September 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2020:1385-1: moderate: Security update for gettext-runtime
by opensuse-security＠opensuse.org 08 Sep '20

08 Sep '20

openSUSE Security Update: Security update for gettext-runtime ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1385-1 Rating: moderate References: #1106843 #1113719 #941629 Cross-References: CVE-2018-18751 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update for gettext-runtime fixes the following issues: - Fix boo941629-unnessary-rpath-on-standard-path.patch (bsc#941629) - Added msgfmt-double-free.patch to fix a double free error (CVE-2018-18751 bsc#1113719) - Add patch msgfmt-reset-msg-length-after-remove.patch which does reset the length of message string after a line has been removed (bsc#1106843) This update was imported from the SUSE:SLE-15:Update update project. This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1385=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le x86_64): gettext-csharp-0.19.8.1-bp151.2.1 References: https://www.suse.com/security/cve/CVE-2018-18751.html https://bugzilla.suse.com/1106843 https://bugzilla.suse.com/1113719 https://bugzilla.suse.com/941629

1 0

openSUSE-SU-2020:1382-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 08 Sep '20

08 Sep '20

openSUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1382-1 Rating: important References: #1065729 #1071995 #1085030 #1133021 #1154492 #1156395 #1159058 #1160634 #1169790 #1171634 #1171688 #1172108 #1172418 #1172871 #1173485 #1173798 #1174003 #1174026 #1174387 #1174699 #1174771 #1174777 #1174800 #1175128 #1175199 #1175232 #1175440 #1175493 #1175546 #1175550 #1175654 #1175691 #1175768 #1175769 #1175770 #1175771 #1175772 #1175774 #1175775 #1175834 #1175873 #1176069 Cross-References: CVE-2020-14314 CVE-2020-14386 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves two vulnerabilities and has 40 fixes is now available. Description: The openSUSE Leap 15.2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-14314: Fixed potential negative array index in do_split() in ext4 (bsc#1173798). - CVE-2020-14386: Fixed an overflow in af_packet, which could lead to local privilege escalation (bsc#1176069). The following non-security bugs were fixed: - ACPICA: Do not increment operation_region reference counts for field units (git-fixes). - ALSA: hda/realtek: Add model alc298-samsung-headphone (git-fixes). - ALSA: hda/realtek: Add quirk for Samsung Galaxy Book Ion (git-fixes). - ALSA: hda/realtek: Add quirk for Samsung Galaxy Flex Book (git-fixes). - ALSA: hda: avoid reset of sdo_limit (git-fixes). - ALSA: isa: fix spelling mistakes in the comments (git-fixes). - ALSA: usb-audio: Add capture support for Saffire 6 (USB 1.1) (git-fixes). - ALSA: usb-audio: Update documentation comment for MS2109 quirk (git-fixes). - ALSA: usb-audio: ignore broken processing/extension unit (git-fixes). - ASoC: intel: Fix memleak in sst_media_open (git-fixes). - ASoC: msm8916-wcd-analog: fix register Interrupt offset (git-fixes). - ASoC: q6afe-dai: mark all widgets registers as SND_SOC_NOPM (git-fixes). - ASoC: q6routing: add dummy register read/write function (git-fixes). - ASoC: wm8994: Avoid attempts to read unreadable registers (git-fixes). - Bluetooth: add a mutex lock to avoid UAF in do_enale_set (git-fixes). - Drivers: hv: vmbus: Only notify Hyper-V for die events that are oops (bsc#1175128). - HID: input: Fix devices that return multiple bytes in battery report (git-fixes). - Input: psmouse - add a newline when printing 'proto' by sysfs (git-fixes). - KVM: PPC: Book3S PR: Remove uninitialized_var() usage (bsc#1065729). - KVM: Reinstall old memslots if arch preparation fails (bsc#1133021). - KVM: arm64: Stop clobbering x0 for HVC_SOFT_RESTART (bsc#1133021). - KVM: x86: Fix APIC page invalidation race (bsc#1133021). - PCI: hv: Fix a timing issue which causes kdump to fail occasionally (bsc#1172871, git-fixes). - RDMA/mlx5: Add missing srcu_read_lock in ODP implicit flow (jsc#SLE-8446). - RDMA/mlx5: Fix typo in enum name (git-fixes). - Revert "scsi: qla2xxx: Disable T10-DIF feature with FC-NVMe during probe" (bsc#1171688 bsc#1174003). - Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (bsc#1171688 bsc#1174003). - bdc: Fix bug causing crash after multiple disconnects (git-fixes). - bfq: fix blkio cgroup leakage v4 (bsc#1175775). - block: Fix the type of 'sts' in bsg_queue_rq() (git-fixes). - bnxt_en: fix NULL dereference in case SR-IOV configuration fails (networking-stable-20_07_17). - bonding: fix active-backup failover for current ARP slave (bsc#1174771). - brcmfmac: To fix Bss Info flag definition Bug (git-fixes). - brcmfmac: keep SDIO watchdog running when console_interval is non-zero (git-fixes). - brcmfmac: set state of hanger slot to FREE when flushing PSQ (git-fixes). - btrfs: add helper to get the end offset of a file extent item (bsc#1175546). - btrfs: factor out inode items copy loop from btrfs_log_inode() (bsc#1175546). - btrfs: fix memory leaks after failure to lookup checksums during inode logging (bsc#1175550). - btrfs: fix missing file extent item for hole after ranged fsync (bsc#1175546). - btrfs: make full fsyncs always operate on the entire file again (bsc#1175546). - btrfs: make ranged full fsyncs more efficient (bsc#1175546). - btrfs: remove useless check for copy_items() return value (bsc#1175546). - btrfs: treat RWF_{,D}SYNC writes as sync for CRCs (bsc#1175493). - config/x86_64: Make CONFIG_PINCTRL_AMD=y (bsc#1174800) The pinctrl driver has to be initialized before hid-i2c and others. For assuring it, change it built-in, since we can't put the module ordering. This change follows the SLE15-SP2 kernel behavior. - cpumap: Use non-locked version __ptr_ring_consume_batched (git-fixes). - crypto: aesni - Fix build with LLVM_IAS=1 (git-fixes). - crypto: aesni - add compatibility with IAS (git-fixes). - dlm: Fix kobject memleak (bsc#1175768). - drm/amd/display: Fix EDID parsing after resume from suspend (git-fixes). - drm/amd/display: fix pow() crashing when given base 0 (git-fixes). - drm/amd/powerplay: fix compile error with ARCH=arc (git-fixes). - drm/amdgpu/display bail early in dm_pp_get_static_clocks (git-fixes). - drm/amdgpu: avoid dereferencing a NULL pointer (git-fixes). - drm/debugfs: fix plain echo to connector "force" attribute (git-fixes). - drm/etnaviv: fix ref count leak via pm_runtime_get_sync (git-fixes). - drm/msm: ratelimit crtc event overflow error (git-fixes). - drm/nouveau/kms/nv50-: Fix disabling dithering (git-fixes). - drm/nouveau: fix multiple instances of reference count leaks (git-fixes). - drm/nouveau: fix reference count leak in nouveau_debugfs_strap_peek (git-fixes). - drm/radeon: Fix reference count leaks caused by pm_runtime_get_sync (git-fixes). - drm/radeon: disable AGP by default (git-fixes). - drm/tilcdc: fix leak & null ref in panel_connector_get_modes (git-fixes). - drm/ttm/nouveau: do not call tt destroy callback on alloc failure (git-fixes bsc#1175232). - drm: msm: a6xx: fix gpu failure after system resume (git-fixes). - dyndbg: fix a BUG_ON in ddebug_describe_flags (git-fixes). - enetc: Fix tx rings bitmap iteration range, irq handling (networking-stable-20_06_28). - ext2: fix missing percpu_counter_inc (bsc#1175774). - ext4: check journal inode extents more carefully (bsc#1173485). - ext4: do not BUG on inconsistent journal feature (bsc#1171634). - ext4: do not allow overlapping system zones (bsc#1173485). - ext4: fix checking of directory entry validity for inline directories (bsc#1175771). - ext4: handle error of ext4_setup_system_zone() on remount (bsc#1173485). - genetlink: remove genl_bind (networking-stable-20_07_17). - gpu: host1x: debug: Fix multiple channels emitting messages simultaneously (git-fixes). - i2c: i801: Add support for Intel Comet Lake PCH-V (jsc#SLE-13411). - i2c: i801: Add support for Intel Emmitsburg PCH (jsc#SLE-13411). - i2c: i801: Add support for Intel Tiger Lake PCH-H (jsc#SLE-13411). - ibmveth: Fix use of ibmveth in a bridge (bsc#1174387 ltc#187506). - ibmvnic fix NULL tx_pools and rx_tools issue at do_reset (bsc#1175873 ltc#187922). - ice: Clear and free XLT entries on reset (jsc#SLE-7926). - ice: Graceful error handling in HW table calloc failure (jsc#SLE-7926). - igc: Fix PTP initialization (bsc#1160634). - ip6_gre: fix null-ptr-deref in ip6gre_init_net() (git-fixes). - ip6_gre: fix use-after-free in ip6gre_tunnel_lookup() (networking-stable-20_06_28). - ip_tunnel: fix use-after-free in ip_tunnel_lookup() (networking-stable-20_06_28). - ipv4: fill fl4_icmp_{type,code} in ping_v4_sendmsg (networking-stable-20_07_17). - ipv6: Fix use of anycast address with loopback (networking-stable-20_07_17). - ipv6: fib6_select_path can not use out path for nexthop objects (networking-stable-20_07_17). - ipvs: fix the connection sync failed in some cases (bsc#1174699). - iwlegacy: Check the return value of pcie_capability_read_*() (git-fixes). - jbd2: add the missing unlock_buffer() in the error path of jbd2_write_superblock() (bsc#1175772). - kABI: genetlink: remove genl_bind (kabi). - kabi/severities: ignore KABI for NVMe, except nvme-fc (bsc#1174777) Exported symbols under drivers/nvme/host/ are only used by the nvme subsystem itself, except for the nvme-fc symbols. - kabi/severities: ignore qla2xxx as all symbols are internal - kernel/relay.c: fix memleak on destroy relay channel (git-fixes). - kernfs: do not call fsnotify() with name without a parent (bsc#1175770). - l2tp: remove skb_dst_set() from l2tp_xmit_skb() (networking-stable-20_07_17). - llc: make sure applications use ARPHRD_ETHER (networking-stable-20_07_17). - md-cluster: Fix potential error pointer dereference in resize_bitmaps() (git-fixes). - md/raid5: Fix Force reconstruct-write io stuck in degraded raid5 (git-fixes). - media: budget-core: Improve exception handling in budget_register() (git-fixes). - media: camss: fix memory leaks on error handling paths in probe (git-fixes). - media: rockchip: rga: Introduce color fmt macros and refactor CSC mode logic (git-fixes). - media: rockchip: rga: Only set output CSC mode for RGB input (git-fixes). - media: vpss: clean up resources in init (git-fixes). - mfd: intel-lpss: Add Intel Tiger Lake PCH-H PCI IDs (jsc#SLE-13411). - mld: fix memory leak in ipv6_mc_destroy_dev() (networking-stable-20_06_28). - mlxsw: pci: Fix use-after-free in case of failed devlink reload (networking-stable-20_07_17). - mlxsw: spectrum_router: Remove inappropriate usage of WARN_ON() (networking-stable-20_07_17). - mm, vmstat: reduce zone->lock holding time by /proc/pagetypeinfo (bsc#1175691). - mm/vunmap: add cond_resched() in vunmap_pmd_range (bsc#1175654 ltc#184617). - mm: filemap: clear idle flag for writes (bsc#1175769). - mmc: sdhci-cadence: do not use hardware tuning for SD mode (git-fixes). - mmc: sdhci-pci-o2micro: Bug fix for O2 host controller Seabird1 (git-fixes). - mvpp2: ethtool rxtx stats fix (networking-stable-20_06_28). - net/mlx5: DR, Change push vlan action sequence (jsc#SLE-8464). - net/mlx5: Fix eeprom support for SFP module (networking-stable-20_07_17). - net/mlx5e: Fix 50G per lane indication (networking-stable-20_07_17). - net: Added pointer check for dst->ops->neigh_lookup in dst_neigh_lookup_skb (networking-stable-20_07_17). - net: Do not clear the sock TX queue in sk_set_socket() (networking-stable-20_06_28). - net: Fix the arp error in some cases (networking-stable-20_06_28). - net: bridge: enfore alignment for ethernet address (networking-stable-20_06_28). - net: core: reduce recursion limit value (networking-stable-20_06_28). - net: dsa: microchip: set the correct number of ports (networking-stable-20_07_17). - net: ena: Change WARN_ON expression in ena_del_napi_in_range() (bsc#1154492). - net: ena: Make missed_tx stat incremental (git-fixes). - net: ena: Prevent reset after device destruction (git-fixes). - net: fix memleak in register_netdevice() (networking-stable-20_06_28). - net: increment xmit_recursion level in dev_direct_xmit() (networking-stable-20_06_28). - net: mvneta: fix use of state->speed (networking-stable-20_07_17). - net: qrtr: Fix an out of bounds read qrtr_endpoint_post() (networking-stable-20_07_17). - net: usb: ax88179_178a: fix packet alignment padding (networking-stable-20_06_28). - net: usb: qmi_wwan: add support for Quectel EG95 LTE modem (networking-stable-20_07_17). - net_sched: fix a memory leak in atm_tc_init() (networking-stable-20_07_17). - nvme-multipath: do not fall back to __nvme_find_path() for non-optimized paths (bsc#1172108). - nvme-multipath: fix logic for non-optimized paths (bsc#1172108). - nvme-multipath: round-robin: eliminate "fallback" variable (bsc#1172108). - nvme-multipath: set bdi capabilities once (bsc#1159058). - nvme-pci: Re-order nvme_pci_free_ctrl (bsc#1159058). - nvme-rdma: Add warning on state change failure at (bsc#1159058). - nvme-tcp: Add warning on state change failure at (bsc#1159058). - nvme-tcp: fix possible crash in write_zeroes processing (bsc#1159058). - nvme: Fix controller creation races with teardown flow (bsc#1159058). - nvme: Fix ctrl use-after-free during sysfs deletion (bsc#1159058). - nvme: Make nvme_uninit_ctrl symmetric to nvme_init_ctrl (bsc#1159058). - nvme: Remove unused return code from nvme_delete_ctrl_sync (bsc#1159058). - nvme: add a Identify Namespace Identification Descriptor list quirk (git-fixes). - nvme: always search for namespace head (bsc#1159058). - nvme: avoid an Identify Controller command for each namespace (bsc#1159058). - nvme: check namespace head shared property (bsc#1159058). - nvme: clean up nvme_scan_work (bsc#1159058). - nvme: cleanup namespace identifier reporting in (bsc#1159058). - nvme: consolidate chunk_sectors settings (bsc#1159058). - nvme: