February 2018 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2018:0454-1: important: Security update for chromium
by opensuse-security＠opensuse.org 15 Feb '18

15 Feb '18

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:0454-1 Rating: important References: #1080920 Cross-References: CVE-2018-6056 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for chromium to version 64.0.3282.167 fixes the following issue: * CVE-2018-6056: Incorrect derived class instantiation in V8 (bsc#1080920) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2018-165=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): chromedriver-64.0.3282.167-52.1 chromium-64.0.3282.167-52.1 References: https://www.suse.com/security/cve/CVE-2018-6056.html https://bugzilla.suse.com/1080920

1 0

openSUSE-SU-2018:0453-1: important: Security update for chromium
by opensuse-security＠opensuse.org 15 Feb '18

15 Feb '18

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:0453-1 Rating: important References: #1080920 Cross-References: CVE-2018-6056 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for chromium to version 64.0.3282.167 fixes the following issue: * CVE-2018-6056: Incorrect derived class instantiation in V8 (bsc#1080920) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-165=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (x86_64): chromedriver-64.0.3282.167-141.1 chromedriver-debuginfo-64.0.3282.167-141.1 chromium-64.0.3282.167-141.1 chromium-debuginfo-64.0.3282.167-141.1 chromium-debugsource-64.0.3282.167-141.1 References: https://www.suse.com/security/cve/CVE-2018-6056.html https://bugzilla.suse.com/1080920

1 0

openSUSE-RU-2018:0449-1: moderate: Recommended update for tor
by maintenance＠opensuse.org 15 Feb '18

15 Feb '18

openSUSE Recommended Update: Recommended update for tor ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:0449-1 Rating: moderate References: #1080694 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for tor updates the package to the current stable maintained branch. This adds the following functionalies and improvements of the 0.3.2.9 version: - new onion service design (v3), not default - new circuit scheduler algorithm for improved performance - directory authority updates - many other updates and improvements Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2018-164=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le x86_64): tor-0.3.2.9-11.1 tor-debuginfo-0.3.2.9-11.1 tor-debugsource-0.3.2.9-11.1 References: https://bugzilla.suse.com/1080694

1 0

openSUSE-RU-2018:0448-1: moderate: Recommended update for tor
by maintenance＠opensuse.org 15 Feb '18

15 Feb '18

openSUSE Recommended Update: Recommended update for tor ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:0448-1 Rating: moderate References: #1080694 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for tor updates the package to the current stable maintained branch. This adds the following functionalies and improvements of the 0.3.2.9 version: - new onion service design (v3), not default - new circuit scheduler algorithm for improved performance - directory authority updates - many other updates and improvements Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-164=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): tor-0.3.2.9-12.1 tor-debuginfo-0.3.2.9-12.1 tor-debugsource-0.3.2.9-12.1 References: https://bugzilla.suse.com/1080694

1 0

openSUSE-RU-2018:0447-1: Recommended update for bash
by maintenance＠opensuse.org 15 Feb '18

15 Feb '18

openSUSE Recommended Update: Recommended update for bash ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:0447-1 Rating: low References: #1057452 #1076909 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for bash provides the following fix: - Allow process group assignment on all kernel versions to fix the usage of debug traps. (bsc#1057452) - Fix a crash when filesystem is full. (bsc#1076909) - Enable multi-byte characters by default. This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-163=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): bash-4.3-83.3.1 bash-debuginfo-4.3-83.3.1 bash-debugsource-4.3-83.3.1 bash-devel-4.3-83.3.1 bash-loadables-4.3-83.3.1 bash-loadables-debuginfo-4.3-83.3.1 libreadline6-6.3-83.3.1 libreadline6-debuginfo-6.3-83.3.1 readline-devel-6.3-83.3.1 - openSUSE Leap 42.3 (x86_64): bash-debuginfo-32bit-4.3-83.3.1 libreadline6-32bit-6.3-83.3.1 libreadline6-debuginfo-32bit-6.3-83.3.1 readline-devel-32bit-6.3-83.3.1 - openSUSE Leap 42.3 (noarch): bash-doc-4.3-83.3.1 bash-lang-4.3-83.3.1 readline-doc-6.3-83.3.1 References: https://bugzilla.suse.com/1057452 https://bugzilla.suse.com/1076909

