September 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2020:1420-1: Security update for gimp
by opensuse-security＠opensuse.org 13 Sep '20

13 Sep '20

openSUSE Security Update: Security update for gimp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1420-1 Rating: low References: #1073627 Cross-References: CVE-2017-17789 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for gimp fixes the following issue: - CVE-2017-17789: Fix heap buffer overflow in PSP importer (bsc#1073627). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1420=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): gimp-2.8.22-lp151.5.3.1 gimp-debuginfo-2.8.22-lp151.5.3.1 gimp-debugsource-2.8.22-lp151.5.3.1 gimp-devel-2.8.22-lp151.5.3.1 gimp-devel-debuginfo-2.8.22-lp151.5.3.1 gimp-plugin-aa-2.8.22-lp151.5.3.1 gimp-plugin-aa-debuginfo-2.8.22-lp151.5.3.1 gimp-plugins-python-2.8.22-lp151.5.3.1 gimp-plugins-python-debuginfo-2.8.22-lp151.5.3.1 libgimp-2_0-0-2.8.22-lp151.5.3.1 libgimp-2_0-0-debuginfo-2.8.22-lp151.5.3.1 libgimpui-2_0-0-2.8.22-lp151.5.3.1 libgimpui-2_0-0-debuginfo-2.8.22-lp151.5.3.1 - openSUSE Leap 15.1 (x86_64): libgimp-2_0-0-32bit-2.8.22-lp151.5.3.1 libgimp-2_0-0-32bit-debuginfo-2.8.22-lp151.5.3.1 libgimpui-2_0-0-32bit-2.8.22-lp151.5.3.1 libgimpui-2_0-0-32bit-debuginfo-2.8.22-lp151.5.3.1 - openSUSE Leap 15.1 (noarch): gimp-lang-2.8.22-lp151.5.3.1 References: https://www.suse.com/security/cve/CVE-2017-17789.html https://bugzilla.suse.com/1073627

1 0

openSUSE-RU-2020:1419-1: moderate: Recommended update for ndctl
by maintenance＠opensuse.org 13 Sep '20

13 Sep '20

openSUSE Recommended Update: Recommended update for ndctl ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1419-1 Rating: moderate References: #1165509 #1167861 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for ndctl fixes the following issues: - Fixed an issue where namespaces were not correctly destroyed (bsc#1167861) - Fixed an issue where 'enable-namespace' tried to enable idled namespaces (bsc#1165509) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1419=1 Package List: - openSUSE Leap 15.1 (x86_64): libndctl-devel-64.1-lp151.2.15.1 libndctl6-64.1-lp151.2.15.1 libndctl6-debuginfo-64.1-lp151.2.15.1 ndctl-64.1-lp151.2.15.1 ndctl-debuginfo-64.1-lp151.2.15.1 ndctl-debugsource-64.1-lp151.2.15.1 References: https://bugzilla.suse.com/1165509 https://bugzilla.suse.com/1167861

1 0

openSUSE-RU-2020:1418-1: moderate: Recommended update for python-argparse-manpage
by maintenance＠opensuse.org 13 Sep '20

13 Sep '20

openSUSE Recommended Update: Recommended update for python-argparse-manpage ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1418-1 Rating: moderate References: Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for python-argparse-manpage fixes the following issues: - Consolidate the versions of python-argparse-manpage for SLE. (jsc#SLE-12826) - Don't use %python3_only command, but properly use alternatives. - Drop additional .br tag from paragraphs so the multiline text is nicer - Provide argparse-manpage via entry_point This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1418=1 Package List: - openSUSE Leap 15.1 (x86_64): python2-argparse-manpage-1.3-lp151.5.1 python3-argparse-manpage-1.3-lp151.5.1 References:

1 0

openSUSE-RU-2020:1417-1: moderate: Recommended update for yast2-cluster
by maintenance＠opensuse.org 13 Sep '20

13 Sep '20

openSUSE Recommended Update: Recommended update for yast2-cluster ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1417-1 Rating: moderate References: #1149089 #1175648 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for yast2-cluster fixes the following issues: - Fixes a bug where the csync2 service couldn't be disabled (bsc#1175648) - Added qdevice heuristics support (jsc#SLE-12432) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1417=1 Package List: - openSUSE Leap 15.1 (noarch): yast2-cluster-4.1.6-lp151.2.6.1 References: https://bugzilla.suse.com/1149089 https://bugzilla.suse.com/1175648

