https://www.suse.com/security/cve/CVE-2020-15659.html https://www.suse.com/security/cve/CVE-2020-6463.html https://www.suse.com/security/cve/CVE-2020-6514.html https://bugzilla.suse.com/1174538

1 0

openSUSE-SU-2020:1148-1: moderate: Security update for opera
by opensuse-security＠opensuse.org 05 Aug '20

05 Aug '20

openSUSE Security Update: Security update for opera ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1148-1 Rating: moderate References: Cross-References: CVE-2020-6510 CVE-2020-6511 CVE-2020-6512 CVE-2020-6513 CVE-2020-6514 CVE-2020-6515 CVE-2020-6516 CVE-2020-6517 CVE-2020-6518 CVE-2020-6519 CVE-2020-6520 CVE-2020-6521 CVE-2020-6522 CVE-2020-6523 CVE-2020-6524 CVE-2020-6525 CVE-2020-6526 CVE-2020-6527 CVE-2020-6528 CVE-2020-6529 CVE-2020-6530 CVE-2020-6531 CVE-2020-6533 CVE-2020-6534 CVE-2020-6535 CVE-2020-6536 Affected Products: openSUSE Leap 15.1:NonFree ______________________________________________________________________________ An update that fixes 26 vulnerabilities is now available. Description: This update for opera fixes the following issues: - Update to version 70.0.3728.71 - DNA-86267 Make `Recently closed tabs` appearance consistent with `Search for open tabs`. - DNA-86988 Opera 70 translations - DNA-87530 Zen news leads not loading - DNA-87636 Fix displaying folder icon for closed windows in recently closed list - DNA-87682 Replace Extensions icon in toolbar with icon from sidebar - DNA-87756 Extend chrome.sessions.getRecentlyClosed with information about last active tab in window. - DNA-87778 Crash at opera::InstantSearchViewViews:: ~InstantSearchViewViews() - DNA-87815 Change affiliate links for AliExpress Search - Update to version 70.0.3728.59 - CHR-8010 Update chromium on desktop-stable-84-3728 to 84.0.4147.89 - DNA-87019 The video image does not respond to the pressing after closed the “Quit Opera?” dialog - DNA-87342 Fix right padding in settings > weather section - DNA-87427 Remove unneeded information from the requests’ diagnostics - DNA-87560 Crash at views::Widget::GetNativeView() - DNA-87561 Crash at CRYPTO_BUFFER_len - DNA-87599 Bypass VPN for default search engines doesn’t work - DNA-87611 Unittests fails on declarativeNetRequest and declarativeNetRequestFeedback permissions - DNA-87612 [Mac] Misaligned icon in address bar - DNA-87619 [Win/Lin] Misaligned icon in address bar - DNA-87716 [macOS/Windows] Crash when Search in tabs is open and Opera is minimized - DNA-87749 Crash at opera::InstantSearchSuggestionLineView:: SetIsHighlighted(bool) - The update to chromium 84.0.4147.89 fixes following issues: - CVE-2020-6510, CVE-2020-6511, CVE-2020-6512, CVE-2020-6513, CVE-2020-6514, CVE-2020-6515, CVE-2020-6516, CVE-2020-6517, CVE-2020-6518, CVE-2020-6519, CVE-2020-6520, CVE-2020-6521, CVE-2020-6522, CVE-2020-6523, CVE-2020-6524, CVE-2020-6525, CVE-2020-6526, CVE-2020-6527, CVE-2020-6528, CVE-2020-6529, CVE-2020-6530, CVE-2020-6531, CVE-2020-6533, CVE-2020-6534, CVE-2020-6535, CVE-2020-6536 - Complete Opera 70.0 changelog at: https://blogs.opera.com/desktop/changelog-for-70/ - Update to version 69.0.3686.77 - DNA-84207 New Yubikey enrollment is not working - DNA-87185 Lost translation - DNA-87382 Integrate scrolling to top of the feed with the existing scroll position restoration - DNA-87535 Sort out news on start page state - DNA-87588 Merge “Prevent pointer from being sent in the clear over SCTP” to desktop-stable-83-3686 - Update to version 69.0.3686.57 - DNA-86682 Title case in Russian translation - DNA-86807 Title case in O69 BR Portuguese translation - DNA-87104 Right click context menu becomes scrollable sometimes - DNA-87376 Search in tabs opens significantly slower in O69 - DNA-87505 [Welcome Pages][Stats] Session stats for Welcome and Upgrade pages - DNA-87535 Sort out news on start page state Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1:NonFree: zypper in -t patch openSUSE-2020-1148=1 Package List: - openSUSE Leap 15.1:NonFree (x86_64): opera-70.0.3728.71-lp151.2.24.1 References: https://www.suse.com/security/cve/CVE-2020-6510.html https://www.suse.com/security/cve/CVE-2020-6511.html https://www.suse.com/security/cve/CVE-2020-6512.html https://www.suse.com/security/cve/CVE-2020-6513.html https://www.suse.com/security/cve/CVE-2020-6514.html https://www.suse.com/security/cve/CVE-2020-6515.html https://www.suse.com/security/cve/CVE-2020-6516.html https://www.suse.com/security/cve/CVE-2020-6517.html https://www.suse.com/security/cve/CVE-2020-6518.html https://www.suse.com/security/cve/CVE-2020-6519.html https://www.suse.com/security/cve/CVE-2020-6520.html https://www.suse.com/security/cve/CVE-2020-6521.html https://www.suse.com/security/cve/CVE-2020-6522.html https://www.suse.com/security/cve/CVE-2020-6523.html https://www.suse.com/security/cve/CVE-2020-6524.html https://www.suse.com/security/cve/CVE-2020-6525.html https://www.suse.com/security/cve/CVE-2020-6526.html https://www.suse.com/security/cve/CVE-2020-6527.html https://www.suse.com/security/cve/CVE-2020-6528.html https://www.suse.com/security/cve/CVE-2020-6529.html https://www.suse.com/security/cve/CVE-2020-6530.html https://www.suse.com/security/cve/CVE-2020-6531.html https://www.suse.com/security/cve/CVE-2020-6533.html https://www.suse.com/security/cve/CVE-2020-6534.html https://www.suse.com/security/cve/CVE-2020-6535.html https://www.suse.com/security/cve/CVE-2020-6536.html

