October 2019 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2019:2357-1: moderate: Recommended update for pesign-obs-integration
by maintenance＠opensuse.org 21 Oct '19

21 Oct '19

openSUSE Recommended Update: Recommended update for pesign-obs-integration ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2357-1 Rating: moderate References: #1134303 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for pesign-obs-integration provides the following fixes: - Makes pesign also available on ARM. (bsc#1134303) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2357=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): pesign-obs-integration-10.0-lp150.11.1 References: https://bugzilla.suse.com/1134303

1 0

openSUSE-RU-2019:2354-1: moderate: Recommended update for polkit-default-privs
by maintenance＠opensuse.org 21 Oct '19

21 Oct '19

openSUSE Recommended Update: Recommended update for polkit-default-privs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2354-1 Rating: moderate References: #1147070 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for polkit-default-privs fixes the following issues: - backport of whitelistings for polkit-untracked-privilege warnings (bsc#1147070). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2354=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): rpmlint-mini-1.10-lp151.5.6.2 rpmlint-mini-debuginfo-1.10-lp151.5.6.2 rpmlint-mini-debugsource-1.10-lp151.5.6.2 - openSUSE Leap 15.1 (noarch): polkit-default-privs-13.2-lp151.16.6.1 References: https://bugzilla.suse.com/1147070

1 0

openSUSE-RU-2019:2353-1: moderate: Recommended update for libdb-4_8
by maintenance＠opensuse.org 21 Oct '19

21 Oct '19

openSUSE Recommended Update: Recommended update for libdb-4_8 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2353-1 Rating: moderate References: #1148244 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libdb-4_8 fixes the following issues: - Add off-page deadlock patch as found and documented by Red Hat. (bsc#1148244) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2353=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): db48-utils-4.8.30-lp151.7.3.1 db48-utils-debuginfo-4.8.30-lp151.7.3.1 libdb-4_8-4.8.30-lp151.7.3.1 libdb-4_8-debuginfo-4.8.30-lp151.7.3.1 libdb-4_8-debugsource-4.8.30-lp151.7.3.1 libdb-4_8-devel-4.8.30-lp151.7.3.1 - openSUSE Leap 15.1 (x86_64): libdb-4_8-32bit-4.8.30-lp151.7.3.1 libdb-4_8-32bit-debuginfo-4.8.30-lp151.7.3.1 libdb-4_8-devel-32bit-4.8.30-lp151.7.3.1 libdb_java-4_8-4.8.30-lp151.7.3.1 libdb_java-4_8-debuginfo-4.8.30-lp151.7.3.1 libdb_java-4_8-debugsource-4.8.30-lp151.7.3.1 libdb_java-4_8-devel-4.8.30-lp151.7.3.1 - openSUSE Leap 15.1 (noarch): db48-doc-4.8.30-lp151.7.3.1 References: https://bugzilla.suse.com/1148244

1 0

openSUSE-RU-2019:2352-1: moderate: Recommended update for e2fsprogs
by maintenance＠opensuse.org 21 Oct '19

21 Oct '19

openSUSE Recommended Update: Recommended update for e2fsprogs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2352-1 Rating: moderate References: #1145716 #1152101 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for e2fsprogs fixes the following issues: Security issue fixed: - CVE-2019-5094: Fixed an arbitrary code execution via specially crafted ext4 file systems. (bsc#1152101) Non-security issue fixed: - libext2fs: Call fsync(2) to clear stale errors for a new a unix I/O channel. (bsc#1145716) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2352=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): e2fsprogs-1.43.8-lp151.5.6.1 e2fsprogs-debuginfo-1.43.8-lp151.5.6.1 e2fsprogs-debugsource-1.43.8-lp151.5.6.1 e2fsprogs-devel-1.43.8-lp151.5.6.1 libcom_err-devel-1.43.8-lp151.5.6.1 libcom_err-devel-static-1.43.8-lp151.5.6.1 libcom_err2-1.43.8-lp151.5.6.1 libcom_err2-debuginfo-1.43.8-lp151.5.6.1 libext2fs-devel-1.43.8-lp151.5.6.1 libext2fs-devel-static-1.43.8-lp151.5.6.1 libext2fs2-1.43.8-lp151.5.6.1 libext2fs2-debuginfo-1.43.8-lp151.5.6.1 - openSUSE Leap 15.1 (x86_64): e2fsprogs-32bit-debuginfo-1.43.8-lp151.5.6.1 libcom_err-devel-32bit-1.43.8-lp151.5.6.1 libcom_err2-32bit-1.43.8-lp151.5.6.1 libcom_err2-32bit-debuginfo-1.43.8-lp151.5.6.1 libext2fs-devel-32bit-1.43.8-lp151.5.6.1 libext2fs2-32bit-1.43.8-lp151.5.6.1 libext2fs2-32bit-debuginfo-1.43.8-lp151.5.6.1 References: https://www.suse.com/security/cve/CVE-2019-5094.html https://bugzilla.suse.com/1145716 https://bugzilla.suse.com/1152101

