September 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2020:1365-1: moderate: Recommended update for 389-ds
by maintenance＠opensuse.org 07 Sep '20

07 Sep '20

openSUSE Recommended Update: Recommended update for 389-ds ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1365-1 Rating: moderate References: #1174057 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for 389-ds fixes the following issues: Update from version 1.4.3.9~git0.3eb8617f6 to version 1.4.3.12~git0.9bc042902 - It should not be allowed to delete Managed Entry manually - SSL alert: The value of sslVersionMax "TLS1.3" is higher than the supported version - Fix instance name length for interactive install - JSON Error output has redundant messages - If dbhome directory is set online backup fails - Separate the BDB backend monitors - entryUSN is duplicated after memberOf operation - Fix disk_mon_check_diskspace types - Resolve upstream stability and fix rollup. (bsc#1174057) - Add option to reject internal unindexed searches - dsidm ou delete fails - add more logconv stats for the new access log keywords - db2ldif crashes when LDIF file can't be accessed - add new access log keywords for wtime and optime - Fix Allowed and Denied Ciphers lists - WebUI - UI - attr uniqueness - selecting empty subtree crashes cockpit - log warning when thread number is very different from autotuned value - Reindex task may create abandoned index file - Log an error when a search is fully unindexed - fix SLE15.2 install issps - dsctl fails with instance names that contain slapd- - Memory leaks in disk monitoring - nsIndexIDListScanLimit accepts any value - A distinguished value can be missing in an entry - Healthcheck should look for notes=A/F in access log - Set the default minimum worker threads - pwdReset can be modified by a user - Correct numSubordinates value for cn=monitor - dsctl and dsidm do not errors correctly when using JSON - Winsync setting winSyncWindowsFilter not working as expected - improve autotune defaults - Add option to healthcheck to list all the lint reports - UI - improve modal validation when creating an instance This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1365=1 Package List: - openSUSE Leap 15.2 (x86_64): 389-ds-1.4.3.12~git0.9bc042902-lp152.2.6.1 389-ds-debuginfo-1.4.3.12~git0.9bc042902-lp152.2.6.1 389-ds-debugsource-1.4.3.12~git0.9bc042902-lp152.2.6.1 389-ds-devel-1.4.3.12~git0.9bc042902-lp152.2.6.1 389-ds-snmp-1.4.3.12~git0.9bc042902-lp152.2.6.1 389-ds-snmp-debuginfo-1.4.3.12~git0.9bc042902-lp152.2.6.1 lib389-1.4.3.12~git0.9bc042902-lp152.2.6.1 libsvrcore0-1.4.3.12~git0.9bc042902-lp152.2.6.1 libsvrcore0-debuginfo-1.4.3.12~git0.9bc042902-lp152.2.6.1 References: https://bugzilla.suse.com/1174057

1 0

openSUSE-RU-2020:1362-1: moderate: Recommended update for python-kiwi
by maintenance＠opensuse.org 07 Sep '20

