August 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2020:1308-1: moderate: Recommended update for python-azure-agent
by maintenance＠opensuse.org 31 Aug '20

31 Aug '20

openSUSE Recommended Update: Recommended update for python-azure-agent ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1308-1 Rating: moderate References: #1175198 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-azure-agent contains the following fix: - Drop paa_sudo_sle15_nopwd.patch (bsc#1175198) + sudoers file is managed by cloud-init we no longer need this hack This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1308=1 Package List: - openSUSE Leap 15.1 (noarch): python-azure-agent-2.2.45-lp151.2.12.1 python-azure-agent-test-2.2.45-lp151.2.12.1 References: https://bugzilla.suse.com/1175198

1 0

openSUSE-SU-2020:1306-1: important: Security update for chromium
by opensuse-security＠opensuse.org 31 Aug '20

31 Aug '20

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1306-1 Rating: important References: #1175757 Cross-References: CVE-2020-6558 CVE-2020-6559 CVE-2020-6560 CVE-2020-6561 CVE-2020-6562 CVE-2020-6563 CVE-2020-6564 CVE-2020-6565 CVE-2020-6566 CVE-2020-6567 CVE-2020-6568 CVE-2020-6569 CVE-2020-6570 CVE-2020-6571 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes 14 vulnerabilities is now available. Description: This update for chromium fixes the following issues: Chromium was updated to version 85.0.4183.83 (boo#1175757) fixing: - CVE-2020-6558: Insufficient policy enforcement in iOS - CVE-2020-6559: Use after free in presentation API - CVE-2020-6560: Insufficient policy enforcement in autofill - CVE-2020-6561: Inappropriate implementation in Content Security Policy - CVE-2020-6562: Insufficient policy enforcement in Blink - CVE-2020-6563: Insufficient policy enforcement in intent handling. - CVE-2020-6564: Incorrect security UI in permissions - CVE-2020-6565: Incorrect security UI in Omnibox. - CVE-2020-6566: Insufficient policy enforcement in media. - CVE-2020-6567: Insufficient validation of untrusted input in command line handling. - CVE-2020-6568: Insufficient policy enforcement in intent handling. - CVE-2020-6569: Integer overflow in WebUSB. - CVE-2020-6570: Side-channel information leakage in WebRTC. - CVE-2020-6571: Incorrect security UI in Omnibox. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1306=1 Package List: - openSUSE Leap 15.2 (x86_64): chromedriver-85.0.4183.69-lp152.2.20.1 chromedriver-debuginfo-85.0.4183.69-lp152.2.20.1 chromium-85.0.4183.69-lp152.2.20.1 chromium-debuginfo-85.0.4183.69-lp152.2.20.1 chromium-debugsource-85.0.4183.69-lp152.2.20.1 References: https://www.suse.com/security/cve/CVE-2020-6558.html https://www.suse.com/security/cve/CVE-2020-6559.html https://www.suse.com/security/cve/CVE-2020-6560.html https://www.suse.com/security/cve/CVE-2020-6561.html https://www.suse.com/security/cve/CVE-2020-6562.html https://www.suse.com/security/cve/CVE-2020-6563.html https://www.suse.com/security/cve/CVE-2020-6564.html https://www.suse.com/security/cve/CVE-2020-6565.html https://www.suse.com/security/cve/CVE-2020-6566.html https://www.suse.com/security/cve/CVE-2020-6567.html https://www.suse.com/security/cve/CVE-2020-6568.html https://www.suse.com/security/cve/CVE-2020-6569.html https://www.suse.com/security/cve/CVE-2020-6570.html https://www.suse.com/security/cve/CVE-2020-6571.html https://bugzilla.suse.com/1175757

1 0

openSUSE-RU-2020:1307-1: moderate: Recommended update for salt
by maintenance＠opensuse.org 31 Aug '20

