August 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2020:1195-1: moderate: Recommended update for php7
by maintenance＠opensuse.org 12 Aug '20

12 Aug '20

openSUSE Recommended Update: Recommended update for php7 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1195-1 Rating: moderate References: #1173786 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for php7 fixes the following issues: - Add 'tmpfiles.d' for 'php-fpm' to provide a base for a socket and fix this error accordingly. (bsc#1173786) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1195=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): apache2-mod_php7-7.4.6-lp152.2.3.2 apache2-mod_php7-debuginfo-7.4.6-lp152.2.3.2 php7-7.4.6-lp152.2.3.2 php7-bcmath-7.4.6-lp152.2.3.2 php7-bcmath-debuginfo-7.4.6-lp152.2.3.2 php7-bz2-7.4.6-lp152.2.3.2 php7-bz2-debuginfo-7.4.6-lp152.2.3.2 php7-calendar-7.4.6-lp152.2.3.2 php7-calendar-debuginfo-7.4.6-lp152.2.3.2 php7-ctype-7.4.6-lp152.2.3.2 php7-ctype-debuginfo-7.4.6-lp152.2.3.2 php7-curl-7.4.6-lp152.2.3.2 php7-curl-debuginfo-7.4.6-lp152.2.3.2 php7-dba-7.4.6-lp152.2.3.2 php7-dba-debuginfo-7.4.6-lp152.2.3.2 php7-debuginfo-7.4.6-lp152.2.3.2 php7-debugsource-7.4.6-lp152.2.3.2 php7-devel-7.4.6-lp152.2.3.2 php7-dom-7.4.6-lp152.2.3.2 php7-dom-debuginfo-7.4.6-lp152.2.3.2 php7-embed-7.4.6-lp152.2.3.2 php7-embed-debuginfo-7.4.6-lp152.2.3.2 php7-enchant-7.4.6-lp152.2.3.2 php7-enchant-debuginfo-7.4.6-lp152.2.3.2 php7-exif-7.4.6-lp152.2.3.2 php7-exif-debuginfo-7.4.6-lp152.2.3.2 php7-fastcgi-7.4.6-lp152.2.3.2 php7-fastcgi-debuginfo-7.4.6-lp152.2.3.2 php7-fileinfo-7.4.6-lp152.2.3.2 php7-fileinfo-debuginfo-7.4.6-lp152.2.3.2 php7-firebird-7.4.6-lp152.2.3.2 php7-firebird-debuginfo-7.4.6-lp152.2.3.2 php7-fpm-7.4.6-lp152.2.3.2 php7-fpm-debuginfo-7.4.6-lp152.2.3.2 php7-ftp-7.4.6-lp152.2.3.2 php7-ftp-debuginfo-7.4.6-lp152.2.3.2 php7-gd-7.4.6-lp152.2.3.2 php7-gd-debuginfo-7.4.6-lp152.2.3.2 php7-gettext-7.4.6-lp152.2.3.2 php7-gettext-debuginfo-7.4.6-lp152.2.3.2 php7-gmp-7.4.6-lp152.2.3.2 php7-gmp-debuginfo-7.4.6-lp152.2.3.2 php7-iconv-7.4.6-lp152.2.3.2 php7-iconv-debuginfo-7.4.6-lp152.2.3.2 php7-intl-7.4.6-lp152.2.3.2 php7-intl-debuginfo-7.4.6-lp152.2.3.2 