September 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2020:1481-1: moderate: Recommended update for linssid
by maintenance＠opensuse.org 20 Sep '20

20 Sep '20

openSUSE Recommended Update: Recommended update for linssid ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1481-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for linssid fixes the following issues: Update to Version 3.6 * Attempts to resolve 802.11s mesh network nodes to their master. If otherwise not reported, marks SSID field of mesh node APs as "<mesh-masterSSID>". version 3.5: * New vendor database and search scheme that now looks in ieee oui large, medium, and small block databases. Previously only looked in large block database because that's where 98% of all devices are found. * Displays SSID of attach points with no SSID as "<hidden>". version 3.4: * Fixes location and owner of ".linssid.prefs" and "LinSSID.datalog". Instead of placed in /root and owned by root they are now placed in "$HOME" and owned by "$USER" when launched with linssid-pkexec which is the normal .desktop launch. * Fixed some wrongly addressed cosmetic icons. * Updated vendor data file. (Version 3.3 had some trailing characters that messed up data logging.) * Sundry under-the-hood optimizations. version 3.3: * Adds selection of table font size in preferences dialog. version 3.2: * Now shows mark for control channel on the channel plots. Very useful for making sure your control channel(s) don't overlap with the neighbors'. * Fixes potential memory leak with attached plots. version 3.1: * Big change - now requires polkit (policykit) authentication. No way around this as debian/ubuntu/* has emasculated su and sudo. A step backward IMHO. Now the whole app must run as root. So, all of the prefs and log files are now in /root and are owned by root. And, the whole app must run as root instead of just well-tested system parts. * Major rewrite of the synchronization between the main window and the data getter. * Install rewrite * Desktop file fix * Updated vendor database version 3.0: * Fix race condition with large number of SSID * Updated vendor database This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1481=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): linssid-3.6-bp152.4.3.1 References:

1 0

openSUSE-RU-2020:1474-1: moderate: Recommended update for openwsman
by maintenance＠opensuse.org 19 Sep '20

19 Sep '20

openSUSE Recommended Update: Recommended update for openwsman ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1474-1 Rating: moderate References: #1174541 #1175631 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for openwsman fixes the following issues: - Don't crash if OpenSSL SSL context fails to initialize. (bsc#1175631) - Adapt to openssl 1.1.1. (bsc#1174541) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1474=1 Package List: - openSUSE Leap 15.1 (x86_64): libwsman-devel-2.6.7-lp151.4.6.1 libwsman3-2.6.7-lp151.4.6.1 libwsman3-debuginfo-2.6.7-lp151.4.6.1 libwsman_clientpp-devel-2.6.7-lp151.4.6.1 libwsman_clientpp1-2.6.7-lp151.4.6.1 libwsman_clientpp1-debuginfo-2.6.7-lp151.4.6.1 openwsman-debuginfo-2.6.7-lp151.4.6.1 openwsman-debugsource-2.6.7-lp151.4.6.1 openwsman-java-2.6.7-lp151.4.6.1 openwsman-perl-2.6.7-lp151.4.6.1 openwsman-perl-debuginfo-2.6.7-lp151.4.6.1 openwsman-ruby-2.6.7-lp151.4.6.1 openwsman-ruby-debuginfo-2.6.7-lp151.4.6.1 openwsman-ruby-docs-2.6.7-lp151.4.6.1 openwsman-server-2.6.7-lp151.4.6.1 openwsman-server-debuginfo-2.6.7-lp151.4.6.1 openwsman-server-plugin-ruby-2.6.7-lp151.4.6.1 openwsman-server-plugin-ruby-debuginfo-2.6.7-lp151.4.6.1 python3-openwsman-2.6.7-lp151.4.6.1 python3-openwsman-debuginfo-2.6.7-lp151.4.6.1 winrs-2.6.7-lp151.4.6.1 References: https://bugzilla.suse.com/1174541 https://bugzilla.suse.com/1175631

1 0

openSUSE-RU-2020:1470-1: moderate: Recommended update for shim-leap
by maintenance＠opensuse.org 19 Sep '20