31 Aug '20

openSUSE Recommended Update: Recommended update for salt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1307-1 Rating: moderate References: #1171461 #1172211 #1173936 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for salt fixes the following issues: - Require /usr/bin/python instead of /bin/python for RHEL-family. (bsc#1173936) - Don't install SuSEfirewall2 service files in Factory. - Fix __mount_device wrapper to accept separate args and kwargs. - Fix the registration of libvirt pool and nodedev events. - Accept nested namespaces in spacewalk.api runner function. (bsc#1172211) - info_installed works without status attr now. (bsc#1171461) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1307=1 Package List: - openSUSE Leap 15.1 (x86_64): python2-salt-3000-lp151.5.24.1 python3-salt-3000-lp151.5.24.1 salt-3000-lp151.5.24.1 salt-api-3000-lp151.5.24.1 salt-cloud-3000-lp151.5.24.1 salt-doc-3000-lp151.5.24.1 salt-master-3000-lp151.5.24.1 salt-minion-3000-lp151.5.24.1 salt-proxy-3000-lp151.5.24.1 salt-ssh-3000-lp151.5.24.1 salt-standalone-formulas-configuration-3000-lp151.5.24.1 salt-syndic-3000-lp151.5.24.1 - openSUSE Leap 15.1 (noarch): salt-bash-completion-3000-lp151.5.24.1 salt-fish-completion-3000-lp151.5.24.1 salt-zsh-completion-3000-lp151.5.24.1 References: https://bugzilla.suse.com/1171461 https://bugzilla.suse.com/1172211 https://bugzilla.suse.com/1173936

1 0

openSUSE-RU-2020:1305-1: moderate: Recommended update for netcdf-fortran
by maintenance＠opensuse.org 31 Aug '20