1 0

openSUSE-SU-2020:1146-1: important: Security update for ghostscript
by opensuse-security＠opensuse.org 04 Aug '20

04 Aug '20

openSUSE Security Update: Security update for ghostscript ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1146-1 Rating: important References: #1174415 Cross-References: CVE-2020-15900 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for ghostscript fixes the following issues: - fixed CVE-2020-15900 Memory Corruption (SAFER Sandbox Breakout) cf. https://bugs.ghostscript.com/show_bug.cgi?id=702582 (bsc#1174415) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1146=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): ghostscript-9.52-lp152.2.4.1 ghostscript-debuginfo-9.52-lp152.2.4.1 ghostscript-debugsource-9.52-lp152.2.4.1 ghostscript-devel-9.52-lp152.2.4.1 ghostscript-mini-9.52-lp152.2.4.1 ghostscript-mini-debuginfo-9.52-lp152.2.4.1 ghostscript-mini-debugsource-9.52-lp152.2.4.1 ghostscript-mini-devel-9.52-lp152.2.4.1 ghostscript-x11-9.52-lp152.2.4.1 ghostscript-x11-debuginfo-9.52-lp152.2.4.1 References: https://www.suse.com/security/cve/CVE-2020-15900.html https://bugzilla.suse.com/1174415

1 0

openSUSE-RU-2020:1145-1: Recommended update for icewm-theme-branding
by maintenance＠opensuse.org 04 Aug '20

04 Aug '20

openSUSE Recommended Update: Recommended update for icewm-theme-branding ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1145-1 Rating: low References: #1170420 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for icewm-theme-branding fixes an update issue. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1145=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): icewm-1.4.2-lp151.8.10.1 icewm-debuginfo-1.4.2-lp151.8.10.1 icewm-debugsource-1.4.2-lp151.8.10.1 icewm-default-1.4.2-lp151.8.10.1 icewm-default-debuginfo-1.4.2-lp151.8.10.1 icewm-lite-1.4.2-lp151.8.10.1 icewm-lite-debuginfo-1.4.2-lp151.8.10.1 - openSUSE Leap 15.1 (noarch): icewm-config-upstream-1.4.2-lp151.8.10.1 icewm-lang-1.4.2-lp151.8.10.1 icewm-theme-branding-1.2.4-lp151.3.13.1 References: https://bugzilla.suse.com/1170420

1 0

openSUSE-SU-2020:1144-1: moderate: Security update for targetcli-fb
by opensuse-security＠opensuse.org 04 Aug '20

04 Aug '20

openSUSE Security Update: Security update for targetcli-fb ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1144-1 Rating: moderate References: #1172743 Cross-References: CVE-2020-13867 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for targetcli-fb fixes the following issues: - CVE-2020-13867: Fixed the permissions in /etc/target (bsc#1172743) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1144=1 Package List: - openSUSE Leap 15.2 (noarch): python2-targetcli-fb-2.1.52-lp152.2.3.1 python3-targetcli-fb-2.1.52-lp152.2.3.1 targetcli-fb-common-2.1.52-lp152.2.3.1 References: https://www.suse.com/security/cve/CVE-2020-13867.html https://bugzilla.suse.com/1172743

1 0

openSUSE-SU-2020:1142-1: important: Security update for ghostscript
by opensuse-security＠opensuse.org 03 Aug '20

03 Aug '20

openSUSE Security Update: Security update for ghostscript ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1142-1 Rating: important References: #1174415 Cross-References: CVE-2020-15900 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for ghostscript fixes the following issues: - fixed CVE-2020-15900 Memory Corruption (SAFER Sandbox Breakout) cf. https://bugs.ghostscript.com/show_bug.cgi?id=702582 (bsc#1174415) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1142=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): ghostscript-9.52-lp151.3.15.1 ghostscript-debuginfo-9.52-lp151.3.15.1 ghostscript-debugsource-9.52-lp151.3.15.1 ghostscript-devel-9.52-lp151.3.15.1 ghostscript-mini-9.52-lp151.3.15.1 ghostscript-mini-debuginfo-9.52-lp151.3.15.1 ghostscript-mini-debugsource-9.52-lp151.3.15.1 ghostscript-mini-devel-9.52-lp151.3.15.1 ghostscript-x11-9.52-lp151.3.15.1 ghostscript-x11-debuginfo-9.52-lp151.3.15.1 References: https://www.suse.com/security/cve/CVE-2020-15900.html https://bugzilla.suse.com/1174415

1 0

openSUSE-RU-2020:1143-1: moderate: Recommended update for systemd
by maintenance＠opensuse.org 03 Aug '20

