December 2018 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2018:4303-1: moderate: Recommended update for cloud-init
by maintenance＠opensuse.org 29 Dec '18

29 Dec '18

openSUSE Recommended Update: Recommended update for cloud-init ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4303-1 Rating: moderate References: #1087331 #1095627 #1097388 #1099340 #1101894 #1111427 #1114160 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has 7 recommended fixes can now be installed. Description: This update for cloud-init provides the following fixes: - Fix a decoding error that could cause persisting the metadata to fail. (bsc#1101894) - Fix a problem that could cause static network to be configured with BOOTPROTO=none. (bsc#1114160) - Update to version 18.4, including the following fixes (bsc#1087331, bsc#1097388, bsc#1111427, bsc#1095627): * Avoid Python 3 dependency when building for distros with Python 2 support. * Add dhcp-client as requirement as cloud-init uses dhclient to setup a temporary network for metadata retrieval. * Use ds._crawled_metadata instance attribute if set when writing instance-data.json. * ec2: Update crawled metadata and add standardized keys. * lxd: Adjust to snap installed lxd. * Add support for Infiniband network interfaces (IPoIB). * cli: Add cloud-init query subcommand to query instance metadata. * stages: Fix bug causing datasource to have incorrect sys_cfg. * net_util: Ensure static configurations have netmask in translate_network result. * Fall back to root:root on syslog permissions if other options fail. * OpenStack: Support setting mac address on bond. * EphemeralIPv4Network: Be more explicit when adding default route. * OpenStack: Support reading of newer versions of metdata. * OpenStack: Fix a bug that was causing causing 'latest' version to be used from network. * user-data: Use jinja template to render instance-data.json in cloud-config. * config: Disable ssh access to a configured user account. * sysconfig: Refactor sysconfig to accept distro specific templates paths. * hyperv_reporting_handler: Simplify threaded publisher. * VMWare: Fix a network config bug in vm with static IPv4 and no gateway. * logging: Add logging config type hyperv for reporting via Azure KVP * Add datasource Oracle Compute Infrastructure (OCI). * azure: Allow azure to generate network configuration from IMDS per boot. * Scaleway: Add network configuration to the DataSource. * netplan: Correctly render macaddress on a bonds and bridges when provided. * tools: Add 'net-convert' subcommand command to 'cloud-init devel'. * Use typeset or local in profile.d scripts. * OpenNebula: Fix null gateway6. * tools: add '--debug' to tools/net-convert.py * update_metadata: A datasource can support network re-config every boot. * Retry on failed import of gpg receive keys. * tools: Fix run-container when neither source or binary package requested. - Changes from 18.3: * Explicitly prevent `sudo` access for user module. * lxd: Delete default network and detach device if lxd-init created them. * openstack: Avoid unneeded metadata probe on non-openstack platforms. * stages: Fix tracebacks if a module stage is undefined or empty. * Be safer on string/bytes when writing multipart user-data to disk. * Fix get_proc_env for pids that have non-utf8 content in environment. * netplan: Fix mtu if provided by network config for all rendered types. * subp: Support combine_capture argument. * util: Add get_linux_distro function to replace platform.dist * Do not use the systemd_prefix macro, not available in this environment. * openstack: Allow discovery in init-local using dhclient in a sandbox. * yaml_load/schema: Add invalid line and column nums to error message. * Azure: Ignore NTFS mount errors when checking ephemeral drive. * cc_mounts: Do not add devices to fstab that are already present. * ds-identify: Ensure that we have certain tokens in PATH. * read_file_or_url: Move to url_helper, fix bug in its FileResponse. * ds-identify: Recognize container-other as a container. * ds-identify: Remove duplicate call to is_ds_enabled. * azure: Add reported ready marker file. * netinfo: Fix netdev_pformat when a nic does not have an address assigned. * collect-logs: Add -v flag, write to stderr, limit journal to single boot. * IBMCloud: Disable config-drive and nocloud only if IBMCloud is enabled. * Add reporting events and log_time around early source of blocking time. * IBMCloud: recognize provisioning environment during debug boots. * net: Detect unstable network names and trigger a settle if needed. * sysconfig: dhcp6 subnet type should not imply dhcpv4. * schema: In validation, raise ImportError if strict but no jsonschema. * set_passwords: Add newline to end of sshd config, only restart if updated. * net: Depend on iproute2's ip instead of net-tools ifconfig or route. * renderer: Support unicode in render_from_file. * Implement ntp client spec with auto support for distro selection. * apport: Add Brightbox, IBM, LXD, and OpenTelekomCloud to list of clouds. * tests: Fix ec2 integration network metadata validation. * cc_resizefs, util: Handle no /dev/zfs. - The distribution indicator is set to SUSE during template expansion. Do not replace anything set to Ubuntu. - Do not run cloud-init after network-online, this breaks functionality in cloud-init. Certain parts of the code running in this phase expect to run before the network is on-line. - Root should not be enabled by default. Image builders/users that want root access by default should provide an appropriate configuration file during image build or image setup. - Set distribution default to OpenSUSE/SLES. (bsc#1099340) - Run metadata detection after network-online. (bsc#1097388) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1622=1 Package List: - openSUSE Leap 15.0 (x86_64): cloud-init-18.4-lp150.2.9.1 cloud-init-config-suse-18.4-lp150.2.9.1 cloud-init-doc-18.4-lp150.2.9.1 References: https://bugzilla.suse.com/1087331 https://bugzilla.suse.com/1095627 https://bugzilla.suse.com/1097388 https://bugzilla.suse.com/1099340 https://bugzilla.suse.com/1101894 https://bugzilla.suse.com/1111427 https://bugzilla.suse.com/1114160

