September 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2020:1381-1: moderate: Recommended update for OpenStack clients
by maintenance＠opensuse.org 08 Sep '20

08 Sep '20

openSUSE Recommended Update: Recommended update for OpenStack clients ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1381-1 Rating: moderate References: #1121610 #1174571 #917818 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: Updated OpenStack clients to the latest OpenStack release named Ussuri. This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1381=1 Package List: - openSUSE Leap 15.2 (noarch): python-Sphinx-doc-html-1.7.6-lp152.5.3.1 python-Sphinx-doc-man-common-1.7.6-lp152.5.3.1 python2-Sphinx-1.7.6-lp152.5.3.1 python2-Sphinx-doc-1.7.6-lp152.5.3.1 python2-Sphinx-doc-man-1.7.6-lp152.5.3.1 python2-Sphinx-latex-1.7.6-lp152.5.3.1 python2-python-subunit-1.3.0-lp152.3.3.1 python2-wcwidth-0.1.8-lp152.3.4.1 python3-Sphinx-1.7.6-lp152.5.3.1 python3-Sphinx-doc-1.7.6-lp152.5.3.1 python3-Sphinx-doc-man-1.7.6-lp152.5.3.1 python3-Sphinx-latex-1.7.6-lp152.5.3.1 python3-python-subunit-1.3.0-lp152.3.3.1 python3-wcwidth-0.1.8-lp152.3.4.1 References: https://bugzilla.suse.com/1121610 https://bugzilla.suse.com/1174571 https://bugzilla.suse.com/917818

1 0

openSUSE-RU-2020:1378-1: moderate: Recommended update for steam
by maintenance＠opensuse.org 07 Sep '20

07 Sep '20

openSUSE Recommended Update: Recommended update for steam ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1378-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2:NonFree openSUSE Leap 15.1:NonFree ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for steam fixes the following issues: - Add new Mesa packages to Requires for Tumbleweed - Keep old Requires for Leap maintenance - Use both Steam OpenSSL versions - Update AppStream files - vulkan doesn't exist since Leap 15.2 - libvulkan1-32bit doesn't exist on non-64bit systems - vulkan libraries should be required Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2:NonFree: zypper in -t patch openSUSE-2020-1378=1 - openSUSE Leap 15.1:NonFree: zypper in -t patch openSUSE-2020-1378=1 Package List: - openSUSE Leap 15.2:NonFree (x86_64): steam-1.0.0.66-lp152.2.9.1 steam-devices-1.0.0.66-lp152.2.9.1 - openSUSE Leap 15.1:NonFree (x86_64): steam-1.0.0.66-lp151.3.6.1 steam-devices-1.0.0.66-lp151.3.6.1 References:

1 0

openSUSE-RU-2020:1377-1: important: Recommended update for transactional-update
by maintenance＠opensuse.org 07 Sep '20

07 Sep '20

openSUSE Recommended Update: Recommended update for transactional-update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1377-1 Rating: important References: #1162320 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for transactional-update fixes the following issue: - Mount efivarfs on EFI systems. (bsc#1162320) If the EFI variables are not available, some incorrect parameters will be attached to grub2-install, writing the binary to a wrong location. Due to this, the system fails at reboot with a missing symbol error. This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1377=1 Package List: - openSUSE Leap 15.1 (x86_64): transactional-update-2.15-lp151.2.6.1 transactional-update-debuginfo-2.15-lp151.2.6.1 transactional-update-debugsource-2.15-lp151.2.6.1 - openSUSE Leap 15.1 (noarch): transactional-update-zypp-config-2.15-lp151.2.6.1 References: https://bugzilla.suse.com/1162320

1 0

openSUSE-SU-2020:1379-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 07 Sep '20