php7-json-7.4.6-lp152.2.3.2 php7-json-debuginfo-7.4.6-lp152.2.3.2 php7-ldap-7.4.6-lp152.2.3.2 php7-ldap-debuginfo-7.4.6-lp152.2.3.2 php7-mbstring-7.4.6-lp152.2.3.2 php7-mbstring-debuginfo-7.4.6-lp152.2.3.2 php7-mysql-7.4.6-lp152.2.3.2 php7-mysql-debuginfo-7.4.6-lp152.2.3.2 php7-odbc-7.4.6-lp152.2.3.2 php7-odbc-debuginfo-7.4.6-lp152.2.3.2 php7-opcache-7.4.6-lp152.2.3.2 php7-opcache-debuginfo-7.4.6-lp152.2.3.2 php7-openssl-7.4.6-lp152.2.3.2 php7-openssl-debuginfo-7.4.6-lp152.2.3.2 php7-pcntl-7.4.6-lp152.2.3.2 php7-pcntl-debuginfo-7.4.6-lp152.2.3.2 php7-pdo-7.4.6-lp152.2.3.2 php7-pdo-debuginfo-7.4.6-lp152.2.3.2 php7-pgsql-7.4.6-lp152.2.3.2 php7-pgsql-debuginfo-7.4.6-lp152.2.3.2 php7-phar-7.4.6-lp152.2.3.2 php7-phar-debuginfo-7.4.6-lp152.2.3.2 php7-posix-7.4.6-lp152.2.3.2 php7-posix-debuginfo-7.4.6-lp152.2.3.2 php7-readline-7.4.6-lp152.2.3.2 php7-readline-debuginfo-7.4.6-lp152.2.3.2 php7-shmop-7.4.6-lp152.2.3.2 php7-shmop-debuginfo-7.4.6-lp152.2.3.2 php7-snmp-7.4.6-lp152.2.3.2 php7-snmp-debuginfo-7.4.6-lp152.2.3.2 php7-soap-7.4.6-lp152.2.3.2 php7-soap-debuginfo-7.4.6-lp152.2.3.2 php7-sockets-7.4.6-lp152.2.3.2 php7-sockets-debuginfo-7.4.6-lp152.2.3.2 php7-sodium-7.4.6-lp152.2.3.2 php7-sodium-debuginfo-7.4.6-lp152.2.3.2 php7-sqlite-7.4.6-lp152.2.3.2 php7-sqlite-debuginfo-7.4.6-lp152.2.3.2 php7-sysvmsg-7.4.6-lp152.2.3.2 php7-sysvmsg-debuginfo-7.4.6-lp152.2.3.2 php7-sysvsem-7.4.6-lp152.2.3.2 php7-sysvsem-debuginfo-7.4.6-lp152.2.3.2 php7-sysvshm-7.4.6-lp152.2.3.2 php7-sysvshm-debuginfo-7.4.6-lp152.2.3.2 php7-test-7.4.6-lp152.2.3.2 php7-tidy-7.4.6-lp152.2.3.2 php7-tidy-debuginfo-7.4.6-lp152.2.3.2 php7-tokenizer-7.4.6-lp152.2.3.2 php7-tokenizer-debuginfo-7.4.6-lp152.2.3.2 php7-xmlreader-7.4.6-lp152.2.3.2 php7-xmlreader-debuginfo-7.4.6-lp152.2.3.2 php7-xmlrpc-7.4.6-lp152.2.3.2 php7-xmlrpc-debuginfo-7.4.6-lp152.2.3.2 php7-xmlwriter-7.4.6-lp152.2.3.2 php7-xmlwriter-debuginfo-7.4.6-lp152.2.3.2 php7-xsl-7.4.6-lp152.2.3.2 php7-xsl-debuginfo-7.4.6-lp152.2.3.2 php7-zip-7.4.6-lp152.2.3.2 php7-zip-debuginfo-7.4.6-lp152.2.3.2 php7-zlib-7.4.6-lp152.2.3.2 php7-zlib-debuginfo-7.4.6-lp152.2.3.2 References: https://bugzilla.suse.com/1173786

