June 2021 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2021:0859-1: moderate: Recommended update for openSUSE-build-key
by maintenance＠opensuse.org 09 Jun '21

09 Jun '21

openSUSE Recommended Update: Recommended update for openSUSE-build-key ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0859-1 Rating: moderate References: #1181344 #1184326 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for openSUSE-build-key fixes the following issues: This update will import and trust both the SUSE Linux Enterprise 15 product build GPG key and the openSUSE Backports GPG key to allow for migration from openSUSE Leap 15.2 to openSUSE Leap 15.3. (boo#1184326) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-859=1 Package List: - openSUSE Leap 15.2 (noarch): openSUSE-build-key-1.0-lp152.5.3.1 References: https://bugzilla.suse.com/1181344 https://bugzilla.suse.com/1184326

1 0

openSUSE-SU-2021:0857-1: important: Security update for libX11
by opensuse-security＠opensuse.org 09 Jun '21

09 Jun '21

openSUSE Security Update: Security update for libX11 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0857-1 Rating: important References: #1186643 Cross-References: CVE-2021-31535 CVSS scores: CVE-2021-31535 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libX11 fixes the following issues: - Regression in the fix for CVE-2021-31535, causing segfaults for xforms applications like fdesign (bsc#1186643) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-857=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libX11-6-1.6.5-lp152.5.18.1 libX11-6-debuginfo-1.6.5-lp152.5.18.1 libX11-debugsource-1.6.5-lp152.5.18.1 libX11-devel-1.6.5-lp152.5.18.1 libX11-xcb1-1.6.5-lp152.5.18.1 libX11-xcb1-debuginfo-1.6.5-lp152.5.18.1 - openSUSE Leap 15.2 (x86_64): libX11-6-32bit-1.6.5-lp152.5.18.1 libX11-6-32bit-debuginfo-1.6.5-lp152.5.18.1 libX11-devel-32bit-1.6.5-lp152.5.18.1 libX11-xcb1-32bit-1.6.5-lp152.5.18.1 libX11-xcb1-32bit-debuginfo-1.6.5-lp152.5.18.1 - openSUSE Leap 15.2 (noarch): libX11-data-1.6.5-lp152.5.18.1 References: https://www.suse.com/security/cve/CVE-2021-31535.html https://bugzilla.suse.com/1186643

1 0

openSUSE-RU-2021:0854-1: moderate: Recommended update for gcc10
by maintenance＠opensuse.org 07 Jun '21

