October 2018 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2018:3189-1: moderate: Recommended update for yast2-rmt
by maintenance＠opensuse.org 17 Oct '18

17 Oct '18

openSUSE Recommended Update: Recommended update for yast2-rmt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3189-1 Rating: moderate References: #1088680 #1099324 #1102053 #1102198 #1104232 #1107100 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has 6 recommended fixes can now be installed. Description: This update for rmt-server and yast2-rmt provides the following fixes: rmt-server: - Change file paths to new locations to make RMT work with read-only rootfs. (bsc#1102198) - Change file permissions for rmt.conf. (bsc#1104232) - Make nginx forward to IPv4 address only. (bsc#1107100) - Sort all list outputs alphabetically. (bsc#1088680) - Include 'last_seen_at' field in API systems output for consistency with SCC. - Only show post-install message on initial install yast2-rmt: - Change configuration file path to new location (for rmt-server 1.0.6 and later) - Hide database password in summary. (bsc#1102053) - Set and validate CA private key password. (bsc#1099324) - Reload nginx after configuration. - Translation fixes. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1175=1 Package List: - openSUSE Leap 15.0 (x86_64): rmt-server-1.0.6-lp150.2.9.1 rmt-server-debuginfo-1.0.6-lp150.2.9.1 - openSUSE Leap 15.0 (noarch): yast2-rmt-1.0.3-lp150.2.6.1 References: https://bugzilla.suse.com/1088680 https://bugzilla.suse.com/1099324 https://bugzilla.suse.com/1102053 https://bugzilla.suse.com/1102198 https://bugzilla.suse.com/1104232 https://bugzilla.suse.com/1107100

1 0

openSUSE-RU-2018:3188-1: moderate: Recommended update for salt
by maintenance＠opensuse.org 17 Oct '18

17 Oct '18

openSUSE Recommended Update: Recommended update for salt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3188-1 Rating: moderate References: #1057635 #1072599 #1087055 #1087278 #1087581 #1087891 #1088888 #1089112 #1089362 #1089526 #1091371 #1092161 #1092373 #1094055 #1095507 #1095651 #1095942 #1096514 #1097174 #1097413 #1098394 #1099323 #1099460 #1099945 #1100142 #1100225 #1100697 #1101812 #1101880 #1102013 #1102218 #1102265 #1103530 #1104154 #1106164 #1108969 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has 36 recommended fixes can now be installed. Description: This update provides a lot of fixes for salt. For a detailed list of changes, please refer to the rpm changelog. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1163=1 Package List: - openSUSE Leap 42.3 (noarch): salt-bash-completion-2018.3.0-20.1 salt-fish-completion-2018.3.0-20.1 salt-zsh-completion-2018.3.0-20.1 - openSUSE Leap 42.3 (x86_64): python2-salt-2018.3.0-20.1 python3-salt-2018.3.0-20.1 salt-2018.3.0-20.1 salt-api-2018.3.0-20.1 salt-cloud-2018.3.0-20.1 salt-doc-2018.3.0-20.1 salt-master-2018.3.0-20.1 salt-minion-2018.3.0-20.1 salt-proxy-2018.3.0-20.1 salt-ssh-2018.3.0-20.1 salt-syndic-2018.3.0-20.1 References: https://bugzilla.suse.com/1057635 https://bugzilla.suse.com/1072599 https://bugzilla.suse.com/1087055 https://bugzilla.suse.com/1087278 https://bugzilla.suse.com/1087581 https://bugzilla.suse.com/1087891 https://bugzilla.suse.com/1088888 https://bugzilla.suse.com/1089112 https://bugzilla.suse.com/1089362 https://bugzilla.suse.com/1089526 https://bugzilla.suse.com/1091371 https://bugzilla.suse.com/1092161 https://bugzilla.suse.com/1092373 https://bugzilla.suse.com/1094055 https://bugzilla.suse.com/1095507 https://bugzilla.suse.com/1095651 https://bugzilla.suse.com/1095942 https://bugzilla.suse.com/1096514 https://bugzilla.suse.com/1097174 https://bugzilla.suse.com/1097413 https://bugzilla.suse.com/1098394 https://bugzilla.suse.com/1099323 https://bugzilla.suse.com/1099460 https://bugzilla.suse.com/1099945 https://bugzilla.suse.com/1100142 https://bugzilla.suse.com/1100225 https://bugzilla.suse.com/1100697 https://bugzilla.suse.com/1101812 https://bugzilla.suse.com/1101880 https://bugzilla.suse.com/1102013 https://bugzilla.suse.com/1102218 https://bugzilla.suse.com/1102265 https://bugzilla.suse.com/1103530 https://bugzilla.suse.com/1104154 https://bugzilla.suse.com/1106164 https://bugzilla.suse.com/1108969

1 0

openSUSE-RU-2018:3187-1: moderate: Recommended update for tigervnc
by maintenance＠opensuse.org 17 Oct '18

17 Oct '18

openSUSE Recommended Update: Recommended update for tigervnc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3187-1 Rating: moderate References: #1101470 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for tigervnc fixes the following issues: - It was not possible to install the OpenSSL 1.0 command line interface without being prompted to remove essential packages (bsc#1101470) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1173=1 Package List: - openSUSE Leap 15.0 (x86_64): libXvnc-devel-1.8.0-lp150.10.6.1 libXvnc1-1.8.0-lp150.10.6.1 libXvnc1-debuginfo-1.8.0-lp150.10.6.1 tigervnc-1.8.0-lp150.10.6.1 tigervnc-debuginfo-1.8.0-lp150.10.6.1 tigervnc-debugsource-1.8.0-lp150.10.6.1 xorg-x11-Xvnc-1.8.0-lp150.10.6.1 xorg-x11-Xvnc-debuginfo-1.8.0-lp150.10.6.1 - openSUSE Leap 15.0 (noarch): tigervnc-x11vnc-1.8.0-lp150.10.6.1 xorg-x11-Xvnc-java-1.8.0-lp150.10.6.1 xorg-x11-Xvnc-novnc-1.8.0-lp150.10.6.1 References: https://bugzilla.suse.com/1101470

1 0

openSUSE-RU-2018:3186-1: moderate: Recommended update for osinfo-db
by maintenance＠opensuse.org 17 Oct '18

17 Oct '18

openSUSE Recommended Update: Recommended update for osinfo-db ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3186-1 Rating: moderate References: #1054986 #1102101 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for osinfo-db fixes the following issues: - Add support for sle12sp4 to the database (bsc#1102101) - Add official release date for sle15. Drop 'sles' and 'sled' in favor of just 'sle' (bsc#1054986) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1170=1 Package List: - openSUSE Leap 42.3 (noarch): osinfo-db-20180720-11.1 References: https://bugzilla.suse.com/1054986 https://bugzilla.suse.com/1102101

1 0

openSUSE-SU-2018:3185-1: important: Security update for apache2
by opensuse-security＠opensuse.org 17 Oct '18

17 Oct '18

openSUSE Security Update: Security update for apache2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:3185-1 Rating: important References: #1109961 Cross-References: CVE-2018-11763 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for apache2 fixes the following issues: Security issues fixed: - CVE-2018-11763: In Apache HTTP Server by sending continuous, large SETTINGS frames a client can occupy a connection, server thread and CPU time without any connection timeout coming to effect. This affects only HTTP/2 connections. (bsc#1109961) Bug fixes: - consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation says (patch Juergen Gleiss) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1178=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): apache2-2.4.33-lp150.2.6.1 apache2-debuginfo-2.4.33-lp150.2.6.1 apache2-debugsource-2.4.33-lp150.2.6.1 apache2-devel-2.4.33-lp150.2.6.1 apache2-event-2.4.33-lp150.2.6.1 apache2-event-debuginfo-2.4.33-lp150.2.6.1 apache2-example-pages-2.4.33-lp150.2.6.1 apache2-prefork-2.4.33-lp150.2.6.1 apache2-prefork-debuginfo-2.4.33-lp150.2.6.1 apache2-utils-2.4.33-lp150.2.6.1 apache2-utils-debuginfo-2.4.33-lp150.2.6.1 apache2-worker-2.4.33-lp150.2.6.1 apache2-worker-debuginfo-2.4.33-lp150.2.6.1 - openSUSE Leap 15.0 (noarch): apache2-doc-2.4.33-lp150.2.6.1 References: https://www.suse.com/security/cve/CVE-2018-11763.html https://bugzilla.suse.com/1109961

