February 2019 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2019:0268-1: important: Security update for systemd
by opensuse-security＠opensuse.org 28 Feb '19

28 Feb '19

openSUSE Security Update: Security update for systemd ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0268-1 Rating: important References: #1111498 #1117025 #1117382 #1120658 #1122000 #1122344 #1123333 #1123892 #1125352 Cross-References: CVE-2019-6454 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves one vulnerability and has 8 fixes is now available. Description: This update for systemd fixes the following issues: Security vulnerability fixed: - CVE-2019-6454: Fixed a crash of PID1 by sending specially crafted D-BUS message on the system bus by an unprivileged user (bsc#1125352) Other bug fixes and changes: - journal-remote: set a limit on the number of fields in a message - journal-remote: verify entry length from header - journald: set a limit on the number of fields (1k) - journald: do not store the iovec entry for process commandline on stack - core: include Found state in device dumps - device: fix serialization and deserialization of DeviceFound - fix path in btrfs rule (#6844) - assemble multidevice btrfs volumes without external tools (#6607) (bsc#1117025) - Update systemd-system.conf.xml (bsc#1122000) - units: inform user that the default target is started after exiting from rescue or emergency mode - manager: don't skip sigchld handler for main and control pid for services (#3738) - core: Add helper functions unit_{main, control}_pid - manager: Fixing a debug printf formatting mistake (#3640) - manager: Only invoke a single sigchld per unit within a cleanup cycle (bsc#1117382) - core: update invoke_sigchld_event() to handle NULL ->sigchld_event() - sd-event: expose the event loop iteration counter via sd_event_get_iteration() (#3631) - unit: rework a bit how we keep the service fdstore from being destroyed during service restart (bsc#1122344) - core: when restarting services, don't close fds - cryptsetup: Add dependency on loopback setup to generated units - journal-gateway: use localStorage["cursor"] only when it has valid value - journal-gateway: explicitly declare local variables - analyze: actually select longest activated-time of services - sd-bus: fix implicit downcast of bitfield reported by LGTM - core: free lines after reading them (bsc#1123892) - pam_systemd: reword message about not creating a session (bsc#1111498) - pam_systemd: suppress LOG_DEBUG log messages if debugging is off (bsc#1111498) - main: improve RLIMIT_NOFILE handling (#5795) (bsc#1120658) - sd-bus: if we receive an invalid dbus message, ignore and proceeed - automount: don't pass non-blocking pipe to kernel. - units: make sure initrd-cleanup.service terminates before switching to rootfs (bsc#1123333) - units: add Wants=initrd-cleanup.service to initrd-switch-root.target (#4345) (bsc#1123333) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-268=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libsystemd0-228-68.1 libsystemd0-debuginfo-228-68.1 libsystemd0-mini-228-68.1 libsystemd0-mini-debuginfo-228-68.1 libudev-devel-228-68.1 libudev-mini-devel-228-68.1 libudev-mini1-228-68.1 libudev-mini1-debuginfo-228-68.1 libudev1-228-68.1 libudev1-debuginfo-228-68.1 nss-myhostname-228-68.1 nss-myhostname-debuginfo-228-68.1 nss-mymachines-228-68.1 nss-mymachines-debuginfo-228-68.1 systemd-228-68.1 systemd-debuginfo-228-68.1 systemd-debugsource-228-68.1 systemd-devel-228-68.1 systemd-logger-228-68.1 systemd-mini-228-68.1 systemd-mini-debuginfo-228-68.1 systemd-mini-debugsource-228-68.1 systemd-mini-devel-228-68.1 systemd-mini-sysvinit-228-68.1 systemd-sysvinit-228-68.1 udev-228-68.1 udev-debuginfo-228-68.1 udev-mini-228-68.1 udev-mini-debuginfo-228-68.1 - openSUSE Leap 42.3 (x86_64): libsystemd0-32bit-228-68.1 libsystemd0-debuginfo-32bit-228-68.1 libudev1-32bit-228-68.1 libudev1-debuginfo-32bit-228-68.1 nss-myhostname-32bit-228-68.1 nss-myhostname-debuginfo-32bit-228-68.1 systemd-32bit-228-68.1 systemd-debuginfo-32bit-228-68.1 - openSUSE Leap 42.3 (noarch): systemd-bash-completion-228-68.1 systemd-mini-bash-completion-228-68.1 References: https://www.suse.com/security/cve/CVE-2019-6454.html https://bugzilla.suse.com/1111498 https://bugzilla.suse.com/1117025 https://bugzilla.suse.com/1117382 https://bugzilla.suse.com/1120658 https://bugzilla.suse.com/1122000 https://bugzilla.suse.com/1122344 https://bugzilla.suse.com/1123333 https://bugzilla.suse.com/1123892 https://bugzilla.suse.com/1125352