1 0

openSUSE-SU-2018:0446-1: important: Security update for libreoffice
by opensuse-security＠opensuse.org 15 Feb '18

15 Feb '18

openSUSE Security Update: Security update for libreoffice ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:0446-1 Rating: important References: #1080249 Cross-References: CVE-2018-6871 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libreoffice fixes the following issues: LibreOffice was updated to 5.4.5.1: - CVE-2018-6871: Fixes data exposure when using WEBSERVICE (bsc#1080249) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-162=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (x86_64): libreoffice-5.4.5.1-15.1 libreoffice-base-5.4.5.1-15.1 libreoffice-base-debuginfo-5.4.5.1-15.1 libreoffice-base-drivers-mysql-5.4.5.1-15.1 libreoffice-base-drivers-mysql-debuginfo-5.4.5.1-15.1 libreoffice-base-drivers-postgresql-5.4.5.1-15.1 libreoffice-base-drivers-postgresql-debuginfo-5.4.5.1-15.1 libreoffice-calc-5.4.5.1-15.1 libreoffice-calc-debuginfo-5.4.5.1-15.1 libreoffice-calc-extensions-5.4.5.1-15.1 libreoffice-debuginfo-5.4.5.1-15.1 libreoffice-debugsource-5.4.5.1-15.1 libreoffice-draw-5.4.5.1-15.1 libreoffice-draw-debuginfo-5.4.5.1-15.1 libreoffice-filters-optional-5.4.5.1-15.1 libreoffice-gnome-5.4.5.1-15.1 libreoffice-gnome-debuginfo-5.4.5.1-15.1 libreoffice-gtk3-5.4.5.1-15.1 libreoffice-gtk3-debuginfo-5.4.5.1-15.1 libreoffice-impress-5.4.5.1-15.1 libreoffice-impress-debuginfo-5.4.5.1-15.1 libreoffice-kde4-5.4.5.1-15.1 libreoffice-kde4-debuginfo-5.4.5.1-15.1 libreoffice-mailmerge-5.4.5.1-15.1 libreoffice-math-5.4.5.1-15.1 libreoffice-math-debuginfo-5.4.5.1-15.1 libreoffice-officebean-5.4.5.1-15.1 libreoffice-officebean-debuginfo-5.4.5.1-15.1 libreoffice-pyuno-5.4.5.1-15.1 libreoffice-pyuno-debuginfo-5.4.5.1-15.1 libreoffice-sdk-5.4.5.1-15.1 libreoffice-sdk-debuginfo-5.4.5.1-15.1 libreoffice-sdk-doc-5.4.5.1-15.1 libreoffice-writer-5.4.5.1-15.1 libreoffice-writer-debuginfo-5.4.5.1-15.1 libreoffice-writer-extensions-5.4.5.1-15.1 libreofficekit-5.4.5.1-15.1 libreofficekit-devel-5.4.5.1-15.1 - openSUSE Leap 42.3 (noarch): libreoffice-branding-upstream-5.4.5.1-15.1 libreoffice-gdb-pretty-printers-5.4.5.1-15.1 libreoffice-glade-5.4.5.1-15.1 libreoffice-icon-theme-breeze-5.4.5.1-15.1 libreoffice-icon-theme-galaxy-5.4.5.1-15.1 libreoffice-icon-theme-hicontrast-5.4.5.1-15.1 libreoffice-icon-theme-sifr-5.4.5.1-15.1 libreoffice-icon-theme-tango-5.4.5.1-15.1 