June 2018 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-OU-2018:1556-1: moderate: Optional update for geotiff
by maintenance＠opensuse.org 06 Jun '18

06 Jun '18

openSUSE Optional Update: Optional update for geotiff ______________________________________________________________________________ Announcement ID: openSUSE-OU-2018:1556-1 Rating: moderate References: #1094802 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update for geotiff fixes the following issues: - Incorrect path for library in .pc file of devel subpackage (boo#1094802) Patch Instructions: To install this openSUSE Optional Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2018-554=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): geotiff-1.4.2-8.1 geotiff-debuginfo-1.4.2-8.1 geotiff-debugsource-1.4.2-8.1 geotiff-devel-1.4.2-8.1 libgeotiff2-1.4.2-8.1 libgeotiff2-debuginfo-1.4.2-8.1 References: https://bugzilla.suse.com/1094802

1 0

openSUSE-RU-2018:1555-1: Recommended update for xfce4-branding-openSUSE
by maintenance＠opensuse.org 06 Jun '18

06 Jun '18

openSUSE Recommended Update: Recommended update for xfce4-branding-openSUSE ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:1555-1 Rating: low References: #1095192 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for xfce4-branding-openSUSE fixes the following issues: - XFCE branding was incorrect (boo#1095192) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-556=1 Package List: - openSUSE Leap 15.0 (noarch): exo-branding-openSUSE-4.12.0-lp150.5.3.1 libgarcon-branding-openSUSE-4.12.0-lp150.5.3.1 libxfce4ui-branding-openSUSE-4.12.0-lp150.5.3.1 midori-branding-openSUSE-4.12.0-lp150.5.3.1 openSUSE-xfce-icon-theme-4.12.0-lp150.5.3.1 thunar-volman-branding-openSUSE-4.12.0-lp150.5.3.1 xfce4-notifyd-branding-openSUSE-4.12.0-lp150.5.3.1 xfce4-panel-branding-openSUSE-4.12.0-lp150.5.3.1 xfce4-power-manager-branding-openSUSE-4.12.0-lp150.5.3.1 xfce4-session-branding-openSUSE-4.12.0-lp150.5.3.1 xfce4-settings-branding-openSUSE-4.12.0-lp150.5.3.1 xfdesktop-branding-openSUSE-4.12.0-lp150.5.3.1 xfwm4-branding-openSUSE-4.12.0-lp150.5.3.1 References: https://bugzilla.suse.com/1095192

1 0

openSUSE-RU-2018:1554-1: moderate: Recommended update for javapackages-tools
by maintenance＠opensuse.org 06 Jun '18

06 Jun '18

openSUSE Recommended Update: Recommended update for javapackages-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:1554-1 Rating: moderate References: #1090920 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for javapackages-tools fixes the following issues: - Fix a wrong usage of popd (bsc#1090920) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-552=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): javapackages-tools-2.0.1-18.1 References: https://bugzilla.suse.com/1090920

1 0

openSUSE-SU-2018:1553-1: important: Security update for git
by opensuse-security＠opensuse.org 06 Jun '18