1 0

openSUSE-RU-2019:0267-1: moderate: Recommended update for obs-service-kiwi_label_helper, obs-service-kiwi_metainfo_helper
by maintenance＠opensuse.org 28 Feb '19

28 Feb '19

openSUSE Recommended Update: Recommended update for obs-service-kiwi_label_helper, obs-service-kiwi_metainfo_helper ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0267-1 Rating: moderate References: Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update ships the packages obs-service-kiwi_label_helper, obs-service-kiwi_metainfo_helper. These are used for inserting information into container images. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-267=1 Package List: - openSUSE Leap 15.0 (noarch): obs-service-kiwi_label_helper-0.0-lp150.2.1 obs-service-kiwi_metainfo_helper-0.0-lp150.2.1 References:

1 0

openSUSE-RU-2019:0266-1: moderate: Recommended update for google-compute-engine
by maintenance＠opensuse.org 27 Feb '19

27 Feb '19

openSUSE Recommended Update: Recommended update for google-compute-engine ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0266-1 Rating: moderate References: #1123671 #1123672 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for google-compute-engine fixes the following issues: Google Compute Engine was updated to version 20190124 (bsc#1123671, bsc#1123672) * Fix metadata script retrieval to support Python 3. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-266=1 Package List: - openSUSE Leap 15.0 (noarch): google-compute-engine-init-20190124-lp150.2.15.1 - openSUSE Leap 15.0 (x86_64): google-compute-engine-debugsource-20190124-lp150.2.15.1 google-compute-engine-oslogin-20190124-lp150.2.15.1 google-compute-engine-oslogin-debuginfo-20190124-lp150.2.15.1 References: https://bugzilla.suse.com/1123671 https://bugzilla.suse.com/1123672

1 0

openSUSE-SU-2019:0265-1: moderate: Security update for libqt5-qtbase
by opensuse-security＠opensuse.org 27 Feb '19