1 0

openSUSE-SU-2018:4302-1: important: Security update for go
by opensuse-security＠opensuse.org 29 Dec '18

29 Dec '18

openSUSE Security Update: Security update for go ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4302-1 Rating: important References: #1081495 #1119634 #1119706 Cross-References: CVE-2018-7187 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update for go fixes the following issues: - golang: arbitrary command execution via VCS path (bsc#1081495, CVE-2018-7187) - Make profile.d/go.sh no longer set GOROOT=, in order to make switching between versions no longer break. This ends up removing the need for go.sh entirely (because GOPATH is also set automatically) (boo#1119634) - Fix a regression that broke go get for import path patterns containing "..." (bsc#1119706) Additionally, the package go1.10 has been added. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2018-1625=1 Package List: - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): go-1.10.4-bp150.2.3.1 go-doc-1.10.4-bp150.2.3.1 go1.10-1.10.7-bp150.2.1 go1.10-doc-1.10.7-bp150.2.1 - openSUSE Backports SLE-15 (x86_64): go-race-1.10.4-bp150.2.3.1 go1.10-race-1.10.7-bp150.2.1 - openSUSE Backports SLE-15 (noarch): golang-packaging-15.0.11-bp150.3.3.1 References: https://www.suse.com/security/cve/CVE-2018-7187.html https://bugzilla.suse.com/1081495 https://bugzilla.suse.com/1119634 https://bugzilla.suse.com/1119706

1 0

openSUSE-RU-2018:4301-1: moderate: Recommended update for python-jira
by maintenance＠opensuse.org 29 Dec '18

29 Dec '18

openSUSE Recommended Update: Recommended update for python-jira ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4301-1 Rating: moderate References: #1120127 Affected Products: openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-jira fixes the following issues: - add missing run-time dependency on python-pbr boo#1120127 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1627=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2018-1627=1 Package List: - openSUSE Leap 15.0 (noarch): python2-jira-1.0.15-lp150.2.3.1 python3-jira-1.0.15-lp150.2.3.1 - openSUSE Backports SLE-15 (noarch): python2-jira-1.0.15-bp150.3.3.1 python3-jira-1.0.15-bp150.3.3.1 References: https://bugzilla.suse.com/1120127

1 0

openSUSE-SU-2018:4299-1: moderate: Security update for libraw
by opensuse-security＠opensuse.org 28 Dec '18

28 Dec '18

openSUSE Security Update: Security update for libraw ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4299-1 Rating: moderate References: #1097973 #1097974 #1097975 #1118894 Cross-References: CVE-2018-5804 CVE-2018-5805 CVE-2018-5806 CVE-2018-5808 CVE-2018-5816 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for libraw fixes the following issues: The following security vulnerabilities were addressed: - CVE-2018-5804: Fixed a type confusion error within the identify function that could trigger a division by zero, leading to a denial of service (Dos). (boo#1097975) - CVE-2018-5805: Fixed a boundary error within the quicktake_100_load_raw function that could cause a stack-based buffer overflow and subsequently trigger a crash. (boo#1097973) - CVE-2018-5806: Fixed an error within the leaf_hdr_load_raw function that could trigger a NULL pointer deference, leading to a denial of service (DoS). (boo#1097974) - CVE-2018-5808: Fixed an error within the find_green function that could cause a stack-based buffer overflow and subsequently execute arbitrary code. (boo#1118894) - CVE-2018-5816: Fixed a type confusion error within the identify function that could trigger a division by zero, leading to a denial of service (DoS). (boo#1097975) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1619=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libraw-debugsource-0.17.1-26.1 libraw-devel-0.17.1-26.1 libraw-devel-static-0.17.1-26.1 libraw-tools-0.17.1-26.1 libraw-tools-debuginfo-0.17.1-26.1 libraw15-0.17.1-26.1 libraw15-debuginfo-0.17.1-26.1 References: https://www.suse.com/security/cve/CVE-2018-5804.html https://www.suse.com/security/cve/CVE-2018-5805.html https://www.suse.com/security/cve/CVE-2018-5806.html https://www.suse.com/security/cve/CVE-2018-5808.html https://www.suse.com/security/cve/CVE-2018-5816.html https://bugzilla.suse.com/1097973 https://bugzilla.suse.com/1097974 https://bugzilla.suse.com/1097975 https://bugzilla.suse.com/1118894

1 0

openSUSE-RU-2018:4289-1: moderate: Recommended update for LibreOffice and related libraries
by maintenance＠opensuse.org 28 Dec '18

