February 2019 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2019:0129-1: important: Security update for python-paramiko
by opensuse-security＠opensuse.org 04 Feb '19

04 Feb '19

openSUSE Security Update: Security update for python-paramiko ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0129-1 Rating: important References: #1111151 #1115769 #1121846 Cross-References: CVE-2018-1000805 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update for python-paramiko to version 2.4.2 fixes the following issues: Security issue fixed: - CVE-2018-1000805: Fixed an authentication bypass in auth_handler.py (bsc#1111151) Non-security issue fixed: - Disable experimental gssapi support (bsc#1115769) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-129=1 Package List: - openSUSE Leap 15.0 (noarch): python-paramiko-doc-2.4.2-lp150.2.3.1 python2-paramiko-2.4.2-lp150.2.3.1 python3-paramiko-2.4.2-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-1000805.html https://bugzilla.suse.com/1111151 https://bugzilla.suse.com/1115769 https://bugzilla.suse.com/1121846

1 0

openSUSE-SU-2019:0128-1: moderate: Security update for avahi
by opensuse-security＠opensuse.org 04 Feb '19

04 Feb '19

openSUSE Security Update: Security update for avahi ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0128-1 Rating: moderate References: #1120281 Cross-References: CVE-2018-1000845 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for avahi fixes the following issues: Security issue fixed: - CVE-2018-1000845: Fixed DNS amplification and reflection to spoofed addresses (DOS) (bsc#1120281) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-128=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): avahi-0.6.32-4.3.1 avahi-autoipd-0.6.32-4.3.1 avahi-autoipd-debuginfo-0.6.32-4.3.1 avahi-compat-howl-devel-0.6.32-4.3.1 avahi-compat-mDNSResponder-devel-0.6.32-4.3.1 avahi-debuginfo-0.6.32-4.3.1 avahi-debugsource-0.6.32-4.3.1 avahi-glib2-debugsource-0.6.32-4.3.1 avahi-qt4-debugsource-0.6.32-4.3.1 avahi-utils-0.6.32-4.3.1 avahi-utils-debuginfo-0.6.32-4.3.1 avahi-utils-gtk-0.6.32-4.3.1 avahi-utils-gtk-debuginfo-0.6.32-4.3.1 libavahi-client3-0.6.32-4.3.1 libavahi-client3-debuginfo-0.6.32-4.3.1 libavahi-common3-0.6.32-4.3.1 libavahi-common3-debuginfo-0.6.32-4.3.1 libavahi-core7-0.6.32-4.3.1 libavahi-core7-debuginfo-0.6.32-4.3.1 libavahi-devel-0.6.32-4.3.1 libavahi-glib-devel-0.6.32-4.3.1 libavahi-glib1-0.6.32-4.3.1 libavahi-glib1-debuginfo-0.6.32-4.3.1 libavahi-gobject-devel-0.6.32-4.3.1 libavahi-gobject0-0.6.32-4.3.1 libavahi-gobject0-debuginfo-0.6.32-4.3.1 libavahi-qt4-1-0.6.32-4.3.1 libavahi-qt4-1-debuginfo-0.6.32-4.3.1 libavahi-qt4-devel-0.6.32-4.3.1 libavahi-ui-gtk3-0-0.6.32-4.3.1 libavahi-ui-gtk3-0-debuginfo-0.6.32-4.3.1 libavahi-ui0-0.6.32-4.3.1 libavahi-ui0-debuginfo-0.6.32-4.3.1 libdns_sd-0.6.32-4.3.1 libdns_sd-debuginfo-0.6.32-4.3.1 libhowl0-0.6.32-4.3.1 libhowl0-debuginfo-0.6.32-4.3.1 python-avahi-0.6.32-4.3.1 python-avahi-gtk-0.6.32-4.3.1 typelib-1_0-Avahi-0_6-0.6.32-4.3.1 - openSUSE Leap 42.3 (noarch): avahi-lang-0.6.32-4.3.1 - openSUSE Leap 42.3 (x86_64): avahi-debuginfo-32bit-0.6.32-4.3.1 avahi-mono-0.6.32-4.3.1 libavahi-client3-32bit-0.6.32-4.3.1 libavahi-client3-debuginfo-32bit-0.6.32-4.3.1 libavahi-common3-32bit-0.6.32-4.3.1 libavahi-common3-debuginfo-32bit-0.6.32-4.3.1 libavahi-glib1-32bit-0.6.32-4.3.1 libavahi-glib1-debuginfo-32bit-0.6.32-4.3.1 libdns_sd-32bit-0.6.32-4.3.1 libdns_sd-debuginfo-32bit-0.6.32-4.3.1 References: https://www.suse.com/security/cve/CVE-2018-1000845.html https://bugzilla.suse.com/1120281

