June 2021 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2021:2169-1: moderate: Recommended update for hexchat
by maintenance＠opensuse.org 28 Jun '21

28 Jun '21

openSUSE Recommended Update: Recommended update for hexchat ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:2169-1 Rating: moderate References: #1187587 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for hexchat fixes the following issues: - Added Libera.chat to available servers (bsc#1187587) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-2169=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): hexchat-2.12.4-3.3.1 hexchat-debuginfo-2.12.4-3.3.1 hexchat-debugsource-2.12.4-3.3.1 hexchat-devel-2.12.4-3.3.1 hexchat-plugins-lua-2.12.4-3.3.1 hexchat-plugins-lua-debuginfo-2.12.4-3.3.1 hexchat-plugins-perl-2.12.4-3.3.1 hexchat-plugins-perl-debuginfo-2.12.4-3.3.1 hexchat-plugins-python3-2.12.4-3.3.1 hexchat-plugins-python3-debuginfo-2.12.4-3.3.1 - openSUSE Leap 15.3 (noarch): hexchat-lang-2.12.4-3.3.1 References: https://bugzilla.suse.com/1187587

1 0

openSUSE-RU-2021:2166-1: moderate: Recommended update for clamav-database
by maintenance＠opensuse.org 28 Jun '21

28 Jun '21

openSUSE Recommended Update: Recommended update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:2166-1 Rating: moderate References: #1084929 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for clamav-database fixes the following issues: Changes in clamav-database: - database refresh on 2021-06-28 (bsc#1084929) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-2166=1 Package List: - openSUSE Leap 15.3 (noarch): clamav-database-202106280012-3.477.1 References: https://bugzilla.suse.com/1084929

1 0

openSUSE-RU-2021:2165-1: moderate: Recommended update for obs-service-kiwi_metainfo_helper
by maintenance＠opensuse.org 28 Jun '21

28 Jun '21

openSUSE Recommended Update: Recommended update for obs-service-kiwi_metainfo_helper ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:2165-1 Rating: moderate References: #1180263 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for obs-service-kiwi_metainfo_helper fixes the following issues: - Provide various modified spellings of 'PRETTY_NAME' useful for writing KIWI image definitions with reduced diff between SLE, Leap and Tumbleweed. (Needed for jsc#SLE-12986) - Update README and service definition XML to reflect all variables. - Don't enable pipefail: rpm got SIGPIPE because grep -q exits early and closes the other end, which made the whole expression fail. - Read os-release from the to be installed RPMs. This avoids pulling in distribution-release when not necessary. (bsc#1180263) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-2165=1 Package List: - openSUSE Leap 15.3 (noarch): obs-service-kiwi_metainfo_helper-0.3-1.12.1 References: https://bugzilla.suse.com/1180263

1 0

openSUSE-SU-2021:0937-1: moderate: Security update for live555
by opensuse-security＠opensuse.org 28 Jun '21

28 Jun '21

openSUSE Security Update: Security update for live555 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0937-1 Rating: moderate References: #1146283 #1185874 Cross-References: CVE-2019-15232 CVE-2021-28899 CVSS scores: CVE-2019-15232 (NVD) : 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-28899 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for live555 fixes the following issues: Update to 2021.05.22: - Lots of fixes and updates, including the security fix for CVE-2021-28899 (boo#1185874) and CVE-2019-15232 (boo#1146283). See the list in http://live555.com/liveMedia/public/changelog.txt This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2021-937=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): libBasicUsageEnvironment1-2021.05.22-bp152.4.4.1 libUsageEnvironment3-2021.05.22-bp152.4.4.1 libgroupsock30-2021.05.22-bp152.4.4.1 libliveMedia94-2021.05.22-bp152.4.4.1 live555-2021.05.22-bp152.4.4.1 live555-devel-2021.05.22-bp152.4.4.1 References: https://www.suse.com/security/cve/CVE-2019-15232.html https://www.suse.com/security/cve/CVE-2021-28899.html https://bugzilla.suse.com/1146283 https://bugzilla.suse.com/1185874

1 0

openSUSE-SU-2021:0933-1: moderate: Security update for java-1_8_0-openjdk
by opensuse-security＠opensuse.org 27 Jun '21