consolodate io settings (bsc#1159058). - nvme: expose hostid via sysfs for fabrics controllers (bsc#1159058). - nvme: expose hostnqn via sysfs for fabrics controllers (bsc#1159058). - nvme: factor out a nvme_ns_remove_by_nsid helper (bsc#1159058). - nvme: fix a crash in nvme_mpath_add_disk (git-fixes, bsc#1159058). - nvme: fix identify error status silent ignore (git-fixes, bsc#1159058). - nvme: fix possible hang when ns scanning fails during error (bsc#1159058). - nvme: kABI fixes for nvme_ctrl (bsc#1159058). - nvme: multipath: round-robin: fix single non-optimized path case (bsc#1172108). - nvme: prevent double free in nvme_alloc_ns() error handling (bsc#1159058). - nvme: provide num dword helper (bsc#1159058). - nvme: refactor nvme_identify_ns_descs error handling (bsc#1159058). - nvme: refine the Qemu Identify CNS quirk (bsc#1159058). - nvme: release ida resources (bsc#1159058). - nvme: release namespace head reference on error (bsc#1159058). - nvme: remove the magic 1024 constant in nvme_scan_ns_list (bsc#1159058). - nvme: remove unused parameter (bsc#1159058). - nvme: rename __nvme_find_ns_head to nvme_find_ns_head (bsc#1159058). - nvme: revalidate after verifying identifiers (bsc#1159058). - nvme: revalidate namespace stream parameters (bsc#1159058). - nvme: unlink head after removing last namespace (bsc#1159058). - openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (networking-stable-20_06_28). - platform/x86: ISST: Add new PCI device ids (git-fixes). - platform/x86: asus-nb-wmi: add support for ASUS ROG Zephyrus G14 and G15 (git-fixes). - powerpc/64s: Do not init FSCR_DSCR in __init_FSCR() (bsc#1065729). - powerpc/fadump: Fix build error with CONFIG_PRESERVE_FA_DUMP=y (bsc#1156395). - powerpc/iommu: Allow bypass-only for DMA (bsc#1156395). - powerpc/perf: Fix missing is_sier_aviable() during build (bsc#1065729). - powerpc/pseries/hotplug-cpu: wait indefinitely for vCPU death (bsc#1085030 ltC#165630). - powerpc/pseries: Do not initiate shutdown when system is running on UPS (bsc#1175440 ltc#187574). - pseries: Fix 64 bit logical memory block panic (bsc#1065729). - rocker: fix incorrect error handling in dma_rings_init (networking-stable-20_06_28). - rtc: goldfish: Enable interrupt in set_alarm() when necessary (git-fixes). - sch_cake: do not call diffserv parsing code when it is not needed (networking-stable-20_06_28). - sch_cake: do not try to reallocate or unshare skb unconditionally (networking-stable-20_06_28). - sched: consistently handle layer3 header accesses in the presence of VLANs (networking-stable-20_07_17). - scsi/fc: kABI fixes for new ELS_RPD definition (bsc#1171688 bsc#1174003). - scsi: Fix trivial spelling (bsc#1171688 bsc#1174003). - scsi: dh: Add Fujitsu device to devinfo and dh lists (bsc#1174026). - scsi: qla2xxx: Add more BUILD_BUG_ON() statements (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Address a set of sparse warnings (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Allow ql2xextended_error_logging special value 1 to be set anytime (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Cast explicitly to uint16_t / uint32_t (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Change in PUREX to handle FPIN ELS requests (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Change two hardcoded constants into offsetof() / sizeof() expressions (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Change {RD,WRT}_REG_*() function names from upper case into lower case (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Check if FW supports MQ before enabling (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Check the size of struct fcp_hdr at compile time (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Fix MPI failure AEN (8200) handling (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Fix WARN_ON in qla_nvme_register_hba (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Fix a Coverity complaint in qla2100_fw_dump() (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Fix a condition in qla2x00_find_all_fabric_devs() (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Fix endianness annotations in header files (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Fix endianness annotations in source files (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Fix failure message in qlt_disable_vha() (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Fix issue with adapter's stopping state (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Fix login timeout (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Fix null pointer access during disconnect from subsystem (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Fix spelling of a variable name (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Fix the code that reads from mailbox registers (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Fix warning after FC target reset (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Flush I/O on zone disable (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Flush all sessions on zone disable (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Increase the size of struct qla_fcp_prio_cfg to FCP_PRIO_CFG_SIZE (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Indicate correct supported speeds for Mezz card (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Initialize 'n' before using it (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Introduce a function for computing the debug message prefix (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Keep initiator ports after RSCN (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Make __qla2x00_alloc_iocbs() initialize 32 bits of request_t.handle (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Make a gap in struct qla2xxx_offld_chain explicit (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Make qla2x00_restart_isp() easier to read (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Make qla82xx_flash_wait_write_finish() easier to read (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Make qla_set_ini_mode() return void (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Make qlafx00_process_aen() return void (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Reduce noisy debug message (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Remove a superfluous cast (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Remove an unused function (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Remove return value from qla_nvme_ls() (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Remove the __packed annotation from struct fcp_hdr and fcp_hdr_le (bsc#1171688 bsc#1174003). - scsi: qla2xxx: SAN congestion management implementation (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Simplify the functions for dumping firmware (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Sort BUILD_BUG_ON() statements alphabetically (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Split qla2x00_configure_local_loop() (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Use ARRAY_SIZE() instead of open-coding it (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Use MBX_TOV_SECONDS for mailbox command timeout values (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Use make_handle() instead of open-coding it (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Use register names instead of register offsets (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Use true, false for ha->fw_dumped (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Use true, false for need_mpi_reset (bsc#1171688 bsc#1174003). - scsi: qla2xxx: make 1-bit bit-fields unsigned int (bsc#1171688 bsc#1174003). - scsi: smartpqi: Identify physical devices without issuing INQUIRY (bsc#1172418). - scsi: smartpqi: Use scnprintf() for avoiding potential buffer overflow (bsc#1172418). - scsi: smartpqi: add RAID bypass counter (bsc#1172418). - scsi: smartpqi: add id support for SmartRAID 3152-8i (bsc#1172418). - scsi: smartpqi: avoid crashing kernel for controller issues (bsc#1172418). - scsi: smartpqi: bump version to 1.2.16-010 (bsc#1172418). - scsi: smartpqi: support device deletion via sysfs (bsc#1172418). - scsi: smartpqi: update logical volume size after expansion (bsc#1172418). - scsi: target/iblock: fix WRITE SAME zeroing (bsc#1169790). - sctp: Do not advertise IPv4 addresses if ipv6only is set on the socket (networking-stable-20_06_28). - selftests/livepatch: fix mem leaks in test-klp-shadow-vars (bsc#1071995). - selftests/livepatch: more verification in test-klp-shadow-vars (bsc#1071995). - selftests/livepatch: rework test-klp-shadow-vars (bsc#1071995). - selftests/livepatch: simplify test-klp-callbacks busy target tests (bsc#1071995). - serial: 8250: change lock order in serial8250_do_startup() (git-fixes). - serial: pl011: Do not leak amba_ports entry on driver register error (git-fixes). - serial: pl011: Fix oops on -EPROBE_DEFER (git-fixes). - soc/tegra: pmc: Enable PMIC wake event on Tegra194 (bsc#1175834). - soc: qcom: rpmh-rsc: Set suppress_bind_attrs flag (git-fixes). - spi: pxa2xx: Add support for Intel Tiger Lake PCH-H (jsc#SLE-13411). - spi: spidev: Align buffers for DMA (git-fixes). - spi: stm32: fixes suspend/resume management (git-fixes). - tcp: do not ignore ECN CWR on pure ACK (networking-stable-20_06_28). - tcp: fix SO_RCVLOWAT possible hangs under high mem pressure (networking-stable-20_07_17). - tcp: grow window for OOO packets only for SACK flows (networking-stable-20_06_28). - tcp: make sure listeners do not initialize congestion-control state (networking-stable-20_07_17). - tcp: md5: add missing memory barriers in tcp_md5_do_add()/tcp_md5_hash_key() (networking-stable-20_07_17). - tcp: md5: do not send silly options in SYNCOOKIES (networking-stable-20_07_17). - tcp: md5: refine tcp_md5_do_add()/tcp_md5_hash_key() barriers (networking-stable-20_07_17). - tcp_cubic: fix spurious HYSTART_DELAY exit upon drop in min RTT (networking-stable-20_06_28). - tracepoint: Mark __tracepoint_string's __used (git-fixes). - tracing: Use trace_sched_process_free() instead of exit() for pid tracing (git-fixes). - usb: bdc: Halt controller on suspend (git-fixes). - usb: gadget: net2280: fix memory leak on probe error handling paths (git-fixes). - usb: mtu3: clear dual mode of u3port when disable device (git-fixes). - video: fbdev: neofb: fix memory leak in neo_scan_monitor() (git-fixes). - video: fbdev: savage: fix memory leak on error handling path in probe (git-fixes). - vlan: consolidate VLAN parsing code and limit max parsing depth (networking-stable-20_07_17). - vmxnet3: use correct tcp hdr length when packet is encapsulated (bsc#1175199). - x86/bugs/multihit: Fix mitigation reporting when VMX is not in use (git-fixes). Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1382=1 Package List: - openSUSE Leap 15.2 (noarch): kernel-devel-5.3.18-lp152.41.1 kernel-docs-5.3.18-lp152.41.1 kernel-docs-html-5.3.18-lp152.41.1 kernel-macros-5.3.18-lp152.41.1 kernel-source-5.3.18-lp152.41.1 kernel-source-vanilla-5.3.18-lp152.41.1 - openSUSE Leap 15.2 (x86_64): kernel-debug-5.3.18-lp152.41.1 kernel-debug-debuginfo-5.3.18-lp152.41.1 kernel-debug-debugsource-5.3.18-lp152.41.1 kernel-debug-devel-5.3.18-lp152.41.1 kernel-debug-devel-debuginfo-5.3.18-lp152.41.1 kernel-default-5.3.18-lp152.41.1 kernel-default-base-5.3.18-lp152.41.1.lp152.8.6.2 kernel-default-base-rebuild-5.3.18-lp152.41.1.lp152.8.6.2 kernel-default-debuginfo-5.3.18-lp152.41.1 kernel-default-debugsource-5.3.18-lp152.41.1 kernel-default-devel-5.3.18-lp152.41.1 kernel-default-devel-debuginfo-5.3.18-lp152.41.1 kernel-kvmsmall-5.3.18-lp152.41.1 kernel-kvmsmall-debuginfo-5.3.18-lp152.41.1 kernel-kvmsmall-debugsource-5.3.18-lp152.41.1 kernel-kvmsmall-devel-5.3.18-lp152.41.1 kernel-kvmsmall-devel-debuginfo-5.3.18-lp152.41.1 kernel-obs-build-5.3.18-lp152.41.1 kernel-obs-build-debugsource-5.3.18-lp152.41.1 kernel-obs-qa-5.3.18-lp152.41.1 kernel-preempt-5.3.18-lp152.41.1 kernel-preempt-debuginfo-5.3.18-lp152.41.1 kernel-preempt-debugsource-5.3.18-lp152.41.1 kernel-preempt-devel-5.3.18-lp152.41.1 kernel-preempt-devel-debuginfo-5.3.18-lp152.41.1 kernel-syms-5.3.18-lp152.41.1 References: https://www.suse.com/security/cve/CVE-2020-14314.html https://www.suse.com/security/cve/CVE-2020-14386.html https://bugzilla.suse.com/1065729 https://bugzilla.suse.com/1071995 https://bugzilla.suse.com/1085030 https://bugzilla.suse.com/1133021 https://bugzilla.suse.com/1154492 https://bugzilla.suse.com/1156395 https://bugzilla.suse.com/1159058 https://bugzilla.suse.com/1160634 https://bugzilla.suse.com/1169790 https://bugzilla.suse.com/1171634 https://bugzilla.suse.com/1171688 https://bugzilla.suse.com/1172108 https://bugzilla.suse.com/1172418 https://bugzilla.suse.com/1172871 https://bugzilla.suse.com/1173485 https://bugzilla.suse.com/1173798 https://bugzilla.suse.com/1174003 https://bugzilla.suse.com/1174026 https://bugzilla.suse.com/1174387 https://bugzilla.suse.com/1174699 https://bugzilla.suse.com/1174771 https://bugzilla.suse.com/1174777 https://bugzilla.suse.com/1174800 https://bugzilla.suse.com/1175128 https://bugzilla.suse.com/1175199 https://bugzilla.suse.com/1175232 https://bugzilla.suse.com/1175440 https://bugzilla.suse.com/1175493 https://bugzilla.suse.com/1175546 https://bugzilla.suse.com/1175550 https://bugzilla.suse.com/1175654 https://bugzilla.suse.com/1175691 https://bugzilla.suse.com/1175768 https://bugzilla.suse.com/1175769 https://bugzilla.suse.com/1175770 https://bugzilla.suse.com/1175771 https://bugzilla.suse.com/1175772 https://bugzilla.suse.com/1175774 https://bugzilla.suse.com/1175775 https://bugzilla.suse.com/1175834 https://bugzilla.suse.com/1175873 https://bugzilla.suse.com/1176069