03 Aug '20

openSUSE Recommended Update: Recommended update for systemd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1143-1 Rating: moderate References: #1157315 #1162698 #1164538 #1169488 #1171145 #1172072 #1173227 #1173229 #1173422 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 9 recommended fixes can now be installed. Description: This update for systemd fixes the following issues: - units: starting suspend.target should not fail when suspend is successful (bsc#1172072) - core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set - mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488) - mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too - udev: rename the persistent link for ATA devices (bsc#1164538) - shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315) - tmpfiles: remove unnecessary assert (bsc#1171145) - test-engine: manager_free() was called too early - pid1: by default make user units inherit their umask from the user manager (bsc#1162698) - migrate-sysconfig-i18n.sh: fixed marker handling (bsc#1173229) The marker is used to make sure the script is run only once. Instead of storing it in /usr, use /var which is more appropriate for such file. Also make it owned by systemd package. - Fix inconsistent file modes for some ghost files (bsc#1173227) Ghost files are assumed by rpm to have mode 000 by default which is not consistent with file permissions set at runtime. Also /var/lib/systemd/random-seed was tracked wrongly as a directory. Also don't track (ghost) /etc/systemd/system/runlevel*.target aliases since we're not supposed to track units or aliases user might define/override. - Fix build of systemd on openSUSE Leap 15.2 (bsc#1173422) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1143=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libsystemd0-234-lp152.31.4.1 libsystemd0-debuginfo-234-lp152.31.4.1 libsystemd0-mini-234-lp152.31.4.1 libsystemd0-mini-debuginfo-234-lp152.31.4.1 libudev-devel-234-lp152.31.4.1 libudev-mini-devel-234-lp152.31.4.1 libudev-mini1-234-lp152.31.4.1 libudev-mini1-debuginfo-234-lp152.31.4.1 libudev1-234-lp152.31.4.1 libudev1-debuginfo-234-lp152.31.4.1 nss-myhostname-234-lp152.31.4.1 nss-myhostname-debuginfo-234-lp152.31.4.1 nss-mymachines-234-lp152.31.4.1 nss-mymachines-debuginfo-234-lp152.31.4.1 nss-systemd-234-lp152.31.4.1 nss-systemd-debuginfo-234-lp152.31.4.1 systemd-234-lp152.31.4.1 systemd-container-234-lp152.31.4.1 systemd-container-debuginfo-234-lp152.31.4.1 systemd-coredump-234-lp152.31.4.1 systemd-coredump-debuginfo-234-lp152.31.4.1 systemd-debuginfo-234-lp152.31.4.1 systemd-debugsource-234-lp152.31.4.1 systemd-devel-234-lp152.31.4.1 systemd-journal-remote-234-lp152.31.4.1 systemd-journal-remote-debuginfo-234-lp152.31.4.1 systemd-logger-234-lp152.31.4.1 systemd-mini-234-lp152.31.4.1 systemd-mini-container-mini-234-lp152.31.4.1 systemd-mini-container-mini-debuginfo-234-lp152.31.4.1 systemd-mini-coredump-mini-234-lp152.31.4.1 systemd-mini-coredump-mini-debuginfo-234-lp152.31.4.1 systemd-mini-debuginfo-234-lp152.31.4.1 systemd-mini-debugsource-234-lp152.31.4.1 systemd-mini-devel-234-lp152.31.4.1 systemd-mini-sysvinit-234-lp152.31.4.1 systemd-network-234-lp152.31.4.1 systemd-network-debuginfo-234-lp152.31.4.1 systemd-sysvinit-234-lp152.31.4.1 udev-234-lp152.31.4.1 udev-debuginfo-234-lp152.31.4.1 udev-mini-234-lp152.31.4.1 udev-mini-debuginfo-234-lp152.31.4.1 - openSUSE Leap 15.2 (noarch): systemd-bash-completion-234-lp152.31.4.1 systemd-mini-bash-completion-234-lp152.31.4.1 - openSUSE Leap 15.2 (x86_64): libsystemd0-32bit-234-lp152.31.4.1 libsystemd0-32bit-debuginfo-234-lp152.31.4.1 libudev-devel-32bit-234-lp152.31.4.1 libudev1-32bit-234-lp152.31.4.1 libudev1-32bit-debuginfo-234-lp152.31.4.1 nss-myhostname-32bit-234-lp152.31.4.1 nss-myhostname-32bit-debuginfo-234-lp152.31.4.1 nss-mymachines-32bit-234-lp152.31.4.1 nss-mymachines-32bit-debuginfo-234-lp152.31.4.1 systemd-32bit-234-lp152.31.4.1 systemd-32bit-debuginfo-234-lp152.31.4.1 References: https://bugzilla.suse.com/1157315 https://bugzilla.suse.com/1162698 https://bugzilla.suse.com/1164538 https://bugzilla.suse.com/1169488 https://bugzilla.suse.com/1171145 https://bugzilla.suse.com/1172072 https://bugzilla.suse.com/1173227 https://bugzilla.suse.com/1173229 https://bugzilla.suse.com/1173422

1 0

openSUSE-SU-2020:1141-1: moderate: Security update for targetcli-fb
by opensuse-security＠opensuse.org 03 Aug '20

03 Aug '20

openSUSE Security Update: Security update for targetcli-fb ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1141-1 Rating: moderate References: #1172743 Cross-References: CVE-2020-13867 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for targetcli-fb fixes the following issues: - CVE-2020-13867: Fixed the permissions in /etc/target (bsc#1172743) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1141=1 Package List: - openSUSE Leap 15.1 (noarch): python2-targetcli-fb-2.1.49-lp151.2.10.1 python3-targetcli-fb-2.1.49-lp151.2.10.1 targetcli-fb-common-2.1.49-lp151.2.10.1 References: https://www.suse.com/security/cve/CVE-2020-13867.html https://bugzilla.suse.com/1172743

1 0

openSUSE-RU-2020:1140-1: important: Recommended update for crmsh
by maintenance＠opensuse.org 03 Aug '20

03 Aug '20

openSUSE Recommended Update: Recommended update for crmsh ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1140-1 Rating: important References: #1174385 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for crmsh fixes the following issues: - Fix for SSH communication between HA nodes by copying ssh key to 'qnetd' while detect need a password. (bsc#1174385) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1140=1 Package List: - openSUSE Leap 15.2 (noarch): crmsh-4.2.0+git.1595517298.a06e892f-lp152.4.7.1 crmsh-scripts-4.2.0+git.1595517298.a06e892f-lp152.4.7.1 crmsh-test-4.2.0+git.1595517298.a06e892f-lp152.4.7.1 References: https://bugzilla.suse.com/1174385