06 Jun '18

openSUSE Security Update: Security update for git ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:1553-1 Rating: important References: #1095218 #1095219 Cross-References: CVE-2018-11233 CVE-2018-11235 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for fixes the following security issues: * path sanity-checks on NTFS can read arbitrary memory (CVE-2018-11233, boo#1095218) * arbitrary code execution when recursively cloning a malicious repository (CVE-2018-11235, boo#1095219) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-557=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-557=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): git-2.13.7-13.1 git-arch-2.13.7-13.1 git-core-2.13.7-13.1 git-core-debuginfo-2.13.7-13.1 git-credential-gnome-keyring-2.13.7-13.1 git-credential-gnome-keyring-debuginfo-2.13.7-13.1 git-cvs-2.13.7-13.1 git-daemon-2.13.7-13.1 git-daemon-debuginfo-2.13.7-13.1 git-debugsource-2.13.7-13.1 git-email-2.13.7-13.1 git-gui-2.13.7-13.1 git-svn-2.13.7-13.1 git-svn-debuginfo-2.13.7-13.1 git-web-2.13.7-13.1 gitk-2.13.7-13.1 - openSUSE Leap 42.3 (noarch): git-doc-2.13.7-13.1 - openSUSE Leap 15.0 (i586 x86_64): git-2.16.4-lp150.2.3.1 git-arch-2.16.4-lp150.2.3.1 git-core-2.16.4-lp150.2.3.1 git-core-debuginfo-2.16.4-lp150.2.3.1 git-credential-gnome-keyring-2.16.4-lp150.2.3.1 git-credential-gnome-keyring-debuginfo-2.16.4-lp150.2.3.1 git-credential-libsecret-2.16.4-lp150.2.3.1 git-credential-libsecret-debuginfo-2.16.4-lp150.2.3.1 git-cvs-2.16.4-lp150.2.3.1 git-daemon-2.16.4-lp150.2.3.1 git-daemon-debuginfo-2.16.4-lp150.2.3.1 git-debuginfo-2.16.4-lp150.2.3.1 git-debugsource-2.16.4-lp150.2.3.1 git-email-2.16.4-lp150.2.3.1 git-gui-2.16.4-lp150.2.3.1 git-p4-2.16.4-lp150.2.3.1 git-svn-2.16.4-lp150.2.3.1 git-svn-debuginfo-2.16.4-lp150.2.3.1 git-web-2.16.4-lp150.2.3.1 gitk-2.16.4-lp150.2.3.1 - openSUSE Leap 15.0 (noarch): git-doc-2.16.4-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-11233.html https://www.suse.com/security/cve/CVE-2018-11235.html https://bugzilla.suse.com/1095218 https://bugzilla.suse.com/1095219

1 0

openSUSE-SU-2018:1502-1: moderate: Security update for kernel modules
by opensuse-security＠opensuse.org 05 Jun '18

05 Jun '18

openSUSE Security Update: Security update for kernel modules ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:1502-1 Rating: moderate References: #1068032 Cross-References: CVE-2017-5715 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update provides rebuilt kernel modules for openSUSE Leap 42.3 with retpoline enablement to address Spectre Variant 2 (CVE-2017-5715 bsc#1068032). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-551=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): crash-7.1.8-8.1 crash-debuginfo-7.1.8-8.1 crash-debugsource-7.1.8-8.1 crash-devel-7.1.8-8.1 crash-doc-7.1.8-8.1 crash-eppic-7.1.8-8.1 crash-eppic-debuginfo-7.1.8-8.1 crash-gcore-7.1.8-8.1 crash-gcore-debuginfo-7.1.8-8.1 - openSUSE Leap 42.3 (noarch): ftsteutates-sensors-20160601-4.4.1 - openSUSE Leap 42.3 (x86_64): bbswitch-0.8-12.4.1 bbswitch-debugsource-0.8-12.4.1 bbswitch-kmp-default-0.8_k4.4.132_53-12.4.1 bbswitch-kmp-default-debuginfo-0.8_k4.4.132_53-12.4.1 crash-kmp-default-7.1.8_k4.4.132_53-8.1 crash-kmp-default-debuginfo-7.1.8_k4.4.132_53-8.1 ftsteutates-debugsource-20160601-4.4.1 ftsteutates-kmp-default-20160601_k4.4.132_53-4.4.1 ftsteutates-kmp-default-debuginfo-20160601_k4.4.132_53-4.4.1 hdjmod-debugsource-1.28-27.4.1 hdjmod-kmp-default-1.28_k4.4.132_53-27.4.1 hdjmod-kmp-default-debuginfo-1.28_k4.4.132_53-27.4.1 ipset-6.29-4.4.1 ipset-debuginfo-6.29-4.4.1 ipset-debugsource-6.29-4.4.1 ipset-devel-6.29-4.4.1 ipset-kmp-default-6.29_k4.4.132_53-4.4.1 ipset-kmp-default-debuginfo-6.29_k4.4.132_53-4.4.1 libipset3-6.29-4.4.1 libipset3-debuginfo-6.29-4.4.1 lttng-modules-2.7.1-6.2.1 lttng-modules-debugsource-2.7.1-6.2.1 lttng-modules-kmp-default-2.7.1_k4.4.132_53-6.2.1 lttng-modules-kmp-default-debuginfo-2.7.1_k4.4.132_53-6.2.1 ndiswrapper-1.59-3.4.1 ndiswrapper-debuginfo-1.59-3.4.1 ndiswrapper-debugsource-1.59-3.4.1 ndiswrapper-kmp-default-1.59_k4.4.132_53-3.4.1 ndiswrapper-kmp-default-debuginfo-1.59_k4.4.132_53-3.4.1 pcfclock-0.44-272.4.1 pcfclock-debuginfo-0.44-272.4.1 pcfclock-debugsource-0.44-272.4.1 pcfclock-kmp-default-0.44_k4.4.132_53-272.4.1 pcfclock-kmp-default-debuginfo-0.44_k4.4.132_53-272.4.1 sysdig-0.17.0-12.1 sysdig-debuginfo-0.17.0-12.1 sysdig-debugsource-0.17.0-12.1 sysdig-kmp-default-0.17.0_k4.4.132_53-12.1 sysdig-kmp-default-debuginfo-0.17.0_k4.4.132_53-12.1 vhba-kmp-debugsource-20161009-9.4.1 vhba-kmp-default-20161009_k4.4.132_53-9.4.1 vhba-kmp-default-debuginfo-20161009_k4.4.132_53-9.4.1 xtables-addons-2.11-4.4.1 xtables-addons-debuginfo-2.11-4.4.1 xtables-addons-debugsource-2.11-4.4.1 xtables-addons-kmp-default-2.11_k4.4.132_53-4.4.1 xtables-addons-kmp-default-debuginfo-2.11_k4.4.132_53-4.4.1 References: https://www.suse.com/security/cve/CVE-2017-5715.html https://bugzilla.suse.com/1068032

