September 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2020:1524-1: moderate: Recommended update for python-rtslib-fb
by maintenance＠opensuse.org 25 Sep '20

25 Sep '20

openSUSE Recommended Update: Recommended update for python-rtslib-fb ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1524-1 Rating: moderate References: #1175808 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-rtslib-fb fixes the following issue: - Fixed the signature of the RBDStorageObject to match changes made to parent StorageObject class. (bsc#1175808) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1524=1 Package List: - openSUSE Leap 15.2 (noarch): python2-rtslib-fb-2.1.73-lp152.2.6.1 python3-rtslib-fb-2.1.73-lp152.2.6.1 References: https://bugzilla.suse.com/1175808

1 0

openSUSE-SU-2020:1523-1: moderate: Security update for jasper
by opensuse-security＠opensuse.org 25 Sep '20

25 Sep '20

openSUSE Security Update: Security update for jasper ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1523-1 Rating: moderate References: #1010979 #1010980 #1020451 #1020456 #1020458 #1020460 #1045450 #1057152 #1088278 #1114498 #1115637 #1117328 #1120805 #1120807 Cross-References: CVE-2016-9398 CVE-2016-9399 CVE-2017-14132 CVE-2017-5499 CVE-2017-5503 CVE-2017-5504 CVE-2017-5505 CVE-2017-9782 CVE-2018-18873 CVE-2018-19139 CVE-2018-19543 CVE-2018-20570 CVE-2018-20622 CVE-2018-9252 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes 14 vulnerabilities is now available. Description: This update for jasper fixes the following issues: - CVE-2016-9398: Improved patch for already fixed issue (bsc#1010979). - CVE-2016-9399: Fix assert in calcstepsizes (bsc#1010980). - CVE-2017-5499: Validate component depth bit (bsc#1020451). - CVE-2017-5503: Check bounds in jas_seq2d_bindsub() (bsc#1020456). - CVE-2017-5504: Check bounds in jas_seq2d_bindsub() (bsc#1020458). - CVE-2017-5505: Check bounds in jas_seq2d_bindsub() (bsc#1020460). - CVE-2017-14132: Fix heap base overflow in by checking components (bsc#1057152). - CVE-2018-9252: Fix reachable assertion in jpc_abstorelstepsize (bsc#1088278). - CVE-2018-18873: Fix null pointer deref in ras_putdatastd (bsc#1114498). - CVE-2018-19139: Fix mem leaks by registering jpc_unk_destroyparms (bsc#1115637). - CVE-2018-19543, bsc#1045450 CVE-2017-9782: Fix numchans mixup (bsc#1117328). - CVE-2018-20570: Fix heap based buffer over-read in jp2_encode (bsc#1120807). - CVE-2018-20622: Fix memory leak in jas_malloc.c (bsc#1120805). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1523=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): jasper-2.0.14-lp152.7.3.1 jasper-debuginfo-2.0.14-lp152.7.3.1 jasper-debugsource-2.0.14-lp152.7.3.1 libjasper-devel-2.0.14-lp152.7.3.1 libjasper4-2.0.14-lp152.7.3.1 libjasper4-debuginfo-2.0.14-lp152.7.3.1 - openSUSE Leap 15.2 (x86_64): libjasper4-32bit-2.0.14-lp152.7.3.1 libjasper4-32bit-debuginfo-2.0.14-lp152.7.3.1 References: https://www.suse.com/security/cve/CVE-2016-9398.html https://www.suse.com/security/cve/CVE-2016-9399.html https://www.suse.com/security/cve/CVE-2017-14132.html https://www.suse.com/security/cve/CVE-2017-5499.html https://www.suse.com/security/cve/CVE-2017-5503.html https://www.suse.com/security/cve/CVE-2017-5504.html https://www.suse.com/security/cve/CVE-2017-5505.html https://www.suse.com/security/cve/CVE-2017-9782.html https://www.suse.com/security/cve/CVE-2018-18873.html https://www.suse.com/security/cve/CVE-2018-19139.html https://www.suse.com/security/cve/CVE-2018-19543.html https://www.suse.com/security/cve/CVE-2018-20570.html https://www.suse.com/security/cve/CVE-2018-20622.html https://www.suse.com/security/cve/CVE-2018-9252.html https://bugzilla.suse.com/1010979 https://bugzilla.suse.com/1010980 https://bugzilla.suse.com/1020451 https://bugzilla.suse.com/1020456 https://bugzilla.suse.com/1020458 https://bugzilla.suse.com/1020460 https://bugzilla.suse.com/1045450 https://bugzilla.suse.com/1057152 https://bugzilla.suse.com/1088278 https://bugzilla.suse.com/1114498 https://bugzilla.suse.com/1115637 https://bugzilla.suse.com/1117328 https://bugzilla.suse.com/1120805 https://bugzilla.suse.com/1120807