libreoffice-l10n-af-5.4.5.1-15.1 libreoffice-l10n-ar-5.4.5.1-15.1 libreoffice-l10n-as-5.4.5.1-15.1 libreoffice-l10n-bg-5.4.5.1-15.1 libreoffice-l10n-bn-5.4.5.1-15.1 libreoffice-l10n-br-5.4.5.1-15.1 libreoffice-l10n-ca-5.4.5.1-15.1 libreoffice-l10n-cs-5.4.5.1-15.1 libreoffice-l10n-cy-5.4.5.1-15.1 libreoffice-l10n-da-5.4.5.1-15.1 libreoffice-l10n-de-5.4.5.1-15.1 libreoffice-l10n-dz-5.4.5.1-15.1 libreoffice-l10n-el-5.4.5.1-15.1 libreoffice-l10n-en-5.4.5.1-15.1 libreoffice-l10n-eo-5.4.5.1-15.1 libreoffice-l10n-es-5.4.5.1-15.1 libreoffice-l10n-et-5.4.5.1-15.1 libreoffice-l10n-eu-5.4.5.1-15.1 libreoffice-l10n-fa-5.4.5.1-15.1 libreoffice-l10n-fi-5.4.5.1-15.1 libreoffice-l10n-fr-5.4.5.1-15.1 libreoffice-l10n-ga-5.4.5.1-15.1 libreoffice-l10n-gl-5.4.5.1-15.1 libreoffice-l10n-gu-5.4.5.1-15.1 libreoffice-l10n-he-5.4.5.1-15.1 libreoffice-l10n-hi-5.4.5.1-15.1 libreoffice-l10n-hr-5.4.5.1-15.1 libreoffice-l10n-hu-5.4.5.1-15.1 libreoffice-l10n-it-5.4.5.1-15.1 libreoffice-l10n-ja-5.4.5.1-15.1 libreoffice-l10n-kk-5.4.5.1-15.1 libreoffice-l10n-kn-5.4.5.1-15.1 libreoffice-l10n-ko-5.4.5.1-15.1 libreoffice-l10n-lt-5.4.5.1-15.1 libreoffice-l10n-lv-5.4.5.1-15.1 libreoffice-l10n-mai-5.4.5.1-15.1 libreoffice-l10n-ml-5.4.5.1-15.1 libreoffice-l10n-mr-5.4.5.1-15.1 libreoffice-l10n-nb-5.4.5.1-15.1 libreoffice-l10n-nl-5.4.5.1-15.1 libreoffice-l10n-nn-5.4.5.1-15.1 libreoffice-l10n-nr-5.4.5.1-15.1 libreoffice-l10n-nso-5.4.5.1-15.1 libreoffice-l10n-or-5.4.5.1-15.1 libreoffice-l10n-pa-5.4.5.1-15.1 libreoffice-l10n-pl-5.4.5.1-15.1 libreoffice-l10n-pt_BR-5.4.5.1-15.1 libreoffice-l10n-pt_PT-5.4.5.1-15.1 libreoffice-l10n-ro-5.4.5.1-15.1 libreoffice-l10n-ru-5.4.5.1-15.1 libreoffice-l10n-si-5.4.5.1-15.1 libreoffice-l10n-sk-5.4.5.1-15.1 libreoffice-l10n-sl-5.4.5.1-15.1 libreoffice-l10n-sr-5.4.5.1-15.1 libreoffice-l10n-ss-5.4.5.1-15.1 libreoffice-l10n-st-5.4.5.1-15.1 libreoffice-l10n-sv-5.4.5.1-15.1 libreoffice-l10n-ta-5.4.5.1-15.1 libreoffice-l10n-te-5.4.5.1-15.1 libreoffice-l10n-th-5.4.5.1-15.1 libreoffice-l10n-tn-5.4.5.1-15.1 libreoffice-l10n-tr-5.4.5.1-15.1 libreoffice-l10n-ts-5.4.5.1-15.1 libreoffice-l10n-uk-5.4.5.1-15.1 libreoffice-l10n-ve-5.4.5.1-15.1 libreoffice-l10n-xh-5.4.5.1-15.1 libreoffice-l10n-zh_CN-5.4.5.1-15.1 libreoffice-l10n-zh_TW-5.4.5.1-15.1 libreoffice-l10n-zu-5.4.5.1-15.1 References: https://www.suse.com/security/cve/CVE-2018-6871.html https://bugzilla.suse.com/1080249

