December 2019 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2019:2711-1: moderate: Recommended update for salt
by maintenance＠opensuse.org 31 Dec '19

31 Dec '19

openSUSE Recommended Update: Recommended update for salt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2711-1 Rating: moderate References: #1137642 #1154620 #1157479 #1158441 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for salt fixes the following issues: - Remove virt.pool_delete fast parameter (U#54474) - Remove unnecessary yield causing BadYieldError (bsc#1154620) - Prevent 'Already reading' continuous exception message (bsc#1137642) - Fix for aptpkg test with older mock modules - Remove wrong tests for core grain and improve debug logging - Use rich RPM deps to get a compatible version of tornado into the buildroot. - Accumulated changes from Yomi: core.py: ignore wrong product_name files zypperpkg: understand product type - Enable usage of downloadonly parameter for apt module - Fix StreamClosedError issue (bsc#1157479) - Let salt-ssh use platform-python on RHEL8 (bsc#1158441) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2711=1 Package List: - openSUSE Leap 15.1 (x86_64): python2-salt-2019.2.0-lp151.5.9.1 python3-salt-2019.2.0-lp151.5.9.1 salt-2019.2.0-lp151.5.9.1 salt-api-2019.2.0-lp151.5.9.1 salt-cloud-2019.2.0-lp151.5.9.1 salt-doc-2019.2.0-lp151.5.9.1 salt-master-2019.2.0-lp151.5.9.1 salt-minion-2019.2.0-lp151.5.9.1 salt-proxy-2019.2.0-lp151.5.9.1 salt-ssh-2019.2.0-lp151.5.9.1 salt-standalone-formulas-configuration-2019.2.0-lp151.5.9.1 salt-syndic-2019.2.0-lp151.5.9.1 - openSUSE Leap 15.1 (noarch): salt-bash-completion-2019.2.0-lp151.5.9.1 salt-fish-completion-2019.2.0-lp151.5.9.1 salt-zsh-completion-2019.2.0-lp151.5.9.1 References: https://bugzilla.suse.com/1137642 https://bugzilla.suse.com/1154620 https://bugzilla.suse.com/1157479 https://bugzilla.suse.com/1158441

1 0

openSUSE-SU-2019:2710-1: moderate: Security update for spectre-meltdown-checker
by opensuse-security＠opensuse.org 31 Dec '19

31 Dec '19

openSUSE Security Update: Security update for spectre-meltdown-checker ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2710-1 Rating: moderate References: #1117665 #1139073 Cross-References: CVE-2018-12207 CVE-2019-11135 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for spectre-meltdown-checker fixes the following issues: - feat: implement TAA detection (CVE-2019-11135 bsc#1139073) - feat: implement MCEPSC / iTLB Multihit detection (CVE-2018-12207 bsc#1117665) - feat: taa: add TSX_CTRL MSR detection in hardware info - feat: fwdb: use both Intel GitHub repo and MCEdb to build our firmware version database - feat: use --live with --kernel/--config/--map to override file detection in live mode - enh: rework the vuln logic of MDS with --paranoid (fixes #307) - enh: explain that Enhanced IBRS is better for performance than classic IBRS - enh: kernel: autodetect customized arch kernels from cmdline - enh: kernel decompression: better tolerance against missing tools - enh: mock: implement reading from /proc/cmdline - fix: variant3a: Silvermont CPUs are not vulnerable to variant 3a - fix: lockdown: detect Red Hat locked down kernels (impacts MSR writes) - fix: lockdown: detect locked down mode in vanilla 5.4+ kernels - fix: sgx: on locked down kernels, fallback to CPUID bit for detection - fix: fwdb: builtin version takes precedence if the local cached version is older - fix: pteinv: don't check kernel image if not available - fix: silence useless error from grep (fixes #322) - fix: msr: fix msr module detection under Ubuntu 19.10 (fixes #316) - fix: mocking value for read_msr - chore: rename mcedb cmdline parameters to fwdb, and change db version scheme - chore: fwdb: update to v130.20191104+i20191027 - chore: add GitHub check workflow This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2710=1 Package List: - openSUSE Leap 15.1 (x86_64): spectre-meltdown-checker-0.43-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2018-12207.html https://www.suse.com/security/cve/CVE-2019-11135.html https://bugzilla.suse.com/1117665 https://bugzilla.suse.com/1139073

1 0

openSUSE-SU-2019:2712-1: important: Security update for chromium
by opensuse-security＠opensuse.org 31 Dec '19