07 Sep '20

openSUSE Recommended Update: Recommended update for python-kiwi ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1362-1 Rating: moderate References: #1096738 #1165730 #1172908 #1173226 #1173356 #1174009 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 6 recommended fixes can now be installed. Description: This update for python-kiwi contains the following fixes: - Bump version up to 9.21.7: This version upgrade includes several fixes: * Skip filesystem check for XFS prior xfs_grow running xfs_repair check isn't strictly necessary before resizing, and in some cases it may even prevent resizing by giving an error that would be cleared through mounting the fs (e.g. when the fs wasn't cleanly umounted, and thus letting xfs recover and replay its journal). Given that xfs can only grow online (while being mounted), this is sufficient to ensure that the fs is in a state where it can be resized. This is related to bsc#1174009. (bsc#1174009) * Fixed grub setup in EFI/BOOT directory kiwi copied the same grub.cfg file as it exists in boot/grub2 to the efi path. This is wrong as the setup in the efi boot directory is used to enable normal grub loading and not providing the user grub configuration. In addition the changes here makes sure that the early grub boot code is placed into the system in any EFI case except for secure boot when shim-install is present. If shim-install is present it also creates the early grub boot setup such that kiwi doesn't have to do it. This Fixes #1491 and Fixes bsc#1172908. (bsc#1172908) * Use rsync in inplace transfer mode Using the --inplace option in rsync helps to save space on syncing the rootfs data and prevents e.g OBS workers from running out of VM space when transfering root filesystem data. Also using --inplace allows to keep hardlinks intact. This is related to bsc#1096738. (bsc#1096738) * Don't keep copy of grub2-install in the system To prevent shim-install from calling grub2-install in uefi mode kiwi temporary replaces the tool by a noop. This acts as a workaround for an issue in shim-install. However the workaround left a file copy of grub2-install in the system which should not happen. This commit Fixes bsc#1173226 and Fixes #1490. (bsc#1173226) * Fixes live ISOs This commit fixes iso images. Due to a change introduced in c7ed1cf live ISOs were no longer booting as the rootfs.img filesystem was copied to the squashfs container while being still mounted. Because of that, at boot time, it refused to mount. This commit adds umount method for the filesystem base class, so it can be umounted before deleting the instance. Fixes #1489 and bsc#1173356. (bsc#1173356) * Support grub timeout_style parameter Grub supports a style setting that influences the display of the menu depending on the configured timeout value. With this patch kiwi allows to specify the style via a new bootloader parameter named timeout_style="hidden|countdown". If not set the grub default applies which shows the menu in any case. This Fixes bsc#1165730 and Fixes #1404. (bsc#1165730) * Use auto video mode as default for grub An explicit video mode 800x600 was used for grub if no video mode setup exists in the XML description. For grub this should better result in the auto mode. Related to bsc#1165730. (bsc#1165730) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1362=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): dracut-kiwi-lib-9.21.7-lp152.5.7.1 dracut-kiwi-live-9.21.7-lp152.5.7.1 dracut-kiwi-oem-dump-9.21.7-lp152.5.7.1 dracut-kiwi-oem-repart-9.21.7-lp152.5.7.1 dracut-kiwi-overlay-9.21.7-lp152.5.7.1 kiwi-man-pages-9.21.7-lp152.5.7.1 kiwi-pxeboot-9.21.7-lp152.5.7.1 kiwi-tools-9.21.7-lp152.5.7.1 kiwi-tools-debuginfo-9.21.7-lp152.5.7.1 python-kiwi-debugsource-9.21.7-lp152.5.7.1 python3-kiwi-9.21.7-lp152.5.7.1 References: https://bugzilla.suse.com/1096738 https://bugzilla.suse.com/1165730 https://bugzilla.suse.com/1172908 https://bugzilla.suse.com/1173226 https://bugzilla.suse.com/1173356 https://bugzilla.suse.com/1174009

1 0

openSUSE-RU-2020:1361-1: moderate: Recommended update for iputils
by maintenance＠opensuse.org 07 Sep '20

07 Sep '20

openSUSE Recommended Update: Recommended update for iputils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1361-1 Rating: moderate References: #927831 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for iputils fixes the following issue: - ping: Remove workaround for bug in IP_RECVERR on raw sockets. (bsc#927831) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1361=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): iputils-debuginfo-s20161105-lp152.8.3.1 iputils-debugsource-s20161105-lp152.8.3.1 iputils-s20161105-lp152.8.3.1 rarpd-debuginfo-s20161105-lp152.8.3.1 rarpd-s20161105-lp152.8.3.1 References: https://bugzilla.suse.com/927831

1 0

openSUSE-RU-2020:1352-1: moderate: Recommended update for yast2-rmt
by maintenance＠opensuse.org 07 Sep '20

07 Sep '20

openSUSE Recommended Update: Recommended update for yast2-rmt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1352-1 Rating: moderate References: #1171555 #1172674 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for yast2-rmt fixes the following issues: - Handle Common Name length. (bsc#1172674) - Changed placeholders in translatable strings to support better the 'gettext' language format tags. (bsc#1171555) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1352=1 Package List: - openSUSE Leap 15.1 (noarch): yast2-rmt-1.3.2-lp151.2.9.1 References: https://bugzilla.suse.com/1171555 https://bugzilla.suse.com/1172674

1 0

openSUSE-RU-2020:1360-1: moderate: Recommended update for nfs-utils
by maintenance＠opensuse.org 07 Sep '20

07 Sep '20

openSUSE Recommended Update: Recommended update for nfs-utils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1360-1 Rating: moderate References: #1174260 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for nfs-utils fixes the following issues: - Fix a bug when concurrent 'gssd' requests arrive from kernel, causing hanging NFS mounts. (bsc#1174260) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1360=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): nfs-client-2.1.1-lp152.9.3.1 nfs-client-debuginfo-2.1.1-lp152.9.3.1 nfs-doc-2.1.1-lp152.9.3.1 nfs-kernel-server-2.1.1-lp152.9.3.1 nfs-kernel-server-debuginfo-2.1.1-lp152.9.3.1 nfs-utils-debuginfo-2.1.1-lp152.9.3.1 nfs-utils-debugsource-2.1.1-lp152.9.3.1 References: https://bugzilla.suse.com/1174260