1 0

openSUSE-SU-2020:1190-1: important: Security update for xen
by opensuse-security＠opensuse.org 12 Aug '20

12 Aug '20

openSUSE Security Update: Security update for xen ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1190-1 Rating: important References: #1172356 #1174543 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for xen fixes the following issues: - bsc#1174543 - secure boot related fixes - bsc#1172356 - Not able to hot-plug NIC via virt-manager, asks to attach on next reboot while it should be live attached This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1190=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): xen-debugsource-4.13.1_06-lp152.2.6.1 xen-devel-4.13.1_06-lp152.2.6.1 xen-libs-4.13.1_06-lp152.2.6.1 xen-libs-debuginfo-4.13.1_06-lp152.2.6.1 xen-tools-domU-4.13.1_06-lp152.2.6.1 xen-tools-domU-debuginfo-4.13.1_06-lp152.2.6.1 - openSUSE Leap 15.2 (x86_64): xen-4.13.1_06-lp152.2.6.1 xen-doc-html-4.13.1_06-lp152.2.6.1 xen-libs-32bit-4.13.1_06-lp152.2.6.1 xen-libs-32bit-debuginfo-4.13.1_06-lp152.2.6.1 xen-tools-4.13.1_06-lp152.2.6.1 xen-tools-debuginfo-4.13.1_06-lp152.2.6.1 - openSUSE Leap 15.2 (noarch): xen-tools-xendomains-wait-disk-4.13.1_06-lp152.2.6.1 References: https://bugzilla.suse.com/1172356 https://bugzilla.suse.com/1174543

1 0

openSUSE-SU-2020:1194-1: moderate: Security update for go1.13
by opensuse-security＠opensuse.org 12 Aug '20

12 Aug '20

openSUSE Security Update: Security update for go1.13 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1194-1 Rating: moderate References: #1149259 #1174977 Cross-References: CVE-2020-16845 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for go1.13 fixes the following issues: - go1.13 was updated to version 1.13.5 - CVE-2020-16845: dUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs (bsc#1174977). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1194=1 Package List: - openSUSE Leap 15.2 (x86_64): go1.13-1.13.15-lp152.2.7.1 go1.13-doc-1.13.15-lp152.2.7.1 go1.13-race-1.13.15-lp152.2.7.1 References: https://www.suse.com/security/cve/CVE-2020-16845.html https://bugzilla.suse.com/1149259 https://bugzilla.suse.com/1174977

1 0

openSUSE-SU-2020:1191-1: important: Security update for java-11-openjdk
by opensuse-security＠opensuse.org 12 Aug '20