1 0

openSUSE-RU-2019:0127-1: Recommended update for python-py, python-pytest, python-Sphinx, python-sphinxcontrib, python-sphinxcontrib-websupport
by maintenance＠opensuse.org 04 Feb '19

04 Feb '19

openSUSE Recommended Update: Recommended update for python-py, python-pytest, python-Sphinx, python-sphinxcontrib, python-sphinxcontrib-websupport ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0127-1 Rating: low References: #1054413 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update provides an update of several python modules to newer vcersions to meet requirements for releasing an updated python-urllib3. - python-py: to 1.5.2 , including python 3 enablement - python-pytest: to version 3.3.2, including python 3 enablement - python-Sphinx: to 1.6.5, including python 3 enablement - python-sphinxcontrib, python-sphinxcontrib-websupport: shipped to support Sphinx Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-127=1 Package List: - openSUSE Leap 42.3 (noarch): python-Sphinx-1.6.5-3.3.1 python-py-1.5.2-9.3.1 python-py-doc-1.5.2-9.3.2 python-pytest-3.3.2-6.4.1 python-sphinxcontrib-1.0.1-2.1 python-sphinxcontrib-websupport-1.0.1-2.1 python3-Sphinx-1.6.5-3.3.1 python3-py-1.5.2-9.3.1 python3-pytest-3.3.2-6.4.1 python3-sphinxcontrib-1.0.1-2.1 python3-sphinxcontrib-websupport-1.0.1-2.1 References: https://bugzilla.suse.com/1054413

1 0

openSUSE-RU-2019:0125-1: important: Recommended update for openssh
by maintenance＠opensuse.org 01 Feb '19

01 Feb '19

openSUSE Recommended Update: Recommended update for openssh ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0125-1 Rating: important References: #1123028 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for openssh fixes the following issues: - A previously applied security patch unintendedly changed the behavior of OpenSSH's "scp" utility such that server-side brace expansion would no longer be supported. Attempts to copy a set files from a remote machine to the local one by running "scp 'remote:{file-a,file-b}' /tmp" would fail. This change in behavior broke Corosync and, potentially, many user scripts that relied on brace expansion. [bsc#1123028] This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-125=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): openssh-7.6p1-lp150.8.12.1 openssh-cavs-7.6p1-lp150.8.12.1 openssh-cavs-debuginfo-7.6p1-lp150.8.12.1 openssh-debuginfo-7.6p1-lp150.8.12.1 openssh-debugsource-7.6p1-lp150.8.12.1 openssh-fips-7.6p1-lp150.8.12.1 openssh-helpers-7.6p1-lp150.8.12.1 openssh-helpers-debuginfo-7.6p1-lp150.8.12.1 - openSUSE Leap 15.0 (x86_64): openssh-askpass-gnome-7.6p1-lp150.8.12.1 openssh-askpass-gnome-debuginfo-7.6p1-lp150.8.12.1 References: https://bugzilla.suse.com/1123028

1 0

openSUSE-RU-2019:0126-1: moderate: Recommended update for pin
by maintenance＠opensuse.org 01 Feb '19