27 Feb '19

openSUSE Security Update: Security update for libqt5-qtbase ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0265-1 Rating: moderate References: #1096328 #1099874 #1108889 #1118595 #1118596 #1120639 Cross-References: CVE-2018-15518 CVE-2018-19873 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves two vulnerabilities and has four fixes is now available. Description: This update for libqt5-qtbase provides the following fixes: Security issues fixed: - CVE-2018-15518: Fixed double free in QXmlStreamReader (bsc#1118595) - CVE-2018-19873: Fixed Denial of Service on malformed BMP file in QBmpHandler (bsc#1118596) Non-security issues fixed: - Fix dynamic loading of libGL. (bsc#1099874) - Make sure printer settings are properly remembered. (bsc#1096328) - Add patch to fix fails to load pixmap cursors on XRender less system (bsc#1108889) - Fix krita pop-up palette not working properly (bsc#1120639) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-265=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libQt5Bootstrap-devel-static-5.9.4-lp150.5.4.1 libQt5Concurrent-devel-5.9.4-lp150.5.4.1 libQt5Concurrent5-5.9.4-lp150.5.4.1 libQt5Concurrent5-debuginfo-5.9.4-lp150.5.4.1 libQt5Core-devel-5.9.4-lp150.5.4.1 libQt5Core5-5.9.4-lp150.5.4.1 libQt5Core5-debuginfo-5.9.4-lp150.5.4.1 libQt5DBus-devel-5.9.4-lp150.5.4.1 libQt5DBus-devel-debuginfo-5.9.4-lp150.5.4.1 libQt5DBus5-5.9.4-lp150.5.4.1 libQt5DBus5-debuginfo-5.9.4-lp150.5.4.1 libQt5Gui-devel-5.9.4-lp150.5.4.1 libQt5Gui5-5.9.4-lp150.5.4.1 libQt5Gui5-debuginfo-5.9.4-lp150.5.4.1 libQt5KmsSupport-devel-static-5.9.4-lp150.5.4.1 libQt5Network-devel-5.9.4-lp150.5.4.1 libQt5Network5-5.9.4-lp150.5.4.1 libQt5Network5-debuginfo-5.9.4-lp150.5.4.1 libQt5OpenGL-devel-5.9.4-lp150.5.4.1 libQt5OpenGL5-5.9.4-lp150.5.4.1 libQt5OpenGL5-debuginfo-5.9.4-lp150.5.4.1 libQt5OpenGLExtensions-devel-static-5.9.4-lp150.5.4.1 libQt5PlatformHeaders-devel-5.9.4-lp150.5.4.1 libQt5PlatformSupport-devel-static-5.9.4-lp150.5.4.1 libQt5PrintSupport-devel-5.9.4-lp150.5.4.1 libQt5PrintSupport5-5.9.4-lp150.5.4.1 libQt5PrintSupport5-debuginfo-5.9.4-lp150.5.4.1 libQt5Sql-devel-5.9.4-lp150.5.4.1 libQt5Sql5-5.9.4-lp150.5.4.1 libQt5Sql5-debuginfo-5.9.4-lp150.5.4.1 libQt5Sql5-mysql-5.9.4-lp150.5.4.1 libQt5Sql5-mysql-debuginfo-5.9.4-lp150.5.4.1 libQt5Sql5-postgresql-5.9.4-lp150.5.4.1 libQt5Sql5-postgresql-debuginfo-5.9.4-lp150.5.4.1 libQt5Sql5-sqlite-5.9.4-lp150.5.4.1 libQt5Sql5-sqlite-debuginfo-5.9.4-lp150.5.4.1 libQt5Sql5-unixODBC-5.9.4-lp150.5.4.1 libQt5Sql5-unixODBC-debuginfo-5.9.4-lp150.5.4.1 libQt5Test-devel-5.9.4-lp150.5.4.1 libQt5Test5-5.9.4-lp150.5.4.1 libQt5Test5-debuginfo-5.9.4-lp150.5.4.1 libQt5Widgets-devel-5.9.4-lp150.5.4.1 libQt5Widgets5-5.9.4-lp150.5.4.1 libQt5Widgets5-debuginfo-5.9.4-lp150.5.4.1 libQt5Xml-devel-5.9.4-lp150.5.4.1 libQt5Xml5-5.9.4-lp150.5.4.1 libQt5Xml5-debuginfo-5.9.4-lp150.5.4.1 libqt5-qtbase-common-devel-5.9.4-lp150.5.4.1 libqt5-qtbase-common-devel-debuginfo-5.9.4-lp150.5.4.1 libqt5-qtbase-debugsource-5.9.4-lp150.5.4.1 libqt5-qtbase-devel-5.9.4-lp150.5.4.1 libqt5-qtbase-examples-5.9.4-lp150.5.4.1 libqt5-qtbase-examples-debuginfo-5.9.4-lp150.5.4.1 libqt5-qtbase-platformtheme-gtk3-5.9.4-lp150.5.4.1 