28 Dec '18

openSUSE Recommended Update: Recommended update for LibreOffice and related libraries ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4289-1 Rating: moderate References: #1050305 #1094779 #1096360 #1104876 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for LibreOffice, libepubgen, libetonyek, liblangtag, libmwaw, libnumbertext, libstaroffice, libwps, myspell-dictionaries, xmlsec1 fixes the following issues: LibreOffice was updated to 6.1.3.2 (fate#326624) and contains new features and lots of bugfixes: The full changelog can be found on: https://wiki.documentfoundation.org/ReleaseNotes/6.1 Add more translations: * Belarusian * Bodo * Dogri * Frisian * Gaelic * Paraguayan_Guaran * Upper_Sorbian * Konkani * Kashmiri * Luxembourgish * Monglolian * Manipuri * Burnese * Occitan * Kinyarwanda * Santali * Sanskrit * Sindhi * Sidamo * Tatar * Uzbek * Upper Sorbian * Venetian * Amharic * Asturian * Tibetian * Bosnian * English GB * English ZA * Indonesian * Icelandic * Georgian * Khmer * Lao * Macedonian * Nepali * Oromo * Albanian * Tajik * Uyghur * Vietnamese * Kurdish - Try to build all languages see bsc#1096360 - Make sure to install the KDE5/Qt5 UI/filepicker - Try to implement safeguarding to avoid bsc#1050305 - Disable base-drivers-mysql as it needs mysqlcppcon that is only for mysql and not mariadb, causes issues bsc#1094779 * Users can still connect using jdbc/odbc - Fix java detection on machines with too many cpus libepubgen was updated to 0.1.1: - Avoid <div> inside <p> or <span>. - Avoid writin vertical-align attribute without a value. - Fix generation of invalid XHTML when there is a link starting at the beginning of a footnote. - Handle relative width for images. - Fixed layout: write chapter names to improve navigation. - Support writing mode. - Start a new HTML file at every page span in addition to the splits induced by the chosen split method. This is to ensure that specified writing mode works correctly, as it is HTML <body> attribute. libetonyek was updated to 0.1.8: - More support for keynote content - Add support for Keynote 1 documents. - Add support for Numbers 3 documents. - Fix several issues found by oss-fuzz. - Fix build with glm 0.9.9. - Other fixes and improvements. liblangtag was updated to 0.6.2: - use standard function - fix leak in test libmwaw was updated to 0.3.14: - Support MS Multiplan 1.1 files libnumbertext was update to 1.0.5: - Various fixes in numerical calculations and issues reported on libreoffice tracker libstaroffice was updated to 0.0.6: - retrieve some StarMath's formula, - retrieve some charts as graphic, - retrieve some fields in sda/sdc/sdp text-boxes, - .sdw: retrieve more attachments. libwps was updated to 0.4.9: - QuattroPro: add parser to .wb3 files - Multiplan: add parser to DOS v1-v3 files - charts: try to retrieve charts in .wk*, .wq* files - QuattroPro: add parser to .wb[12] files myspell-dictionaries was updated to 20181025: - Turkish dictionary added - Updated French dictionary xmlsec1 was updated to 1.2.26: - Added xmlsec-mscng module based on Microsoft Cryptography API: Next Generation - Added support for GOST 2012 and fixed CryptoPro CSP provider for GOST R 34.10-2001 in xmlsec-mscrypto This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1612=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): liblangtag-debugsource-0.6.2-8.3.1 liblangtag-devel-0.6.2-8.3.1 liblangtag1-0.6.2-8.3.1 liblangtag1-debuginfo-0.6.2-8.3.1 libnumbertext-1_0-0-1.0.5-2.1 libnumbertext-1_0-0-debuginfo-1.0.5-2.1 libnumbertext-data-1.0.5-2.1 libnumbertext-debugsource-1.0.5-2.1 libnumbertext-devel-1.0.5-2.1 libnumbertext-tools-1.0.5-2.1 libnumbertext-tools-debuginfo-1.0.5-2.1 libxmlsec1-1-1.2.26-10.1 libxmlsec1-1-debuginfo-1.2.26-10.1 libxmlsec1-gcrypt1-1.2.26-10.1 