01 Feb '19

openSUSE Recommended Update: Recommended update for pin ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0126-1 Rating: moderate References: #1095723 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for pin fixes the following issues: - read the correct column of /etc/os-release to really fix boo#1095723 - display the correct expected filename if ARCHIVES_*.gz doesn't exist This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-126=1 Package List: - openSUSE Backports SLE-15 (noarch): pin-0.38-bp150.3.3.1 References: https://bugzilla.suse.com/1095723

1 0

openSUSE-RU-2019:0114-1: moderate: Recommended update for pin
by maintenance＠opensuse.org 01 Feb '19

01 Feb '19

openSUSE Recommended Update: Recommended update for pin ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0114-1 Rating: moderate References: #1095723 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for pin fixes the following issues: - read the correct column of /etc/os-release to really fix boo#1095723 - display the correct expected filename if ARCHIVES_*.gz doesn't exist Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-114=1 Package List: - openSUSE Leap 15.0 (noarch): pin-0.38-lp150.2.6.1 References: https://bugzilla.suse.com/1095723

1 0

openSUSE-RU-2019:0121-1: moderate: Recommended update for wicked
by maintenance＠opensuse.org 01 Feb '19

01 Feb '19

openSUSE Recommended Update: Recommended update for wicked ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0121-1 Rating: moderate References: #1022872 #1026807 #1027099 #1036675 #1057007 #1061051 #1069468 #1072343 #1078245 #1083670 #1084462 #1084527 #1085020 #1085786 #1095818 #1102871 #1107579 #1109147 #954758 #972463 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has 20 recommended fixes can now be installed. Description: wicked was updated to version 0.6.52. Following issues have been addressed: - wickedd: fix netdev detection bootstrap race (bsc#1107579) - compat: fix ifcfg parsing crash if network/config is missed - wireless: fix eap peap auth mapping for wpa-supplicant (bsc#1026807) - vxlan: fix to convert dst_port to network byte order - firewall: do not assign default zone, but pass as is (bsc#1109147) - nanny: fix memory leaks on fast create-delete calls (bsc#1095818) + fsm: cleanup worker reset (reinit) vs. free + fsm: do not process or pass pending workers to nanny + nanny: catch init failures in device registration + netdev: allow NULL in get and put functions + model: fix to call (netif) dbus object destructors + model: removed server specific call in netif destroy + fsm: handle NULL in worker get and release calls + fsm: process device delete event separately + calls: split get netif service and netif list utils + xml-schema: fix range constraint values parsing + xml-schema: remove underscores from ni_xs_type_new + xml-schema: fix type leak around ni_xs_build_one_type + fsm: free worker control mode on worker free + xpath: trace and free complete xpath expression tree + nanny: fix config leak in ni_nanny_recheck_policy + dbus: free pending call in ni_dbus_connection_call + dbus: free dbus_message_iter_get_signature result - dhcp6: fix to properly decline dynamic addresses - extensions: do not use /etc/HOSTNAME artifact (bsc#972463) - ethtool: call offload ioctl if requested by offload name, e.g. tso has been splitted into several features and the old STSO offload ioctl sets multiple features at once. - ethtool: add missing pause support (bsc#1102871) - dhcp6: refresh info using rfc4242 info-refresh-time - dhcp6: add ia and ia addr list search utilities, improve status utils and use timeval struct in ia acquired times - dhcp6: restart on NotOnLink status request reply - ifcfg: show unknown/invalid bootproto as error - dhcp6: Fix server preference and weight option behaviour - dhcp6: retrigger duplicate detection on all address updates - man: add ifcfg-lo.5 manual