November 2018 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2018:3889-1: moderate: Recommended update for open-vm-tools
by maintenance＠opensuse.org 24 Nov '18

24 Nov '18

openSUSE Recommended Update: Recommended update for open-vm-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3889-1 Rating: moderate References: #1047469 #1110793 #1111619 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for open-vm-tools fixes the following issues: - Added Handle Linux kernel /proc FS uint32 type stat overflow when calculating. (bsc#1110793) On both 32-bit and 64-bit Linux, tools always parses Linux kernel /proc FS stats as uint64 values. For rate stats, current - previous can handle uint64 type stat overflow, but not uint32 type. - Optional override for short and long OS names sent from Tools. (bsc#1047469) Added support for customers to override the returned long and short OS names through the tools config file. If the setting is present, then names gathered by hostinfo will be ignored. The user is responsible for setting the appropriate names. - Workaround for false negative result when detecting cloud-init existance. (bsc#1111619) "cloud-init -v" cmd is used to detect if cloud-init is properly configured and it works on most linux distros. However in some linux distro like Amazon Linux 2, "cloud-init -v" will print result to stderr instead of stdout and it makes "forkExecAndWaitCommand" give false negative result. 1. added a new bool switch in "ForkExecAndWaitCommand" to choose if we should ignore the stderr output when the return code is 0 2. removed unnecessary reference for "ForkExecAndWaitCommand" in linuxDeploymentUtilities.c 3. trivial change for some formatting This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1450=1 Package List: - openSUSE Leap 15.0 (x86_64): libvmtools-devel-10.3.0-lp150.2.6.1 libvmtools0-10.3.0-lp150.2.6.1 libvmtools0-debuginfo-10.3.0-lp150.2.6.1 open-vm-tools-10.3.0-lp150.2.6.1 open-vm-tools-debuginfo-10.3.0-lp150.2.6.1 open-vm-tools-debugsource-10.3.0-lp150.2.6.1 open-vm-tools-desktop-10.3.0-lp150.2.6.1 open-vm-tools-desktop-debuginfo-10.3.0-lp150.2.6.1 References: https://bugzilla.suse.com/1047469 https://bugzilla.suse.com/1110793 https://bugzilla.suse.com/1111619

1 0

openSUSE-RU-2018:3888-1: moderate: Recommended update for open-vm-tools
by maintenance＠opensuse.org 24 Nov '18

24 Nov '18

openSUSE Recommended Update: Recommended update for open-vm-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3888-1 Rating: moderate References: #1047469 #1110793 #1111619 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for open-vm-tools fixes the following issues: - Added Handle Linux kernel /proc FS uint32 type stat overflow when calculating. (bsc#1110793) On both 32-bit and 64-bit Linux, tools always parses Linux kernel /proc FS stats as uint64 values. For rate stats, current - previous can handle uint64 type stat overflow, but not uint32 type. - Optional override for short and long OS names sent from Tools. (bsc#1047469) Added support for customers to override the returned long and short OS names through the tools config file. If the setting is present, then names gathered by hostinfo will be ignored. The user is responsible for setting the appropriate names. - Workaround for false negative result when detecting cloud-init existance. (bsc#1111619) "cloud-init -v" cmd is used to detect if cloud-init is properly configured and it works on most linux distros. However in some linux distro like Amazon Linux 2, "cloud-init -v" will print result to stderr instead of stdout and it makes "forkExecAndWaitCommand" give false negative result. 1. added a new bool switch in "ForkExecAndWaitCommand" to choose if we should ignore the stderr output when the return code is 0 2. removed unnecessary reference for "ForkExecAndWaitCommand" in linuxDeploymentUtilities.c 3. trivial change for some formatting This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1451=1 Package List: - openSUSE Leap 42.3 (x86_64): libvmtools-devel-10.3.0-18.1 libvmtools0-10.3.0-18.1 libvmtools0-debuginfo-10.3.0-18.1 open-vm-tools-10.3.0-18.1 open-vm-tools-debuginfo-10.3.0-18.1 open-vm-tools-debugsource-10.3.0-18.1 open-vm-tools-desktop-10.3.0-18.1 open-vm-tools-desktop-debuginfo-10.3.0-18.1 References: https://bugzilla.suse.com/1047469 https://bugzilla.suse.com/1110793 https://bugzilla.suse.com/1111619

1 0

openSUSE-RU-2018:3887-1: Recommended update for gnome-initial-setup
by maintenance＠opensuse.org 24 Nov '18