libxmlsec1-gcrypt1-debuginfo-1.2.26-10.1 libxmlsec1-gnutls1-1.2.26-10.1 libxmlsec1-gnutls1-debuginfo-1.2.26-10.1 libxmlsec1-nss1-1.2.26-10.1 libxmlsec1-nss1-debuginfo-1.2.26-10.1 libxmlsec1-openssl1-1.2.26-10.1 libxmlsec1-openssl1-debuginfo-1.2.26-10.1 myspell-dictionaries-20181025-13.1 myspell-lightproof-en-20181025-13.1 myspell-lightproof-hu_HU-20181025-13.1 myspell-lightproof-pt_BR-20181025-13.1 myspell-lightproof-ru_RU-20181025-13.1 xmlsec1-1.2.26-10.1 xmlsec1-debuginfo-1.2.26-10.1 xmlsec1-debugsource-1.2.26-10.1 xmlsec1-devel-1.2.26-10.1 xmlsec1-gcrypt-devel-1.2.26-10.1 xmlsec1-gnutls-devel-1.2.26-10.1 xmlsec1-nss-devel-1.2.26-10.1 xmlsec1-openssl-devel-1.2.26-10.1 - openSUSE Leap 42.3 (x86_64): libepubgen-0_1-1-0.1.1-17.1 libepubgen-0_1-1-debuginfo-0.1.1-17.1 libepubgen-debugsource-0.1.1-17.1 libepubgen-devel-0.1.1-17.1 libetonyek-0_1-1-0.1.8-11.1 libetonyek-0_1-1-debuginfo-0.1.8-11.1 libetonyek-debugsource-0.1.8-11.1 libetonyek-devel-0.1.8-11.1 libetonyek-tools-0.1.8-11.1 libetonyek-tools-debuginfo-0.1.8-11.1 libmwaw-0_3-3-0.3.14-2.6.1 libmwaw-0_3-3-debuginfo-0.3.14-2.6.1 libmwaw-debugsource-0.3.14-2.6.1 libmwaw-devel-0.3.14-2.6.1 libmwaw-tools-0.3.14-2.6.1 libmwaw-tools-debuginfo-0.3.14-2.6.1 libreoffice-6.1.3.2-27.4 libreoffice-base-6.1.3.2-27.4 libreoffice-base-debuginfo-6.1.3.2-27.4 libreoffice-base-drivers-postgresql-6.1.3.2-27.4 libreoffice-base-drivers-postgresql-debuginfo-6.1.3.2-27.4 libreoffice-calc-6.1.3.2-27.4 libreoffice-calc-debuginfo-6.1.3.2-27.4 libreoffice-calc-extensions-6.1.3.2-27.4 libreoffice-debuginfo-6.1.3.2-27.4 libreoffice-debugsource-6.1.3.2-27.4 libreoffice-draw-6.1.3.2-27.4 libreoffice-draw-debuginfo-6.1.3.2-27.4 libreoffice-filters-optional-6.1.3.2-27.4 libreoffice-gnome-6.1.3.2-27.4 libreoffice-gnome-debuginfo-6.1.3.2-27.4 libreoffice-gtk2-6.1.3.2-27.4 libreoffice-gtk2-debuginfo-6.1.3.2-27.4 libreoffice-gtk3-6.1.3.2-27.4 libreoffice-gtk3-debuginfo-6.1.3.2-27.4 libreoffice-impress-6.1.3.2-27.4 libreoffice-impress-debuginfo-6.1.3.2-27.4 libreoffice-mailmerge-6.1.3.2-27.4 libreoffice-math-6.1.3.2-27.4 libreoffice-math-debuginfo-6.1.3.2-27.4 libreoffice-officebean-6.1.3.2-27.4 libreoffice-officebean-debuginfo-6.1.3.2-27.4 libreoffice-pyuno-6.1.3.2-27.4 libreoffice-pyuno-debuginfo-6.1.3.2-27.4 libreoffice-qt5-6.1.3.2-27.4 libreoffice-qt5-debuginfo-6.1.3.2-27.4 libreoffice-sdk-6.1.3.2-27.4 libreoffice-sdk-debuginfo-6.1.3.2-27.4 libreoffice-sdk-doc-6.1.3.2-27.4 libreoffice-writer-6.1.3.2-27.4 libreoffice-writer-debuginfo-6.1.3.2-27.4 libreoffice-writer-extensions-6.1.3.2-27.4 libreofficekit-6.1.3.2-27.4 libreofficekit-devel-6.1.3.2-27.4 libstaroffice-0_0-0-0.0.6-2.6.1 libstaroffice-0_0-0-debuginfo-0.0.6-2.6.1 libstaroffice-debugsource-0.0.6-2.6.1 libstaroffice-devel-0.0.6-2.6.1 libstaroffice-tools-0.0.6-2.6.1 libstaroffice-tools-debuginfo-0.0.6-2.6.1 libwps-0_4-4-0.4.9-17.1 libwps-0_4-4-debuginfo-0.4.9-17.1 libwps-debugsource-0.4.9-17.1 libwps-devel-0.4.9-17.1 libwps-tools-0.4.9-17.1 libwps-tools-debuginfo-0.4.9-17.1 - openSUSE Leap 42.3 (noarch): libepubgen-devel-doc-0.1.1-17.1 libetonyek-devel-doc-0.1.8-11.1 liblangtag-doc-0.6.2-8.3.1 libmwaw-devel-doc-0.3.14-2.6.1 libreoffice-branding-upstream-6.1.3.2-27.4 libreoffice-gdb-pretty-printers-6.1.3.2-27.4 libreoffice-glade-6.1.3.2-27.4 libreoffice-icon-themes-6.1.3.2-27.4 libreoffice-l10n-af-6.1.3.2-27.4 libreoffice-l10n-am-6.1.3.2-27.4 libreoffice-l10n-ar-6.1.3.2-27.4 libreoffice-l10n-as-6.1.3.2-27.4 libreoffice-l10n-ast-6.1.3.2-27.4 libreoffice-l10n-be-6.1.3.2-27.4 libreoffice-l10n-bg-6.1.3.2-27.4 libreoffice-l10n-bn-6.1.3.2-27.4 libreoffice-l10n-bn_IN-6.1.3.2-27.4 libreoffice-l10n-bo-6.1.3.2-27.4 libreoffice-l10n-br-6.1.3.2-27.4 libreoffice-l10n-brx-6.1.3.2-27.4 libreoffice-l10n-bs-6.1.3.2-27.4 libreoffice-l10n-ca-6.1.3.2-27.4 libreoffice-l10n-ca_valencia-6.1.3.2-27.4 