07 Sep '20

openSUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1379-1 Rating: important References: #1058115 #1112178 #1136666 #1171558 #1173060 #1175691 #1176069 Cross-References: CVE-2020-14386 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves one vulnerability and has 6 fixes is now available. Description: The openSUSE Leap 15.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-14386: Fixed an overflow in tpacket_rcv in af_packet that could lead to a local privilege escalation ( bsc#1176069). The following non-security bugs were fixed: - bonding: check error value of register_netdevice() immediately (git-fixes). - bonding: check return value of register_netdevice() in bond_newlink() (git-fixes). - hippi: Fix a size used in a 'pci_free_consistent()' in an error handling path (git-fixes). - mlx4: disable device on shutdown (git-fixes). - mlxsw: core: Free EMAD transactions using kfree_rcu() (git-fixes). - mlxsw: core: Increase scope of RCU read-side critical section (git-fixes). - mm, vmstat: reduce zone->lock holding time by /proc/pagetypeinfo (bsc#1175691). - net/mlx5: Fix a bug of using ptp channel index as pin index (git-fixes). - net/mlx5e: Fix error path of device attach (git-fixes). - net: dp83640: fix SIOCSHWTSTAMP to update the struct with actual configuration (git-fixes). - net: smc91x: Fix possible memory leak in smc_drv_probe() (git-fixes). - sched/deadline: Initialize ->dl_boosted (bsc#1112178). - scsi: lpfc: Add and rename a whole bunch of function parameter descriptions (bsc#1171558 bsc#1136666). - scsi: lpfc: Add description for lpfc_release_rpi()'s 'ndlpl param (bsc#1171558 bsc#1136666). - scsi: lpfc: Add missing misc_deregister() for lpfc_init() (bsc#1171558 bsc#1136666). - scsi: lpfc: Ensure variable has the same stipulations as code using it (bsc#1171558 bsc#1136666). - scsi: lpfc: Fix FCoE speed reporting (bsc#1171558 bsc#1136666). - scsi: lpfc: Fix LUN loss after cable pull (bsc#1171558 bsc#1136666). - scsi: lpfc: Fix RSCN timeout due to incorrect gidft counter (bsc#1171558 bsc#1136666). - scsi: lpfc: Fix a bunch of kerneldoc misdemeanors (bsc#1171558 bsc#1136666). - scsi: lpfc: Fix kerneldoc parameter formatting/misnaming/missing issues (bsc#1171558 bsc#1136666). - scsi: lpfc: Fix no message shown for lpfc_hdw_queue out of range value (bsc#1171558 bsc#1136666). - scsi: lpfc: Fix oops when unloading driver while running mds diags (bsc#1171558 bsc#1136666). - scsi: lpfc: Fix retry of PRLI when status indicates its unsupported (bsc#1171558 bsc#1136666). - scsi: lpfc: Fix some function parameter descriptions (bsc#1171558 bsc#1136666). - scsi: lpfc: Fix typo in comment for ULP (bsc#1171558 bsc#1136666). - scsi: lpfc: Fix validation of bsg reply lengths (bsc#1171558 bsc#1136666). - scsi: lpfc: Fix-up around 120 documentation issues (bsc#1171558 bsc#1136666). - scsi: lpfc: Fix-up formatting/docrot where appropriate (bsc#1171558 bsc#1136666). - scsi: lpfc: NVMe remote port devloss_tmo from lldd (bsc#1171558 bsc#1136666 bsc#1173060). - scsi: lpfc: Provide description for lpfc_mem_alloc()'s 'align' param (bsc#1171558 bsc#1136666). - scsi: lpfc: Quieten some printks (bsc#1171558 bsc#1136666). - scsi: lpfc: Remove unused variable 'pg_addr' (bsc#1171558 bsc#1136666). - scsi: lpfc: Update lpfc version to 12.8.0.3 (bsc#1171558 bsc#1136666). - scsi: lpfc: Use __printf() format notation (bsc#1171558 bsc#1136666). - scsi: lpfc: nvmet: Avoid hang / use-after-free again when destroying targetport (bsc#1171558 bsc#1136666). - vxlan: Ensure FDB dump is performed under RCU (git-fixes). - x86/mce/inject: Fix a wrong assignment of i_mce.status (bsc#1112178). - x86/unwind/orc: Fix ORC for newly forked tasks (bsc#1058115). Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1379=1 Package List: - openSUSE Leap 15.1 (noarch): kernel-devel-4.12.14-lp151.28.67.1 kernel-docs-4.12.14-lp151.28.67.3 kernel-docs-html-4.12.14-lp151.28.67.3 kernel-macros-4.12.14-lp151.28.67.1 kernel-source-4.12.14-lp151.28.67.1 kernel-source-vanilla-4.12.14-lp151.28.67.1 - openSUSE Leap 15.1 (x86_64): kernel-debug-4.12.14-lp151.28.67.2 kernel-debug-base-4.12.14-lp151.28.67.2 kernel-debug-base-debuginfo-4.12.14-lp151.28.67.2 kernel-debug-debuginfo-4.12.14-lp151.28.67.2 kernel-debug-debugsource-4.12.14-lp151.28.67.2 kernel-debug-devel-4.12.14-lp151.28.67.2 kernel-debug-devel-debuginfo-4.12.14-lp151.28.67.2 kernel-default-4.12.14-lp151.28.67.2 kernel-default-base-4.12.14-lp151.28.67.2 kernel-default-base-debuginfo-4.12.14-lp151.28.67.2 kernel-default-debuginfo-4.12.14-lp151.28.67.2 kernel-default-debugsource-4.12.14-lp151.28.67.2 kernel-default-devel-4.12.14-lp151.28.67.2 kernel-default-devel-debuginfo-4.12.14-lp151.28.67.2 kernel-kvmsmall-4.12.14-lp151.28.67.2 kernel-kvmsmall-base-4.12.14-lp151.28.67.2 kernel-kvmsmall-base-debuginfo-4.12.14-lp151.28.67.2 kernel-kvmsmall-debuginfo-4.12.14-lp151.28.67.2 kernel-kvmsmall-debugsource-4.12.14-lp151.28.67.2 kernel-kvmsmall-devel-4.12.14-lp151.28.67.2 kernel-kvmsmall-devel-debuginfo-4.12.14-lp151.28.67.2 kernel-obs-build-4.12.14-lp151.28.67.2 kernel-obs-build-debugsource-4.12.14-lp151.28.67.2 kernel-obs-qa-4.12.14-lp151.28.67.2 kernel-syms-4.12.14-lp151.28.67.1 kernel-vanilla-4.12.14-lp151.28.67.2 kernel-vanilla-base-4.12.14-lp151.28.67.2 kernel-vanilla-base-debuginfo-4.12.14-lp151.28.67.2 kernel-vanilla-debuginfo-4.12.14-lp151.28.67.2 kernel-vanilla-debugsource-4.12.14-lp151.28.67.2 kernel-vanilla-devel-4.12.14-lp151.28.67.2 kernel-vanilla-devel-debuginfo-4.12.14-lp151.28.67.2 References: https://www.suse.com/security/cve/CVE-2020-14386.html https://bugzilla.suse.com/1058115 https://bugzilla.suse.com/1112178 https://bugzilla.suse.com/1136666 https://bugzilla.suse.com/1171558 https://bugzilla.suse.com/1173060 https://bugzilla.suse.com/1175691 https://bugzilla.suse.com/1176069

