August 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2020:1249-1: moderate: Recommended update for util-linux
by maintenance＠opensuse.org 23 Aug '20

23 Aug '20

openSUSE Recommended Update: Recommended update for util-linux ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1249-1 Rating: moderate References: #1149911 #1151708 #1168235 #1168389 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for util-linux fixes the following issues: - blockdev: Do not fail --report on kpartx-style partitions on multipath. (bsc#1168235) - nologin: Add support for -c to prevent error from su -c. (bsc#1151708) - Avoid triggering autofs in lookup_umount_fs_by_statfs. (bsc#1168389) - mount: Fall back to device node name if /dev/mapper link not found. (bsc#1149911) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1249=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libblkid-devel-2.33.1-lp151.3.6.1 libblkid-devel-static-2.33.1-lp151.3.6.1 libblkid1-2.33.1-lp151.3.6.1 libblkid1-debuginfo-2.33.1-lp151.3.6.1 libfdisk-devel-2.33.1-lp151.3.6.1 libfdisk-devel-static-2.33.1-lp151.3.6.1 libfdisk1-2.33.1-lp151.3.6.1 libfdisk1-debuginfo-2.33.1-lp151.3.6.1 libmount-devel-2.33.1-lp151.3.6.1 libmount-devel-static-2.33.1-lp151.3.6.1 libmount1-2.33.1-lp151.3.6.1 libmount1-debuginfo-2.33.1-lp151.3.6.1 libsmartcols-devel-2.33.1-lp151.3.6.1 libsmartcols-devel-static-2.33.1-lp151.3.6.1 libsmartcols1-2.33.1-lp151.3.6.1 libsmartcols1-debuginfo-2.33.1-lp151.3.6.1 libuuid-devel-2.33.1-lp151.3.6.1 libuuid-devel-static-2.33.1-lp151.3.6.1 libuuid1-2.33.1-lp151.3.6.1 libuuid1-debuginfo-2.33.1-lp151.3.6.1 util-linux-2.33.1-lp151.3.6.1 util-linux-debuginfo-2.33.1-lp151.3.6.1 util-linux-debugsource-2.33.1-lp151.3.6.1 util-linux-systemd-2.33.1-lp151.3.6.1 util-linux-systemd-debuginfo-2.33.1-lp151.3.6.1 util-linux-systemd-debugsource-2.33.1-lp151.3.6.1 uuidd-2.33.1-lp151.3.6.1 uuidd-debuginfo-2.33.1-lp151.3.6.1 - openSUSE Leap 15.1 (noarch): util-linux-lang-2.33.1-lp151.3.6.1 - openSUSE Leap 15.1 (x86_64): libblkid-devel-32bit-2.33.1-lp151.3.6.1 libblkid1-32bit-2.33.1-lp151.3.6.1 libblkid1-32bit-debuginfo-2.33.1-lp151.3.6.1 libmount-devel-32bit-2.33.1-lp151.3.6.1 libmount1-32bit-2.33.1-lp151.3.6.1 libmount1-32bit-debuginfo-2.33.1-lp151.3.6.1 libuuid-devel-32bit-2.33.1-lp151.3.6.1 libuuid1-32bit-2.33.1-lp151.3.6.1 libuuid1-32bit-debuginfo-2.33.1-lp151.3.6.1 python3-libmount-2.33.1-lp151.3.6.1 python3-libmount-debuginfo-2.33.1-lp151.3.6.1 python3-libmount-debugsource-2.33.1-lp151.3.6.1 References: https://bugzilla.suse.com/1149911 https://bugzilla.suse.com/1151708 https://bugzilla.suse.com/1168235 https://bugzilla.suse.com/1168389

1 0

openSUSE-RU-2020:1247-1: moderate: Recommended update for devscripts
by maintenance＠opensuse.org 23 Aug '20

23 Aug '20

openSUSE Recommended Update: Recommended update for devscripts ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1247-1 Rating: moderate References: #1174163 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for devscripts fixes the following issue: Update from version 2.15.1 to version 2.19.5 (bsc#1174163) - Add conflicts on packages with the same binaries. - Fixed license tag as suggested by licensedigger. - Changed download location for source tarball from Debian package pool to salsa.debian.org to avoid download errors. - Remove support for ancient openSUSE and non-SUSE distributions. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1247=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): devscripts-2.19.5-lp151.3.8.1 devscripts-debuginfo-2.19.5-lp151.3.8.1 - openSUSE Leap 15.1 (noarch): checkbashisms-2.19.5-lp151.3.8.1 References: https://bugzilla.suse.com/1174163