1 0

openSUSE-SU-2020:1383-1: important: Security update for MozillaThunderbird
by opensuse-security＠opensuse.org 08 Sep '20

08 Sep '20

openSUSE Security Update: Security update for MozillaThunderbird ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1383-1 Rating: important References: #1175686 Cross-References: CVE-2020-15663 CVE-2020-15664 CVE-2020-15669 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for MozillaThunderbird fixes the following issues: - Mozilla Thunderbird was updated to 68.12 (bsc#1175686) - CVE-2020-15663: Downgrade attack on the Mozilla Maintenance Service could have resulted in escalation of privilege - CVE-2020-15664: Attacker-induced prompt for extension installation - CVE-2020-15669: Use-After-Free when aborting an operation This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1383=1 Package List: - openSUSE Leap 15.1 (x86_64): MozillaThunderbird-68.12.0-lp151.2.50.1 MozillaThunderbird-debuginfo-68.12.0-lp151.2.50.1 MozillaThunderbird-debugsource-68.12.0-lp151.2.50.1 MozillaThunderbird-translations-common-68.12.0-lp151.2.50.1 MozillaThunderbird-translations-other-68.12.0-lp151.2.50.1 References: https://www.suse.com/security/cve/CVE-2020-15663.html https://www.suse.com/security/cve/CVE-2020-15664.html https://www.suse.com/security/cve/CVE-2020-15669.html https://bugzilla.suse.com/1175686

1 0

openSUSE-SU-2020:1384-1: moderate: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 08 Sep '20