1 0

openSUSE-RU-2020:1521-1: moderate: Recommended update for ImageMagick
by maintenance＠opensuse.org 25 Sep '20

25 Sep '20

openSUSE Recommended Update: Recommended update for ImageMagick ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1521-1 Rating: moderate References: #1106272 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ImageMagick fixes the following issue: - Set the correct colorspace. (bsc#1106272) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1521=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): ImageMagick-7.0.7.34-lp152.12.3.1 ImageMagick-config-7-SUSE-7.0.7.34-lp152.12.3.1 ImageMagick-config-7-upstream-7.0.7.34-lp152.12.3.1 ImageMagick-debuginfo-7.0.7.34-lp152.12.3.1 ImageMagick-debugsource-7.0.7.34-lp152.12.3.1 ImageMagick-devel-7.0.7.34-lp152.12.3.1 ImageMagick-extra-7.0.7.34-lp152.12.3.1 ImageMagick-extra-debuginfo-7.0.7.34-lp152.12.3.1 libMagick++-7_Q16HDRI4-7.0.7.34-lp152.12.3.1 libMagick++-7_Q16HDRI4-debuginfo-7.0.7.34-lp152.12.3.1 libMagick++-devel-7.0.7.34-lp152.12.3.1 libMagickCore-7_Q16HDRI6-7.0.7.34-lp152.12.3.1 libMagickCore-7_Q16HDRI6-debuginfo-7.0.7.34-lp152.12.3.1 libMagickWand-7_Q16HDRI6-7.0.7.34-lp152.12.3.1 libMagickWand-7_Q16HDRI6-debuginfo-7.0.7.34-lp152.12.3.1 perl-PerlMagick-7.0.7.34-lp152.12.3.1 perl-PerlMagick-debuginfo-7.0.7.34-lp152.12.3.1 - openSUSE Leap 15.2 (noarch): ImageMagick-doc-7.0.7.34-lp152.12.3.1 - openSUSE Leap 15.2 (x86_64): ImageMagick-devel-32bit-7.0.7.34-lp152.12.3.1 libMagick++-7_Q16HDRI4-32bit-7.0.7.34-lp152.12.3.1 libMagick++-7_Q16HDRI4-32bit-debuginfo-7.0.7.34-lp152.12.3.1 libMagick++-devel-32bit-7.0.7.34-lp152.12.3.1 libMagickCore-7_Q16HDRI6-32bit-7.0.7.34-lp152.12.3.1 libMagickCore-7_Q16HDRI6-32bit-debuginfo-7.0.7.34-lp152.12.3.1 libMagickWand-7_Q16HDRI6-32bit-7.0.7.34-lp152.12.3.1 libMagickWand-7_Q16HDRI6-32bit-debuginfo-7.0.7.34-lp152.12.3.1 References: https://bugzilla.suse.com/1106272

1 0

openSUSE-RU-2020:1522-1: moderate: Recommended update for crmsh
by maintenance＠opensuse.org 25 Sep '20