1 0

openSUSE-SU-2020:1354-1: moderate: Security update for php7
by opensuse-security＠opensuse.org 07 Sep '20

07 Sep '20

openSUSE Security Update: Security update for php7 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1354-1 Rating: moderate References: #1173786 #1174010 #1175223 Cross-References: CVE-2020-7068 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update for php7 fixes the following issues: - CVE-2020-7068: Use of freed hash key in the phar_parse_zipfile function (bsc#1175223). - Do not install outdated README.SUSE (bsc#1174010). - Added tmpfiles.d for php-fpm to provide a base for a socket (bsc#1173786). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1354=1 Package List: - openSUSE Leap 15.1 (x86_64): apache2-mod_php7-7.2.5-lp151.6.32.1 apache2-mod_php7-debuginfo-7.2.5-lp151.6.32.1 php7-7.2.5-lp151.6.32.1 php7-bcmath-7.2.5-lp151.6.32.1 php7-bcmath-debuginfo-7.2.5-lp151.6.32.1 php7-bz2-7.2.5-lp151.6.32.1 php7-bz2-debuginfo-7.2.5-lp151.6.32.1 php7-calendar-7.2.5-lp151.6.32.1 php7-calendar-debuginfo-7.2.5-lp151.6.32.1 php7-ctype-7.2.5-lp151.6.32.1 php7-ctype-debuginfo-7.2.5-lp151.6.32.1 php7-curl-7.2.5-lp151.6.32.1 php7-curl-debuginfo-7.2.5-lp151.6.32.1 php7-dba-7.2.5-lp151.6.32.1 php7-dba-debuginfo-7.2.5-lp151.6.32.1 php7-debuginfo-7.2.5-lp151.6.32.1 php7-debugsource-7.2.5-lp151.6.32.1 php7-devel-7.2.5-lp151.6.32.1 php7-dom-7.2.5-lp151.6.32.1 php7-dom-debuginfo-7.2.5-lp151.6.32.1 php7-embed-7.2.5-lp151.6.32.1 php7-embed-debuginfo-7.2.5-lp151.6.32.1 php7-enchant-7.2.5-lp151.6.32.1 php7-enchant-debuginfo-7.2.5-lp151.6.32.1 php7-exif-7.2.5-lp151.6.32.1 php7-exif-debuginfo-7.2.5-lp151.6.32.1 php7-fastcgi-7.2.5-lp151.6.32.1 php7-fastcgi-debuginfo-7.2.5-lp151.6.32.1 php7-fileinfo-7.2.5-lp151.6.32.1 php7-fileinfo-debuginfo-7.2.5-lp151.6.32.1 php7-firebird-7.2.5-lp151.6.32.1 php7-firebird-debuginfo-7.2.5-lp151.6.32.1 php7-fpm-7.2.5-lp151.6.32.1 php7-fpm-debuginfo-7.2.5-lp151.6.32.1 php7-ftp-7.2.5-lp151.6.32.1 php7-ftp-debuginfo-7.2.5-lp151.6.32.1 php7-gd-7.2.5-lp151.6.32.1 php7-gd-debuginfo-7.2.5-lp151.6.32.1 php7-gettext-7.2.5-lp151.6.32.1 php7-gettext-debuginfo-7.2.5-lp151.6.32.1 php7-gmp-7.2.5-lp151.6.32.1 php7-gmp-debuginfo-7.2.5-lp151.6.32.1 php7-iconv-7.2.5-lp151.6.32.1 php7-iconv-debuginfo-7.2.5-lp151.6.32.1 php7-intl-7.2.5-lp151.6.32.1 php7-intl-debuginfo-7.2.5-lp151.6.32.1 php7-json-7.2.5-lp151.6.32.1 php7-json-debuginfo-7.2.5-lp151.6.32.1 