1 0

openSUSE-RU-2018:1496-1: moderate: Recommended update for amazon-ssm-agent
by maintenance＠opensuse.org 04 Jun '18

04 Jun '18

openSUSE Recommended Update: Recommended update for amazon-ssm-agent ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:1496-1 Rating: moderate References: #1085670 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for amazon-ssm-agent to version 2.2.325.0 (bsc#1085670) provides the following fixes: - Change the default sourceHashType to be sha256 on psmodule. - Fix an issue that can prevent the agent from processing associations after a restart. - Execute "pwsh" on linux when using runPowershellScript plugin. - Update to latest AWS SDK. - Switching to use Birdwatcher distribution service for AWS packages. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-550=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): amazon-ssm-agent-2.2.325.0-2.6.1 References: https://bugzilla.suse.com/1085670

1 0

openSUSE-RU-2018:1495-1: Recommended update for suse-xsl-stylesheets
by maintenance＠opensuse.org 04 Jun '18

04 Jun '18

openSUSE Recommended Update: Recommended update for suse-xsl-stylesheets ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:1495-1 Rating: low References: #1080244 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for suse-xsl-stylesheets fixes the following issue: - upgrade problems related to liberation-fonts fonts (bsc#1080244) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-549=1 Package List: - openSUSE Leap 42.3 (noarch): suse-xsl-stylesheets-2.0.7.2-5.3.1 References: https://bugzilla.suse.com/1080244

1 0

openSUSE-RU-2018:1491-1: moderate: Recommended update for kglobalaccel
by maintenance＠opensuse.org 01 Jun '18