libreoffice-l10n-cs-6.1.3.2-27.4 libreoffice-l10n-cy-6.1.3.2-27.4 libreoffice-l10n-da-6.1.3.2-27.4 libreoffice-l10n-de-6.1.3.2-27.4 libreoffice-l10n-dgo-6.1.3.2-27.4 libreoffice-l10n-dz-6.1.3.2-27.4 libreoffice-l10n-el-6.1.3.2-27.4 libreoffice-l10n-en-6.1.3.2-27.4 libreoffice-l10n-en_GB-6.1.3.2-27.4 libreoffice-l10n-en_ZA-6.1.3.2-27.4 libreoffice-l10n-eo-6.1.3.2-27.4 libreoffice-l10n-es-6.1.3.2-27.4 libreoffice-l10n-et-6.1.3.2-27.4 libreoffice-l10n-eu-6.1.3.2-27.4 libreoffice-l10n-fa-6.1.3.2-27.4 libreoffice-l10n-fi-6.1.3.2-27.4 libreoffice-l10n-fr-6.1.3.2-27.4 libreoffice-l10n-fy-6.1.3.2-27.4 libreoffice-l10n-ga-6.1.3.2-27.4 libreoffice-l10n-gd-6.1.3.2-27.4 libreoffice-l10n-gl-6.1.3.2-27.4 libreoffice-l10n-gu-6.1.3.2-27.4 libreoffice-l10n-gug-6.1.3.2-27.4 libreoffice-l10n-he-6.1.3.2-27.4 libreoffice-l10n-hi-6.1.3.2-27.4 libreoffice-l10n-hr-6.1.3.2-27.4 libreoffice-l10n-hsb-6.1.3.2-27.4 libreoffice-l10n-hu-6.1.3.2-27.4 libreoffice-l10n-id-6.1.3.2-27.4 libreoffice-l10n-is-6.1.3.2-27.4 libreoffice-l10n-it-6.1.3.2-27.4 libreoffice-l10n-ja-6.1.3.2-27.4 libreoffice-l10n-ka-6.1.3.2-27.4 libreoffice-l10n-kab-6.1.3.2-27.4 libreoffice-l10n-kk-6.1.3.2-27.4 libreoffice-l10n-km-6.1.3.2-27.4 libreoffice-l10n-kmr_Latn-6.1.3.2-27.4 libreoffice-l10n-kn-6.1.3.2-27.4 libreoffice-l10n-ko-6.1.3.2-27.4 libreoffice-l10n-kok-6.1.3.2-27.4 libreoffice-l10n-ks-6.1.3.2-27.4 libreoffice-l10n-lb-6.1.3.2-27.4 libreoffice-l10n-lo-6.1.3.2-27.4 libreoffice-l10n-lt-6.1.3.2-27.4 libreoffice-l10n-lv-6.1.3.2-27.4 libreoffice-l10n-mai-6.1.3.2-27.4 libreoffice-l10n-mk-6.1.3.2-27.4 libreoffice-l10n-ml-6.1.3.2-27.4 libreoffice-l10n-mn-6.1.3.2-27.4 libreoffice-l10n-mni-6.1.3.2-27.4 libreoffice-l10n-mr-6.1.3.2-27.4 libreoffice-l10n-my-6.1.3.2-27.4 libreoffice-l10n-nb-6.1.3.2-27.4 libreoffice-l10n-ne-6.1.3.2-27.4 libreoffice-l10n-nl-6.1.3.2-27.4 libreoffice-l10n-nn-6.1.3.2-27.4 libreoffice-l10n-nr-6.1.3.2-27.4 libreoffice-l10n-nso-6.1.3.2-27.4 libreoffice-l10n-oc-6.1.3.2-27.4 libreoffice-l10n-om-6.1.3.2-27.4 libreoffice-l10n-or-6.1.3.2-27.4 libreoffice-l10n-pa-6.1.3.2-27.4 libreoffice-l10n-pl-6.1.3.2-27.4 libreoffice-l10n-pt_BR-6.1.3.2-27.4 libreoffice-l10n-pt_PT-6.1.3.2-27.4 libreoffice-l10n-ro-6.1.3.2-27.4 libreoffice-l10n-ru-6.1.3.2-27.4 libreoffice-l10n-rw-6.1.3.2-27.4 libreoffice-l10n-sa_IN-6.1.3.2-27.4 libreoffice-l10n-sat-6.1.3.2-27.4 libreoffice-l10n-sd-6.1.3.2-27.4 libreoffice-l10n-si-6.1.3.2-27.4 libreoffice-l10n-sid-6.1.3.2-27.4 libreoffice-l10n-sk-6.1.3.2-27.4 libreoffice-l10n-sl-6.1.3.2-27.4 libreoffice-l10n-sq-6.1.3.2-27.4 libreoffice-l10n-sr-6.1.3.2-27.4 libreoffice-l10n-ss-6.1.3.2-27.4 libreoffice-l10n-st-6.1.3.2-27.4 libreoffice-l10n-sv-6.1.3.2-27.4 libreoffice-l10n-sw_TZ-6.1.3.2-27.4 libreoffice-l10n-ta-6.1.3.2-27.4 libreoffice-l10n-te-6.1.3.2-27.4 libreoffice-l10n-tg-6.1.3.2-27.4 libreoffice-l10n-th-6.1.3.2-27.4 libreoffice-l10n-tn-6.1.3.2-27.4 libreoffice-l10n-tr-6.1.3.2-27.4 libreoffice-l10n-ts-6.1.3.2-27.4 libreoffice-l10n-tt-6.1.3.2-27.4 libreoffice-l10n-ug-6.1.3.2-27.4 libreoffice-l10n-uk-6.1.3.2-27.4 libreoffice-l10n-uz-6.1.3.2-27.4 libreoffice-l10n-ve-6.1.3.2-27.4 libreoffice-l10n-vec-6.1.3.2-27.4 libreoffice-l10n-vi-6.1.3.2-27.4 libreoffice-l10n-xh-6.1.3.2-27.4 libreoffice-l10n-zh_CN-6.1.3.2-27.4 libreoffice-l10n-zh_TW-6.1.3.2-27.4 libreoffice-l10n-zu-6.1.3.2-27.4 libstaroffice-devel-doc-0.0.6-2.6.1 myspell-af_NA-20181025-13.1 myspell-af_ZA-20181025-13.1 myspell-an-20181025-13.1 myspell-an_ES-20181025-13.1 myspell-ar-20181025-13.1 myspell-ar_AE-20181025-13.1 myspell-ar_BH-20181025-13.1 myspell-ar_DZ-20181025-13.1 myspell-ar_EG-20181025-13.1 myspell-ar_IQ-20181025-13.1 myspell-ar_JO-20181025-13.1 myspell-ar_KW-20181025-13.1 myspell-ar_LB-20181025-13.1 myspell-ar_LY-20181025-13.1 myspell-ar_MA-20181025-13.1 myspell-ar_OM-20181025-13.1 