1 0

openSUSE-SU-2020:1243-1: important: Security update for postgresql12
by opensuse-security＠opensuse.org 22 Aug '20

22 Aug '20

openSUSE Security Update: Security update for postgresql12 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1243-1 Rating: important References: #1175193 #1175194 Cross-References: CVE-2020-14349 CVE-2020-14350 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for postgresql12 fixes the following issues: - update to 12.4: * CVE-2020-14349, bsc#1175193: Set a secure search_path in logical replication walsenders and apply workers * CVE-2020-14350, bsc#1175194: Make contrib modules' installation scripts more secure. * https://www.postgresql.org/docs/12/release-12-4.html This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1243=1 Package List: - openSUSE Leap 15.1 (x86_64): libecpg6-12.4-lp151.6.1 libecpg6-debuginfo-12.4-lp151.6.1 libpq5-12.4-lp151.6.1 libpq5-debuginfo-12.4-lp151.6.1 postgresql12-12.4-lp151.6.1 postgresql12-contrib-12.4-lp151.6.1 postgresql12-contrib-debuginfo-12.4-lp151.6.1 postgresql12-debuginfo-12.4-lp151.6.1 postgresql12-debugsource-12.4-lp151.6.1 postgresql12-devel-12.4-lp151.6.1 postgresql12-devel-debuginfo-12.4-lp151.6.1 postgresql12-llvmjit-12.4-lp151.6.1 postgresql12-llvmjit-debuginfo-12.4-lp151.6.1 postgresql12-plperl-12.4-lp151.6.1 postgresql12-plperl-debuginfo-12.4-lp151.6.1 postgresql12-plpython-12.4-lp151.6.1 postgresql12-plpython-debuginfo-12.4-lp151.6.1 postgresql12-pltcl-12.4-lp151.6.1 postgresql12-pltcl-debuginfo-12.4-lp151.6.1 postgresql12-server-12.4-lp151.6.1 postgresql12-server-debuginfo-12.4-lp151.6.1 postgresql12-server-devel-12.4-lp151.6.1 postgresql12-server-devel-debuginfo-12.4-lp151.6.1 postgresql12-test-12.4-lp151.6.1 - openSUSE Leap 15.1 (noarch): postgresql12-docs-12.4-lp151.6.1 References: https://www.suse.com/security/cve/CVE-2020-14349.html https://www.suse.com/security/cve/CVE-2020-14350.html https://bugzilla.suse.com/1175193 https://bugzilla.suse.com/1175194

1 0

openSUSE-RU-2020:1245-1: moderate: Recommended update for sysfsutils
by maintenance＠opensuse.org 22 Aug '20

22 Aug '20

openSUSE Recommended Update: Recommended update for sysfsutils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1245-1 Rating: moderate References: #1155305 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for sysfsutils fixes the following issue: - Fix cdev name comparison. (bsc#1155305) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1245=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): sysfsutils-2.1.0-lp152.4.3.1 sysfsutils-debuginfo-2.1.0-lp152.4.3.1 sysfsutils-debugsource-2.1.0-lp152.4.3.1 sysfsutils-devel-2.1.0-lp152.4.3.1 - openSUSE Leap 15.2 (x86_64): sysfsutils-32bit-2.1.0-lp152.4.3.1 sysfsutils-32bit-debuginfo-2.1.0-lp152.4.3.1 References: https://bugzilla.suse.com/1155305

1 0

openSUSE-SU-2020:1244-1: important: Security update for postgresql12
by opensuse-security＠opensuse.org 22 Aug '20