24 Nov '18

openSUSE Recommended Update: Recommended update for gnome-initial-setup ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3887-1 Rating: low References: #1029083 #1067288 #1086056 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for gnome-initial-setup provides the following fix: - Make Mozc input engine the 1st choice for Japanese environment. (bsc#1067288, bsc#1029083) - Sync the patches that are applied on SLE and OpenSUSE to be consistent. (bsc#1086056) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1452=1 Package List: - openSUSE Leap 42.3 (noarch): gnome-initial-setup-lang-3.20.1-6.4.1 - openSUSE Leap 42.3 (x86_64): gnome-initial-setup-3.20.1-6.4.1 gnome-initial-setup-debuginfo-3.20.1-6.4.1 gnome-initial-setup-debugsource-3.20.1-6.4.1 References: https://bugzilla.suse.com/1029083 https://bugzilla.suse.com/1067288 https://bugzilla.suse.com/1086056

1 0

openSUSE-SU-2018:3886-1: important: Security update for libwpd
by opensuse-security＠opensuse.org 24 Nov '18

24 Nov '18

openSUSE Security Update: Security update for libwpd ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:3886-1 Rating: important References: #1115713 Cross-References: CVE-2018-19208 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libwpd fixes the following issues: Security issue fixed: - CVE-2018-19208: illegal address access inside libwpd at function WP6ContentListener:defineTable (bsc#1115713). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1463=1 Package List: - openSUSE Leap 15.0 (noarch): libwpd-devel-doc-0.10.2-lp150.2.3.1 - openSUSE Leap 15.0 (x86_64): libwpd-0_10-10-0.10.2-lp150.2.3.1 libwpd-0_10-10-debuginfo-0.10.2-lp150.2.3.1 libwpd-debuginfo-0.10.2-lp150.2.3.1 libwpd-debugsource-0.10.2-lp150.2.3.1 libwpd-devel-0.10.2-lp150.2.3.1 libwpd-tools-0.10.2-lp150.2.3.1 libwpd-tools-debuginfo-0.10.2-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-19208.html https://bugzilla.suse.com/1115713

1 0

openSUSE-SU-2018:3876-1: important: Security update for virtualbox
by opensuse-security＠opensuse.org 23 Nov '18

