June 2018 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2018:1808-1: important: Recommended update for hylafax+
by maintenance＠opensuse.org 23 Jun '18

23 Jun '18

openSUSE Recommended Update: Recommended update for hylafax+ ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:1808-1 Rating: important References: #1091476 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for hylafax+ fixes the following issues: - hylafax+ failed to start with message '550 Cannot set privileges' (boo#1091476) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-671=1 Package List: - openSUSE Leap 15.0 (x86_64): hylafax+-5.5.9-lp150.5.3.1 hylafax+-client-5.5.9-lp150.5.3.1 hylafax+-client-debuginfo-5.5.9-lp150.5.3.1 hylafax+-debuginfo-5.5.9-lp150.5.3.1 hylafax+-debugsource-5.5.9-lp150.5.3.1 libfaxutil5_5_9-5.5.9-lp150.5.3.1 libfaxutil5_5_9-debuginfo-5.5.9-lp150.5.3.1 References: https://bugzilla.suse.com/1091476

1 0

openSUSE-SU-2018:1807-1: moderate: Security update for go1.9
by opensuse-security＠opensuse.org 23 Jun '18

23 Jun '18

openSUSE Security Update: Security update for go1.9 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:1807-1 Rating: moderate References: #1081495 Cross-References: CVE-2018-7187 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for go1.9 fixes the following issues: Security issues fixed: - CVE-2018-7187: arbitrary command execution via VCS path (boo#1081495) Non-security changes: - Update to version 1.9.7 - fixes to the go command and compiler - minimal support to the go command for the vgo transition Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2018-672=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): go-1.9.7-19.1 go-doc-1.9.7-19.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): go-race-1.9.7-19.1 go1.9-1.9.7-13.2 go1.9-doc-1.9.7-13.2 go1.9-race-1.9.7-13.2 References: https://www.suse.com/security/cve/CVE-2018-7187.html https://bugzilla.suse.com/1081495

1 0

openSUSE-SU-2018:1806-1: important: Security update for phpMyAdmin
by opensuse-security＠opensuse.org 23 Jun '18

23 Jun '18

openSUSE Security Update: Security update for phpMyAdmin ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:1806-1 Rating: important References: #1098751 #1098752 Cross-References: CVE-2018-12581 CVE-2018-12613 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for phpMyAdmin fixes multiple issues. Security issues fixed: * CVE-2018-12613: File inclusion and remote code execution attack (boo#1098751) * CVE-2018-12581: XSS in Designer feature (boo#1098752) This update to version 4.8.2 also contains number of upstream bug fixes and improvements. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-669=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-669=1 Package List: - openSUSE Leap 42.3 (noarch): phpMyAdmin-4.8.2-15.1 - openSUSE Leap 15.0 (noarch): phpMyAdmin-4.8.2-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-12581.html https://www.suse.com/security/cve/CVE-2018-12613.html https://bugzilla.suse.com/1098751 https://bugzilla.suse.com/1098752

1 0

openSUSE-RU-2018:1805-1: important: Recommended update for iotop
by maintenance＠opensuse.org 23 Jun '18

23 Jun '18

openSUSE Recommended Update: Recommended update for iotop ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:1805-1 Rating: important References: #1094694 #1094823 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for iotop fixes the following issues: - crash when /proc/*/status doesn't have tab character or invalid lines (boo#1094823, boo#1094694) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-674=1 Package List: - openSUSE Leap 42.3 (noarch): iotop-0.6-12.3.1 References: https://bugzilla.suse.com/1094694 https://bugzilla.suse.com/1094823

1 0

openSUSE-RU-2018:1804-1: moderate: Recommended update for VirtualGL
by maintenance＠opensuse.org 23 Jun '18

23 Jun '18

openSUSE Recommended Update: Recommended update for VirtualGL ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:1804-1 Rating: moderate References: #1097210 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for VirtualGL fixes the following issues: - VirtualGL would pick up the Nvidia OpenGL library to environment files which changed the preload order (boo#1097210) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-670=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-670=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): VirtualGL-2.5.2-7.3.1 VirtualGL-debuginfo-2.5.2-7.3.1 VirtualGL-debugsource-2.5.2-7.3.1 VirtualGL-devel-2.5.2-7.3.1 - openSUSE Leap 42.3 (x86_64): VirtualGL-32bit-2.5.2-7.3.1 VirtualGL-debuginfo-32bit-2.5.2-7.3.1 - openSUSE Leap 15.0 (i586 x86_64): VirtualGL-2.5.2-lp150.2.3.1 VirtualGL-debuginfo-2.5.2-lp150.2.3.1 VirtualGL-debugsource-2.5.2-lp150.2.3.1 VirtualGL-devel-2.5.2-lp150.2.3.1 - openSUSE Leap 15.0 (x86_64): VirtualGL-32bit-2.5.2-lp150.2.3.1 VirtualGL-32bit-debuginfo-2.5.2-lp150.2.3.1 References: https://bugzilla.suse.com/1097210