25 Sep '20

openSUSE Recommended Update: Recommended update for crmsh ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1522-1 Rating: moderate References: #1176178 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for crmsh fixes the following issues: - Fixes an issue when parallax shows an error by joining a node. (bsc#1176178) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1522=1 Package List: - openSUSE Leap 15.2 (noarch): crmsh-4.2.0+git.1599702667.157fc6b5-lp152.4.19.1 crmsh-scripts-4.2.0+git.1599702667.157fc6b5-lp152.4.19.1 crmsh-test-4.2.0+git.1599702667.157fc6b5-lp152.4.19.1 References: https://bugzilla.suse.com/1176178

1 0

openSUSE-SU-2020:1525-1: moderate: Security update for ovmf
by opensuse-security＠opensuse.org 25 Sep '20

25 Sep '20

openSUSE Security Update: Security update for ovmf ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1525-1 Rating: moderate References: #1119454 #1175476 Cross-References: CVE-2019-14562 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for ovmf fixes the following issues: - CVE-2019-14562: Fixed an overflow in DxeImageVerificationHandler (bsc#1175476). - Support more SCSI drivers (PvScsi, MptScsi and LsiScsi). (bsc#1119454) - Enable LsiScsi explicitly since it's disabled by default This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1525=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): ovmf-201911-lp152.6.5.1 ovmf-tools-201911-lp152.6.5.1 - openSUSE Leap 15.2 (x86_64): qemu-ovmf-x86_64-debug-201911-lp152.6.5.1 - openSUSE Leap 15.2 (noarch): qemu-ovmf-ia32-201911-lp152.6.5.1 qemu-ovmf-x86_64-201911-lp152.6.5.1 References: https://www.suse.com/security/cve/CVE-2019-14562.html https://bugzilla.suse.com/1119454 https://bugzilla.suse.com/1175476

1 0

openSUSE-RU-2020:1519-1: moderate: Recommended update for flint
by maintenance＠opensuse.org 24 Sep '20

24 Sep '20

openSUSE Recommended Update: Recommended update for flint ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1519-1 Rating: moderate References: #1169283 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for flint fixes the following issues: Update to version 2.6.3 [boo#1169283] New features: * Multivariate polynomials over most standard rings (sparse distributed) * APR-CL primality proving * Elliptic Curve integer factoring * Pollard rho integer factoring * p+1 integer factoring * Best of Breed smooth & general integer factoring routine * Howell and Strong Echelon form * Möller–Granlund precomputed inverses * Fibonacci polynomials * sqrt of series and polynomials * Division of series over Z * Shifted Legendre polynomials, Laguerre polynomials, Gegenbauer polys. * Threading of FFT for integer and polynomial multiplication over Z; threading of quadratic sieve for integer factoring; threading for multivariate polynomial multiplication, division and GCD; threaded multiplication of matrices mod p. * For more, see the NEWS file in the flint-devel subpackage. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1519=1 Package List: - openSUSE Leap 15.2 (x86_64): flint-debugsource-3.0~7794-lp152.4.3.1 flint-devel-3.0~7794-lp152.4.3.1 libflint14-3.0~7794-lp152.4.3.1 libflint14-debuginfo-3.0~7794-lp152.4.3.1 References: https://bugzilla.suse.com/1169283

1 0

openSUSE-SU-2020:1516-1: moderate: Security update for roundcubemail
by opensuse-security＠opensuse.org 24 Sep '20