07 Jun '21

openSUSE Recommended Update: Recommended update for gcc10 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0854-1 Rating: moderate References: #1029961 #1106014 #1178577 #1178624 #1178675 #1182016 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 6 recommended fixes can now be installed. Description: This update for gcc10 fixes the following issues: - Disable nvptx offloading for aarch64 again since it doesn't work - Fixed a build failure issue. (bsc#1182016) - Fix for memory miscompilation on 'aarch64'. (bsc#1178624, bsc#1178577) - Fix 32bit 'libgnat.so' link. (bsc#1178675) - prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it stays /%lib. (bsc#1029961) - Build complete set of multilibs for arm-none target. (bsc#1106014) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-854=1 Package List: - openSUSE Leap 15.2 (noarch): gcc10-info-10.2.1+git583-lp152.4.1 - openSUSE Leap 15.2 (x86_64): cpp10-10.2.1+git583-lp152.4.1 cpp10-debuginfo-10.2.1+git583-lp152.4.1 cross-nvptx-gcc10-10.3.0+git1587-lp152.5.1 cross-nvptx-gcc10-debuginfo-10.3.0+git1587-lp152.5.1 cross-nvptx-gcc10-debugsource-10.3.0+git1587-lp152.5.1 cross-nvptx-newlib10-devel-10.3.0+git1587-lp152.5.1 gcc10-10.2.1+git583-lp152.4.1 gcc10-32bit-10.2.1+git583-lp152.4.1 gcc10-ada-10.2.1+git583-lp152.4.1 gcc10-ada-32bit-10.2.1+git583-lp152.4.1 gcc10-ada-debuginfo-10.2.1+git583-lp152.4.1 gcc10-c++-10.2.1+git583-lp152.4.1 gcc10-c++-32bit-10.2.1+git583-lp152.4.1 gcc10-c++-debuginfo-10.2.1+git583-lp152.4.1 gcc10-d-10.2.1+git583-lp152.4.1 gcc10-d-32bit-10.2.1+git583-lp152.4.1 gcc10-d-debuginfo-10.2.1+git583-lp152.4.1 gcc10-debuginfo-10.2.1+git583-lp152.4.1 gcc10-debugsource-10.2.1+git583-lp152.4.1 gcc10-fortran-10.2.1+git583-lp152.4.1 gcc10-fortran-32bit-10.2.1+git583-lp152.4.1 gcc10-fortran-debuginfo-10.2.1+git583-lp152.4.1 gcc10-go-10.2.1+git583-lp152.4.1 gcc10-go-32bit-10.2.1+git583-lp152.4.1 gcc10-go-debuginfo-10.2.1+git583-lp152.4.1 gcc10-locale-10.2.1+git583-lp152.4.1 gcc10-obj-c++-10.2.1+git583-lp152.4.1 gcc10-obj-c++-32bit-10.2.1+git583-lp152.4.1 gcc10-obj-c++-debuginfo-10.2.1+git583-lp152.4.1 gcc10-objc-10.2.1+git583-lp152.4.1 gcc10-objc-32bit-10.2.1+git583-lp152.4.1 gcc10-objc-debuginfo-10.2.1+git583-lp152.4.1 libada10-10.2.1+git583-lp152.4.1 libada10-32bit-10.2.1+git583-lp152.4.1 libada10-32bit-debuginfo-10.2.1+git583-lp152.4.1 libada10-debuginfo-10.2.1+git583-lp152.4.1 libasan6-10.2.1+git583-lp152.4.1 libasan6-32bit-10.2.1+git583-lp152.4.1 libasan6-32bit-debuginfo-10.2.1+git583-lp152.4.1 libasan6-debuginfo-10.2.1+git583-lp152.4.1 libatomic1-10.2.1+git583-lp152.4.1 libatomic1-32bit-10.2.1+git583-lp152.4.1 libatomic1-32bit-debuginfo-10.2.1+git583-lp152.4.1 libatomic1-debuginfo-10.2.1+git583-lp152.4.1 libgcc_s1-10.2.1+git583-lp152.4.1 libgcc_s1-32bit-10.2.1+git583-lp152.4.1 libgcc_s1-32bit-debuginfo-10.2.1+git583-lp152.4.1 libgcc_s1-debuginfo-10.2.1+git583-lp152.4.1 libgdruntime1-10.2.1+git583-lp152.4.1 libgdruntime1-32bit-10.2.1+git583-lp152.4.1 libgdruntime1-32bit-debuginfo-10.2.1+git583-lp152.4.1 libgdruntime1-debuginfo-10.2.1+git583-lp152.4.1 libgfortran5-10.2.1+git583-lp152.4.1 libgfortran5-32bit-10.2.1+git583-lp152.4.1 libgfortran5-32bit-debuginfo-10.2.1+git583-lp152.4.1 libgfortran5-debuginfo-10.2.1+git583-lp152.4.1 libgo16-10.2.1+git583-lp152.4.1 libgo16-32bit-10.2.1+git583-lp152.4.1 libgo16-32bit-debuginfo-10.2.1+git583-lp152.4.1 libgo16-debuginfo-10.2.1+git583-lp152.4.1 libgomp1-10.2.1+git583-lp152.4.1 libgomp1-32bit-10.2.1+git583-lp152.4.1 libgomp1-32bit-debuginfo-10.2.1+git583-lp152.4.1 libgomp1-debuginfo-10.2.1+git583-lp152.4.1 libgphobos1-10.2.1+git583-lp152.4.1 libgphobos1-32bit-10.2.1+git583-lp152.4.1 libgphobos1-32bit-debuginfo-10.2.1+git583-lp152.4.1 libgphobos1-debuginfo-10.2.1+git583-lp152.4.1 libitm1-10.2.1+git583-lp152.4.1 libitm1-32bit-10.2.1+git583-lp152.4.1 libitm1-32bit-debuginfo-10.2.1+git583-lp152.4.1 libitm1-debuginfo-10.2.1+git583-lp152.4.1 liblsan0-10.2.1+git583-lp152.4.1 liblsan0-debuginfo-10.2.1+git583-lp152.4.1 libobjc4-10.2.1+git583-lp152.4.1 libobjc4-32bit-10.2.1+git583-lp152.4.1 libobjc4-32bit-debuginfo-10.2.1+git583-lp152.4.1 libobjc4-debuginfo-10.2.1+git583-lp152.4.1 libquadmath0-10.2.1+git583-lp152.4.1 libquadmath0-32bit-10.2.1+git583-lp152.4.1 libquadmath0-32bit-debuginfo-10.2.1+git583-lp152.4.1 libquadmath0-debuginfo-10.2.1+git583-lp152.4.1 libstdc++6-10.2.1+git583-lp152.4.1 libstdc++6-32bit-10.2.1+git583-lp152.4.1 libstdc++6-32bit-debuginfo-10.2.1+git583-lp152.4.1 libstdc++6-debuginfo-10.2.1+git583-lp152.4.1 libstdc++6-devel-gcc10-10.2.1+git583-lp152.4.1 libstdc++6-devel-gcc10-32bit-10.2.1+git583-lp152.4.1 libstdc++6-locale-10.2.1+git583-lp152.4.1 libstdc++6-pp-gcc10-10.2.1+git583-lp152.4.1 libstdc++6-pp-gcc10-32bit-10.2.1+git583-lp152.4.1 libtsan0-10.2.1+git583-lp152.4.1 libtsan0-debuginfo-10.2.1+git583-lp152.4.1 libubsan1-10.2.1+git583-lp152.4.1 libubsan1-32bit-10.2.1+git583-lp152.4.1 libubsan1-32bit-debuginfo-10.2.1+git583-lp152.4.1 libubsan1-debuginfo-10.2.1+git583-lp152.4.1 References: https://bugzilla.suse.com/1029961 https://bugzilla.suse.com/1106014 https://bugzilla.suse.com/1178577 https://bugzilla.suse.com/1178624 https://bugzilla.suse.com/1178675 https://bugzilla.suse.com/1182016