1 0

openSUSE-RU-2019:2349-1: moderate: Recommended update for e2fsprogs
by maintenance＠opensuse.org 21 Oct '19

21 Oct '19

openSUSE Recommended Update: Recommended update for e2fsprogs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2349-1 Rating: moderate References: #1145716 #1152101 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for e2fsprogs fixes the following issues: Security issue fixed: - CVE-2019-5094: Fixed an arbitrary code execution via specially crafted ext4 file systems. (bsc#1152101) Non-security issue fixed: - libext2fs: Call fsync(2) to clear stale errors for a new a unix I/O channel. (bsc#1145716) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2349=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): e2fsprogs-1.43.8-lp150.11.1 e2fsprogs-debuginfo-1.43.8-lp150.11.1 e2fsprogs-debugsource-1.43.8-lp150.11.1 e2fsprogs-devel-1.43.8-lp150.11.1 libcom_err-devel-1.43.8-lp150.11.1 libcom_err-devel-static-1.43.8-lp150.11.1 libcom_err2-1.43.8-lp150.11.1 libcom_err2-debuginfo-1.43.8-lp150.11.1 libext2fs-devel-1.43.8-lp150.11.1 libext2fs-devel-static-1.43.8-lp150.11.1 libext2fs2-1.43.8-lp150.11.1 libext2fs2-debuginfo-1.43.8-lp150.11.1 - openSUSE Leap 15.0 (x86_64): e2fsprogs-32bit-debuginfo-1.43.8-lp150.11.1 libcom_err-devel-32bit-1.43.8-lp150.11.1 libcom_err2-32bit-1.43.8-lp150.11.1 libcom_err2-32bit-debuginfo-1.43.8-lp150.11.1 libext2fs-devel-32bit-1.43.8-lp150.11.1 libext2fs2-32bit-1.43.8-lp150.11.1 libext2fs2-32bit-debuginfo-1.43.8-lp150.11.1 References: https://www.suse.com/security/cve/CVE-2019-5094.html https://bugzilla.suse.com/1145716 https://bugzilla.suse.com/1152101

1 0

openSUSE-RU-2019:2350-1: moderate: Recommended update for gnu-compilers-hpc
by maintenance＠opensuse.org 21 Oct '19

21 Oct '19

openSUSE Recommended Update: Recommended update for gnu-compilers-hpc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2350-1 Rating: moderate References: #1116458 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gnu-compilers-hpc fixes the following issues: - Add support for gcc v.8 and v.9 for SLE-15 & SLE-15-SP1. (jsc#SLE-7766) - Add links from the generic compiler binary names cc, cpp, c++ and fc to the compiler specific names in the package private binary directory. - Define _hpc_gnu_module (bsc#1116458). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2350=1 Package List: - openSUSE Leap 15.0 (noarch): gnu-compilers-hpc-1.4-lp150.5.3.1 gnu-compilers-hpc-devel-1.4-lp150.5.3.1 gnu-compilers-hpc-macros-devel-1.4-lp150.5.3.1 gnu8-compilers-hpc-1.4-lp150.5.3.1 gnu8-compilers-hpc-devel-1.4-lp150.5.3.1 gnu8-compilers-hpc-macros-devel-1.4-lp150.5.3.1 References: https://bugzilla.suse.com/1116458

1 0

openSUSE-RU-2019:2351-1: moderate: Recommended update for libdb-4_8
by maintenance＠opensuse.org 21 Oct '19

