April 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2020:0565-1: important: Security update for cacti, cacti-spine
by opensuse-security＠opensuse.org 30 Apr '20

30 Apr '20

openSUSE Security Update: Security update for cacti, cacti-spine ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0565-1 Rating: important References: #1082318 #1122242 #1122243 #1122244 #1122245 #1122535 #1158990 #1158992 #1161297 #1164675 #1169215 Cross-References: CVE-2009-4112 CVE-2018-20723 CVE-2018-20724 CVE-2018-20725 CVE-2018-20726 CVE-2019-16723 CVE-2019-17357 CVE-2019-17358 CVE-2020-7106 CVE-2020-7237 CVE-2020-8813 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes 11 vulnerabilities is now available. Description: This update for cacti, cacti-spine to version 1.2.11 fixes the following issues: This update is fixing multiple vulnerabilities and adding bug fixes. For more details consult the changes file. This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-565=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): cacti-spine-1.2.11-bp151.4.6.1 cacti-spine-debuginfo-1.2.11-bp151.4.6.1 cacti-spine-debugsource-1.2.11-bp151.4.6.1 - openSUSE Backports SLE-15-SP1 (noarch): cacti-1.2.11-bp151.4.6.1 References: https://www.suse.com/security/cve/CVE-2009-4112.html https://www.suse.com/security/cve/CVE-2018-20723.html https://www.suse.com/security/cve/CVE-2018-20724.html https://www.suse.com/security/cve/CVE-2018-20725.html https://www.suse.com/security/cve/CVE-2018-20726.html https://www.suse.com/security/cve/CVE-2019-16723.html https://www.suse.com/security/cve/CVE-2019-17357.html https://www.suse.com/security/cve/CVE-2019-17358.html https://www.suse.com/security/cve/CVE-2020-7106.html https://www.suse.com/security/cve/CVE-2020-7237.html https://www.suse.com/security/cve/CVE-2020-8813.html https://bugzilla.suse.com/1082318 https://bugzilla.suse.com/1122242 https://bugzilla.suse.com/1122243 https://bugzilla.suse.com/1122244 https://bugzilla.suse.com/1122245 https://bugzilla.suse.com/1122535 https://bugzilla.suse.com/1158990 https://bugzilla.suse.com/1158992 https://bugzilla.suse.com/1161297 https://bugzilla.suse.com/1164675 https://bugzilla.suse.com/1169215

1 0

openSUSE-SU-2020:0564-1: critical: Security update for salt
by opensuse-security＠opensuse.org 30 Apr '20

30 Apr '20

openSUSE Security Update: Security update for salt ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0564-1 Rating: critical References: #1170595 Cross-References: CVE-2020-11651 CVE-2020-11652 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for salt fixes the following issues: - Fix CVE-2020-11651 and CVE-2020-11652 (bsc#1170595) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-564=1 Package List: - openSUSE Leap 15.1 (x86_64): python2-salt-2019.2.0-lp151.5.15.1 python3-salt-2019.2.0-lp151.5.15.1 salt-2019.2.0-lp151.5.15.1 salt-api-2019.2.0-lp151.5.15.1 salt-cloud-2019.2.0-lp151.5.15.1 salt-doc-2019.2.0-lp151.5.15.1 salt-master-2019.2.0-lp151.5.15.1 salt-minion-2019.2.0-lp151.5.15.1 salt-proxy-2019.2.0-lp151.5.15.1 salt-ssh-2019.2.0-lp151.5.15.1 salt-standalone-formulas-configuration-2019.2.0-lp151.5.15.1 salt-syndic-2019.2.0-lp151.5.15.1 - openSUSE Leap 15.1 (noarch): salt-bash-completion-2019.2.0-lp151.5.15.1 salt-fish-completion-2019.2.0-lp151.5.15.1 salt-zsh-completion-2019.2.0-lp151.5.15.1 References: https://www.suse.com/security/cve/CVE-2020-11651.html https://www.suse.com/security/cve/CVE-2020-11652.html https://bugzilla.suse.com/1170595