24 Sep '20

openSUSE Security Update: Security update for roundcubemail ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1516-1 Rating: moderate References: #1115718 #1115719 #1146286 #1171040 #1171148 #1171149 #1173792 #1175135 Cross-References: CVE-2019-10740 CVE-2020-12625 CVE-2020-12640 CVE-2020-12641 CVE-2020-15562 CVE-2020-16145 Affected Products: openSUSE Leap 15.2 openSUSE Leap 15.1 openSUSE Backports SLE-15-SP2 openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that solves 6 vulnerabilities and has two fixes is now available. Description: This update for roundcubemail fixes the following issues: roundcubemail was upgraded to 1.3.15 This is a security update to the LTS version 1.3. (boo#1175135) * Security: Fix cross-site scripting (XSS) via HTML messages with malicious svg content [CVE-2020-16145] * Security: Fix cross-site scripting (XSS) via HTML messages with malicious math content From 1.3.14 (boo#1173792 -> CVE-2020-15562) * Security: Fix cross-site scripting (XSS) via HTML messages with malicious svg/namespace From 1.3.13 * Installer: Fix regression in SMTP test section (#7417) From 1.3.12 * Security: Better fix for CVE-2020-12641 (boo#1171148) * Security: Fix XSS issue in template object 'username' (#7406) * Security: Fix couple of XSS issues in Installer (#7406) * Security: Fix cross-site scripting (XSS) via malicious XML attachment From 1.3.11 (boo#1171148 -> CVE-2020-12641 boo#1171040 -> CVE-2020-12625 boo#1171149 -> CVE-2020-12640) * Enigma: Fix compatibility with Mail_Mime >= 1.10.5 * Fix permissions on some folders created by bin/install-jsdeps.sh script (#6930) * Fix bug where inline images could have been ignored if Content-Id header contained redundant spaces (#6980) * Fix PHP Warning: Use of undefined constant LOG_EMERGE (#6991) * Fix PHP warning: "array_merge(): Expected parameter 2 to be an array, null given in sendmail.inc (#7003) * Security: Fix XSS issue in handling of CDATA in HTML messages * Security: Fix remote code execution via crafted 'im_convert_path' or 'im_identify_path' settings * Security: Fix local file inclusion (and code execution) via crafted 'plugins' option * Security: Fix CSRF bypass that could be used to log out an authenticated user (#7302) From 1.3.10 (boo#1146286) * Managesieve: Fix so "Create filter" option does not show up when Filters menu is disabled (#6723) * Enigma: Fix bug where revoked users/keys were not greyed out in key info * Enigma: Fix error message when trying to encrypt with a revoked key (#6607) * Enigma: Fix "decryption oracle" bug [CVE-2019-10740] (#6638) * Fix compatibility with kolab/net_ldap3 > 1.0.7 (#6785) * Fix bug where bmp images couldn't be displayed on some systems (#6728) * Fix bug in parsing vCard data using PHP 7.3 due to an invalid regexp (#6744) * Fix bug where bold/strong text was converted to upper-case on html-to-text conversion (6758) * Fix bug in rcube_utils::parse_hosts() where %t, %d, %z could return only tld (#6746) * Fix bug where Next/Prev button in mail view didn't work with multi-folder search result (#6793) * Fix bug where selection of columns on messages list wasn't working * Fix bug in converting multi-page Tiff images to Jpeg (#6824) * Fix wrong messages order after returning to a multi-folder search result (#6836) * Fix PHP 7.4 deprecation: implode() wrong parameter order (#6866) * Fix bug where it was possible to bypass the position:fixed CSS check in received messages (#6898) * Fix bug where some strict remote URIs in url() style were unintentionally blocked (#6899) * Fix bug where it was possible to bypass the CSS jail in HTML messages using :root pseudo-class (#6897) * Fix bug where it was possible to bypass href URI check with data:application/xhtml+xml URIs (#6896) From 