October 2019 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2019:2403-1: moderate: Recommended update for transactional-update
by maintenance＠opensuse.org 29 Oct '19

29 Oct '19

openSUSE Recommended Update: Recommended update for transactional-update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2403-1 Rating: moderate References: #1132438 #1137890 #1138725 #1139015 #1140057 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: This update for transactional-update contains the following fixes: - Update from version 2.14.2 to 2.15: - Move description of interactiveness. (bsc#1132438) - Enable network during update. (bsc#1137890) - Add compatibility with new overlayfs versions. (bsc#1140057) - Allow updates of the bootloader on EFI systems. (bsc#1139015) - Add support for /boot/writable. (bsc#1138725) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2403=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): transactional-update-2.15-lp151.2.3.1 transactional-update-debuginfo-2.15-lp151.2.3.1 transactional-update-debugsource-2.15-lp151.2.3.1 - openSUSE Leap 15.1 (noarch): transactional-update-zypp-config-2.15-lp151.2.3.1 References: https://bugzilla.suse.com/1132438 https://bugzilla.suse.com/1137890 https://bugzilla.suse.com/1138725 https://bugzilla.suse.com/1139015 https://bugzilla.suse.com/1140057

1 0

openSUSE-RU-2019:2404-1: Recommended update for tuned
by maintenance＠opensuse.org 29 Oct '19

29 Oct '19

openSUSE Recommended Update: Recommended update for tuned ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2404-1 Rating: low References: #1153341 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for tuned fixes the following issues: - Removed an unused config file: /etc/tuned/sap-hana-vmware-variables.conf (bsc#1153341) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2404=1 Package List: - openSUSE Leap 15.1 (noarch): tuned-2.10.0-lp151.5.3.1 tuned-gtk-2.10.0-lp151.5.3.1 tuned-profiles-atomic-2.10.0-lp151.5.3.1 tuned-profiles-nfv-2.10.0-lp151.5.3.1 tuned-profiles-oracle-2.10.0-lp151.5.3.1 tuned-profiles-realtime-2.10.0-lp151.5.3.1 tuned-utils-2.10.0-lp151.5.3.1 tuned-utils-systemtap-2.10.0-lp151.5.3.1 References: https://bugzilla.suse.com/1153341

1 0

openSUSE-RU-2019:2402-1: moderate: Recommended update for timezone
by maintenance＠opensuse.org 29 Oct '19

29 Oct '19

openSUSE Recommended Update: Recommended update for timezone ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2402-1 Rating: moderate References: #1150451 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for timezone fixes the following issues: - Fiji observes DST from 2019-11-10 to 2020-01-12. - Norfolk Island starts observing Australian-style DST. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2402=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): timezone-2019c-lp150.67.1 timezone-debuginfo-2019c-lp150.67.1 timezone-debugsource-2019c-lp150.67.1 References: https://bugzilla.suse.com/1150451

1 0

openSUSE-RU-2019:2405-1: important: Recommended update for tcsh
by maintenance＠opensuse.org 29 Oct '19

29 Oct '19

openSUSE Recommended Update: Recommended update for tcsh ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2405-1 Rating: important References: #1153839 #1154877 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for tcsh fixes the following issues: - Avoid breakage in sourcing standard system files (bsc#1153839) - A regression has been fixed where glob expansion would not work properly. (bsc#1154877) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2405=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): tcsh-6.20.00-lp151.3.9.1 tcsh-debuginfo-6.20.00-lp151.3.9.1 tcsh-debugsource-6.20.00-lp151.3.9.1 - openSUSE Leap 15.1 (noarch): tcsh-lang-6.20.00-lp151.3.9.1 References: https://bugzilla.suse.com/1153839 https://bugzilla.suse.com/1154877

1 0

openSUSE-RU-2019:2401-1: moderate: Recommended update for mysql-connector-cpp
by maintenance＠opensuse.org 29 Oct '19

29 Oct '19

openSUSE Recommended Update: Recommended update for mysql-connector-cpp ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2401-1 Rating: moderate References: #1149792 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for mysql-connector-cpp fixes the following issues: - Add missing zlib build dependency, which used to be pulled in by libopenssl-devel. (bsc#1149792) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2401=1 Package List: - openSUSE Leap 15.0 (x86_64): libmysqlcppconn-devel-1.1.9-lp150.3.3.1 libmysqlcppconn7-1.1.9-lp150.3.3.1 libmysqlcppconn7-debuginfo-1.1.9-lp150.3.3.1 mysql-connector-cpp-debugsource-1.1.9-lp150.3.3.1 References: https://bugzilla.suse.com/1149792

