September 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2020:1546-1: moderate: Recommended update for budgie-screensaver
by maintenance＠opensuse.org 26 Sep '20

26 Sep '20

openSUSE Recommended Update: Recommended update for budgie-screensaver ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1546-1 Rating: moderate References: #444157 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for budgie-screensaver fixes the following issues: - Initial packaging version 20190923 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1546=1 Package List: - openSUSE Leap 15.2 (x86_64): budgie-screensaver-20190923-lp152.2.1 budgie-screensaver-debuginfo-20190923-lp152.2.1 budgie-screensaver-debugsource-20190923-lp152.2.1 - openSUSE Leap 15.2 (noarch): budgie-screensaver-lang-20190923-lp152.2.1 References: https://bugzilla.suse.com/444157

1 0

openSUSE-RU-2020:1545-1: moderate: Recommended update for cifs-utils
by maintenance＠opensuse.org 26 Sep '20

26 Sep '20

openSUSE Recommended Update: Recommended update for cifs-utils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1545-1 Rating: moderate References: #1130528 #1132087 #1136031 #1149164 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for cifs-utils fixes the following issues: Update cifs-utils 6.9; (bsc#1132087); (bsc#1136031). * follow SMB default version changes in the kernel. * adds fixes for Azure * new smbinfo utility - Fix double-free in mount.cifs; (bsc#1149164). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1545=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): cifs-utils-6.9-lp151.4.6.1 cifs-utils-debuginfo-6.9-lp151.4.6.1 cifs-utils-debugsource-6.9-lp151.4.6.1 cifs-utils-devel-6.9-lp151.4.6.1 pam_cifscreds-6.9-lp151.4.6.1 pam_cifscreds-debuginfo-6.9-lp151.4.6.1 References: https://bugzilla.suse.com/1130528 https://bugzilla.suse.com/1132087 https://bugzilla.suse.com/1136031 https://bugzilla.suse.com/1149164

1 0

openSUSE-SU-2020:1542-1: important: Security update for chromium
by opensuse-security＠opensuse.org 26 Sep '20

26 Sep '20

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1542-1 Rating: important References: #1176791 Cross-References: CVE-2020-15960 CVE-2020-15961 CVE-2020-15962 CVE-2020-15963 CVE-2020-15964 CVE-2020-15965 CVE-2020-15966 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: This update for chromium fixes the following issues: Chromium was updated to 85.0.4183.121 (boo#1176791): - CVE-2020-15960: Out of bounds read in storage - CVE-2020-15961: Insufficient policy enforcement in extensions - CVE-2020-15962: Insufficient policy enforcement in serial - CVE-2020-15963: Insufficient policy enforcement in extensions - CVE-2020-15965: Out of bounds write in V8 - CVE-2020-15966: Insufficient policy enforcement in extensions - CVE-2020-15964: Insufficient data validation in media This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1542=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 x86_64): chromedriver-85.0.4183.121-bp151.3.110.1 chromium-85.0.4183.121-bp151.3.110.1 References: https://www.suse.com/security/cve/CVE-2020-15960.html https://www.suse.com/security/cve/CVE-2020-15961.html https://www.suse.com/security/cve/CVE-2020-15962.html https://www.suse.com/security/cve/CVE-2020-15963.html https://www.suse.com/security/cve/CVE-2020-15964.html https://www.suse.com/security/cve/CVE-2020-15965.html https://www.suse.com/security/cve/CVE-2020-15966.html https://bugzilla.suse.com/1176791

1 0

openSUSE-RU-2020:1541-1: moderate: Recommended update for restic
by maintenance＠opensuse.org 26 Sep '20