31 Aug '20

openSUSE Recommended Update: Recommended update for netcdf-fortran ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1305-1 Rating: moderate References: #1173598 #1174177 #1174291 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for netcdf and netcdf-fortran fixes the following issues: netcdf: - NetCDF modules should be called 'netcdf' - regardless whether they are 'serial' or use MPI. (bsc#1174291) netcdf-fortran: - The convention is to use the module name 'pnetcdf' for Parallel-NetCDF (called PnetCDF now). - Fix ldconfig args for HPC packages: no caching should be done as the libs are made available via LD_LIBRARY_PATH. - Add serial HPC build flavor. (bsc#1174177) For loading serial module, run 'module load netcdf-fortran' for an MPI variant use 'module load pnetcdf-fortran'. - Fixed bug in module file. - Gfortran from gcc-10 requires -std=legacy to build the Fortran code in netcdf-fortran. (bsc#1173598) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1305=1 Package List: - openSUSE Leap 15.2 (noarch): netcdf-fortran-gnu-hpc-4.5.2-lp152.2.3.1 netcdf-fortran-gnu-hpc-devel-4.5.2-lp152.2.3.1 netcdf-fortran-gnu-mpich-hpc-4.5.2-lp152.2.3.1 netcdf-fortran-gnu-mpich-hpc-devel-4.5.2-lp152.2.3.1 netcdf-fortran-gnu-mvapich2-hpc-4.5.2-lp152.2.3.1 netcdf-fortran-gnu-mvapich2-hpc-devel-4.5.2-lp152.2.3.1 netcdf-fortran-gnu-openmpi2-hpc-4.5.2-lp152.2.3.1 netcdf-fortran-gnu-openmpi2-hpc-devel-4.5.2-lp152.2.3.1 netcdf-fortran-gnu-openmpi3-hpc-4.5.2-lp152.2.3.1 netcdf-fortran-gnu-openmpi3-hpc-devel-4.5.2-lp152.2.3.1 netcdf-gnu-hpc-4.7.3-lp152.2.3.1 netcdf-gnu-hpc-devel-4.7.3-lp152.2.3.1 netcdf-gnu-mpich-hpc-4.7.3-lp152.2.3.1 netcdf-gnu-mpich-hpc-devel-4.7.3-lp152.2.3.1 netcdf-gnu-mvapich2-hpc-4.7.3-lp152.2.3.1 netcdf-gnu-mvapich2-hpc-devel-4.7.3-lp152.2.3.1 netcdf-gnu-openmpi2-hpc-4.7.3-lp152.2.3.1 netcdf-gnu-openmpi2-hpc-devel-4.7.3-lp152.2.3.1 netcdf-gnu-openmpi3-hpc-4.7.3-lp152.2.3.1 netcdf-gnu-openmpi3-hpc-devel-4.7.3-lp152.2.3.1 - openSUSE Leap 15.2 (x86_64): libnetcdf-fortran-gnu-hpc-4.5.2-lp152.2.3.1 libnetcdf-fortran-gnu-mpich-hpc-4.5.2-lp152.2.3.1 libnetcdf-fortran-gnu-mvapich2-hpc-4.5.2-lp152.2.3.1 libnetcdf-fortran-gnu-openmpi2-hpc-4.5.2-lp152.2.3.1 libnetcdf-fortran-gnu-openmpi3-hpc-4.5.2-lp152.2.3.1 libnetcdf-fortran_4_5_2-gnu-hpc-4.5.2-lp152.2.3.1 libnetcdf-fortran_4_5_2-gnu-hpc-debuginfo-4.5.2-lp152.2.3.1 libnetcdf-fortran_4_5_2-gnu-mpich-hpc-4.5.2-lp152.2.3.1 libnetcdf-fortran_4_5_2-gnu-mpich-hpc-debuginfo-4.5.2-lp152.2.3.1 libnetcdf-fortran_4_5_2-gnu-mvapich2-hpc-4.5.2-lp152.2.3.1 libnetcdf-fortran_4_5_2-gnu-mvapich2-hpc-debuginfo-4.5.2-lp152.2.3.1 libnetcdf-fortran_4_5_2-gnu-openmpi2-hpc-4.5.2-lp152.2.3.1 libnetcdf-fortran_4_5_2-gnu-openmpi2-hpc-debuginfo-4.5.2-lp152.2.3.1 libnetcdf-fortran_4_5_2-gnu-openmpi3-hpc-4.5.2-lp152.2.3.1 libnetcdf-fortran_4_5_2-gnu-openmpi3-hpc-debuginfo-4.5.2-lp152.2.3.1 libnetcdf-gnu-hpc-4.7.3-lp152.2.3.1 libnetcdf-gnu-mpich-hpc-4.7.3-lp152.2.3.1 libnetcdf-gnu-mvapich2-hpc-4.7.3-lp152.2.3.1 libnetcdf-gnu-openmpi2-hpc-4.7.3-lp152.2.3.1 libnetcdf-gnu-openmpi3-hpc-4.7.3-lp152.2.3.1 libnetcdf_4_7_3-gnu-hpc-4.7.3-lp152.2.3.1 libnetcdf_4_7_3-gnu-hpc-debuginfo-4.7.3-lp152.2.3.1 libnetcdf_4_7_3-gnu-mpich-hpc-4.7.3-lp152.2.3.1 libnetcdf_4_7_3-gnu-mpich-hpc-debuginfo-4.7.3-lp152.2.3.1 