myspell-ar_QA-20181025-13.1 myspell-ar_SA-20181025-13.1 myspell-ar_SD-20181025-13.1 myspell-ar_SY-20181025-13.1 myspell-ar_TN-20181025-13.1 myspell-ar_YE-20181025-13.1 myspell-be_BY-20181025-13.1 myspell-bg_BG-20181025-13.1 myspell-bn_BD-20181025-13.1 myspell-bn_IN-20181025-13.1 myspell-bo-20181025-13.1 myspell-bo_CN-20181025-13.1 myspell-bo_IN-20181025-13.1 myspell-br_FR-20181025-13.1 myspell-bs-20181025-13.1 myspell-bs_BA-20181025-13.1 myspell-ca-20181025-13.1 myspell-ca_AD-20181025-13.1 myspell-ca_ES-20181025-13.1 myspell-ca_ES_valencia-20181025-13.1 myspell-ca_FR-20181025-13.1 myspell-ca_IT-20181025-13.1 myspell-cs_CZ-20181025-13.1 myspell-da_DK-20181025-13.1 myspell-de-20181025-13.1 myspell-de_AT-20181025-13.1 myspell-de_CH-20181025-13.1 myspell-de_DE-20181025-13.1 myspell-el_GR-20181025-13.1 myspell-en-20181025-13.1 myspell-en_AU-20181025-13.1 myspell-en_BS-20181025-13.1 myspell-en_BZ-20181025-13.1 myspell-en_CA-20181025-13.1 myspell-en_GB-20181025-13.1 myspell-en_GH-20181025-13.1 myspell-en_IE-20181025-13.1 myspell-en_IN-20181025-13.1 myspell-en_JM-20181025-13.1 myspell-en_MW-20181025-13.1 myspell-en_NA-20181025-13.1 myspell-en_NZ-20181025-13.1 myspell-en_PH-20181025-13.1 myspell-en_TT-20181025-13.1 myspell-en_US-20181025-13.1 myspell-en_ZA-20181025-13.1 myspell-en_ZW-20181025-13.1 myspell-es-20181025-13.1 myspell-es_AR-20181025-13.1 myspell-es_BO-20181025-13.1 myspell-es_CL-20181025-13.1 myspell-es_CO-20181025-13.1 myspell-es_CR-20181025-13.1 myspell-es_CU-20181025-13.1 myspell-es_DO-20181025-13.1 myspell-es_EC-20181025-13.1 myspell-es_ES-20181025-13.1 myspell-es_GT-20181025-13.1 myspell-es_HN-20181025-13.1 myspell-es_MX-20181025-13.1 myspell-es_NI-20181025-13.1 myspell-es_PA-20181025-13.1 myspell-es_PE-20181025-13.1 myspell-es_PR-20181025-13.1 myspell-es_PY-20181025-13.1 myspell-es_SV-20181025-13.1 myspell-es_UY-20181025-13.1 myspell-es_VE-20181025-13.1 myspell-et_EE-20181025-13.1 myspell-fr_BE-20181025-13.1 myspell-fr_CA-20181025-13.1 myspell-fr_CH-20181025-13.1 myspell-fr_FR-20181025-13.1 myspell-fr_LU-20181025-13.1 myspell-fr_MC-20181025-13.1 myspell-gd_GB-20181025-13.1 myspell-gl-20181025-13.1 myspell-gl_ES-20181025-13.1 myspell-gu_IN-20181025-13.1 myspell-gug-20181025-13.1 myspell-gug_PY-20181025-13.1 myspell-he_IL-20181025-13.1 myspell-hi_IN-20181025-13.1 myspell-hr_HR-20181025-13.1 myspell-hu_HU-20181025-13.1 myspell-id-20181025-13.1 myspell-id_ID-20181025-13.1 myspell-is-20181025-13.1 myspell-is_IS-20181025-13.1 myspell-it_IT-20181025-13.1 myspell-kmr_Latn-20181025-13.1 myspell-kmr_Latn_SY-20181025-13.1 myspell-kmr_Latn_TR-20181025-13.1 myspell-lo_LA-20181025-13.1 myspell-lt_LT-20181025-13.1 myspell-lv_LV-20181025-13.1 myspell-nb_NO-20181025-13.1 myspell-ne_NP-20181025-13.1 myspell-nl_BE-20181025-13.1 myspell-nl_NL-20181025-13.1 myspell-nn_NO-20181025-13.1 myspell-no-20181025-13.1 myspell-oc_FR-20181025-13.1 myspell-pl_PL-20181025-13.1 myspell-pt_AO-20181025-13.1 myspell-pt_BR-20181025-13.1 myspell-pt_PT-20181025-13.1 myspell-ro-20181025-13.1 myspell-ro_RO-20181025-13.1 myspell-ru_RU-20181025-13.1 myspell-si_LK-20181025-13.1 myspell-sk_SK-20181025-13.1 myspell-sl_SI-20181025-13.1 myspell-sq_AL-20181025-13.1 myspell-sr-20181025-13.1 myspell-sr_CS-20181025-13.1 myspell-sr_Latn_CS-20181025-13.1 myspell-sr_Latn_RS-20181025-13.1 myspell-sr_RS-20181025-13.1 myspell-sv_FI-20181025-13.1 myspell-sv_SE-20181025-13.1 myspell-sw_TZ-20181025-13.1 myspell-te-20181025-13.1 myspell-te_IN-20181025-13.1 myspell-th_TH-20181025-13.1 myspell-tr-20181025-13.1 myspell-tr_TR-20181025-13.1 myspell-uk_UA-20181025-13.1 myspell-vi-20181025-13.1 myspell-vi_VN-20181025-13.1 myspell-zu_ZA-20181025-13.1 References: https://bugzilla.suse.com/1050305 https://bugzilla.suse.com/1094779 https://bugzilla.suse.com/1096360 https://bugzilla.suse.com/1104876