1 0

openSUSE-RU-2018:3184-1: moderate: Recommended update for bash
by maintenance＠opensuse.org 17 Oct '18

17 Oct '18

openSUSE Recommended Update: Recommended update for bash ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3184-1 Rating: moderate References: #1094121 #1107430 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for bash provides the following fixes: - Fix an inconsistent behaviour regarding expansion of here strings. (bsc#1094121) - Fix mis-matching of null string with '*' pattern. (bsc#1107430) - Fix a crash when the lastpipe option is enabled. - Fix a typo that was preventing the `compat42' shopt option from working as intended. - Help the shell to process any pending traps at redirection. - Fix a crashe due to incorrect conversion from an indexed to associative array. - Avoid the expansion of escape sequences in HOSTNAME in prompt. - Avoid `xtrace' attack over $PS4. This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1174=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): bash-4.3-83.9.1 bash-debuginfo-4.3-83.9.1 bash-debugsource-4.3-83.9.1 bash-devel-4.3-83.9.1 bash-loadables-4.3-83.9.1 bash-loadables-debuginfo-4.3-83.9.1 libreadline6-6.3-83.9.1 libreadline6-debuginfo-6.3-83.9.1 readline-devel-6.3-83.9.1 - openSUSE Leap 42.3 (x86_64): bash-debuginfo-32bit-4.3-83.9.1 libreadline6-32bit-6.3-83.9.1 libreadline6-debuginfo-32bit-6.3-83.9.1 readline-devel-32bit-6.3-83.9.1 - openSUSE Leap 42.3 (noarch): bash-doc-4.3-83.9.1 bash-lang-4.3-83.9.1 readline-doc-6.3-83.9.1 References: https://bugzilla.suse.com/1094121 https://bugzilla.suse.com/1107430

1 0

openSUSE-RU-2018:3183-1: moderate: Recommended update for alsa
by maintenance＠opensuse.org 17 Oct '18

17 Oct '18

openSUSE Recommended Update: Recommended update for alsa ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3183-1 Rating: moderate References: #1091678 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for alsa provides the following fixes: - Fix UCM profile parsing with longname. (bsc#1091678) - Add Dell WD15 dock UCM profile. (bsc#1091678) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1171=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): alsa-1.1.5-lp150.5.3.1 alsa-debugsource-1.1.5-lp150.5.3.1 alsa-devel-1.1.5-lp150.5.3.1 libasound2-1.1.5-lp150.5.3.1 libasound2-debuginfo-1.1.5-lp150.5.3.1 - openSUSE Leap 15.0 (noarch): alsa-docs-1.1.5-lp150.5.3.1 - openSUSE Leap 15.0 (x86_64): alsa-devel-32bit-1.1.5-lp150.5.3.1 libasound2-32bit-1.1.5-lp150.5.3.1 libasound2-32bit-debuginfo-1.1.5-lp150.5.3.1 References: https://bugzilla.suse.com/1091678

1 0

openSUSE-RU-2018:3182-1: moderate: Recommended update for hawk2
by maintenance＠opensuse.org 17 Oct '18

17 Oct '18

openSUSE Recommended Update: Recommended update for hawk2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3182-1 Rating: moderate References: #1069296 #1076421 #1080439 #1083511 #1085515 #1089802 #1090562 #1090657 #1090667 #1092108 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has 10 recommended fixes can now be installed. Description: This update for hawk2 fixes the following issues: - Fix remote nodes iteration (bsc#1080439) - Handle failure to fetch cluster name-bsc (bsc#1083511) - Return after redirect in reports (bsc#1090562) - Fix acl_enabled (bsc#1069296) - Fix acl_version check (bsc#1089802) - Make resource stop/start icon dependent on target-role (bsc#1076421) - Set Symmetrical to False when score is Serialize (bsc#1085515) - Improve hawk-server side cookie handling (bsc#1090667) - Set secure flag to enforce https (bsc#1090657) - Remove json extension from javascript delete operations (bsc#1092108) - Comply routes' id with resources' ID (bsc#1092108) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1166=1 Package List: - openSUSE Leap 42.3 (x86_64): hawk2-2.1.0+git.1516013868.bada8da4-9.2 hawk2-debuginfo-2.1.0+git.1516013868.bada8da4-9.2 hawk2-debugsource-2.1.0+git.1516013868.bada8da4-9.2 References: https://bugzilla.suse.com/1069296 https://bugzilla.suse.com/1076421 https://bugzilla.suse.com/1080439 https://bugzilla.suse.com/1083511 https://bugzilla.suse.com/1085515 https://bugzilla.suse.com/1089802 https://bugzilla.suse.com/1090562 https://bugzilla.suse.com/1090657 https://bugzilla.suse.com/1090667 https://bugzilla.suse.com/1092108

1 0

openSUSE-RU-2018:3181-1: Recommended update for sdcc
by maintenance＠opensuse.org 17 Oct '18

17 Oct '18

openSUSE Recommended Update: Recommended update for sdcc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3181-1 Rating: low References: #1109976 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for sdcc fixes no visible issues for users. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1169=1 Package List: - openSUSE Leap 15.0 (x86_64): sdcc-3.6.0-lp150.3.3.3 sdcc-debuginfo-3.6.0-lp150.3.3.3 sdcc-debugsource-3.6.0-lp150.3.3.3 sdcc-libc-sources-3.6.0-lp150.3.3.3 - openSUSE Leap 15.0 (noarch): sdcc-doc-3.6.0-lp150.3.3.3 References: https://bugzilla.suse.com/1109976

1 0

openSUSE-RU-2018:3180-1: moderate: Recommended update for resource-agents
by maintenance＠opensuse.org 17 Oct '18

17 Oct '18

openSUSE Recommended Update: Recommended update for resource-agents ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3180-1 Rating: moderate References: #1090882 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for resource-agents provides the following fix: - pgsql: Avoid changing owner and group of /dev/null to postgres. (bsc#1090882) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1167=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): ldirectord-4.0.1+git.1495055229.643177f1-15.1 resource-agents-4.0.1+git.1495055229.643177f1-15.1 resource-agents-debuginfo-4.0.1+git.1495055229.643177f1-15.1 resource-agents-debugsource-4.0.1+git.1495055229.643177f1-15.1 - openSUSE Leap 42.3 (noarch): monitoring-plugins-metadata-4.0.1+git.1495055229.643177f1-15.1 References: https://bugzilla.suse.com/1090882

1 0

openSUSE-RU-2018:3179-1: moderate: Recommended update for slurm
by maintenance＠opensuse.org 17 Oct '18

17 Oct '18

openSUSE Recommended Update: Recommended update for slurm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3179-1 Rating: moderate References: #1108671 #1109373 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for slurm fixes the following issues: - Added correct link flags for perl bindings. (bsc#1108671) - Fix Requires(pre) and Requires(post) for slurm-config and slurm-node. This fixes issues with failing slurm user creation when installed during initial system installation (bsc#1109373). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1168=1 Package List: - openSUSE Leap 15.0 (x86_64): libpmi0-17.11.9-lp150.5.15.1 libpmi0-debuginfo-17.11.9-lp150.5.15.1 libslurm32-17.11.9-lp150.5.15.1 libslurm32-debuginfo-17.11.9-lp150.5.15.1 perl-slurm-17.11.9-lp150.5.15.1 perl-slurm-debuginfo-17.11.9-lp150.5.15.1 slurm-17.11.9-lp150.5.15.1 slurm-auth-none-17.11.9-lp150.5.15.1 slurm-auth-none-debuginfo-17.11.9-lp150.5.15.1 slurm-config-17.11.9-lp150.5.15.1 slurm-debuginfo-17.11.9-lp150.5.15.1 slurm-debugsource-17.11.9-lp150.5.15.1 slurm-devel-17.11.9-lp150.5.15.1 slurm-doc-17.11.9-lp150.5.15.1 slurm-lua-17.11.9-lp150.5.15.1 slurm-lua-debuginfo-17.11.9-lp150.5.15.1 slurm-munge-17.11.9-lp150.5.15.1 slurm-munge-debuginfo-17.11.9-lp150.5.15.1 slurm-node-17.11.9-lp150.5.15.1 slurm-node-debuginfo-17.11.9-lp150.5.15.1 slurm-openlava-17.11.9-lp150.5.15.1 slurm-pam_slurm-17.11.9-lp150.5.15.1 slurm-pam_slurm-debuginfo-17.11.9-lp150.5.15.1 slurm-plugins-17.11.9-lp150.5.15.1 slurm-plugins-debuginfo-17.11.9-lp150.5.15.1 slurm-seff-17.11.9-lp150.5.15.1 slurm-sjstat-17.11.9-lp150.5.15.1 slurm-slurmdbd-17.11.9-lp150.5.15.1 slurm-slurmdbd-debuginfo-17.11.9-lp150.5.15.1 slurm-sql-17.11.9-lp150.5.15.1 slurm-sql-debuginfo-17.11.9-lp150.5.15.1 slurm-sview-17.11.9-lp150.5.15.1 slurm-sview-debuginfo-17.11.9-lp150.5.15.1 slurm-torque-17.11.9-lp150.5.15.1 slurm-torque-debuginfo-17.11.9-lp150.5.15.1 References: https://bugzilla.suse.com/1108671 https://bugzilla.suse.com/1109373

