August 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2020:1258-1: moderate: Security update for python3
by opensuse-security＠opensuse.org 24 Aug '20

24 Aug '20

openSUSE Security Update: Security update for python3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1258-1 Rating: moderate References: #1174091 Cross-References: CVE-2019-20907 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python3 fixes the following issues: - bsc#1174091, CVE-2019-20907: avoiding possible infinite loop in specifically crafted tarball. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1258=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libpython3_6m1_0-3.6.10-lp151.6.24.1 libpython3_6m1_0-debuginfo-3.6.10-lp151.6.24.1 python3-3.6.10-lp151.6.24.1 python3-base-3.6.10-lp151.6.24.1 python3-base-debuginfo-3.6.10-lp151.6.24.1 python3-base-debugsource-3.6.10-lp151.6.24.1 python3-curses-3.6.10-lp151.6.24.1 python3-curses-debuginfo-3.6.10-lp151.6.24.1 python3-dbm-3.6.10-lp151.6.24.1 python3-dbm-debuginfo-3.6.10-lp151.6.24.1 python3-debuginfo-3.6.10-lp151.6.24.1 python3-debugsource-3.6.10-lp151.6.24.1 python3-devel-3.6.10-lp151.6.24.1 python3-devel-debuginfo-3.6.10-lp151.6.24.1 python3-idle-3.6.10-lp151.6.24.1 python3-testsuite-3.6.10-lp151.6.24.1 python3-testsuite-debuginfo-3.6.10-lp151.6.24.1 python3-tk-3.6.10-lp151.6.24.1 python3-tk-debuginfo-3.6.10-lp151.6.24.1 python3-tools-3.6.10-lp151.6.24.1 - openSUSE Leap 15.1 (x86_64): libpython3_6m1_0-32bit-3.6.10-lp151.6.24.1 libpython3_6m1_0-32bit-debuginfo-3.6.10-lp151.6.24.1 python3-32bit-3.6.10-lp151.6.24.1 python3-32bit-debuginfo-3.6.10-lp151.6.24.1 python3-base-32bit-3.6.10-lp151.6.24.1 python3-base-32bit-debuginfo-3.6.10-lp151.6.24.1 References: https://www.suse.com/security/cve/CVE-2019-20907.html https://bugzilla.suse.com/1174091

1 0

openSUSE-RU-2020:1255-1: moderate: Recommended update for rt-tests
by maintenance＠opensuse.org 24 Aug '20

24 Aug '20

openSUSE Recommended Update: Recommended update for rt-tests ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1255-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for rt-tests fixes the following issues: Update to version 1.6 (jsc#SLE-12981) * New feature to get a snapshot of a running instance of cyclictest without stopping it by sending SIGUSR2 to the PID and reading a shared memory segment. This is especially useful if running cyclictest over a long period of time * Add SPDX tags V3 * New programs to the rt-tests suite - queuelat: simulates a network queue checking for latency violations in packet processing. - cyclicdeadline: used to test the deadline scheduler (SCHED_DEADLINE) - deadline_test: tests the deadline scheduler in a cyclictest manner - ssdd: a tracer to do a bunch of PTRACE_SINGLESTEPs This update was imported from the SUSE:SLE-15-SP1:Update update project. This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1255=1 Package List: - openSUSE Backports SLE-15-SP1 (x86_64): rt-tests-1.6-bp151.2.3.1 References:

1 0

openSUSE-OU-2020:1259-1: Optional update for xmltooling
by maintenance＠opensuse.org 24 Aug '20

24 Aug '20

openSUSE Optional Update: Optional update for xmltooling ______________________________________________________________________________ Announcement ID: openSUSE-OU-2020:1259-1 Rating: low References: #1172351 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update for xmltooling doesn't fix any user visible bugs. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Optional Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1259=1 Package List: - openSUSE Leap 15.1 (x86_64): libxmltooling-devel-1.6.4-lp151.4.3.1 libxmltooling7-1.6.4-lp151.4.3.1 libxmltooling7-debuginfo-1.6.4-lp151.4.3.1 xmltooling-debugsource-1.6.4-lp151.4.3.1 xmltooling-schemas-1.6.4-lp151.4.3.1 References: https://bugzilla.suse.com/1172351

1 0

openSUSE-SU-2020:1257-1: moderate: Security update for python
by opensuse-security＠opensuse.org 24 Aug '20