1.3.9 (boo#1115718) * Fix TinyMCE download location (#6694) * Fix bug where a message/rfc822 part without a filename wasn't listed on the attachments list (#6494) * Fix handling of empty entries in vCard import (#6564) * Fix bug in parsing some IMAP command responses that include unsolicited replies (#6577) * Fix PHP 7.2 compatibility in debug_logger plugin (#6586) * Fix so ANY record is not used for email domain validation, use A, MX, CNAME, AAAA instead (#6581) * Fix so mime_content_type check in Installer uses files that should always be available (i.e. from program/resources) (#6599) * Fix missing CSRF token on a link to download too-big message part (#6621) * Fix bug when aborting dragging with ESC key didn't stop the move action (#6623) * Fix bug where next row wasn't selected after deleting a collapsed thread (#6655) From 1.3.8 * Fix PHP warnings on dummy QUOTA responses in Courier-IMAP 4.17.1 (#6374) * Fix so fallback from BINARY to BODY FETCH is used also on [PARSE] errors in dovecot 2.3 (#6383) * Enigma: Fix deleting keys with authentication subkeys (#6381) * Fix invalid regular expressions that throw warnings on PHP 7.3 (#6398) * Fix so Classic skin splitter does not escape out of window (#6397) * Fix XSS issue in handling invalid style tag content (#6410) * Fix compatibility with MySQL 8 - error on 'system' table use * Managesieve: Fix bug where show_real_foldernames setting wasn't respected (#6422) * New_user_identity: Fix %fu/%u vars substitution in user specific LDAP params (#6419) * Fix support for "allow-from <uri>" in "x_frame_options" config option (#6449) * Fix bug where valid content between HTML comments could have been skipped in some cases (#6464) * Fix multiple VCard field search (#6466) * Fix session issue on long running requests (#6470) From 1.3.7 (boo#1115719) * Fix PHP Warning: Use of undefined constant IDNA_DEFAULT on systems without php-intl (#6244) * Fix bug where some parts of quota information could have been ignored (#6280) * Fix bug where some escape sequences in html styles could bypass security checks * Fix bug where some forbidden characters on Cyrus-IMAP were not prevented from use in folder names * Fix bug where only attachments with the same name would be ignored on zip download (#6301) * Fix bug where unicode contact names could have been broken/emptied or caused DB errors (#6299) * Fix bug where after "mark all folders as read" action message counters were not reset (#6307) * Enigma: [EFAIL] Don't decrypt PGP messages with no MDC protection (#6289) * Fix bug where some HTML comments could have been malformed by HTML parser (#6333) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1516=1 - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1516=1 - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1516=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1516=1 Package List: - openSUSE Leap 15.2 (noarch): roundcubemail-1.3.15-lp152.4.3.1 - openSUSE Leap 15.1 (noarch): roundcubemail-1.3.15-lp151.3.3.1 - openSUSE Backports SLE-15-SP2 (noarch): roundcubemail-1.3.15-bp152.4.3.1 - openSUSE Backports SLE-15-SP1 (noarch): roundcubemail-1.3.15-bp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2019-10740.html https://www.suse.com/security/cve/CVE-2020-12625.html https://www.suse.com/security/cve/CVE-2020-12640.html https://www.suse.com/security/cve/CVE-2020-12641.html https://www.suse.com/security/cve/CVE-2020-15562.html https://www.suse.com/security/cve/CVE-2020-16145.html https://bugzilla.suse.com/1115718 https://bugzilla.suse.com/1115719 https://bugzilla.suse.com/1146286 https://bugzilla.suse.com/1171040 https://bugzilla.suse.com/1171148 https://bugzilla.suse.com/1171149 https://bugzilla.suse.com/1173792 https://bugzilla.suse.com/1175135

