January 2021 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2021:0029-1: moderate: Recommended update for yast2
by maintenance＠opensuse.org 08 Jan '21

08 Jan '21

openSUSE Recommended Update: Recommended update for yast2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0029-1 Rating: moderate References: #1176276 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2 fixes the following issues: - Log more details when several resolvables (instead of a single one) are unexpectedely found. (bsc#1176276) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-29=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): yast2-4.2.88-lp152.2.9.1 yast2-logs-4.2.88-lp152.2.9.1 References: https://bugzilla.suse.com/1176276

1 0

openSUSE-RU-2021:0031-1: moderate: Recommended update for yast2-tune
by maintenance＠opensuse.org 08 Jan '21

08 Jan '21

openSUSE Recommended Update: Recommended update for yast2-tune ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0031-1 Rating: moderate References: #1168036 #1178797 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for yast2-tune fixes the following issues: - Add I/O device autoconfig checkbox on s390 for installer pre-configuration. (bsc#1168036) - Remove elevator settings kernel boot parameter as it is obsolte. (bsc#1178797) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-31=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): yast2-tune-4.2.5-lp152.2.3.1 References: https://bugzilla.suse.com/1168036 https://bugzilla.suse.com/1178797

1 0

openSUSE-RU-2021:0030-1: moderate: Recommended update for alsa-utils
by maintenance＠opensuse.org 08 Jan '21

08 Jan '21

openSUSE Recommended Update: Recommended update for alsa-utils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0030-1 Rating: moderate References: #1179904 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for alsa-utils fixes the following issues: - Fix for alsa restore behavior during locking and restore saved settings. (bsc#1179904) - Remove unnecessary condition for alsa-restore.service This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-30=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): alsa-utils-1.1.5-lp152.6.3.1 alsa-utils-debuginfo-1.1.5-lp152.6.3.1 alsa-utils-debugsource-1.1.5-lp152.6.3.1 alsabat-1.1.5-lp152.6.3.1 alsabat-debuginfo-1.1.5-lp152.6.3.1 References: https://bugzilla.suse.com/1179904

1 0

openSUSE-RU-2021:0032-1: moderate: Recommended update for pesign-obs-integration
by maintenance＠opensuse.org 08 Jan '21

08 Jan '21

openSUSE Recommended Update: Recommended update for pesign-obs-integration ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0032-1 Rating: moderate References: #1180242 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for pesign-obs-integration fixes the following issues: - Fix for the wrongly created noarch subpackages. (bsc#1180242) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-32=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): pesign-obs-integration-10.1-lp152.6.3.1 References: https://bugzilla.suse.com/1180242

1 0

openSUSE-SU-2021:0027-1: moderate: Security update for gimp
by opensuse-security＠opensuse.org 07 Jan '21

07 Jan '21

openSUSE Security Update: Security update for gimp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0027-1 Rating: moderate References: #1073624 #1073625 #1073626 Cross-References: CVE-2017-17784 CVE-2017-17785 CVE-2017-17786 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for gimp fixes the following issues: - CVE-2017-17784: Fixed an insufficient string validation for input names (bsc#1073624). - CVE-2017-17785: Fixed an heap-based buffer overflow in FLI import (bsc#1073625). - CVE-2017-17786: Fixed an out-of-bounds read in TGA (bsc#1073626). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2021-27=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): gimp-2.8.22-lp151.5.9.1 gimp-debuginfo-2.8.22-lp151.5.9.1 gimp-debugsource-2.8.22-lp151.5.9.1 gimp-devel-2.8.22-lp151.5.9.1 gimp-devel-debuginfo-2.8.22-lp151.5.9.1 gimp-plugin-aa-2.8.22-lp151.5.9.1 gimp-plugin-aa-debuginfo-2.8.22-lp151.5.9.1 gimp-plugins-python-2.8.22-lp151.5.9.1 gimp-plugins-python-debuginfo-2.8.22-lp151.5.9.1 libgimp-2_0-0-2.8.22-lp151.5.9.1 libgimp-2_0-0-debuginfo-2.8.22-lp151.5.9.1 libgimpui-2_0-0-2.8.22-lp151.5.9.1 libgimpui-2_0-0-debuginfo-2.8.22-lp151.5.9.1 - openSUSE Leap 15.1 (noarch): gimp-lang-2.8.22-lp151.5.9.1 - openSUSE Leap 15.1 (x86_64): libgimp-2_0-0-32bit-2.8.22-lp151.5.9.1 libgimp-2_0-0-32bit-debuginfo-2.8.22-lp151.5.9.1 libgimpui-2_0-0-32bit-2.8.22-lp151.5.9.1 libgimpui-2_0-0-32bit-debuginfo-2.8.22-lp151.5.9.1 References: https://www.suse.com/security/cve/CVE-2017-17784.html https://www.suse.com/security/cve/CVE-2017-17785.html https://www.suse.com/security/cve/CVE-2017-17786.html https://bugzilla.suse.com/1073624 https://bugzilla.suse.com/1073625 https://bugzilla.suse.com/1073626

1 0

openSUSE-SU-2021:0026-1: important: Security update for dovecot23
by opensuse-security＠opensuse.org 07 Jan '21