1 0

openSUSE-SU-2020:0562-1: moderate: Security update for vlc
by opensuse-security＠opensuse.org 29 Apr '20

29 Apr '20

openSUSE Security Update: Security update for vlc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0562-1 Rating: moderate References: #1142161 #1146428 Cross-References: CVE-2019-13602 CVE-2019-13962 CVE-2019-14437 CVE-2019-14438 CVE-2019-14498 CVE-2019-14533 CVE-2019-14534 CVE-2019-14535 CVE-2019-14776 CVE-2019-14777 CVE-2019-14778 CVE-2019-14970 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes 12 vulnerabilities is now available. Description: This update for vlc fixes the following issues: vlc was updated to version 3.0.9.2: + Misc: Properly bump the version in configure.ac. Changes from version 3.0.9.1: + Misc: Fix VLSub returning 401 for earch request. Changes from version 3.0.9: + Core: Work around busy looping when playing an invalid item through VLM. + Access: * Multiple dvdread and dvdnav crashs fixes * Fixed DVD glitches on clip change * Fixed dvdread commands/data sequence inversion in some cases causing unwanted glitches * Better handling of authored as corrupted DVD * Added libsmb2 support for SMB2/3 shares + Demux: * Fix TTML entities not passed to decoder * Fixed some WebVTT styling tags being not applied * Misc raw H264/HEVC frame rate fixes * Fix adaptive regression on TS format change (mostly HLS) * Fixed MP4 regression with twos/sowt PCM audio * Fixed some MP4 raw quicktime and ms-PCM audio * Fixed MP4 interlacing handling * Multiple adaptive stack (DASH/HLS/Smooth) fixes * Enabled Live seeking for HLS * Fixed seeking in some cases for HLS * Improved Live playback for Smooth and DASH * Fixed adaptive unwanted end of stream in some cases * Faster adaptive start and new buffering control options + Packetizers: * Fixes H264/HEVC incomplete draining in some cases * packetizer_helper: Fix potential trailing junk on last packet * Added missing drain in packetizers that was causing missing last frame or audio * Improved check to prevent fLAC synchronization drops + Decoder: * avcodec: revector video decoder to fix incomplete drain * spudec: implemented palette updates, fixing missing subtitles on some DVD * Fixed WebVTT CSS styling not being applied on Windows/macOS * Fixed Hebrew teletext pages support in zvbi * Fixed Dav1d aborting decoding on corrupted picture * Extract and display of all CEA708 subtitles * Update libfaad to 2.9.1 * Add DXVA support for VP9 Profile 2 (10 bits) * Mediacodec aspect ratio with Amazon devices + Audio output: * Added support for iOS audiounit audio above 48KHz * Added support for amem audio up to 384KHz + Video output: * Fix for opengl glitches in some drivers * Fix GMA950 opengl support on macOS * YUV to RGB StretchRect fixes with NVIDIA drivers * Use libpacebo new tone mapping desaturation algorithm + Text renderer: * Fix crashes on macOS with SSA/ASS subtitles containing emoji * Fixed unwanted growing background in Freetype rendering and Y padding + Mux: Fixed some YUV mappings + Service Discovery: Update libmicrodns to 0.1.2. + Misc: * Update YouTube, SoundCloud and Vocaroo scripts: this restores playback of YouTube URLs. * Add missing .wpl & .zpl file associations on Windows * Improved chromecast audio quality Update to version 3.0.8 'vetinari': + Fix stuttering for low framerate videos + Improve adaptive streaming + Improve audio output for external audio devices on macOS/iOS + Fix hardware acceleration with Direct3D11 for some AMD drivers + Fix WebVTT subtitles rendering + Vetinari is a major release