27 Jun '21

openSUSE Security Update: Security update for java-1_8_0-openjdk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0933-1 Rating: moderate References: #1185055 Cross-References: CVE-2021-2163 CVSS scores: CVE-2021-2163 (NVD) : 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2021-2163 (SUSE): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for java-1_8_0-openjdk fixes the following issues: - Update to version jdk8u292 (icedtea 3.19.0). - CVE-2021-2161: Fixed incomplete enforcement of JAR signing disabled algorithms (bsc#1185055). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-933=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): java-1_8_0-openjdk-1.8.0.292-lp152.2.12.2 java-1_8_0-openjdk-accessibility-1.8.0.292-lp152.2.12.2 java-1_8_0-openjdk-debuginfo-1.8.0.292-lp152.2.12.2 java-1_8_0-openjdk-debugsource-1.8.0.292-lp152.2.12.2 java-1_8_0-openjdk-demo-1.8.0.292-lp152.2.12.2 java-1_8_0-openjdk-demo-debuginfo-1.8.0.292-lp152.2.12.2 java-1_8_0-openjdk-devel-1.8.0.292-lp152.2.12.2 java-1_8_0-openjdk-devel-debuginfo-1.8.0.292-lp152.2.12.2 java-1_8_0-openjdk-headless-1.8.0.292-lp152.2.12.2 java-1_8_0-openjdk-headless-debuginfo-1.8.0.292-lp152.2.12.2 java-1_8_0-openjdk-src-1.8.0.292-lp152.2.12.2 - openSUSE Leap 15.2 (noarch): java-1_8_0-openjdk-javadoc-1.8.0.292-lp152.2.12.2 References: https://www.suse.com/security/cve/CVE-2021-2163.html https://bugzilla.suse.com/1185055

1 0

openSUSE-RU-2021:0935-1: moderate: Recommended update for python2-numpy
by maintenance＠opensuse.org 27 Jun '21

27 Jun '21

openSUSE Recommended Update: Recommended update for python2-numpy ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0935-1 Rating: moderate References: #1182636 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python2-numpy fixes the following issues: python2-numpy was updated to 1.16.5: * ENH: Add project URLs to setup.py * TEST, ENH: fix tests and ctypes code for PyPy * BUG: use npy_intp instead of int for indexing array * TST: Ignore DeprecationWarning during nose imports * BUG: Fix use-after-free in boolean indexing * MAINT/BUG/DOC: Fix errors in _add_newdocs * BUG: fix byte order reversal for datetime64[ns] * MAINT,BUG: Use nbytes to also catch empty descr during allocation * BUG: np.array cleared errors occured in PyMemoryView_FromObject * BUG: Fixes for Undefined Behavior Sanitizer (UBSan) errors. * BUG: ensure that casting to/from structured is properly checked. * MAINT: fix histogram*d dispatchers * BUG: further fixup to histogram2d dispatcher. * BUG: Replace contextlib.suppress for Python 2.7 * BUG: fix compilation of 3rd party modules with Py_LIMITED_API... * BUG: Fix memory leak in dtype from dict contructor * DOC: Document array_function at a higher level. * BUG, DOC: add new recfunctions to `__all__` * BUG: Remove stray print that causes a SystemError on python 3.7 * TST: Pin pytest version to 5.0.1. * ENH: Enable huge pages in all Linux builds * BUG: fix behavior of structured_to_unstructured on non-trivial... * REL: Prepare for the NumPy 1.16.5 release. - Add this python2-only version since the latest release doesn't support python2. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-935=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): python-Cython-debuginfo-0.29.14-lp152.2.6.1 python-Cython-debugsource-0.29.14-lp152.2.6.1 python-numpy_1_16_5-gnu-hpc-debugsource-1.16.5-lp152.2.3.1 python2-Cython-0.29.14-lp152.2.6.1 python2-Cython-debuginfo-0.29.14-lp152.2.6.1 python2-numpy-1.16.5-lp152.2.3.1 python2-numpy-debuginfo-1.16.5-lp152.2.3.1 python2-numpy-debugsource-1.16.5-lp152.2.3.1 python2-numpy-devel-1.16.5-lp152.2.3.1 python2-numpy-gnu-hpc-1.16.5-lp152.2.3.1 python2-numpy-gnu-hpc-devel-1.16.5-lp152.2.3.1 python2-numpy_1_16_5-gnu-hpc-1.16.5-lp152.2.3.1 python2-numpy_1_16_5-gnu-hpc-debuginfo-1.16.5-lp152.2.3.1 python2-numpy_1_16_5-gnu-hpc-devel-1.16.5-lp152.2.3.1 python3-Cython-0.29.14-lp152.2.6.1 python3-Cython-debuginfo-0.29.14-lp152.2.6.1 References: https://bugzilla.suse.com/1182636

