January 2021 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2021:0073-1: important: Security update for crmsh
by opensuse-security＠opensuse.org 16 Jan '21

16 Jan '21

openSUSE Security Update: Security update for crmsh ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0073-1 Rating: important References: #1179999 Cross-References: CVE-2020-35459 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for crmsh fixes the following issue: - CVE-2020-35459: Fixed a privilege escalation in hawk_invoke (bsc#1179999). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2021-73=1 Package List: - openSUSE Leap 15.1 (noarch): crmsh-4.2.0+git.1607075079.a25648d8-lp151.2.45.1 crmsh-scripts-4.2.0+git.1607075079.a25648d8-lp151.2.45.1 crmsh-test-4.2.0+git.1607075079.a25648d8-lp151.2.45.1 References: https://www.suse.com/security/cve/CVE-2020-35459.html https://bugzilla.suse.com/1179999

1 0

openSUSE-RU-2021:0088-1: Recommended update for SUSEConnect
by maintenance＠opensuse.org 16 Jan '21

16 Jan '21

openSUSE Recommended Update: Recommended update for SUSEConnect ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0088-1 Rating: low References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for SUSEConnect fixes the following issue: Update to version 0.3.29 - Replace the Ruby path with the native one during build phase. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-88=1 Package List: - openSUSE Leap 15.2 (x86_64): SUSEConnect-0.3.29-lp152.2.6.1 References:

1 0

openSUSE-RU-2021:0080-1: moderate: Recommended update for taglib
by maintenance＠opensuse.org 16 Jan '21

16 Jan '21

openSUSE Recommended Update: Recommended update for taglib ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0080-1 Rating: moderate References: #1179817 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for taglib fixes the following issues: - Fixed a possible file corruption of ogg files (bsc#1179817, gh#taglib/taglib#864): This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2021-80=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libtag-devel-1.11.1-lp151.5.3.1 libtag1-1.11.1-lp151.5.3.1 libtag1-debuginfo-1.11.1-lp151.5.3.1 libtag_c0-1.11.1-lp151.5.3.1 libtag_c0-debuginfo-1.11.1-lp151.5.3.1 taglib-1.11.1-lp151.5.3.1 taglib-debuginfo-1.11.1-lp151.5.3.1 taglib-debugsource-1.11.1-lp151.5.3.1 - openSUSE Leap 15.1 (x86_64): libtag1-32bit-1.11.1-lp151.5.3.1 libtag1-32bit-debuginfo-1.11.1-lp151.5.3.1 libtag_c0-32bit-1.11.1-lp151.5.3.1 libtag_c0-32bit-debuginfo-1.11.1-lp151.5.3.1 References: https://bugzilla.suse.com/1179817

1 0

openSUSE-SU-2021:0074-1: important: Security update for hawk2
by opensuse-security＠opensuse.org 16 Jan '21

16 Jan '21

openSUSE Security Update: Security update for hawk2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0074-1 Rating: important References: #1179998 Cross-References: CVE-2020-35458 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for hawk2 fixes the following security issue: - CVE-2020-35458: Fixed an insufficient input handler that could have led to remote code execution (bsc#1179998). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2021-74=1 Package List: - openSUSE Leap 15.1 (x86_64): hawk2-2.3.0+git.1603969748.10468582-lp151.2.18.1 hawk2-debuginfo-2.3.0+git.1603969748.10468582-lp151.2.18.1 hawk2-debugsource-2.3.0+git.1603969748.10468582-lp151.2.18.1 References: https://www.suse.com/security/cve/CVE-2020-35458.html https://bugzilla.suse.com/1179998

1 0

openSUSE-RU-2021:0083-1: moderate: Recommended update for yast2-cluster
by maintenance＠opensuse.org 16 Jan '21

