January 2018 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2018:0207-1: moderate: Recommended update for libisds, datovka, shigofumi
by maintenance＠opensuse.org 25 Jan '18

25 Jan '18

openSUSE Recommended Update: Recommended update for libisds, datovka, shigofumi ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:0207-1 Rating: moderate References: #1077294 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update contains updated support for the Czech Data Box Information System (Informační systém datových schránek). Changes in libisds: * Add OVM_FO, OVM_PFO, OVM_PO, PFO_AUDITOR box types * Add RECEIVER and GUARDIAN user types. * Correct user identification issues * translation and documentation updates Changes in datovka: * Can now encrypt passwords via master password * Better support for screen readers * Add support for new data-box and user types * Add API and support for sending messages into records management services * Translation updates to avoid confusion between legal terms in Czech * Various UI and behavior bug fixes * Add full-text data box search * Add forward message action Changes in shigofumi: * rebuild with libisds * translation updates Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-84=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): datovka-4.10.1-5.1 datovka-debuginfo-4.10.1-5.1 datovka-debugsource-4.10.1-5.1 libisds-debugsource-0.10.7-6.1 libisds-devel-0.10.7-6.1 libisds5-0.10.7-6.1 libisds5-debuginfo-0.10.7-6.1 - openSUSE Leap 42.3 (x86_64): shigofumi-0.8-7.1 shigofumi-debuginfo-0.8-7.1 shigofumi-debugsource-0.8-7.1 References: https://bugzilla.suse.com/1077294

1 0

openSUSE-RU-2018:0206-1: Recommended update for crash
by maintenance＠opensuse.org 25 Jan '18

25 Jan '18

openSUSE Recommended Update: Recommended update for crash ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:0206-1 Rating: low References: #1053915 #1068477 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for crash provides the following fixes: - Adapt crash utility for analyzing dumps with updated hash page table geometry ("powerpc/mm/hash: Increase VA range to 128TB") (bsc#1068477) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-81=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): crash-7.1.8-4.1 crash-debuginfo-7.1.8-4.1 crash-debugsource-7.1.8-4.1 crash-devel-7.1.8-4.1 crash-doc-7.1.8-4.1 crash-eppic-7.1.8-4.1 crash-eppic-debuginfo-7.1.8-4.1 crash-gcore-7.1.8-4.1 crash-gcore-debuginfo-7.1.8-4.1 - openSUSE Leap 42.3 (x86_64): crash-kmp-default-7.1.8_k4.4.104_39-4.1 crash-kmp-default-debuginfo-7.1.8_k4.4.104_39-4.1 References: https://bugzilla.suse.com/1053915 https://bugzilla.suse.com/1068477

1 0

openSUSE-RU-2018:0205-1: Recommended update for open-iscsi
by maintenance＠opensuse.org 25 Jan '18

25 Jan '18

openSUSE Recommended Update: Recommended update for open-iscsi ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:0205-1 Rating: low References: #1028323 #1029364 #1055492 #1072312 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for open-iscsi provides the following fixes: - Start iscsi logins before remote filesystems, so that the shutdown order is also changed to prevent hanging. (bsc#1028323) - Add missing coreutils dependency for initrd macros.(bsc#1055492) - Clear errno before calling strtoull in iscsiadm. (bsc#1029364) - Fix some vulnerabilities in iscsiuio reported by Qualys. (bsc#1072312) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-82=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): iscsiuio-0.7.8.2-53.1 iscsiuio-debuginfo-0.7.8.2-53.1 open-iscsi-2.0.874-53.1 open-iscsi-debuginfo-2.0.874-53.1 open-iscsi-debugsource-2.0.874-53.1 References: https://bugzilla.suse.com/1028323 https://bugzilla.suse.com/1029364 https://bugzilla.suse.com/1055492 https://bugzilla.suse.com/1072312

1 0

openSUSE-RU-2018:0204-1: Recommended update for ovmf
by maintenance＠opensuse.org 25 Jan '18