1 0

openSUSE-SU-2020:1139-1: moderate: Security update for claws-mail
by opensuse-security＠opensuse.org 03 Aug '20

03 Aug '20

openSUSE Security Update: Security update for claws-mail ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1139-1 Rating: moderate References: #1174457 Cross-References: CVE-2020-15917 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for claws-mail fixes the following issues: - Update to 3.17.6: * It is now possible to 'Inherit Folder properties and processing rules from parent folder' when creating new folders with the move message and copy message dialogues. * A Phishing warning is now shown when copying a phishing URL, (in addition to clicking a phishing URL). * The progress window when importing an mbox file is now more responsive. * A warning dialogue is shown if the selected privacy system is 'None' and automatic signing amd/or encrypting is enabled. * Python plugin: pkgconfig is now used to check for python2. This enables the Python plugin (which uses python2) to be built on newer systems which have both python2 and python3. - CVE-2020-15917: Fixed an improper handling of suffix data after STARTTLS is mishandled (boo#1174457). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1139=1 Package List: - openSUSE Leap 15.2 (x86_64): claws-mail-3.17.6-lp152.3.3.1 claws-mail-debuginfo-3.17.6-lp152.3.3.1 claws-mail-debugsource-3.17.6-lp152.3.3.1 claws-mail-devel-3.17.6-lp152.3.3.1 - openSUSE Leap 15.2 (noarch): claws-mail-lang-3.17.6-lp152.3.3.1 References: https://www.suse.com/security/cve/CVE-2020-15917.html https://bugzilla.suse.com/1174457

1 0

openSUSE-RU-2020:1138-1: moderate: Recommended update for systemd
by maintenance＠opensuse.org 03 Aug '20

03 Aug '20

openSUSE Recommended Update: Recommended update for systemd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1138-1 Rating: moderate References: #1173227 #1173229 #1173422 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for systemd fixes the following issues: - migrate-sysconfig-i18n.sh: fixed marker handling (bsc#1173229) The marker is used to make sure the script is run only once. Instead of storing it in /usr, use /var which is more appropriate for such file. Also make it owned by systemd package. - Fix inconsistent file modes for some ghost files (bsc#1173227) Ghost files are assumed by rpm to have mode 000 by default which is not consistent with file permissions set at runtime. Also /var/lib/systemd/random-seed was tracked wrongly as a directory. Also don't track (ghost) /etc/systemd/system/runlevel*.target aliases since we're not supposed to track units or aliases user might define/override. - Fix build of systemd on openSUSE Leap 15.2 (bsc#1173422) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1138=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libsystemd0-234-lp151.26.22.1 libsystemd0-debuginfo-234-lp151.26.22.1 libsystemd0-mini-234-lp151.26.22.1 libsystemd0-mini-debuginfo-234-lp151.26.22.1 libudev-devel-234-lp151.26.22.1 libudev-mini-devel-234-lp151.26.22.1 libudev-mini1-234-lp151.26.22.1 libudev-mini1-debuginfo-234-lp151.26.22.1 libudev1-234-lp151.26.22.1 libudev1-debuginfo-234-lp151.26.22.1 nss-myhostname-234-lp151.26.22.1 nss-myhostname-debuginfo-234-lp151.26.22.1 nss-mymachines-234-lp151.26.22.1 nss-mymachines-debuginfo-234-lp151.26.22.1 nss-systemd-234-lp151.26.22.1 nss-systemd-debuginfo-234-lp151.26.22.1 systemd-234-lp151.26.22.1 systemd-container-234-lp151.26.22.1 systemd-container-debuginfo-234-lp151.26.22.1 systemd-coredump-234-lp151.26.22.1 systemd-coredump-debuginfo-234-lp151.26.22.1 systemd-debuginfo-234-lp151.26.22.1 systemd-debugsource-234-lp151.26.22.1 systemd-devel-234-lp151.26.22.1 systemd-journal-remote-234-lp151.26.22.1 systemd-journal-remote-debuginfo-234-lp151.26.22.1 systemd-logger-234-lp151.26.22.1 systemd-mini-234-lp151.26.22.1 systemd-mini-container-mini-234-lp151.26.22.1 systemd-mini-container-mini-debuginfo-234-lp151.26.22.1 systemd-mini-coredump-mini-234-lp151.26.22.1 systemd-mini-coredump-mini-debuginfo-234-lp151.26.22.1 systemd-mini-debuginfo-234-lp151.26.22.1 systemd-mini-debugsource-234-lp151.26.22.1 systemd-mini-devel-234-lp151.26.22.1 systemd-mini-sysvinit-234-lp151.26.22.1 systemd-network-234-lp151.26.22.1 systemd-network-debuginfo-234-lp151.26.22.1 systemd-sysvinit-234-lp151.26.22.1 udev-234-lp151.26.22.1 udev-debuginfo-234-lp151.26.22.1 udev-mini-234-lp151.26.22.1 udev-mini-debuginfo-234-lp151.26.22.1 - openSUSE Leap 15.1 (noarch): systemd-bash-completion-234-lp151.26.22.1 systemd-mini-bash-completion-234-lp151.26.22.1 - openSUSE Leap 15.1 (x86_64): libsystemd0-32bit-234-lp151.26.22.1 libsystemd0-32bit-debuginfo-234-lp151.26.22.1 libudev-devel-32bit-234-lp151.26.22.1 libudev1-32bit-234-lp151.26.22.1 libudev1-32bit-debuginfo-234-lp151.26.22.1 nss-myhostname-32bit-234-lp151.26.22.1 nss-myhostname-32bit-debuginfo-234-lp151.26.22.1 nss-mymachines-32bit-234-lp151.26.22.1 nss-mymachines-32bit-debuginfo-234-lp151.26.22.1 systemd-32bit-234-lp151.26.22.1 systemd-32bit-debuginfo-234-lp151.26.22.1 References: https://bugzilla.suse.com/1173227 https://bugzilla.suse.com/1173229 https://bugzilla.suse.com/1173422