22 Aug '20

openSUSE Security Update: Security update for postgresql12 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1244-1 Rating: important References: #1175193 #1175194 Cross-References: CVE-2020-14349 CVE-2020-14350 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for postgresql12 fixes the following issues: - update to 12.4: * CVE-2020-14349, bsc#1175193: Set a secure search_path in logical replication walsenders and apply workers * CVE-2020-14350, bsc#1175194: Make contrib modules' installation scripts more secure. * https://www.postgresql.org/docs/12/release-12-4.html This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1244=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libecpg6-12.4-lp152.3.7.1 libecpg6-debuginfo-12.4-lp152.3.7.1 libpq5-12.4-lp152.3.7.1 libpq5-debuginfo-12.4-lp152.3.7.1 postgresql12-12.4-lp152.3.7.1 postgresql12-contrib-12.4-lp152.3.7.1 postgresql12-contrib-debuginfo-12.4-lp152.3.7.1 postgresql12-debuginfo-12.4-lp152.3.7.1 postgresql12-debugsource-12.4-lp152.3.7.1 postgresql12-devel-12.4-lp152.3.7.1 postgresql12-devel-debuginfo-12.4-lp152.3.7.1 postgresql12-llvmjit-12.4-lp152.3.7.1 postgresql12-llvmjit-debuginfo-12.4-lp152.3.7.1 postgresql12-plperl-12.4-lp152.3.7.1 postgresql12-plperl-debuginfo-12.4-lp152.3.7.1 postgresql12-plpython-12.4-lp152.3.7.1 postgresql12-plpython-debuginfo-12.4-lp152.3.7.1 postgresql12-pltcl-12.4-lp152.3.7.1 postgresql12-pltcl-debuginfo-12.4-lp152.3.7.1 postgresql12-server-12.4-lp152.3.7.1 postgresql12-server-debuginfo-12.4-lp152.3.7.1 postgresql12-server-devel-12.4-lp152.3.7.1 postgresql12-server-devel-debuginfo-12.4-lp152.3.7.1 postgresql12-test-12.4-lp152.3.7.1 - openSUSE Leap 15.2 (x86_64): libecpg6-32bit-12.4-lp152.3.7.1 libecpg6-32bit-debuginfo-12.4-lp152.3.7.1 libpq5-32bit-12.4-lp152.3.7.1 libpq5-32bit-debuginfo-12.4-lp152.3.7.1 - openSUSE Leap 15.2 (noarch): postgresql12-docs-12.4-lp152.3.7.1 References: https://www.suse.com/security/cve/CVE-2020-14349.html https://www.suse.com/security/cve/CVE-2020-14350.html https://bugzilla.suse.com/1175193 https://bugzilla.suse.com/1175194

1 0

openSUSE-RU-2020:1246-1: moderate: Recommended update for rt-tests
by maintenance＠opensuse.org 22 Aug '20

22 Aug '20

openSUSE Recommended Update: Recommended update for rt-tests ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1246-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for rt-tests fixes the following issues: Update to version 1.6 (jsc#SLE-12981) * New feature to get a snapshot of a running instance of cyclictest without stopping it by sending SIGUSR2 to the PID and reading a shared memory segment. This is especially useful if running cyclictest over a long period of time * Add SPDX tags V3 * New programs to the rt-tests suite - queuelat: simulates a network queue checking for latency violations in packet processing. - cyclicdeadline: used to test the deadline scheduler (SCHED_DEADLINE) - deadline_test: tests the deadline scheduler in a cyclictest manner - ssdd: a tracer to do a bunch of PTRACE_SINGLESTEPs This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1246=1 Package List: - openSUSE Leap 15.2 (x86_64): rt-tests-1.6-lp152.3.3.1 rt-tests-debuginfo-1.6-lp152.3.3.1 rt-tests-debugsource-1.6-lp152.3.3.1 References:

1 0

openSUSE-RU-2020:1240-1: important: Recommended update for ca-certificates-mozilla
by maintenance＠opensuse.org 21 Aug '20

21 Aug '20

openSUSE Recommended Update: Recommended update for ca-certificates-mozilla ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1240-1 Rating: important References: #1174673 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ca-certificates-mozilla fixes the following issues: Update to 2.42 state of the Mozilla NSS Certificate store (bsc#1174673) Removed CAs: * AddTrust External CA Root * AddTrust Class 1 CA Root * LuxTrust Global Root 2 * Staat der Nederlanden Root CA - G2 * Symantec Class 1 Public Primary Certification Authority - G4 * Symantec Class 2 Public Primary Certification Authority - G4 * VeriSign Class 3 Public Primary Certification Authority - G3 Added CAs: * certSIGN Root CA G2 * e-Szigno Root CA 2017 * Microsoft ECC Root Certificate Authority 2017 * Microsoft RSA Root Certificate Authority 2017 This update was imported from the SUSE:SLE-15-SP2:Update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1240=1 Package List: - openSUSE Leap 15.2 (noarch): ca-certificates-mozilla-2.42-lp152.2.3.1 References: https://bugzilla.suse.com/1174673