1 0

openSUSE-SU-2021:0851-1: moderate: Security update for python-py
by opensuse-security＠opensuse.org 07 Jun '21

07 Jun '21

openSUSE Security Update: Security update for python-py ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0851-1 Rating: moderate References: #1179805 #1184505 Cross-References: CVE-2020-29651 CVSS scores: CVE-2020-29651 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2020-29651 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for python-py fixes the following issues: - CVE-2020-29651: Fixed regular expression denial of service in svnwc.py (bsc#1179805, bsc#1184505). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-851=1 Package List: - openSUSE Leap 15.2 (noarch): python2-py-1.8.1-lp152.2.6.1 python3-py-1.8.1-lp152.2.6.1 References: https://www.suse.com/security/cve/CVE-2020-29651.html https://bugzilla.suse.com/1179805 https://bugzilla.suse.com/1184505

1 0

openSUSE-SU-2021:0853-1: moderate: Security update for csync2
by opensuse-security＠opensuse.org 07 Jun '21

07 Jun '21

openSUSE Security Update: Security update for csync2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0853-1 Rating: moderate References: #1147137 #1147139 Cross-References: CVE-2019-15522 CVE-2019-15523 CVSS scores: CVE-2019-15522 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2019-15522 (SUSE): 3.5 CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N CVE-2019-15523 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2019-15523 (SUSE): 2.6 CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for csync2 fixes the following issues: - CVE-2019-15522: Fixed an issue where daemon fails to enforce TLS (bsc#1147137) - CVE-2019-15523: Fixed an incorrect TLS handshake error handling (bsc#1147139) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-853=1 Package List: - openSUSE Leap 15.2 (x86_64): csync2-2.0+git.1461714863.10636a4-lp152.5.3.1 csync2-debuginfo-2.0+git.1461714863.10636a4-lp152.5.3.1 csync2-debugsource-2.0+git.1461714863.10636a4-lp152.5.3.1 References: https://www.suse.com/security/cve/CVE-2019-15522.html https://www.suse.com/security/cve/CVE-2019-15523.html https://bugzilla.suse.com/1147137 https://bugzilla.suse.com/1147139

1 0

openSUSE-RU-2021:0852-1: moderate: Recommended update for vorta
by maintenance＠opensuse.org 07 Jun '21

