September 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2020:1110-1: moderate: Recommended update for putty
by maintenance＠opensuse.org 18 Sep '20

18 Sep '20

openSUSE Recommended Update: Recommended update for putty ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1110-1 Rating: moderate References: #1173442 Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for putty fixes the following issues: putty was updated to release 0.74: * security fix: if an SSH server accepted an offer of a public key and then rejected the signature, PuTTY could access freed memory, if the key had come from an SSH agent. (boo#1173442) * Added a new configuration option to mitigate a minor information leak in SSH host key policy. This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1110=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): putty-0.74-bp152.4.3.1 References: https://bugzilla.suse.com/1173442

1 0

openSUSE-RU-2020:1422-1: moderate: Recommended update for krunner
by maintenance＠opensuse.org 18 Sep '20

18 Sep '20

openSUSE Recommended Update: Recommended update for krunner ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1422-1 Rating: moderate References: #1175563 Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for krunner fixes the following issues: - Add patch to fix ABI mismatch (kde#423003, boo#1175563): This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1422=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): krunner-devel-5.71.0-bp152.2.3.1 libKF5Runner5-5.71.0-bp152.2.3.1 - openSUSE Backports SLE-15-SP2 (aarch64_ilp32): krunner-devel-64bit-5.71.0-bp152.2.3.1 libKF5Runner5-64bit-5.71.0-bp152.2.3.1 References: https://bugzilla.suse.com/1175563

1 0

openSUSE-RU-2020:1233-1: moderate: Recommended update for cacti, cacti-spine
by maintenance＠opensuse.org 18 Sep '20

18 Sep '20

openSUSE Recommended Update: Recommended update for cacti, cacti-spine ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1233-1 Rating: moderate References: #1174850 Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for cacti, cacti-spine fixes the following issues: Updated to version 1.2.14 - Fixed an XSS vulnerability due to improper escaping of error message during template import preview (boo#1174850). This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1233=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): cacti-spine-1.2.14-bp152.2.4.1 - openSUSE Backports SLE-15-SP2 (noarch): cacti-1.2.14-bp152.2.4.1 References: https://bugzilla.suse.com/1174850

1 0

openSUSE-RU-2020:1440-1: moderate: Recommended update for gnuhealth, trytond, trytond_account, trytond_account_invoice
by maintenance＠opensuse.org 18 Sep '20

18 Sep '20

openSUSE Recommended Update: Recommended update for gnuhealth, trytond, trytond_account, trytond_account_invoice ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1440-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for gnuhealth, trytond, trytond_account, trytond_account_invoice fixes the following issues: Changes in gnuhealth: version 3.6.5 - HMIS: Update to 3.6.5 including ICD10 codes 2020 - Readme renamed (SUSE -> openSUSE) gnuhealth: Link to oS wiki added - gnuhealth-control updated to 3.6.5-openSUSE * change of translation server for language packs Changes in trytond: - changed trytond.conf to listen to all interfaces - Version 5.0.25 - Bugfix Release - Version 5.0.24 - Bugfix Release * readme renamed (SUSE -> openSUSE) Changes in trytond_account: - Version 5.0.14 - Bugfix Release Changes in trytond_account_invoice: - Version 5.0.9 - Bugfix Release This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1440=1 Package List: - openSUSE Backports SLE-15-SP2 (noarch): gnuhealth-3.6.5-bp152.3.4.1 gnuhealth-orthanc-3.6.5-bp152.3.4.1 trytond-5.0.25-bp152.2.4.1 trytond_account-5.0.14-bp152.2.4.1 trytond_account_invoice-5.0.9-bp152.2.3.1 References:

1 0

openSUSE-SU-2020:1423-1: moderate: Security update for python-Flask-Cors
by opensuse-security＠opensuse.org 18 Sep '20

18 Sep '20

openSUSE Security Update: Security update for python-Flask-Cors ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1423-1 Rating: moderate References: #1175986 Cross-References: CVE-2020-25032 Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-Flask-Cors fixes the following issues: - CVE-2020-25032: fix a relative directory traversal vulnerability (bsc#1175986). This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1423=1 Package List: - openSUSE Backports SLE-15-SP2 (noarch): python2-Flask-Cors-3.0.8-bp152.2.3.1 python3-Flask-Cors-3.0.8-bp152.2.3.1 References: https://www.suse.com/security/cve/CVE-2020-25032.html https://bugzilla.suse.com/1175986