1 0

openSUSE-SU-2020:1416-1: moderate: Security update for openldap2
by opensuse-security＠opensuse.org 12 Sep '20

12 Sep '20

openSUSE Security Update: Security update for openldap2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1416-1 Rating: moderate References: #1174154 Cross-References: CVE-2020-15719 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for openldap2 fixes the following issues: - bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509 SAN's falling back to CN validation in violation of rfc6125. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1416=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libldap-2_4-2-2.4.46-lp151.10.15.1 libldap-2_4-2-debuginfo-2.4.46-lp151.10.15.1 openldap2-2.4.46-lp151.10.15.1 openldap2-back-meta-2.4.46-lp151.10.15.1 openldap2-back-meta-debuginfo-2.4.46-lp151.10.15.1 openldap2-back-perl-2.4.46-lp151.10.15.1 openldap2-back-perl-debuginfo-2.4.46-lp151.10.15.1 openldap2-back-sock-2.4.46-lp151.10.15.1 openldap2-back-sock-debuginfo-2.4.46-lp151.10.15.1 openldap2-back-sql-2.4.46-lp151.10.15.1 openldap2-back-sql-debuginfo-2.4.46-lp151.10.15.1 openldap2-client-2.4.46-lp151.10.15.1 openldap2-client-debuginfo-2.4.46-lp151.10.15.1 openldap2-contrib-2.4.46-lp151.10.15.1 openldap2-contrib-debuginfo-2.4.46-lp151.10.15.1 openldap2-debuginfo-2.4.46-lp151.10.15.1 openldap2-debugsource-2.4.46-lp151.10.15.1 openldap2-devel-2.4.46-lp151.10.15.1 openldap2-devel-static-2.4.46-lp151.10.15.1 openldap2-ppolicy-check-password-1.2-lp151.10.15.1 openldap2-ppolicy-check-password-debuginfo-1.2-lp151.10.15.1 - openSUSE Leap 15.1 (noarch): libldap-data-2.4.46-lp151.10.15.1 openldap2-doc-2.4.46-lp151.10.15.1 - openSUSE Leap 15.1 (x86_64): libldap-2_4-2-32bit-2.4.46-lp151.10.15.1 libldap-2_4-2-32bit-debuginfo-2.4.46-lp151.10.15.1 openldap2-devel-32bit-2.4.46-lp151.10.15.1 References: https://www.suse.com/security/cve/CVE-2020-15719.html https://bugzilla.suse.com/1174154

1 0

openSUSE-SU-2020:1415-1: moderate: Security update for python-Flask-Cors
by opensuse-security＠opensuse.org 12 Sep '20

12 Sep '20

openSUSE Security Update: Security update for python-Flask-Cors ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1415-1 Rating: moderate References: #1175986 Cross-References: CVE-2020-25032 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-Flask-Cors fixes the following issues: - CVE-2020-25032: fix a relative directory traversal vulnerability (bsc#1175986). This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1415=1 Package List: - openSUSE Backports SLE-15-SP1 (noarch): python2-Flask-Cors-3.0.7-bp151.2.3.1 python3-Flask-Cors-3.0.7-bp151.2.3.1 References: https://www.suse.com/security/cve/CVE-2020-25032.html https://bugzilla.suse.com/1175986

1 0

openSUSE-RU-2020:1414-1: moderate: Recommended update for resource-agents
by maintenance＠opensuse.org 12 Sep '20

12 Sep '20

openSUSE Recommended Update: Recommended update for resource-agents ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1414-1 Rating: moderate References: #1170354 #1175101 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for resource-agents fixes the following issues: - GCP Resource Agents - Support for Multi Alias IP. (bsc#1175101) - OCF version check for pacemaker is incompatible with the SUSE version strings. (bsc#1170354) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1414=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): ldirectord-4.3.0184.6ee15eb2-lp151.3.27.1 resource-agents-4.3.0184.6ee15eb2-lp151.3.27.1 resource-agents-debuginfo-4.3.0184.6ee15eb2-lp151.3.27.1 resource-agents-debugsource-4.3.0184.6ee15eb2-lp151.3.27.1 - openSUSE Leap 15.1 (noarch): monitoring-plugins-metadata-4.3.0184.6ee15eb2-lp151.3.27.1 References: https://bugzilla.suse.com/1170354 https://bugzilla.suse.com/1175101