24 Aug '20

openSUSE Security Update: Security update for python ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1257-1 Rating: moderate References: #1174091 Cross-References: CVE-2019-20907 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python fixes the following issues: - CVE-2019-20907: Avoid a possible infinite loop caused by specifically crafted tarballs (bsc#1174091). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1257=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libpython2_7-1_0-2.7.17-lp151.10.21.1 libpython2_7-1_0-debuginfo-2.7.17-lp151.10.21.1 python-2.7.17-lp151.10.21.1 python-base-2.7.17-lp151.10.21.1 python-base-debuginfo-2.7.17-lp151.10.21.1 python-base-debugsource-2.7.17-lp151.10.21.1 python-curses-2.7.17-lp151.10.21.1 python-curses-debuginfo-2.7.17-lp151.10.21.1 python-debuginfo-2.7.17-lp151.10.21.1 python-debugsource-2.7.17-lp151.10.21.1 python-demo-2.7.17-lp151.10.21.1 python-devel-2.7.17-lp151.10.21.1 python-gdbm-2.7.17-lp151.10.21.1 python-gdbm-debuginfo-2.7.17-lp151.10.21.1 python-idle-2.7.17-lp151.10.21.1 python-tk-2.7.17-lp151.10.21.1 python-tk-debuginfo-2.7.17-lp151.10.21.1 python-xml-2.7.17-lp151.10.21.1 python-xml-debuginfo-2.7.17-lp151.10.21.1 - openSUSE Leap 15.1 (x86_64): libpython2_7-1_0-32bit-2.7.17-lp151.10.21.1 libpython2_7-1_0-32bit-debuginfo-2.7.17-lp151.10.21.1 python-32bit-2.7.17-lp151.10.21.1 python-32bit-debuginfo-2.7.17-lp151.10.21.1 python-base-32bit-2.7.17-lp151.10.21.1 python-base-32bit-debuginfo-2.7.17-lp151.10.21.1 - openSUSE Leap 15.1 (noarch): python-doc-2.7.17-lp151.10.21.1 python-doc-pdf-2.7.17-lp151.10.21.1 References: https://www.suse.com/security/cve/CVE-2019-20907.html https://bugzilla.suse.com/1174091

1 0

openSUSE-SU-2020:1254-1: moderate: Security update for python
by opensuse-security＠opensuse.org 24 Aug '20

24 Aug '20

openSUSE Security Update: Security update for python ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1254-1 Rating: moderate References: #1174091 Cross-References: CVE-2019-20907 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python fixes the following issues: - CVE-2019-20907: Avoid a possible infinite loop caused by specifically crafted tarballs (bsc#1174091). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1254=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libpython2_7-1_0-2.7.17-lp152.3.3.1 libpython2_7-1_0-debuginfo-2.7.17-lp152.3.3.1 python-2.7.17-lp152.3.3.1 python-base-2.7.17-lp152.3.3.1 python-base-debuginfo-2.7.17-lp152.3.3.1 python-base-debugsource-2.7.17-lp152.3.3.1 python-curses-2.7.17-lp152.3.3.1 python-curses-debuginfo-2.7.17-lp152.3.3.1 python-debuginfo-2.7.17-lp152.3.3.1 python-debugsource-2.7.17-lp152.3.3.1 python-demo-2.7.17-lp152.3.3.1 python-devel-2.7.17-lp152.3.3.1 python-gdbm-2.7.17-lp152.3.3.1 python-gdbm-debuginfo-2.7.17-lp152.3.3.1 python-idle-2.7.17-lp152.3.3.1 python-tk-2.7.17-lp152.3.3.1 python-tk-debuginfo-2.7.17-lp152.3.3.1 python-xml-2.7.17-lp152.3.3.1 python-xml-debuginfo-2.7.17-lp152.3.3.1 - openSUSE Leap 15.2 (noarch): python-doc-2.7.17-lp152.3.3.1 python-doc-pdf-2.7.17-lp152.3.3.1 - openSUSE Leap 15.2 (x86_64): libpython2_7-1_0-32bit-2.7.17-lp152.3.3.1 libpython2_7-1_0-32bit-debuginfo-2.7.17-lp152.3.3.1 python-32bit-2.7.17-lp152.3.3.1 python-32bit-debuginfo-2.7.17-lp152.3.3.1 python-base-32bit-2.7.17-lp152.3.3.1 python-base-32bit-debuginfo-2.7.17-lp152.3.3.1 References: https://www.suse.com/security/cve/CVE-2019-20907.html https://bugzilla.suse.com/1174091