08 Sep '20

openSUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1384-1 Rating: moderate References: #1173991 #1174284 #1175686 Cross-References: CVE-2020-15663 CVE-2020-15664 CVE-2020-15670 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 78.2.0 ESR * Fixed: Various stability, functionality, and security fixes - Mozilla Firefox ESR 78.2 MFSA 2020-38 (bsc#1175686) * CVE-2020-15663 (bmo#1643199) Downgrade attack on the Mozilla Maintenance Service could have resulted in escalation of privilege * CVE-2020-15664 (bmo#1658214) Attacker-induced prompt for extension installation * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626, bmo#1656957) Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2 - Fixed Firefox tab crash in FIPS mode (bsc#1174284). - Fix broken translation-loading (bsc#1173991) * allow addon sideloading * mark signatures for langpacks non-mandatory * do not autodisable user profile scopes - Google API key is not usable for geolocation service any more This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1384=1 Package List: - openSUSE Leap 15.1 (x86_64): MozillaFirefox-78.2.0-lp151.2.65.1 MozillaFirefox-branding-upstream-78.2.0-lp151.2.65.1 MozillaFirefox-buildsymbols-78.2.0-lp151.2.65.1 MozillaFirefox-debuginfo-78.2.0-lp151.2.65.1 MozillaFirefox-debugsource-78.2.0-lp151.2.65.1 MozillaFirefox-devel-78.2.0-lp151.2.65.1 MozillaFirefox-translations-common-78.2.0-lp151.2.65.1 MozillaFirefox-translations-other-78.2.0-lp151.2.65.1 References: https://www.suse.com/security/cve/CVE-2020-15663.html https://www.suse.com/security/cve/CVE-2020-15664.html https://www.suse.com/security/cve/CVE-2020-15670.html https://bugzilla.suse.com/1173991 https://bugzilla.suse.com/1174284 https://bugzilla.suse.com/1175686

1 0

openSUSE-RU-2020:1380-1: moderate: Recommended update for OpenStack clients
by maintenance＠opensuse.org 08 Sep '20

08 Sep '20

openSUSE Recommended Update: Recommended update for OpenStack clients ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1380-1 Rating: moderate References: #1121610 #1174571 #917818 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: Updated OpenStack clients to the latest OpenStack release named Ussuri. This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1380=1 Package List: - openSUSE Leap 15.1 (noarch): python-Sphinx-doc-html-1.7.6-lp151.2.9.1 python-Sphinx-doc-man-common-1.7.6-lp151.2.9.1 python2-Sphinx-1.7.6-lp151.2.9.1 python2-Sphinx-doc-1.7.6-lp151.2.9.1 python2-Sphinx-doc-man-1.7.6-lp151.2.9.1 python2-Sphinx-latex-1.7.6-lp151.2.9.1 python2-python-subunit-1.3.0-lp151.2.3.1 python2-wcwidth-0.1.8-lp151.3.6.1 python3-Sphinx-1.7.6-lp151.2.9.1 python3-Sphinx-doc-1.7.6-lp151.2.9.1 python3-Sphinx-doc-man-1.7.6-lp151.2.9.1 python3-Sphinx-latex-1.7.6-lp151.2.9.1 python3-python-subunit-1.3.0-lp151.2.3.1 python3-wcwidth-0.1.8-lp151.3.6.1 References: https://bugzilla.suse.com/1121610 https://bugzilla.suse.com/1174571 https://bugzilla.suse.com/917818

1 0

openSUSE-RU-2020:1381-1: moderate: Recommended update for OpenStack clients
by maintenance＠opensuse.org 08 Sep '20

08 Sep '20

openSUSE Recommended Update: Recommended update for OpenStack clients ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1381-1 Rating: moderate References: #1121610 #1174571 #917818 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: Updated OpenStack clients to the latest OpenStack release named Ussuri. This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1381=1 Package List: - openSUSE Leap 15.2 (noarch): python-Sphinx-doc-html-1.7.6-lp152.5.3.1 python-Sphinx-doc-man-common-1.7.6-lp152.5.3.1 python2-Sphinx-1.7.6-lp152.5.3.1 python2-Sphinx-doc-1.7.6-lp152.5.3.1 python2-Sphinx-doc-man-1.7.6-lp152.5.3.1 python2-Sphinx-latex-1.7.6-lp152.5.3.1 python2-python-subunit-1.3.0-lp152.3.3.1 python2-wcwidth-0.1.8-lp152.3.4.1 python3-Sphinx-1.7.6-lp152.5.3.1 python3-Sphinx-doc-1.7.6-lp152.5.3.1 python3-Sphinx-doc-man-1.7.6-lp152.5.3.1 python3-Sphinx-latex-1.7.6-lp152.5.3.1 python3-python-subunit-1.3.0-lp152.3.3.1 python3-wcwidth-0.1.8-lp152.3.4.1 References: https://bugzilla.suse.com/1121610 https://bugzilla.suse.com/1174571 https://bugzilla.suse.com/917818

1 0

openSUSE-RU-2020:1378-1: moderate: Recommended update for steam
by maintenance＠opensuse.org 07 Sep '20

07 Sep '20

openSUSE Recommended Update: Recommended update for steam ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1378-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2:NonFree openSUSE Leap 15.1:NonFree ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for steam fixes the following issues: - Add new Mesa packages to Requires for Tumbleweed - Keep old Requires for Leap maintenance - Use both Steam OpenSSL versions - Update AppStream files - vulkan doesn't exist since Leap 15.2 - libvulkan1-32bit doesn't exist on non-64bit systems - vulkan libraries should be required Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2:NonFree: zypper in -t patch openSUSE-2020-1378=1 - openSUSE Leap 15.1:NonFree: zypper in -t patch openSUSE-2020-1378=1 Package List: - openSUSE Leap 15.2:NonFree (x86_64): steam-1.0.0.66-lp152.2.9.1 steam-devices-1.0.0.66-lp152.2.9.1 - openSUSE Leap 15.1:NonFree (x86_64): steam-1.0.0.66-lp151.3.6.1 steam-devices-1.0.0.66-lp151.3.6.1 References:

1 0

openSUSE-RU-2020:1377-1: important: Recommended update for transactional-update
by maintenance＠opensuse.org 07 Sep '20

07 Sep '20

openSUSE Recommended Update: Recommended update for transactional-update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1377-1 Rating: important References: #1162320 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for transactional-update fixes the following issue: - Mount efivarfs on EFI systems. (bsc#1162320) If the EFI variables are not available, some incorrect parameters will be attached to grub2-install, writing the binary to a wrong location. Due to this, the system fails at reboot with a missing symbol error. This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1377=1 Package List: - openSUSE Leap 15.1 (x86_64): transactional-update-2.15-lp151.2.6.1 transactional-update-debuginfo-2.15-lp151.2.6.1 transactional-update-debugsource-2.15-lp151.2.6.1 - openSUSE Leap 15.1 (noarch): transactional-update-zypp-config-2.15-lp151.2.6.1 References: https://bugzilla.suse.com/1162320

1 0

openSUSE-SU-2020:1379-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 07 Sep '20