26 Sep '20

openSUSE Recommended Update: Recommended update for restic ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1541-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 openSUSE Backports SLE-15-SP2 openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for restic fixes the following issues: restic was updated to 0.10.0. https://github.com/restic/restic/releases/tag/v0.10.0 See installed /usr/share/doc/packages/restic/CHANGELOG.md. Update to 0.9.6. https://github.com/restic/restic/releases/tag/v0.9.6 See installed /usr/share/doc/packages/restic/CHANGELOG.md. Fixes: * Allow absolute path for filename when backing up from stdin * Save files with invalid timestamps * Read fresh metadata for unmodified files * Add upper bound for t in --read-data-subset=n/t * Check errors when loading index files Enhancements: + Allow multiple retries for interactive password input + Make --group-by accept both singular and plural + Add option to configure S3 region Update to 0.9.5. https://github.com/restic/restic/releases/tag/v0.9.5 See installed /usr/share/doc/packages/restic/CHANGELOG.md. Short-log: Fixes: * Return error when no bytes could be read from stdin * Don't cancel timeout after 30 seconds for self-update * Fix reading passwords from stdin * Don't abort the find command when a tree can't be loaded Enhancements: + Add case insensitive include & exclude options + Support streaming JSON output for backup + Add Openstack application credential auth for Swift + Add --json support to forget command + Add group-by option to snapshots command + Ability to dump folders to tar via stdout + Return error if no bytes could be read for backup --stdin + Add --ignore-inode option to backup cmd + Add config option to set S3 storage class Update to 0.9.4. https://github.com/restic/restic/releases/tag/v0.9.4 See installed /usr/share/doc/packages/restic/CHANGELOG.md Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1541=1 - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1541=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1541=1 Package List: - openSUSE Leap 15.2 (noarch): restic-bash-completion-0.10.0-lp152.3.3.1 restic-zsh-completion-0.10.0-lp152.3.3.1 - openSUSE Leap 15.2 (x86_64): restic-0.10.0-lp152.3.3.1 - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): restic-0.10.0-bp152.4.3.1 - openSUSE Backports SLE-15-SP2 (noarch): restic-bash-completion-0.10.0-bp152.4.3.1 restic-zsh-completion-0.10.0-bp152.4.3.1 - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): restic-0.10.0-bp151.4.3.1 - openSUSE Backports SLE-15-SP1 (noarch): restic-bash-completion-0.10.0-bp151.4.3.1 restic-zsh-completion-0.10.0-bp151.4.3.1 References:

1 0

openSUSE-SU-2020:1539-1: moderate: Security update for openldap2
by opensuse-security＠opensuse.org 26 Sep '20

26 Sep '20

openSUSE Security Update: Security update for openldap2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1539-1 Rating: moderate References: #1175568 Cross-References: CVE-2020-8027 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for openldap2 fixes the following issues: - CVE-2020-8027: openldap_update_modules_path.sh starts daemons unconditionally and uses fixed paths in /tmp (bsc#1175568). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1539=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libldap-2_4-2-2.4.46-lp152.14.9.1 libldap-2_4-2-debuginfo-2.4.46-lp152.14.9.1 openldap2-2.4.46-lp152.14.9.1 openldap2-back-meta-2.4.46-lp152.14.9.1 openldap2-back-meta-debuginfo-2.4.46-lp152.14.9.1 openldap2-back-perl-2.4.46-lp152.14.9.1 openldap2-back-perl-debuginfo-2.4.46-lp152.14.9.1 openldap2-back-sock-2.4.46-lp152.14.9.1 openldap2-back-sock-debuginfo-2.4.46-lp152.14.9.1 openldap2-back-sql-2.4.46-lp152.14.9.1 openldap2-back-sql-debuginfo-2.4.46-lp152.14.9.1 openldap2-client-2.4.46-lp152.14.9.1 openldap2-client-debuginfo-2.4.46-lp152.14.9.1 openldap2-contrib-2.4.46-lp152.14.9.1 openldap2-contrib-debuginfo-2.4.46-lp152.14.9.1 openldap2-debuginfo-2.4.46-lp152.14.9.1 openldap2-debugsource-2.4.46-lp152.14.9.1 openldap2-devel-2.4.46-lp152.14.9.1 openldap2-devel-static-2.4.46-lp152.14.9.1 openldap2-ppolicy-check-password-1.2-lp152.14.9.1 openldap2-ppolicy-check-password-debuginfo-1.2-lp152.14.9.1 - openSUSE Leap 15.2 (x86_64): libldap-2_4-2-32bit-2.4.46-lp152.14.9.1 libldap-2_4-2-32bit-debuginfo-2.4.46-lp152.14.9.1 openldap2-devel-32bit-2.4.46-lp152.14.9.1 - openSUSE Leap 15.2 (noarch): libldap-data-2.4.46-lp152.14.9.1 openldap2-doc-2.4.46-lp152.14.9.1 References: https://www.suse.com/security/cve/CVE-2020-8027.html https://bugzilla.suse.com/1175568

1 0

openSUSE-RU-2020:1538-1: moderate: Recommended update for open-vm-tools
by maintenance＠opensuse.org 26 Sep '20