12 Aug '20

openSUSE Security Update: Security update for java-11-openjdk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1191-1 Rating: important References: #1174157 Cross-References: CVE-2020-14556 CVE-2020-14562 CVE-2020-14573 CVE-2020-14577 CVE-2020-14581 CVE-2020-14583 CVE-2020-14593 CVE-2020-14621 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes 8 vulnerabilities is now available. Description: This update for java-11-openjdk fixes the following issues: - Update to upstream tag jdk-11.0.8+10 (July 2020 CPU, bsc#1174157) * Security fixes: + JDK-8230613: Better ASCII conversions + JDK-8231800: Better listing of arrays + JDK-8232014: Expand DTD support + JDK-8233234: Better Zip Naming + JDK-8233239, CVE-2020-14562: Enhance TIFF support + JDK-8233255: Better Swing Buttons + JDK-8234032: Improve basic calendar services + JDK-8234042: Better factory production of certificates + JDK-8234418: Better parsing with CertificateFactory + JDK-8234836: Improve serialization handling + JDK-8236191: Enhance OID processing + JDK-8236867, CVE-2020-14573: Enhance Graal interface handling + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior + JDK-8237592, CVE-2020-14577: Enhance certificate verification + JDK-8238002, CVE-2020-14581: Better matrix operations + JDK-8238013: Enhance String writing + JDK-8238804: Enhance key handling process + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable + JDK-8238843: Enhanced font handing + JDK-8238920, CVE-2020-14583: Better Buffer support + JDK-8238925: Enhance WAV file playback + JDK-8240119, CVE-2020-14593: Less Affine Transformations + JDK-8240482: Improved WAV file playback + JDK-8241379: Update JCEKS support + JDK-8241522: Manifest improved jar headers redux + JDK-8242136, CVE-2020-14621: Better XML namespace handling * Other changes: + JDK-6933331: (d3d/ogl) java.lang.IllegalStateException: Buffers have not been created + JDK-7124307: JSpinner and changing value by mouse + JDK-8022574: remove HaltNode code after uncommon trap calls + JDK-8039082: [TEST_BUG] Test java/awt/dnd/BadSerializationTest/BadSerializationTest.java fails + JDK-8040630: Popup menus and tooltips flicker with previous popup contents when first shown + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with ENOMEM when joining group (OS X 10.9) + JDK-8048215: [TESTBUG] java/lang/management/ManagementFactory/ThreadMXBeanProxy.java Expected non-null LockInfo + JDK-8051349: nsk/jvmti/scenarios/sampling/SP06/sp06t003 fails in nightly + JDK-8080353: JShell: Better error message on attempting to add default method + JDK-8139876: Exclude hanging nsk/stress/stack from execution with deoptimization enabled + JDK-8146090: java/lang/ref/ReachabilityFenceTest.java fails with -XX:+DeoptimizeALot + JDK-8153430: jdk regression test MletParserLocaleTest, ParserInfiniteLoopTest reduce default timeout + JDK-8156207: Resource allocated BitMaps are often cleared unnecessarily + JDK-8159740: JShell: corralled declarations do not have correct source to wrapper mapping + JDK-8175984: ICC_Profile has un-needed, not-empty finalize method + JDK-8176359: Frame#setMaximizedbounds not working properly in multi screen environments + JDK-8183369: RFC unconformity of HttpURLConnection with proxy + JDK-8187078: -XX:+VerifyOops finds numerous problems when running JPRT + JDK-8189861: Refactor CacheFind + JDK-8191169: java/net/Authenticator/B4769350.java failed intermittently + JDK-8191930: [Graal] emits unparseable XML into compile log + JDK-8193879: Java debugger hangs on method invocation + JDK-8196019: java/awt/Window/Grab/GrabTest.java fails on Windows + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails + JDK-8198000: java/awt/List/EmptyListEventTest/EmptyListEventTest.java debug assert on Windows + JDK-8198001: java/awt/Menu/WrongParentAfterRemoveMenu/ /WrongParentAfterRemoveMenu.java debug assert on Windows + JDK-8198339: Test javax/swing/border/Test6981576.java is unstable + JDK-8200701: jdk/jshell/ExceptionsTest.java fails on Windows, after JDK-8198801 + JDK-8203264: JNI exception pending in PlainDatagramSocketImpl.c:740 + JDK-8203672: JNI exception pending in PlainSocketImpl.c + JDK-8203673: JNI exception pending in DualStackPlainDatagramSocketImpl.c:398 + JDK-8204834: Fix confusing "allocate" naming in OopStorage + JDK-8205399: Set node color on pinned HashMap.TreeNode deletion + JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/ /RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with handshake_failure + JDK-8206179: com/sun/management/OperatingSystemMXBean/ /GetCommittedVirtualMemorySize.java fails with Committed virtual memory size illegal value + JDK-8207334: VM times out in VM_HandshakeAllThreads::doit() with RunThese30M + JDK-8208277: Code cache heap (-XX:ReservedCodeCacheSize) doesn't work with 1GB LargePages This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1191=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): java-11-openjdk-11.0.8.0-lp152.2.3.1 java-11-openjdk-accessibility-11.0.8.0-lp152.2.3.1 java-11-openjdk-accessibility-debuginfo-11.0.8.0-lp152.2.3.1 java-11-openjdk-debuginfo-11.0.8.0-lp152.2.3.1 java-11-openjdk-debugsource-11.0.8.0-lp152.2.3.1 java-11-openjdk-demo-11.0.8.0-lp152.2.3.1 java-11-openjdk-devel-11.0.8.0-lp152.2.3.1 java-11-openjdk-headless-11.0.8.0-lp152.2.3.1 java-11-openjdk-jmods-11.0.8.0-lp152.2.3.1 java-11-openjdk-src-11.0.8.0-lp152.2.3.1 - openSUSE Leap 15.2 (noarch): java-11-openjdk-javadoc-11.0.8.0-lp152.2.3.1 References: https://www.suse.com/security/cve/CVE-2020-14556.html https://www.suse.com/security/cve/CVE-2020-14562.html https://www.suse.com/security/cve/CVE-2020-14573.html https://www.suse.com/security/cve/CVE-2020-14577.html https://www.suse.com/security/cve/CVE-2020-14581.html https://www.suse.com/security/cve/CVE-2020-14583.html https://www.suse.com/security/cve/CVE-2020-14593.html https://www.suse.com/security/cve/CVE-2020-14621.html https://bugzilla.suse.com/1174157