07 Jan '21

openSUSE Security Update: Security update for dovecot23 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0026-1 Rating: important References: #1174920 #1180405 #1180406 Cross-References: CVE-2020-12100 CVE-2020-24386 CVE-2020-25275 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for dovecot23 fixes the following issues: Security issues fixed: - CVE-2020-12100: Fixed a resource exhaustion caused by deeply nested MIME parts (bsc#1174920). - CVE-2020-24386: Fixed an issue with IMAP hibernation that allowed users to access other users' emails (bsc#1180405). - CVE-2020-25275: Fixed a crash when the 10000th MIME part was message/rfc822 (bsc#1180406). Non-security issues fixed: - Pigeonhole was updated to version 0.5.11. - Dovecot was updated to version 2.3.11.3. This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-26=1 Package List: - openSUSE Leap 15.2 (x86_64): dovecot23-2.3.11.3-lp152.2.6.1 dovecot23-backend-mysql-2.3.11.3-lp152.2.6.1 dovecot23-backend-mysql-debuginfo-2.3.11.3-lp152.2.6.1 dovecot23-backend-pgsql-2.3.11.3-lp152.2.6.1 dovecot23-backend-pgsql-debuginfo-2.3.11.3-lp152.2.6.1 dovecot23-backend-sqlite-2.3.11.3-lp152.2.6.1 dovecot23-backend-sqlite-debuginfo-2.3.11.3-lp152.2.6.1 dovecot23-debuginfo-2.3.11.3-lp152.2.6.1 dovecot23-debugsource-2.3.11.3-lp152.2.6.1 dovecot23-devel-2.3.11.3-lp152.2.6.1 dovecot23-fts-2.3.11.3-lp152.2.6.1 dovecot23-fts-debuginfo-2.3.11.3-lp152.2.6.1 dovecot23-fts-lucene-2.3.11.3-lp152.2.6.1 dovecot23-fts-lucene-debuginfo-2.3.11.3-lp152.2.6.1 dovecot23-fts-solr-2.3.11.3-lp152.2.6.1 dovecot23-fts-solr-debuginfo-2.3.11.3-lp152.2.6.1 dovecot23-fts-squat-2.3.11.3-lp152.2.6.1 dovecot23-fts-squat-debuginfo-2.3.11.3-lp152.2.6.1 References: https://www.suse.com/security/cve/CVE-2020-12100.html https://www.suse.com/security/cve/CVE-2020-24386.html https://www.suse.com/security/cve/CVE-2020-25275.html https://bugzilla.suse.com/1174920 https://bugzilla.suse.com/1180405 https://bugzilla.suse.com/1180406

1 0

openSUSE-SU-2021:0025-1: important: Security update for kitty
by opensuse-security＠opensuse.org 07 Jan '21

07 Jan '21

openSUSE Security Update: Security update for kitty ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0025-1 Rating: important References: #1180298 Cross-References: CVE-2020-35605 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for kitty fixes the following issue: - CVE-2020-35605: Fixed an RCE due to filenames containing special characters contained in error messages (boo#1180298). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-25=1 Package List: - openSUSE Leap 15.2 (x86_64): kitty-0.16.0-lp152.2.3.1 kitty-debuginfo-0.16.0-lp152.2.3.1 References: https://www.suse.com/security/cve/CVE-2020-35605.html https://bugzilla.suse.com/1180298

1 0

openSUSE-SU-2021:0024-1: moderate: Security update for python-notebook
by opensuse-security＠opensuse.org 07 Jan '21

07 Jan '21

openSUSE Security Update: Security update for python-notebook ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0024-1 Rating: moderate References: #1180458 Cross-References: CVE-2020-26215 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-notebook fixes the following issue: - CVE-2020-26215: Fixed an open redirect vulnerability (boo#1180458). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-24=1 Package List: - openSUSE Leap 15.2 (noarch): jupyter-notebook-5.7.8-lp152.2.3.1 jupyter-notebook-doc-5.7.8-lp152.2.3.1 jupyter-notebook-lang-5.7.8-lp152.2.3.1 jupyter-notebook-latex-5.7.8-lp152.2.3.1 python2-notebook-5.7.8-lp152.2.3.1 python2-notebook-lang-5.7.8-lp152.2.3.1 python3-notebook-5.7.8-lp152.2.3.1 python3-notebook-lang-5.7.8-lp152.2.3.1 References: https://www.suse.com/security/cve/CVE-2020-26215.html https://bugzilla.suse.com/1180458

1 0

openSUSE-RU-2021:0022-1: moderate: Recommended update for pesign-obs-integration
by maintenance＠opensuse.org 07 Jan '21

07 Jan '21

openSUSE Recommended Update: Recommended update for pesign-obs-integration ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0022-1 Rating: moderate References: #1180242 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for pesign-obs-integration fixes the following issues: - Fix for the wrongly created noarch subpackages. (bsc#1180242) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2021-22=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): pesign-obs-integration-10.1-lp151.2.12.1 References: https://bugzilla.suse.com/1180242

1 0

openSUSE-RU-2021:0023-1: moderate: Recommended update for dmidecode
by maintenance＠opensuse.org 07 Jan '21

07 Jan '21

openSUSE Recommended Update: Recommended update for dmidecode ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0023-1 Rating: moderate References: #1174257 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for dmidecode fixes the following issue: - Two missing commas in the data arrays cause "OUT OF SPEC" messages during the index resolution. (bnc#1174257) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2021-23=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): dmidecode-3.2-lp151.4.9.1 dmidecode-debuginfo-3.2-lp151.4.9.1 dmidecode-debugsource-3.2-lp151.4.9.1 References: https://bugzilla.suse.com/1174257

1 0