1 0

openSUSE-SU-2021:0934-1: moderate: Security update for tpm2.0-tools
by opensuse-security＠opensuse.org 27 Jun '21

27 Jun '21

openSUSE Security Update: Security update for tpm2.0-tools ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0934-1 Rating: moderate References: #1186490 Cross-References: CVE-2021-3565 CVSS scores: CVE-2021-3565 (NVD) : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2021-3565 (SUSE): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for tpm2.0-tools fixes the following issues: - CVE-2021-3565: Fixed issue when no encrypted session with the TPM is used (bsc#1186490). This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-934=1 Package List: - openSUSE Leap 15.2 (x86_64): tpm2.0-tools-4.1-lp152.2.3.1 tpm2.0-tools-debuginfo-4.1-lp152.2.3.1 tpm2.0-tools-debugsource-4.1-lp152.2.3.1 References: https://www.suse.com/security/cve/CVE-2021-3565.html https://bugzilla.suse.com/1186490

1 0

openSUSE-RU-2021:0936-1: moderate: Recommended update for trytond, trytond_account, trytond_account_invoice, trytond_account_invoice_stock, trytond_account_product, trytond_company, trytond_country, trytond_currency, trytond_party, trytond_product, trytond_purchase, trytond_purchase_request, trytond_stock, trytond_stock_lot, trytond_stock_supply
by maintenance＠opensuse.org 27 Jun '21

27 Jun '21

openSUSE Recommended Update: Recommended update for trytond, trytond_account, trytond_account_invoice, trytond_account_invoice_stock, trytond_account_product, trytond_company, trytond_country, trytond_currency, trytond_party, trytond_product, trytond_purchase, trytond_purchase_request, trytond_stock, trytond_stock_lot, trytond_stock_supply ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0936-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for trytond, trytond_account, trytond_account_invoice, trytond_account_invoice_stock, trytond_account_product, trytond_company, trytond_country, trytond_currency, trytond_party, trytond_product, trytond_purchase, trytond_purchase_request, trytond_stock, trytond_stock_lot, trytond_stock_supply fixes the following issues: Changes in trytond_stock_supply: - Version 5.0.7 - Bugfix Release Changes in trytond_stock_lot: - Version 5.0.3 - Bugfix Release Changes in trytond_stock: - Version 5.0.14 - Bugfix Release - Version 5.0.13 - Bugfix Release - Version 5.0.12 - Bugfix Release Changes in trytond_purchase_request: - Version 5.0.5 - Bugfix Release Changes in trytond_purchase: - Version 5.0.7 - Bugfix Release - Version 5.0.6 - Bugfix Release - Version 5.0.5 - Bugfix Release Changes in trytond_product: - Version 5.0.4 - Bugfix Release Changes in trytond_party: - Version 5.0.5 - Bugfix Release - Version 5.0.4 - Bugfix Release Changes in trytond_currency: - Version 5.0.6 - Bugfix Release - Version 5.0.5 - Bugfix Release Changes in trytond_country: - Version 5.0.3 - Bugfix Release Changes in trytond_company: - Version 5.0.3 - Bugfix Release Changes in trytond_account_product: - Version 5.0.5 - Bugfix Release Changes in trytond_account_invoice_stock: - Version 5.0.4 - Bugfix Release Changes in trytond_account_invoice: - Version 5.0.13 - Bugfix Release - Version 5.0.12 - Bugfix Release - Version 5.0.11 - Bugfix Release Changes in trytond_account: - Version 5.0.18 - Bugfix Release - Version 5.0.17 - Bugfix Release Changes in trytond: - Version 5.0.36 - Bugfix Release - Version 5.0.35 - Bugfix Release - Parameter for webdav server added to trytond.conf - Version 5.0.34 - Bugfix Release This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2021-936=1 Package List: - openSUSE Backports SLE-15-SP2 (noarch): trytond_stock_supply-5.0.7-bp152.2.4.1 References:

1 0

openSUSE-RU-2021:0932-1: moderate: Recommended update for trytond, trytond_account, trytond_account_invoice, trytond_account_invoice_stock, trytond_account_product, trytond_company, trytond_country, trytond_currency, trytond_party, trytond_product, trytond_purchase, trytond_purchase_request, trytond_stock, trytond_stock_lot, trytond_stock_supply
by maintenance＠opensuse.org 27 Jun '21