1 0

openSUSE-RU-2020:1252-1: moderate: Recommended update for fwupd
by maintenance＠opensuse.org 23 Aug '20

23 Aug '20

openSUSE Recommended Update: Recommended update for fwupd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1252-1 Rating: moderate References: #1174543 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update of fwupd fixes the following issue: - rebuilt with new signing key. (bsc#1174543) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1252=1 Package List: - openSUSE Leap 15.2 (x86_64): dfu-tool-1.2.11-lp152.3.3.1 dfu-tool-debuginfo-1.2.11-lp152.3.3.1 fwupd-1.2.11-lp152.3.3.1 fwupd-debuginfo-1.2.11-lp152.3.3.1 fwupd-debugsource-1.2.11-lp152.3.3.1 fwupd-devel-1.2.11-lp152.3.3.1 libfwupd2-1.2.11-lp152.3.3.1 libfwupd2-debuginfo-1.2.11-lp152.3.3.1 typelib-1_0-Fwupd-2_0-1.2.11-lp152.3.3.1 - openSUSE Leap 15.2 (noarch): fwupd-lang-1.2.11-lp152.3.3.1 References: https://bugzilla.suse.com/1174543

1 0

openSUSE-RU-2020:1253-1: important: Recommended update for ca-certificates-mozilla
by maintenance＠opensuse.org 23 Aug '20

23 Aug '20

openSUSE Recommended Update: Recommended update for ca-certificates-mozilla ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1253-1 Rating: important References: #1010996 #1071152 #1071390 #1154871 #1174673 #973042 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 6 recommended fixes can now be installed. Description: This update for ca-certificates-mozilla fixes the following issues: update to 2.42 state of the Mozilla NSS Certificate store (bsc#1174673) Removed CAs: * AddTrust External CA Root * AddTrust Class 1 CA Root * LuxTrust Global Root 2 * Staat der Nederlanden Root CA - G2 * Symantec Class 1 Public Primary Certification Authority - G4 * Symantec Class 2 Public Primary Certification Authority - G4 * VeriSign Class 3 Public Primary Certification Authority - G3 Added CAs: * certSIGN Root CA G2 * e-Szigno Root CA 2017 * Microsoft ECC Root Certificate Authority 2017 * Microsoft RSA Root Certificate Authority 2017 - reverted p11-kit nss trust integration as it breaks in fresh installations (bsc#1154871) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1253=1 Package List: - openSUSE Leap 15.1 (noarch): ca-certificates-mozilla-2.42-lp151.2.9.1 References: https://bugzilla.suse.com/1010996 https://bugzilla.suse.com/1071152 https://bugzilla.suse.com/1071390 https://bugzilla.suse.com/1154871 https://bugzilla.suse.com/1174673 https://bugzilla.suse.com/973042

1 0

openSUSE-RU-2020:1251-1: moderate: Recommended update for fwupdate
by maintenance＠opensuse.org 23 Aug '20

23 Aug '20

openSUSE Recommended Update: Recommended update for fwupdate ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1251-1 Rating: moderate References: #1174543 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update of fwupdate fixes the following issue: - rebuilt with new signing key. (bsc#1174543) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1251=1 Package List: - openSUSE Leap 15.2 (x86_64): fwupdate-12-lp152.6.3.1 fwupdate-debuginfo-12-lp152.6.3.1 fwupdate-debugsource-12-lp152.6.3.1 fwupdate-devel-12-lp152.6.3.1 fwupdate-efi-12-lp152.6.3.1 fwupdate-efi-debuginfo-12-lp152.6.3.1 libfwup1-12-lp152.6.3.1 libfwup1-debuginfo-12-lp152.6.3.1 References: https://bugzilla.suse.com/1174543

1 0

openSUSE-RU-2020:1250-1: moderate: Recommended update for util-linux
by maintenance＠opensuse.org 23 Aug '20