changing a lot in the media engine of VLC. It is one of the largest release we've ever done. Notably, it: - activates hardware decoding on all platforms, of H.264 & H.265, 8 & 10bits, allowing 4K60 or even 8K decoding with little CPU consumption, - merges all the code from the mobile ports into the same codebase with common numbering and releases, - supports 360 video and 3D audio, and prepares for VR content, - supports direct HDR and HDR tone-mapping, - updates the audio passthrough for HD Audio codecs, - allows browsing of local network drives like SMB, FTP, SFTP, NFS... - stores the passwords securely, - brings a new subtitle rendering engine, supporting ComplexTextLayout and font fallback to support multiple languages and fonts, - supports ChromeCast with the new renderer framework, - adds support for numerous new formats and codecs, including WebVTT, AV1, TTML, HQX, 708, Cineform, and many more, - improves Bluray support with Java menus, aka BD-J, - updates the macOS interface with major cleaning and improvements, - support HiDPI UI on Windows, with the switch to Qt5, - prepares the experimental support for Wayland on Linux, and switches to OpenGL by default on Linux. + Security fixes included: * Fix a buffer overflow in the MKV demuxer (CVE-2019-14970) * Fix a read buffer overflow in the avcodec decoder (CVE-2019-13962) * Fix a read buffer overflow in the FAAD decoder * Fix a read buffer overflow in the OGG demuxer (CVE-2019-14437, CVE-2019-14438) * Fix a read buffer overflow in the ASF demuxer (CVE-2019-14776) * Fix a use after free in the MKV demuxer (CVE-2019-14777, CVE-2019-14778) * Fix a use after free in the ASF demuxer (CVE-2019-14533) * Fix a couple of integer underflows in the MP4 demuxer (CVE-2019-13602) * Fix a null dereference in the dvdnav demuxer * Fix a null dereference in the ASF demuxer (CVE-2019-14534) * Fix a null dereference in the AVI demuxer * Fix a division by zero in the CAF demuxer (CVE-2019-14498) * Fix a division by zero in the ASF demuxer (CVE-2019-14535) - Disbale mod-plug for the time being: libmodplug 0.8.9 is not yet available. - Disable SDL_image (SDL 1.2) based codec. It is only a wrapper around some image loading libraries (libpng, libjpeg, ...) which are either wrapped by vlc itself (libpng_plugin.so) or via libavcodec (libavcodec_plugin.so). This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-562=1 Package List: - openSUSE Backports SLE-15-SP1 (x86_64): libvlc5-3.0.9.2-bp151.5.6.1 libvlccore9-3.0.9.2-bp151.5.6.1 vlc-3.0.9.2-bp151.5.6.1 vlc-codec-gstreamer-3.0.9.2-bp151.5.6.1 vlc-devel-3.0.9.2-bp151.5.6.1 vlc-jack-3.0.9.2-bp151.5.6.1 vlc-noX-3.0.9.2-bp151.5.6.1 vlc-opencv-3.0.9.2-bp151.5.6.1 vlc-qt-3.0.9.2-bp151.5.6.1 vlc-vdpau-3.0.9.2-bp151.5.6.1 - openSUSE Backports SLE-15-SP1 (noarch): vlc-lang-3.0.9.2-bp151.5.6.1 References: https://www.suse.com/security/cve/CVE-2019-13602.html https://www.suse.com/security/cve/CVE-2019-13962.html https://www.suse.com/security/cve/CVE-2019-14437.html https://www.suse.com/security/cve/CVE-2019-14438.html https://www.suse.com/security/cve/CVE-2019-14498.html https://www.suse.com/security/cve/CVE-2019-14533.html https://www.suse.com/security/cve/CVE-2019-14534.html https://www.suse.com/security/cve/CVE-2019-14535.html https://www.suse.com/security/cve/CVE-2019-14776.html https://www.suse.com/security/cve/CVE-2019-14777.html https://www.suse.com/security/cve/CVE-2019-14778.html https://www.suse.com/security/cve/CVE-2019-14970.html https://bugzilla.suse.com/1142161 https://bugzilla.suse.com/1146428