31 Dec '19

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2712-1 Rating: important References: #1159498 Cross-References: CVE-2019-13767 Affected Products: openSUSE Leap 15.1 openSUSE Backports SLE-15-SP1 SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for chromium fixes the following issues: Chromium was updated to 79.0.3945.88: - CVE-2019-13767: Fixed a use after free in media picker (boo#1159498) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2712=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2712=1 - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2019-2712=1 Package List: - openSUSE Leap 15.1 (x86_64): chromedriver-79.0.3945.88-lp151.2.54.1 chromedriver-debuginfo-79.0.3945.88-lp151.2.54.1 chromium-79.0.3945.88-lp151.2.54.1 chromium-debuginfo-79.0.3945.88-lp151.2.54.1 chromium-debugsource-79.0.3945.88-lp151.2.54.1 - openSUSE Backports SLE-15-SP1 (aarch64 x86_64): chromedriver-79.0.3945.88-bp151.3.38.1 chromedriver-debuginfo-79.0.3945.88-bp151.3.38.1 chromium-79.0.3945.88-bp151.3.38.1 chromium-debuginfo-79.0.3945.88-bp151.3.38.1 chromium-debugsource-79.0.3945.88-bp151.3.38.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 x86_64): chromedriver-79.0.3945.88-22.1 chromium-79.0.3945.88-22.1 References: https://www.suse.com/security/cve/CVE-2019-13767.html https://bugzilla.suse.com/1159498

1 0

openSUSE-SU-2019:2709-1: moderate: Security update for LibreOffice
by opensuse-security＠opensuse.org 31 Dec '19