1 0

openSUSE-SU-2020:1356-1: moderate: Security update for php7
by opensuse-security＠opensuse.org 07 Sep '20

07 Sep '20

openSUSE Security Update: Security update for php7 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1356-1 Rating: moderate References: #1175223 Cross-References: CVE-2020-7068 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for php7 fixes the following issues: - CVE-2020-7068: Use of freed hash key in the phar_parse_zipfile function (bsc#1175223). This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1356=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): apache2-mod_php7-7.4.6-lp152.2.6.1 apache2-mod_php7-debuginfo-7.4.6-lp152.2.6.1 php7-7.4.6-lp152.2.6.1 php7-bcmath-7.4.6-lp152.2.6.1 php7-bcmath-debuginfo-7.4.6-lp152.2.6.1 php7-bz2-7.4.6-lp152.2.6.1 php7-bz2-debuginfo-7.4.6-lp152.2.6.1 php7-calendar-7.4.6-lp152.2.6.1 php7-calendar-debuginfo-7.4.6-lp152.2.6.1 php7-ctype-7.4.6-lp152.2.6.1 php7-ctype-debuginfo-7.4.6-lp152.2.6.1 php7-curl-7.4.6-lp152.2.6.1 php7-curl-debuginfo-7.4.6-lp152.2.6.1 php7-dba-7.4.6-lp152.2.6.1 php7-dba-debuginfo-7.4.6-lp152.2.6.1 php7-debuginfo-7.4.6-lp152.2.6.1 php7-debugsource-7.4.6-lp152.2.6.1 php7-devel-7.4.6-lp152.2.6.1 php7-dom-7.4.6-lp152.2.6.1 php7-dom-debuginfo-7.4.6-lp152.2.6.1 php7-embed-7.4.6-lp152.2.6.1 php7-embed-debuginfo-7.4.6-lp152.2.6.1 php7-enchant-7.4.6-lp152.2.6.1 php7-enchant-debuginfo-7.4.6-lp152.2.6.1 php7-exif-7.4.6-lp152.2.6.1 php7-exif-debuginfo-7.4.6-lp152.2.6.1 php7-fastcgi-7.4.6-lp152.2.6.1 php7-fastcgi-debuginfo-7.4.6-lp152.2.6.1 php7-fileinfo-7.4.6-lp152.2.6.1 php7-fileinfo-debuginfo-7.4.6-lp152.2.6.1 php7-firebird-7.4.6-lp152.2.6.1 php7-firebird-debuginfo-7.4.6-lp152.2.6.1 php7-fpm-7.4.6-lp152.2.6.1 php7-fpm-debuginfo-7.4.6-lp152.2.6.1 php7-ftp-7.4.6-lp152.2.6.1 php7-ftp-debuginfo-7.4.6-lp152.2.6.1 php7-gd-7.4.6-lp152.2.6.1 php7-gd-debuginfo-7.4.6-lp152.2.6.1 php7-gettext-7.4.6-lp152.2.6.1 php7-gettext-debuginfo-7.4.6-lp152.2.6.1 php7-gmp-7.4.6-lp152.2.6.1 php7-gmp-debuginfo-7.4.6-lp152.2.6.1 php7-iconv-7.4.6-lp152.2.6.1 php7-iconv-debuginfo-7.4.6-lp152.2.6.1 php7-intl-7.4.6-lp152.2.6.1 php7-intl-debuginfo-7.4.6-lp152.2.6.1 php7-json-7.4.6-lp152.2.6.1 php7-json-debuginfo-7.4.6-lp152.2.6.1 php7-ldap-7.4.6-lp152.2.6.1 php7-ldap-debuginfo-7.4.6-lp152.2.6.1 php7-mbstring-7.4.6-lp152.2.6.1 php7-mbstring-debuginfo-7.4.6-lp152.2.6.1 php7-mysql-7.4.6-lp152.2.6.1 php7-mysql-debuginfo-7.4.6-lp152.2.6.1 php7-odbc-7.4.6-lp152.2.6.1 php7-odbc-debuginfo-7.4.6-lp152.2.6.1 php7-opcache-7.4.6-lp152.2.6.1 php7-opcache-debuginfo-7.4.6-lp152.2.6.1 php7-openssl-7.4.6-lp152.2.6.1 php7-openssl-debuginfo-7.4.6-lp152.2.6.1 php7-pcntl-7.4.6-lp152.2.6.1 php7-pcntl-debuginfo-7.4.6-lp152.2.6.1 php7-pdo-7.4.6-lp152.2.6.1 php7-pdo-debuginfo-7.4.6-lp152.2.6.1 php7-pgsql-7.4.6-lp152.2.6.1 php7-pgsql-debuginfo-7.4.6-lp152.2.6.1 php7-phar-7.4.6-lp152.2.6.1 php7-phar-debuginfo-7.4.6-lp152.2.6.1 php7-posix-7.4.6-lp152.2.6.1 php7-posix-debuginfo-7.4.6-lp152.2.6.1 php7-readline-7.4.6-lp152.2.6.1 php7-readline-debuginfo-7.4.6-lp152.2.6.1 php7-shmop-7.4.6-lp152.2.6.1 php7-shmop-debuginfo-7.4.6-lp152.2.6.1 php7-snmp-7.4.6-lp152.2.6.1 php7-snmp-debuginfo-7.4.6-lp152.2.6.1 php7-soap-7.4.6-lp152.2.6.1 php7-soap-debuginfo-7.4.6-lp152.2.6.1 php7-sockets-7.4.6-lp152.2.6.1 php7-sockets-debuginfo-7.4.6-lp152.2.6.1 php7-sodium-7.4.6-lp152.2.6.1 php7-sodium-debuginfo-7.4.6-lp152.2.6.1 php7-sqlite-7.4.6-lp152.2.6.1 php7-sqlite-debuginfo-7.4.6-lp152.2.6.1 php7-sysvmsg-7.4.6-lp152.2.6.1 php7-sysvmsg-debuginfo-7.4.6-lp152.2.6.1 php7-sysvsem-7.4.6-lp152.2.6.1 php7-sysvsem-debuginfo-7.4.6-lp152.2.6.1 php7-sysvshm-7.4.6-lp152.2.6.1 php7-sysvshm-debuginfo-7.4.6-lp152.2.6.1 php7-test-7.4.6-lp152.2.6.1 php7-tidy-7.4.6-lp152.2.6.1 php7-tidy-debuginfo-7.4.6-lp152.2.6.1 php7-tokenizer-7.4.6-lp152.2.6.1 php7-tokenizer-debuginfo-7.4.6-lp152.2.6.1 php7-xmlreader-7.4.6-lp152.2.6.1 php7-xmlreader-debuginfo-7.4.6-lp152.2.6.1 php7-xmlrpc-7.4.6-lp152.2.6.1 php7-xmlrpc-debuginfo-7.4.6-lp152.2.6.1 php7-xmlwriter-7.4.6-lp152.2.6.1 php7-xmlwriter-debuginfo-7.4.6-lp152.2.6.1 php7-xsl-7.4.6-lp152.2.6.1 php7-xsl-debuginfo-7.4.6-lp152.2.6.1 php7-zip-7.4.6-lp152.2.6.1 php7-zip-debuginfo-7.4.6-lp152.2.6.1 php7-zlib-7.4.6-lp152.2.6.1 php7-zlib-debuginfo-7.4.6-lp152.2.6.1 References: https://www.suse.com/security/cve/CVE-2020-7068.html https://bugzilla.suse.com/1175223