1 0

openSUSE-SU-2020:1427-1: moderate: Security update for inn
by opensuse-security＠opensuse.org 18 Sep '20

18 Sep '20

openSUSE Security Update: Security update for inn ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1427-1 Rating: moderate References: #1172573 Cross-References: CVE-2020-8026 Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for inn fixes the following issues: - change file owners in /usr/lib/news to root [boo#1172573] [CVE-2020-8026] This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1427=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): inn-2.6.2-bp152.2.4.1 inn-devel-2.6.2-bp152.2.4.1 mininews-2.6.2-bp152.2.4.1 References: https://www.suse.com/security/cve/CVE-2020-8026.html https://bugzilla.suse.com/1172573

1 0

openSUSE-RU-2020:1388-1: moderate: Recommended update for kio
by maintenance＠opensuse.org 18 Sep '20

18 Sep '20

openSUSE Recommended Update: Recommended update for kio ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1388-1 Rating: moderate References: #1174141 Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for kio fixes the following issues: - Fixed running files with spaces in the path (boo#1174141, kde#423412, kde#423645). This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1388=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): kio-5.71.0-bp152.2.4.1 kio-core-5.71.0-bp152.2.4.1 kio-devel-5.71.0-bp152.2.4.1 - openSUSE Backports SLE-15-SP2 (aarch64_ilp32): kio-64bit-5.71.0-bp152.2.4.1 kio-core-64bit-5.71.0-bp152.2.4.1 kio-devel-64bit-5.71.0-bp152.2.4.1 - openSUSE Backports SLE-15-SP2 (noarch): kio-lang-5.71.0-bp152.2.4.1 References: https://bugzilla.suse.com/1174141

1 0

openSUSE-RU-2020:1431-1: moderate: Recommended update for k4dirstat
by maintenance＠opensuse.org 18 Sep '20

18 Sep '20

openSUSE Recommended Update: Recommended update for k4dirstat ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1431-1 Rating: moderate References: #1173905 Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for k4dirstat fixes the following issues: k4dirstat was updated: to 3.2.1 (boo#1173905): * Fix crashes on startup in some certain KIO related circumstances This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1431=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): k4dirstat-3.2.1-bp152.2.3.1 - openSUSE Backports SLE-15-SP2 (noarch): k4dirstat-lang-3.2.1-bp152.2.3.1 References: https://bugzilla.suse.com/1173905

1 0

openSUSE-RU-2020:1123-1: moderate: Recommended update for sar2
by maintenance＠opensuse.org 18 Sep '20

18 Sep '20

openSUSE Recommended Update: Recommended update for sar2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1123-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for sar2 fixes the following issues: Update to version 2.5.0: * Add preliminary OSX support. * Improve lagging on touch-down event. * Fix crash when loading Free Flight mode. * Add wind support and aerodynamic drag. * Add 2 training missions in windy weather. * Add support for wind gusts. * Rework airplane physics and stalling conditions. * Adjust models for more realistic speed and service ceiling conditions. * Allow a minimum helicopter throotle to 25% (previously it was 50%). * Let smoke be carried by the wind. * Add a switch in simulation options to enable/disable Wind. * Add wind conditions to all Guadarrama missions. * Honor wheel brake coefficient. This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1123=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): sar2-2.5.0-bp152.2.3.1 - openSUSE Backports SLE-15-SP2 (noarch): sar2-data-2.5.0-bp152.2.3.1 References:

1 0

openSUSE-RU-2020:1432-1: moderate: Recommended update for lyx
by maintenance＠opensuse.org 18 Sep '20

18 Sep '20

openSUSE Recommended Update: Recommended update for lyx ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1432-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for lyx fixes the following issues: lyx was updated to 2.3.5.2: * fix quotation marks being reversed in moving arguments when hyperref is enabled This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1432=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): lyx-2.3.5.2-bp152.2.3.1 References:

1 0