23 Nov '18

openSUSE Security Update: Security update for virtualbox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:3876-1 Rating: important References: #1115041 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for virtualbox fixes the following issues: virtualbox was updated to version 5.2.22 (released November 09 2018 by Oracle). Security issues fixed: - Fixed a guest-to-host excape via the e1000 virtual network driver (bsc#1115041). Non-security issues fixed: - Audio: Fixed a regression in the Core Audio backend causing a hang when returning from host sleep when processing input buffers. - Audio: Fixed a potential crash in the HDA emulation if a stream has no valid mixer sink attached. - Linux Additions: Disable 3D for recent guests using Wayland (bug #18116). - Linux Additions: Fix for rebuilding kernel modules for new kernels on RPM guests. - Linux Additions: Further fixes for Linux 4.19. - Linux Additions: Fixed errors rebuilding initrd files with dracut on EL 6 (bug 18055#). - Linux Additions: Fixed 5.2.20 regression: guests not remembering the screen size after shutdown and restart (bug #18078). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1443=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1443=1 Package List: - openSUSE Leap 42.3 (x86_64): python-virtualbox-5.2.22-63.1 python-virtualbox-debuginfo-5.2.22-63.1 virtualbox-5.2.22-63.1 virtualbox-debuginfo-5.2.22-63.1 virtualbox-debugsource-5.2.22-63.1 virtualbox-devel-5.2.22-63.1 virtualbox-guest-kmp-default-5.2.22_k4.4.162_78-63.1 virtualbox-guest-kmp-default-debuginfo-5.2.22_k4.4.162_78-63.1 virtualbox-guest-tools-5.2.22-63.1 virtualbox-guest-tools-debuginfo-5.2.22-63.1 virtualbox-guest-x11-5.2.22-63.1 virtualbox-guest-x11-debuginfo-5.2.22-63.1 virtualbox-host-kmp-default-5.2.22_k4.4.162_78-63.1 virtualbox-host-kmp-default-debuginfo-5.2.22_k4.4.162_78-63.1 virtualbox-qt-5.2.22-63.1 virtualbox-qt-debuginfo-5.2.22-63.1 virtualbox-vnc-5.2.22-63.1 virtualbox-websrv-5.2.22-63.1 virtualbox-websrv-debuginfo-5.2.22-63.1 - openSUSE Leap 42.3 (noarch): virtualbox-guest-desktop-icons-5.2.22-63.1 virtualbox-guest-source-5.2.22-63.1 virtualbox-host-source-5.2.22-63.1 - openSUSE Leap 15.0 (noarch): virtualbox-guest-desktop-icons-5.2.22-lp150.4.23.1 virtualbox-guest-source-5.2.22-lp150.4.23.1 virtualbox-host-source-5.2.22-lp150.4.23.1 - openSUSE Leap 15.0 (x86_64): python3-virtualbox-5.2.22-lp150.4.23.1 python3-virtualbox-debuginfo-5.2.22-lp150.4.23.1 virtualbox-5.2.22-lp150.4.23.1 virtualbox-debuginfo-5.2.22-lp150.4.23.1 virtualbox-debugsource-5.2.22-lp150.4.23.1 virtualbox-devel-5.2.22-lp150.4.23.1 virtualbox-guest-kmp-default-5.2.22_k4.12.14_lp150.12.25-lp150.4.23.1 virtualbox-guest-kmp-default-debuginfo-5.2.22_k4.12.14_lp150.12.25-lp150.4.23.1 virtualbox-guest-tools-5.2.22-lp150.4.23.1 virtualbox-guest-tools-debuginfo-5.2.22-lp150.4.23.1 virtualbox-guest-x11-5.2.22-lp150.4.23.1 virtualbox-guest-x11-debuginfo-5.2.22-lp150.4.23.1 virtualbox-host-kmp-default-5.2.22_k4.12.14_lp150.12.25-lp150.4.23.1 virtualbox-host-kmp-default-debuginfo-5.2.22_k4.12.14_lp150.12.25-lp150.4.23.1 virtualbox-qt-5.2.22-lp150.4.23.1 virtualbox-qt-debuginfo-5.2.22-lp150.4.23.1 virtualbox-vnc-5.2.22-lp150.4.23.1 virtualbox-websrv-5.2.22-lp150.4.23.1 virtualbox-websrv-debuginfo-5.2.22-lp150.4.23.1 References: https://bugzilla.suse.com/1115041

1 0

openSUSE-RU-2018:3875-1: important: Recommended update for openssh
by maintenance＠opensuse.org 23 Nov '18

23 Nov '18

openSUSE Recommended Update: Recommended update for openssh ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3875-1 Rating: important References: #1115654 #1116577 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for openssh fixes the following issues: - Revert fix for CVE-2018-15919 which could have caused login problems with GSSAPI authentication (bsc#1115654, bsc#1116577) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1442=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): openssh-7.6p1-lp150.8.6.1 openssh-cavs-7.6p1-lp150.8.6.1 openssh-cavs-debuginfo-7.6p1-lp150.8.6.1 openssh-debuginfo-7.6p1-lp150.8.6.1 openssh-debugsource-7.6p1-lp150.8.6.1 openssh-fips-7.6p1-lp150.8.6.1 openssh-helpers-7.6p1-lp150.8.6.1 openssh-helpers-debuginfo-7.6p1-lp150.8.6.1 - openSUSE Leap 15.0 (x86_64): openssh-askpass-gnome-7.6p1-lp150.8.6.1 openssh-askpass-gnome-debuginfo-7.6p1-lp150.8.6.1 References: https://bugzilla.suse.com/1115654 https://bugzilla.suse.com/1116577

1 0

openSUSE-RU-2018:3874-1: important: Recommended update for breeze-gtk
by maintenance＠opensuse.org 23 Nov '18

23 Nov '18

openSUSE Recommended Update: Recommended update for breeze-gtk ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3874-1 Rating: important References: #1116859 Affected Products: openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for breeze-gtk fixes the following issues: - scroll bars in LibreOffice did not work correctly on KDE (boo#1116859) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1444=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2018-1444=1 Package List: - openSUSE Leap 15.0 (noarch): gtk2-metatheme-breeze-5.12.7-lp150.2.6.1 gtk3-metatheme-breeze-5.12.7-lp150.2.6.1 - openSUSE Leap 15.0 (x86_64): breeze-gtk-debugsource-5.12.7-lp150.2.6.1 metatheme-breeze-common-5.12.7-lp150.2.6.1 metatheme-breeze-common-debuginfo-5.12.7-lp150.2.6.1 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): breeze-gtk-debugsource-5.12.7-bp150.3.6.1 metatheme-breeze-common-5.12.7-bp150.3.6.1 metatheme-breeze-common-debuginfo-5.12.7-bp150.3.6.1 - openSUSE Backports SLE-15 (noarch): gtk2-metatheme-breeze-5.12.7-bp150.3.6.1 gtk3-metatheme-breeze-5.12.7-bp150.3.6.1 References: https://bugzilla.suse.com/1116859