1 0

openSUSE-RU-2020:1412-1: moderate: Recommended update for kio
by maintenance＠opensuse.org 11 Sep '20

11 Sep '20

openSUSE Recommended Update: Recommended update for kio ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1412-1 Rating: moderate References: #1167985 #1174141 #1174169 Affected Products: openSUSE Leap 15.2 openSUSE Leap 15.1 openSUSE Backports SLE-15-SP1 SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for kio fixes the following issues: - Fix reading the "Accept For Session" cookie setting in the kcookiejar daemon (boo#1167985) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1412=1 - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1412=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1412=1 - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2020-1412=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): kio-5.71.0-lp152.2.9.1 kio-core-5.71.0-lp152.2.9.1 kio-core-debuginfo-5.71.0-lp152.2.9.1 kio-debuginfo-5.71.0-lp152.2.9.1 kio-debugsource-5.71.0-lp152.2.9.1 kio-devel-5.71.0-lp152.2.9.1 kio-devel-debuginfo-5.71.0-lp152.2.9.1 - openSUSE Leap 15.2 (x86_64): kio-32bit-5.71.0-lp152.2.9.1 kio-32bit-debuginfo-5.71.0-lp152.2.9.1 kio-core-32bit-5.71.0-lp152.2.9.1 kio-core-32bit-debuginfo-5.71.0-lp152.2.9.1 kio-devel-32bit-5.71.0-lp152.2.9.1 kio-devel-32bit-debuginfo-5.71.0-lp152.2.9.1 - openSUSE Leap 15.2 (noarch): kio-lang-5.71.0-lp152.2.9.1 - openSUSE Leap 15.1 (i586 x86_64): kio-5.55.0-lp151.3.12.1 kio-core-5.55.0-lp151.3.12.1 kio-core-debuginfo-5.55.0-lp151.3.12.1 kio-debuginfo-5.55.0-lp151.3.12.1 kio-debugsource-5.55.0-lp151.3.12.1 kio-devel-5.55.0-lp151.3.12.1 kio-devel-debuginfo-5.55.0-lp151.3.12.1 - openSUSE Leap 15.1 (x86_64): kio-32bit-5.55.0-lp151.3.12.1 kio-32bit-debuginfo-5.55.0-lp151.3.12.1 kio-core-32bit-5.55.0-lp151.3.12.1 kio-core-32bit-debuginfo-5.55.0-lp151.3.12.1 kio-devel-32bit-5.55.0-lp151.3.12.1 kio-devel-32bit-debuginfo-5.55.0-lp151.3.12.1 - openSUSE Leap 15.1 (noarch): kio-lang-5.55.0-lp151.3.12.1 - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): kio-5.55.0-bp151.4.12.1 kio-core-5.55.0-bp151.4.12.1 kio-core-debuginfo-5.55.0-bp151.4.12.1 kio-debuginfo-5.55.0-bp151.4.12.1 kio-debugsource-5.55.0-bp151.4.12.1 kio-devel-5.55.0-bp151.4.12.1 kio-devel-debuginfo-5.55.0-bp151.4.12.1 - openSUSE Backports SLE-15-SP1 (aarch64_ilp32): kio-64bit-5.55.0-bp151.4.12.1 kio-64bit-debuginfo-5.55.0-bp151.4.12.1 kio-core-64bit-5.55.0-bp151.4.12.1 kio-core-64bit-debuginfo-5.55.0-bp151.4.12.1 kio-devel-64bit-5.55.0-bp151.4.12.1 kio-devel-64bit-debuginfo-5.55.0-bp151.4.12.1 - openSUSE Backports SLE-15-SP1 (noarch): kio-lang-5.55.0-bp151.4.12.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): kio-lang-5.26.0-14.1 kio-lang-5.32.0-11.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): kio-5.26.0-14.1 kio-5.32.0-11.1 kio-core-5.26.0-14.1 kio-core-5.32.0-11.1 kio-core-debuginfo-5.26.0-14.1 kio-core-debuginfo-5.32.0-11.1 kio-debuginfo-5.26.0-14.1 kio-debuginfo-5.32.0-11.1 kio-debugsource-5.26.0-14.1 kio-debugsource-5.32.0-11.1 kio-devel-5.26.0-14.1 kio-devel-5.32.0-11.1 kio-devel-debuginfo-5.26.0-14.1 kio-devel-debuginfo-5.32.0-11.1 References: https://bugzilla.suse.com/1167985 https://bugzilla.suse.com/1174141 https://bugzilla.suse.com/1174169