31 Dec '19

openSUSE Security Update: Security update for LibreOffice ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2709-1 Rating: moderate References: #1061210 #1105173 #1144522 #1152684 Cross-References: CVE-2019-9853 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves one vulnerability and has three fixes is now available. Description: This update libreoffice and libraries fixes the following issues: LibreOffice was updated to 6.3.3 (jsc#SLE-8705), bringing many bug and stability fixes. More information for the 6.3 release at: https://wiki.documentfoundation.org/ReleaseNotes/6.3 Security issue fixed: - CVE-2019-9853: Fixed an issue where by executing macros, the security settings could have been bypassed (bsc#1152684). Other issues addressed: - Dropped disable-kde4 switch, since it is no longer known by configure - Disabled gtk2 because it will be removed in future releases - librelogo is now a standalone sub-package (bsc#1144522). - Partial fixes for an issue where Table(s) from DOCX showed wrong position or color (bsc#1061210). cmis-client was updated to 0.5.2: * Removed header for Uuid's sha1 header(bsc#1105173). * Fixed Google Drive login * Added support for Google Drive two-factor authentication * Fixed access to SharePoint root folder * Limited the maximal number of redirections to 20 * Switched library implementation to C++11 (the API remains C++98-compatible) * Fixed encoding of OAuth2 credentials * Dropped cppcheck run from "make check". A new "make cppcheck" target was created for it * Added proper API symbol exporting * Speeded up building of tests a bit * Fixed a few issues found by coverity and cppcheck libixion was updated to 0.15.0: * Updated for new liborcus * Switched to spdlog for compile-time debug log outputs * Fixed various issues libmwaw was updated 0.3.15: * Fixed fuzzing issues liborcus was updated to 0.15.3: * Fixed various xml related bugs * Improved performance * Fixed multiple parser issues * Added map and structure mode to orcus-json * Other improvements and fixes mdds was updated to 1.5.0: * API changed to 1.5 * Moved the API incompatibility notes from README to the rst doc. * Added the overview section for flat_segment_tree. myspell-dictionaries was updated to 20191016: * Updated Slovenian thesaurus * Updated the da_DK dictionary * Removed the abbreviations from Thai hunspell dictionary * Updated the English dictionaries * Fixed the logo management for "ca" spdlog was updated to 0.16.3: * Fixed sleep issue under MSVC that happens when changing the clock backwards * Ensured that macros always expand to expressions * Added global flush_on function This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2709=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): myspell-dictionaries-20191016-lp151.2.6.1 myspell-lightproof-en-20191016-lp151.2.6.1 myspell-lightproof-hu_HU-20191016-lp151.2.6.1 myspell-lightproof-pt_BR-20191016-lp151.2.6.1 myspell-lightproof-ru_RU-20191016-lp151.2.6.1 - openSUSE Leap 15.1 (noarch): libmwaw-devel-doc-0.3.15-lp151.2.3.1 libreoffice-branding-upstream-6.3.3.2-lp151.3.9.1 libreoffice-gdb-pretty-printers-6.3.3.2-lp151.3.9.1 libreoffice-glade-6.3.3.2-lp151.3.9.1 libreoffice-icon-themes-6.3.3.2-lp151.3.9.1 libreoffice-l10n-af-6.3.3.2-lp151.3.9.1 libreoffice-l10n-am-6.3.3.2-lp151.3.9.1 libreoffice-l10n-ar-6.3.3.2-lp151.3.9.1 libreoffice-l10n-as-6.3.3.2-lp151.3.9.1 libreoffice-l10n-ast-6.3.3.2-lp151.3.9.1 libreoffice-l10n-be-6.3.3.2-lp151.3.9.1 libreoffice-l10n-bg-6.3.3.2-lp151.3.9.1 libreoffice-l10n-bn-6.3.3.2-lp151.3.9.1 libreoffice-l10n-bn_IN-6.3.3.2-lp151.3.9.1 libreoffice-l10n-bo-6.3.3.2-lp151.3.9.1 libreoffice-l10n-br-6.3.3.2-lp151.3.9.1 libreoffice-l10n-brx-6.3.3.2-lp151.3.9.1 libreoffice-l10n-bs-6.3.3.2-lp151.3.9.1 libreoffice-l10n-ca-6.3.3.2-lp151.3.9.1 libreoffice-l10n-ca_valencia-6.3.3.2-lp151.3.9.1 libreoffice-l10n-cs-6.3.3.2-lp151.3.9.1 libreoffice-l10n-cy-6.3.3.2-lp151.3.9.1 libreoffice-l10n-da-6.3.3.2-lp151.3.9.1 libreoffice-l10n-de-6.3.3.2-lp151.3.9.1 libreoffice-l10n-dgo-6.3.3.2-lp151.3.9.1 libreoffice-l10n-dsb-6.3.3.2-lp151.3.9.1 