1 0

openSUSE-RU-2020:1137-1: moderate: Recommended update for steam
by maintenance＠opensuse.org 03 Aug '20

03 Aug '20

openSUSE Recommended Update: Recommended update for steam ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1137-1 Rating: moderate References: #1157832 #1157903 Affected Products: openSUSE Leap 15.2:NonFree openSUSE Leap 15.1:NonFree ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for steam fixes the following issues: Steam was updated to version 1.0.0.66 * Bootstrap using updated Steam client: - Client timestamp 1595977781 (2020-07-28) - Steam Runtime version 0.20200604.0 * Update steam-devices subproject up to 2020-07-28 - Replace escaped double quotes in udev rules with single quotes, for compatibility with udev < 235 and eudev. - Add Recommends: bubblewrap, required by the experimental container runtime system - Switch to FirewallD Update to version 1.0.0.63 * Update steam-devices subproject up to 2020-06-05 - Add HORIPAD for Nintendo Switch (thanks, @BrokenGale) (Fixes: steam-for-linux#6944, steam-devices#7) - Add ASTRO C40 controller (thanks, @exhumer2) (Fixes: steam-devices#5) - Add PowerA Nintendo Switch Controller (thanks, @blazingkin) (Fixes: steam-devices#6) - Add a workaround for PowerA Wireless Controller (thanks, Andrey Smirnov) (Fixes: steam-devices#9; T21767) * debian/steam-launcher.postinst: Notify udevd to reload its rules. This means the steam-devices rules should take effect immediately, instead of being deferred until after the next reboot. (T19535) * bin_steam.sh: Don't overwrite steam.desktop if it's a symlink. In a pre-configured distro like SteamOS, ~/Desktop/steam.desktop might already be a symlink to /usr/share/applications/steam.desktop, in which case overwriting it is pointless. (T21633) Update to version 1.0.0.64 * steam.list: Download updates via https (T21740) In older versions of apt (lower than 1.6) we need to install apt-transport-https to use https repositories, so do that. * steam.list: Switch the suite from precise to stable (Fixes: steam-for-linux#4436) * steam.list: Add commented-out apt sources for the beta launcher - Added recommend lsb-release to provide OS info and to support hw survey boo#1157832 - Merge steam-controller and steam-vr into steam-devices like other distros. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2:NonFree: zypper in -t patch openSUSE-2020-1137=1 - openSUSE Leap 15.1:NonFree: zypper in -t patch openSUSE-2020-1137=1 Package List: - openSUSE Leap 15.2:NonFree (x86_64): steam-1.0.0.66-lp152.2.6.1 steam-devices-1.0.0.66-lp152.2.6.1 - openSUSE Leap 15.1:NonFree (x86_64): steam-1.0.0.66-lp151.3.3.1 steam-devices-1.0.0.66-lp151.3.3.1 References: https://bugzilla.suse.com/1157832 https://bugzilla.suse.com/1157903

1 0

openSUSE-RU-2020:1136-1: moderate: Recommended update for 389-ds
by maintenance＠opensuse.org 03 Aug '20

03 Aug '20

openSUSE Recommended Update: Recommended update for 389-ds ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1136-1 Rating: moderate References: #1172328 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for 389-ds fixes the following issues: - This corrects a failure to install on SUSE due to incorrect hostname generation, and a python3 utf8 issue that is triggered by systemd. (bsc#1172328) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1136=1 Package List: - openSUSE Leap 15.2 (x86_64): 389-ds-1.4.3.9~git0.3eb8617f6-lp152.2.3.1 389-ds-debuginfo-1.4.3.9~git0.3eb8617f6-lp152.2.3.1 389-ds-debugsource-1.4.3.9~git0.3eb8617f6-lp152.2.3.1 389-ds-devel-1.4.3.9~git0.3eb8617f6-lp152.2.3.1 389-ds-snmp-1.4.3.9~git0.3eb8617f6-lp152.2.3.1 389-ds-snmp-debuginfo-1.4.3.9~git0.3eb8617f6-lp152.2.3.1 lib389-1.4.3.9~git0.3eb8617f6-lp152.2.3.1 libsvrcore0-1.4.3.9~git0.3eb8617f6-lp152.2.3.1 libsvrcore0-debuginfo-1.4.3.9~git0.3eb8617f6-lp152.2.3.1 References: https://bugzilla.suse.com/1172328

1 0

openSUSE-RU-2020:1132-1: moderate: Recommended update for diffutils
by maintenance＠opensuse.org 02 Aug '20

02 Aug '20

openSUSE Recommended Update: Recommended update for diffutils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1132-1 Rating: moderate References: #1156913 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for diffutils fixes the following issue: - Disable a sporadically failing test for ppc64 and ppc64le builds. (bsc#1156913) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1132=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): diffutils-3.6-lp152.5.3.1 diffutils-debuginfo-3.6-lp152.5.3.1 diffutils-debugsource-3.6-lp152.5.3.1 - openSUSE Leap 15.2 (noarch): diffutils-lang-3.6-lp152.5.3.1 References: https://bugzilla.suse.com/1156913

1 0

openSUSE-RU-2020:1133-1: moderate: Recommended update for python-kiwi
by maintenance＠opensuse.org 02 Aug '20