07 Sep '20

openSUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1379-1 Rating: important References: #1058115 #1112178 #1136666 #1171558 #1173060 #1175691 #1176069 Cross-References: CVE-2020-14386 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves one vulnerability and has 6 fixes is now available. Description: The openSUSE Leap 15.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-14386: Fixed an overflow in tpacket_rcv in af_packet that could lead to a local privilege escalation ( bsc#1176069). The following non-security bugs were fixed: - bonding: check error value of register_netdevice() immediately (git-fixes). - bonding: check return value of register_netdevice() in bond_newlink() (git-fixes). - hippi: Fix a size used in a 'pci_free_consistent()' in an error handling path (git-fixes). - mlx4: disable device on shutdown (git-fixes). - mlxsw: core: Free EMAD transactions using kfree_rcu() (git-fixes). - mlxsw: core: Increase scope of RCU read-side critical section (git-fixes). - mm, vmstat: reduce zone->lock holding time by /proc/pagetypeinfo (bsc#1175691). - net/mlx5: Fix a bug of using ptp channel index as pin index (git-fixes). - net/mlx5e: Fix error path of device attach (git-fixes). - net: dp83640: fix SIOCSHWTSTAMP to update the struct with actual configuration (git-fixes). - net: smc91x: Fix possible memory leak in smc_drv_probe() (git-fixes). - sched/deadline: Initialize ->dl_boosted (bsc#1112178). - scsi: lpfc: Add and rename a whole bunch of function parameter descriptions (bsc#1171558 bsc#1136666). - scsi: lpfc: Add description for lpfc_release_rpi()'s 'ndlpl param (bsc#1171558 bsc#1136666). - scsi: lpfc: Add missing misc_deregister() for lpfc_init() (bsc#1171558 bsc#1136666). - scsi: lpfc: Ensure variable has the same stipulations as code using it (bsc#1171558 bsc#1136666). - scsi: lpfc: Fix FCoE speed reporting (bsc#1171558 bsc#1136666). - scsi: lpfc: Fix LUN loss after cable pull (bsc#1171558 bsc#1136666). - scsi: lpfc: Fix RSCN timeout due to incorrect gidft counter (bsc#1171558 bsc#1136666). - scsi: lpfc: Fix a bunch of kerneldoc misdemeanors (bsc#1171558 bsc#1136666). - scsi: lpfc: Fix kerneldoc parameter formatting/misnaming/missing issues (bsc#1171558 bsc#1136666). - scsi: lpfc: Fix no message shown for lpfc_hdw_queue out of range value (bsc#1171558 bsc#1136666). - scsi: lpfc: Fix oops when unloading driver while running mds diags (bsc#1171558 bsc#1136666). - scsi: lpfc: Fix retry of PRLI when status indicates its unsupported (bsc#1171558 bsc#1136666). - scsi: lpfc: Fix some function parameter descriptions (bsc#1171558 bsc#1136666). - scsi: lpfc: Fix typo in comment for ULP (bsc#1171558 bsc#1136666). - scsi: lpfc: Fix validation of bsg reply lengths (bsc#1171558 bsc#1136666). - scsi: lpfc: Fix-up around 120 documentation issues (bsc#1171558 bsc#1136666). - scsi: lpfc: Fix-up formatting/docrot where appropriate (bsc#1171558 bsc#1136666). - scsi: lpfc: NVMe remote port devloss_tmo from lldd (bsc#1171558 bsc#1136666 bsc#1173060). - scsi: lpfc: Provide description for lpfc_mem_alloc()'s 'align' param (bsc#1171558 bsc#1136666). - scsi: lpfc: Quieten some printks (bsc#1171558 bsc#1136666). - scsi: lpfc: Remove unused variable 'pg_addr' (bsc#1171558 bsc#1136666). - scsi: lpfc: Update lpfc version to 12.8.0.3 (bsc#1171558 bsc#1136666). - scsi: lpfc: Use __printf() format notation (bsc#1171558 bsc#1136666). - scsi: lpfc: nvmet: Avoid hang / use-after-free again when destroying targetport (bsc#1171558 bsc#1136666). - vxlan: Ensure FDB dump is performed under RCU (git-fixes). - x86/mce/inject: Fix a wrong assignment of i_mce.status (bsc#1112178). - x86/unwind/orc: Fix ORC for newly forked tasks (bsc#1058115). Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1379=1 Package List: - openSUSE Leap 15.1 (noarch): kernel-devel-4.12.14-lp151.28.67.1 kernel-docs-4.12.14-lp151.28.67.3 kernel-docs-html-4.12.14-lp151.28.67.3 kernel-macros-4.12.14-lp151.28.67.1 kernel-source-4.12.14-lp151.28.67.1 kernel-source-vanilla-4.12.14-lp151.28.67.1 - openSUSE Leap 15.1 (x86_64): kernel-debug-4.12.14-lp151.28.67.2 kernel-debug-base-4.12.14-lp151.28.67.2 kernel-debug-base-debuginfo-4.12.14-lp151.28.67.2 kernel-debug-debuginfo-4.12.14-lp151.28.67.2 kernel-debug-debugsource-4.12.14-lp151.28.67.2 kernel-debug-devel-4.12.14-lp151.28.67.2 kernel-debug-devel-debuginfo-4.12.14-lp151.28.67.2 kernel-default-4.12.14-lp151.28.67.2 kernel-default-base-4.12.14-lp151.28.67.2 kernel-default-base-debuginfo-4.12.14-lp151.28.67.2 kernel-default-debuginfo-4.12.14-lp151.28.67.2 kernel-default-debugsource-4.12.14-lp151.28.67.2 kernel-default-devel-4.12.14-lp151.28.67.2 kernel-default-devel-debuginfo-4.12.14-lp151.28.67.2 kernel-kvmsmall-4.12.14-lp151.28.67.2 kernel-kvmsmall-base-4.12.14-lp151.28.67.2 kernel-kvmsmall-base-debuginfo-4.12.14-lp151.28.67.2 kernel-kvmsmall-debuginfo-4.12.14-lp151.28.67.2 kernel-kvmsmall-debugsource-4.12.14-lp151.28.67.2 kernel-kvmsmall-devel-4.12.14-lp151.28.67.2 kernel-kvmsmall-devel-debuginfo-4.12.14-lp151.28.67.2 kernel-obs-build-4.12.14-lp151.28.67.2 kernel-obs-build-debugsource-4.12.14-lp151.28.67.2 kernel-obs-qa-4.12.14-lp151.28.67.2 kernel-syms-4.12.14-lp151.28.67.1 kernel-vanilla-4.12.14-lp151.28.67.2 kernel-vanilla-base-4.12.14-lp151.28.67.2 kernel-vanilla-base-debuginfo-4.12.14-lp151.28.67.2 kernel-vanilla-debuginfo-4.12.14-lp151.28.67.2 kernel-vanilla-debugsource-4.12.14-lp151.28.67.2 kernel-vanilla-devel-4.12.14-lp151.28.67.2 kernel-vanilla-devel-debuginfo-4.12.14-lp151.28.67.2 References: https://www.suse.com/security/cve/CVE-2020-14386.html https://bugzilla.suse.com/1058115 https://bugzilla.suse.com/1112178 https://bugzilla.suse.com/1136666 https://bugzilla.suse.com/1171558 https://bugzilla.suse.com/1173060 https://bugzilla.suse.com/1175691 https://bugzilla.suse.com/1176069

1 0

openSUSE-SU-2020:1354-1: moderate: Security update for php7
by opensuse-security＠opensuse.org 07 Sep '20

07 Sep '20

openSUSE Security Update: Security update for php7 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1354-1 Rating: moderate References: #1173786 #1174010 #1175223 Cross-References: CVE-2020-7068 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update for php7 fixes the following issues: - CVE-2020-7068: Use of freed hash key in the phar_parse_zipfile function (bsc#1175223). - Do not install outdated README.SUSE (bsc#1174010). - Added tmpfiles.d for php-fpm to provide a base for a socket (bsc#1173786). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1354=1 Package List: - openSUSE Leap 15.1 (x86_64): apache2-mod_php7-7.2.5-lp151.6.32.1 apache2-mod_php7-debuginfo-7.2.5-lp151.6.32.1 php7-7.2.5-lp151.6.32.1 php7-bcmath-7.2.5-lp151.6.32.1 php7-bcmath-debuginfo-7.2.5-lp151.6.32.1 php7-bz2-7.2.5-lp151.6.32.1 php7-bz2-debuginfo-7.2.5-lp151.6.32.1 php7-calendar-7.2.5-lp151.6.32.1 php7-calendar-debuginfo-7.2.5-lp151.6.32.1 php7-ctype-7.2.5-lp151.6.32.1 php7-ctype-debuginfo-7.2.5-lp151.6.32.1 php7-curl-7.2.5-lp151.6.32.1 php7-curl-debuginfo-7.2.5-lp151.6.32.1 php7-dba-7.2.5-lp151.6.32.1 php7-dba-debuginfo-7.2.5-lp151.6.32.1 php7-debuginfo-7.2.5-lp151.6.32.1 php7-debugsource-7.2.5-lp151.6.32.1 php7-devel-7.2.5-lp151.6.32.1 php7-dom-7.2.5-lp151.6.32.1 php7-dom-debuginfo-7.2.5-lp151.6.32.1 php7-embed-7.2.5-lp151.6.32.1 php7-embed-debuginfo-7.2.5-lp151.6.32.1 php7-enchant-7.2.5-lp151.6.32.1 php7-enchant-debuginfo-7.2.5-lp151.6.32.1 php7-exif-7.2.5-lp151.6.32.1 php7-exif-debuginfo-7.2.5-lp151.6.32.1 php7-fastcgi-7.2.5-lp151.6.32.1 php7-fastcgi-debuginfo-7.2.5-lp151.6.32.1 php7-fileinfo-7.2.5-lp151.6.32.1 php7-fileinfo-debuginfo-7.2.5-lp151.6.32.1 php7-firebird-7.2.5-lp151.6.32.1 php7-firebird-debuginfo-7.2.5-lp151.6.32.1 php7-fpm-7.2.5-lp151.6.32.1 php7-fpm-debuginfo-7.2.5-lp151.6.32.1 php7-ftp-7.2.5-lp151.6.32.1 php7-ftp-debuginfo-7.2.5-lp151.6.32.1 php7-gd-7.2.5-lp151.6.32.1 php7-gd-debuginfo-7.2.5-lp151.6.32.1 php7-gettext-7.2.5-lp151.6.32.1 php7-gettext-debuginfo-7.2.5-lp151.6.32.1 php7-gmp-7.2.5-lp151.6.32.1 php7-gmp-debuginfo-7.2.5-lp151.6.32.1 php7-iconv-7.2.5-lp151.6.32.1 php7-iconv-debuginfo-7.2.5-lp151.6.32.1 php7-intl-7.2.5-lp151.6.32.1 php7-intl-debuginfo-7.2.5-lp151.6.32.1 php7-json-7.2.5-lp151.6.32.1 php7-json-debuginfo-7.2.5-lp151.6.32.1 php7-ldap-7.2.5-lp151.6.32.1 php7-ldap-debuginfo-7.2.5-lp151.6.32.1 php7-mbstring-7.2.5-lp151.6.32.1 php7-mbstring-debuginfo-7.2.5-lp151.6.32.1 php7-mysql-7.2.5-lp151.6.32.1 php7-mysql-debuginfo-7.2.5-lp151.6.32.1 php7-odbc-7.2.5-lp151.6.32.1 php7-odbc-debuginfo-7.2.5-lp151.6.32.1 php7-opcache-7.2.5-lp151.6.32.1 php7-opcache-debuginfo-7.2.5-lp151.6.32.1 php7-openssl-7.2.5-lp151.6.32.1 php7-openssl-debuginfo-7.2.5-lp151.6.32.1 php7-pcntl-7.2.5-lp151.6.32.1 php7-pcntl-debuginfo-7.2.5-lp151.6.32.1 php7-pdo-7.2.5-lp151.6.32.1 php7-pdo-debuginfo-7.2.5-lp151.6.32.1 php7-pgsql-7.2.5-lp151.6.32.1 php7-pgsql-debuginfo-7.2.5-lp151.6.32.1 php7-phar-7.2.5-lp151.6.32.1 php7-phar-debuginfo-7.2.5-lp151.6.32.1 php7-posix-7.2.5-lp151.6.32.1 php7-posix-debuginfo-7.2.5-lp151.6.32.1 php7-readline-7.2.5-lp151.6.32.1 php7-readline-debuginfo-7.2.5-lp151.6.32.1 php7-shmop-7.2.5-lp151.6.32.1 php7-shmop-debuginfo-7.2.5-lp151.6.32.1 php7-snmp-7.2.5-lp151.6.32.1 php7-snmp-debuginfo-7.2.5-lp151.6.32.1 php7-soap-7.2.5-lp151.6.32.1 php7-soap-debuginfo-7.2.5-lp151.6.32.1 php7-sockets-7.2.5-lp151.6.32.1 php7-sockets-debuginfo-7.2.5-lp151.6.32.1 php7-sodium-7.2.5-lp151.6.32.1 php7-sodium-debuginfo-7.2.5-lp151.6.32.1 php7-sqlite-7.2.5-lp151.6.32.1 php7-sqlite-debuginfo-7.2.5-lp151.6.32.1 php7-sysvmsg-7.2.5-lp151.6.32.1 php7-sysvmsg-debuginfo-7.2.5-lp151.6.32.1 php7-sysvsem-7.2.5-lp151.6.32.1 php7-sysvsem-debuginfo-7.2.5-lp151.6.32.1 php7-sysvshm-7.2.5-lp151.6.32.1 php7-sysvshm-debuginfo-7.2.5-lp151.6.32.1 php7-test-7.2.5-lp151.6.32.1 php7-tidy-7.2.5-lp151.6.32.1 php7-tidy-debuginfo-7.2.5-lp151.6.32.1 php7-tokenizer-7.2.5-lp151.6.32.1 php7-tokenizer-debuginfo-7.2.5-lp151.6.32.1 php7-wddx-7.2.5-lp151.6.32.1 php7-wddx-debuginfo-7.2.5-lp151.6.32.1 php7-xmlreader-7.2.5-lp151.6.32.1 php7-xmlreader-debuginfo-7.2.5-lp151.6.32.1 php7-xmlrpc-7.2.5-lp151.6.32.1 php7-xmlrpc-debuginfo-7.2.5-lp151.6.32.1 php7-xmlwriter-7.2.5-lp151.6.32.1 php7-xmlwriter-debuginfo-7.2.5-lp151.6.32.1 php7-xsl-7.2.5-lp151.6.32.1 php7-xsl-debuginfo-7.2.5-lp151.6.32.1 php7-zip-7.2.5-lp151.6.32.1 php7-zip-debuginfo-7.2.5-lp151.6.32.1 php7-zlib-7.2.5-lp151.6.32.1 php7-zlib-debuginfo-7.2.5-lp151.6.32.1 - openSUSE Leap 15.1 (noarch): php7-pear-7.2.5-lp151.6.32.1 php7-pear-Archive_Tar-7.2.5-lp151.6.32.1 References: https://www.suse.com/security/cve/CVE-2020-7068.html https://bugzilla.suse.com/1173786 https://bugzilla.suse.com/1174010 https://bugzilla.suse.com/1175223