1 0

openSUSE-SU-2020:0563-1: moderate: Security update for teeworlds
by opensuse-security＠opensuse.org 29 Apr '20

29 Apr '20

openSUSE Security Update: Security update for teeworlds ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0563-1 Rating: moderate References: #1170252 #1170253 Cross-References: CVE-2019-20787 CVE-2020-12066 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for teeworlds to version 0.7.5 fixes the following issues: Security issues fixed: - CVE-2020-12066: Fixed a denial of service against the server (boo#1170252) - CVE-2019-20787: Fixed an integer overflow when computing a tilemap size (boo#1170253) Non-security issues fixed: - multiple smaller bug fixes and improvements. This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-563=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): teeworlds-0.7.5-bp151.2.6.1 References: https://www.suse.com/security/cve/CVE-2019-20787.html https://www.suse.com/security/cve/CVE-2020-12066.html https://bugzilla.suse.com/1170252 https://bugzilla.suse.com/1170253

1 0

openSUSE-RU-2020:0560-1: moderate: Recommended update for strawberry
by maintenance＠opensuse.org 28 Apr '20

28 Apr '20

openSUSE Recommended Update: Recommended update for strawberry ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0560-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for strawberry fixes the following issues: Update to version 0.6.9 * BugFixes: + Fixed playlist metadata updating interfering with manual tag editing. + Fixed order of tabs in all windows. + Fixed playlist right click using wrong songs for determining menu options when playlist was filtered. + Fixed possible crashes on playlist right click. + Fixed possible null pointer crash in OSD pretty. + Fixed track and title in playlist not being movable. + Fixed Subsonic support to handle numeric Json values like track and disc both as strings and integers. + Fixed Subsonic compatibility with LMS (Lightweight Music Server). + Disabled "open Audio CD" from menu on Windows where CD support is currently not supported. + Fixed files containing "MAC" being detected as Monkey's Audio. * Enhancements: + Improved support for High DPI displays. + Added CMake check for backtrace() to fix compilation with musl libc. + Made album cover in context adjust to width. + Made settings, cover manager, organise dialog and transcode music dialog center on the same display where the mainwindow is located. + Removing empty directories when organizing music. + Made file selection work in "Show file in browser" for Dolphin and Nautilus. + Implemented disk caching of album thumbnails in collection tree. + Use a shorter playlist name when songs are added from file view. + Disabled optical drives in copy to device menu. + Added better error handling for CDDA loading. + Added Polish, Hungarian and Korean translations. * Removed features: + Chartlyrics support (Unstable API). + Tidal support (No agreement). + QObuz support (No agreement). This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-560=1 Package List: - openSUSE Backports SLE-15-SP1 (x86_64): strawberry-0.6.9-bp151.2.14.1 References:

1 0

openSUSE-RU-2020:0561-1: moderate: Recommended update for python-six
by maintenance＠opensuse.org 28 Apr '20

28 Apr '20

openSUSE Recommended Update: Recommended update for python-six ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0561-1 Rating: moderate References: #1166139 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-six fixes the following issues: - Use setuptools for building to support pip 10.x and avoid packages to be unistalled. (bsc#1166139) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-561=1 Package List: - openSUSE Leap 15.1 (noarch): python-six-doc-1.11.0-lp151.4.3.1 python2-six-1.11.0-lp151.4.3.1 python3-six-1.11.0-lp151.4.3.1 References: https://bugzilla.suse.com/1166139

1 0

openSUSE-RU-2020:0559-1: moderate: Recommended update for gnutls
by maintenance＠opensuse.org 28 Apr '20