page - man: add missing documentation for DHCLIENT6_CLIENT_ID - man: improved create-cid docs in wicked-config(5) (bsc#1084527) - address cache-info and lease acquisition time fixes and cleanups - ethtool: streamline options available on all devices (bsc#1085786) - dhcp4: expose broadcast response as DHCLIENT_BROADCAST in ifcfg - ipoib: do not fail setup on mode or umcast set failure (bsc#1084462) - bond: avoid reenslave failure in fail_over_mac mode (bsc#1083670) - Fix show-xml filtering by interface name (issue #735,bsc#954758) - ifconfig: refresh state before link reenslave hotfix (bsc#1061051 - ethtool: query priv-flags bitmap first (bsc#1085020) - util: fix a memory leak in ni_var_array_free - client: refactor arp utility to add missed arp ping (bsc#1078245) - dbus: omit zero-length hwaddr data properties - ibft: no IP setup on bnx2x storage-only interfaces (bsc#1072343) - fixed format, self compare and always true issues - client: fixed broken wicked arp utility command (bsc#1078245) - cleanup: add mising/explicit designated field initializers - pkgconfig: fix to request libnl3 instead of libnl1 - dbus: add missing DBUS_ERROR_FAILED type to a dbus_set_error call and enforce formatting input as string when an extension did not returned any error message. - wickedd: clear master references on slaves when a master gets deleted and the deletion event arrives before unenslave event to avoid a bridge reenslave failure on restart (bsc#1061051). - dhcp6: reapply confirmed addresses, also on any confirm status other to not-on-link - dhcp: clear hostname on lease recovery/reboot (bsc#1057007) - firewall: add firewalld and zone support (fate#320794) - ifconfig: cleanup slaves before enslaving (bsc#1036675) - ethtool: add rxvlan, txvlan, ntuple and rxhash offloads - dhcp6: fix to send up to 5 release retransmissions - dhcp4: fix to use rfc4361 client-id on infiniband (bsc#1022872) - man: ifcfg.5: Fix directory name for compatibility scripts - dhcp: cleanup common option update flags (bsc#1027099) - vxlan: convert ifcfg VXLAN_REMOTE_IP to remote-ip This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-121=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libwicked-0-6-0.6.52-12.1 libwicked-0-6-debuginfo-0.6.52-12.1 wicked-0.6.52-12.1 wicked-debuginfo-0.6.52-12.1 wicked-debugsource-0.6.52-12.1 wicked-service-0.6.52-12.1 References: https://bugzilla.suse.com/1022872 https://bugzilla.suse.com/1026807 https://bugzilla.suse.com/1027099 https://bugzilla.suse.com/1036675 https://bugzilla.suse.com/1057007 https://bugzilla.suse.com/1061051 https://bugzilla.suse.com/1069468 https://bugzilla.suse.com/1072343 https://bugzilla.suse.com/1078245 https://bugzilla.suse.com/1083670 https://bugzilla.suse.com/1084462 https://bugzilla.suse.com/1084527 https://bugzilla.suse.com/1085020 https://bugzilla.suse.com/1085786 https://bugzilla.suse.com/1095818 https://bugzilla.suse.com/1102871 https://bugzilla.suse.com/1107579 https://bugzilla.suse.com/1109147 https://bugzilla.suse.com/954758 https://bugzilla.suse.com/972463

1 0

openSUSE-RU-2019:0117-1: Recommended update for tpm-tools
by maintenance＠opensuse.org 01 Feb '19

01 Feb '19

openSUSE Recommended Update: Recommended update for tpm-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0117-1 Rating: low References: #1114793 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for tpm-tools provides the following fix: - Fix undefined and binary data being output in the tpm_version command. (bsc#1114793) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-117=1 Package List: - openSUSE Leap 42.3 (x86_64): libtpm_unseal1-1.3.9.1-2.3.1 libtpm_unseal1-debuginfo-1.3.9.1-2.3.1 tpm-tools-1.3.9.1-2.3.1 tpm-tools-debuginfo-1.3.9.1-2.3.1 tpm-tools-debugsource-1.3.9.1-2.3.1 tpm-tools-devel-1.3.9.1-2.3.1 tpm-tools-pkcs11-1.3.9.1-2.3.1 tpm-tools-pkcs11-debuginfo-1.3.9.1-2.3.1 References: https://bugzilla.suse.com/1114793