1 0

openSUSE-SU-2018:3178-1: important: Security update for git
by opensuse-security＠opensuse.org 17 Oct '18

17 Oct '18

openSUSE Security Update: Security update for git ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:3178-1 Rating: important References: #1110949 Cross-References: CVE-2018-17456 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for git fixes the following issues: - CVE-2018-17456: Git allowed remote code execution during processing of a recursive "git clone" of a superproject if a .gitmodules file has a URL field beginning with a '-' character. (boo#1110949). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1177=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): git-2.16.4-lp150.2.6.1 git-arch-2.16.4-lp150.2.6.1 git-core-2.16.4-lp150.2.6.1 git-core-debuginfo-2.16.4-lp150.2.6.1 git-credential-gnome-keyring-2.16.4-lp150.2.6.1 git-credential-gnome-keyring-debuginfo-2.16.4-lp150.2.6.1 git-credential-libsecret-2.16.4-lp150.2.6.1 git-credential-libsecret-debuginfo-2.16.4-lp150.2.6.1 git-cvs-2.16.4-lp150.2.6.1 git-daemon-2.16.4-lp150.2.6.1 git-daemon-debuginfo-2.16.4-lp150.2.6.1 git-debuginfo-2.16.4-lp150.2.6.1 git-debugsource-2.16.4-lp150.2.6.1 git-email-2.16.4-lp150.2.6.1 git-gui-2.16.4-lp150.2.6.1 git-p4-2.16.4-lp150.2.6.1 git-svn-2.16.4-lp150.2.6.1 git-svn-debuginfo-2.16.4-lp150.2.6.1 git-web-2.16.4-lp150.2.6.1 gitk-2.16.4-lp150.2.6.1 - openSUSE Leap 15.0 (noarch): git-doc-2.16.4-lp150.2.6.1 References: https://www.suse.com/security/cve/CVE-2018-17456.html https://bugzilla.suse.com/1110949

1 0

openSUSE-RU-2018:3177-1: Recommended update for nfs-utils
by maintenance＠opensuse.org 17 Oct '18

17 Oct '18

openSUSE Recommended Update: Recommended update for nfs-utils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3177-1 Rating: low References: #1098532 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for nfs-utils provides the following fix: - The NFSV4LEASETIME setting in /etc/sysconfig/nfs was not correctly transferred to the lease-time option in /etc/nfs.conf (bsc#1098532) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1164=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): nfs-client-2.1.1-lp150.4.3.1 nfs-client-debuginfo-2.1.1-lp150.4.3.1 nfs-doc-2.1.1-lp150.4.3.1 nfs-kernel-server-2.1.1-lp150.4.3.1 nfs-kernel-server-debuginfo-2.1.1-lp150.4.3.1 nfs-utils-debuginfo-2.1.1-lp150.4.3.1 nfs-utils-debugsource-2.1.1-lp150.4.3.1 References: https://bugzilla.suse.com/1098532

1 0

openSUSE-RU-2018:3176-1: Recommended update for mariadb
by maintenance＠opensuse.org 17 Oct '18

17 Oct '18

openSUSE Recommended Update: Recommended update for mariadb ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3176-1 Rating: low References: #1098683 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for mariadb fixes a dependency issue: - libxml2-devel dependency issues with libreadline-devel - build with libedit on openSUSE (bsc#1098683) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1179=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libmysqld-devel-10.2.15-lp150.2.6.1 libmysqld19-10.2.15-lp150.2.6.1 libmysqld19-debuginfo-10.2.15-lp150.2.6.1 mariadb-10.2.15-lp150.2.6.1 mariadb-bench-10.2.15-lp150.2.6.1 mariadb-bench-debuginfo-10.2.15-lp150.2.6.1 mariadb-client-10.2.15-lp150.2.6.1 mariadb-client-debuginfo-10.2.15-lp150.2.6.1 mariadb-debuginfo-10.2.15-lp150.2.6.1 mariadb-debugsource-10.2.15-lp150.2.6.1 mariadb-galera-10.2.15-lp150.2.6.1 mariadb-test-10.2.15-lp150.2.6.1 mariadb-test-debuginfo-10.2.15-lp150.2.6.1 mariadb-tools-10.2.15-lp150.2.6.1 mariadb-tools-debuginfo-10.2.15-lp150.2.6.1 - openSUSE Leap 15.0 (noarch): mariadb-errormessages-10.2.15-lp150.2.6.1 References: https://bugzilla.suse.com/1098683

1 0

openSUSE-RU-2018:3175-1: moderate: Recommended update for dnsmasq
by maintenance＠opensuse.org 17 Oct '18

17 Oct '18

openSUSE Recommended Update: Recommended update for dnsmasq ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3175-1 Rating: moderate References: #1082318 #1106446 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for dnsmasq fixes the following issues: - The group 'nogroup' may not have been created when dnsmasq was installed (bsc#1106446) The following tracked packaging changes are included: - Mark license using the %license rpm pacro (bsc#1082318) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1172=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): dnsmasq-2.78-lp150.2.3.1 dnsmasq-debuginfo-2.78-lp150.2.3.1 dnsmasq-debugsource-2.78-lp150.2.3.1 dnsmasq-utils-2.78-lp150.2.3.1 dnsmasq-utils-debuginfo-2.78-lp150.2.3.1 References: https://bugzilla.suse.com/1082318 https://bugzilla.suse.com/1106446

1 0

openSUSE-RU-2018:3174-1: moderate: Recommended update for dialog
by maintenance＠opensuse.org 17 Oct '18

17 Oct '18

openSUSE Recommended Update: Recommended update for dialog ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3174-1 Rating: moderate References: #1094836 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for dialog fixes the following issues: - Fixes a bug where scrolling is not possible (bsc#1094836) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1165=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): dialog-1.3-lp150.2.3.1 dialog-debuginfo-1.3-lp150.2.3.1 dialog-debugsource-1.3-lp150.2.3.1 dialog-devel-1.3-lp150.2.3.1 libdialog14-1.3-lp150.2.3.1 libdialog14-debuginfo-1.3-lp150.2.3.1 - openSUSE Leap 15.0 (noarch): dialog-examples-1.3-lp150.2.3.1 dialog-lang-1.3-lp150.2.3.1 References: https://bugzilla.suse.com/1094836

1 0

openSUSE-RU-2018:3152-1: important: Recommended update for the Linux Kernel
by maintenance＠opensuse.org 15 Oct '18

