August 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2020:1295-1: moderate: Recommended update for suse-prime
by maintenance＠opensuse.org 30 Aug '20

30 Aug '20

openSUSE Recommended Update: Recommended update for suse-prime ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1295-1 Rating: moderate References: #1173632 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for suse-prime fixes the following issues: Update from version 0.7.7 to version 0.7.14 - Avoid endless loop when nvidia modules cannot be unloaded. (bsc#1173632) - Fixes *user_logout_waiter* for gdm autologin. - Prevents intermittent 1s - 1.5s freezes on Turing GPU's in nvidia mode. - Improved documentation: * fixed requirements for DynamicPowerManagement to power off NVIDIA GPU (Turing GPU or later is needed!) * Better explain power-off/powersave option of NVIDIA GPU * Improved documentation about the requirements for NVIDIA's PRIME render offload support; it needs Xserver of Leap 15.2 or later * Fixed syntax in command - Use full path in invoking prime-select - Blacklist *ipmi_msghandler*, *ipmi_devintf* kernel modules Make sure these kernel modules are not loaded. Otherwise it may not be possible to turn off NVIDIA GPU. This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1295=1 Package List: - openSUSE Leap 15.2 (noarch): suse-prime-0.7.14-lp152.2.3.1 suse-prime-bbswitch-0.7.14-lp152.2.3.1 References: https://bugzilla.suse.com/1173632

1 0

openSUSE-RU-2020:1287-1: moderate: Recommended update for hyper-v
by maintenance＠opensuse.org 29 Aug '20

29 Aug '20

openSUSE Recommended Update: Recommended update for hyper-v ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1287-1 Rating: moderate References: #1093910 #1100758 #1174443 #1174444 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for hyper-v fixes the following issues: - Remove dependency to network-online.target now that gethostname is used in kvp_daemon. (bsc#1174443, bsc#1174444) - Reopen the devices if read() or write() returns errors - Use either python2 or python3 for lsvmbus. (bsc#1093910) - Remove sysv init scripts - Enable build on aarch64 - Use gethostname for async name resolution. (bsc#1100758) - Asynchronous name resolution in kvp_daemon. (bsc#1100758) - kvp: eliminate 'may be used uninitialized' warning - Fixed Python pep8/flake8 warnings for lsvmbus - Replace GPLv2 boilerplate/reference with SPDX - Fix a warning of buffer overflow with gcc 8.0.1 - fcopy: set 'error' in case an unknown operation was requested - vss: fix loop device detection. - Fix IP reporting by KVP daemon with SRIOV - Fix a bug in the key delete code - Fix compiler warnings about major/target_fname This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1287=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): hyper-v-8-lp151.6.3.1 hyper-v-debuginfo-8-lp151.6.3.1 hyper-v-debugsource-8-lp151.6.3.1 References: https://bugzilla.suse.com/1093910 https://bugzilla.suse.com/1100758 https://bugzilla.suse.com/1174443 https://bugzilla.suse.com/1174444

1 0

openSUSE-RU-2020:1284-1: moderate: Recommended update for yast2-theme
by maintenance＠opensuse.org 29 Aug '20

29 Aug '20

openSUSE Recommended Update: Recommended update for yast2-theme ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1284-1 Rating: moderate References: #1158298 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-theme fixes the following issues: - Add raleway fonts as dependency. (bsc#1158298) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1284=1 Package List: - openSUSE Leap 15.2 (noarch): yast2-theme-4.2.10-lp152.2.3.1 yast2-theme-breeze-4.2.10-lp152.2.3.1 yast2-theme-oxygen-4.2.10-lp152.2.3.1 References: https://bugzilla.suse.com/1158298

1 0

openSUSE-SU-2020:1282-1: important: Security update for grub2
by opensuse-security＠opensuse.org 29 Aug '20

29 Aug '20

openSUSE Security Update: Security update for grub2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1282-1 Rating: important References: #1172745 #1174421 Cross-References: CVE-2020-15705 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for grub2 fixes the following issue: - CVE-2020-15705: Fail kernel validation without shim protocol (bsc#1174421). - Add fibre channel device's ofpath support to grub-ofpathname and search hint to speed up root device discovery (bsc#1172745). This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1282=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): grub2-2.04-lp152.7.9.1 grub2-branding-upstream-2.04-lp152.7.9.1 grub2-debuginfo-2.04-lp152.7.9.1 grub2-debugsource-2.04-lp152.7.9.1 - openSUSE Leap 15.2 (noarch): grub2-i386-efi-2.04-lp152.7.9.1 grub2-i386-efi-debug-2.04-lp152.7.9.1 grub2-i386-pc-2.04-lp152.7.9.1 grub2-i386-pc-debug-2.04-lp152.7.9.1 grub2-i386-xen-2.04-lp152.7.9.1 grub2-snapper-plugin-2.04-lp152.7.9.1 grub2-systemd-sleep-plugin-2.04-lp152.7.9.1 grub2-x86_64-efi-2.04-lp152.7.9.1 grub2-x86_64-efi-debug-2.04-lp152.7.9.1 grub2-x86_64-xen-2.04-lp152.7.9.1 References: https://www.suse.com/security/cve/CVE-2020-15705.html https://bugzilla.suse.com/1172745 https://bugzilla.suse.com/1174421