1 0

openSUSE-RU-2020:1187-1: Recommended update for go1.10
by maintenance＠opensuse.org 12 Aug '20

12 Aug '20

openSUSE Recommended Update: Recommended update for go1.10 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1187-1 Rating: low References: #1169832 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for go1.10 fixes the following issues: - Fix for an issue when installing on Raspberry Pi causes illegal instruction due to unproper ARM arch set. (bsc#1169832) This update was imported from the SUSE:SLE-15:Update update project. This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1187=1 Package List: - openSUSE Backports SLE-15-SP1 (x86_64): go1.10-1.10.8-bp151.2.6.1 go1.10-doc-1.10.8-bp151.2.6.1 go1.10-race-1.10.8-bp151.2.6.1 References: https://bugzilla.suse.com/1169832

1 0

openSUSE-SU-2020:1188-1: moderate: Security update for wireshark
by opensuse-security＠opensuse.org 12 Aug '20

12 Aug '20

openSUSE Security Update: Security update for wireshark ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1188-1 Rating: moderate References: #1169063 #1171899 #1173606 Cross-References: CVE-2020-11647 CVE-2020-13164 CVE-2020-15466 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for wireshark fixes the following issues: - Wireshark to 3.2.5: * CVE-2020-15466: GVCP dissector infinite loop (bsc#1173606) * CVE-2020-13164: NFS dissector crash (bsc#1171899) * CVE-2020-11647: The BACapp dissector could crash (bsc#1169063) - Further features, bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-3.2.5.html This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1188=1 Package List: - openSUSE Leap 15.1 (x86_64): libwireshark13-3.2.5-lp151.2.12.1 libwireshark13-debuginfo-3.2.5-lp151.2.12.1 libwiretap10-3.2.5-lp151.2.12.1 libwiretap10-debuginfo-3.2.5-lp151.2.12.1 libwsutil11-3.2.5-lp151.2.12.1 libwsutil11-debuginfo-3.2.5-lp151.2.12.1 wireshark-3.2.5-lp151.2.12.1 wireshark-debuginfo-3.2.5-lp151.2.12.1 wireshark-debugsource-3.2.5-lp151.2.12.1 wireshark-devel-3.2.5-lp151.2.12.1 wireshark-ui-qt-3.2.5-lp151.2.12.1 wireshark-ui-qt-debuginfo-3.2.5-lp151.2.12.1 References: https://www.suse.com/security/cve/CVE-2020-11647.html https://www.suse.com/security/cve/CVE-2020-13164.html https://www.suse.com/security/cve/CVE-2020-15466.html https://bugzilla.suse.com/1169063 https://bugzilla.suse.com/1171899 https://bugzilla.suse.com/1173606

1 0

openSUSE-SU-2020:1189-1: important: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 12 Aug '20