02 Aug '20

openSUSE Recommended Update: Recommended update for python-kiwi ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1133-1 Rating: moderate References: #1156677 #1168973 #1172928 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for python-kiwi fixes the following issues: - Fixed checking for root device in grub config. (bsc#1172928) - Fix for conflicting files of man-pages between different versions. (bsc#1168973, bsc#1156677) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1133=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): dracut-kiwi-lib-9.20.5-lp151.2.10.1 dracut-kiwi-live-9.20.5-lp151.2.10.1 dracut-kiwi-oem-dump-9.20.5-lp151.2.10.1 dracut-kiwi-oem-repart-9.20.5-lp151.2.10.1 dracut-kiwi-overlay-9.20.5-lp151.2.10.1 kiwi-man-pages-9.20.5-lp151.2.10.1 kiwi-pxeboot-9.20.5-lp151.2.10.1 kiwi-tools-9.20.5-lp151.2.10.1 kiwi-tools-debuginfo-9.20.5-lp151.2.10.1 python-kiwi-debugsource-9.20.5-lp151.2.10.1 python3-kiwi-9.20.5-lp151.2.10.1 References: https://bugzilla.suse.com/1156677 https://bugzilla.suse.com/1168973 https://bugzilla.suse.com/1172928

1 0

openSUSE-RU-2020:1131-1: moderate: Recommended update for python-kiwi
by maintenance＠opensuse.org 02 Aug '20

02 Aug '20

openSUSE Recommended Update: Recommended update for python-kiwi ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1131-1 Rating: moderate References: #1165823 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-kiwi fixes the following issues: - Fixed _get_grub2_mkconfig_tool Last patch on this method breaks the search for alternative mkconfig names. It returns always on the first lookup which could be none. This breaks on systems that uses a different name than grub2-mkconfig, like on Ubuntu. - Increase spare space on disk repart (bsc#1165823) The sizing of the virtual cylinders in parted seems to be unfavorable, as with some disks and SD cards here the device size is not a multiple of the cylinder size, so the last incomplete cylinder is wasted. If this wasted space is more than 5MiB, kiwi tries to resize indefinitely. Therefore min_additional_mbytes gets increased to prevent running into this situation. This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1131=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): dracut-kiwi-lib-9.20.5-lp152.5.3.1 dracut-kiwi-live-9.20.5-lp152.5.3.1 dracut-kiwi-oem-dump-9.20.5-lp152.5.3.1 dracut-kiwi-oem-repart-9.20.5-lp152.5.3.1 dracut-kiwi-overlay-9.20.5-lp152.5.3.1 kiwi-man-pages-9.20.5-lp152.5.3.1 kiwi-pxeboot-9.20.5-lp152.5.3.1 kiwi-tools-9.20.5-lp152.5.3.1 kiwi-tools-debuginfo-9.20.5-lp152.5.3.1 python-kiwi-debugsource-9.20.5-lp152.5.3.1 python3-kiwi-9.20.5-lp152.5.3.1 References: https://bugzilla.suse.com/1165823

1 0

openSUSE-RU-2020:1134-1: moderate: Recommended update for petsc
by maintenance＠opensuse.org 02 Aug '20

02 Aug '20

openSUSE Recommended Update: Recommended update for petsc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1134-1 Rating: moderate References: #1173065 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for petsc fixes the following issue: - Fix incorrect dependency of the HPC devel packages. (bsc#1173065) Now the devel packages are not wrongly uninstalled on a petsc version upgrade. - Provide the documentation package This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1134=1 Package List: - openSUSE Leap 15.1 (noarch): petsc-doc-3.8.3-lp151.8.3.1 - openSUSE Leap 15.1 (x86_64): libpetsc-gnu-mpich-hpc-3.8.3-lp151.8.3.1 libpetsc-gnu-mvapich2-hpc-3.8.3-lp151.8.3.1 libpetsc-gnu-openmpi1-hpc-3.8.3-lp151.8.3.1 libpetsc-gnu-openmpi2-hpc-3.8.3-lp151.8.3.1 libpetsc-gnu-openmpi3-hpc-3.8.3-lp151.8.3.1 libpetsc_3_8_3-gnu-mpich-hpc-3.8.3-lp151.8.3.1 libpetsc_3_8_3-gnu-mpich-hpc-debuginfo-3.8.3-lp151.8.3.1 libpetsc_3_8_3-gnu-mvapich2-hpc-3.8.3-lp151.8.3.1 libpetsc_3_8_3-gnu-mvapich2-hpc-debuginfo-3.8.3-lp151.8.3.1 libpetsc_3_8_3-gnu-openmpi1-hpc-3.8.3-lp151.8.3.1 libpetsc_3_8_3-gnu-openmpi1-hpc-debuginfo-3.8.3-lp151.8.3.1 libpetsc_3_8_3-gnu-openmpi2-hpc-3.8.3-lp151.8.3.1 libpetsc_3_8_3-gnu-openmpi2-hpc-debuginfo-3.8.3-lp151.8.3.1 libpetsc_3_8_3-gnu-openmpi3-hpc-3.8.3-lp151.8.3.1 libpetsc_3_8_3-gnu-openmpi3-hpc-debuginfo-3.8.3-lp151.8.3.1 petsc-gnu-mpich-hpc-devel-3.8.3-lp151.8.3.1 petsc-gnu-mvapich2-hpc-devel-3.8.3-lp151.8.3.1 petsc-gnu-openmpi1-hpc-devel-3.8.3-lp151.8.3.1 petsc-gnu-openmpi2-hpc-devel-3.8.3-lp151.8.3.1 petsc-gnu-openmpi3-hpc-devel-3.8.3-lp151.8.3.1 petsc_3_8_3-gnu-mpich-hpc-debugsource-3.8.3-lp151.8.3.1 petsc_3_8_3-gnu-mpich-hpc-devel-3.8.3-lp151.8.3.1 petsc_3_8_3-gnu-mpich-hpc-saws-3.8.3-lp151.8.3.1 petsc_3_8_3-gnu-mvapich2-hpc-debugsource-3.8.3-lp151.8.3.1 petsc_3_8_3-gnu-mvapich2-hpc-devel-3.8.3-lp151.8.3.1 petsc_3_8_3-gnu-mvapich2-hpc-saws-3.8.3-lp151.8.3.1 petsc_3_8_3-gnu-openmpi1-hpc-debugsource-3.8.3-lp151.8.3.1 petsc_3_8_3-gnu-openmpi1-hpc-devel-3.8.3-lp151.8.3.1 petsc_3_8_3-gnu-openmpi1-hpc-saws-3.8.3-lp151.8.3.1 petsc_3_8_3-gnu-openmpi2-hpc-debugsource-3.8.3-lp151.8.3.1 petsc_3_8_3-gnu-openmpi2-hpc-devel-3.8.3-lp151.8.3.1 petsc_3_8_3-gnu-openmpi2-hpc-saws-3.8.3-lp151.8.3.1 petsc_3_8_3-gnu-openmpi3-hpc-debugsource-3.8.3-lp151.8.3.1 petsc_3_8_3-gnu-openmpi3-hpc-devel-3.8.3-lp151.8.3.1 petsc_3_8_3-gnu-openmpi3-hpc-saws-3.8.3-lp151.8.3.1 References: https://bugzilla.suse.com/1173065