25 Jan '18

openSUSE Recommended Update: Recommended update for ovmf ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:0204-1 Rating: low References: #1073537 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ovmf provides the following fix: - Add support for virtual machines with more than 1TB of memory. (bsc#1073537) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-80=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): ovmf-2017+git1492060560.b6d11d7c46-4.1 ovmf-tools-2017+git1492060560.b6d11d7c46-4.1 - openSUSE Leap 42.3 (noarch): qemu-ovmf-ia32-2017+git1492060560.b6d11d7c46-4.1 qemu-ovmf-x86_64-2017+git1492060560.b6d11d7c46-4.1 - openSUSE Leap 42.3 (x86_64): qemu-ovmf-x86_64-debug-2017+git1492060560.b6d11d7c46-4.1 References: https://bugzilla.suse.com/1073537

1 0

openSUSE-SU-2018:0203-1: important: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 25 Jan '18

25 Jan '18

openSUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:0203-1 Rating: important References: #1077291 Cross-References: CVE-2018-5089 CVE-2018-5091 CVE-2018-5095 CVE-2018-5096 CVE-2018-5097 CVE-2018-5098 CVE-2018-5099 CVE-2018-5102 CVE-2018-5103 CVE-2018-5104 CVE-2018-5117 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes 11 vulnerabilities is now available. Description: This update for MozillaFirefox fixes the following issues: - update to Firefox 52.6esr (boo#1077291) MFSA 2018-01 * Speculative execution side-channel attack ("Spectre") MFSA 2018-03 * CVE-2018-5091 (bmo#1423086) Use-after-free with DTMF timers * CVE-2018-5095 (bmo#1418447) Integer overflow in Skia library during edge builder allocation * CVE-2018-5096 (bmo#1418922) Use-after-free while editing form elements * CVE-2018-5097 (bmo#1387427) Use-after-free when source document is manipulated during XSLT * CVE-2018-5098 (bmo#1399400) Use-after-free while manipulating form input elements * CVE-2018-5099 (bmo#1416878) Use-after-free with widget listener * CVE-2018-5102 (bmo#1419363) Use-after-free in HTML media elements * CVE-2018-5103 (bmo#1423159) Use-after-free during mouse event handling * CVE-2018-5104 (bmo#1425000) Use-after-free during font face manipulation * CVE-2018-5117 (bmo#1395508) URL spoofing with right-to-left text aligned left-to-right * CVE-2018-5089 Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6 - Added additional patches and configurations to fix builds on s390 and PowerPC. * Added firefox-glibc-getrandom.patch effecting builds on s390 and PowerPC * Added mozilla-s390-bigendian.patch along with icudt58b.dat bigendian ICU data file for running Firefox on bigendian architectures (bmo#1322212 and bmo#1264836) * Added mozilla-s390-nojit.patch to enable atomic operations used by the JS engine when JIT is disabled on s390 * Build configuration options specific to s390 * Requires NSS >= 3.29.5 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-85=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2018-85=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (x86_64): MozillaFirefox-52.6-75.1 MozillaFirefox-branding-upstream-52.6-75.1 MozillaFirefox-buildsymbols-52.6-75.1 MozillaFirefox-debuginfo-52.6-75.1 MozillaFirefox-debugsource-52.6-75.1 MozillaFirefox-devel-52.6-75.1 MozillaFirefox-translations-common-52.6-75.1 MozillaFirefox-translations-other-52.6-75.1 - openSUSE Leap 42.2 (x86_64): MozillaFirefox-52.6-57.30.1 MozillaFirefox-branding-upstream-52.6-57.30.1 MozillaFirefox-buildsymbols-52.6-57.30.1 MozillaFirefox-debuginfo-52.6-57.30.1 MozillaFirefox-debugsource-52.6-57.30.1 MozillaFirefox-devel-52.6-57.30.1 MozillaFirefox-translations-common-52.6-57.30.1 MozillaFirefox-translations-other-52.6-57.30.1 References: https://www.suse.com/security/cve/CVE-2018-5089.html https://www.suse.com/security/cve/CVE-2018-5091.html https://www.suse.com/security/cve/CVE-2018-5095.html https://www.suse.com/security/cve/CVE-2018-5096.html https://www.suse.com/security/cve/CVE-2018-5097.html https://www.suse.com/security/cve/CVE-2018-5098.html https://www.suse.com/security/cve/CVE-2018-5099.html https://www.suse.com/security/cve/CVE-2018-5102.html https://www.suse.com/security/cve/CVE-2018-5103.html https://www.suse.com/security/cve/CVE-2018-5104.html https://www.suse.com/security/cve/CVE-2018-5117.html https://bugzilla.suse.com/1077291