27 Jun '21

openSUSE Recommended Update: Recommended update for trytond, trytond_account, trytond_account_invoice, trytond_account_invoice_stock, trytond_account_product, trytond_company, trytond_country, trytond_currency, trytond_party, trytond_product, trytond_purchase, trytond_purchase_request, trytond_stock, trytond_stock_lot, trytond_stock_supply ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0932-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for trytond, trytond_account, trytond_account_invoice, trytond_account_invoice_stock, trytond_account_product, trytond_company, trytond_country, trytond_currency, trytond_party, trytond_product, trytond_purchase, trytond_purchase_request, trytond_stock, trytond_stock_lot, trytond_stock_supply fixes the following issues: Changes in trytond_stock_supply: - Version 5.0.7 - Bugfix Release Changes in trytond_stock_lot: - Version 5.0.3 - Bugfix Release Changes in trytond_stock: - Version 5.0.14 - Bugfix Release - Version 5.0.13 - Bugfix Release - Version 5.0.12 - Bugfix Release Changes in trytond_purchase_request: - Version 5.0.5 - Bugfix Release Changes in trytond_purchase: - Version 5.0.7 - Bugfix Release - Version 5.0.6 - Bugfix Release - Version 5.0.5 - Bugfix Release Changes in trytond_product: - Version 5.0.4 - Bugfix Release Changes in trytond_party: - Version 5.0.5 - Bugfix Release - Version 5.0.4 - Bugfix Release Changes in trytond_currency: - Version 5.0.6 - Bugfix Release - Version 5.0.5 - Bugfix Release Changes in trytond_country: - Version 5.0.3 - Bugfix Release Changes in trytond_company: - Version 5.0.3 - Bugfix Release Changes in trytond_account_product: - Version 5.0.5 - Bugfix Release Changes in trytond_account_invoice_stock: - Version 5.0.4 - Bugfix Release Changes in trytond_account_invoice: - Version 5.0.13 - Bugfix Release - Version 5.0.12 - Bugfix Release - Version 5.0.11 - Bugfix Release Changes in trytond_account: - Version 5.0.18 - Bugfix Release - Version 5.0.17 - Bugfix Release Changes in trytond: - Version 5.0.36 - Bugfix Release - Version 5.0.35 - Bugfix Release - Parameter for webdav server added to trytond.conf - Version 5.0.34 - Bugfix Release This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2021-932=1 Package List: - openSUSE Backports SLE-15-SP2 (noarch): trytond_account_invoice-5.0.13-bp152.2.13.1 trytond_account_invoice_stock-5.0.4-bp152.2.3.1 trytond_company-5.0.3-bp152.2.3.1 trytond_purchase-5.0.7-bp152.2.3.1 References:

1 0

openSUSE-SU-2021:0931-1: important: Security update for roundcubemail
by opensuse-security＠opensuse.org 27 Jun '21

27 Jun '21

openSUSE Security Update: Security update for roundcubemail ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0931-1 Rating: important References: #1180399 #1187706 #1187707 Cross-References: CVE-2020-18670 CVE-2020-18671 CVE-2020-35730 CVSS scores: CVE-2020-35730 (NVD) : 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for roundcubemail fixes the following issues: Upgrade to version 1.3.16 This is a security update to the LTS version 1.3. It fixes a recently reported stored cross-site scripting (XSS) vulnerability via HTML or plain text messages with malicious content. References: - CVE-2020-18670: Cross Site Scripting (XSS) vulneraibility via database host and user in /installer/test.php (boo#1187707) - CVE-2020-18671: Cross Site Scripting (XSS) vulnerability via smtp config in /installer/test.php (boo#1187706) - CVE-2020-35730: cross-site scripting (XSS) vulnerability via HTML or plain text messages with malicious content (boo#1180399) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-931=1 Package List: - openSUSE Leap 15.2 (noarch): roundcubemail-1.3.16-lp152.4.6.1 References: https://www.suse.com/security/cve/CVE-2020-18670.html https://www.suse.com/security/cve/CVE-2020-18671.html https://www.suse.com/security/cve/CVE-2020-35730.html https://bugzilla.suse.com/1180399 https://bugzilla.suse.com/1187706 https://bugzilla.suse.com/1187707

1 0