15 Oct '18

openSUSE Recommended Update: Recommended update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3152-1 Rating: important References: #1046540 #1050319 #1050536 #1050540 #1051510 #1067126 #1086283 #1086288 #1099125 #1100132 #1102881 #1103308 #1106105 #1106110 #1106237 #1106240 #1106838 #1107685 #1108241 #1108468 #1108828 #1108841 #1108870 #1109151 #1109158 #1109217 #1109784 #1110006 #1110096 #1110538 #1110561 #1110921 #1111028 #1111076 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has 34 recommended fixes can now be installed. Description: The openSUSE Leap 15.0 kernel was updated to receive various bugfixes. It also fixes a boot issue with the previous update kernel. The following non-security bugs were fixed: - acpica: Reference Counts: increase max to 0x4000 for large servers (bsc#1108241). - acpi, nfit: Add function to look up nvdimm device and provide SMBIOS handle (bsc#1099125). - Add a cherry-picked id for apparmor fix - Add cherry-pick ID and sort the upstreamed drm/i915 patches - ALSA: hda/realtek - Cannot adjust speaker's volume on Dell XPS 27 7760 (bsc#1051510). - apparmor: Fix failure to audit context info in build_change_hat (bsc#1051510). - apparmor: fix mediation of prlimit (bsc#1051510). - apparmor: fix memory leak when deduping profile load (bsc#1051510). - apparmor: fix ptrace read check (bsc#1051510). - apparmor: Fully initialize aa_perms struct when answering userspace query (bsc#1051510). - ARM: 8799/1: mm: fix pci_ioremap_io() offset check (bsc#1051510). - ARM: bcm2835: Add GET_THROTTLED firmware property (bsc#1108468). - ARM: exynos: Clear global variable on init error path (bsc#1051510). - ARM: hisi: check of_iomap and fix missing of_node_put (bsc#1051510). - ARM: hwmod: RTC: Do not assume lock/unlock will be called with irq enabled (bsc#1051510). - ARM: mvebu: declare asm symbols as character arrays in pmsu.c (bsc#1051510). - asix: Check for supported Wake-on-LAN modes (bsc#1051510). - ath10k: protect ath10k_htt_rx_ring_free with rx_ring.lock (bsc#1051510). - audit: fix use-after-free in audit_add_watch (bsc#1051510). - Backport stable-patches for x86 architecture - batman-adv: Fix multicast TT issues with bogus ROAM flags (bsc#1051510). - batman-adv: Fix segfault when writing to sysfs elp_interval (bsc#1051510). - batman-adv: Fix segfault when writing to throughput_override (bsc#1051510). - batman-adv: Prevent duplicated gateway_node entry (bsc#1051510). - batman-adv: Prevent duplicated global TT entry (bsc#1051510). - batman-adv: Prevent duplicated nc_node entry (bsc#1051510). - batman-adv: Prevent duplicated softif_vlan entry (bsc#1051510). - batman-adv: Prevent duplicated tvlv handler (bsc#1051510). - be2net: Fix memory leak in be_cmd_get_profile_config() (bsc#1086288). - be2net: remove unused old AIC info (bsc#1086288). - be2net: remove unused old custom busy-poll fields (bsc#1086288 ). - bnx2x: Fix invalid memory access in rss hash config path (bsc#1050319). - bnx2x: Fix receiving tx-timeout in error or recovery state (bsc#1050319). - bpf: make cavium thunder compatible w/ bpf_xdp_adjust_tail (bsc#1110096). - cfg80211: fix a type issue in ieee80211_chandef_to_operating_class() (bsc#1051510). - cifs: integer overflow in in SMB2_ioctl() (bsc#1051510). - clk: clk-fixed-factor: Clear OF_POPULATED flag in case of failure (bsc#1051510). - clk: rockchip: Add pclk_rkpwm_pmu to PMU critical clocks in rk3399 (bsc#1051510). - clk: tegra: bpmp: Do not crash when a clock fails to register (bsc#1051510). - Correct the patch-tag in apparmor patch A wrong commit ID was put in Git-commit tag. After the correction, patches are re-sorted again. - cpufreq, intel_pstate: Allow unspecified FADT profile to probe PPC (bnc#1108841). - cpu/hotplug: Fix SMT supported evaluation (bsc#1110006). - crypto: caam/jr - fix ablkcipher_edesc pointer arithmetic (bsc#1051510). - crypto: cavium/nitrox - fix for command corruption in queue full case with backlog submissions (bsc#1051510). - crypto: ccp - add timeout support in the SEV command (bsc#1106838). - crypto: mxs-dcp - Fix wait logic on chan threads (bsc#1051510). - crypto: qat - Fix KASAN stack-out-of-bounds bug in adf_probe() (bsc#1051510). - cxgb4: fix abort_req_rss6 struct (bsc#1046540). - cxgb4: when disabling dcb set txq dcb priority to 0 (bsc#1046540 ). - declance: Fix continuation with the adapter identification message (bsc#1051510). - Delete patches.drivers/IB-qedr-Remove-GID-add-del-dummy-routines.patch. (bsc#1110921) - Disable DRM patches that broke vbox video driver KMP (bsc#1111076) - dmaengine: pl330: fix irq race with terminate_all (bsc#1051510). - drivers/base: stop new probing during shutdown (bsc#1051510). - drivers/tty: add error handling for pcmcia_loop_config (bsc#1051510). - drm/amdgpu: add another ATPX quirk for TOPAZ (bsc#1051510). - drm/amdgpu: add new polaris pci id (bsc#1051510). - drm/amdgpu: Enable/disable gfx PG feature in rlc safe mode (bsc#1051510). - drm/amdgpu: fix error handling in amdgpu_cs_user_fence_chunk (bsc#1106110) - drm/amdgpu: Pulling old prepare and submit for flip back (bsc#1051510). - drm/amdgpu: revert "fix deadlock of reservation between cs and gpu reset v2" (bsc#1051510). - drm/amdgpu: Update power state at the end of smu hw_init (bsc#1051510). - drm/amdkfd: Fix error codes in kfd_get_process (bsc#1051510). - drm/i915: Handle incomplete Z_FINISH for compressed error states (bsc#1100132) - drm/nouveau/debugfs: Wake up GPU before doing any reclocking (bsc#1051510). - drm/nouveau/disp: fix DP disable race (bsc#1051510). - drm/nouveau/drm/nouveau: Do not forget to cancel hpd_work on suspend/unload (bsc#1051510). - drm/nouveau/drm/nouveau: Prevent handling ACPI HPD events too early (bsc#1051510). - drm/nouveau/drm/nouveau: Use pm_runtime_get_noresume() in connector_detect() (bsc#1051510). - drm/nouveau: Fix deadlocks in nouveau_connector_detect() (bsc#1051510). - drm/nouveau: Fix runtime PM leak in drm_open() (bsc#1051510). - drm/nouveau/TBDdevinit: do not fail when PMU/PRE_OS is missing from VBIOS (bsc#1051510). - drm/nouveau: tegra: Detach from ARM DMA/IOMMU mapping (bsc#1051510). - drm/sun4i: Fix releasing node when enumerating enpoints (bsc#1051510). - drm: udl: Destroy framebuffer only if it was initialized (bsc#1051510). - edac: Add new memory type for non-volatile DIMMs (bsc#1099125). - edac, ghes: Add DDR4 and NVDIMM memory types (bsc#1099125). - edac, skx_edac: Detect non-volatile DIMMs (bsc#1099125). - edac, skx: Fix skx_edac build error when ACPI_NFIT=m (bsc#1099125). - efi: Avoid potential crashes, fix the 'struct efi_pci_io_protocol_32' definition for mixed mode (bsc#1110006). - ethtool: Remove trailing semicolon for static inline (bsc#1051510). - evm: Do not deadlock if a crypto algorithm is unavailable (bsc#1051510). - firmware, DMI: Add function to look up a handle and return DIMM size (bsc#1099125). - firmware: raspberrypi: Register hwmon driver (bsc#1108468). - floppy: Do not copy a kernel pointer to user memory in FDGETPRM ioctl (bsc#1051510). - fuse: Do not access pipe->buffers without pipe_lock() (bsc#1051510). - gpio: adp5588: Fix sleep-in-atomic-context bug (bsc#1051510). - gpio: Fix crash due to registration race (bsc#1051510). - gpiolib-acpi: Register GpioInt ACPI event handlers from a late_initcall (bsc#1051510). - gpiolib: Free the last requested descriptor (bsc#1051510). - gpio: mb86s70: Revert "Return error if requesting an already assigned gpio" (bsc#1051510). - hid: add support for Apple Magic Keyboards (bsc#1051510). - hid: hid-saitek: Add device ID for RAT 7 Contagion (bsc#1051510). - hwmon: Add support for RPi voltage sensor (bsc#1108468). - hwmon: (adt7475) Make adt7475_read_word() return errors (bsc#1051510). - hwmon: (ina2xx) fix sysfs shunt resistor read access (bsc#1051510). - hwmon: (nct6775) Set weight source to zero correctly (bsc#1051510). - hwmon: rpi: add module alias to raspberrypi-hwmon (bsc#1108468). - iommu/amd: Clear memory encryption mask from physical address (bsc#1106105). - ipmi:ssif: Add support for multi-part transmit messages > 2 parts (bsc#1103308). - ipv4: fix use-after-free in ip_cmsg_recv_dstaddr() (git-fixes). - irq/core: Fix boot crash when the irqaffinity= boot parameter is passed on CPUMASK_OFFSTACK=y kernels(v1) (bsc#1051510). - kabi protect enum mem_type (bsc#1099125). - kprobes/x86: Disable preemption in ftrace-based jprobes (bsc#1110006). - kprobes/x86: Prohibit