1 0

openSUSE-SU-2020:1517-1: moderate: Security update for jasper
by opensuse-security＠opensuse.org 24 Sep '20

24 Sep '20

openSUSE Security Update: Security update for jasper ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1517-1 Rating: moderate References: #1010979 #1010980 #1020451 #1020456 #1020458 #1020460 #1045450 #1057152 #1088278 #1114498 #1115637 #1117328 #1120805 #1120807 Cross-References: CVE-2016-9398 CVE-2016-9399 CVE-2017-14132 CVE-2017-5499 CVE-2017-5503 CVE-2017-5504 CVE-2017-5505 CVE-2017-9782 CVE-2018-18873 CVE-2018-19139 CVE-2018-19543 CVE-2018-20570 CVE-2018-20622 CVE-2018-9252 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 14 vulnerabilities is now available. Description: This update for jasper fixes the following issues: - CVE-2016-9398: Improved patch for already fixed issue (bsc#1010979). - CVE-2016-9399: Fix assert in calcstepsizes (bsc#1010980). - CVE-2017-5499: Validate component depth bit (bsc#1020451). - CVE-2017-5503: Check bounds in jas_seq2d_bindsub() (bsc#1020456). - CVE-2017-5504: Check bounds in jas_seq2d_bindsub() (bsc#1020458). - CVE-2017-5505: Check bounds in jas_seq2d_bindsub() (bsc#1020460). - CVE-2017-14132: Fix heap base overflow in by checking components (bsc#1057152). - CVE-2018-9252: Fix reachable assertion in jpc_abstorelstepsize (bsc#1088278). - CVE-2018-18873: Fix null pointer deref in ras_putdatastd (bsc#1114498). - CVE-2018-19139: Fix mem leaks by registering jpc_unk_destroyparms (bsc#1115637). - CVE-2018-19543, bsc#1045450 CVE-2017-9782: Fix numchans mixup (bsc#1117328). - CVE-2018-20570: Fix heap based buffer over-read in jp2_encode (bsc#1120807). - CVE-2018-20622: Fix memory leak in jas_malloc.c (bsc#1120805). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1517=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): jasper-2.0.14-lp151.4.9.1 jasper-debuginfo-2.0.14-lp151.4.9.1 jasper-debugsource-2.0.14-lp151.4.9.1 libjasper-devel-2.0.14-lp151.4.9.1 libjasper4-2.0.14-lp151.4.9.1 libjasper4-debuginfo-2.0.14-lp151.4.9.1 - openSUSE Leap 15.1 (x86_64): libjasper4-32bit-2.0.14-lp151.4.9.1 libjasper4-32bit-debuginfo-2.0.14-lp151.4.9.1 References: https://www.suse.com/security/cve/CVE-2016-9398.html https://www.suse.com/security/cve/CVE-2016-9399.html https://www.suse.com/security/cve/CVE-2017-14132.html https://www.suse.com/security/cve/CVE-2017-5499.html https://www.suse.com/security/cve/CVE-2017-5503.html https://www.suse.com/security/cve/CVE-2017-5504.html https://www.suse.com/security/cve/CVE-2017-5505.html https://www.suse.com/security/cve/CVE-2017-9782.html https://www.suse.com/security/cve/CVE-2018-18873.html https://www.suse.com/security/cve/CVE-2018-19139.html https://www.suse.com/security/cve/CVE-2018-19543.html https://www.suse.com/security/cve/CVE-2018-20570.html https://www.suse.com/security/cve/CVE-2018-20622.html https://www.suse.com/security/cve/CVE-2018-9252.html https://bugzilla.suse.com/1010979 https://bugzilla.suse.com/1010980 https://bugzilla.suse.com/1020451 https://bugzilla.suse.com/1020456 https://bugzilla.suse.com/1020458 https://bugzilla.suse.com/1020460 https://bugzilla.suse.com/1045450 https://bugzilla.suse.com/1057152 https://bugzilla.suse.com/1088278 https://bugzilla.suse.com/1114498 https://bugzilla.suse.com/1115637 https://bugzilla.suse.com/1117328 https://bugzilla.suse.com/1120805 https://bugzilla.suse.com/1120807

1 0

openSUSE-RU-2020:1518-1: moderate: Recommended update for krb5
by maintenance＠opensuse.org 24 Sep '20