libqt5-qtbase-platformtheme-gtk3-debuginfo-5.9.4-lp150.5.4.1 - openSUSE Leap 15.0 (x86_64): libQt5Bootstrap-devel-static-32bit-5.9.4-lp150.5.4.1 libQt5Concurrent-devel-32bit-5.9.4-lp150.5.4.1 libQt5Concurrent5-32bit-5.9.4-lp150.5.4.1 libQt5Concurrent5-32bit-debuginfo-5.9.4-lp150.5.4.1 libQt5Core-devel-32bit-5.9.4-lp150.5.4.1 libQt5Core5-32bit-5.9.4-lp150.5.4.1 libQt5Core5-32bit-debuginfo-5.9.4-lp150.5.4.1 libQt5DBus-devel-32bit-5.9.4-lp150.5.4.1 libQt5DBus-devel-32bit-debuginfo-5.9.4-lp150.5.4.1 libQt5DBus5-32bit-5.9.4-lp150.5.4.1 libQt5DBus5-32bit-debuginfo-5.9.4-lp150.5.4.1 libQt5Gui-devel-32bit-5.9.4-lp150.5.4.1 libQt5Gui5-32bit-5.9.4-lp150.5.4.1 libQt5Gui5-32bit-debuginfo-5.9.4-lp150.5.4.1 libQt5Network-devel-32bit-5.9.4-lp150.5.4.1 libQt5Network5-32bit-5.9.4-lp150.5.4.1 libQt5Network5-32bit-debuginfo-5.9.4-lp150.5.4.1 libQt5OpenGL-devel-32bit-5.9.4-lp150.5.4.1 libQt5OpenGL5-32bit-5.9.4-lp150.5.4.1 libQt5OpenGL5-32bit-debuginfo-5.9.4-lp150.5.4.1 libQt5OpenGLExtensions-devel-static-32bit-5.9.4-lp150.5.4.1 libQt5PlatformSupport-devel-static-32bit-5.9.4-lp150.5.4.1 libQt5PrintSupport-devel-32bit-5.9.4-lp150.5.4.1 libQt5PrintSupport5-32bit-5.9.4-lp150.5.4.1 libQt5PrintSupport5-32bit-debuginfo-5.9.4-lp150.5.4.1 libQt5Sql-devel-32bit-5.9.4-lp150.5.4.1 libQt5Sql5-32bit-5.9.4-lp150.5.4.1 libQt5Sql5-32bit-debuginfo-5.9.4-lp150.5.4.1 libQt5Sql5-mysql-32bit-5.9.4-lp150.5.4.1 libQt5Sql5-mysql-32bit-debuginfo-5.9.4-lp150.5.4.1 libQt5Sql5-postgresql-32bit-5.9.4-lp150.5.4.1 libQt5Sql5-postgresql-32bit-debuginfo-5.9.4-lp150.5.4.1 libQt5Sql5-sqlite-32bit-5.9.4-lp150.5.4.1 libQt5Sql5-sqlite-32bit-debuginfo-5.9.4-lp150.5.4.1 libQt5Sql5-unixODBC-32bit-5.9.4-lp150.5.4.1 libQt5Sql5-unixODBC-32bit-debuginfo-5.9.4-lp150.5.4.1 libQt5Test-devel-32bit-5.9.4-lp150.5.4.1 libQt5Test5-32bit-5.9.4-lp150.5.4.1 libQt5Test5-32bit-debuginfo-5.9.4-lp150.5.4.1 libQt5Widgets-devel-32bit-5.9.4-lp150.5.4.1 libQt5Widgets5-32bit-5.9.4-lp150.5.4.1 libQt5Widgets5-32bit-debuginfo-5.9.4-lp150.5.4.1 libQt5Xml-devel-32bit-5.9.4-lp150.5.4.1 libQt5Xml5-32bit-5.9.4-lp150.5.4.1 libQt5Xml5-32bit-debuginfo-5.9.4-lp150.5.4.1 libqt5-qtbase-examples-32bit-5.9.4-lp150.5.4.1 libqt5-qtbase-examples-32bit-debuginfo-5.9.4-lp150.5.4.1 - openSUSE Leap 15.0 (noarch): libQt5Core-private-headers-devel-5.9.4-lp150.5.4.1 libQt5DBus-private-headers-devel-5.9.4-lp150.5.4.1 libQt5Gui-private-headers-devel-5.9.4-lp150.5.4.1 libQt5KmsSupport-private-headers-devel-5.9.4-lp150.5.4.1 libQt5Network-private-headers-devel-5.9.4-lp150.5.4.1 libQt5OpenGL-private-headers-devel-5.9.4-lp150.5.4.1 libQt5PlatformSupport-private-headers-devel-5.9.4-lp150.5.4.1 libQt5PrintSupport-private-headers-devel-5.9.4-lp150.5.4.1 libQt5Sql-private-headers-devel-5.9.4-lp150.5.4.1 libQt5Test-private-headers-devel-5.9.4-lp150.5.4.1 libQt5Widgets-private-headers-devel-5.9.4-lp150.5.4.1 libqt5-qtbase-private-headers-devel-5.9.4-lp150.5.4.1 References: https://www.suse.com/security/cve/CVE-2018-15518.html https://www.suse.com/security/cve/CVE-2018-19873.html https://bugzilla.suse.com/1096328 https://bugzilla.suse.com/1099874 https://bugzilla.suse.com/1108889 https://bugzilla.suse.com/1118595 https://bugzilla.suse.com/1118596 https://bugzilla.suse.com/1120639