php7-ldap-7.2.5-lp151.6.32.1 php7-ldap-debuginfo-7.2.5-lp151.6.32.1 php7-mbstring-7.2.5-lp151.6.32.1 php7-mbstring-debuginfo-7.2.5-lp151.6.32.1 php7-mysql-7.2.5-lp151.6.32.1 php7-mysql-debuginfo-7.2.5-lp151.6.32.1 php7-odbc-7.2.5-lp151.6.32.1 php7-odbc-debuginfo-7.2.5-lp151.6.32.1 php7-opcache-7.2.5-lp151.6.32.1 php7-opcache-debuginfo-7.2.5-lp151.6.32.1 php7-openssl-7.2.5-lp151.6.32.1 php7-openssl-debuginfo-7.2.5-lp151.6.32.1 php7-pcntl-7.2.5-lp151.6.32.1 php7-pcntl-debuginfo-7.2.5-lp151.6.32.1 php7-pdo-7.2.5-lp151.6.32.1 php7-pdo-debuginfo-7.2.5-lp151.6.32.1 php7-pgsql-7.2.5-lp151.6.32.1 php7-pgsql-debuginfo-7.2.5-lp151.6.32.1 php7-phar-7.2.5-lp151.6.32.1 php7-phar-debuginfo-7.2.5-lp151.6.32.1 php7-posix-7.2.5-lp151.6.32.1 php7-posix-debuginfo-7.2.5-lp151.6.32.1 php7-readline-7.2.5-lp151.6.32.1 php7-readline-debuginfo-7.2.5-lp151.6.32.1 php7-shmop-7.2.5-lp151.6.32.1 php7-shmop-debuginfo-7.2.5-lp151.6.32.1 php7-snmp-7.2.5-lp151.6.32.1 php7-snmp-debuginfo-7.2.5-lp151.6.32.1 php7-soap-7.2.5-lp151.6.32.1 php7-soap-debuginfo-7.2.5-lp151.6.32.1 php7-sockets-7.2.5-lp151.6.32.1 php7-sockets-debuginfo-7.2.5-lp151.6.32.1 php7-sodium-7.2.5-lp151.6.32.1 php7-sodium-debuginfo-7.2.5-lp151.6.32.1 php7-sqlite-7.2.5-lp151.6.32.1 php7-sqlite-debuginfo-7.2.5-lp151.6.32.1 php7-sysvmsg-7.2.5-lp151.6.32.1 php7-sysvmsg-debuginfo-7.2.5-lp151.6.32.1 php7-sysvsem-7.2.5-lp151.6.32.1 php7-sysvsem-debuginfo-7.2.5-lp151.6.32.1 php7-sysvshm-7.2.5-lp151.6.32.1 php7-sysvshm-debuginfo-7.2.5-lp151.6.32.1 php7-test-7.2.5-lp151.6.32.1 php7-tidy-7.2.5-lp151.6.32.1 php7-tidy-debuginfo-7.2.5-lp151.6.32.1 php7-tokenizer-7.2.5-lp151.6.32.1 php7-tokenizer-debuginfo-7.2.5-lp151.6.32.1 php7-wddx-7.2.5-lp151.6.32.1 php7-wddx-debuginfo-7.2.5-lp151.6.32.1 php7-xmlreader-7.2.5-lp151.6.32.1 php7-xmlreader-debuginfo-7.2.5-lp151.6.32.1 php7-xmlrpc-7.2.5-lp151.6.32.1 php7-xmlrpc-debuginfo-7.2.5-lp151.6.32.1 php7-xmlwriter-7.2.5-lp151.6.32.1 php7-xmlwriter-debuginfo-7.2.5-lp151.6.32.1 php7-xsl-7.2.5-lp151.6.32.1 php7-xsl-debuginfo-7.2.5-lp151.6.32.1 php7-zip-7.2.5-lp151.6.32.1 php7-zip-debuginfo-7.2.5-lp151.6.32.1 php7-zlib-7.2.5-lp151.6.32.1 php7-zlib-debuginfo-7.2.5-lp151.6.32.1 - openSUSE Leap 15.1 (noarch): php7-pear-7.2.5-lp151.6.32.1 php7-pear-Archive_Tar-7.2.5-lp151.6.32.1 References: https://www.suse.com/security/cve/CVE-2020-7068.html https://bugzilla.suse.com/1173786 https://bugzilla.suse.com/1174010 https://bugzilla.suse.com/1175223