1 0

openSUSE-RU-2018:1803-1: Recommended update for reiserfs
by maintenance＠opensuse.org 23 Jun '18

23 Jun '18

openSUSE Recommended Update: Recommended update for reiserfs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:1803-1 Rating: low References: #1094401 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for reiserfs provides the following fix: - Move libreiserfscore.so.0 into the libreiserfscore0 package. (bsc#1094401) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-659=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libreiserfscore-devel-3.6.24-11.3.1 libreiserfscore0-3.6.24-11.3.1 libreiserfscore0-debuginfo-3.6.24-11.3.1 reiserfs-3.6.24-11.3.1 reiserfs-debuginfo-3.6.24-11.3.1 reiserfs-debugsource-3.6.24-11.3.1 References: https://bugzilla.suse.com/1094401

1 0

openSUSE-SU-2018:1802-1: important: Security update for redis
by opensuse-security＠opensuse.org 23 Jun '18

23 Jun '18

openSUSE Security Update: Security update for redis ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:1802-1 Rating: important References: #1097430 #1097768 Cross-References: CVE-2018-11218 CVE-2018-11219 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for redis to 4.0.10 fixes the following issues: These security issues were fixed: - CVE-2018-11218: Prevent heap corruption vulnerability in cmsgpack (bsc#1097430). - CVE-2018-11219: Prevent integer overflow in Lua scripting (bsc#1097768). For Leap 42.3 and openSUSE SLE 12 backports this is a jump from 4.0.6. For additional details please see - https://raw.githubusercontent.com/antirez/redis/4.0.9/00-RELEASENOTES - https://raw.githubusercontent.com/antirez/redis/4.0.8/00-RELEASENOTES - https://raw.githubusercontent.com/antirez/redis/4.0.7/00-RELEASENOTES Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-667=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-667=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): redis-4.0.10-17.1 redis-debuginfo-4.0.10-17.1 redis-debugsource-4.0.10-17.1 - openSUSE Leap 15.0 (x86_64): redis-4.0.10-lp150.3.3.1 redis-debuginfo-4.0.10-lp150.3.3.1 redis-debugsource-4.0.10-lp150.3.3.1 References: https://www.suse.com/security/cve/CVE-2018-11218.html https://www.suse.com/security/cve/CVE-2018-11219.html https://bugzilla.suse.com/1097430 https://bugzilla.suse.com/1097768

1 0

openSUSE-RU-2018:1801-1: Recommended update for yast2-cluster
by maintenance＠opensuse.org 23 Jun '18

23 Jun '18

openSUSE Recommended Update: Recommended update for yast2-cluster ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:1801-1 Rating: low References: #1065393 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-cluster provides the following fixes: - Remove checking of bind address when operating in unicast mode. (bsc#1065393) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-661=1 Package List: - openSUSE Leap 42.3 (noarch): yast2-cluster-3.3.0-2.3.1 References: https://bugzilla.suse.com/1065393

1 0

openSUSE-SU-2018:1800-1: important: Security update for mariadb
by opensuse-security＠opensuse.org 23 Jun '18