libreoffice-l10n-dz-6.3.3.2-lp151.3.9.1 libreoffice-l10n-el-6.3.3.2-lp151.3.9.1 libreoffice-l10n-en-6.3.3.2-lp151.3.9.1 libreoffice-l10n-en_GB-6.3.3.2-lp151.3.9.1 libreoffice-l10n-en_ZA-6.3.3.2-lp151.3.9.1 libreoffice-l10n-eo-6.3.3.2-lp151.3.9.1 libreoffice-l10n-es-6.3.3.2-lp151.3.9.1 libreoffice-l10n-et-6.3.3.2-lp151.3.9.1 libreoffice-l10n-eu-6.3.3.2-lp151.3.9.1 libreoffice-l10n-fa-6.3.3.2-lp151.3.9.1 libreoffice-l10n-fi-6.3.3.2-lp151.3.9.1 libreoffice-l10n-fr-6.3.3.2-lp151.3.9.1 libreoffice-l10n-fy-6.3.3.2-lp151.3.9.1 libreoffice-l10n-ga-6.3.3.2-lp151.3.9.1 libreoffice-l10n-gd-6.3.3.2-lp151.3.9.1 libreoffice-l10n-gl-6.3.3.2-lp151.3.9.1 libreoffice-l10n-gu-6.3.3.2-lp151.3.9.1 libreoffice-l10n-gug-6.3.3.2-lp151.3.9.1 libreoffice-l10n-he-6.3.3.2-lp151.3.9.1 libreoffice-l10n-hi-6.3.3.2-lp151.3.9.1 libreoffice-l10n-hr-6.3.3.2-lp151.3.9.1 libreoffice-l10n-hsb-6.3.3.2-lp151.3.9.1 libreoffice-l10n-hu-6.3.3.2-lp151.3.9.1 libreoffice-l10n-id-6.3.3.2-lp151.3.9.1 libreoffice-l10n-is-6.3.3.2-lp151.3.9.1 libreoffice-l10n-it-6.3.3.2-lp151.3.9.1 libreoffice-l10n-ja-6.3.3.2-lp151.3.9.1 libreoffice-l10n-ka-6.3.3.2-lp151.3.9.1 libreoffice-l10n-kab-6.3.3.2-lp151.3.9.1 libreoffice-l10n-kk-6.3.3.2-lp151.3.9.1 libreoffice-l10n-km-6.3.3.2-lp151.3.9.1 libreoffice-l10n-kmr_Latn-6.3.3.2-lp151.3.9.1 libreoffice-l10n-kn-6.3.3.2-lp151.3.9.1 libreoffice-l10n-ko-6.3.3.2-lp151.3.9.1 libreoffice-l10n-kok-6.3.3.2-lp151.3.9.1 libreoffice-l10n-ks-6.3.3.2-lp151.3.9.1 libreoffice-l10n-lb-6.3.3.2-lp151.3.9.1 libreoffice-l10n-lo-6.3.3.2-lp151.3.9.1 libreoffice-l10n-lt-6.3.3.2-lp151.3.9.1 libreoffice-l10n-lv-6.3.3.2-lp151.3.9.1 libreoffice-l10n-mai-6.3.3.2-lp151.3.9.1 libreoffice-l10n-mk-6.3.3.2-lp151.3.9.1 libreoffice-l10n-ml-6.3.3.2-lp151.3.9.1 libreoffice-l10n-mn-6.3.3.2-lp151.3.9.1 libreoffice-l10n-mni-6.3.3.2-lp151.3.9.1 libreoffice-l10n-mr-6.3.3.2-lp151.3.9.1 libreoffice-l10n-my-6.3.3.2-lp151.3.9.1 libreoffice-l10n-nb-6.3.3.2-lp151.3.9.1 libreoffice-l10n-ne-6.3.3.2-lp151.3.9.1 libreoffice-l10n-nl-6.3.3.2-lp151.3.9.1 libreoffice-l10n-nn-6.3.3.2-lp151.3.9.1 libreoffice-l10n-nr-6.3.3.2-lp151.3.9.1 libreoffice-l10n-nso-6.3.3.2-lp151.3.9.1 libreoffice-l10n-oc-6.3.3.2-lp151.3.9.1 libreoffice-l10n-om-6.3.3.2-lp151.3.9.1 libreoffice-l10n-or-6.3.3.2-lp151.3.9.1 libreoffice-l10n-pa-6.3.3.2-lp151.3.9.1 libreoffice-l10n-pl-6.3.3.2-lp151.3.9.1 libreoffice-l10n-pt_BR-6.3.3.2-lp151.3.9.1 libreoffice-l10n-pt_PT-6.3.3.2-lp151.3.9.1 libreoffice-l10n-ro-6.3.3.2-lp151.3.9.1 libreoffice-l10n-ru-6.3.3.2-lp151.3.9.1 libreoffice-l10n-rw-6.3.3.2-lp151.3.9.1 libreoffice-l10n-sa_IN-6.3.3.2-lp151.3.9.1 libreoffice-l10n-sat-6.3.3.2-lp151.3.9.1 libreoffice-l10n-sd-6.3.3.2-lp151.3.9.1 libreoffice-l10n-si-6.3.3.2-lp151.3.9.1 libreoffice-l10n-sid-6.3.3.2-lp151.3.9.1 libreoffice-l10n-sk-6.3.3.2-lp151.3.9.1 libreoffice-l10n-sl-6.3.3.2-lp151.3.9.1 libreoffice-l10n-sq-6.3.3.2-lp151.3.9.1 libreoffice-l10n-sr-6.3.3.2-lp151.3.9.1 libreoffice-l10n-ss-6.3.3.2-lp151.3.9.1 libreoffice-l10n-st-6.3.3.2-lp151.3.9.1 libreoffice-l10n-sv-6.3.3.2-lp151.3.9.1 libreoffice-l10n-sw_TZ-6.3.3.2-lp151.3.9.1 libreoffice-l10n-szl-6.3.3.2-lp151.3.9.1 libreoffice-l10n-ta-6.3.3.2-lp151.3.9.1 libreoffice-l10n-te-6.3.3.2-lp151.3.9.1 libreoffice-l10n-tg-6.3.3.2-lp151.3.9.1 libreoffice-l10n-th-6.3.3.2-lp151.3.9.1 libreoffice-l10n-tn-6.3.3.2-lp151.3.9.1 libreoffice-l10n-tr-6.3.3.2-lp151.3.9.1 libreoffice-l10n-ts-6.3.3.2-lp151.3.9.1 libreoffice-l10n-tt-6.3.3.2-lp151.3.9.1 libreoffice-l10n-ug-6.3.3.2-lp151.3.9.1 libreoffice-l10n-uk-6.3.3.2-lp151.3.9.1 libreoffice-l10n-uz-6.3.3.2-lp151.3.9.1 libreoffice-l10n-ve-6.3.3.2-lp151.3.9.1 libreoffice-l10n-vec-6.3.3.2-lp151.3.9.1 libreoffice-l10n-vi-6.3.3.2-lp151.3.9.1 libreoffice-l10n-xh-6.3.3.2-lp151.3.9.1 libreoffice-l10n-zh_CN-6.3.3.2-lp151.3.9.1 libreoffice-l10n-zh_TW-6.3.3.2-lp151.3.9.1 libreoffice-l10n-zu-6.3.3.2-lp151.3.9.1 mdds-1_5-devel-1.5.0-lp151.2.1 myspell-af_NA-20191016-lp151.2.6.1 myspell-af_ZA-20191016-lp151.2.6.1 myspell-an-20191016-lp151.2.6.1 myspell-an_ES-20191016-lp151.2.6.1 myspell-ar-20191016-lp151.2.6.1 myspell-ar_AE-20191016-lp151.2.6.1 myspell-ar_BH-20191016-lp151.2.6.1 