19 Sep '20

openSUSE Recommended Update: Recommended update for shim-leap ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1470-1 Rating: moderate References: #1119762 #1119763 #1153953 #1174320 #1175626 #1175656 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 6 recommended fixes can now be installed. Description: This update for shim-leap fixes the following issues: Update shim to 15+git47-lp152.4.5.1 from openSUSE Leap 15.2 + shim-install: install MokManager to \EFI\boot to process the pending MOK request (boo#1175626, boo#1175656) - Update the path to grub-tpm.efi in shim-install (boo#1174320) - shim-install: add check for btrfs is used as root file system to enable relative path lookup for file. (boo#1153953) - Update shim-install to handle the partitioned MD devices (boo#1119762, boo#1119763) - Update grub2 path in shim-install This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1470=1 Package List: - openSUSE Leap 15.2 (x86_64): shim-15+git47-lp152.4.6.1 References: https://bugzilla.suse.com/1119762 https://bugzilla.suse.com/1119763 https://bugzilla.suse.com/1153953 https://bugzilla.suse.com/1174320 https://bugzilla.suse.com/1175626 https://bugzilla.suse.com/1175656

1 0

openSUSE-RU-2020:1472-1: moderate: Recommended update for realmd
by maintenance＠opensuse.org 19 Sep '20

19 Sep '20

openSUSE Recommended Update: Recommended update for realmd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1472-1 Rating: moderate References: #1175616 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for realmd fixes the following issue: - Fix pam misconfiguration. (bsc#1175616) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1472=1 Package List: - openSUSE Leap 15.2 (x86_64): realmd-0.16.3-lp152.4.3.1 realmd-debuginfo-0.16.3-lp152.4.3.1 realmd-debugsource-0.16.3-lp152.4.3.1 - openSUSE Leap 15.2 (noarch): realmd-lang-0.16.3-lp152.4.3.1 References: https://bugzilla.suse.com/1175616

1 0

openSUSE-RU-2020:1460-1: moderate: Recommended update for yast2-services-manager
by maintenance＠opensuse.org 19 Sep '20

19 Sep '20

openSUSE Recommended Update: Recommended update for yast2-services-manager ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1460-1 Rating: moderate References: #1165388 #1173408 #1174615 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for yast2-services-manager fixes the following issues: - changing other services than the user expects (bsc#1165388, bsc#1174615) - detection of modifications in AutoYaST config mode (bsc#1173408) - remembering of services configuration in AutoYaST config mode (bsc#1173408) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1460=1 Package List: - openSUSE Leap 15.2 (noarch): yast2-services-manager-4.2.7-lp152.2.3.1 References: https://bugzilla.suse.com/1165388 https://bugzilla.suse.com/1173408 https://bugzilla.suse.com/1174615

1 0

openSUSE-RU-2020:1456-1: moderate: Recommended update for texinfo4
by maintenance＠opensuse.org 19 Sep '20

19 Sep '20

openSUSE Recommended Update: Recommended update for texinfo4 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1456-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for texinfo4 fixes the following issues: - Remove links sub package and generate links in lilypond build. SLE backports don't allow two executables to have the same name. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1456=1 - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1456=1 Package List: - openSUSE Leap 15.2 (x86_64): info4-4.13a-lp152.5.3.1 info4-debuginfo-4.13a-lp152.5.3.1 makeinfo4-4.13a-lp152.5.3.1 makeinfo4-debuginfo-4.13a-lp152.5.3.1 texinfo4-4.13a-lp152.5.3.1 texinfo4-debuginfo-4.13a-lp152.5.3.1 texinfo4-debugsource-4.13a-lp152.5.3.1 - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): info4-4.13a-bp152.5.3.1 makeinfo4-4.13a-bp152.5.3.1 texinfo4-4.13a-bp152.5.3.1 References:

1 0

openSUSE-SU-2020:1453-1: moderate: Security update for lilypond
by opensuse-security＠opensuse.org 19 Sep '20

19 Sep '20

openSUSE Security Update: Security update for lilypond ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1453-1 Rating: moderate References: #1174949 Cross-References: CVE-2020-17353 Affected Products: openSUSE Leap 15.2 openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for lilypond fixes the following issues: - CVE-2020-17353: When -dsafe is used, LilyPond lacks restrictions on embedded-ps and embedded-svg (boo#1174949). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1453=1 - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1453=1 Package List: - openSUSE Leap 15.2 (noarch): lilypond-doc-2.20.0-lp152.2.5.10 lilypond-doc-cs-2.20.0-lp152.2.5.10 lilypond-doc-de-2.20.0-lp152.2.5.10 lilypond-doc-es-2.20.0-lp152.2.5.10 lilypond-doc-fr-2.20.0-lp152.2.5.10 lilypond-doc-hu-2.20.0-lp152.2.5.10 lilypond-doc-it-2.20.0-lp152.2.5.10 lilypond-doc-ja-2.20.0-lp152.2.5.10 lilypond-doc-nl-2.20.0-lp152.2.5.10 lilypond-doc-zh-2.20.0-lp152.2.5.10 lilypond-emmentaler-fonts-2.20.0-lp152.2.5.10 lilypond-fonts-common-2.20.0-lp152.2.5.10 lilypond-texgy-fonts-2.20.0-lp152.2.5.10 - openSUSE Leap 15.2 (x86_64): lilypond-2.20.0-lp152.2.5.10 lilypond-debuginfo-2.20.0-lp152.2.5.10 lilypond-debugsource-2.20.0-lp152.2.5.10 - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): lilypond-2.20.0-bp152.2.5.6 lilypond-debuginfo-2.20.0-bp152.2.5.6 lilypond-debugsource-2.20.0-bp152.2.5.6 - openSUSE Backports SLE-15-SP2 (noarch): lilypond-emmentaler-fonts-2.20.0-bp152.2.5.6 lilypond-fonts-common-2.20.0-bp152.2.5.6 lilypond-texgy-fonts-2.20.0-bp152.2.5.6 References: https://www.suse.com/security/cve/CVE-2020-17353.html https://bugzilla.suse.com/1174949