1 0

openSUSE-RU-2019:2400-1: important: Recommended update for tcsh
by maintenance＠opensuse.org 29 Oct '19

29 Oct '19

openSUSE Recommended Update: Recommended update for tcsh ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2400-1 Rating: important References: #1153839 #1154877 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for tcsh fixes the following issues: - Avoid breakage in sourcing standard system files (bsc#1153839) - A regression has been fixed where glob expansion would not work properly. (bsc#1154877) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2400=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): tcsh-6.20.00-lp150.2.9.1 tcsh-debuginfo-6.20.00-lp150.2.9.1 tcsh-debugsource-6.20.00-lp150.2.9.1 - openSUSE Leap 15.0 (noarch): tcsh-lang-6.20.00-lp150.2.9.1 References: https://bugzilla.suse.com/1153839 https://bugzilla.suse.com/1154877

1 0

openSUSE-SU-2019:2399-1: moderate: Security update for lz4
by opensuse-security＠opensuse.org 28 Oct '19

28 Oct '19

openSUSE Security Update: Security update for lz4 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2399-1 Rating: moderate References: #1153936 Cross-References: CVE-2019-17543 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for lz4 fixes the following issues: - CVE-2019-17543: Fixed a heap-based buffer overflow in LZ4_write32 (bsc#1153936). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2399=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): liblz4-1-1.8.0-lp151.3.3.1 liblz4-1-debuginfo-1.8.0-lp151.3.3.1 liblz4-devel-1.8.0-lp151.3.3.1 lz4-1.8.0-lp151.3.3.1 lz4-debuginfo-1.8.0-lp151.3.3.1 lz4-debugsource-1.8.0-lp151.3.3.1 - openSUSE Leap 15.1 (x86_64): liblz4-1-32bit-1.8.0-lp151.3.3.1 liblz4-1-32bit-debuginfo-1.8.0-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2019-17543.html https://bugzilla.suse.com/1153936

1 0

openSUSE-SU-2019:2398-1: moderate: Security update for lz4
by opensuse-security＠opensuse.org 28 Oct '19

28 Oct '19

openSUSE Security Update: Security update for lz4 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2398-1 Rating: moderate References: #1153936 Cross-References: CVE-2019-17543 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for lz4 fixes the following issues: - CVE-2019-17543: Fixed a heap-based buffer overflow in LZ4_write32 (bsc#1153936). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2398=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): liblz4-1-1.8.0-lp150.2.3.1 liblz4-1-debuginfo-1.8.0-lp150.2.3.1 liblz4-devel-1.8.0-lp150.2.3.1 lz4-1.8.0-lp150.2.3.1 lz4-debuginfo-1.8.0-lp150.2.3.1 lz4-debugsource-1.8.0-lp150.2.3.1 - openSUSE Leap 15.0 (x86_64): liblz4-1-32bit-1.8.0-lp150.2.3.1 liblz4-1-32bit-debuginfo-1.8.0-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2019-17543.html https://bugzilla.suse.com/1153936

1 0

openSUSE-SU-2019:2397-1: moderate: Security update for sysstat
by opensuse-security＠opensuse.org 28 Oct '19

28 Oct '19

openSUSE Security Update: Security update for sysstat ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2397-1 Rating: moderate References: #1150114 Cross-References: CVE-2019-16167 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for sysstat fixes the following issue: - CVE-2019-16167: Fixed a memory corruption due to an integer overflow. (bsc#1150114) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2397=1 Package List: - openSUSE Leap 15.0 (x86_64): sysstat-12.0.2-lp150.16.1 sysstat-debuginfo-12.0.2-lp150.16.1 sysstat-debugsource-12.0.2-lp150.16.1 sysstat-isag-12.0.2-lp150.16.1 References: https://www.suse.com/security/cve/CVE-2019-16167.html https://bugzilla.suse.com/1150114

1 0

openSUSE-SU-2019:2395-1: moderate: Security update for sysstat
by opensuse-security＠opensuse.org 28 Oct '19

28 Oct '19

openSUSE Security Update: Security update for sysstat ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2395-1 Rating: moderate References: #1150114 Cross-References: CVE-2019-16167 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for sysstat fixes the following issue: - CVE-2019-16167: Fixed a memory corruption due to an integer overflow. (bsc#1150114) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2395=1 Package List: - openSUSE Leap 15.1 (x86_64): sysstat-12.0.2-lp151.3.9.1 sysstat-debuginfo-12.0.2-lp151.3.9.1 sysstat-debugsource-12.0.2-lp151.3.9.1 sysstat-isag-12.0.2-lp151.3.9.1 References: https://www.suse.com/security/cve/CVE-2019-16167.html https://bugzilla.suse.com/1150114

1 0