16 Jan '21

openSUSE Recommended Update: Recommended update for yast2-cluster ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0083-1 Rating: moderate References: #1120815 #1151687 #1180424 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for yast2-cluster fixes the following issues: - Add watchdog config to the default list. (bsc#1180424) - Update the open ports to support pacemaker-remote, booth, corosync-qnetd. (bsc#1151687) - Support use hostname in ring address. (bsc#1120815) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2021-83=1 Package List: - openSUSE Leap 15.1 (noarch): yast2-cluster-4.1.7-lp151.2.9.1 References: https://bugzilla.suse.com/1120815 https://bugzilla.suse.com/1151687 https://bugzilla.suse.com/1180424

1 0

openSUSE-RU-2021:0077-1: important: Recommended update for emacs
by maintenance＠opensuse.org 16 Jan '21

16 Jan '21

openSUSE Recommended Update: Recommended update for emacs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0077-1 Rating: important References: #1175028 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for emacs fixes the following issues: - Fix SIGSEGV introduced by a security fix for libX11 (bsc#1175028). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2021-77=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): emacs-25.3-lp151.4.3.1 emacs-debuginfo-25.3-lp151.4.3.1 emacs-debugsource-25.3-lp151.4.3.1 emacs-nox-25.3-lp151.4.3.1 emacs-nox-debuginfo-25.3-lp151.4.3.1 emacs-x11-25.3-lp151.4.3.1 emacs-x11-debuginfo-25.3-lp151.4.3.1 etags-25.3-lp151.4.3.1 etags-debuginfo-25.3-lp151.4.3.1 - openSUSE Leap 15.1 (noarch): emacs-el-25.3-lp151.4.3.1 emacs-info-25.3-lp151.4.3.1 References: https://bugzilla.suse.com/1175028

1 0

openSUSE-SU-2021:0076-1: important: Security update for vlc
by opensuse-security＠opensuse.org 16 Jan '21

16 Jan '21

openSUSE Security Update: Security update for vlc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0076-1 Rating: important References: #1133290 #1172727 #1180755 Cross-References: CVE-2020-13428 CVE-2020-26664 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for vlc fixes the following issues: Update to 3.0.11.1: - CVE-2020-13428: Fixed heap-based buffer overflow in the hxxx_AnnexB_to_xVC () (boo#1172727) - CVE-2020-26664: Fixed heap-based buffer overflow in EbmlTypeDispatcher:send () (boo#1180755) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2021-76=1 Package List: - openSUSE Leap 15.1 (noarch): vlc-lang-3.0.11.1-lp151.6.12.1 - openSUSE Leap 15.1 (x86_64): libvlc5-3.0.11.1-lp151.6.12.1 libvlc5-debuginfo-3.0.11.1-lp151.6.12.1 libvlccore9-3.0.11.1-lp151.6.12.1 libvlccore9-debuginfo-3.0.11.1-lp151.6.12.1 vlc-3.0.11.1-lp151.6.12.1 vlc-codec-gstreamer-3.0.11.1-lp151.6.12.1 vlc-codec-gstreamer-debuginfo-3.0.11.1-lp151.6.12.1 vlc-debuginfo-3.0.11.1-lp151.6.12.1 vlc-debugsource-3.0.11.1-lp151.6.12.1 vlc-devel-3.0.11.1-lp151.6.12.1 vlc-jack-3.0.11.1-lp151.6.12.1 vlc-jack-debuginfo-3.0.11.1-lp151.6.12.1 vlc-noX-3.0.11.1-lp151.6.12.1 vlc-noX-debuginfo-3.0.11.1-lp151.6.12.1 vlc-opencv-3.0.11.1-lp151.6.12.1 vlc-opencv-debuginfo-3.0.11.1-lp151.6.12.1 vlc-qt-3.0.11.1-lp151.6.12.1 vlc-qt-debuginfo-3.0.11.1-lp151.6.12.1 vlc-vdpau-3.0.11.1-lp151.6.12.1 vlc-vdpau-debuginfo-3.0.11.1-lp151.6.12.1 References: https://www.suse.com/security/cve/CVE-2020-13428.html https://www.suse.com/security/cve/CVE-2020-26664.html https://bugzilla.suse.com/1133290 https://bugzilla.suse.com/1172727 https://bugzilla.suse.com/1180755