28 Apr '20

openSUSE Recommended Update: Recommended update for gnutls ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0559-1 Rating: moderate References: #1169992 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gnutls fixes the following issues: - FIPS: Do not check for /etc/system-fips which we don't have (bsc#1169992) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-559=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): gnutls-3.6.7-lp151.2.12.1 gnutls-debuginfo-3.6.7-lp151.2.12.1 gnutls-debugsource-3.6.7-lp151.2.12.1 gnutls-guile-3.6.7-lp151.2.12.1 gnutls-guile-debuginfo-3.6.7-lp151.2.12.1 libgnutls-dane-devel-3.6.7-lp151.2.12.1 libgnutls-dane0-3.6.7-lp151.2.12.1 libgnutls-dane0-debuginfo-3.6.7-lp151.2.12.1 libgnutls-devel-3.6.7-lp151.2.12.1 libgnutls30-3.6.7-lp151.2.12.1 libgnutls30-debuginfo-3.6.7-lp151.2.12.1 libgnutls30-hmac-3.6.7-lp151.2.12.1 libgnutlsxx-devel-3.6.7-lp151.2.12.1 libgnutlsxx28-3.6.7-lp151.2.12.1 libgnutlsxx28-debuginfo-3.6.7-lp151.2.12.1 - openSUSE Leap 15.1 (x86_64): libgnutls-devel-32bit-3.6.7-lp151.2.12.1 libgnutls30-32bit-3.6.7-lp151.2.12.1 libgnutls30-32bit-debuginfo-3.6.7-lp151.2.12.1 libgnutls30-hmac-32bit-3.6.7-lp151.2.12.1 References: https://bugzilla.suse.com/1169992

1 0

openSUSE-SU-2020:0557-1: moderate: Security update for teeworlds
by opensuse-security＠opensuse.org 27 Apr '20

27 Apr '20

openSUSE Security Update: Security update for teeworlds ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0557-1 Rating: moderate References: #1170252 #1170253 Cross-References: CVE-2019-20787 CVE-2020-12066 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for teeworlds to version 0.7.5 fixes the following issues: Security issues fixed: - CVE-2020-12066: Fixed a denial of service against the server (boo#1170252) - CVE-2019-20787: Fixed an integer overflow when computing a tilemap size (boo#1170253) Non-security issues fixed: - multiple smaller bug fixes and improvements. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-557=1 Package List: - openSUSE Leap 15.1 (x86_64): teeworlds-0.7.5-lp151.2.6.1 teeworlds-debuginfo-0.7.5-lp151.2.6.1 teeworlds-debugsource-0.7.5-lp151.2.6.1 References: https://www.suse.com/security/cve/CVE-2019-20787.html https://www.suse.com/security/cve/CVE-2020-12066.html https://bugzilla.suse.com/1170252 https://bugzilla.suse.com/1170253

1 0

openSUSE-SU-2020:0558-1: important: Security update for cacti, cacti-spine
by opensuse-security＠opensuse.org 27 Apr '20