1 0

openSUSE-SU-2019:0254-1: important: Security update for qemu
by opensuse-security＠opensuse.org 27 Feb '19

27 Feb '19

openSUSE Security Update: Security update for qemu ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0254-1 Rating: important References: #1063993 #1079730 #1100408 #1101982 #1112646 #1114957 #1116717 #1117275 #1119493 #1121600 #1123156 #1123179 Cross-References: CVE-2018-16872 CVE-2018-18954 CVE-2018-19364 CVE-2018-19489 CVE-2019-6778 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves 5 vulnerabilities and has 7 fixes is now available. Description: This update for qemu fixes the following issues: Security issues fixed: - CVE-2019-6778: Fixed a heap buffer overflow issue in the SLiRP networking implementation (bsc#1123156). - CVE-2018-16872: Fixed a host security vulnerability related to handling symlinks in usb-mtp (bsc#1119493). - CVE-2018-19489: Fixed a denial of service vulnerability in virtfs (bsc#1117275). - CVE-2018-19364: Fixed a use-after-free if the virtfs interface resulting in a denial of service (bsc#1116717). - CVE-2018-18954: Fixed a denial of service vulnerability related to PowerPC PowerNV memory operations (bsc#1114957). Non-security issues fixed: - Improved disk performance for qemu on xen (bsc#1100408). - Fixed xen offline migration (bsc#1079730, bsc#1101982, bsc#1063993). - Fixed pwrite64/pread64/write to return 0 over -1 for a zero length NULL buffer in qemu (bsc#1121600). - Use /bin/bash to echo value into sys fs for ksm control (bsc#1112646). - Return specification exception for unimplemented diag 308 subcodes rather than a hardware error (bsc#1123179). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-254=1 Package List: - openSUSE Leap 15.0 (noarch): qemu-ipxe-1.0.0+-lp150.7.18.1 qemu-seabios-1.11.0-lp150.7.18.1 qemu-sgabios-8-lp150.7.18.1 qemu-vgabios-1.11.0-lp150.7.18.1 - openSUSE Leap 15.0 (x86_64): qemu-2.11.2-lp150.7.18.1 qemu-arm-2.11.2-lp150.7.18.1 qemu-arm-debuginfo-2.11.2-lp150.7.18.1 qemu-block-curl-2.11.2-lp150.7.18.1 qemu-block-curl-debuginfo-2.11.2-lp150.7.18.1 qemu-block-dmg-2.11.2-lp150.7.18.1 qemu-block-dmg-debuginfo-2.11.2-lp150.7.18.1 qemu-block-gluster-2.11.2-lp150.7.18.1 qemu-block-gluster-debuginfo-2.11.2-lp150.7.18.1 qemu-block-iscsi-2.11.2-lp150.7.18.1 qemu-block-iscsi-debuginfo-2.11.2-lp150.7.18.1 qemu-block-rbd-2.11.2-lp150.7.18.1 qemu-block-rbd-debuginfo-2.11.2-lp150.7.18.1 qemu-block-ssh-2.11.2-lp150.7.18.1 qemu-block-ssh-debuginfo-2.11.2-lp150.7.18.1 qemu-debuginfo-2.11.2-lp150.7.18.1 qemu-debugsource-2.11.2-lp150.7.18.1 qemu-extra-2.11.2-lp150.7.18.1 qemu-extra-debuginfo-2.11.2-lp150.7.18.1 qemu-guest-agent-2.11.2-lp150.7.18.1 qemu-guest-agent-debuginfo-2.11.2-lp150.7.18.1 qemu-ksm-2.11.2-lp150.7.18.1 qemu-kvm-2.11.2-lp150.7.18.1 qemu-lang-2.11.2-lp150.7.18.1 qemu-linux-user-2.11.2-lp150.7.18.1 qemu-linux-user-debuginfo-2.11.2-lp150.7.18.1 qemu-linux-user-debugsource-2.11.2-lp150.7.18.1 qemu-ppc-2.11.2-lp150.7.18.1 qemu-ppc-debuginfo-2.11.2-lp150.7.18.1 qemu-s390-2.11.2-lp150.7.18.1 qemu-s390-debuginfo-2.11.2-lp150.7.18.1 qemu-testsuite-2.11.2-lp150.7.18.1 qemu-tools-2.11.2-lp150.7.18.1 qemu-tools-debuginfo-2.11.2-lp150.7.18.1 qemu-x86-2.11.2-lp150.7.18.1 qemu-x86-debuginfo-2.11.2-lp150.7.18.1 References: https://www.suse.com/security/cve/CVE-2018-16872.html https://www.suse.com/security/cve/CVE-2018-18954.html https://www.suse.com/security/cve/CVE-2018-19364.html https://www.suse.com/security/cve/CVE-2018-19489.html https://www.suse.com/security/cve/CVE-2019-6778.html https://bugzilla.suse.com/1063993 https://bugzilla.suse.com/1079730 https://bugzilla.suse.com/1100408 https://bugzilla.suse.com/1101982 https://bugzilla.suse.com/1112646 https://bugzilla.suse.com/1114957 https://bugzilla.suse.com/1116717 https://bugzilla.suse.com/1117275 https://bugzilla.suse.com/1119493 https://bugzilla.suse.com/1121600 https://bugzilla.suse.com/1123156 https://bugzilla.suse.com/1123179