26 Sep '20

openSUSE Recommended Update: Recommended update for open-vm-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1538-1 Rating: moderate References: #1175573 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for open-vm-tools fixes the following issues: - Fix for building 'open-vm-tools' on 'Linux From Scratch'. (bsc#1175573) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1538=1 Package List: - openSUSE Leap 15.2 (x86_64): libvmtools-devel-11.1.5-lp152.3.6.1 libvmtools0-11.1.5-lp152.3.6.1 libvmtools0-debuginfo-11.1.5-lp152.3.6.1 open-vm-tools-11.1.5-lp152.3.6.1 open-vm-tools-debuginfo-11.1.5-lp152.3.6.1 open-vm-tools-debugsource-11.1.5-lp152.3.6.1 open-vm-tools-desktop-11.1.5-lp152.3.6.1 open-vm-tools-desktop-debuginfo-11.1.5-lp152.3.6.1 open-vm-tools-sdmp-11.1.5-lp152.3.6.1 open-vm-tools-sdmp-debuginfo-11.1.5-lp152.3.6.1 References: https://bugzilla.suse.com/1175573

1 0

openSUSE-RU-2020:1537-1: moderate: Recommended update for sbd
by maintenance＠opensuse.org 26 Sep '20

26 Sep '20

openSUSE Recommended Update: Recommended update for sbd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1537-1 Rating: moderate References: #1143064 #1174915 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for sbd fixes the following issues: - sbd-inquisitor: refuse to start if any of the configured device names is invalid (bsc#1174915) - scheduling: overhaul the whole thing (bsc#1143064) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1537=1 Package List: - openSUSE Leap 15.2 (x86_64): sbd-1.4.1+20200807.883c2f8-lp152.2.3.1 sbd-debuginfo-1.4.1+20200807.883c2f8-lp152.2.3.1 sbd-debugsource-1.4.1+20200807.883c2f8-lp152.2.3.1 sbd-devel-1.4.1+20200807.883c2f8-lp152.2.3.1 sbd-devel-debuginfo-1.4.1+20200807.883c2f8-lp152.2.3.1 References: https://bugzilla.suse.com/1143064 https://bugzilla.suse.com/1174915

1 0

openSUSE-RU-2020:1540-1: moderate: Recommended update for python-azure-agent
by maintenance＠opensuse.org 26 Sep '20

26 Sep '20

openSUSE Recommended Update: Recommended update for python-azure-agent ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1540-1 Rating: moderate References: #1176368 #1176369 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for python-azure-agent fixes the following issues: - Update to version 2.2.49.2 (bsc#1176368, bsc#1176369) + Remove paa_use_hostnamectl.patch included upstream + Forwrad port proper_dhcp_config_set.patch + Do not use --unit with systemd-cgls (#1910) + Report processes that do not belong to the agent's cgroup (#1908) + Use controller mount point for extension cgroup path (#1899) + Improvements in setup of cgroups (#1896) + Remove ExtensionsMetricsData and per-process Memory data (#1884) + Fix return value of start_extension_command (#1927) + Remove import * (#1900) + Fix flaky ExtensionCleanupTest class (#1898) + Fix codecov badge (#1883) + Changed codecov to run on py3.8 (#1875) + Update documentation on /dev/random (#1909) + Mount options are in mount(8) (#1893) + Remove ssh host key thumbprint in report ready (#1913) + Emit AutoUpdate value at service start only (#1907) + Add logging for version mismatch (#1895) + Send telemetry event if libdir changes (#1897) + Add log collector utility (#1847) + Move AutoUpdate reporting to HeartBeat event (#1919) + Removing infinite download of extension manifest without a new GS (#1874) + Fix wrongful dir deletion (#1873) + Fix the cleanup-outdated-handlers to only delete handlers that are not present in the GS (#1889) + Expose periods of environment thread in waagent.conf (#1891) + Added user @kevinclark19a as Contributor. (#1906) - From 2.2.48.1 + Refactoring GoalState class out of Protocol, making Protocol thread-safe, removing stale dependencies of Protocol and removing the dependency on the file system to read the Protocol info + Fetch goal state when creating HostPluginProtocol (#1799) + Separate goal state from the protocol class (#1777) + Make protocol util a singleton per thread (#1743, #1756) + Fetch goal state before sending telemetry (#1751) + Remove file dependency (#1754) + Others (#1758, #1767, #1744, #1749, #1816, #1820) + New logs for goal state fetch (#1797) and refresh (#1794). + Thread name added to logs (#1778) + Populate telemetry events at creation time (#1791) + Periodic HeartBeat to be logged to the file (#1755) + Add unit test to verify call stacks on telemetry events (#1828) + Others (#1841, #1842, #1846) + Handling errors while reading extension status files (Limiting Size and Transient issues)(#1761) + Enable SWAP on Resource Disk as Application Certification Support suggested (#1762) + Update 'Provisioning' options in default configs ( #1853) + Drop Metadata Server Support (#1806, #1839, #1840 ) + Improve documentation of ResourceDisk.EnableSwapEncryption (#1782) + Removed is_snappy function (#1774) + Handle exceptions in monitor thread (#1770) + Fix timestamp for periodic operations in the monitor thread (#1879) + Fix permissions on the Ubuntu systemd service file (#1814) + Update hostname setting for SUSE distros (#1832) + Python 3.8 improvements + support for Ubuntu 20.04 (#1860, #1865, #1738) + Testing and dev-infra improvements [#1771, #1768, #1800, #1826, #1827, #1833] + Others (#1854, #1858) - From 2.2.46 + [#1741] Do not update goal state when refreshing the host plugin + [#1731] Fix upgrade sequence when update command fails + [#1725] Initialize CPU usage + [#1716, #1737] Added UTC logging and correcting the format + [#1651, #1729] Start sending PerformanceCounter metrics and additional memory information for Cgroups This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1540=1 Package List: - openSUSE Leap 15.2 (noarch): python-azure-agent-2.2.49.2-lp152.3.9.1 python-azure-agent-test-2.2.49.2-lp152.3.9.1 References: https://bugzilla.suse.com/1176368 https://bugzilla.suse.com/1176369