1 0

openSUSE-RU-2020:1466-1: moderate: Recommended update for charliecloud
by maintenance＠opensuse.org 19 Sep '20

19 Sep '20

openSUSE Recommended Update: Recommended update for charliecloud ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1466-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for charliecloud fixes the following issues: Update to version 0.18 - Fixes an important symlink handling bug in ch-tug and ch-grow. Prior to version 0.18, if a pulled image contained a symlink in one layer and then a regular file at the same path in a subsequent layer, the *target* of the symlink would be overwritten even if it was not within the image; i.e., unpacking inappropriately followed the symlink. This allows a crafted image to overwrite any file writeable by the invoking user. Because Charliecloud is unprivileged, other files on the system, e.g. system files, are unaffected. - ch-grow: --version and --help work w/o dependencies installed new switch --list to list images now gives diagnostics for syntax errors and unsupported instructions WORKDIR now supports relative paths (#786) no longer crashes if input doesn’t end in newline (#474) - miscellaneous bug fixes and improvements - Full changelogs at https://groups.io/g/charliecloud/message/104 and https://groups.io/g/charliecloud/message/105 Update to version 0.16 - ch-grow and ch-tug: updates to work with external repositories - ch-grow: COPY semantics now match Docker - miscellaneous bug fixes and improvements - Full changelog at https://groups.io/g/charliecloud/message/103 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1466=1 Package List: - openSUSE Leap 15.2 (noarch): charliecloud-doc-0.18-lp152.2.3.1 charliecloud-examples-0.18-lp152.2.3.1 - openSUSE Leap 15.2 (x86_64): charliecloud-0.18-lp152.2.3.1 charliecloud-debuginfo-0.18-lp152.2.3.1 charliecloud-debugsource-0.18-lp152.2.3.1 References:

1 0

openSUSE-RU-2020:1471-1: moderate: Recommended update for cryptsetup
by maintenance＠opensuse.org 19 Sep '20

19 Sep '20

openSUSE Recommended Update: Recommended update for cryptsetup ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1471-1 Rating: moderate References: #1165580 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for cryptsetup fixes the following issues: Update from version 2.0.5 to version 2.0.6. (jsc#SLE-5911, bsc#1165580) - Fix support of larger metadata areas in *LUKS2* header. This release properly supports all specified metadata areas, as documented in *LUKS2* format description. Currently, only default metadata area size is used (in format or convert). Later cryptsetup versions will allow increasing this metadata area size. - If *AEAD* (authenticated encryption) is used, cryptsetup now tries to check if the requested *AEAD* algorithm with specified key size is available in kernel crypto API. This change avoids formatting a device that cannot be later activated. For this function, the kernel must be compiled with the *CONFIG_CRYPTO_USER_API_AEAD* option enabled. Note that kernel user crypto API options (*CONFIG_CRYPTO_USER_API* and *CONFIG_CRYPTO_USER_API_SKCIPHER*) are already mandatory for LUKS2. - Fix setting of integrity no-journal flag. Now you can store this flag to metadata using *\--persistent* option. - Fix cryptsetup-reencrypt to not keep temporary reencryption headers if interrupted during initial password prompt. - Adds early check to plain and LUKS2 formats to disallow device format if device size is not aligned to requested sector size. Previously it was possible, and the device was rejected to activate by kernel later. - Fix checking of hash algorithms availability for *PBKDF* early. Previously *LUKS2* format allowed non-existent hash algorithm with invalid keyslot preventing the device from activation. - Allow Adiantum cipher construction (a non-authenticated length-preserving fast encryption scheme), so it can be used both for data encryption and keyslot encryption in *LUKS1/2* devices. For benchmark, use: # cryptsetup benchmark -c xchacha12,aes-adiantum # cryptsetup benchmark -c xchacha20,aes-adiantum For LUKS format: # cryptsetup luksFormat -c xchacha20,aes-adiantum-plain64 -s 256 <device> This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1471=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): cryptsetup-2.0.6-lp152.4.3.1 cryptsetup-debuginfo-2.0.6-lp152.4.3.1 cryptsetup-debugsource-2.0.6-lp152.4.3.1 libcryptsetup-devel-2.0.6-lp152.4.3.1 libcryptsetup12-2.0.6-lp152.4.3.1 libcryptsetup12-debuginfo-2.0.6-lp152.4.3.1 libcryptsetup12-hmac-2.0.6-lp152.4.3.1 - openSUSE Leap 15.2 (x86_64): libcryptsetup12-32bit-2.0.6-lp152.4.3.1 libcryptsetup12-32bit-debuginfo-2.0.6-lp152.4.3.1 libcryptsetup12-hmac-32bit-2.0.6-lp152.4.3.1 References: https://bugzilla.suse.com/1165580