1 0

openSUSE-RU-2019:0257-1: moderate: Recommended update for libvpd2
by maintenance＠opensuse.org 27 Feb '19

27 Feb '19

openSUSE Recommended Update: Recommended update for libvpd2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0257-1 Rating: moderate References: #1121687 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libvpd2 fixes the following issues: - Move pid file from /var to /run (bsc#1121687) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-257=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libvpd2-2.2.5-lp150.2.3.1 libvpd2-debuginfo-2.2.5-lp150.2.3.1 libvpd2-debugsource-2.2.5-lp150.2.3.1 libvpd2-devel-2.2.5-lp150.2.3.1 - openSUSE Leap 15.0 (x86_64): libvpd2-32bit-2.2.5-lp150.2.3.1 libvpd2-32bit-debuginfo-2.2.5-lp150.2.3.1 libvpd2-devel-32bit-2.2.5-lp150.2.3.1 References: https://bugzilla.suse.com/1121687

1 0

openSUSE-RU-2019:0260-1: Recommended update for vino
by maintenance＠opensuse.org 27 Feb '19

27 Feb '19

openSUSE Recommended Update: Recommended update for vino ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0260-1 Rating: low References: #1122549 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for vino provides the following fix: - Print an error instead of segfaulting if wayland is detected. (bsc#1122549) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-260=1 Package List: - openSUSE Leap 15.0 (x86_64): vino-3.22.0-lp150.2.3.1 vino-debuginfo-3.22.0-lp150.2.3.1 vino-debugsource-3.22.0-lp150.2.3.1 - openSUSE Leap 15.0 (noarch): vino-lang-3.22.0-lp150.2.3.1 References: https://bugzilla.suse.com/1122549