1 0

openSUSE-SU-2020:1368-1: moderate: Security update for libX11
by opensuse-security＠opensuse.org 07 Sep '20

07 Sep '20

openSUSE Security Update: Security update for libX11 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1368-1 Rating: moderate References: #1175239 Cross-References: CVE-2020-14363 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libX11 fixes the following issues: - CVE-2020-14363: Fix an integer overflow in init_om() (bsc#1175239). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1368=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libX11-6-1.6.5-lp151.4.9.1 libX11-6-debuginfo-1.6.5-lp151.4.9.1 libX11-debugsource-1.6.5-lp151.4.9.1 libX11-devel-1.6.5-lp151.4.9.1 libX11-xcb1-1.6.5-lp151.4.9.1 libX11-xcb1-debuginfo-1.6.5-lp151.4.9.1 - openSUSE Leap 15.1 (x86_64): libX11-6-32bit-1.6.5-lp151.4.9.1 libX11-6-32bit-debuginfo-1.6.5-lp151.4.9.1 libX11-devel-32bit-1.6.5-lp151.4.9.1 libX11-xcb1-32bit-1.6.5-lp151.4.9.1 libX11-xcb1-32bit-debuginfo-1.6.5-lp151.4.9.1 - openSUSE Leap 15.1 (noarch): libX11-data-1.6.5-lp151.4.9.1 References: https://www.suse.com/security/cve/CVE-2020-14363.html https://bugzilla.suse.com/1175239

1 0

openSUSE-SU-2020:1370-1: moderate: Security update for libX11
by opensuse-security＠opensuse.org 07 Sep '20

07 Sep '20

openSUSE Security Update: Security update for libX11 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1370-1 Rating: moderate References: #1175239 Cross-References: CVE-2020-14363 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libX11 fixes the following issues: - CVE-2020-14363: Fix an integer overflow in init_om() (bsc#1175239). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1370=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libX11-6-1.6.5-lp152.5.9.1 libX11-6-debuginfo-1.6.5-lp152.5.9.1 libX11-debugsource-1.6.5-lp152.5.9.1 libX11-devel-1.6.5-lp152.5.9.1 libX11-xcb1-1.6.5-lp152.5.9.1 libX11-xcb1-debuginfo-1.6.5-lp152.5.9.1 - openSUSE Leap 15.2 (x86_64): libX11-6-32bit-1.6.5-lp152.5.9.1 libX11-6-32bit-debuginfo-1.6.5-lp152.5.9.1 libX11-devel-32bit-1.6.5-lp152.5.9.1 libX11-xcb1-32bit-1.6.5-lp152.5.9.1 libX11-xcb1-32bit-debuginfo-1.6.5-lp152.5.9.1 - openSUSE Leap 15.2 (noarch): libX11-data-1.6.5-lp152.5.9.1 References: https://www.suse.com/security/cve/CVE-2020-14363.html https://bugzilla.suse.com/1175239