23 Aug '20

openSUSE Recommended Update: Recommended update for util-linux ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1250-1 Rating: moderate References: #1149911 #1151708 #1168235 #1168389 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for util-linux fixes the following issues: - blockdev: Do not fail --report on kpartx-style partitions on multipath. (bsc#1168235) - nologin: Add support for -c to prevent error from su -c. (bsc#1151708) - Avoid triggering autofs in lookup_umount_fs_by_statfs. (bsc#1168389) - mount: Fall back to device node name if /dev/mapper link not found. (bsc#1149911) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1250=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libblkid-devel-2.33.1-lp152.5.3.1 libblkid-devel-static-2.33.1-lp152.5.3.1 libblkid1-2.33.1-lp152.5.3.1 libblkid1-debuginfo-2.33.1-lp152.5.3.1 libfdisk-devel-2.33.1-lp152.5.3.1 libfdisk-devel-static-2.33.1-lp152.5.3.1 libfdisk1-2.33.1-lp152.5.3.1 libfdisk1-debuginfo-2.33.1-lp152.5.3.1 libmount-devel-2.33.1-lp152.5.3.1 libmount-devel-static-2.33.1-lp152.5.3.1 libmount1-2.33.1-lp152.5.3.1 libmount1-debuginfo-2.33.1-lp152.5.3.1 libsmartcols-devel-2.33.1-lp152.5.3.1 libsmartcols-devel-static-2.33.1-lp152.5.3.1 libsmartcols1-2.33.1-lp152.5.3.1 libsmartcols1-debuginfo-2.33.1-lp152.5.3.1 libuuid-devel-2.33.1-lp152.5.3.1 libuuid-devel-static-2.33.1-lp152.5.3.1 libuuid1-2.33.1-lp152.5.3.1 libuuid1-debuginfo-2.33.1-lp152.5.3.1 util-linux-2.33.1-lp152.5.3.1 util-linux-debuginfo-2.33.1-lp152.5.3.1 util-linux-debugsource-2.33.1-lp152.5.3.1 util-linux-systemd-2.33.1-lp152.5.3.1 util-linux-systemd-debuginfo-2.33.1-lp152.5.3.1 util-linux-systemd-debugsource-2.33.1-lp152.5.3.1 uuidd-2.33.1-lp152.5.3.1 uuidd-debuginfo-2.33.1-lp152.5.3.1 - openSUSE Leap 15.2 (x86_64): libblkid-devel-32bit-2.33.1-lp152.5.3.1 libblkid1-32bit-2.33.1-lp152.5.3.1 libblkid1-32bit-debuginfo-2.33.1-lp152.5.3.1 libmount-devel-32bit-2.33.1-lp152.5.3.1 libmount1-32bit-2.33.1-lp152.5.3.1 libmount1-32bit-debuginfo-2.33.1-lp152.5.3.1 libuuid-devel-32bit-2.33.1-lp152.5.3.1 libuuid1-32bit-2.33.1-lp152.5.3.1 libuuid1-32bit-debuginfo-2.33.1-lp152.5.3.1 python3-libmount-2.33.1-lp152.5.3.1 python3-libmount-debuginfo-2.33.1-lp152.5.3.1 python3-libmount-debugsource-2.33.1-lp152.5.3.1 - openSUSE Leap 15.2 (noarch): util-linux-lang-2.33.1-lp152.5.3.1 References: https://bugzilla.suse.com/1149911 https://bugzilla.suse.com/1151708 https://bugzilla.suse.com/1168235 https://bugzilla.suse.com/1168389

1 0

openSUSE-RU-2020:1248-1: moderate: Recommended update for inkscape
by maintenance＠opensuse.org 23 Aug '20

23 Aug '20

openSUSE Recommended Update: Recommended update for inkscape ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1248-1 Rating: moderate References: #1171258 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for inkscape fixes the following issue: - Remove inkscape-extension-skencil completely for Leap 15.2 by now. (jsc#SLE-12254, bsc#1171258) The extension was built only on openSUSE in the past, nowadays: * Tumbleweed does not build it since skencil does not support python 3. * SLE has never built and shipped the extension. Hence this submission actually disables the extension on Leap 15.2 and above to keep it consistent with SLE and TW. The stub for packaging the extension is still kept in the spec for future needs when we bring skencil back to the release. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1248=1 Package List: - openSUSE Leap 15.2 (noarch): inkscape-lang-0.92.2-lp152.8.3.1 - openSUSE Leap 15.2 (x86_64): inkscape-0.92.2-lp152.8.3.1 inkscape-debuginfo-0.92.2-lp152.8.3.1 inkscape-debugsource-0.92.2-lp152.8.3.1 inkscape-extensions-dia-0.92.2-lp152.8.3.1 inkscape-extensions-extra-0.92.2-lp152.8.3.1 inkscape-extensions-fig-0.92.2-lp152.8.3.1 inkscape-extensions-gimp-0.92.2-lp152.8.3.1 References: https://bugzilla.suse.com/1171258

1 0