21 Oct '19

openSUSE Recommended Update: Recommended update for libdb-4_8 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2351-1 Rating: moderate References: #1148244 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libdb-4_8 fixes the following issues: - Add off-page deadlock patch as found and documented by Red Hat. (bsc#1148244) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2351=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): db48-utils-4.8.30-lp150.6.3.1 db48-utils-debuginfo-4.8.30-lp150.6.3.1 libdb-4_8-4.8.30-lp150.6.3.1 libdb-4_8-debuginfo-4.8.30-lp150.6.3.1 libdb-4_8-debugsource-4.8.30-lp150.6.3.1 libdb-4_8-devel-4.8.30-lp150.6.3.1 - openSUSE Leap 15.0 (noarch): db48-doc-4.8.30-lp150.6.3.1 - openSUSE Leap 15.0 (x86_64): libdb-4_8-32bit-4.8.30-lp150.6.3.1 libdb-4_8-32bit-debuginfo-4.8.30-lp150.6.3.1 libdb-4_8-devel-32bit-4.8.30-lp150.6.3.1 libdb_java-4_8-4.8.30-lp150.6.3.1 libdb_java-4_8-debuginfo-4.8.30-lp150.6.3.1 libdb_java-4_8-debugsource-4.8.30-lp150.6.3.1 libdb_java-4_8-devel-4.8.30-lp150.6.3.1 References: https://bugzilla.suse.com/1148244

1 0

openSUSE-SU-2019:2347-1: moderate: Security update for lighttpd
by opensuse-security＠opensuse.org 20 Oct '19