libnetcdf_4_7_3-gnu-mvapich2-hpc-4.7.3-lp152.2.3.1 libnetcdf_4_7_3-gnu-mvapich2-hpc-debuginfo-4.7.3-lp152.2.3.1 libnetcdf_4_7_3-gnu-openmpi2-hpc-4.7.3-lp152.2.3.1 libnetcdf_4_7_3-gnu-openmpi2-hpc-debuginfo-4.7.3-lp152.2.3.1 libnetcdf_4_7_3-gnu-openmpi3-hpc-4.7.3-lp152.2.3.1 libnetcdf_4_7_3-gnu-openmpi3-hpc-debuginfo-4.7.3-lp152.2.3.1 netcdf-fortran_4_5_2-gnu-hpc-4.5.2-lp152.2.3.1 netcdf-fortran_4_5_2-gnu-hpc-debugsource-4.5.2-lp152.2.3.1 netcdf-fortran_4_5_2-gnu-hpc-devel-4.5.2-lp152.2.3.1 netcdf-fortran_4_5_2-gnu-hpc-devel-static-4.5.2-lp152.2.3.1 netcdf-fortran_4_5_2-gnu-mpich-hpc-4.5.2-lp152.2.3.1 netcdf-fortran_4_5_2-gnu-mpich-hpc-debugsource-4.5.2-lp152.2.3.1 netcdf-fortran_4_5_2-gnu-mpich-hpc-devel-4.5.2-lp152.2.3.1 netcdf-fortran_4_5_2-gnu-mpich-hpc-devel-static-4.5.2-lp152.2.3.1 netcdf-fortran_4_5_2-gnu-mvapich2-hpc-4.5.2-lp152.2.3.1 netcdf-fortran_4_5_2-gnu-mvapich2-hpc-debugsource-4.5.2-lp152.2.3.1 netcdf-fortran_4_5_2-gnu-mvapich2-hpc-devel-4.5.2-lp152.2.3.1 netcdf-fortran_4_5_2-gnu-mvapich2-hpc-devel-static-4.5.2-lp152.2.3.1 netcdf-fortran_4_5_2-gnu-openmpi2-hpc-4.5.2-lp152.2.3.1 netcdf-fortran_4_5_2-gnu-openmpi2-hpc-debugsource-4.5.2-lp152.2.3.1 netcdf-fortran_4_5_2-gnu-openmpi2-hpc-devel-4.5.2-lp152.2.3.1 netcdf-fortran_4_5_2-gnu-openmpi2-hpc-devel-static-4.5.2-lp152.2.3.1 netcdf-fortran_4_5_2-gnu-openmpi3-hpc-4.5.2-lp152.2.3.1 netcdf-fortran_4_5_2-gnu-openmpi3-hpc-debugsource-4.5.2-lp152.2.3.1 netcdf-fortran_4_5_2-gnu-openmpi3-hpc-devel-4.5.2-lp152.2.3.1 netcdf-fortran_4_5_2-gnu-openmpi3-hpc-devel-static-4.5.2-lp152.2.3.1 netcdf_4_7_3-gnu-hpc-4.7.3-lp152.2.3.1 netcdf_4_7_3-gnu-hpc-debuginfo-4.7.3-lp152.2.3.1 netcdf_4_7_3-gnu-hpc-debugsource-4.7.3-lp152.2.3.1 netcdf_4_7_3-gnu-hpc-devel-4.7.3-lp152.2.3.1 netcdf_4_7_3-gnu-hpc-devel-debuginfo-4.7.3-lp152.2.3.1 netcdf_4_7_3-gnu-hpc-devel-static-4.7.3-lp152.2.3.1 netcdf_4_7_3-gnu-mpich-hpc-4.7.3-lp152.2.3.1 netcdf_4_7_3-gnu-mpich-hpc-debuginfo-4.7.3-lp152.2.3.1 netcdf_4_7_3-gnu-mpich-hpc-debugsource-4.7.3-lp152.2.3.1 netcdf_4_7_3-gnu-mpich-hpc-devel-4.7.3-lp152.2.3.1 netcdf_4_7_3-gnu-mpich-hpc-devel-debuginfo-4.7.3-lp152.2.3.1 netcdf_4_7_3-gnu-mpich-hpc-devel-static-4.7.3-lp152.2.3.1 netcdf_4_7_3-gnu-mvapich2-hpc-4.7.3-lp152.2.3.1 netcdf_4_7_3-gnu-mvapich2-hpc-debuginfo-4.7.3-lp152.2.3.1 netcdf_4_7_3-gnu-mvapich2-hpc-debugsource-4.7.3-lp152.2.3.1 netcdf_4_7_3-gnu-mvapich2-hpc-devel-4.7.3-lp152.2.3.1 netcdf_4_7_3-gnu-mvapich2-hpc-devel-debuginfo-4.7.3-lp152.2.3.1 netcdf_4_7_3-gnu-mvapich2-hpc-devel-static-4.7.3-lp152.2.3.1 netcdf_4_7_3-gnu-openmpi2-hpc-4.7.3-lp152.2.3.1 netcdf_4_7_3-gnu-openmpi2-hpc-debuginfo-4.7.3-lp152.2.3.1 netcdf_4_7_3-gnu-openmpi2-hpc-debugsource-4.7.3-lp152.2.3.1 netcdf_4_7_3-gnu-openmpi2-hpc-devel-4.7.3-lp152.2.3.1 netcdf_4_7_3-gnu-openmpi2-hpc-devel-debuginfo-4.7.3-lp152.2.3.1 netcdf_4_7_3-gnu-openmpi2-hpc-devel-static-4.7.3-lp152.2.3.1 netcdf_4_7_3-gnu-openmpi3-hpc-4.7.3-lp152.2.3.1 netcdf_4_7_3-gnu-openmpi3-hpc-debuginfo-4.7.3-lp152.2.3.1 netcdf_4_7_3-gnu-openmpi3-hpc-debugsource-4.7.3-lp152.2.3.1 netcdf_4_7_3-gnu-openmpi3-hpc-devel-4.7.3-lp152.2.3.1 netcdf_4_7_3-gnu-openmpi3-hpc-devel-debuginfo-4.7.3-lp152.2.3.1 netcdf_4_7_3-gnu-openmpi3-hpc-devel-static-4.7.3-lp152.2.3.1 References: https://bugzilla.suse.com/1173598 https://bugzilla.suse.com/1174177 https://bugzilla.suse.com/1174291