12 Aug '20

openSUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1189-1 Rating: important References: #1171433 #1174538 Cross-References: CVE-2020-15652 CVE-2020-15653 CVE-2020-15654 CVE-2020-15655 CVE-2020-15656 CVE-2020-15657 CVE-2020-15658 CVE-2020-15659 CVE-2020-6463 CVE-2020-6514 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes 10 vulnerabilities is now available. Description: This update for MozillaFirefox fixes the following issues: This update for MozillaFirefox and pipewire fixes the following issues: MozillaFirefox Extended Support Release 78.1.0 ESR * Fixed: Various stability, functionality, and security fixes (bsc#1174538) * CVE-2020-15652: Potential leak of redirect targets when loading scripts in a worker * CVE-2020-6514: WebRTC data channel leaks internal address to peer * CVE-2020-15655: Extension APIs could be used to bypass Same-Origin Policy * CVE-2020-15653: Bypassing iframe sandbox when allowing popups * CVE-2020-6463: Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture * CVE-2020-15656: Type confusion for special arguments in IonMonkey * CVE-2020-15658: Overriding file type when saving to disk * CVE-2020-15657: DLL hijacking due to incorrect loading path * CVE-2020-15654: Custom cursor can overlay user interface * CVE-2020-15659: Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1 pipewire was updated to version 0.3.6 (bsc#1171433, jsc#ECO-2308): * Extensive memory leak fixing and stress testing was done. A big leak in screen sharing with DMA-BUF was fixed. * Compile fixes * Stability improvements in jack and pulseaudio layers. * Added the old portal module to make the Camera portal work again. This will be moved to the session manager in future versions. * Improvements to the GStreamer source and sink shutdown. * Fix compatibility with v2 clients again when negotiating buffers. This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1189=1 Package List: - openSUSE Leap 15.2 (x86_64): MozillaFirefox-78.1.0-lp152.2.15.1 MozillaFirefox-branding-upstream-78.1.0-lp152.2.15.1 MozillaFirefox-buildsymbols-78.1.0-lp152.2.15.1 MozillaFirefox-debuginfo-78.1.0-lp152.2.15.1 MozillaFirefox-debugsource-78.1.0-lp152.2.15.1 MozillaFirefox-devel-78.1.0-lp152.2.15.1 MozillaFirefox-translations-common-78.1.0-lp152.2.15.1 MozillaFirefox-translations-other-78.1.0-lp152.2.15.1 gstreamer-plugin-pipewire-0.3.6-lp152.2.3.1 gstreamer-plugin-pipewire-debuginfo-0.3.6-lp152.2.3.1 libpipewire-0_3-0-0.3.6-lp152.2.3.1 libpipewire-0_3-0-debuginfo-0.3.6-lp152.2.3.1 pipewire-0.3.6-lp152.2.3.1 pipewire-debuginfo-0.3.6-lp152.2.3.1 pipewire-debugsource-0.3.6-lp152.2.3.1 pipewire-devel-0.3.6-lp152.2.3.1 pipewire-doc-0.3.6-lp152.2.3.1 pipewire-libjack-0_3-0.3.6-lp152.2.3.1 pipewire-libjack-0_3-debuginfo-0.3.6-lp152.2.3.1 pipewire-libpulse-0_3-0.3.6-lp152.2.3.1 pipewire-libpulse-0_3-debuginfo-0.3.6-lp152.2.3.1 pipewire-modules-0.3.6-lp152.2.3.1 pipewire-modules-debuginfo-0.3.6-lp152.2.3.1 pipewire-spa-plugins-0_2-0.3.6-lp152.2.3.1 pipewire-spa-plugins-0_2-debuginfo-0.3.6-lp152.2.3.1 pipewire-spa-tools-0.3.6-lp152.2.3.1 pipewire-spa-tools-debuginfo-0.3.6-lp152.2.3.1 pipewire-tools-0.3.6-lp152.2.3.1 pipewire-tools-debuginfo-0.3.6-lp152.2.3.1 References: https://www.suse.com/security/cve/CVE-2020-15652.html https://www.suse.com/security/cve/CVE-2020-15653.html https://www.suse.com/security/cve/CVE-2020-15654.html https://www.suse.com/security/cve/CVE-2020-15655.html https://www.suse.com/security/cve/CVE-2020-15656.html https://www.suse.com/security/cve/CVE-2020-15657.html https://www.suse.com/security/cve/CVE-2020-15658.html https://www.suse.com/security/cve/CVE-2020-15659.html https://www.suse.com/security/cve/CVE-2020-6463.html https://www.suse.com/security/cve/CVE-2020-6514.html https://bugzilla.suse.com/1171433 https://bugzilla.suse.com/1174538