20 Oct '19

openSUSE Security Update: Security update for lighttpd ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2347-1 Rating: moderate References: #1087369 #1111733 #1115016 #1153722 Cross-References: CVE-2018-19052 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 openSUSE Backports SLE-15-SP1 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that solves one vulnerability and has three fixes is now available. Description: This update for lighttpd to version 1.4.54 fixes the following issues: Security issues fixed: - CVE-2018-19052: Fixed a path traversal in mod_alias (boo#1115016). - Changed the default TLS configuration of lighttpd for better security out-of-the-box (boo#1087369). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2347=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2347=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2347=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-2347=1 Package List: - openSUSE Leap 15.1 (x86_64): lighttpd-1.4.54-lp151.3.3.1 lighttpd-debuginfo-1.4.54-lp151.3.3.1 lighttpd-debugsource-1.4.54-lp151.3.3.1 lighttpd-mod_authn_gssapi-1.4.54-lp151.3.3.1 lighttpd-mod_authn_gssapi-debuginfo-1.4.54-lp151.3.3.1 lighttpd-mod_authn_ldap-1.4.54-lp151.3.3.1 lighttpd-mod_authn_ldap-debuginfo-1.4.54-lp151.3.3.1 lighttpd-mod_authn_mysql-1.4.54-lp151.3.3.1 lighttpd-mod_authn_mysql-debuginfo-1.4.54-lp151.3.3.1 lighttpd-mod_authn_pam-1.4.54-lp151.3.3.1 lighttpd-mod_authn_pam-debuginfo-1.4.54-lp151.3.3.1 lighttpd-mod_authn_sasl-1.4.54-lp151.3.3.1 lighttpd-mod_authn_sasl-debuginfo-1.4.54-lp151.3.3.1 lighttpd-mod_cml-1.4.54-lp151.3.3.1 lighttpd-mod_cml-debuginfo-1.4.54-lp151.3.3.1 lighttpd-mod_geoip-1.4.54-lp151.3.3.1 lighttpd-mod_geoip-debuginfo-1.4.54-lp151.3.3.1 lighttpd-mod_magnet-1.4.54-lp151.3.3.1 lighttpd-mod_magnet-debuginfo-1.4.54-lp151.3.3.1 lighttpd-mod_maxminddb-1.4.54-lp151.3.3.1 lighttpd-mod_maxminddb-debuginfo-1.4.54-lp151.3.3.1 lighttpd-mod_mysql_vhost-1.4.54-lp151.3.3.1 lighttpd-mod_mysql_vhost-debuginfo-1.4.54-lp151.3.3.1 lighttpd-mod_rrdtool-1.4.54-lp151.3.3.1 lighttpd-mod_rrdtool-debuginfo-1.4.54-lp151.3.3.1 lighttpd-mod_trigger_b4_dl-1.4.54-lp151.3.3.1 lighttpd-mod_trigger_b4_dl-debuginfo-1.4.54-lp151.3.3.1 lighttpd-mod_vhostdb_dbi-1.4.54-lp151.3.3.1 lighttpd-mod_vhostdb_dbi-debuginfo-1.4.54-lp151.3.3.1 lighttpd-mod_vhostdb_ldap-1.4.54-lp151.3.3.1 lighttpd-mod_vhostdb_ldap-debuginfo-1.4.54-lp151.3.3.1 lighttpd-mod_vhostdb_mysql-1.4.54-lp151.3.3.1 lighttpd-mod_vhostdb_mysql-debuginfo-1.4.54-lp151.3.3.1 lighttpd-mod_vhostdb_pgsql-1.4.54-lp151.3.3.1 lighttpd-mod_vhostdb_pgsql-debuginfo-1.4.54-lp151.3.3.1 lighttpd-mod_webdav-1.4.54-lp151.3.3.1 lighttpd-mod_webdav-debuginfo-1.4.54-lp151.3.3.1 - openSUSE Leap 15.0 (x86_64): lighttpd-1.4.54-lp150.2.3.1 lighttpd-debuginfo-1.4.54-lp150.2.3.1 lighttpd-debugsource-1.4.54-lp150.2.3.1 lighttpd-mod_authn_gssapi-1.4.54-lp150.2.3.1 lighttpd-mod_authn_gssapi-debuginfo-1.4.54-lp150.2.3.1 lighttpd-mod_authn_ldap-1.4.54-lp150.2.3.1 lighttpd-mod_authn_ldap-debuginfo-1.4.54-lp150.2.3.1 lighttpd-mod_authn_mysql-1.4.54-lp150.2.3.1 lighttpd-mod_authn_mysql-debuginfo-1.4.54-lp150.2.3.1 lighttpd-mod_authn_pam-1.4.54-lp150.2.3.1 lighttpd-mod_authn_pam-debuginfo-1.4.54-lp150.2.3.1 lighttpd-mod_authn_sasl-1.4.54-lp150.2.3.1 lighttpd-mod_authn_sasl-debuginfo-1.4.54-lp150.2.3.1 lighttpd-mod_cml-1.4.54-lp150.2.3.1 lighttpd-mod_cml-debuginfo-1.4.54-lp150.2.3.1 lighttpd-mod_geoip-1.4.54-lp150.2.3.1 lighttpd-mod_geoip-debuginfo-1.4.54-lp150.2.3.1 lighttpd-mod_magnet-1.4.54-lp150.2.3.1 lighttpd-mod_magnet-debuginfo-1.4.54-lp150.2.3.1 lighttpd-mod_maxminddb-1.4.54-lp150.2.3.1 