23 Jun '18

openSUSE Security Update: Security update for mariadb ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:1800-1 Rating: important References: #1088681 #1090518 Cross-References: CVE-2018-2755 CVE-2018-2761 CVE-2018-2766 CVE-2018-2767 CVE-2018-2771 CVE-2018-2781 CVE-2018-2782 CVE-2018-2784 CVE-2018-2787 CVE-2018-2813 CVE-2018-2817 CVE-2018-2819 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes 12 vulnerabilities is now available. Description: This update for MariaDB to version 10.0.35 fixes multiple issues: Security issues fixed: * CVE-2018-2782: Unspecified DoS vulnerability in InnoDB (bsc#1090518) * CVE-2018-2784: Unspecified DoS vulnerability in InnoDB (bsc#1090518) * CVE-2018-2787: Unspecified vulnerability in InnoDB allowing writes (bsc#1090518) * CVE-2018-2766: Unspecified DoS vulnerability InnoDB (bsc#1090518) * CVE-2018-2755: Unspecified vulnerability in Replication allowing server compromise (bsc#1090518) * CVE-2018-2819: Unspecified DoS vulnerability in InnoDB (bsc#1090518) * CVE-2018-2817: Unspecified DoS vulnerability in DDL (bsc#1090518) * CVE-2018-2761: Unspecified DoS vulnerability in Client programs (bsc#1090518) * CVE-2018-2781: Unspecified DoS vulnerability in Server/Optimizer (bsc#1090518) * CVE-2018-2771: Unspecified DoS vulnerability in the Server/Locking component (bsc#1090518) * CVE-2018-2813: Unspecified vulnerability in The DDL component allowing unauthorized reads (bsc#1090518) * CVE-2018-2767: The embedded server library now supports SSL when connecting to remote servers (bsc#1088681) The following changes are included: * XtraDB updated to 5.6.39-83.1 * TokuDB updated to 5.6.39-83.1 * InnoDB updated to 5.6.40 * Fix for Crash in MVCC read after IMPORT TABLESPACE * Fix for innodb_read_only trying to modify files if transactions were recovered in COMMITTED state * Fix for DROP TABLE hang on InnoDB table with FULLTEXT index * Fix for Crash in INFORMATION_SCHEMA.INNODB_SYS_TABLES whenaccessing corrupted record This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-668=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libmysqlclient-devel-10.0.35-35.1 libmysqlclient18-10.0.35-35.1 libmysqlclient18-debuginfo-10.0.35-35.1 libmysqlclient_r18-10.0.35-35.1 libmysqld-devel-10.0.35-35.1 libmysqld18-10.0.35-35.1 libmysqld18-debuginfo-10.0.35-35.1 mariadb-10.0.35-35.1 mariadb-bench-10.0.35-35.1 mariadb-bench-debuginfo-10.0.35-35.1 mariadb-client-10.0.35-35.1 mariadb-client-debuginfo-10.0.35-35.1 mariadb-debuginfo-10.0.35-35.1 mariadb-debugsource-10.0.35-35.1 mariadb-errormessages-10.0.35-35.1 mariadb-test-10.0.35-35.1 mariadb-test-debuginfo-10.0.35-35.1 mariadb-tools-10.0.35-35.1 mariadb-tools-debuginfo-10.0.35-35.1 - openSUSE Leap 42.3 (x86_64): libmysqlclient18-32bit-10.0.35-35.1 libmysqlclient18-debuginfo-32bit-10.0.35-35.1 libmysqlclient_r18-32bit-10.0.35-35.1 References: https://www.suse.com/security/cve/CVE-2018-2755.html https://www.suse.com/security/cve/CVE-2018-2761.html https://www.suse.com/security/cve/CVE-2018-2766.html https://www.suse.com/security/cve/CVE-2018-2767.html https://www.suse.com/security/cve/CVE-2018-2771.html https://www.suse.com/security/cve/CVE-2018-2781.html https://www.suse.com/security/cve/CVE-2018-2782.html https://www.suse.com/security/cve/CVE-2018-2784.html https://www.suse.com/security/cve/CVE-2018-2787.html https://www.suse.com/security/cve/CVE-2018-2813.html https://www.suse.com/security/cve/CVE-2018-2817.html https://www.suse.com/security/cve/CVE-2018-2819.html https://bugzilla.suse.com/1088681 https://bugzilla.suse.com/1090518

1 0

openSUSE-RU-2018:1799-1: moderate: Recommended update for openslp
by maintenance＠opensuse.org 23 Jun '18

23 Jun '18

openSUSE Recommended Update: Recommended update for openslp ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:1799-1 Rating: moderate References: #1076035 #1080964 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for openslp provides the following fixes: - Fix slpd using the peer address as local address for TCP connections. (bsc#1076035) - Use TCP connections for unicast requests. (bsc#1080964) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-663=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): openslp-2.0.0-18.3.1 openslp-debuginfo-2.0.0-18.3.1 openslp-debugsource-2.0.0-18.3.1 openslp-devel-2.0.0-18.3.1 openslp-server-2.0.0-18.3.1 openslp-server-debuginfo-2.0.0-18.3.1 - openSUSE Leap 42.3 (x86_64): openslp-32bit-2.0.0-18.3.1 openslp-debuginfo-32bit-2.0.0-18.3.1 References: https://bugzilla.suse.com/1076035 https://bugzilla.suse.com/1080964

1 0