1 0

openSUSE-SU-2020:1241-1: important: Security update for dovecot23
by opensuse-security＠opensuse.org 21 Aug '20

21 Aug '20

openSUSE Security Update: Security update for dovecot23 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1241-1 Rating: important References: #1174922 #1174923 Cross-References: CVE-2020-12673 CVE-2020-12674 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for dovecot23 fixes the following issues: - CVE-2020-12673: improper implementation of NTLM does not check message buffer size (bsc#1174922). - CVE-2020-12674: improper implementation of RPA mechanism (bsc#1174923). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1241=1 Package List: - openSUSE Leap 15.1 (x86_64): dovecot23-2.3.10-lp151.2.12.1 dovecot23-backend-mysql-2.3.10-lp151.2.12.1 dovecot23-backend-mysql-debuginfo-2.3.10-lp151.2.12.1 dovecot23-backend-pgsql-2.3.10-lp151.2.12.1 dovecot23-backend-pgsql-debuginfo-2.3.10-lp151.2.12.1 dovecot23-backend-sqlite-2.3.10-lp151.2.12.1 dovecot23-backend-sqlite-debuginfo-2.3.10-lp151.2.12.1 dovecot23-debuginfo-2.3.10-lp151.2.12.1 dovecot23-debugsource-2.3.10-lp151.2.12.1 dovecot23-devel-2.3.10-lp151.2.12.1 dovecot23-fts-2.3.10-lp151.2.12.1 dovecot23-fts-debuginfo-2.3.10-lp151.2.12.1 dovecot23-fts-lucene-2.3.10-lp151.2.12.1 dovecot23-fts-lucene-debuginfo-2.3.10-lp151.2.12.1 dovecot23-fts-solr-2.3.10-lp151.2.12.1 dovecot23-fts-solr-debuginfo-2.3.10-lp151.2.12.1 dovecot23-fts-squat-2.3.10-lp151.2.12.1 dovecot23-fts-squat-debuginfo-2.3.10-lp151.2.12.1 References: https://www.suse.com/security/cve/CVE-2020-12673.html https://www.suse.com/security/cve/CVE-2020-12674.html https://bugzilla.suse.com/1174922 https://bugzilla.suse.com/1174923

1 0

openSUSE-RU-2020:1242-1: moderate: Recommended update for python-jaraco.functools
by maintenance＠opensuse.org 21 Aug '20

21 Aug '20

openSUSE Recommended Update: Recommended update for python-jaraco.functools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1242-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for python-jaraco.functools fixes the following issues: Downgrade to 2.0 to support the python 2 variant. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1242=1 Package List: - openSUSE Leap 15.2 (noarch): python2-jaraco.classes-2.0-lp152.2.3.1 python2-jaraco.functools-2.0-lp152.2.3.1 python3-jaraco.classes-2.0-lp152.2.3.1 python3-jaraco.functools-2.0-lp152.2.3.1 References:

1 0

openSUSE-RU-2020:1239-1: moderate: Recommended update for rt-tests
by maintenance＠opensuse.org 21 Aug '20

21 Aug '20

openSUSE Recommended Update: Recommended update for rt-tests ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1239-1 Rating: moderate References: Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for rt-tests fixes the following issues: Update to version 1.6 (jsc#SLE-12981) * New feature to get a snapshot of a running instance of cyclictest without stopping it by sending SIGUSR2 to the PID and reading a shared memory segment. This is especially useful if running cyclictest over a long period of time * Add SPDX tags V3 * New programs to the rt-tests suite - queuelat: simulates a network queue checking for latency violations in packet processing. - cyclicdeadline: used to test the deadline scheduler (SCHED_DEADLINE) - deadline_test: tests the deadline scheduler in a cyclictest manner - ssdd: a tracer to do a bunch of PTRACE_SINGLESTEPs This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1239=1 Package List: - openSUSE Leap 15.1 (x86_64): rt-tests-1.6-lp151.2.3.1 rt-tests-debuginfo-1.6-lp151.2.3.1 rt-tests-debugsource-1.6-lp151.2.3.1 References:

1 0