1 0

openSUSE-SU-2020:1468-1: moderate: Security update for slurm_18_08
by opensuse-security＠opensuse.org 19 Sep '20

19 Sep '20

openSUSE Security Update: Security update for slurm_18_08 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1468-1 Rating: moderate References: #1172004 Cross-References: CVE-2020-12693 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for slurm_18_08 fixes the following issues: - Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693 This fixes and issue where authentication could be bypassed via an alternate path or channel when message Aggregation was enabled. A race condition allowed a user to launch a process as an arbitrary user. (CVE-2020-12693, bsc#1172004). Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-1269 3.patch - Remove unneeded build dependency to postgresql-devel. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1468=1 Package List: - openSUSE Leap 15.2 (x86_64): libpmi0-18.08.9-lp152.2.1 libpmi0-debuginfo-18.08.9-lp152.2.1 libslurm33-18.08.9-lp152.2.1 libslurm33-debuginfo-18.08.9-lp152.2.1 perl-slurm-18.08.9-lp152.2.1 perl-slurm-debuginfo-18.08.9-lp152.2.1 slurm-18.08.9-lp152.2.1 slurm-auth-none-18.08.9-lp152.2.1 slurm-auth-none-debuginfo-18.08.9-lp152.2.1 slurm-config-18.08.9-lp152.2.1 slurm-config-man-18.08.9-lp152.2.1 slurm-cray-18.08.9-lp152.2.1 slurm-cray-debuginfo-18.08.9-lp152.2.1 slurm-debuginfo-18.08.9-lp152.2.1 slurm-debugsource-18.08.9-lp152.2.1 slurm-devel-18.08.9-lp152.2.1 slurm-doc-18.08.9-lp152.2.1 slurm-hdf5-18.08.9-lp152.2.1 slurm-hdf5-debuginfo-18.08.9-lp152.2.1 slurm-lua-18.08.9-lp152.2.1 slurm-lua-debuginfo-18.08.9-lp152.2.1 slurm-munge-18.08.9-lp152.2.1 slurm-munge-debuginfo-18.08.9-lp152.2.1 slurm-node-18.08.9-lp152.2.1 slurm-node-debuginfo-18.08.9-lp152.2.1 slurm-openlava-18.08.9-lp152.2.1 slurm-pam_slurm-18.08.9-lp152.2.1 slurm-pam_slurm-debuginfo-18.08.9-lp152.2.1 slurm-plugins-18.08.9-lp152.2.1 slurm-plugins-debuginfo-18.08.9-lp152.2.1 slurm-seff-18.08.9-lp152.2.1 slurm-sjstat-18.08.9-lp152.2.1 slurm-slurmdbd-18.08.9-lp152.2.1 slurm-slurmdbd-debuginfo-18.08.9-lp152.2.1 slurm-sql-18.08.9-lp152.2.1 slurm-sql-debuginfo-18.08.9-lp152.2.1 slurm-sview-18.08.9-lp152.2.1 slurm-sview-debuginfo-18.08.9-lp152.2.1 slurm-torque-18.08.9-lp152.2.1 slurm-torque-debuginfo-18.08.9-lp152.2.1 slurm-webdoc-18.08.9-lp152.2.1 References: https://www.suse.com/security/cve/CVE-2020-12693.html https://bugzilla.suse.com/1172004

1 0