1 0

openSUSE-RU-2019:0259-1: moderate: Recommended update for open-iscsi
by maintenance＠opensuse.org 27 Feb '19

27 Feb '19

openSUSE Recommended Update: Recommended update for open-iscsi ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0259-1 Rating: moderate References: #1116711 #1122938 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for open-iscsi provides the following fixes: - qedi: Set buf_size in case of ICMP and ARP packet. (bsc#1116711) - qedi: Use uio BD index instead on buffer index. (bsc#1116711) - Fix the output for iscsiadm node/iface print level P1. (bsc#1122938) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-259=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): iscsiuio-0.7.8.2-lp150.9.9.1 iscsiuio-debuginfo-0.7.8.2-lp150.9.9.1 libopeniscsiusr0_2_0-2.0.876-lp150.9.9.1 libopeniscsiusr0_2_0-debuginfo-2.0.876-lp150.9.9.1 open-iscsi-2.0.876-lp150.9.9.1 open-iscsi-debuginfo-2.0.876-lp150.9.9.1 open-iscsi-debugsource-2.0.876-lp150.9.9.1 open-iscsi-devel-2.0.876-lp150.9.9.1 References: https://bugzilla.suse.com/1116711 https://bugzilla.suse.com/1122938

1 0

openSUSE-RU-2019:0262-1: moderate: Recommended update for dmidecode
by maintenance＠opensuse.org 27 Feb '19

27 Feb '19

openSUSE Recommended Update: Recommended update for dmidecode ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0262-1 Rating: moderate References: #1120149 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for dmidecode fixes the following issues: - Extensions to Memory Device (Type 17) (FATE#326830 bsc#1120149) - Add "Logical non-volatile device" to the memory device types (FATE#326830 bsc#1120149) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-262=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): dmidecode-3.1-lp150.3.3.1 dmidecode-debuginfo-3.1-lp150.3.3.1 dmidecode-debugsource-3.1-lp150.3.3.1 References: https://bugzilla.suse.com/1120149

1 0

openSUSE-SU-2019:0261-1: important: Security update for gvfs
by opensuse-security＠opensuse.org 27 Feb '19

27 Feb '19

openSUSE Security Update: Security update for gvfs ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0261-1 Rating: important References: #1125084 Cross-References: CVE-2019-3827 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for gvfs fixes the following issues: Security vulnerability fixed: - CVE-2019-3827: Fixed an issue whereby an unprivileged user was not prompted to give a password when acessing root owned files. (bsc#1125084) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-261=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): gvfs-1.34.2.1-lp150.3.6.1 gvfs-backend-afc-1.34.2.1-lp150.3.6.1 gvfs-backend-afc-debuginfo-1.34.2.1-lp150.3.6.1 gvfs-backend-samba-1.34.2.1-lp150.3.6.1 gvfs-backend-samba-debuginfo-1.34.2.1-lp150.3.6.1 gvfs-backends-1.34.2.1-lp150.3.6.1 gvfs-backends-debuginfo-1.34.2.1-lp150.3.6.1 gvfs-debuginfo-1.34.2.1-lp150.3.6.1 gvfs-debugsource-1.34.2.1-lp150.3.6.1 gvfs-devel-1.34.2.1-lp150.3.6.1 gvfs-fuse-1.34.2.1-lp150.3.6.1 gvfs-fuse-debuginfo-1.34.2.1-lp150.3.6.1 - openSUSE Leap 15.0 (noarch): gvfs-lang-1.34.2.1-lp150.3.6.1 - openSUSE Leap 15.0 (x86_64): gvfs-32bit-1.34.2.1-lp150.3.6.1 gvfs-32bit-debuginfo-1.34.2.1-lp150.3.6.1 References: https://www.suse.com/security/cve/CVE-2019-3827.html https://bugzilla.suse.com/1125084

1 0