myspell-ar_DZ-20191016-lp151.2.6.1 myspell-ar_EG-20191016-lp151.2.6.1 myspell-ar_IQ-20191016-lp151.2.6.1 myspell-ar_JO-20191016-lp151.2.6.1 myspell-ar_KW-20191016-lp151.2.6.1 myspell-ar_LB-20191016-lp151.2.6.1 myspell-ar_LY-20191016-lp151.2.6.1 myspell-ar_MA-20191016-lp151.2.6.1 myspell-ar_OM-20191016-lp151.2.6.1 myspell-ar_QA-20191016-lp151.2.6.1 myspell-ar_SA-20191016-lp151.2.6.1 myspell-ar_SD-20191016-lp151.2.6.1 myspell-ar_SY-20191016-lp151.2.6.1 myspell-ar_TN-20191016-lp151.2.6.1 myspell-ar_YE-20191016-lp151.2.6.1 myspell-be_BY-20191016-lp151.2.6.1 myspell-bg_BG-20191016-lp151.2.6.1 myspell-bn_BD-20191016-lp151.2.6.1 myspell-bn_IN-20191016-lp151.2.6.1 myspell-bo-20191016-lp151.2.6.1 myspell-bo_CN-20191016-lp151.2.6.1 myspell-bo_IN-20191016-lp151.2.6.1 myspell-br_FR-20191016-lp151.2.6.1 myspell-bs-20191016-lp151.2.6.1 myspell-bs_BA-20191016-lp151.2.6.1 myspell-ca-20191016-lp151.2.6.1 myspell-ca_AD-20191016-lp151.2.6.1 myspell-ca_ES-20191016-lp151.2.6.1 myspell-ca_ES_valencia-20191016-lp151.2.6.1 myspell-ca_FR-20191016-lp151.2.6.1 myspell-ca_IT-20191016-lp151.2.6.1 myspell-cs_CZ-20191016-lp151.2.6.1 myspell-da_DK-20191016-lp151.2.6.1 myspell-de-20191016-lp151.2.6.1 myspell-de_AT-20191016-lp151.2.6.1 myspell-de_CH-20191016-lp151.2.6.1 myspell-de_DE-20191016-lp151.2.6.1 myspell-el_GR-20191016-lp151.2.6.1 myspell-en-20191016-lp151.2.6.1 myspell-en_AU-20191016-lp151.2.6.1 myspell-en_BS-20191016-lp151.2.6.1 myspell-en_BZ-20191016-lp151.2.6.1 myspell-en_CA-20191016-lp151.2.6.1 myspell-en_GB-20191016-lp151.2.6.1 myspell-en_GH-20191016-lp151.2.6.1 myspell-en_IE-20191016-lp151.2.6.1 myspell-en_IN-20191016-lp151.2.6.1 myspell-en_JM-20191016-lp151.2.6.1 myspell-en_MW-20191016-lp151.2.6.1 myspell-en_NA-20191016-lp151.2.6.1 myspell-en_NZ-20191016-lp151.2.6.1 myspell-en_PH-20191016-lp151.2.6.1 myspell-en_TT-20191016-lp151.2.6.1 myspell-en_US-20191016-lp151.2.6.1 myspell-en_ZA-20191016-lp151.2.6.1 myspell-en_ZW-20191016-lp151.2.6.1 myspell-es-20191016-lp151.2.6.1 myspell-es_AR-20191016-lp151.2.6.1 myspell-es_BO-20191016-lp151.2.6.1 myspell-es_CL-20191016-lp151.2.6.1 myspell-es_CO-20191016-lp151.2.6.1 myspell-es_CR-20191016-lp151.2.6.1 myspell-es_CU-20191016-lp151.2.6.1 myspell-es_DO-20191016-lp151.2.6.1 myspell-es_EC-20191016-lp151.2.6.1 myspell-es_ES-20191016-lp151.2.6.1 myspell-es_GT-20191016-lp151.2.6.1 myspell-es_HN-20191016-lp151.2.6.1 myspell-es_MX-20191016-lp151.2.6.1 myspell-es_NI-20191016-lp151.2.6.1 myspell-es_PA-20191016-lp151.2.6.1 myspell-es_PE-20191016-lp151.2.6.1 myspell-es_PR-20191016-lp151.2.6.1 myspell-es_PY-20191016-lp151.2.6.1 myspell-es_SV-20191016-lp151.2.6.1 myspell-es_UY-20191016-lp151.2.6.1 myspell-es_VE-20191016-lp151.2.6.1 myspell-et_EE-20191016-lp151.2.6.1 myspell-fr_BE-20191016-lp151.2.6.1 myspell-fr_CA-20191016-lp151.2.6.1 myspell-fr_CH-20191016-lp151.2.6.1 myspell-fr_FR-20191016-lp151.2.6.1 myspell-fr_LU-20191016-lp151.2.6.1 myspell-fr_MC-20191016-lp151.2.6.1 myspell-gd_GB-20191016-lp151.2.6.1 myspell-gl-20191016-lp151.2.6.1 myspell-gl_ES-20191016-lp151.2.6.1 myspell-gu_IN-20191016-lp151.2.6.1 myspell-gug-20191016-lp151.2.6.1 myspell-gug_PY-20191016-lp151.2.6.1 myspell-he_IL-20191016-lp151.2.6.1 myspell-hi_IN-20191016-lp151.2.6.1 myspell-hr_HR-20191016-lp151.2.6.1 myspell-hu_HU-20191016-lp151.2.6.1 myspell-id-20191016-lp151.2.6.1 myspell-id_ID-20191016-lp151.2.6.1 myspell-is-20191016-lp151.2.6.1 myspell-is_IS-20191016-lp151.2.6.1 myspell-it_IT-20191016-lp151.2.6.1 myspell-kmr_Latn-20191016-lp151.2.6.1 myspell-kmr_Latn_SY-20191016-lp151.2.6.1 myspell-kmr_Latn_TR-20191016-lp151.2.6.1 myspell-lo_LA-20191016-lp151.2.6.1 myspell-lt_LT-20191016-lp151.2.6.1 myspell-lv_LV-20191016-lp151.2.6.1 myspell-nb_NO-20191016-lp151.2.6.1 myspell-ne_NP-20191016-lp151.2.6.1 myspell-nl_BE-20191016-lp151.2.6.1 myspell-nl_NL-20191016-lp151.2.6.1 myspell-nn_NO-20191016-lp151.2.6.1 myspell-no-20191016-lp151.2.6.1 myspell-oc_FR-20191016-lp151.2.6.1 myspell-pl_PL-20191016-lp151.2.6.1 myspell-pt_AO-20191016-lp151.2.6.1 myspell-pt_BR-20191016-lp151.2.6.1 myspell-pt_PT-20191016-lp151.2.6.1 myspell-ro-20191016-lp151.2.6.1 