1 0

openSUSE-SU-2020:1302-1: important: Security update for xorg-x11-server
by opensuse-security＠opensuse.org 31 Aug '20

31 Aug '20

openSUSE Security Update: Security update for xorg-x11-server ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1302-1 Rating: important References: #1174633 #1174635 #1174638 Cross-References: CVE-2020-14345 CVE-2020-14346 CVE-2020-14347 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for xorg-x11-server fixes the following issues: - CVE-2020-14347: Leak of uninitialized heap memory from the X server to clients on pixmap allocation (bsc#1174633, ZDI-CAN-11426). - CVE-2020-14346: XIChangeHierarchy Integer Underflow Privilege Escalation Vulnerability (bsc#1174638, ZDI-CAN-11429). - CVE-2020-14345: XKB out-of-bounds access privilege escalation vulnerability (bsc#1174635, ZDI-CAN-11428). This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1302=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): xorg-x11-server-1.20.3-lp152.8.3.1 xorg-x11-server-debuginfo-1.20.3-lp152.8.3.1 xorg-x11-server-debugsource-1.20.3-lp152.8.3.1 xorg-x11-server-extra-1.20.3-lp152.8.3.1 xorg-x11-server-extra-debuginfo-1.20.3-lp152.8.3.1 xorg-x11-server-sdk-1.20.3-lp152.8.3.1 xorg-x11-server-source-1.20.3-lp152.8.3.1 xorg-x11-server-wayland-1.20.3-lp152.8.3.1 xorg-x11-server-wayland-debuginfo-1.20.3-lp152.8.3.1 References: https://www.suse.com/security/cve/CVE-2020-14345.html https://www.suse.com/security/cve/CVE-2020-14346.html https://www.suse.com/security/cve/CVE-2020-14347.html https://bugzilla.suse.com/1174633 https://bugzilla.suse.com/1174635 https://bugzilla.suse.com/1174638

1 0

openSUSE-RU-2020:1301-1: moderate: Recommended update for yast2-firstboot
by maintenance＠opensuse.org 31 Aug '20

31 Aug '20

openSUSE Recommended Update: Recommended update for yast2-firstboot ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1301-1 Rating: moderate References: #1173298 #1174353 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for yast2-firstboot fixes the following issues: - Fix for an issue when YaST firstboot unable to set hostname due to an non-existing function. (bsc#1173298) This update for yast2-network fixes the following issues: - Permit to write networking config changes without touching the service and other components like the firewall. (bsc#1173298) - Permit dot characters in the hostname allowing to specify it as an FQDN. (bsc#1173298) - Fixes an issue not to crash when configuring an IPv6 route through AutoYaST. (bsc#1174353) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1301=1 Package List: - openSUSE Leap 15.2 (noarch): yast2-firstboot-4.2.15-lp152.2.3.1 yast2-network-4.2.75-lp152.2.6.1 References: https://bugzilla.suse.com/1173298 https://bugzilla.suse.com/1174353

1 0

openSUSE-RU-2020:1299-1: moderate: Recommended update for hyper-v
by maintenance＠opensuse.org 31 Aug '20

31 Aug '20

openSUSE Recommended Update: Recommended update for hyper-v ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1299-1 Rating: moderate References: #1093910 #1174443 #1174444 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for hyper-v fixes the following issues: - Remove dependency to network-online.target now that gethostname is used in kvp_daemon. (bsc#1174443, bsc#1174444) - Reopen the devices if read() or write() returns errors. - Use either python2 or python3 for lsvmbus. (bsc#1093910) - Remove sysv init scripts. - Enable build on aarch64. This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1299=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): hyper-v-8-lp152.9.3.1 hyper-v-debuginfo-8-lp152.9.3.1 hyper-v-debugsource-8-lp152.9.3.1 References: https://bugzilla.suse.com/1093910 https://bugzilla.suse.com/1174443 https://bugzilla.suse.com/1174444

1 0

openSUSE-RU-2020:1300-1: important: Recommended update for mariadb
by maintenance＠opensuse.org 31 Aug '20

31 Aug '20

openSUSE Recommended Update: Recommended update for mariadb ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1300-1 Rating: important References: #1173516 #1174559 #1175596 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for mariadb fixes the following issues: - Update to 10.4.14 [bsc#1175596] * release notes: https://mariadb.com/kb/en/library/mariadb-10414-release-notes * change log: https://mariadb.com/kb/en/library/mariadb-10414-changelog - Fix crashes that occurred while creating tables for keystone database. [bsc#1174559, bsc#1173516]. This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1300=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libmariadbd-devel-10.4.14-lp152.2.3.1 libmariadbd19-10.4.14-lp152.2.3.1 libmariadbd19-debuginfo-10.4.14-lp152.2.3.1 mariadb-10.4.14-lp152.2.3.1 mariadb-bench-10.4.14-lp152.2.3.1 mariadb-bench-debuginfo-10.4.14-lp152.2.3.1 mariadb-client-10.4.14-lp152.2.3.1 mariadb-client-debuginfo-10.4.14-lp152.2.3.1 mariadb-debuginfo-10.4.14-lp152.2.3.1 mariadb-debugsource-10.4.14-lp152.2.3.1 mariadb-galera-10.4.14-lp152.2.3.1 mariadb-rpm-macros-10.4.14-lp152.2.3.1 mariadb-test-10.4.14-lp152.2.3.1 mariadb-test-debuginfo-10.4.14-lp152.2.3.1 mariadb-tools-10.4.14-lp152.2.3.1 mariadb-tools-debuginfo-10.4.14-lp152.2.3.1 - openSUSE Leap 15.2 (noarch): mariadb-errormessages-10.4.14-lp152.2.3.1 References: https://bugzilla.suse.com/1173516 https://bugzilla.suse.com/1174559 https://bugzilla.suse.com/1175596