1 0

openSUSE-SU-2020:1536-1: important: Security update for rubygem-actionpack-5_1
by opensuse-security＠opensuse.org 26 Sep '20

26 Sep '20

openSUSE Security Update: Security update for rubygem-actionpack-5_1 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1536-1 Rating: important References: #1172177 Cross-References: CVE-2020-8164 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for rubygem-actionpack-5_1 fixes the following issues: - CVE-2020-8164: Possible Strong Parameters Bypass in ActionPack. There is a strong parameters bypass vector in ActionPack. (bsc#1172177) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1536=1 Package List: - openSUSE Leap 15.2 (x86_64): ruby2.5-rubygem-actionpack-5_1-5.1.4-lp152.5.3.1 ruby2.5-rubygem-actionpack-doc-5_1-5.1.4-lp152.5.3.1 References: https://www.suse.com/security/cve/CVE-2020-8164.html https://bugzilla.suse.com/1172177

1 0

openSUSE-SU-2020:1534-1: moderate: Security update for openldap2
by opensuse-security＠opensuse.org 26 Sep '20

26 Sep '20

openSUSE Security Update: Security update for openldap2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1534-1 Rating: moderate References: #1175568 Cross-References: CVE-2020-8027 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for openldap2 fixes the following issues: - CVE-2020-8027: openldap_update_modules_path.sh starts daemons unconditionally and uses fixed paths in /tmp (bsc#1175568). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1534=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libldap-2_4-2-2.4.46-lp151.10.18.1 libldap-2_4-2-debuginfo-2.4.46-lp151.10.18.1 openldap2-2.4.46-lp151.10.18.1 openldap2-back-meta-2.4.46-lp151.10.18.1 openldap2-back-meta-debuginfo-2.4.46-lp151.10.18.1 openldap2-back-perl-2.4.46-lp151.10.18.1 openldap2-back-perl-debuginfo-2.4.46-lp151.10.18.1 openldap2-back-sock-2.4.46-lp151.10.18.1 openldap2-back-sock-debuginfo-2.4.46-lp151.10.18.1 openldap2-back-sql-2.4.46-lp151.10.18.1 openldap2-back-sql-debuginfo-2.4.46-lp151.10.18.1 openldap2-client-2.4.46-lp151.10.18.1 openldap2-client-debuginfo-2.4.46-lp151.10.18.1 openldap2-contrib-2.4.46-lp151.10.18.1 openldap2-contrib-debuginfo-2.4.46-lp151.10.18.1 openldap2-debuginfo-2.4.46-lp151.10.18.1 openldap2-debugsource-2.4.46-lp151.10.18.1 openldap2-devel-2.4.46-lp151.10.18.1 openldap2-devel-static-2.4.46-lp151.10.18.1 openldap2-ppolicy-check-password-1.2-lp151.10.18.1 openldap2-ppolicy-check-password-debuginfo-1.2-lp151.10.18.1 - openSUSE Leap 15.1 (x86_64): libldap-2_4-2-32bit-2.4.46-lp151.10.18.1 libldap-2_4-2-32bit-debuginfo-2.4.46-lp151.10.18.1 openldap2-devel-32bit-2.4.46-lp151.10.18.1 - openSUSE Leap 15.1 (noarch): libldap-data-2.4.46-lp151.10.18.1 openldap2-doc-2.4.46-lp151.10.18.1 References: https://www.suse.com/security/cve/CVE-2020-8027.html https://bugzilla.suse.com/1175568

1 0