1 0

openSUSE-RU-2020:1412-1: moderate: Recommended update for kio
by maintenance＠opensuse.org 11 Sep '20

11 Sep '20

openSUSE Recommended Update: Recommended update for kio ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1412-1 Rating: moderate References: #1167985 #1174141 #1174169 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for kio fixes the following issues: - Fix reading the "Accept For Session" cookie setting in the kcookiejar daemon (boo#1167985) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2020-1412=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): kio-lang-5.26.0-14.1 kio-lang-5.32.0-11.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): kio-5.26.0-14.1 kio-5.32.0-11.1 kio-core-5.26.0-14.1 kio-core-5.32.0-11.1 kio-core-debuginfo-5.26.0-14.1 kio-core-debuginfo-5.32.0-11.1 kio-debuginfo-5.26.0-14.1 kio-debuginfo-5.32.0-11.1 kio-debugsource-5.26.0-14.1 kio-debugsource-5.32.0-11.1 kio-devel-5.26.0-14.1 kio-devel-5.32.0-11.1 kio-devel-debuginfo-5.26.0-14.1 kio-devel-debuginfo-5.32.0-11.1 References: https://bugzilla.suse.com/1167985 https://bugzilla.suse.com/1174141 https://bugzilla.suse.com/1174169

1 0

openSUSE-SU-2020:1413-1: moderate: Security update for libjpeg-turbo
by opensuse-security＠opensuse.org 11 Sep '20

11 Sep '20

openSUSE Security Update: Security update for libjpeg-turbo ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1413-1 Rating: moderate References: #1172491 Cross-References: CVE-2020-13790 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libjpeg-turbo fixes the following issues: - CVE-2020-13790: Fixed a heap-based buffer over-read via a malformed PPM input file (bsc#1172491). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1413=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libjpeg-turbo-1.5.3-lp151.6.6.1 libjpeg-turbo-debuginfo-1.5.3-lp151.6.6.1 libjpeg-turbo-debugsource-1.5.3-lp151.6.6.1 libjpeg62-62.2.0-lp151.6.6.1 libjpeg62-debuginfo-62.2.0-lp151.6.6.1 libjpeg62-devel-62.2.0-lp151.6.6.1 libjpeg62-turbo-1.5.3-lp151.6.6.1 libjpeg62-turbo-debugsource-1.5.3-lp151.6.6.1 libjpeg8-8.1.2-lp151.6.6.1 libjpeg8-debuginfo-8.1.2-lp151.6.6.1 libjpeg8-devel-8.1.2-lp151.6.6.1 libturbojpeg0-8.1.2-lp151.6.6.1 libturbojpeg0-debuginfo-8.1.2-lp151.6.6.1 - openSUSE Leap 15.1 (x86_64): libjpeg62-32bit-62.2.0-lp151.6.6.1 libjpeg62-32bit-debuginfo-62.2.0-lp151.6.6.1 libjpeg62-devel-32bit-62.2.0-lp151.6.6.1 libjpeg8-32bit-8.1.2-lp151.6.6.1 libjpeg8-32bit-debuginfo-8.1.2-lp151.6.6.1 libjpeg8-devel-32bit-8.1.2-lp151.6.6.1 libturbojpeg0-32bit-8.1.2-lp151.6.6.1 libturbojpeg0-32bit-debuginfo-8.1.2-lp151.6.6.1 References: https://www.suse.com/security/cve/CVE-2020-13790.html https://bugzilla.suse.com/1172491

1 0