lighttpd-mod_maxminddb-debuginfo-1.4.54-lp150.2.3.1 lighttpd-mod_mysql_vhost-1.4.54-lp150.2.3.1 lighttpd-mod_mysql_vhost-debuginfo-1.4.54-lp150.2.3.1 lighttpd-mod_rrdtool-1.4.54-lp150.2.3.1 lighttpd-mod_rrdtool-debuginfo-1.4.54-lp150.2.3.1 lighttpd-mod_trigger_b4_dl-1.4.54-lp150.2.3.1 lighttpd-mod_trigger_b4_dl-debuginfo-1.4.54-lp150.2.3.1 lighttpd-mod_vhostdb_dbi-1.4.54-lp150.2.3.1 lighttpd-mod_vhostdb_dbi-debuginfo-1.4.54-lp150.2.3.1 lighttpd-mod_vhostdb_ldap-1.4.54-lp150.2.3.1 lighttpd-mod_vhostdb_ldap-debuginfo-1.4.54-lp150.2.3.1 lighttpd-mod_vhostdb_mysql-1.4.54-lp150.2.3.1 lighttpd-mod_vhostdb_mysql-debuginfo-1.4.54-lp150.2.3.1 lighttpd-mod_vhostdb_pgsql-1.4.54-lp150.2.3.1 lighttpd-mod_vhostdb_pgsql-debuginfo-1.4.54-lp150.2.3.1 lighttpd-mod_webdav-1.4.54-lp150.2.3.1 lighttpd-mod_webdav-debuginfo-1.4.54-lp150.2.3.1 - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): lighttpd-1.4.54-bp151.4.3.1 lighttpd-mod_authn_gssapi-1.4.54-bp151.4.3.1 lighttpd-mod_authn_ldap-1.4.54-bp151.4.3.1 lighttpd-mod_authn_mysql-1.4.54-bp151.4.3.1 lighttpd-mod_authn_pam-1.4.54-bp151.4.3.1 lighttpd-mod_authn_sasl-1.4.54-bp151.4.3.1 lighttpd-mod_cml-1.4.54-bp151.4.3.1 lighttpd-mod_geoip-1.4.54-bp151.4.3.1 lighttpd-mod_magnet-1.4.54-bp151.4.3.1 lighttpd-mod_maxminddb-1.4.54-bp151.4.3.1 lighttpd-mod_mysql_vhost-1.4.54-bp151.4.3.1 lighttpd-mod_rrdtool-1.4.54-bp151.4.3.1 lighttpd-mod_trigger_b4_dl-1.4.54-bp151.4.3.1 lighttpd-mod_vhostdb_dbi-1.4.54-bp151.4.3.1 lighttpd-mod_vhostdb_ldap-1.4.54-bp151.4.3.1 lighttpd-mod_vhostdb_mysql-1.4.54-bp151.4.3.1 lighttpd-mod_vhostdb_pgsql-1.4.54-bp151.4.3.1 lighttpd-mod_webdav-1.4.54-bp151.4.3.1 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): lighttpd-1.4.54-bp150.3.3.1 lighttpd-debuginfo-1.4.54-bp150.3.3.1 lighttpd-debugsource-1.4.54-bp150.3.3.1 lighttpd-mod_authn_gssapi-1.4.54-bp150.3.3.1 lighttpd-mod_authn_gssapi-debuginfo-1.4.54-bp150.3.3.1 lighttpd-mod_authn_ldap-1.4.54-bp150.3.3.1 lighttpd-mod_authn_ldap-debuginfo-1.4.54-bp150.3.3.1 lighttpd-mod_authn_mysql-1.4.54-bp150.3.3.1 lighttpd-mod_authn_mysql-debuginfo-1.4.54-bp150.3.3.1 lighttpd-mod_authn_pam-1.4.54-bp150.3.3.1 lighttpd-mod_authn_pam-debuginfo-1.4.54-bp150.3.3.1 lighttpd-mod_authn_sasl-1.4.54-bp150.3.3.1 lighttpd-mod_authn_sasl-debuginfo-1.4.54-bp150.3.3.1 lighttpd-mod_cml-1.4.54-bp150.3.3.1 lighttpd-mod_cml-debuginfo-1.4.54-bp150.3.3.1 lighttpd-mod_geoip-1.4.54-bp150.3.3.1 lighttpd-mod_geoip-debuginfo-1.4.54-bp150.3.3.1 lighttpd-mod_magnet-1.4.54-bp150.3.3.1 lighttpd-mod_magnet-debuginfo-1.4.54-bp150.3.3.1 lighttpd-mod_maxminddb-1.4.54-bp150.3.3.1 lighttpd-mod_maxminddb-debuginfo-1.4.54-bp150.3.3.1 lighttpd-mod_mysql_vhost-1.4.54-bp150.3.3.1 lighttpd-mod_mysql_vhost-debuginfo-1.4.54-bp150.3.3.1 lighttpd-mod_rrdtool-1.4.54-bp150.3.3.1 lighttpd-mod_rrdtool-debuginfo-1.4.54-bp150.3.3.1 lighttpd-mod_trigger_b4_dl-1.4.54-bp150.3.3.1 lighttpd-mod_trigger_b4_dl-debuginfo-1.4.54-bp150.3.3.1 lighttpd-mod_vhostdb_dbi-1.4.54-bp150.3.3.1 lighttpd-mod_vhostdb_dbi-debuginfo-1.4.54-bp150.3.3.1 lighttpd-mod_vhostdb_ldap-1.4.54-bp150.3.3.1 lighttpd-mod_vhostdb_ldap-debuginfo-1.4.54-bp150.3.3.1 lighttpd-mod_vhostdb_mysql-1.4.54-bp150.3.3.1 lighttpd-mod_vhostdb_mysql-debuginfo-1.4.54-bp150.3.3.1 lighttpd-mod_vhostdb_pgsql-1.4.54-bp150.3.3.1 lighttpd-mod_vhostdb_pgsql-debuginfo-1.4.54-bp150.3.3.1 lighttpd-mod_webdav-1.4.54-bp150.3.3.1 lighttpd-mod_webdav-debuginfo-1.4.54-bp150.3.3.1 References: https://www.suse.com/security/cve/CVE-2018-19052.html https://bugzilla.suse.com/1087369 https://bugzilla.suse.com/1111733 https://bugzilla.suse.com/1115016 https://bugzilla.suse.com/1153722