1 0

openSUSE-SU-2020:1368-1: moderate: Security update for libX11
by opensuse-security＠opensuse.org 07 Sep '20

07 Sep '20

openSUSE Security Update: Security update for libX11 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1368-1 Rating: moderate References: #1175239 Cross-References: CVE-2020-14363 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libX11 fixes the following issues: - CVE-2020-14363: Fix an integer overflow in init_om() (bsc#1175239). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1368=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libX11-6-1.6.5-lp151.4.9.1 libX11-6-debuginfo-1.6.5-lp151.4.9.1 libX11-debugsource-1.6.5-lp151.4.9.1 libX11-devel-1.6.5-lp151.4.9.1 libX11-xcb1-1.6.5-lp151.4.9.1 libX11-xcb1-debuginfo-1.6.5-lp151.4.9.1 - openSUSE Leap 15.1 (x86_64): libX11-6-32bit-1.6.5-lp151.4.9.1 libX11-6-32bit-debuginfo-1.6.5-lp151.4.9.1 libX11-devel-32bit-1.6.5-lp151.4.9.1 libX11-xcb1-32bit-1.6.5-lp151.4.9.1 libX11-xcb1-32bit-debuginfo-1.6.5-lp151.4.9.1 - openSUSE Leap 15.1 (noarch): libX11-data-1.6.5-lp151.4.9.1 References: https://www.suse.com/security/cve/CVE-2020-14363.html https://bugzilla.suse.com/1175239

1 0

openSUSE-SU-2020:1370-1: moderate: Security update for libX11
by opensuse-security＠opensuse.org 07 Sep '20

07 Sep '20

openSUSE Security Update: Security update for libX11 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1370-1 Rating: moderate References: #1175239 Cross-References: CVE-2020-14363 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libX11 fixes the following issues: - CVE-2020-14363: Fix an integer overflow in init_om() (bsc#1175239). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1370=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libX11-6-1.6.5-lp152.5.9.1 libX11-6-debuginfo-1.6.5-lp152.5.9.1 libX11-debugsource-1.6.5-lp152.5.9.1 libX11-devel-1.6.5-lp152.5.9.1 libX11-xcb1-1.6.5-lp152.5.9.1 libX11-xcb1-debuginfo-1.6.5-lp152.5.9.1 - openSUSE Leap 15.2 (x86_64): libX11-6-32bit-1.6.5-lp152.5.9.1 libX11-6-32bit-debuginfo-1.6.5-lp152.5.9.1 libX11-devel-32bit-1.6.5-lp152.5.9.1 libX11-xcb1-32bit-1.6.5-lp152.5.9.1 libX11-xcb1-32bit-debuginfo-1.6.5-lp152.5.9.1 - openSUSE Leap 15.2 (noarch): libX11-data-1.6.5-lp152.5.9.1 References: https://www.suse.com/security/cve/CVE-2020-14363.html https://bugzilla.suse.com/1175239

1 0

openSUSE-RU-2020:1364-1: moderate: Recommended update for tomcat
by maintenance＠opensuse.org 07 Sep '20

07 Sep '20

openSUSE Recommended Update: Recommended update for tomcat ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1364-1 Rating: moderate References: #1092163 #1172562 #1173103 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for tomcat fixes the following issues: - Fixed the package alternatives for tomcat-servlet-4_0-api to use /usr/share/java/servlet.jar instead of /usr/share/java/tomcat-servlet.jar - We kept /usr/share/java/tomcat-servlet.jar as a symlink for compatibility reasons (bsc#1092163) - Removed write permissions on several files and directories for the tomcat group (bsc#1172562) - Changed the tomcat.pid location from /var/run to /run (bsc#1173103) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1364=1 Package List: - openSUSE Leap 15.1 (noarch): tomcat-9.0.36-lp151.3.30.1 tomcat-admin-webapps-9.0.36-lp151.3.30.1 tomcat-docs-webapp-9.0.36-lp151.3.30.1 tomcat-el-3_0-api-9.0.36-lp151.3.30.1 tomcat-embed-9.0.36-lp151.3.30.1 tomcat-javadoc-9.0.36-lp151.3.30.1 tomcat-jsp-2_3-api-9.0.36-lp151.3.30.1 tomcat-jsvc-9.0.36-lp151.3.30.1 tomcat-lib-9.0.36-lp151.3.30.1 tomcat-servlet-4_0-api-9.0.36-lp151.3.30.1 tomcat-webapps-9.0.36-lp151.3.30.1 References: https://bugzilla.suse.com/1092163 https://bugzilla.suse.com/1172562 https://bugzilla.suse.com/1173103

1 0

openSUSE-SU-2020:1369-1: critical: Security update for squid
by opensuse-security＠opensuse.org 07 Sep '20

07 Sep '20

openSUSE Security Update: Security update for squid ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1369-1 Rating: critical References: #1173455 #1175664 #1175665 #1175671 Cross-References: CVE-2020-15049 CVE-2020-15810 CVE-2020-15811 CVE-2020-24606 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for squid fixes the following issues: squid was updated to version 4.13: - CVE-2020-24606: Fix livelocking in peerDigestHandleReply (bsc#1175671). - CVE-2020-15811: Improve Transfer-Encoding handling (bsc#1175665). - CVE-2020-15810: Enforce token characters for field-name (bsc#1175664). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1369=1 Package List: - openSUSE Leap 15.2 (x86_64): squid-4.13-lp152.2.6.1 squid-debuginfo-4.13-lp152.2.6.1 squid-debugsource-4.13-lp152.2.6.1 References: https://www.suse.com/security/cve/CVE-2020-15049.html https://www.suse.com/security/cve/CVE-2020-15810.html https://www.suse.com/security/cve/CVE-2020-15811.html https://www.suse.com/security/cve/CVE-2020-24606.html https://bugzilla.suse.com/1173455 https://bugzilla.suse.com/1175664 https://bugzilla.suse.com/1175665 https://bugzilla.suse.com/1175671

1 0

openSUSE-RU-2020:1351-1: moderate: Recommended update for python3-ec2imgutils
by maintenance＠opensuse.org 07 Sep '20

07 Sep '20

openSUSE Recommended Update: Recommended update for python3-ec2imgutils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1351-1 Rating: moderate References: #1172579 #1172948 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for python3-ec2imgutils contains the following fixes: - Fixed an error, when an image gets deprecated using its name (bsc#1172948) - Added new utility ec2listimg to list images owned by the specified account - Fixed an error when an image is not allowed to be copied and shared with a specific account (bsc#1172579) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1351=1 Package List: - openSUSE Leap 15.1 (noarch): python3-ec2imgutils-9.0.0-lp151.2.15.1 References: https://bugzilla.suse.com/1172579 https://bugzilla.suse.com/1172948

1 0

openSUSE-RU-2020:1365-1: moderate: Recommended update for 389-ds
by maintenance＠opensuse.org 07 Sep '20

07 Sep '20

openSUSE Recommended Update: Recommended update for 389-ds ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1365-1 Rating: moderate References: #1174057 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for 389-ds fixes the following issues: Update from version 1.4.3.9~git0.3eb8617f6 to version 1.4.3.12~git0.9bc042902 - It should not be allowed to delete Managed Entry manually - SSL alert: The value of sslVersionMax "TLS1.3" is higher than the supported version - Fix instance name length for interactive install - JSON Error output has redundant messages - If dbhome directory is set online backup fails - Separate the BDB backend monitors - entryUSN is duplicated after memberOf operation - Fix disk_mon_check_diskspace types - Resolve upstream stability and fix rollup. (bsc#1174057) - Add option to reject internal unindexed searches - dsidm ou delete fails - add more logconv stats for the new access log keywords - db2ldif crashes when LDIF file can't be accessed - add new access log keywords for wtime and optime - Fix Allowed and Denied Ciphers lists - WebUI - UI - attr uniqueness - selecting empty subtree crashes cockpit - log warning when thread number is very different from autotuned value - Reindex task may create abandoned index file - Log an error when a search is fully unindexed - fix SLE15.2 install issps - dsctl fails with instance names that contain slapd- - Memory leaks in disk monitoring - nsIndexIDListScanLimit accepts any value - A distinguished value can be missing in an entry - Healthcheck should look for notes=A/F in access log - Set the default minimum worker threads - pwdReset can be modified by a user - Correct numSubordinates value for cn=monitor - dsctl and dsidm do not errors correctly when using JSON - Winsync setting winSyncWindowsFilter not working as expected - improve autotune defaults - Add option to healthcheck to list all the lint reports - UI - improve modal validation when creating an instance This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1365=1 Package List: - openSUSE Leap 15.2 (x86_64): 389-ds-1.4.3.12~git0.9bc042902-lp152.2.6.1 389-ds-debuginfo-1.4.3.12~git0.9bc042902-lp152.2.6.1 389-ds-debugsource-1.4.3.12~git0.9bc042902-lp152.2.6.1 389-ds-devel-1.4.3.12~git0.9bc042902-lp152.2.6.1 389-ds-snmp-1.4.3.12~git0.9bc042902-lp152.2.6.1 389-ds-snmp-debuginfo-1.4.3.12~git0.9bc042902-lp152.2.6.1 lib389-1.4.3.12~git0.9bc042902-lp152.2.6.1 libsvrcore0-1.4.3.12~git0.9bc042902-lp152.2.6.1 libsvrcore0-debuginfo-1.4.3.12~git0.9bc042902-lp152.2.6.1 References: https://bugzilla.suse.com/1174057