1 0

openSUSE-RU-2020:1135-1: moderate: Recommended update for android-udev-rules
by maintenance＠opensuse.org 02 Aug '20

02 Aug '20

openSUSE Recommended Update: Recommended update for android-udev-rules ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1135-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for android-udev-rules fixes the following issues: - This package replaces android-tools-udev version 5 add the missing Provides/Obsoletes to avoid fileconflicts Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1135=1 Package List: - openSUSE Leap 15.2 (noarch): android-udev-rules-20191103-lp152.2.3.1 References:

1 0

openSUSE-RU-2020:1130-1: moderate: Recommended update for diffutils
by maintenance＠opensuse.org 02 Aug '20

02 Aug '20

openSUSE Recommended Update: Recommended update for diffutils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1130-1 Rating: moderate References: #1156913 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for diffutils fixes the following issue: - Disable a sporadically failing test for ppc64 and ppc64le builds. (bsc#1156913) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1130=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): diffutils-3.6-lp151.4.3.1 diffutils-debuginfo-3.6-lp151.4.3.1 diffutils-debugsource-3.6-lp151.4.3.1 - openSUSE Leap 15.1 (noarch): diffutils-lang-3.6-lp151.4.3.1 References: https://bugzilla.suse.com/1156913

1 0

openSUSE-RU-2020:1127-1: Recommended update for go1.10
by maintenance＠opensuse.org 02 Aug '20

02 Aug '20

openSUSE Recommended Update: Recommended update for go1.10 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1127-1 Rating: low References: #1169832 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for go1.10 fixes the following issues: - Fix for an issue when installing on Raspberry Pi causes illegal instruction due to unproper ARM arch set. (bsc#1169832) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1127=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): go1.10-1.10.8-lp151.2.9.1 go1.10-doc-1.10.8-lp151.2.9.1 - openSUSE Leap 15.1 (x86_64): go1.10-race-1.10.8-lp151.2.9.1 References: https://bugzilla.suse.com/1169832

1 0

openSUSE-SU-2020:1128-1: moderate: Security update for libraw
by opensuse-security＠opensuse.org 02 Aug '20

02 Aug '20

openSUSE Security Update: Security update for libraw ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1128-1 Rating: moderate References: #1173674 Cross-References: CVE-2020-15503 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libraw fixes the following issues: - security update - added patches fix CVE-2020-15503 [bsc#1173674], lack of thumbnail size range check can lead to buffer overflow + libraw-CVE-2020-15503.patch This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1128=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libraw-debuginfo-0.18.9-lp152.5.3.1 libraw-debugsource-0.18.9-lp152.5.3.1 libraw-devel-0.18.9-lp152.5.3.1 libraw-devel-static-0.18.9-lp152.5.3.1 libraw-tools-0.18.9-lp152.5.3.1 libraw-tools-debuginfo-0.18.9-lp152.5.3.1 libraw16-0.18.9-lp152.5.3.1 libraw16-debuginfo-0.18.9-lp152.5.3.1 References: https://www.suse.com/security/cve/CVE-2020-15503.html https://bugzilla.suse.com/1173674

1 0

openSUSE-RU-2020:1129-1: Recommended update for go1.12
by maintenance＠opensuse.org 02 Aug '20

02 Aug '20

openSUSE Recommended Update: Recommended update for go1.12 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1129-1 Rating: low References: #1169832 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for go1.12 fixes the following issues: - Fix for an issue when installing on Raspberry Pi causes illegal instruction due to unproper ARM arch set. (bsc#1169832) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1129=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): go1.12-1.12.17-lp152.3.4.1 go1.12-doc-1.12.17-lp152.3.4.1 - openSUSE Leap 15.2 (x86_64): go1.12-race-1.12.17-lp152.3.4.1 References: https://bugzilla.suse.com/1169832

1 0

openSUSE-RU-2020:1126-1: moderate: Recommended update for installation-images
by maintenance＠opensuse.org 02 Aug '20