1 0

openSUSE-RU-2020:1286-1: moderate: Recommended update for yast2
by maintenance＠opensuse.org 29 Aug '20

29 Aug '20

openSUSE Recommended Update: Recommended update for yast2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1286-1 Rating: moderate References: #1173133 #1174183 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for yast2 fixes the following issues: - update 'is_wsl' function to match 'wsl1' and 'wsl2' os-release spellings. (bsc#1174183) - Fix for not to start user interface before evaluating current language settings. (bsc#1173133) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1286=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): yast2-4.2.87-lp152.2.6.1 yast2-logs-4.2.87-lp152.2.6.1 References: https://bugzilla.suse.com/1173133 https://bugzilla.suse.com/1174183

1 0

openSUSE-SU-2020:1285-1: moderate: Security update for apache2
by opensuse-security＠opensuse.org 29 Aug '20

29 Aug '20

openSUSE Security Update: Security update for apache2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1285-1 Rating: moderate References: #1174052 #1175070 #1175071 #1175074 Cross-References: CVE-2020-11984 CVE-2020-11993 CVE-2020-9490 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves three vulnerabilities and has one errata is now available. Description: This update for apache2 fixes the following issues: - CVE-2020-9490: Fixed a crash caused by a specially crafted value for the 'Cache-Digest' header in a HTTP/2 request (bsc#1175071). - CVE-2020-11984: Fixed an information disclosure bug in mod_proxy_uwsgi (bsc#1175074). - CVE-2020-11993: When trace/debug was enabled for the HTTP/2 module logging statements were made on the wrong connection (bsc#1175070). - Solve a crash in mod_proxy_uwsgi for empty values of environment variables. (bsc#1174052) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1285=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): apache2-2.4.43-lp152.2.3.1 apache2-debuginfo-2.4.43-lp152.2.3.1 apache2-debugsource-2.4.43-lp152.2.3.1 apache2-devel-2.4.43-lp152.2.3.1 apache2-event-2.4.43-lp152.2.3.1 apache2-event-debuginfo-2.4.43-lp152.2.3.1 apache2-example-pages-2.4.43-lp152.2.3.1 apache2-prefork-2.4.43-lp152.2.3.1 apache2-prefork-debuginfo-2.4.43-lp152.2.3.1 apache2-utils-2.4.43-lp152.2.3.1 apache2-utils-debuginfo-2.4.43-lp152.2.3.1 apache2-worker-2.4.43-lp152.2.3.1 apache2-worker-debuginfo-2.4.43-lp152.2.3.1 - openSUSE Leap 15.2 (noarch): apache2-doc-2.4.43-lp152.2.3.1 References: https://www.suse.com/security/cve/CVE-2020-11984.html https://www.suse.com/security/cve/CVE-2020-11993.html https://www.suse.com/security/cve/CVE-2020-9490.html https://bugzilla.suse.com/1174052 https://bugzilla.suse.com/1175070 https://bugzilla.suse.com/1175071 https://bugzilla.suse.com/1175074

1 0

openSUSE-RU-2020:1281-1: moderate: Recommended update for gstreamer
by maintenance＠opensuse.org 29 Aug '20

29 Aug '20

openSUSE Recommended Update: Recommended update for gstreamer ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1281-1 Rating: moderate References: #1097405 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gstreamer fixes the following issue: - Fix a crash in gstreamer. (bsc#1097405) GstDeviceProvider has a started_count private variable, start will add 1 to it and stop will subtract 1 from it. However, current code forget to add 1 if it was already started, so if we start it twice and then stop it twice, it will crash at the second stop call. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1281=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): gstreamer-1.12.5-lp151.3.6.1 gstreamer-debuginfo-1.12.5-lp151.3.6.1 gstreamer-debugsource-1.12.5-lp151.3.6.1 gstreamer-devel-1.12.5-lp151.3.6.1 gstreamer-doc-1.12.5-lp151.3.6.1 gstreamer-utils-1.12.5-lp151.3.6.1 gstreamer-utils-debuginfo-1.12.5-lp151.3.6.1 libgstreamer-1_0-0-1.12.5-lp151.3.6.1 libgstreamer-1_0-0-debuginfo-1.12.5-lp151.3.6.1 typelib-1_0-Gst-1_0-1.12.5-lp151.3.6.1 - openSUSE Leap 15.1 (x86_64): gstreamer-32bit-1.12.5-lp151.3.6.1 gstreamer-32bit-debuginfo-1.12.5-lp151.3.6.1 gstreamer-devel-32bit-1.12.5-lp151.3.6.1 libgstreamer-1_0-0-32bit-1.12.5-lp151.3.6.1 libgstreamer-1_0-0-32bit-debuginfo-1.12.5-lp151.3.6.1 typelib-1_0-Gst-1_0-32bit-1.12.5-lp151.3.6.1 - openSUSE Leap 15.1 (noarch): gstreamer-lang-1.12.5-lp151.3.6.1 References: https://bugzilla.suse.com/1097405