1 0

openSUSE-RU-2019:0118-1: moderate: Recommended update for hwinfo
by maintenance＠opensuse.org 01 Feb '19

01 Feb '19

openSUSE Recommended Update: Recommended update for hwinfo ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0118-1 Rating: moderate References: #1117982 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for hwinfo provides the following fix: - Adjust system type detection. (bsc#1117982) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-118=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): hwinfo-21.63-15.1 hwinfo-debuginfo-21.63-15.1 hwinfo-debugsource-21.63-15.1 hwinfo-devel-21.63-15.1 hwinfo-devel-debuginfo-21.63-15.1 References: https://bugzilla.suse.com/1117982

1 0

openSUSE-RU-2019:0123-1: moderate: Recommended update for rsyslog
by maintenance＠opensuse.org 01 Feb '19

01 Feb '19

openSUSE Recommended Update: Recommended update for rsyslog ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0123-1 Rating: moderate References: #1101642 #1119429 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for rsyslog fixes the following issues: - remove references to obsolete SYSLOG_REQUIRES_NETWORK variable in remote.conf (bsc#1101642) - ship the missed out "rsyslog-module-gtls" sub-package (bsc#1119429) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-123=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): rsyslog-8.33.1-lp150.2.6.1 rsyslog-debuginfo-8.33.1-lp150.2.6.1 rsyslog-debugsource-8.33.1-lp150.2.6.1 rsyslog-diag-tools-8.33.1-lp150.2.6.1 rsyslog-diag-tools-debuginfo-8.33.1-lp150.2.6.1 rsyslog-doc-8.33.1-lp150.2.6.1 rsyslog-module-dbi-8.33.1-lp150.2.6.1 rsyslog-module-dbi-debuginfo-8.33.1-lp150.2.6.1 rsyslog-module-elasticsearch-8.33.1-lp150.2.6.1 rsyslog-module-elasticsearch-debuginfo-8.33.1-lp150.2.6.1 rsyslog-module-gcrypt-8.33.1-lp150.2.6.1 rsyslog-module-gcrypt-debuginfo-8.33.1-lp150.2.6.1 rsyslog-module-gssapi-8.33.1-lp150.2.6.1 rsyslog-module-gssapi-debuginfo-8.33.1-lp150.2.6.1 rsyslog-module-gtls-8.33.1-lp150.2.6.1 rsyslog-module-gtls-debuginfo-8.33.1-lp150.2.6.1 rsyslog-module-mmnormalize-8.33.1-lp150.2.6.1 rsyslog-module-mmnormalize-debuginfo-8.33.1-lp150.2.6.1 rsyslog-module-mysql-8.33.1-lp150.2.6.1 rsyslog-module-mysql-debuginfo-8.33.1-lp150.2.6.1 rsyslog-module-omamqp1-8.33.1-lp150.2.6.1 rsyslog-module-omamqp1-debuginfo-8.33.1-lp150.2.6.1 rsyslog-module-omhttpfs-8.33.1-lp150.2.6.1 rsyslog-module-omhttpfs-debuginfo-8.33.1-lp150.2.6.1 rsyslog-module-omtcl-8.33.1-lp150.2.6.1 rsyslog-module-omtcl-debuginfo-8.33.1-lp150.2.6.1 rsyslog-module-pgsql-8.33.1-lp150.2.6.1 rsyslog-module-pgsql-debuginfo-8.33.1-lp150.2.6.1 rsyslog-module-relp-8.33.1-lp150.2.6.1 rsyslog-module-relp-debuginfo-8.33.1-lp150.2.6.1 rsyslog-module-snmp-8.33.1-lp150.2.6.1 rsyslog-module-snmp-debuginfo-8.33.1-lp150.2.6.1 rsyslog-module-udpspoof-8.33.1-lp150.2.6.1 rsyslog-module-udpspoof-debuginfo-8.33.1-lp150.2.6.1 References: https://bugzilla.suse.com/1101642 https://bugzilla.suse.com/1119429

1 0