myspell-ro_RO-20191016-lp151.2.6.1 myspell-ru_RU-20191016-lp151.2.6.1 myspell-si_LK-20191016-lp151.2.6.1 myspell-sk_SK-20191016-lp151.2.6.1 myspell-sl_SI-20191016-lp151.2.6.1 myspell-sq_AL-20191016-lp151.2.6.1 myspell-sr-20191016-lp151.2.6.1 myspell-sr_CS-20191016-lp151.2.6.1 myspell-sr_Latn_CS-20191016-lp151.2.6.1 myspell-sr_Latn_RS-20191016-lp151.2.6.1 myspell-sr_RS-20191016-lp151.2.6.1 myspell-sv_FI-20191016-lp151.2.6.1 myspell-sv_SE-20191016-lp151.2.6.1 myspell-sw_TZ-20191016-lp151.2.6.1 myspell-te-20191016-lp151.2.6.1 myspell-te_IN-20191016-lp151.2.6.1 myspell-th_TH-20191016-lp151.2.6.1 myspell-tr-20191016-lp151.2.6.1 myspell-tr_TR-20191016-lp151.2.6.1 myspell-uk_UA-20191016-lp151.2.6.1 myspell-vi-20191016-lp151.2.6.1 myspell-vi_VN-20191016-lp151.2.6.1 myspell-zu_ZA-20191016-lp151.2.6.1 - openSUSE Leap 15.1 (x86_64): cmis-client-0.5.2-lp151.3.3.1 cmis-client-debuginfo-0.5.2-lp151.3.3.1 cmis-client-debugsource-0.5.2-lp151.3.3.1 libcmis-0_5-5-0.5.2-lp151.3.3.1 libcmis-0_5-5-debuginfo-0.5.2-lp151.3.3.1 libcmis-c-0_5-5-0.5.2-lp151.3.3.1 libcmis-c-0_5-5-debuginfo-0.5.2-lp151.3.3.1 libcmis-c-devel-0.5.2-lp151.3.3.1 libcmis-devel-0.5.2-lp151.3.3.1 libixion-0_15-0-0.15.0-lp151.4.6.1 libixion-0_15-0-debuginfo-0.15.0-lp151.4.6.1 libixion-debuginfo-0.15.0-lp151.4.6.1 libixion-debugsource-0.15.0-lp151.4.6.1 libixion-devel-0.15.0-lp151.4.6.1 libixion-tools-0.15.0-lp151.4.6.1 libixion-tools-debuginfo-0.15.0-lp151.4.6.1 libmwaw-0_3-3-0.3.15-lp151.2.3.1 libmwaw-0_3-3-debuginfo-0.3.15-lp151.2.3.1 libmwaw-debuginfo-0.3.15-lp151.2.3.1 libmwaw-debugsource-0.3.15-lp151.2.3.1 libmwaw-devel-0.3.15-lp151.2.3.1 libmwaw-tools-0.3.15-lp151.2.3.1 libmwaw-tools-debuginfo-0.3.15-lp151.2.3.1 liborcus-0_15-0-0.15.3-lp151.3.6.1 liborcus-0_15-0-debuginfo-0.15.3-lp151.3.6.1 liborcus-debuginfo-0.15.3-lp151.3.6.1 liborcus-debugsource-0.15.3-lp151.3.6.1 liborcus-devel-0.15.3-lp151.3.6.1 liborcus-tools-0.15.3-lp151.3.6.1 liborcus-tools-debuginfo-0.15.3-lp151.3.6.1 libreoffice-6.3.3.2-lp151.3.9.1 libreoffice-base-6.3.3.2-lp151.3.9.1 libreoffice-base-debuginfo-6.3.3.2-lp151.3.9.1 libreoffice-base-drivers-firebird-6.3.3.2-lp151.3.9.1 libreoffice-base-drivers-firebird-debuginfo-6.3.3.2-lp151.3.9.1 libreoffice-base-drivers-postgresql-6.3.3.2-lp151.3.9.1 libreoffice-base-drivers-postgresql-debuginfo-6.3.3.2-lp151.3.9.1 libreoffice-calc-6.3.3.2-lp151.3.9.1 libreoffice-calc-debuginfo-6.3.3.2-lp151.3.9.1 libreoffice-calc-extensions-6.3.3.2-lp151.3.9.1 libreoffice-debuginfo-6.3.3.2-lp151.3.9.1 libreoffice-debugsource-6.3.3.2-lp151.3.9.1 libreoffice-draw-6.3.3.2-lp151.3.9.1 libreoffice-draw-debuginfo-6.3.3.2-lp151.3.9.1 libreoffice-filters-optional-6.3.3.2-lp151.3.9.1 libreoffice-gnome-6.3.3.2-lp151.3.9.1 libreoffice-gnome-debuginfo-6.3.3.2-lp151.3.9.1 libreoffice-gtk3-6.3.3.2-lp151.3.9.1 libreoffice-gtk3-debuginfo-6.3.3.2-lp151.3.9.1 libreoffice-impress-6.3.3.2-lp151.3.9.1 libreoffice-impress-debuginfo-6.3.3.2-lp151.3.9.1 libreoffice-librelogo-6.3.3.2-lp151.3.9.1 libreoffice-mailmerge-6.3.3.2-lp151.3.9.1 libreoffice-math-6.3.3.2-lp151.3.9.1 libreoffice-math-debuginfo-6.3.3.2-lp151.3.9.1 libreoffice-officebean-6.3.3.2-lp151.3.9.1 libreoffice-officebean-debuginfo-6.3.3.2-lp151.3.9.1 libreoffice-pyuno-6.3.3.2-lp151.3.9.1 libreoffice-pyuno-debuginfo-6.3.3.2-lp151.3.9.1 libreoffice-qt5-6.3.3.2-lp151.3.9.1 libreoffice-qt5-debuginfo-6.3.3.2-lp151.3.9.1 libreoffice-sdk-6.3.3.2-lp151.3.9.1 libreoffice-sdk-debuginfo-6.3.3.2-lp151.3.9.1 libreoffice-sdk-doc-6.3.3.2-lp151.3.9.1 libreoffice-writer-6.3.3.2-lp151.3.9.1 libreoffice-writer-debuginfo-6.3.3.2-lp151.3.9.1 libreoffice-writer-extensions-6.3.3.2-lp151.3.9.1 libreofficekit-6.3.3.2-lp151.3.9.1 libreofficekit-devel-6.3.3.2-lp151.3.9.1 python3-libixion-0.15.0-lp151.4.6.1 python3-libixion-debuginfo-0.15.0-lp151.4.6.1 python3-liborcus-0.15.3-lp151.3.6.1 python3-liborcus-debuginfo-0.15.3-lp151.3.6.1 spdlog-devel-0.16.3-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2019-9853.html https://bugzilla.suse.com/1061210 https://bugzilla.suse.com/1105173 https://bugzilla.suse.com/1144522 https://bugzilla.suse.com/1152684