1 0

openSUSE-RU-2018:3873-1: moderate: Recommended update for restic
by maintenance＠opensuse.org 23 Nov '18

23 Nov '18

openSUSE Recommended Update: Recommended update for restic ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3873-1 Rating: moderate References: #1115498 Affected Products: openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update contains restic 0.9.3 and includes all upstream bug fixes and improvements in this version (boo#1115498): - Fixes for various issues affecting backup and restore - Various improvements to output and option handling - Improvements and corrections to the scanner - The ls command can not be filtered by directories - Allow saving files/directories on different filesystem with --one-file-system - The rclone backend now respects --limit-upload and --limit-download - Uploading of large files to MS Azure is now allowed - When reading backups from stdin (via restic backup --stdin), restic now uses the time stamp for the new backup passed in --time. - restic check now has improved handling of cache - Improvements to the s3 backend - restic forget now has the --keep-within option to keep a range - Add subpackages for command line completions for bash and zsh shells Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1445=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2018-1445=1 Package List: - openSUSE Leap 15.0 (x86_64): restic-0.9.3-lp150.2.3.1 - openSUSE Leap 15.0 (noarch): restic-bash-completion-0.9.3-lp150.2.3.1 restic-zsh-completion-0.9.3-lp150.2.3.1 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): restic-0.9.3-bp150.4.3.1 - openSUSE Backports SLE-15 (noarch): restic-bash-completion-0.9.3-bp150.4.3.1 restic-zsh-completion-0.9.3-bp150.4.3.1 References: https://bugzilla.suse.com/1115498

1 0

openSUSE-SU-2018:3872-1: important: Security update for chromium
by opensuse-security＠opensuse.org 23 Nov '18

23 Nov '18

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:3872-1 Rating: important References: #1116608 Cross-References: CVE-2018-17479 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for Chromium to version 70.0.3538.110 fixes the following security issue: - CVE-2018-17479: Use-after-free in GPU (boo#1116608) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2018-1446=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): chromedriver-70.0.3538.110-77.1 chromedriver-debuginfo-70.0.3538.110-77.1 chromium-70.0.3538.110-77.1 chromium-debuginfo-70.0.3538.110-77.1 chromium-debugsource-70.0.3538.110-77.1 References: https://www.suse.com/security/cve/CVE-2018-17479.html https://bugzilla.suse.com/1116608

1 0

openSUSE-SU-2018:3871-1: important: Security update for chromium
by opensuse-security＠opensuse.org 23 Nov '18

23 Nov '18

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:3871-1 Rating: important References: #1116608 Cross-References: CVE-2018-17479 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for Chromium to version 70.0.3538.110 fixes the following security issue: - CVE-2018-17479: Use-after-free in GPU (boo#1116608) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1446=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1446=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2018-1446=1 Package List: - openSUSE Leap 42.3 (x86_64): chromedriver-70.0.3538.110-186.1 chromedriver-debuginfo-70.0.3538.110-186.1 chromium-70.0.3538.110-186.1 chromium-debuginfo-70.0.3538.110-186.1 chromium-debugsource-70.0.3538.110-186.1 - openSUSE Leap 15.0 (x86_64): chromedriver-70.0.3538.110-lp150.2.26.1 chromedriver-debuginfo-70.0.3538.110-lp150.2.26.1 chromium-70.0.3538.110-lp150.2.26.1 chromium-debuginfo-70.0.3538.110-lp150.2.26.1 chromium-debugsource-70.0.3538.110-lp150.2.26.1 - openSUSE Backports SLE-15 (aarch64 x86_64): chromedriver-70.0.3538.110-bp150.2.20.1 chromedriver-debuginfo-70.0.3538.110-bp150.2.20.1 chromium-70.0.3538.110-bp150.2.20.1 chromium-debuginfo-70.0.3538.110-bp150.2.20.1 chromium-debugsource-70.0.3538.110-bp150.2.20.1 References: https://www.suse.com/security/cve/CVE-2018-17479.html https://bugzilla.suse.com/1116608

1 0