07 Jun '21

openSUSE Recommended Update: Recommended update for vorta ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0852-1 Rating: moderate References: #1184818 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for vorta fixes the following issues: - Add patch from upstream (rebased) to fix issue with wrong permissions on files in mounted directories (boo#1184818, gh#borgbase/vorta#682): Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-852=1 Package List: - openSUSE Leap 15.2 (noarch): vorta-0.6.26-lp152.2.3.1 References: https://bugzilla.suse.com/1184818

1 0

openSUSE-OU-2021:0850-1: Optional update for bison
by maintenance＠opensuse.org 07 Jun '21

07 Jun '21

openSUSE Optional Update: Optional update for bison ______________________________________________________________________________ Announcement ID: openSUSE-OU-2021:0850-1 Rating: low References: #1183777 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update for bison fixes the following issues: - Fixed an issue when building bison for SUSE Linux Enterprise Server 15 SP3 (bsc#1183777) This update does not fix any user visible issues, thus it is optional to install. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Optional Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-850=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): bison-3.0.4-lp152.4.3.1 bison-debuginfo-3.0.4-lp152.4.3.1 bison-debugsource-3.0.4-lp152.4.3.1 - openSUSE Leap 15.2 (x86_64): bison-32bit-3.0.4-lp152.4.3.1 bison-32bit-debuginfo-3.0.4-lp152.4.3.1 - openSUSE Leap 15.2 (noarch): bison-lang-3.0.4-lp152.4.3.1 References: https://bugzilla.suse.com/1183777

1 0

openSUSE-RU-2021:0847-1: Recommended update for fltk
by maintenance＠opensuse.org 07 Jun '21

07 Jun '21

openSUSE Recommended Update: Recommended update for fltk ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0847-1 Rating: low References: #1184122 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for fltk fixes the following issues: - Hardening: Removed non position independent binaries (bsc#1184122) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-847=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): fltk-debugsource-1.3.4-lp152.5.3.1 fltk-devel-1.3.4-lp152.5.3.1 fltk-devel-debuginfo-1.3.4-lp152.5.3.1 fltk-devel-static-1.3.4-lp152.5.3.1 libfltk1-1.3.4-lp152.5.3.1 libfltk1-debuginfo-1.3.4-lp152.5.3.1 - openSUSE Leap 15.2 (x86_64): fltk-devel-32bit-1.3.4-lp152.5.3.1 fltk-devel-32bit-debuginfo-1.3.4-lp152.5.3.1 libfltk1-32bit-1.3.4-lp152.5.3.1 libfltk1-32bit-debuginfo-1.3.4-lp152.5.3.1 References: https://bugzilla.suse.com/1184122

1 0

openSUSE-RU-2021:0849-1: Recommended update for libraw
by maintenance＠opensuse.org 07 Jun '21

07 Jun '21

openSUSE Recommended Update: Recommended update for libraw ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0849-1 Rating: low References: #1184123 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libraw fixes the following issues: - Hardening: Link as PIE (bsc#1184123) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-849=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libraw-debuginfo-0.18.9-lp152.5.6.1 libraw-debugsource-0.18.9-lp152.5.6.1 libraw-devel-0.18.9-lp152.5.6.1 libraw-devel-static-0.18.9-lp152.5.6.1 libraw-tools-0.18.9-lp152.5.6.1 libraw-tools-debuginfo-0.18.9-lp152.5.6.1 libraw16-0.18.9-lp152.5.6.1 libraw16-debuginfo-0.18.9-lp152.5.6.1 References: https://bugzilla.suse.com/1184123

1 0

openSUSE-RU-2021:0848-1: Recommended update for doxygen
by maintenance＠opensuse.org 07 Jun '21

07 Jun '21

openSUSE Recommended Update: Recommended update for doxygen ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0848-1 Rating: low References: #1184122 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for doxygen fixes the following issues: - Hardeing: Removed non-PIE binaries (bsc#1184122) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-848=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): doxygen-1.8.14-lp152.4.3.1 doxygen-debuginfo-1.8.14-lp152.4.3.1 doxygen-debugsource-1.8.14-lp152.4.3.1 - openSUSE Leap 15.2 (x86_64): doxywizard-1.8.14-lp152.4.3.1 doxywizard-debuginfo-1.8.14-lp152.4.3.1 doxywizard-debugsource-1.8.14-lp152.4.3.1 References: https://bugzilla.suse.com/1184122

1 0