1 0

openSUSE-RU-2020:1186-1: Recommended update for go1.9
by maintenance＠opensuse.org 12 Aug '20

12 Aug '20

openSUSE Recommended Update: Recommended update for go1.9 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1186-1 Rating: low References: #1169832 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for go1.9 fixes the following issues: - Fix for an issue when installing on Raspberry Pi causes illegal instruction due to unproper ARM arch set. (bsc#1169832) This update was imported from the SUSE:SLE-15:Update update project. This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1186=1 Package List: - openSUSE Backports SLE-15-SP1 (x86_64): go1.9-1.9.7-bp151.2.6.1 go1.9-doc-1.9.7-bp151.2.6.1 go1.9-race-1.9.7-bp151.2.6.1 References: https://bugzilla.suse.com/1169832

1 0

openSUSE-SU-2020:1182-1: important: Security update for libX11
by opensuse-security＠opensuse.org 12 Aug '20

12 Aug '20

openSUSE Security Update: Security update for libX11 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1182-1 Rating: important References: #1174628 Cross-References: CVE-2020-14344 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libX11 fixes the following issues: - Fixed XIM client heap overflows (CVE-2020-14344, bsc#1174628). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1182=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libX11-6-1.6.5-lp152.5.6.1 libX11-6-debuginfo-1.6.5-lp152.5.6.1 libX11-debugsource-1.6.5-lp152.5.6.1 libX11-devel-1.6.5-lp152.5.6.1 libX11-xcb1-1.6.5-lp152.5.6.1 libX11-xcb1-debuginfo-1.6.5-lp152.5.6.1 - openSUSE Leap 15.2 (x86_64): libX11-6-32bit-1.6.5-lp152.5.6.1 libX11-6-32bit-debuginfo-1.6.5-lp152.5.6.1 libX11-devel-32bit-1.6.5-lp152.5.6.1 libX11-xcb1-32bit-1.6.5-lp152.5.6.1 libX11-xcb1-32bit-debuginfo-1.6.5-lp152.5.6.1 - openSUSE Leap 15.2 (noarch): libX11-data-1.6.5-lp152.5.6.1 References: https://www.suse.com/security/cve/CVE-2020-14344.html https://bugzilla.suse.com/1174628

1 0

openSUSE-RU-2020:1184-1: moderate: Recommended update for wireguard, wireguard-tools
by maintenance＠opensuse.org 12 Aug '20

12 Aug '20

openSUSE Recommended Update: Recommended update for wireguard, wireguard-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1184-1 Rating: moderate References: Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for wireguard, wireguard-tools fixes the following issues: This adds wireguard to openSUSE Leap 15.1. wireguard is shipped in version 1.0.20200729. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1184=1 Package List: - openSUSE Leap 15.1 (x86_64): wireguard-1.0.20200729-lp151.2.1 wireguard-debugsource-1.0.20200729-lp151.2.1 wireguard-kmp-default-1.0.20200729_k4.12.14_lp151.28.59-lp151.2.1 wireguard-kmp-default-debuginfo-1.0.20200729_k4.12.14_lp151.28.59-lp151.2.1 wireguard-tools-1.0.20200513-lp151.2.1 wireguard-tools-debuginfo-1.0.20200513-lp151.2.1 wireguard-tools-debugsource-1.0.20200513-lp151.2.1 References:

1 0