1 0

openSUSE-SU-2020:1280-1: important: Security update for grub2
by opensuse-security＠opensuse.org 29 Aug '20

29 Aug '20

openSUSE Security Update: Security update for grub2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1280-1 Rating: important References: #1172745 #1174421 Cross-References: CVE-2020-15705 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for grub2 fixes the following issues: - CVE-2020-15705: Fail kernel validation without shim protocol (bsc#1174421). - Add fibre channel device's ofpath support to grub-ofpathname and search hint to speed up root device discovery (bsc#1172745). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1280=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): grub2-2.02-lp151.21.27.1 grub2-branding-upstream-2.02-lp151.21.27.1 grub2-debuginfo-2.02-lp151.21.27.1 grub2-debugsource-2.02-lp151.21.27.1 - openSUSE Leap 15.1 (noarch): grub2-i386-efi-2.02-lp151.21.27.1 grub2-i386-pc-2.02-lp151.21.27.1 grub2-i386-xen-2.02-lp151.21.27.1 grub2-snapper-plugin-2.02-lp151.21.27.1 grub2-systemd-sleep-plugin-2.02-lp151.21.27.1 grub2-x86_64-efi-2.02-lp151.21.27.1 grub2-x86_64-xen-2.02-lp151.21.27.1 References: https://www.suse.com/security/cve/CVE-2020-15705.html https://bugzilla.suse.com/1172745 https://bugzilla.suse.com/1174421

1 0

openSUSE-RU-2020:1283-1: moderate: Recommended update for python-azure-agent
by maintenance＠opensuse.org 29 Aug '20

29 Aug '20

openSUSE Recommended Update: Recommended update for python-azure-agent ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1283-1 Rating: moderate References: #1175198 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-azure-agent contains the following fix: Drop unnecessary path for sudoers handle. (bsc#1175198) - sudoers file is managed by cloud-init we no longer need this hack This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1283=1 Package List: - openSUSE Leap 15.2 (noarch): python-azure-agent-2.2.45-lp152.3.6.1 python-azure-agent-test-2.2.45-lp152.3.6.1 References: https://bugzilla.suse.com/1175198

1 0

openSUSE-SU-2020:1279-1: important: Security update for xorg-x11-server
by opensuse-security＠opensuse.org 29 Aug '20

29 Aug '20

openSUSE Security Update: Security update for xorg-x11-server ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1279-1 Rating: important References: #1174633 #1174635 #1174638 Cross-References: CVE-2020-14345 CVE-2020-14346 CVE-2020-14347 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for xorg-x11-server fixes the following issues: - CVE-2020-14347: Leak of uninitialized heap memory from the X server to clients on pixmap allocation (bsc#1174633, ZDI-CAN-11426). - CVE-2020-14346: XIChangeHierarchy Integer Underflow Privilege Escalation Vulnerability (bsc#1174638, ZDI-CAN-11429). - CVE-2020-14345: XKB out-of-bounds access privilege escalation vulnerability (bsc#1174635, ZDI-CAN-11428). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1279=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): xorg-x11-server-1.20.3-lp151.4.3.1 xorg-x11-server-debuginfo-1.20.3-lp151.4.3.1 xorg-x11-server-debugsource-1.20.3-lp151.4.3.1 xorg-x11-server-extra-1.20.3-lp151.4.3.1 xorg-x11-server-extra-debuginfo-1.20.3-lp151.4.3.1 xorg-x11-server-sdk-1.20.3-lp151.4.3.1 xorg-x11-server-source-1.20.3-lp151.4.3.1 xorg-x11-server-wayland-1.20.3-lp151.4.3.1 xorg-x11-server-wayland-debuginfo-1.20.3-lp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2020-14345.html https://www.suse.com/security/cve/CVE-2020-14346.html https://www.suse.com/security/cve/CVE-2020-14347.html https://bugzilla.suse.com/1174633 https://bugzilla.suse.com/1174635 https://bugzilla.suse.com/1174638

1 0