1 0

openSUSE-SU-2019:2348-1: important: Security update for tcpdump
by opensuse-security＠opensuse.org 20 Oct '19

20 Oct '19

openSUSE Security Update: Security update for tcpdump ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2348-1 Rating: important References: #1068716 #1153098 #1153332 Cross-References: CVE-2017-16808 CVE-2018-10103 CVE-2018-10105 CVE-2018-14461 CVE-2018-14462 CVE-2018-14463 CVE-2018-14464 CVE-2018-14465 CVE-2018-14466 CVE-2018-14467 CVE-2018-14468 CVE-2018-14469 CVE-2018-14470 CVE-2018-14879 CVE-2018-14880 CVE-2018-14881 CVE-2018-14882 CVE-2018-16227 CVE-2018-16228 CVE-2018-16229 CVE-2018-16230 CVE-2018-16300 CVE-2018-16301 CVE-2018-16451 CVE-2018-16452 CVE-2019-1010220 CVE-2019-15166 CVE-2019-15167 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 28 vulnerabilities is now available. Description: This update for tcpdump fixes the following issues: - CVE-2017-16808: Fixed a heap-based buffer over-read related to aoe_print and lookup_emem (bsc#1068716 bsc#1153098). - CVE-2018-10103: Fixed a mishandling of the printing of SMB data (bsc#1153098). - CVE-2018-10105: Fixed a mishandling of the printing of SMB data (bsc#1153098). - CVE-2018-14461: Fixed a buffer over-read in print-ldp.c:ldp_tlv_print (bsc#1153098). - CVE-2018-14462: Fixed a buffer over-read in print-icmp.c:icmp_print (bsc#1153098). - CVE-2018-14463: Fixed a buffer over-read in print-vrrp.c:vrrp_print (bsc#1153098). - CVE-2018-14464: Fixed a buffer over-read in print-lmp.c:lmp_print_data_link_subobjs (bsc#1153098). - CVE-2018-14465: Fixed a buffer over-read in print-rsvp.c:rsvp_obj_print (bsc#1153098). - CVE-2018-14466: Fixed a buffer over-read in print-rx.c:rx_cache_find (bsc#1153098). - CVE-2018-14467: Fixed a buffer over-read in print-bgp.c:bgp_capabilities_print (bsc#1153098). - CVE-2018-14468: Fixed a buffer over-read in print-fr.c:mfr_print (bsc#1153098). - CVE-2018-14469: Fixed a buffer over-read in print-isakmp.c:ikev1_n_print (bsc#1153098). - CVE-2018-14470: Fixed a buffer over-read in print-babel.c:babel_print_v2 (bsc#1153098). - CVE-2018-14879: Fixed a buffer overflow in the command-line argument parser (bsc#1153098). - CVE-2018-14880: Fixed a buffer over-read in the OSPFv3 parser (bsc#1153098). - CVE-2018-14881: Fixed a buffer over-read in the BGP parser (bsc#1153098). - CVE-2018-14882: Fixed a buffer over-read in the ICMPv6 parser (bsc#1153098). - CVE-2018-16227: Fixed a buffer over-read in the IEEE 802.11 parser in print-802_11.c for the Mesh Flags subfield (bsc#1153098). - CVE-2018-16228: Fixed a buffer over-read in the HNCP parser (bsc#1153098). - CVE-2018-16229: Fixed a buffer over-read in the DCCP parser (bsc#1153098). - CVE-2018-16230: Fixed a buffer over-read in the BGP parser in print-bgp.c:bgp_attr_print (bsc#1153098). - CVE-2018-16300: Fixed an unlimited recursion in the BGP parser that allowed denial-of-service by stack consumption (bsc#1153098). - CVE-2018-16301: Fixed a buffer overflow (bsc#1153332 bsc#1153098). - CVE-2018-16451: Fixed several buffer over-reads in print-smb.c:print_trans() for \MAILSLOT\BROWSE and \PIPE\LANMAN (bsc#1153098). - CVE-2018-16452: Fixed a stack exhaustion in smbutil.c:smb_fdata (bsc#1153098). - CVE-2019-15166: Fixed a bounds check in lmp_print_data_link_subobjs (bsc#1153098). - CVE-2019-15167: Fixed a vulnerability in VRRP (bsc#1153098). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2348=1 Package List: - openSUSE Leap 15.1 (x86_64): tcpdump-4.9.2-lp151.4.6.1 tcpdump-debuginfo-4.9.2-lp151.4.6.1 tcpdump-debugsource-4.9.2-lp151.4.6.1 References: https://www.suse.com/security/cve/CVE-2017-16808.html https://www.suse.com/security/cve/CVE-2018-10103.html https://www.suse.com/security/cve/CVE-2018-10105.html https://www.suse.com/security/cve/CVE-2018-14461.html https://www.suse.com/security/cve/CVE-2018-14462.html https://www.suse.com/security/cve/CVE-2018-14463.html https://www.suse.com/security/cve/CVE-2018-14464.html https://www.suse.com/security/cve/CVE-2018-14465.html https://www.suse.com/security/cve/CVE-2018-14466.html https://www.suse.com/security/cve/CVE-2018-14467.html https://www.suse.com/security/cve/CVE-2018-14468.html https://www.suse.com/security/cve/CVE-2018-14469.html https://www.suse.com/security/cve/CVE-2018-14470.html https://www.suse.com/security/cve/CVE-2018-14879.html https://www.suse.com/security/cve/CVE-2018-14880.html https://www.suse.com/security/cve/CVE-2018-14881.html https://www.suse.com/security/cve/CVE-2018-14882.html https://www.suse.com/security/cve/CVE-2018-16227.html https://www.suse.com/security/cve/CVE-2018-16228.html https://www.suse.com/security/cve/CVE-2018-16229.html https://www.suse.com/security/cve/CVE-2018-16230.html https://www.suse.com/security/cve/CVE-2018-16300.html https://www.suse.com/security/cve/CVE-2018-16301.html https://www.suse.com/security/cve/CVE-2018-16451.html https://www.suse.com/security/cve/CVE-2018-16452.html https://www.suse.com/security/cve/CVE-2019-1010220.html https://www.suse.com/security/cve/CVE-2019-15166.html https://www.suse.com/security/cve/CVE-2019-15167.html https://bugzilla.suse.com/1068716 https://bugzilla.suse.com/1153098 https://bugzilla.suse.com/1153332