1 0

openSUSE-RU-2020:1362-1: moderate: Recommended update for python-kiwi
by maintenance＠opensuse.org 07 Sep '20

07 Sep '20

openSUSE Recommended Update: Recommended update for python-kiwi ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1362-1 Rating: moderate References: #1096738 #1165730 #1172908 #1173226 #1173356 #1174009 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 6 recommended fixes can now be installed. Description: This update for python-kiwi contains the following fixes: - Bump version up to 9.21.7: This version upgrade includes several fixes: * Skip filesystem check for XFS prior xfs_grow running xfs_repair check isn't strictly necessary before resizing, and in some cases it may even prevent resizing by giving an error that would be cleared through mounting the fs (e.g. when the fs wasn't cleanly umounted, and thus letting xfs recover and replay its journal). Given that xfs can only grow online (while being mounted), this is sufficient to ensure that the fs is in a state where it can be resized. This is related to bsc#1174009. (bsc#1174009) * Fixed grub setup in EFI/BOOT directory kiwi copied the same grub.cfg file as it exists in boot/grub2 to the efi path. This is wrong as the setup in the efi boot directory is used to enable normal grub loading and not providing the user grub configuration. In addition the changes here makes sure that the early grub boot code is placed into the system in any EFI case except for secure boot when shim-install is present. If shim-install is present it also creates the early grub boot setup such that kiwi doesn't have to do it. This Fixes #1491 and Fixes bsc#1172908. (bsc#1172908) * Use rsync in inplace transfer mode Using the --inplace option in rsync helps to save space on syncing the rootfs data and prevents e.g OBS workers from running out of VM space when transfering root filesystem data. Also using --inplace allows to keep hardlinks intact. This is related to bsc#1096738. (bsc#1096738) * Don't keep copy of grub2-install in the system To prevent shim-install from calling grub2-install in uefi mode kiwi temporary replaces the tool by a noop. This acts as a workaround for an issue in shim-install. However the workaround left a file copy of grub2-install in the system which should not happen. This commit Fixes bsc#1173226 and Fixes #1490. (bsc#1173226) * Fixes live ISOs This commit fixes iso images. Due to a change introduced in c7ed1cf live ISOs were no longer booting as the rootfs.img filesystem was copied to the squashfs container while being still mounted. Because of that, at boot time, it refused to mount. This commit adds umount method for the filesystem base class, so it can be umounted before deleting the instance. Fixes #1489 and bsc#1173356. (bsc#1173356) * Support grub timeout_style parameter Grub supports a style setting that influences the display of the menu depending on the configured timeout value. With this patch kiwi allows to specify the style via a new bootloader parameter named timeout_style="hidden|countdown". If not set the grub default applies which shows the menu in any case. This Fixes bsc#1165730 and Fixes #1404. (bsc#1165730) * Use auto video mode as default for grub An explicit video mode 800x600 was used for grub if no video mode setup exists in the XML description. For grub this should better result in the auto mode. Related to bsc#1165730. (bsc#1165730) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1362=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): dracut-kiwi-lib-9.21.7-lp152.5.7.1 dracut-kiwi-live-9.21.7-lp152.5.7.1 dracut-kiwi-oem-dump-9.21.7-lp152.5.7.1 dracut-kiwi-oem-repart-9.21.7-lp152.5.7.1 dracut-kiwi-overlay-9.21.7-lp152.5.7.1 kiwi-man-pages-9.21.7-lp152.5.7.1 kiwi-pxeboot-9.21.7-lp152.5.7.1 kiwi-tools-9.21.7-lp152.5.7.1 kiwi-tools-debuginfo-9.21.7-lp152.5.7.1 python-kiwi-debugsource-9.21.7-lp152.5.7.1 python3-kiwi-9.21.7-lp152.5.7.1 References: https://bugzilla.suse.com/1096738 https://bugzilla.suse.com/1165730 https://bugzilla.suse.com/1172908 https://bugzilla.suse.com/1173226 https://bugzilla.suse.com/1173356 https://bugzilla.suse.com/1174009

1 0

openSUSE-RU-2020:1361-1: moderate: Recommended update for iputils
by maintenance＠opensuse.org 07 Sep '20

07 Sep '20

openSUSE Recommended Update: Recommended update for iputils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1361-1 Rating: moderate References: #927831 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for iputils fixes the following issue: - ping: Remove workaround for bug in IP_RECVERR on raw sockets. (bsc#927831) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1361=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): iputils-debuginfo-s20161105-lp152.8.3.1 iputils-debugsource-s20161105-lp152.8.3.1 iputils-s20161105-lp152.8.3.1 rarpd-debuginfo-s20161105-lp152.8.3.1 rarpd-s20161105-lp152.8.3.1 References: https://bugzilla.suse.com/927831

1 0

openSUSE-RU-2020:1352-1: moderate: Recommended update for yast2-rmt
by maintenance＠opensuse.org 07 Sep '20

07 Sep '20

openSUSE Recommended Update: Recommended update for yast2-rmt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1352-1 Rating: moderate References: #1171555 #1172674 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for yast2-rmt fixes the following issues: - Handle Common Name length. (bsc#1172674) - Changed placeholders in translatable strings to support better the 'gettext' language format tags. (bsc#1171555) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1352=1 Package List: - openSUSE Leap 15.1 (noarch): yast2-rmt-1.3.2-lp151.2.9.1 References: https://bugzilla.suse.com/1171555 https://bugzilla.suse.com/1172674

1 0

openSUSE-RU-2020:1360-1: moderate: Recommended update for nfs-utils
by maintenance＠opensuse.org 07 Sep '20

07 Sep '20

openSUSE Recommended Update: Recommended update for nfs-utils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1360-1 Rating: moderate References: #1174260 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for nfs-utils fixes the following issues: - Fix a bug when concurrent 'gssd' requests arrive from kernel, causing hanging NFS mounts. (bsc#1174260) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1360=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): nfs-client-2.1.1-lp152.9.3.1 nfs-client-debuginfo-2.1.1-lp152.9.3.1 nfs-doc-2.1.1-lp152.9.3.1 nfs-kernel-server-2.1.1-lp152.9.3.1 nfs-kernel-server-debuginfo-2.1.1-lp152.9.3.1 nfs-utils-debuginfo-2.1.1-lp152.9.3.1 nfs-utils-debugsource-2.1.1-lp152.9.3.1 References: https://bugzilla.suse.com/1174260

1 0

openSUSE-SU-2020:1356-1: moderate: Security update for php7
by opensuse-security＠opensuse.org 07 Sep '20