1 0

openSUSE-SU-2020:1304-1: moderate: Security update for inn
by opensuse-security＠opensuse.org 31 Aug '20

31 Aug '20

openSUSE Security Update: Security update for inn ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1304-1 Rating: moderate References: #1172573 Cross-References: CVE-2020-8026 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for inn fixes the following issues: - change file owners in /usr/lib/news to root [boo#1172573] [CVE-2020-8026] This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1304=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): inn-2.5.4-bp151.4.6.1 inn-devel-2.5.4-bp151.4.6.1 mininews-2.5.4-bp151.4.6.1 References: https://www.suse.com/security/cve/CVE-2020-8026.html https://bugzilla.suse.com/1172573

1 0

openSUSE-SU-2020:1303-1: Security update for graphviz
by opensuse-security＠opensuse.org 31 Aug '20

31 Aug '20

openSUSE Security Update: Security update for graphviz ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1303-1 Rating: low References: #1093447 Cross-References: CVE-2018-10196 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for graphviz fixes the following issues: - CVE-2018-10196: Fixed a null dereference in rebuild_vlis (bsc#1093447). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1303=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): graphviz-2.40.1-lp152.7.7.1 graphviz-addons-debuginfo-2.40.1-lp152.7.7.1 graphviz-addons-debugsource-2.40.1-lp152.7.7.1 graphviz-debuginfo-2.40.1-lp152.7.7.1 graphviz-debugsource-2.40.1-lp152.7.7.1 graphviz-devel-2.40.1-lp152.7.7.1 graphviz-doc-2.40.1-lp152.7.7.1 graphviz-gd-2.40.1-lp152.7.7.1 graphviz-gd-debuginfo-2.40.1-lp152.7.7.1 graphviz-gnome-2.40.1-lp152.7.7.1 graphviz-gnome-debuginfo-2.40.1-lp152.7.7.1 graphviz-guile-2.40.1-lp152.7.7.1 graphviz-guile-debuginfo-2.40.1-lp152.7.7.1 graphviz-gvedit-2.40.1-lp152.7.7.1 graphviz-gvedit-debuginfo-2.40.1-lp152.7.7.1 graphviz-java-2.40.1-lp152.7.7.1 graphviz-java-debuginfo-2.40.1-lp152.7.7.1 graphviz-lua-2.40.1-lp152.7.7.1 graphviz-lua-debuginfo-2.40.1-lp152.7.7.1 graphviz-perl-2.40.1-lp152.7.7.1 graphviz-perl-debuginfo-2.40.1-lp152.7.7.1 graphviz-php-2.40.1-lp152.7.7.1 graphviz-php-debuginfo-2.40.1-lp152.7.7.1 graphviz-plugins-core-2.40.1-lp152.7.7.1 graphviz-plugins-core-debuginfo-2.40.1-lp152.7.7.1 graphviz-python-2.40.1-lp152.7.7.1 graphviz-python-debuginfo-2.40.1-lp152.7.7.1 graphviz-ruby-2.40.1-lp152.7.7.1 graphviz-ruby-debuginfo-2.40.1-lp152.7.7.1 graphviz-smyrna-2.40.1-lp152.7.7.1 graphviz-smyrna-debuginfo-2.40.1-lp152.7.7.1 graphviz-tcl-2.40.1-lp152.7.7.1 graphviz-tcl-debuginfo-2.40.1-lp152.7.7.1 libgraphviz6-2.40.1-lp152.7.7.1 libgraphviz6-debuginfo-2.40.1-lp152.7.7.1 References: https://www.suse.com/security/cve/CVE-2018-10196.html https://bugzilla.suse.com/1093447

1 0