1 0

openSUSE-RU-2019:2346-1: moderate: Recommended update for python-cluster-preflight-check
by maintenance＠opensuse.org 20 Oct '19

20 Oct '19

openSUSE Recommended Update: Recommended update for python-cluster-preflight-check ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2346-1 Rating: moderate References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for python-cluster-preflight-check fixes the following issues: python-cluster-preflight-check was updated to 0.0.33: - Use setup.py to create ha-cluster-preflight-check automatically (#10) - Use underscores in source tarball as provided by GitHub - Language fixes to the description. Version 0.0.29 (jsc#4024): - Rename cluster-test-tool to cluster-preflight-check - Improve scenarios for blocking corosync ports to simulate split brain - Improve for: * fix regrex mismatch/None results * reinforce testcase enter condition * more docstring and comments Version 0.0.28: - Improve logging - Add unittest codes - Add docs for functions - Using shell to wrap python2&3 entry - Make split brain by blocking corosync ports - Check firewall Version 0.0.23: - Add log to record internal operations - Add json output for each test case - Add report for killing test case Version 0.0.20: - Python3 only - Check environment: hostname resolvable - Check environment: time service - Check environment: watchdog - Check cluster: cluster service - Check cluster: stonith configuration - Check cluster: nodes status - Check cluster: resources status - Kill sbd daemon - Kill corosync daemon - Kill pacemakerd daemon - Kill process in loop - Fence specific node Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2019-2346=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): python-cluster-preflight-check-0.0.33-2.1 python3-cluster-preflight-check-0.0.33-2.1 References:

1 0