1 0

openSUSE-RU-2020:1364-1: moderate: Recommended update for tomcat
by maintenance＠opensuse.org 07 Sep '20

07 Sep '20

openSUSE Recommended Update: Recommended update for tomcat ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1364-1 Rating: moderate References: #1092163 #1172562 #1173103 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for tomcat fixes the following issues: - Fixed the package alternatives for tomcat-servlet-4_0-api to use /usr/share/java/servlet.jar instead of /usr/share/java/tomcat-servlet.jar - We kept /usr/share/java/tomcat-servlet.jar as a symlink for compatibility reasons (bsc#1092163) - Removed write permissions on several files and directories for the tomcat group (bsc#1172562) - Changed the tomcat.pid location from /var/run to /run (bsc#1173103) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1364=1 Package List: - openSUSE Leap 15.1 (noarch): tomcat-9.0.36-lp151.3.30.1 tomcat-admin-webapps-9.0.36-lp151.3.30.1 tomcat-docs-webapp-9.0.36-lp151.3.30.1 tomcat-el-3_0-api-9.0.36-lp151.3.30.1 tomcat-embed-9.0.36-lp151.3.30.1 tomcat-javadoc-9.0.36-lp151.3.30.1 tomcat-jsp-2_3-api-9.0.36-lp151.3.30.1 tomcat-jsvc-9.0.36-lp151.3.30.1 tomcat-lib-9.0.36-lp151.3.30.1 tomcat-servlet-4_0-api-9.0.36-lp151.3.30.1 tomcat-webapps-9.0.36-lp151.3.30.1 References: https://bugzilla.suse.com/1092163 https://bugzilla.suse.com/1172562 https://bugzilla.suse.com/1173103

1 0

openSUSE-SU-2020:1369-1: critical: Security update for squid
by opensuse-security＠opensuse.org 07 Sep '20

07 Sep '20

openSUSE Security Update: Security update for squid ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1369-1 Rating: critical References: #1173455 #1175664 #1175665 #1175671 Cross-References: CVE-2020-15049 CVE-2020-15810 CVE-2020-15811 CVE-2020-24606 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for squid fixes the following issues: squid was updated to version 4.13: - CVE-2020-24606: Fix livelocking in peerDigestHandleReply (bsc#1175671). - CVE-2020-15811: Improve Transfer-Encoding handling (bsc#1175665). - CVE-2020-15810: Enforce token characters for field-name (bsc#1175664). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1369=1 Package List: - openSUSE Leap 15.2 (x86_64): squid-4.13-lp152.2.6.1 squid-debuginfo-4.13-lp152.2.6.1 squid-debugsource-4.13-lp152.2.6.1 References: https://www.suse.com/security/cve/CVE-2020-15049.html https://www.suse.com/security/cve/CVE-2020-15810.html https://www.suse.com/security/cve/CVE-2020-15811.html https://www.suse.com/security/cve/CVE-2020-24606.html https://bugzilla.suse.com/1173455 https://bugzilla.suse.com/1175664 https://bugzilla.suse.com/1175665 https://bugzilla.suse.com/1175671

1 0

openSUSE-RU-2020:1351-1: moderate: Recommended update for python3-ec2imgutils
by maintenance＠opensuse.org 07 Sep '20

07 Sep '20

openSUSE Recommended Update: Recommended update for python3-ec2imgutils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1351-1 Rating: moderate References: #1172579 #1172948 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for python3-ec2imgutils contains the following fixes: - Fixed an error, when an image gets deprecated using its name (bsc#1172948) - Added new utility ec2listimg to list images owned by the specified account - Fixed an error when an image is not allowed to be copied and shared with a specific account (bsc#1172579) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1351=1 Package List: - openSUSE Leap 15.1 (noarch): python3-ec2imgutils-9.0.0-lp151.2.15.1 References: https://bugzilla.suse.com/1172579 https://bugzilla.suse.com/1172948

1 0