1 0

openSUSE-SU-2019:2712-1: important: Security update for chromium
by opensuse-security＠opensuse.org 31 Dec '19

31 Dec '19

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2712-1 Rating: important References: #1159498 Cross-References: CVE-2019-13767 Affected Products: openSUSE Leap 15.1 openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for chromium fixes the following issues: Chromium was updated to 79.0.3945.88: - CVE-2019-13767: Fixed a use after free in media picker (boo#1159498) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2712=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2712=1 Package List: - openSUSE Leap 15.1 (x86_64): chromedriver-79.0.3945.88-lp151.2.54.1 chromedriver-debuginfo-79.0.3945.88-lp151.2.54.1 chromium-79.0.3945.88-lp151.2.54.1 chromium-debuginfo-79.0.3945.88-lp151.2.54.1 chromium-debugsource-79.0.3945.88-lp151.2.54.1 - openSUSE Backports SLE-15-SP1 (aarch64 x86_64): chromedriver-79.0.3945.88-bp151.3.38.1 chromedriver-debuginfo-79.0.3945.88-bp151.3.38.1 chromium-79.0.3945.88-bp151.3.38.1 chromium-debuginfo-79.0.3945.88-bp151.3.38.1 chromium-debugsource-79.0.3945.88-bp151.3.38.1 References: https://www.suse.com/security/cve/CVE-2019-13767.html https://bugzilla.suse.com/1159498

1 0

openSUSE-RU-2019:2707-1: moderate: Recommended update for krdc
by maintenance＠opensuse.org 25 Dec '19

25 Dec '19

openSUSE Recommended Update: Recommended update for krdc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2707-1 Rating: moderate References: #1135364 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for krdc fixes the following issues: - Add 0001-RDP-Warn-if-trying-to-share-a-non-existing-folder.patch to prevent silent connection errors if the shared folder doesn't exist (boo#1135364, kde#394551) This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2707=1 Package List: - openSUSE Backports SLE-15-SP1 (noarch): krdc-lang-18.12.3-bp151.3.6.1 - openSUSE Backports SLE-15-SP1 (x86_64): krdc-18.12.3-bp151.3.6.1 krdc-devel-18.12.3-bp151.3.6.1 References: https://bugzilla.suse.com/1135364

1 0

openSUSE-RU-2019:2708-1: moderate: Recommended update for stress-ng
by maintenance＠opensuse.org 25 Dec '19

25 Dec '19

openSUSE Recommended Update: Recommended update for stress-ng ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2708-1 Rating: moderate References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for stress-ng fixes the following issues: stress-ng is shipped to the PackageHub in version 0.10.14. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2019-2708=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): stress-ng-0.10.14-2.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): stress-ng-bash-completion-0.10.14-2.1 References:

1 0

openSUSE-RU-2019:2706-1: moderate: Recommended update for dnf-plugins-core
by maintenance＠opensuse.org 23 Dec '19