1 0

openSUSE-SU-2018:4287-1: important: Security update for netatalk
by opensuse-security＠opensuse.org 28 Dec '18

28 Dec '18

openSUSE Security Update: Security update for netatalk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4287-1 Rating: important References: #1119540 Cross-References: CVE-2018-1160 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for netatalk fixes the following issues: Security issue fixed: - CVE-2018-1160 Fixed a missing bounds check in the handling of the DSI OPEN SESSION request, which allowed an unauthenticated to overwrite memory with data of their choice leading for arbitrary code execution with root privileges. (bsc#1119540) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1614=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libatalk16-3.1.7-8.3.1 libatalk16-debuginfo-3.1.7-8.3.1 netatalk-3.1.7-8.3.1 netatalk-debuginfo-3.1.7-8.3.1 netatalk-debugsource-3.1.7-8.3.1 netatalk-devel-3.1.7-8.3.1 References: https://www.suse.com/security/cve/CVE-2018-1160.html https://bugzilla.suse.com/1119540

1 0

openSUSE-RU-2018:4286-1: moderate: Recommended update for endless-sky
by maintenance＠opensuse.org 28 Dec '18

28 Dec '18

openSUSE Recommended Update: Recommended update for endless-sky ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4286-1 Rating: moderate References: #1119628 #1119674 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for endless-sky fixes the following issues: - Prevent that the game blocks the main menu buttons due to broken symlinks in the data directory caused by brp-25-symlink not handling spaces in paths properly (boo#1119628, boo#1119674) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1615=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1615=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2018-1615=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): endless-sky-0.9.6-2.3.1 endless-sky-debuginfo-0.9.6-2.3.1 - openSUSE Leap 15.0 (x86_64): endless-sky-0.9.6-lp150.2.3.1 endless-sky-debuginfo-0.9.6-lp150.2.3.1 - openSUSE Backports SLE-15 (x86_64): endless-sky-0.9.6-bp150.3.3.1 endless-sky-debuginfo-0.9.6-bp150.3.3.1 References: https://bugzilla.suse.com/1119628 https://bugzilla.suse.com/1119674

1 0

openSUSE-RU-2018:4285-1: Recommended update for kubectl
by maintenance＠opensuse.org 28 Dec '18