24 Sep '20

openSUSE Recommended Update: Recommended update for krb5 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1518-1 Rating: moderate References: #1174079 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for krb5 fixes the following issue: - Fix prefix reported by krb5-config, libraries and headers are not installed under /usr/lib/mit prefix. (bsc#1174079) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1518=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): krb5-1.16.3-lp152.5.6.1 krb5-client-1.16.3-lp152.5.6.1 krb5-client-debuginfo-1.16.3-lp152.5.6.1 krb5-debuginfo-1.16.3-lp152.5.6.1 krb5-debugsource-1.16.3-lp152.5.6.1 krb5-devel-1.16.3-lp152.5.6.1 krb5-plugin-kdb-ldap-1.16.3-lp152.5.6.1 krb5-plugin-kdb-ldap-debuginfo-1.16.3-lp152.5.6.1 krb5-plugin-preauth-otp-1.16.3-lp152.5.6.1 krb5-plugin-preauth-otp-debuginfo-1.16.3-lp152.5.6.1 krb5-plugin-preauth-pkinit-1.16.3-lp152.5.6.1 krb5-plugin-preauth-pkinit-debuginfo-1.16.3-lp152.5.6.1 krb5-server-1.16.3-lp152.5.6.1 krb5-server-debuginfo-1.16.3-lp152.5.6.1 - openSUSE Leap 15.2 (x86_64): krb5-32bit-1.16.3-lp152.5.6.1 krb5-32bit-debuginfo-1.16.3-lp152.5.6.1 krb5-devel-32bit-1.16.3-lp152.5.6.1 References: https://bugzilla.suse.com/1174079

1 0

openSUSE-RU-2020:1515-1: moderate: Recommended update for PackageKit
by maintenance＠opensuse.org 24 Sep '20

24 Sep '20

openSUSE Recommended Update: Recommended update for PackageKit ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1515-1 Rating: moderate References: #1170562 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for PackageKit fixes the following issue: - pkcon: exit with return value 5 if no packages needed be installed. (bsc#1170562) In case a user asks to install an already installed package the new return value 5 message is "Nothing useful was done" instead of return value 7 message "The transaction failed, see the detailed error for more information." This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1515=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): PackageKit-1.1.13-lp152.3.3.1 PackageKit-backend-dnf-1.1.13-lp152.3.3.1 PackageKit-backend-dnf-debuginfo-1.1.13-lp152.3.3.1 PackageKit-backend-zypp-1.1.13-lp152.3.3.1 PackageKit-backend-zypp-debuginfo-1.1.13-lp152.3.3.1 PackageKit-debuginfo-1.1.13-lp152.3.3.1 PackageKit-debugsource-1.1.13-lp152.3.3.1 PackageKit-devel-1.1.13-lp152.3.3.1 PackageKit-devel-debuginfo-1.1.13-lp152.3.3.1 PackageKit-gstreamer-plugin-1.1.13-lp152.3.3.1 PackageKit-gstreamer-plugin-debuginfo-1.1.13-lp152.3.3.1 PackageKit-gtk3-module-1.1.13-lp152.3.3.1 PackageKit-gtk3-module-debuginfo-1.1.13-lp152.3.3.1 libpackagekit-glib2-18-1.1.13-lp152.3.3.1 libpackagekit-glib2-18-debuginfo-1.1.13-lp152.3.3.1 libpackagekit-glib2-devel-1.1.13-lp152.3.3.1 typelib-1_0-PackageKitGlib-1_0-1.1.13-lp152.3.3.1 - openSUSE Leap 15.2 (noarch): PackageKit-branding-upstream-1.1.13-lp152.3.3.1 PackageKit-lang-1.1.13-lp152.3.3.1 - openSUSE Leap 15.2 (x86_64): libpackagekit-glib2-18-32bit-1.1.13-lp152.3.3.1 libpackagekit-glib2-18-32bit-debuginfo-1.1.13-lp152.3.3.1 libpackagekit-glib2-devel-32bit-1.1.13-lp152.3.3.1 References: https://bugzilla.suse.com/1170562

1 0