probing on exception masking instructions (bsc#1110006). - kvmclock: fix TSC calibration for nested guests (bsc#1110006). - kvm: lapic: stop advertising DIRECTED_EOI when in-kernel IOAPIC is in use (bsc#1110006). - kvm, mm: account shadow page tables to kmemcg (bsc#1110006). - kvm: nvmx: Do not expose MPX VMX controls when guest MPX disabled (bsc#1106240). - kvm: nvmx: Do not halt vcpu when L1 is injecting events to L2 (bsc#1110006). - kvm/vmx: Optimize vmx_vcpu_run() and svm_vcpu_run() by marking the RDMSR path as unlikely() (bsc#1110006). - kvm: vmx: raise internal error for exception during invalid protected mode state (bsc#1110006). - kvm: vmx: track host_state.loaded using a loaded_vmcs pointer (bsc#1110006). - kvm: vmx: use local variable for current_vmptr when emulating VMPTRST (bsc#1110006). - kvm: x86: Do not use kvm_x86_ops->mpx_supported() directly (bsc#1106240). - kvm: x86: fix escape of guest dr6 to the host (bsc#1110006). - kvm: X86: fix incorrect reference of trace_kvm_pi_irte_update (bsc#1110006). - kvm: x86: fix KVM_XEN_HVM_CONFIG ioctl (bsc#1110006). - kvm: X86: Fix reserved bits check for MOV to CR3 (bsc#1110006). - kvm: x86: fix #UD address of failed Hyper-V hypercalls (bsc#1110006). - kvm: x86: remove APIC Timer periodic/oneshot spikes (bsc#1110006). - kvm: x86: Update cpuid properly when CR4.OSXAVE or CR4.PKE is changed (bsc#1110006). - lib/bug.c: exclude non-BUG/WARN exceptions from report_bug() (bsc#1110006). - liquidio: fix hang when re-binding VF host drv after running DPDK VF driver (bsc#1067126). - liquidio: fix kernel panic in VF driver (bsc#1067126). - mac80211: correct use of IEEE80211_VHT_CAP_RXSTBC_X (bsc#1051510). - mac80211: do not convert to A-MSDU if frag/subframe limited (bsc#1051510). - mac80211: do not Tx a deauth frame if the AP forbade Tx (bsc#1051510). - mac80211: fix a race between restart and CSA flows (bsc#1051510). - mac80211: fix setting IEEE80211_KEY_FLAG_RX_MGMT for AP mode keys (bsc#1051510). - mac80211: Fix station bandwidth setting after channel switch (bsc#1051510). - mac80211_hwsim: correct use of IEEE80211_VHT_CAP_RXSTBC_X (bsc#1051510). - mac80211_hwsim: require at least one channel (bsc#1051510). - mac80211: mesh: fix HWMP sequence numbering to follow standard (bsc#1051510). - mac80211: Run TXQ teardown code before de-registering interfaces (bsc#1051510). - mac80211: shorten the IBSS debug messages (bsc#1051510). - media: davinci: vpif_display: Mix memory leak on probe error path (bsc#1051510). - media: fsl-viu: fix error handling in viu_of_probe() (bsc#1051510). - media: helene: fix xtal frequency setting at power on (bsc#1051510). - media: s3c-camif: ignore -ENOIOCTLCMD from v4l2_subdev_call for s_power (bsc#1051510). - media: s5p-mfc: Fix buffer look up in s5p_mfc_handle_frame_{new, copy_time} functions (bsc#1051510). - media: soc_camera: ov772x: correct setting of banding filter (bsc#1051510). - media: tm6000: add error handling for dvb_register_adapter (bsc#1051510). - media: videobuf2-core: check for q->error in vb2_core_qbuf() (bsc#1051510). - media: videobuf-dma-sg: Fix dma_{sync,unmap}_sg() calls (bsc#1051510). - mm: Preserve _PAGE_DEVMAP across mprotect() calls (bsc#1111028). - mwifiex: handle race during mwifiex_usb_disconnect (bsc#1051510). - net: add support for Cavium PTP coprocessor (bsc#1110096). - net: cavium: fix NULL pointer dereference in cavium_ptp_put (bsc#1110096). - net: cavium: use module_pci_driver to simplify the code (bsc#1110096). - net: thunder: change q_len's type to handle max ring size (bsc#1110096). - net: thunderx: add MAC address filter tracking for LMAC (bsc#1110096). - net: thunderx: add multicast filter management support (bsc#1110096). - net: thunderx: add ndo_set_rx_mode callback implementation for VF (bsc#1110096). - net: thunderx: add new messages for handle ndo_set_rx_mode callback (bsc#1110096). - net: thunderx: add timestamping support (bsc#1110096). - net: thunderx: add workqueue control structures for handle ndo_set_rx_mode request (bsc#1110096). - net: thunderx: add XCAST messages handlers for PF (bsc#1110096). - net: thunderx: check for failed allocation lmac->dmacs (bsc#1110096). - net: thunderx: fix double free error (bsc#1110096). - net: thunderx: move filter register related macro into proper place (bsc#1110096). - net: thunderx: prevent concurrent data re-writing by nicvf_set_rx_mode (bsc#1110096). - net: thunderx: remove a couple of redundant assignments (bsc#1110096). - net: thunderx: rework mac addresses list to u64 array (bsc#1110096). - net: thunderx: Set max queue count taking XDP_TX into account (bsc#1110096). - nfc: trf7970a: fix check of clock frequencies, use && instead of || (bsc#1051510). - nvme: call nvme_complete_rq when nvmf_check_ready fails for mpath I/O (bsc#1107685). - objtool, kprobes/x86: Sync the latest <asm/insn.h> header with tools/objtool/arch/x86/include/asm/insn.h (bsc#1110006). - pci: dwc: Fix scheduling while atomic issues (git-fixes). - perf/x86/amd/ibs: Do not access non-started event (bsc#1110006). - perf/x86/cstate: Fix possible Spectre-v1 indexing for pkg_msr (bsc#1110006). - perf/x86: Fix possible Spectre-v1 indexing for hw_perf_event cache_* (bsc#1110006). - perf/x86: Fix possible Spectre-v1 indexing for x86_pmu::event_map() (bsc#1110006). - perf/x86/intel: Do not accidentally clear high bits in bdw_limit_period() (bsc#1110006). - perf/x86/intel: Fix event update for auto-reload (bsc#1110006). - perf/x86/intel: Fix large period handling on Broadwell CPUs (bsc#1110006). - perf/x86/intel: Fix linear IP of PEBS real_ip on Haswell and later CPUs (bsc#1110006). - perf/x86/intel/lbr: Fix incomplete LBR call stack (bsc#1110006). - perf/x86/intel: Properly save/restore the PMU state in the NMI handler (bsc#1110006). - perf/x86/intel/uncore: Correct fixed counter index check for NHM (bsc#1110006). - perf/x86/intel/uncore: Correct fixed counter index check in generic code (bsc#1110006). - perf/x86/intel/uncore: Fix Skylake UPI event format (bsc#1110006). - perf/x86/msr: Fix possible Spectre-v1 indexing in the MSR driver (bsc#1110006). - pm / core: Clear the direct_complete flag on errors (bsc#1051510). - pm: cpuidle: Fix cpuidle_poll_state_init() prototype (bsc#1110006). - pm / Domains: Fix genpd to deal with drivers returning 1 from ->prepare() (bsc#1051510). - powerpc/firmware: Add definitions for new drc-info firmware feature (bsc#1109158). - powerpc/numa: Skip onlining a offline node in kdump path (bsc#1109784). - powerpc/pseries: Fix duplicate firmware feature for DRC_INFO (bsc#1109158). - powerpc/pseries/mm: call H_BLOCK_REMOVE (bsc#1109158). - powerpc/pseries/mm: factorize PTE slot computation (bsc#1109158). - powerpc/pseries/mm: Introducing FW_FEATURE_BLOCK_REMOVE (bsc#1109158). - ptrace,x86: Make user_64bit_mode() available to 32-bit builds (bsc#1110006). - qed: Add missing device config for RoCE EDPM in UFP mode (bsc#1109217). - qed: Avoid sending mailbox commands when MFW is not responsive (bsc#1050536). - qed: Do not add VLAN 0 tag to untagged frames in multi-function mode (bsc#1050536). - qed: Fix populating the invalid stag value in multi function mode (bsc#1050536). - qed: Fix shmem structure inconsistency between driver and the mfw (bsc#1110561). - qed: Prevent a possible deadlock during driver load and unload (bsc#1050536). - qed: Wait for MCP halt and resume commands to take place (bsc#1050536). - qed: Wait for ready indication before rereading the shmem (bsc#1050536). - qlcnic: fix Tx descriptor corruption on 82xx devices (bsc#1050540). - qmi_wwan: set DTR for modems in forced USB2 mode (bsc#1051510). - RDMA/bnxt_re: Fix system crash during RDMA resource initialization (bsc#1086283). - Revert "cdc-acm: implement put_char() and flush_chars()" (bsc#1051510). - Revert "drm/amdgpu: Add an ATPX quirk for hybrid laptop" (bsc#1051510). - Revert "drm/i915/gvt: set max priority for gvt context" (bsc#1051510). - Revert "gpio: set up initial state from .get_direction()" (bsc#1051510). - Revert "iommu/io-pgtable: Avoid redundant TLB syncs" (bsc#1106237). - Revert "mwifiex: fix incorrect ht capability problem" (bsc#1051510). - Revert "mwifiex: handle race during mwifiex_usb_disconnect" (bsc#1051510). - Revert "pinctrl: sunxi: Do not enforce bias disable (for now)" (bsc#1051510). - Revert "slab: __GFP_ZERO is incompatible with a constructor" (bnc#1108828) This reverts commit de0a67303736262e306a3eb23aa38824b28c2764 