23 Dec '19

openSUSE Recommended Update: Recommended update for dnf-plugins-core ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2706-1 Rating: moderate References: #1141374 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for dnf-plugins-core fixes the following issues: Update to version 4.0.7 + Fix: copr disable command traceback (rh#1693551) + [doc] state repoid as repo identifier of config-manager (rh#1686779) + Fix download of src when not the latest requested (rh#1649627) - Add missing dependencies on dateutil and distro Python modules (boo#1141374) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2706=1 Package List: - openSUSE Leap 15.1 (noarch): dnf-plugins-core-4.0.7-lp151.3.3.1 dnf-plugins-core-lang-4.0.7-lp151.3.3.1 dnf-utils-4.0.7-lp151.3.3.1 python3-dnf-plugin-leaves-4.0.7-lp151.3.3.1 python3-dnf-plugin-local-4.0.7-lp151.3.3.1 python3-dnf-plugin-show-leaves-4.0.7-lp151.3.3.1 python3-dnf-plugin-versionlock-4.0.7-lp151.3.3.1 python3-dnf-plugins-core-4.0.7-lp151.3.3.1 References: https://bugzilla.suse.com/1141374

1 0

openSUSE-RU-2019:2705-1: moderate: Recommended update for yast2-storage-ng and yast2-installation
by maintenance＠opensuse.org 22 Dec '19

22 Dec '19

openSUSE Recommended Update: Recommended update for yast2-storage-ng and yast2-installation ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2705-1 Rating: moderate References: #1130988 #1136463 #1139808 #1141006 #1148477 #1149011 #1151075 #1152535 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 8 recommended fixes can now be installed. Description: This update for yast2-storage-ng and yast2-installation contains the following fixes: - Implement alternative options if a device cannot be mounted by the method configured as default. (bsc#1151075) - AutoYaST: do not fail if the uuid is specified for a new filesystem. (bsc#1148477, bsc#1152535) - AutoYaST: partitions and logical volumes to be reused can now be found by uuid. (bsc#1148477, bsc#1152535) - bind-mount /run from inst-sys to target system during install. (bsc#1136463) - Fixes an issue where the installation failed when calculating a RAID proposal. (bsc#1139808) - AutoYaST: consider CT_DMMULTIPATH an alias of CT_DISK. (bsc#1130988) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2705=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): yast2-storage-ng-4.1.90-lp151.2.9.1 - openSUSE Leap 15.1 (noarch): yast2-installation-4.1.47-lp151.2.6.1 References: https://bugzilla.suse.com/1130988 https://bugzilla.suse.com/1136463 https://bugzilla.suse.com/1139808 https://bugzilla.suse.com/1141006 https://bugzilla.suse.com/1148477 https://bugzilla.suse.com/1149011 https://bugzilla.suse.com/1151075 https://bugzilla.suse.com/1152535

1 0

openSUSE-RU-2019:2704-1: moderate: Recommended update for libguestfs
by maintenance＠opensuse.org 22 Dec '19

22 Dec '19

openSUSE Recommended Update: Recommended update for libguestfs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2704-1 Rating: moderate References: #1136878 #1138860 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for libguestfs fixes the following issues: - Added 'lvm2' to requirements using 'virt-resize' for xfs images. (bsc#1138860) - Add 'sysconfig-netconfig' to appliance. (bsc#1136878) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2704=1 Package List: - openSUSE Leap 15.1 (x86_64): guestfs-data-1.38.0-lp151.4.6.1 guestfs-tools-1.38.0-lp151.4.6.1 guestfs-tools-debuginfo-1.38.0-lp151.4.6.1 guestfsd-1.38.0-lp151.4.6.1 guestfsd-debuginfo-1.38.0-lp151.4.6.1 libguestfs-debugsource-1.38.0-lp151.4.6.1 libguestfs-devel-1.38.0-lp151.4.6.1 libguestfs-test-1.38.0-lp151.4.6.1 libguestfs0-1.38.0-lp151.4.6.1 libguestfs0-debuginfo-1.38.0-lp151.4.6.1 lua-libguestfs-1.38.0-lp151.4.6.1 lua-libguestfs-debuginfo-1.38.0-lp151.4.6.1 ocaml-libguestfs-1.38.0-lp151.4.6.1 ocaml-libguestfs-debuginfo-1.38.0-lp151.4.6.1 ocaml-libguestfs-devel-1.38.0-lp151.4.6.1 perl-Sys-Guestfs-1.38.0-lp151.4.6.1 perl-Sys-Guestfs-debuginfo-1.38.0-lp151.4.6.1 python2-libguestfs-1.38.0-lp151.4.6.1 python2-libguestfs-debuginfo-1.38.0-lp151.4.6.1 python3-libguestfs-1.38.0-lp151.4.6.1 python3-libguestfs-debuginfo-1.38.0-lp151.4.6.1 rubygem-libguestfs-1.38.0-lp151.4.6.1 rubygem-libguestfs-debuginfo-1.38.0-lp151.4.6.1 virt-v2v-1.38.0-lp151.4.6.1 virt-v2v-debuginfo-1.38.0-lp151.4.6.1 References: https://bugzilla.suse.com/1136878 https://bugzilla.suse.com/1138860

1 0