February 2021

openSUSE-RU-2021:0339-1: moderate: Recommended update for yast2-security
by maintenance＠opensuse.org 25 Feb '21

25 Feb '21

openSUSE Recommended Update: Recommended update for yast2-security ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0339-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for yast2-security fixes … [View More]

1 0

openSUSE-RU-2021:0343-1: moderate: Recommended update for Box2D
by maintenance＠opensuse.org 25 Feb '21

25 Feb '21

openSUSE Recommended Update: Recommended update for Box2D ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0343-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for Box2D fixes the … [View More]

1 0

openSUSE-RU-2021:0342-1: moderate: Recommended update for postgresql10
by maintenance＠opensuse.org 25 Feb '21

25 Feb '21

openSUSE Recommended Update: Recommended update for postgresql10 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0342-1 Rating: moderate References: #1179765 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for postgresql10 … [View More]

1 0

openSUSE-RU-2021:0344-1: moderate: Recommended update for tboot
by maintenance＠opensuse.org 25 Feb '21

25 Feb '21

openSUSE Recommended Update: Recommended update for tboot ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0344-1 Rating: moderate References: #1180756 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for tboot fixes the … [View More]

1 0

openSUSE-SU-2021:0338-1: important: Security update for python-djangorestframework
by opensuse-security＠opensuse.org 25 Feb '21

25 Feb '21

openSUSE Security Update: Security update for python-djangorestframework ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0338-1 Rating: important References: #1177205 Cross-References: CVE-2020-25626 CVSS scores: CVE-2020-25626 (NVD) : 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2020-25626 (SUSE): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:L Affected … [View More]

1 0

openSUSE-RU-2021:0336-1: moderate: Recommended update for python-pycryptodomex
by maintenance＠opensuse.org 24 Feb '21

24 Feb '21

openSUSE Recommended Update: Recommended update for python-pycryptodomex ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0336-1 Rating: moderate References: #1181611 Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update … [View More]

1 0

openSUSE-SU-2021:0337-1: moderate: Security update for postgresql, postgresql13
by opensuse-security＠opensuse.org 24 Feb '21

24 Feb '21

openSUSE Security Update: Security update for postgresql, postgresql13 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0337-1 Rating: moderate References: #1178666 #1178667 #1178668 #1178961 Cross-References: CVE-2020-25694 CVE-2020-25695 CVE-2020-25696 CVSS scores: CVE-2020-25694 (NVD) : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2020-… [View More]25694 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2020-25695 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2020-25695 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2020-25696 (NVD) : 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-25696 (SUSE): 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves three vulnerabilities and has one errata is now available. Description: This update for postgresql, postgresql13 fixes the following issues: This update ships postgresql13. Upgrade to version 13.1: * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD and firing of deferred triggers within index expressions and materialized view queries. * CVE-2020-25694, bsc#1178667: a) Fix usage of complex connection-string parameters in pg_dump, pg_restore, clusterdb, reindexdb, and vacuumdb. b) When psql's \connect command re-uses connection parameters, ensure that all non-overridden parameters from a previous connection string are re-used. * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from modifying specially-treated variables. * Fix recently-added timetz test case so it works when the USA is not observing daylight savings time. (obsoletes postgresql-timetz.patch) * https://www.postgresql.org/about/news/2111/ * https://www.postgresql.org/docs/13/release-13-1.html Initial packaging of PostgreSQL 13: * https://www.postgresql.org/about/news/2077/ * https://www.postgresql.org/docs/13/release-13.html - bsc#1178961: %ghost the symlinks to pg_config and ecpg. Changes in postgresql wrapper package: - Bump major version to 13. - We also transfer PostgreSQL 9.4.26 to the new package layout in SLE12-SP2 and newer. Reflect this in the conflict with postgresql94. - Also conflict with PostgreSQL versions before 9. - Conflicting with older versions is not limited to SLE. This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-337=1 Package List: - openSUSE Leap 15.2 (noarch): postgresql-13-lp152.3.6.1 postgresql-contrib-13-lp152.3.6.1 postgresql-devel-13-lp152.3.6.1 postgresql-docs-13-lp152.3.6.1 postgresql-llvmjit-13-lp152.3.6.1 postgresql-plperl-13-lp152.3.6.1 postgresql-plpython-13-lp152.3.6.1 postgresql-pltcl-13-lp152.3.6.1 postgresql-server-13-lp152.3.6.1 postgresql-server-devel-13-lp152.3.6.1 postgresql-test-13-lp152.3.6.1 References: https://www.suse.com/security/cve/CVE-2020-25694.html https://www.suse.com/security/cve/CVE-2020-25695.html https://www.suse.com/security/cve/CVE-2020-25696.html https://bugzilla.suse.com/1178666 https://bugzilla.suse.com/1178667 https://bugzilla.suse.com/1178668 https://bugzilla.suse.com/1178961 [View Less]

1 0

openSUSE-SU-2021:0335-1: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 24 Feb '21

24 Feb '21

openSUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0335-1 Rating: low References: #1181848 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for MozillaFirefox fixes the … [View More]

1 0

openSUSE-SU-2021:0334-1: moderate: Security update for tor
by opensuse-security＠opensuse.org 23 Feb '21

23 Feb '21

openSUSE Security Update: Security update for tor ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0334-1 Rating: moderate References: #1178741 Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for tor fixes the … [View More]

1 0

openSUSE-RU-2021:0333-1: moderate: Recommended update for virtualbox
by maintenance＠opensuse.org 23 Feb '21

23 Feb '21

openSUSE Recommended Update: Recommended update for virtualbox ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0333-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for virtualbox fixes the … [View More]

1 0

Main

Development

Information

Community

Social Media

Other

openSUSE Updates