01 Jun '18

openSUSE Recommended Update: Recommended update for kglobalaccel ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:1491-1 Rating: moderate References: #1094931 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for kglobalaccel fixes the following issues: - Task switcher was randomly ignored, the user had to pres ALT-TAB several times to activate it (kde#394689, boo#1094931) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-548=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-548=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): kglobalaccel-debugsource-5.32.0-2.3.1 kglobalaccel-devel-5.32.0-2.3.1 kglobalaccel5-5.32.0-2.3.1 kglobalaccel5-debuginfo-5.32.0-2.3.1 libKF5GlobalAccel5-5.32.0-2.3.1 libKF5GlobalAccel5-debuginfo-5.32.0-2.3.1 libKF5GlobalAccelPrivate5-5.32.0-2.3.1 libKF5GlobalAccelPrivate5-debuginfo-5.32.0-2.3.1 - openSUSE Leap 42.3 (noarch): libKF5GlobalAccel5-lang-5.32.0-2.3.1 - openSUSE Leap 42.3 (x86_64): kglobalaccel-devel-32bit-5.32.0-2.3.1 libKF5GlobalAccel5-32bit-5.32.0-2.3.1 libKF5GlobalAccel5-debuginfo-32bit-5.32.0-2.3.1 - openSUSE Leap 15.0 (i586 x86_64): kglobalaccel-debugsource-5.45.0-lp150.2.3.1 kglobalaccel-devel-5.45.0-lp150.2.3.1 kglobalaccel5-5.45.0-lp150.2.3.1 kglobalaccel5-debuginfo-5.45.0-lp150.2.3.1 libKF5GlobalAccel5-5.45.0-lp150.2.3.1 libKF5GlobalAccel5-debuginfo-5.45.0-lp150.2.3.1 libKF5GlobalAccelPrivate5-5.45.0-lp150.2.3.1 libKF5GlobalAccelPrivate5-debuginfo-5.45.0-lp150.2.3.1 - openSUSE Leap 15.0 (x86_64): kglobalaccel-devel-32bit-5.45.0-lp150.2.3.1 libKF5GlobalAccel5-32bit-5.45.0-lp150.2.3.1 libKF5GlobalAccel5-32bit-debuginfo-5.45.0-lp150.2.3.1 - openSUSE Leap 15.0 (noarch): libKF5GlobalAccel5-lang-5.45.0-lp150.2.3.1 References: https://bugzilla.suse.com/1094931

1 0

openSUSE-RU-2018:1490-1: moderate: Recommended update for kglobalaccel
by maintenance＠opensuse.org 01 Jun '18

01 Jun '18

openSUSE Recommended Update: Recommended update for kglobalaccel ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:1490-1 Rating: moderate References: #1094931 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for kglobalaccel fixes the following issues: - Task switcher was randomly ignored, the user had to pres ALT-TAB several times to activate it (kde#394689, boo#1094931) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2018-548=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): libKF5GlobalAccel5-lang-5.32.0-5.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): kglobalaccel-devel-5.32.0-5.1 kglobalaccel5-5.32.0-5.1 libKF5GlobalAccel5-5.32.0-5.1 libKF5GlobalAccelPrivate5-5.32.0-5.1 References: https://bugzilla.suse.com/1094931

1 0

openSUSE-SU-2018:1487-1: important: Security update for xen
by opensuse-security＠opensuse.org 01 Jun '18

01 Jun '18

openSUSE Security Update: Security update for xen ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:1487-1 Rating: important References: #1027519 #1074562 #1090296 #1090822 #1090823 #1092631 Cross-References: CVE-2018-10981 CVE-2018-10982 CVE-2018-3639 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves three vulnerabilities and has three fixes is now available. Description: This update for xen fixes the following issues: Security issues fixed: - CVE-2018-3639: Spectre V4 – Speculative Store Bypass aka "Memory Disambiguation" (bsc#1092631) This feature can be controlled by the "ssbd=on/off" commandline flag for the XEN hypervisor. - CVE-2018-10982: x86 vHPET interrupt injection errors (XSA-261 bsc#1090822) - CVE-2018-10981: qemu may drive Xen into unbounded loop (XSA-262 bsc#1090823) Other bugfixes: - Upstream patches from Jan (bsc#1027519) - additional fixes related to Page Table Isolation (XPTI). (bsc#1074562 XSA-254) - qemu-system-i386 cannot handle more than 4 HW NICs (bsc#1090296) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-547=1 Package List: - openSUSE Leap 42.3 (x86_64): xen-4.9.2_06-22.1 xen-debugsource-4.9.2_06-22.1 xen-devel-4.9.2_06-22.1 xen-doc-html-4.9.2_06-22.1 xen-libs-4.9.2_06-22.1 xen-libs-debuginfo-4.9.2_06-22.1 xen-tools-4.9.2_06-22.1 xen-tools-debuginfo-4.9.2_06-22.1 xen-tools-domU-4.9.2_06-22.1 xen-tools-domU-debuginfo-4.9.2_06-22.1 References: https://www.suse.com/security/cve/CVE-2018-10981.html https://www.suse.com/security/cve/CVE-2018-10982.html https://www.suse.com/security/cve/CVE-2018-3639.html https://bugzilla.suse.com/1027519 https://bugzilla.suse.com/1074562 https://bugzilla.suse.com/1090296 https://bugzilla.suse.com/1090822 https://bugzilla.suse.com/1090823 https://bugzilla.suse.com/1092631

1 0