because we still seem to have false possitives in the tree. - Revert "ubifs: xattr: Do not operate on deleted inodes" (bsc#1051510). - rpc_pipefs: fix double-dput() (bsc#1051510). - rtc: bq4802: add error handling for devm_ioremap (bsc#1051510). - scsi: qedi: Add the CRC size within iSCSI NVM image (bsc#1110538). - scsi: qedi: Initialize the stats mutex lock (bsc#1110538). - scsi: qla2xxx: do not allow negative thresholds (bsc#1108870). - scsi: qla2xxx: Fix driver hang when FC-NVMe LUNs are configured (bsc#1108870). - scsi: qla2xxx: Fix duplicate switch database entries (bsc#1108870). - scsi: qla2xxx: Fix for double free of SRB structure (bsc#1108870). - scsi: qla2xxx: Fix NVMe session hang on unload (bsc#1108870). - scsi: qla2xxx: Fix NVMe Target discovery (bsc#1108870). - scsi: qla2xxx: Fix recursive mailbox timeout (bsc#1108870). - scsi: qla2xxx: Fix re-using LoopID when handle is in use (bsc#1108870). - scsi: qla2xxx: Move log messages before issuing command to firmware (bsc#1108870). - scsi: qla2xxx: Return switch command on a timeout (bsc#1108870). - selftests/x86: Add tests for the STR and SLDT instructions (bsc#1110006). - selftests/x86: Add tests for User-Mode Instruction Prevention (bsc#1110006). - serial: 8250_exar: Read INT0 from slave device, too (bsc#1051510). - serial: cpm_uart: return immediately from console poll (bsc#1051510). - serial: imx: restore handshaking irq for imx1 (bsc#1051510). - soc: fsl: qe: Fix copy/paste bug in ucc_get_tdm_sync_shift() (bsc#1051510). - soc: mediatek: pwrap: fix cipher init setting error (bsc#1051510). - soreuseport: initialise timewait reuseport field (bsc#1051510). - spi: rspi: Fix interrupted DMA transfers (bsc#1051510). - spi: rspi: Fix invalid SPI use during system suspend (bsc#1051510). - spi: sh-msiof: Fix handling of write value for SISTR register (bsc#1051510). - spi: sh-msiof: Fix invalid SPI use during system suspend (bsc#1051510). - spi: tegra20-slink: explicitly enable/disable clock (bsc#1051510). - squashfs: be more careful about metadata corruption (bsc#1051510). - Squashfs: Compute expected length from inode size rather than block length (bsc#1051510). - squashfs metadata 2: electric boogaloo (bsc#1051510). - squashfs: more metadata hardening (bsc#1051510). - supported.conf: added cavium_ptp - supported.conf: mark raspberrypi-hwmon as supported - thermal: of-thermal: disable passive polling when thermal zone is disabled (bsc#1051510). - tracing/x86/xen: Remove zero data size trace events trace_xen_mmu_flush_tlb{_all} (bsc#1110006). - tsl2550: fix lux1_input error in low light (bsc#1051510). - tty: Drop tty->count on tty_reopen() failure (bsc#1051510). - tty: rocket: Fix possible buffer overwrite on register_PCI (bsc#1051510). - tty: serial: exar: Relocate sleep wake-up handling (bsc#1051510). - tty: serial: lpuart: avoid leaking struct tty_struct (bsc#1051510). - tty: vt_ioctl: fix potential Spectre v1 (bsc#1051510). - ubifs: Check for name being NULL while mounting (bsc#1051510). - udp: Unbreak modules that rely on external __skb_recv_udp() availability (bsc#1109151). - uprobes/x86: Prohibit probing on MOV SS instruction (bsc#1110006). - usb: add quirk for WORLDE Controller KS49 or Prodipe MIDI 49C USB controller (bsc#1051510). - usb: Add quirk to support DJI CineSSD (bsc#1051510). - usb: Avoid use-after-free by flushing endpoints early in usb_set_interface() (bsc#1051510). - usb: cdc_acm: Do not leak URB buffers (bsc#1051510). - usb: dwc2: Turn on uframe_sched on "amlogic" platforms (bsc#1102881). - usb: dwc2: Turn on uframe_sched on "bcm" platforms (bsc#1102881). - usb: dwc2: Turn on uframe_sched on "his" platforms (bsc#1102881). - usb: dwc2: Turn on uframe_sched on "stm32f4x9_fsotg" platforms (bsc#1102881). - usb: fix error handling in usb_driver_claim_interface() (bsc#1051510). - usb: handle NULL config in usb_find_alt_setting() (bsc#1051510). - usb: host: u132-hcd: Fix a sleep-in-atomic-context bug in u132_get_frame() (bsc#1051510). - usb: misc: uss720: Fix two sleep-in-atomic-context bugs (bsc#1051510). - usb: musb: dsps: do not disable CPPI41 irq in driver teardown (bsc#1051510). - usb: uas: add support for more quirk flags (bsc#1051510). - usb: wusbcore: security: cast sizeof to int for comparison (bsc#1051510). - usb: yurex: Fix buffer over-read in yurex_write() (bsc#1051510). - uwb: hwa-rc: fix memory leak at probe (bsc#1051510). - vfs/proc/kcore, x86/mm/kcore: Fix SMAP fault when dumping vsyscall user page (bsc#1110006). - virtio: pci-legacy: Validate queue pfn (bsc#1051510). - x86-64/realmode: Add instruction suffix (bsc#1110006). - x86: Add check for APIC access address for vmentry of L2 guests (bsc#1110006). - x86/alternatives: Fixup alternative_call_2 (bsc#1110006). - x86/apic: Set up through-local-APIC mode on the boot CPU if 'noapic' specified (bsc#1110006). - x86/asm: Add _ASM_ARG* constants for argument registers to <asm/asm.h> (bsc#1110006). - x86/asm: Allow again using asm.h when building for the 'bpf' clang target (bsc#1110006). - x86/asm: Do not use the confusing '.ifeq' directive (bsc#1110006). - x86/boot/64: Verify alignment of the LOAD segment (bsc#1110006). - x86/boot/compressed/64: Print error if 5-level paging is not supported (bsc#1110006). - x86/boot: Fix if_changed build flip/flop bug (bsc#1110006). - x86/boot: Relocate definition of the initial state of CR0 (bsc#1110006). - x86/build: Beautify build log of syscall headers (bsc#1110006). - x86: Call fixup_exception() before notify_die() in math_error() (bsc#1110006). - x86/cpu: Add a microcode loader callback (bsc#1110006). - x86/cpu/amd: Apply the Erratum 688 fix when the BIOS does not (bsc#1110006). - x86/cpu/amd: Have smp_num_siblings and cpu_llc_id always be present (bsc#1110006). - x86/cpu: Check CPU feature bits after microcode upgrade (bsc#1110006). - x86/cpufeatures: Add Intel PCONFIG cpufeature (bsc#1110006). - x86/cpu/intel: Add missing TLB cpuid values (bsc#1110006). - x86/debug: Handle warnings before the notifier chain, to fix KGDB crash (bsc#1110006). - x86/decoder: Add new TEST instruction pattern (bsc#1110006). - x86: Delay skip of emulated hypercall instruction (bsc#1110006). - x86/efi: Fix efi_call_phys_epilog() with CONFIG_X86_5LEVEL=y (bsc#1110006). - x86/entry/64: Add two more instruction suffixes (bsc#1110006). - x86/entry/64: Use 'xorl' for faster register clearing (bsc#1110006). - x86/entry: Reduce the code footprint of the 'idtentry' macro (bsc#1110006). - x86/entry: Use SYSCALL_DEFINE() macros for sys_modify_ldt() (bsc#1110006). - x86/fpu/debug: Remove unused 'x86_fpu_state' and 'x86_fpu_deactivate_state' tracepoints (bsc#1110006). - x86/fpu: Make XSAVE check the base CPUID features before enabling (bsc#1110006). - x86/fpu: Parse clearcpuid= as early XSAVE argument (bsc#1110006). - x86/fpu: Remove the explicit clearing of XSAVE dependent features (bsc#1110006). - x86/hyperv: Check for required priviliges in hyperv_init() (bsc#1110006). - x86: i8259: Add missing include file (bsc#1110006). - x86/intel_rdt: Enable CMT and MBM on new Skylake stepping (bsc#1110006). - x86/intel_rdt: Fix incorrect returned value when creating rdgroup sub-directory in resctrl file system (bsc#1110006). - x86/intel_rdt: Fix potential deadlock during resctrl mount (bsc#1110006). - x86/intel_rdt: Fix potential deadlock during resctrl unmount (bsc#1110006). - x86/irq: Remove an old outdated comment about context tracking races (bsc#1110006). - x86/Kconfig: Limit NR_CPUS on 32-bit to a sane amount (bsc#1110006). - x86/kexec: Make kexec (mostly) work in 5-level paging mode (bsc#1110006). - x86/kprobes: Fix kernel crash when probing .entry_trampoline code (bsc#1110006). - x86: kvm: avoid unused variable warning (bsc#1110006). - x86/kvm/vmx: Do not set l1tf_flush_l1d from vmx_handle_external_intr() (bsc#1110006). - x86/kvm/vmx: Do not set l1tf_flush_l1d to true from vmx_l1d_flush() (bsc#1110006). - x86/kvm/vmx: Move the l1tf_flush_l1d test to vmx_l1d_flush() (bsc#1110006). - x86/kvm/vmx: Remove duplicate l1d flush definitions (bsc#1110006). - x86/kvm/vmx: Replace 'vmx_l1d_flush_always' with 'vmx_l1d_flush_cond' (bsc#1110006). - x86/ldt: Avoid warning in 32-bit builds with older gcc (bsc#1110006). - x86/mce: Add notifier_block forward declaration (bsc#1110006). - x86/mce/amd: Define a function to get SMCA bank type (bsc#1110006). - x86/mce/amd: Get address from already initialized block (bsc#1110006). - x86/mce: Check for alternate indication of machine check recovery on Skylake (bsc#1110006). - x86/mce: Do not overwrite MCi_STATUS in mce_no_way_out() (bsc#1110006). - x86/mce: Fix incorrect "Machine check from unknown source" message (bsc#1110006). - x86/mce: Remove min interval polling limitation (bsc#1110006). - x86/mce: Report only DRAM ECC as memory errors on AMD systems (bsc#1110006). - x86/mce: Serialize sysfs changes (bsc#1110006). - x86/microcode: Allow late microcode loading with SMT disabled (bsc#1110006). - x86/microcode: Attempt late loading only when new microcode is present (bsc#1110006). - x86/microcode: Do not exit early from __reload_late() (bsc#1110006). - x86/microcode: Do not upload microcode if CPUs are offline (bsc#1110006). - x86/microcode: Fix CPU synchronization routine (bsc#1110006). - x86/microcode: Get rid of struct apply_microcode_ctx (bsc#1110006). - x86/microcode/intel: Check microcode revision before updating sibling threads (bsc#1110006). - x86/microcode/intel: Fix memleak in save_microcode_patch() (bsc#1110006). - x86/microcode/intel: Look into the patch cache first (bsc#1110006). - x86/microcode/intel: Save microcode patch unconditionally (bsc#1110006). - x86/microcode/intel: Writeback and invalidate caches before updating microcode (bsc#1110006). - x86/microcode: Make sure boot_cpu_data.microcode is up-to-date (bsc#1110006). - x86/microcode: Make the late update update_lock a raw lock for RT (bsc#1110006). - x86/microcode: Propagate return value from updating functions (bsc#1110006). - x86/microcode: Request microcode on the BSP (bsc#1110006). - x86/microcode: Synchronize late microcode loading (bsc#1110006). - x86/microcode: Update the new microcode revision unconditionally (bsc#1110006). - x86/mm/32: Initialize the CR4 shadow before __flush_tlb_all() (bsc#1110006). - x86/mm/64: Rename the register_page_bootmem_memmap() 'size' parameter to 'nr_pages' (bsc#1110006). - x86/mm: Define _PAGE_TABLE using _KERNPG_TABLE (bsc#1110006). - x86/mm: Do not forbid _PAGE_RW before init for __ro_after_init (bsc#1110006). - x86/mm: Fix bogus warning during EFI bootup, use boot_cpu_has() instead of this_cpu_has() in build_cr3_noflush() (bsc#1110006). - x86/mm/kmmio: Fix mmiotrace for page unaligned addresses (bsc#1110006). - x86/mm/kmmio: Make the tracer robust against L1TF (bsc#1110006). - x86/mm/pat: Make set_memory_np() L1TF safe (bsc#1110006). - x86/mm/pti: Add an overflow check to pti_clone_pmds() (bsc#1110006). - x86/mm/pti: Fix PTI comment in entry_SYSCALL_64() (bsc#1110006). - x86/mm: Relocate page fault error codes to traps.h (bsc#1110006). - x86/mm: Remove in_nmi() warning from vmalloc_fault() (bsc#1110006). - x86/nmi: Fix NMI uaccess race against CR3 switching (bsc#1110006). - x86/numa_emulation: Fix emulated-to-physical node mapping (bsc#1110006). - x86/oprofile: Fix bogus GCC-8 warning in nmi_setup() (bsc#1110006). - x86/pae: use 64 bit atomic xchg function in native_ptep_get_and_clear (bsc#1110006). - x86/paravirt: Remove 'noreplace-paravirt' cmdline option (bsc#1110006). - x86/pgtable: Do not set huge PUD/PMD on non-leaf entries (bsc#1110006). - x86: PM: Make APM idle driver initialize polling state (bsc#1110006). - x86/power: Fix swsusp_arch_resume prototype (bsc#1110006). - x86/pti: Check the return value of pti_user_pagetable_walk_p4d() (bsc#1110006). - x86/pti: Check the return value of pti_user_pagetable_walk_pmd() (bsc#1110006). - x86/retpoline/checksum32: Convert assembler indirect jumps (bsc#1110006). - x86/retpoline/irq32: Convert assembler indirect jumps (bsc#1110006). - x86/smpboot: Do not use mwait_play_dead() on AMD systems (bsc#1110006). - x86/smp: fix non-SMP broken build due to redefinition of apic_id_is_primary_thread (bsc#1110006). - x86/spectre: Fix spelling mistake: "vunerable"-> "vulnerable" (bsc#1110006). - x86/speculation/l1tf: Exempt zeroed PTEs from inversion (bsc#1110006). - x86/speculation/l1tf: Extend 64bit swap file size limit (bsc#1110006). - x86/speculation/l1tf: Fix up pte->pfn conversion for PAE (bsc#1110006). - x86/speculation/l1tf: Invert all not present mappings (bsc#1110006). - x86/speculation/l1tf: Make pmd/pud_mknotpresent() invert (bsc#1110006). - x86/speculation/l1tf: Protect PAE swap entries against L1TF (bsc#1110006). - x86/speculation, objtool: Annotate indirect calls/jumps for objtool on 32-bit kernels (bsc#1110006). - x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (bsc#1110006). - x86/topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across CPU hotplug operations (bsc#1110006). - x86/tsc: Add missing header to tsc_msr.c (bsc#1110006). - x86/tsc: Allow TSC calibration without PIT (bsc#1110006). - x86/tsc: Prevent 32bit truncation in calc_hpet_ref() (bsc#1110006). - x86/vdso: Fix asm constraints on vDSO syscall fallbacks (bsc#1110006). - x86/vdso: Fix vDSO syscall fallback asm constraint regression (bsc#1110006). - x86/xen: Delay get_cpu_cap until stack canary is established (bsc#1110006). - x86/xen: do not write ptes directly in 32-bit PV guests (bsc#1110006). - x86/xen: Drop 5-level paging support code from the XEN_PV code (bsc#1110006). - x86/xen: Reset VCPU0 info pointer after shared_info remap (bsc#1110006). - xen/PVH: Set up GS segment for stack canary (bsc#1110006). - xen/x86/vpmu: Zero struct pt_regs before calling into sample handling code (bsc#1110006). - xen: Fix {set,clear}_foreign_p2m_mapping on autotranslating guests (bsc#1110006). Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1162=1 Package List: - openSUSE Leap 15.0 (x86_64): kernel-debug-4.12.14-lp150.12.22.1 kernel-debug-base-4.12.14-lp150.12.22.1 kernel-debug-base-debuginfo-4.12.14-lp150.12.22.1 kernel-debug-debuginfo-4.12.14-lp150.12.22.1 kernel-debug-debugsource-4.12.14-lp150.12.22.1 kernel-debug-devel-4.12.14-lp150.12.22.1 kernel-debug-devel-debuginfo-4.12.14-lp150.12.22.1 kernel-default-4.12.14-lp150.12.22.1 kernel-default-base-4.12.14-lp150.12.22.1 kernel-default-base-debuginfo-4.12.14-lp150.12.22.1 kernel-default-debuginfo-4.12.14-lp150.12.22.1 kernel-default-debugsource-4.12.14-lp150.12.22.1 kernel-default-devel-4.12.14-lp150.12.22.1 kernel-default-devel-debuginfo-4.12.14-lp150.12.22.1 kernel-kvmsmall-4.12.14-lp150.12.22.1 kernel-kvmsmall-base-4.12.14-lp150.12.22.1 kernel-kvmsmall-base-debuginfo-4.12.14-lp150.12.22.1 kernel-kvmsmall-debuginfo-4.12.14-lp150.12.22.1 kernel-kvmsmall-debugsource-4.12.14-lp150.12.22.1 kernel-kvmsmall-devel-4.12.14-lp150.12.22.1 kernel-kvmsmall-devel-debuginfo-4.12.14-lp150.12.22.1 kernel-obs-build-4.12.14-lp150.12.22.1 kernel-obs-build-debugsource-4.12.14-lp150.12.22.1 kernel-obs-qa-4.12.14-lp150.12.22.1 kernel-syms-4.12.14-lp150.12.22.1 kernel-vanilla-4.12.14-lp150.12.22.1 kernel-vanilla-base-4.12.14-lp150.12.22.1 kernel-vanilla-base-debuginfo-4.12.14-lp150.12.22.1 kernel-vanilla-debuginfo-4.12.14-lp150.12.22.1 kernel-vanilla-debugsource-4.12.14-lp150.12.22.1 kernel-vanilla-devel-4.12.14-lp150.12.22.1 kernel-vanilla-devel-debuginfo-4.12.14-lp150.12.22.1 - openSUSE Leap 15.0 (noarch): kernel-devel-4.12.14-lp150.12.22.1 kernel-docs-4.12.14-lp150.12.22.1 kernel-docs-html-4.12.14-lp150.12.22.1 kernel-macros-4.12.14-lp150.12.22.1 kernel-source-4.12.14-lp150.12.22.1 kernel-source-vanilla-4.12.14-lp150.12.22.1 References: https://bugzilla.suse.com/1046540 https://bugzilla.suse.com/1050319 https://bugzilla.suse.com/1050536 https://bugzilla.suse.com/1050540 https://bugzilla.suse.com/1051510 https://bugzilla.suse.com/1067126 https://bugzilla.suse.com/1086283 https://bugzilla.suse.com/1086288 https://bugzilla.suse.com/1099125 https://bugzilla.suse.com/1100132 https://bugzilla.suse.com/1102881 https://bugzilla.suse.com/1103308 https://bugzilla.suse.com/1106105 https://bugzilla.suse.com/1106110 https://bugzilla.suse.com/1106237 https://bugzilla.suse.com/1106240 https://bugzilla.suse.com/1106838 https://bugzilla.suse.com/1107685 https://bugzilla.suse.com/1108241 https://bugzilla.suse.com/1108468 https://bugzilla.suse.com/1108828 https://bugzilla.suse.com/1108841 https://bugzilla.suse.com/1108870 https://bugzilla.suse.com/1109151 https://bugzilla.suse.com/1109158 https://bugzilla.suse.com/1109217 https://bugzilla.suse.com/1109784 https://bugzilla.suse.com/1110006 https://bugzilla.suse.com/1110096 https://bugzilla.suse.com/1110538 https://bugzilla.suse.com/1110561 https://bugzilla.suse.com/1110921 https://bugzilla.suse.com/1111028 https://bugzilla.suse.com/1111076