28 Dec '18

openSUSE Recommended Update: Recommended update for kubectl ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4285-1 Rating: low References: #1119713 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update to kubectl updates the package to the same version (1.10.11) as in the SUSE CaaS Platform (bsc#1119713) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1616=1 Package List: - openSUSE Leap 15.0 (x86_64): kubectl-1.10.11-lp150.6.1 References: https://bugzilla.suse.com/1119713

1 0

openSUSE-SU-2018:4283-1: moderate: Security update for mozilla-nspr and mozilla-nss
by opensuse-security＠opensuse.org 28 Dec '18

28 Dec '18

openSUSE Security Update: Security update for mozilla-nspr and mozilla-nss ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4283-1 Rating: moderate References: #1097410 #1119105 Cross-References: CVE-2018-0495 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for mozilla-nss and mozilla-nspr fixes the following issues: Issues fixed in mozilla-nss: - Update to NSS 3.40.1 (bsc#1119105) - CVE-2018-12404: Fixed a cache side-channel variant of the Bleichenbacher attack (bsc#1119069) - CVE-2018-12384: Fixed an issue in the SSL handshake. NSS responded to an SSLv2-compatible ClientHello with a ServerHello that had an all-zero random. (bsc#1106873) - CVE-2018-0495: Fixed a memory-cache side-channel attack with ECDSA signatures (bsc#1097410) - Fixed a decryption failure during FFDHE key exchange - Various security fixes in the ASN.1 code Issues fixed in mozilla-nspr: - Update mozilla-nspr to 4.20 (bsc#1119105) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1618=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libfreebl3-3.40.1-lp150.2.10.2 libfreebl3-debuginfo-3.40.1-lp150.2.10.2 libsoftokn3-3.40.1-lp150.2.10.2 libsoftokn3-debuginfo-3.40.1-lp150.2.10.2 mozilla-nspr-4.20-lp150.2.3.1 mozilla-nspr-debuginfo-4.20-lp150.2.3.1 mozilla-nspr-debugsource-4.20-lp150.2.3.1 mozilla-nspr-devel-4.20-lp150.2.3.1 mozilla-nss-3.40.1-lp150.2.10.2 mozilla-nss-certs-3.40.1-lp150.2.10.2 mozilla-nss-certs-debuginfo-3.40.1-lp150.2.10.2 mozilla-nss-debuginfo-3.40.1-lp150.2.10.2 mozilla-nss-debugsource-3.40.1-lp150.2.10.2 mozilla-nss-devel-3.40.1-lp150.2.10.2 mozilla-nss-sysinit-3.40.1-lp150.2.10.2 mozilla-nss-sysinit-debuginfo-3.40.1-lp150.2.10.2 mozilla-nss-tools-3.40.1-lp150.2.10.2 mozilla-nss-tools-debuginfo-3.40.1-lp150.2.10.2 - openSUSE Leap 15.0 (x86_64): libfreebl3-32bit-3.40.1-lp150.2.10.2 libfreebl3-32bit-debuginfo-3.40.1-lp150.2.10.2 libsoftokn3-32bit-3.40.1-lp150.2.10.2 libsoftokn3-32bit-debuginfo-3.40.1-lp150.2.10.2 mozilla-nspr-32bit-4.20-lp150.2.3.1 mozilla-nspr-32bit-debuginfo-4.20-lp150.2.3.1 mozilla-nss-32bit-3.40.1-lp150.2.10.2 mozilla-nss-32bit-debuginfo-3.40.1-lp150.2.10.2 mozilla-nss-certs-32bit-3.40.1-lp150.2.10.2 mozilla-nss-certs-32bit-debuginfo-3.40.1-lp150.2.10.2 mozilla-nss-sysinit-32bit-3.40.1-lp150.2.10.2 mozilla-nss-sysinit-32bit-debuginfo-3.40.1-lp150.2.10.2 References: https://www.suse.com/security/cve/CVE-2018-0495.html https://bugzilla.suse.com/1097410 https://bugzilla.suse.com/1119105

1 0

openSUSE-SU-2018:4282-1: moderate: Security update for polkit
by opensuse-security＠opensuse.org 28 Dec '18

28 Dec '18

openSUSE Security Update: Security update for polkit ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4282-1 Rating: moderate References: #1118277 Cross-References: CVE-2018-19788 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for polkit fixes the following issues: Security issue fixed: - CVE-2018-19788: Fixed handling of UIDs over MAX_UINT (boo#1118277) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1617=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libpolkit0-0.113-14.6.1 libpolkit0-debuginfo-0.113-14.6.1 polkit-0.113-14.6.1 polkit-debuginfo-0.113-14.6.1 polkit-debugsource-0.113-14.6.1 polkit-devel-0.113-14.6.1 polkit-devel-debuginfo-0.113-14.6.1 typelib-1_0-Polkit-1_0-0.113-14.6.1 - openSUSE Leap 42.3 (noarch): polkit-doc-0.113-14.6.1 - openSUSE Leap 42.3 (x86_64): libpolkit0-32bit-0.113-14.6.1 libpolkit0-debuginfo-32bit-0.113-14.6.1 References: https://www.suse.com/security/cve/CVE-2018-19788.html https://bugzilla.suse.com/1118277

1 0