1 0

openSUSE-SU-2020:1359-1: moderate: Security update for curl
by opensuse-security＠opensuse.org 07 Sep '20

07 Sep '20

openSUSE Security Update: Security update for curl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1359-1 Rating: moderate References: #1175109 Cross-References: CVE-2020-8231 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for curl fixes the following issues: - An application that performs multiple requests with libcurl's multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in rare circumstances experience that when subsequently using the setup connect-only transfer, libcurl will pick and use the wrong connection and instead pick another one the application has created since then. [bsc#1175109, CVE-2020-8231] This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1359=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): curl-7.66.0-lp152.3.6.1 curl-debuginfo-7.66.0-lp152.3.6.1 curl-debugsource-7.66.0-lp152.3.6.1 libcurl-devel-7.66.0-lp152.3.6.1 libcurl4-7.66.0-lp152.3.6.1 libcurl4-debuginfo-7.66.0-lp152.3.6.1 - openSUSE Leap 15.2 (x86_64): libcurl-devel-32bit-7.66.0-lp152.3.6.1 libcurl4-32bit-7.66.0-lp152.3.6.1 libcurl4-32bit-debuginfo-7.66.0-lp152.3.6.1 References: https://www.suse.com/security/cve/CVE-2020-8231.html https://bugzilla.suse.com/1175109