27 Apr '20

openSUSE Security Update: Security update for cacti, cacti-spine ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0558-1 Rating: important References: #1082318 #1122242 #1122243 #1122244 #1122245 #1122535 #1158990 #1158992 #1161297 #1164675 #1169215 Cross-References: CVE-2009-4112 CVE-2018-20723 CVE-2018-20724 CVE-2018-20725 CVE-2018-20726 CVE-2019-16723 CVE-2019-17357 CVE-2019-17358 CVE-2020-7106 CVE-2020-7237 CVE-2020-8813 Affected Products: openSUSE Leap 15.1 SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes 11 vulnerabilities is now available. Description: This update for cacti, cacti-spine to version 1.2.11 fixes the following issues: This update is fixing multiple vulnerabilities and adding bug fixes. For more details consult the changes file. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-558=1 - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2020-558=1 Package List: - openSUSE Leap 15.1 (noarch): cacti-1.2.11-lp151.3.6.1 - openSUSE Leap 15.1 (x86_64): cacti-spine-1.2.11-lp151.3.6.1 cacti-spine-debuginfo-1.2.11-lp151.3.6.1 cacti-spine-debugsource-1.2.11-lp151.3.6.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): cacti-spine-1.2.11-2.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): cacti-spine-debuginfo-1.2.11-2.1 cacti-spine-debugsource-1.2.11-2.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): cacti-1.2.11-5.1 References: https://www.suse.com/security/cve/CVE-2009-4112.html https://www.suse.com/security/cve/CVE-2018-20723.html https://www.suse.com/security/cve/CVE-2018-20724.html https://www.suse.com/security/cve/CVE-2018-20725.html https://www.suse.com/security/cve/CVE-2018-20726.html https://www.suse.com/security/cve/CVE-2019-16723.html https://www.suse.com/security/cve/CVE-2019-17357.html https://www.suse.com/security/cve/CVE-2019-17358.html https://www.suse.com/security/cve/CVE-2020-7106.html https://www.suse.com/security/cve/CVE-2020-7237.html https://www.suse.com/security/cve/CVE-2020-8813.html https://bugzilla.suse.com/1082318 https://bugzilla.suse.com/1122242 https://bugzilla.suse.com/1122243 https://bugzilla.suse.com/1122244 https://bugzilla.suse.com/1122245 https://bugzilla.suse.com/1122535 https://bugzilla.suse.com/1158990 https://bugzilla.suse.com/1158992 https://bugzilla.suse.com/1161297 https://bugzilla.suse.com/1164675 https://bugzilla.suse.com/1169215

1 0

openSUSE-SU-2020:0558-1: important: Security update for cacti, cacti-spine
by opensuse-security＠opensuse.org 27 Apr '20

27 Apr '20

openSUSE Security Update: Security update for cacti, cacti-spine ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0558-1 Rating: important References: #1082318 #1122242 #1122243 #1122244 #1122245 #1122535 #1158990 #1158992 #1161297 #1164675 #1169215 Cross-References: CVE-2009-4112 CVE-2018-20723 CVE-2018-20724 CVE-2018-20725 CVE-2018-20726 CVE-2019-16723 CVE-2019-17357 CVE-2019-17358 CVE-2020-7106 CVE-2020-7237 CVE-2020-8813 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes 11 vulnerabilities is now available. Description: This update for cacti, cacti-spine to version 1.2.11 fixes the following issues: This update is fixing multiple vulnerabilities and adding bug fixes. For more details consult the changes file. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2020-558=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): cacti-spine-1.2.11-2.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): cacti-spine-debuginfo-1.2.11-2.1 cacti-spine-debugsource-1.2.11-2.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): cacti-1.2.11-5.1 References: https://www.suse.com/security/cve/CVE-2009-4112.html https://www.suse.com/security/cve/CVE-2018-20723.html https://www.suse.com/security/cve/CVE-2018-20724.html https://www.suse.com/security/cve/CVE-2018-20725.html https://www.suse.com/security/cve/CVE-2018-20726.html https://www.suse.com/security/cve/CVE-2019-16723.html https://www.suse.com/security/cve/CVE-2019-17357.html https://www.suse.com/security/cve/CVE-2019-17358.html https://www.suse.com/security/cve/CVE-2020-7106.html https://www.suse.com/security/cve/CVE-2020-7237.html https://www.suse.com/security/cve/CVE-2020-8813.html https://bugzilla.suse.com/1082318 https://bugzilla.suse.com/1122242 https://bugzilla.suse.com/1122243 https://bugzilla.suse.com/1122244 https://bugzilla.suse.com/1122245 https://bugzilla.suse.com/1122535 https://bugzilla.suse.com/1158990 https://bugzilla.suse.com/1158992 https://bugzilla.suse.com/1161297 https://bugzilla.suse.com/1164675 https://bugzilla.suse.com/1169215

1 0