02 Aug '20

openSUSE Recommended Update: Recommended update for installation-images ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1126-1 Rating: moderate References: #1158522 #1172853 #1173204 #1173336 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for installation-images fixes the following issues: - Fixes an issue with no hostqn and hostid and generate them for NVMe in the install system. (bsc#1172853) - Add missed file to instsys to fix failing openQA test in 'windows_client_remotelogin'. (bsc#1158522) - Do not ask for registration when install= points to a repository, (bsc#1173336) - Make it possible to use unsigned repositories. (bsc#1173204) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1126=1 Package List: - openSUSE Leap 15.2 (noarch): tftpboot-installation-openSUSE-Leap-15.2-x86_64-14.472-lp152.2.3.1 - openSUSE Leap 15.2 (x86_64): install-initrd-openSUSE-14.472-lp152.2.3.1 installation-images-debuginfodeps-openSUSE-14.472-lp152.2.3.1 installation-images-openSUSE-14.472-lp152.2.3.1 skelcd-installer-net-openSUSE-14.472-lp152.2.3.1 skelcd-installer-openSUSE-14.472-lp152.2.3.1 References: https://bugzilla.suse.com/1158522 https://bugzilla.suse.com/1172853 https://bugzilla.suse.com/1173204 https://bugzilla.suse.com/1173336

1 0

openSUSE-RU-2020:1122-1: moderate: Recommended update for mkdud
by maintenance＠opensuse.org 01 Aug '20

01 Aug '20

openSUSE Recommended Update: Recommended update for mkdud ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1122-1 Rating: moderate References: #1173988 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for mkdud fixes the following issues: - ensure DUD repos are removed at the end of the installation (boo#1173988) - add --sign-key-id option to allow specifying a gpg signing key by id Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1122=1 Package List: - openSUSE Leap 15.2 (noarch): mkdud-1.50-lp152.2.3.1 References: https://bugzilla.suse.com/1173988

1 0

openSUSE-RU-2020:1120-1: moderate: Recommended update for fence-agents
by maintenance＠opensuse.org 01 Aug '20

01 Aug '20

openSUSE Recommended Update: Recommended update for fence-agents ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1120-1 Rating: moderate References: #1169485 #1169852 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for fence-agents fixes the following issues: - Disable cache discovery for "gcp-vpc-move-route" resource agent. (bsc#1169852) - fence_vmware_rest Failed: 'error' object does not support indexing. (bsc#1169485) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1120=1 Package List: - openSUSE Leap 15.2 (x86_64): fence-agents-4.4.0+git.1558595666.5f79f9e9-lp152.3.3.1 fence-agents-amt_ws-4.4.0+git.1558595666.5f79f9e9-lp152.3.3.1 fence-agents-debuginfo-4.4.0+git.1558595666.5f79f9e9-lp152.3.3.1 fence-agents-debugsource-4.4.0+git.1558595666.5f79f9e9-lp152.3.3.1 fence-agents-devel-4.4.0+git.1558595666.5f79f9e9-lp152.3.3.1 References: https://bugzilla.suse.com/1169485 https://bugzilla.suse.com/1169852

1 0

openSUSE-SU-2020:1121-1: moderate: Security update for ldb
by opensuse-security＠opensuse.org 01 Aug '20

01 Aug '20

openSUSE Security Update: Security update for ldb ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1121-1 Rating: moderate References: #1173159 Cross-References: CVE-2020-10730 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for ldb fixes the following issues: - CVE-2020-10730: Fixed a null de-reference in AD DC LDAP server when ASQ and VLV combined (bsc#1173159). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1121=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): ldb-debugsource-1.4.6-lp151.2.3.1 ldb-tools-1.4.6-lp151.2.3.1 ldb-tools-debuginfo-1.4.6-lp151.2.3.1 libldb-devel-1.4.6-lp151.2.3.1 libldb1-1.4.6-lp151.2.3.1 libldb1-debuginfo-1.4.6-lp151.2.3.1 python-ldb-1.4.6-lp151.2.3.1 python-ldb-debuginfo-1.4.6-lp151.2.3.1 python-ldb-devel-1.4.6-lp151.2.3.1 python3-ldb-1.4.6-lp151.2.3.1 python3-ldb-debuginfo-1.4.6-lp151.2.3.1 python3-ldb-devel-1.4.6-lp151.2.3.1 - openSUSE Leap 15.1 (x86_64): libldb1-32bit-1.4.6-lp151.2.3.1 libldb1-32bit-debuginfo-1.4.6-lp151.2.3.1 python-ldb-32bit-1.4.6-lp151.2.3.1 python-ldb-32bit-debuginfo-1.4.6-lp151.2.3.1 python3-ldb-32bit-1.4.6-lp151.2.3.1 python3-ldb-32bit-debuginfo-1.4.6-lp151.2.3.1 References: https://www.suse.com/security/cve/CVE-2020-10730.html https://bugzilla.suse.com/1173159

1 0

openSUSE-RU-2020:1119-1: moderate: Recommended update for fence-agents
by maintenance＠opensuse.org 01 Aug '20

01 Aug '20

openSUSE Recommended Update: Recommended update for fence-agents ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1119-1 Rating: moderate References: #1169485 #1169852 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for fence-agents fixes the following issues: - Disable cache discovery for "gcp-vpc-move-route" resource agent. (bsc#1169852) - fence_vmware_rest Failed: 'error' object does not support indexing. (bsc#1169485) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1119=1 Package List: - openSUSE Leap 15.1 (x86_64): fence-agents-4.4.0+git.1558595666.5f79f9e9-lp151.2.9.1 fence-agents-amt_ws-4.4.0+git.1558595666.5f79f9e9-lp151.2.9.1 fence-agents-debuginfo-4.4.0+git.1558595666.5f79f9e9-lp151.2.9.1 fence-agents-debugsource-4.4.0+git.1558595666.5f79f9e9-lp151.2.9.1 fence-agents-devel-4.4.0+git.1558595666.5f79f9e9-lp151.2.9.1 References: https://bugzilla.suse.com/1169485 https://bugzilla.suse.com/1169852

1 0