1 0

openSUSE-RU-2020:1372-1: moderate: Recommended update for python3-ec2imgutils
by maintenance＠opensuse.org 07 Sep '20

07 Sep '20

openSUSE Recommended Update: Recommended update for python3-ec2imgutils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1372-1 Rating: moderate References: #1172579 #1172948 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for python3-ec2imgutils contains the following fixes: - Fixed an error, when an image gets deprecated using its name (bsc#1172948) - Added new utility ec2listimg to list images owned by the specified account - Fixed an error when an image is not allowed to be copied and shared with a specific account (bsc#1172579) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1372=1 Package List: - openSUSE Leap 15.2 (noarch): python3-ec2imgutils-9.0.0-lp152.2.3.1 References: https://bugzilla.suse.com/1172579 https://bugzilla.suse.com/1172948

1 0

openSUSE-SU-2020:1376-1: important: Security update for xorg-x11-server
by opensuse-security＠opensuse.org 07 Sep '20

07 Sep '20

openSUSE Security Update: Security update for xorg-x11-server ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1376-1 Rating: important References: #1174910 #1174913 Cross-References: CVE-2020-14361 CVE-2020-14362 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for xorg-x11-server fixes the following issues: - CVE-2020-14361: Fix XkbSelectEvents() integer underflow (bsc#1174910 ZDI-CAN-11573). - CVE-2020-14362: Fix XRecordRegisterClients() Integer underflow (bsc#1174913 ZDI-CAN-11574). This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1376=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): xorg-x11-server-1.20.3-lp152.8.6.1 xorg-x11-server-debuginfo-1.20.3-lp152.8.6.1 xorg-x11-server-debugsource-1.20.3-lp152.8.6.1 xorg-x11-server-extra-1.20.3-lp152.8.6.1 xorg-x11-server-extra-debuginfo-1.20.3-lp152.8.6.1 xorg-x11-server-sdk-1.20.3-lp152.8.6.1 xorg-x11-server-source-1.20.3-lp152.8.6.1 xorg-x11-server-wayland-1.20.3-lp152.8.6.1 xorg-x11-server-wayland-debuginfo-1.20.3-lp152.8.6.1 References: https://www.suse.com/security/cve/CVE-2020-14361.html https://www.suse.com/security/cve/CVE-2020-14362.html https://bugzilla.suse.com/1174910 https://bugzilla.suse.com/1174913

1 0

openSUSE-SU-2020:1374-1: important: Security update for xorg-x11-server
by opensuse-security＠opensuse.org 07 Sep '20

07 Sep '20

openSUSE Security Update: Security update for xorg-x11-server ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1374-1 Rating: important References: #1174910 #1174913 Cross-References: CVE-2020-14361 CVE-2020-14362 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for xorg-x11-server fixes the following issues: - CVE-2020-14361: Fix XkbSelectEvents() integer underflow (bsc#1174910 ZDI-CAN-11573). - CVE-2020-14362: Fix XRecordRegisterClients() Integer underflow (bsc#1174913 ZDI-CAN-11574). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1374=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): xorg-x11-server-1.20.3-lp151.4.6.1 xorg-x11-server-debuginfo-1.20.3-lp151.4.6.1 xorg-x11-server-debugsource-1.20.3-lp151.4.6.1 xorg-x11-server-extra-1.20.3-lp151.4.6.1 xorg-x11-server-extra-debuginfo-1.20.3-lp151.4.6.1 xorg-x11-server-sdk-1.20.3-lp151.4.6.1 xorg-x11-server-source-1.20.3-lp151.4.6.1 xorg-x11-server-wayland-1.20.3-lp151.4.6.1 xorg-x11-server-wayland-debuginfo-1.20.3-lp151.4.6.1 References: https://www.suse.com/security/cve/CVE-2020-14361.html https://www.suse.com/security/cve/CVE-2020-14362.html https://bugzilla.suse.com/1174910 https://bugzilla.suse.com/1174913

1 0