1 0

openSUSE-OU-2018:0442-1: Optional update for zstd
by maintenance＠opensuse.org 14 Feb '18

14 Feb '18

openSUSE Optional Update: Optional update for zstd ______________________________________________________________________________ Announcement ID: openSUSE-OU-2018:0442-1 Rating: low References: #575988 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update adds zstd 1.3.3 to the distribution. Zstd is a lossless general compression library and command line tool. It is a dependency for an upcoming update of the tor package. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-161=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): libzstd-devel-1.3.3-2.1 libzstd-devel-static-1.3.3-2.1 libzstd1-1.3.3-2.1 libzstd1-debuginfo-1.3.3-2.1 zstd-1.3.3-2.1 zstd-debuginfo-1.3.3-2.1 zstd-debugsource-1.3.3-2.1 References: https://bugzilla.suse.com/575988

1 0

openSUSE-OU-2018:0441-1: Optional update for zstd
by maintenance＠opensuse.org 14 Feb '18

14 Feb '18

openSUSE Optional Update: Optional update for zstd ______________________________________________________________________________ Announcement ID: openSUSE-OU-2018:0441-1 Rating: low References: #575988 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update adds zstd 1.3.3 to the distribution. Zstd is a lossless general compression library and command line tool. It is a dependency for an upcoming update of the tor package. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2018-161=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): libzstd-devel-1.3.3-5.1 libzstd-devel-static-1.3.3-5.1 libzstd1-1.3.3-5.1 libzstd1-debuginfo-1.3.3-5.1 zstd-1.3.3-5.1 zstd-debuginfo-1.3.3-5.1 zstd-debugsource-1.3.3-5.1 References: https://bugzilla.suse.com/575988

1 0

openSUSE-RU-2018:0440-1: Recommended update for open-vm-tools
by maintenance＠opensuse.org 14 Feb '18

14 Feb '18

openSUSE Recommended Update: Recommended update for open-vm-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:0440-1 Rating: low References: #1062837 #1063320 #1073174 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update of open-vm-tools to version 10.2.0 provides the following fixes and improvements: - Build deploypackage plugin for SLES11 making the VMware provided open-vm-tools-deploypkg obsolete. (bsc#1062837) - Fix a memory leak in vmtoolsd. - Add SUSE Server for SAP Applications to hostinfoPosix.c. - Fix a crash when stopping vmtoolsd. - Add new GOS definitions (e.g. SLES 15) for virtual hardware version 14. - Add /usr/bin/vmware-user symlink to vmware-user-suid-wrapper. - Provide vmware-vgauth-smoketest for VGAUthservice validation. - Modify udev rules to only adjust timeout on disk devices. (bsc#1063320) - Enable building with ssl capabilities for SLES11. - Tools Hgfs Plugin: refresh Hgfs drives on client start - Report version data via guestinfo vars - Add entries for MacOS 10.13 (High Sierra) to guest_os_tables.h. This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-160=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (x86_64): libvmtools-devel-10.2.0-7.1 libvmtools0-10.2.0-7.1 libvmtools0-debuginfo-10.2.0-7.1 open-vm-tools-10.2.0-7.1 open-vm-tools-debuginfo-10.2.0-7.1 open-vm-tools-debugsource-10.2.0-7.1 open-vm-tools-desktop-10.2.0-7.1 open-vm-tools-desktop-debuginfo-10.2.0-7.1 References: https://bugzilla.suse.com/1062837 https://bugzilla.suse.com/1063320 https://bugzilla.suse.com/1073174

1 0

openSUSE-SU-2018:0434-1: moderate: Security update for ipsec-tools
by opensuse-security＠opensuse.org 13 Feb '18

13 Feb '18

openSUSE Security Update: Security update for ipsec-tools ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:0434-1 Rating: moderate References: #1047443 Cross-References: CVE-2016-10396 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for ipsec-tools fixes one issue. This security issue was fixed: - CVE-2016-10396: The racoon daemon contained a remotely exploitable computational-complexity attack when parsing and storing ISAKMP fragments that allowed a remote attacker to exhaust computational resources on the remote endpoint by repeatedly sending ISAKMP fragment packets in a particular order (bsc#1047443). This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-159=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): ipsec-tools-0.8.0-14.3.1 ipsec-tools-debuginfo-0.8.0-14.3.1 ipsec-tools-debugsource-0.8.0-14.3.1 References: https://www.suse.com/security/cve/CVE-2016-10396.html https://bugzilla.suse.com/1047443

1 0