07 Sep '20

openSUSE Security Update: Security update for php7 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1356-1 Rating: moderate References: #1175223 Cross-References: CVE-2020-7068 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for php7 fixes the following issues: - CVE-2020-7068: Use of freed hash key in the phar_parse_zipfile function (bsc#1175223). This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1356=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): apache2-mod_php7-7.4.6-lp152.2.6.1 apache2-mod_php7-debuginfo-7.4.6-lp152.2.6.1 php7-7.4.6-lp152.2.6.1 php7-bcmath-7.4.6-lp152.2.6.1 php7-bcmath-debuginfo-7.4.6-lp152.2.6.1 php7-bz2-7.4.6-lp152.2.6.1 php7-bz2-debuginfo-7.4.6-lp152.2.6.1 php7-calendar-7.4.6-lp152.2.6.1 php7-calendar-debuginfo-7.4.6-lp152.2.6.1 php7-ctype-7.4.6-lp152.2.6.1 php7-ctype-debuginfo-7.4.6-lp152.2.6.1 php7-curl-7.4.6-lp152.2.6.1 php7-curl-debuginfo-7.4.6-lp152.2.6.1 php7-dba-7.4.6-lp152.2.6.1 php7-dba-debuginfo-7.4.6-lp152.2.6.1 php7-debuginfo-7.4.6-lp152.2.6.1 php7-debugsource-7.4.6-lp152.2.6.1 php7-devel-7.4.6-lp152.2.6.1 php7-dom-7.4.6-lp152.2.6.1 php7-dom-debuginfo-7.4.6-lp152.2.6.1 php7-embed-7.4.6-lp152.2.6.1 php7-embed-debuginfo-7.4.6-lp152.2.6.1 php7-enchant-7.4.6-lp152.2.6.1 php7-enchant-debuginfo-7.4.6-lp152.2.6.1 php7-exif-7.4.6-lp152.2.6.1 php7-exif-debuginfo-7.4.6-lp152.2.6.1 php7-fastcgi-7.4.6-lp152.2.6.1 php7-fastcgi-debuginfo-7.4.6-lp152.2.6.1 php7-fileinfo-7.4.6-lp152.2.6.1 php7-fileinfo-debuginfo-7.4.6-lp152.2.6.1 php7-firebird-7.4.6-lp152.2.6.1 php7-firebird-debuginfo-7.4.6-lp152.2.6.1 php7-fpm-7.4.6-lp152.2.6.1 php7-fpm-debuginfo-7.4.6-lp152.2.6.1 php7-ftp-7.4.6-lp152.2.6.1 php7-ftp-debuginfo-7.4.6-lp152.2.6.1 php7-gd-7.4.6-lp152.2.6.1 php7-gd-debuginfo-7.4.6-lp152.2.6.1 php7-gettext-7.4.6-lp152.2.6.1 php7-gettext-debuginfo-7.4.6-lp152.2.6.1 php7-gmp-7.4.6-lp152.2.6.1 php7-gmp-debuginfo-7.4.6-lp152.2.6.1 php7-iconv-7.4.6-lp152.2.6.1 php7-iconv-debuginfo-7.4.6-lp152.2.6.1 php7-intl-7.4.6-lp152.2.6.1 php7-intl-debuginfo-7.4.6-lp152.2.6.1 php7-json-7.4.6-lp152.2.6.1 php7-json-debuginfo-7.4.6-lp152.2.6.1 php7-ldap-7.4.6-lp152.2.6.1 php7-ldap-debuginfo-7.4.6-lp152.2.6.1 php7-mbstring-7.4.6-lp152.2.6.1 php7-mbstring-debuginfo-7.4.6-lp152.2.6.1 php7-mysql-7.4.6-lp152.2.6.1 php7-mysql-debuginfo-7.4.6-lp152.2.6.1 php7-odbc-7.4.6-lp152.2.6.1 php7-odbc-debuginfo-7.4.6-lp152.2.6.1 php7-opcache-7.4.6-lp152.2.6.1 php7-opcache-debuginfo-7.4.6-lp152.2.6.1 php7-openssl-7.4.6-lp152.2.6.1 php7-openssl-debuginfo-7.4.6-lp152.2.6.1 php7-pcntl-7.4.6-lp152.2.6.1 php7-pcntl-debuginfo-7.4.6-lp152.2.6.1 php7-pdo-7.4.6-lp152.2.6.1 php7-pdo-debuginfo-7.4.6-lp152.2.6.1 php7-pgsql-7.4.6-lp152.2.6.1 php7-pgsql-debuginfo-7.4.6-lp152.2.6.1 php7-phar-7.4.6-lp152.2.6.1 php7-phar-debuginfo-7.4.6-lp152.2.6.1 php7-posix-7.4.6-lp152.2.6.1 php7-posix-debuginfo-7.4.6-lp152.2.6.1 php7-readline-7.4.6-lp152.2.6.1 php7-readline-debuginfo-7.4.6-lp152.2.6.1 php7-shmop-7.4.6-lp152.2.6.1 php7-shmop-debuginfo-7.4.6-lp152.2.6.1 php7-snmp-7.4.6-lp152.2.6.1 php7-snmp-debuginfo-7.4.6-lp152.2.6.1 php7-soap-7.4.6-lp152.2.6.1 php7-soap-debuginfo-7.4.6-lp152.2.6.1 php7-sockets-7.4.6-lp152.2.6.1 php7-sockets-debuginfo-7.4.6-lp152.2.6.1 php7-sodium-7.4.6-lp152.2.6.1 php7-sodium-debuginfo-7.4.6-lp152.2.6.1 php7-sqlite-7.4.6-lp152.2.6.1 php7-sqlite-debuginfo-7.4.6-lp152.2.6.1 php7-sysvmsg-7.4.6-lp152.2.6.1 php7-sysvmsg-debuginfo-7.4.6-lp152.2.6.1 php7-sysvsem-7.4.6-lp152.2.6.1 php7-sysvsem-debuginfo-7.4.6-lp152.2.6.1 php7-sysvshm-7.4.6-lp152.2.6.1 php7-sysvshm-debuginfo-7.4.6-lp152.2.6.1 php7-test-7.4.6-lp152.2.6.1 php7-tidy-7.4.6-lp152.2.6.1 php7-tidy-debuginfo-7.4.6-lp152.2.6.1 php7-tokenizer-7.4.6-lp152.2.6.1 php7-tokenizer-debuginfo-7.4.6-lp152.2.6.1 php7-xmlreader-7.4.6-lp152.2.6.1 php7-xmlreader-debuginfo-7.4.6-lp152.2.6.1 php7-xmlrpc-7.4.6-lp152.2.6.1 php7-xmlrpc-debuginfo-7.4.6-lp152.2.6.1 php7-xmlwriter-7.4.6-lp152.2.6.1 php7-xmlwriter-debuginfo-7.4.6-lp152.2.6.1 php7-xsl-7.4.6-lp152.2.6.1 php7-xsl-debuginfo-7.4.6-lp152.2.6.1 php7-zip-7.4.6-lp152.2.6.1 php7-zip-debuginfo-7.4.6-lp152.2.6.1 php7-zlib-7.4.6-lp152.2.6.1 php7-zlib-debuginfo-7.4.6-lp152.2.6.1 References: https://www.suse.com/security/cve/CVE-2020-7068.html https://bugzilla.suse.com/1175223

1 0

openSUSE-SU-2020:1359-1: moderate: Security update for curl
by opensuse-security＠opensuse.org 07 Sep '20

07 Sep '20

openSUSE Security Update: Security update for curl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1359-1 Rating: moderate References: #1175109 Cross-References: CVE-2020-8231 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for curl fixes the following issues: - An application that performs multiple requests with libcurl's multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in rare circumstances experience that when subsequently using the setup connect-only transfer, libcurl will pick and use the wrong connection and instead pick another one the application has created since then. [bsc#1175109, CVE-2020-8231] This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1359=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): curl-7.66.0-lp152.3.6.1 curl-debuginfo-7.66.0-lp152.3.6.1 curl-debugsource-7.66.0-lp152.3.6.1 libcurl-devel-7.66.0-lp152.3.6.1 libcurl4-7.66.0-lp152.3.6.1 libcurl4-debuginfo-7.66.0-lp152.3.6.1 - openSUSE Leap 15.2 (x86_64): libcurl-devel-32bit-7.66.0-lp152.3.6.1 libcurl4-32bit-7.66.0-lp152.3.6.1 libcurl4-32bit-debuginfo-7.66.0-lp152.3.6.1 References: https://www.suse.com/security/cve/CVE-2020-8231.html https://bugzilla.suse.com/1175109

1 0

openSUSE-RU-2020:1372-1: moderate: Recommended update for python3-ec2imgutils
by maintenance＠opensuse.org 07 Sep '20

07 Sep '20

openSUSE Recommended Update: Recommended update for python3-ec2imgutils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1372-1 Rating: moderate References: #1172579 #1172948 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for python3-ec2imgutils contains the following fixes: - Fixed an error, when an image gets deprecated using its name (bsc#1172948) - Added new utility ec2listimg to list images owned by the specified account - Fixed an error when an image is not allowed to be copied and shared with a specific account (bsc#1172579) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1372=1 Package List: - openSUSE Leap 15.2 (noarch): python3-ec2imgutils-9.0.0-lp152.2.3.1 References: https://bugzilla.suse.com/1172579 https://bugzilla.suse.com/1172948

1 0

openSUSE-SU-2020:1376-1: important: Security update for xorg-x11-server
by opensuse-security＠opensuse.org 07 Sep '20

07 Sep '20

openSUSE Security Update: Security update for xorg-x11-server ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1376-1 Rating: important References: #1174910 #1174913 Cross-References: CVE-2020-14361 CVE-2020-14362 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for xorg-x11-server fixes the following issues: - CVE-2020-14361: Fix XkbSelectEvents() integer underflow (bsc#1174910 ZDI-CAN-11573). - CVE-2020-14362: Fix XRecordRegisterClients() Integer underflow (bsc#1174913 ZDI-CAN-11574). This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1376=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): xorg-x11-server-1.20.3-lp152.8.6.1 xorg-x11-server-debuginfo-1.20.3-lp152.8.6.1 xorg-x11-server-debugsource-1.20.3-lp152.8.6.1 xorg-x11-server-extra-1.20.3-lp152.8.6.1 xorg-x11-server-extra-debuginfo-1.20.3-lp152.8.6.1 xorg-x11-server-sdk-1.20.3-lp152.8.6.1 xorg-x11-server-source-1.20.3-lp152.8.6.1 xorg-x11-server-wayland-1.20.3-lp152.8.6.1 xorg-x11-server-wayland-debuginfo-1.20.3-lp152.8.6.1 References: https://www.suse.com/security/cve/CVE-2020-14361.html https://www.suse.com/security/cve/CVE-2020-14362.html https://bugzilla.suse.com/1174910 https://bugzilla.suse.com/1174913

1 0

openSUSE-SU-2020:1374-1: important: Security update for xorg-x11-server
by opensuse-security＠opensuse.org 07 Sep '20

07 Sep '20

openSUSE Security Update: Security update for xorg-x11-server ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1374-1 Rating: important References: #1174910 #1174913 Cross-References: CVE-2020-14361 CVE-2020-14362 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for xorg-x11-server fixes the following issues: - CVE-2020-14361: Fix XkbSelectEvents() integer underflow (bsc#1174910 ZDI-CAN-11573). - CVE-2020-14362: Fix XRecordRegisterClients() Integer underflow (bsc#1174913 ZDI-CAN-11574). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1374=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): xorg-x11-server-1.20.3-lp151.4.6.1 xorg-x11-server-debuginfo-1.20.3-lp151.4.6.1 xorg-x11-server-debugsource-1.20.3-lp151.4.6.1 xorg-x11-server-extra-1.20.3-lp151.4.6.1 xorg-x11-server-extra-debuginfo-1.20.3-lp151.4.6.1 xorg-x11-server-sdk-1.20.3-lp151.4.6.1 xorg-x11-server-source-1.20.3-lp151.4.6.1 xorg-x11-server-wayland-1.20.3-lp151.4.6.1 xorg-x11-server-wayland-debuginfo-1.20.3-lp151.4.6.1 References: https://www.suse.com/security/cve/CVE-2020-14361.html https://www.suse.com/security/cve/CVE-2020-14362.html https://bugzilla.suse.com/1174910 https://bugzilla.suse.com/1174913

1 0