1 0

openSUSE-SU-2021:0078-1: moderate: Security update for python-jupyter_notebook
by opensuse-security＠opensuse.org 16 Jan '21

16 Jan '21

openSUSE Security Update: Security update for python-jupyter_notebook ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0078-1 Rating: moderate References: #1180458 Cross-References: CVE-2020-26215 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-jupyter_notebook fixes the following issue: - CVE-2020-26215: Fixed an open redirect vulnerability (boo#1180458). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2021-78=1 Package List: - openSUSE Leap 15.1 (noarch): python-jupyter_notebook-doc-5.7.7-lp151.2.3.1 python2-jupyter_notebook-5.7.7-lp151.2.3.1 python2-jupyter_notebook-lang-5.7.7-lp151.2.3.1 python2-jupyter_notebook-latex-5.7.7-lp151.2.3.1 python3-jupyter_notebook-5.7.7-lp151.2.3.1 python3-jupyter_notebook-lang-5.7.7-lp151.2.3.1 python3-jupyter_notebook-latex-5.7.7-lp151.2.3.1 References: https://www.suse.com/security/cve/CVE-2020-26215.html https://bugzilla.suse.com/1180458

1 0

openSUSE-RU-2021:0085-1: moderate: Recommended update for lxd
by maintenance＠opensuse.org 16 Jan '21

16 Jan '21

openSUSE Recommended Update: Recommended update for lxd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0085-1 Rating: moderate References: #1180772 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for lxd fixes the following issues: Update to LXD 4.10. The full upstream changelog is available from: https://discuss.linuxcontainers.org/t/lxd-4-10-has-been-released/9894 + VLAN information in network state + Proxy device support for VMs (NAT only) + Bridge port isolation + New sub-commands for image properties + Multi-queue networking in VMs Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2021-85=1 Package List: - openSUSE Leap 15.1 (noarch): lxd-bash-completion-4.10-lp151.60.1 - openSUSE Leap 15.1 (x86_64): lxd-4.10-lp151.60.1 References: https://bugzilla.suse.com/1180772

1 0

openSUSE-RU-2021:0086-1: moderate: Recommended update for rt-tests
by maintenance＠opensuse.org 16 Jan '21

16 Jan '21

openSUSE Recommended Update: Recommended update for rt-tests ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0086-1 Rating: moderate References: Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: rt-tests was updated to fix the following issues: Update to upstream version 1.10 (SLE-12981): * rt-tests: queuelat: Remove get_cpuinfo_mhz.sh and old Makefile * rt-tests: determine_maximum_mpps.sh: Add a menu to get user settings. * rt-numa: Introduce NUMA helpers * cyclictest: Only report the first incident * Streamline usage and man page Changes from version 1.9: * signaltest: Only print from the first thread stats when quiet * rt-tests: cyclictest: Move ftrace helpers into rt-utils.[ch] * pi_stress: limit the number of inversion groups to the number of online cores * rt-tests: Install new man page get_cyclictest_snapshot.8 * rt-tests: Add a man page for get_cyclictest_snapshot * rt-tests: ptsematest.8: Update the ptsematest man page * rt-tests: improvements to the python style in get_cyclictest_snapshot * cyclictest: Fix setaffinity error on large NUMA machines Changes from version 1.8: * cyclictest: Make the affinity mask apply to the main thread too * Remove support for compiling without NUMA * cyclictest: Only run on runtime affinity and user supplied affinity * cyclictest: Only run on available cpus according to the affinity * cyclictest: Report all errors from pthread_setaffinity_np Changes from version 1.7: * Add get_cyclictest_snapshot to Makefile * Add the get_cyclictest_snapshot.py utility * determine_maximum_mpps.sh: Fix quoting and other shell issue * queuelat: get_cpuinfo_mhz.sh highest value * cyclicdeadline: Add a simple manpage for cyclicdeadline This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2021-86=1 Package List: - openSUSE Leap 15.1 (x86_64): rt-tests-1.10-lp151.2.6.1 rt-tests-debuginfo-1.10-lp151.2.6.1 rt-tests-debugsource-1.10-lp151.2.6.1 References:

1 0