1 0

openSUSE-RU-2018:0202-1: Recommended update for makedumpfile
by maintenance＠opensuse.org 25 Jan '18

25 Jan '18

openSUSE Recommended Update: Recommended update for makedumpfile ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:0202-1 Rating: low References: #1068485 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for makedumpfile provides the following fix: - Adapt makedumpfile tool for filtering dumps with updated hash page table geometry ("powerpc/mm/hash: Increase VA range to 128TB") (bsc#1068485) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-83=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): makedumpfile-1.6.1-3.1 makedumpfile-debuginfo-1.6.1-3.1 makedumpfile-debugsource-1.6.1-3.1 References: https://bugzilla.suse.com/1068485

1 0

openSUSE-RU-2018:0201-1: moderate: Recommended update for plasma5-workspace
by maintenance＠opensuse.org 25 Jan '18

25 Jan '18

openSUSE Recommended Update: Recommended update for plasma5-workspace ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:0201-1 Rating: moderate References: #1069777 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for plasma5-workspace fixes the following issues: - The KDE Plasma workspace may have crashed after switching activities (boo#1069777) - Auto-hide panels containing the global menu would not be visible on menu activation (kde#384861) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-78=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (noarch): plasma5-workspace-lang-5.8.7-8.1 - openSUSE Leap 42.3 (x86_64): drkonqi5-5.8.7-8.1 drkonqi5-debuginfo-5.8.7-8.1 plasma5-workspace-5.8.7-8.1 plasma5-workspace-debuginfo-5.8.7-8.1 plasma5-workspace-debugsource-5.8.7-8.1 plasma5-workspace-devel-5.8.7-8.1 plasma5-workspace-libs-5.8.7-8.1 plasma5-workspace-libs-debuginfo-5.8.7-8.1 References: https://bugzilla.suse.com/1069777

1 0

openSUSE-OU-2018:0194-1: moderate: Optional update adding fio to the SUSE PackageHub
by maintenance＠opensuse.org 24 Jan '18

24 Jan '18

openSUSE Optional Update: Optional update adding fio to the SUSE PackageHub ______________________________________________________________________________ Announcement ID: openSUSE-OU-2018:0194-1 Rating: moderate References: #783876 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update adds fio to the SUSE PackageHub. Fio is an I/O benchmark and stress testing tool. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2018-77=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le x86_64): fio-3.3-2.1 gfio-3.3-2.1 References: https://bugzilla.suse.com/783876

1 0

openSUSE-SU-2018:0190-1: moderate: Security update for clamav-database
by opensuse-security＠opensuse.org 24 Jan '18

24 Jan '18

openSUSE Security Update: Security update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:0190-1 Rating: moderate References: Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for clamav-database updates the database. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2018-76=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): clamav-database-201801220009-54.133.1 References:

1 0

openSUSE-RU-2018:0189-1: moderate: Recommended update for xfce4-settings
by maintenance＠opensuse.org 24 Jan '18

24 Jan '18

openSUSE Recommended Update: Recommended update for xfce4-settings ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:0189-1 Rating: moderate References: #1026976 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for xfce4-settings fixes the following issues: - libinput support was missing in XFCE (boo#1026976) The 4.12.1 release also fixes a number of minor display and stability bugs. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-73=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2018-73=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (x86_64): xfce4-settings-4.12.1-7.1 xfce4-settings-debuginfo-4.12.1-7.1 xfce4-settings-debugsource-4.12.1-7.1 - openSUSE Leap 42.3 (noarch): xfce4-settings-branding-openSUSE-4.12.0-10.1 xfce4-settings-branding-upstream-4.12.1-7.1 xfce4-settings-lang-4.12.1-7.1 - openSUSE Leap 42.2 (noarch): xfce4-settings-branding-openSUSE-4.12.0-6.4.1 xfce4-settings-branding-upstream-4.12.1-4.3.1 xfce4-settings-lang-4.12.1-4.3.1 - openSUSE Leap 42.2 (x86_64): xfce4-settings-4.12.1-4.3.1 xfce4-settings-debuginfo-4.12.1-4.3.1 xfce4-settings-debugsource-4.12.1-4.3.1 References: https://bugzilla.suse.com/1026976

1 0