1 0

openSUSE-RU-2018:3143-1: moderate: Recommended update for yast2-support
by maintenance＠opensuse.org 13 Oct '18

13 Oct '18

openSUSE Recommended Update: Recommended update for yast2-support ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3143-1 Rating: moderate References: #1093358 #1099691 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for yast2-support provides the following fixes: - Make the "Next" button to submit the gathered information visible in ncurses. (bsc#1093358) - Make the Contact Information screen fit in a 80x24 terminal. - Add additional search keys to the desktop file. (fate#321043, bsc#1099691) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1161=1 Package List: - openSUSE Leap 15.0 (noarch): yast2-support-4.0.1-lp150.2.3.1 References: https://bugzilla.suse.com/1093358 https://bugzilla.suse.com/1099691

1 0

openSUSE-RU-2018:3142-1: important: Recommended update for tinyca2
by maintenance＠opensuse.org 12 Oct '18

12 Oct '18

openSUSE Recommended Update: Recommended update for tinyca2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3142-1 Rating: important References: #1072060 Affected Products: openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for tinyca2 fixes the following issues: - Make the tool work on Tumbleweed by fixing a deprecated perl code (boo#1072060) - Cleaned specfile Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1160=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2018-1160=1 Package List: - openSUSE Leap 15.0 (noarch): tinyca2-0.7.5-lp150.2.3.1 - openSUSE Backports SLE-15 (noarch): tinyca2-0.7.5-bp150.3.3.1 References: https://bugzilla.suse.com/1072060

1 0

openSUSE-RU-2018:3141-1: moderate: Recommended update for yast2-support
by maintenance＠opensuse.org 12 Oct '18

12 Oct '18

openSUSE Recommended Update: Recommended update for yast2-support ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3141-1 Rating: moderate References: #1093358 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-support provides the following fixes: - Make the "Next" button to submit the gathered information visible in ncurses (bsc#1093358) - Make the Contact Information screen fit in a 80x24 terminal This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1156=1 Package List: - openSUSE Leap 42.3 (noarch): yast2-support-3.2.1-2.3.1 References: https://bugzilla.suse.com/1093358

1 0

openSUSE-RU-2018:3140-1: moderate: Recommended update for python3
by maintenance＠opensuse.org 12 Oct '18

12 Oct '18

openSUSE Recommended Update: Recommended update for python3 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3140-1 Rating: moderate References: #1107030 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python3 fixes the following issues: - Add -fwrapv to OPTS, which is default for python3 for bugs which are caused by avoiding it. (bsc#1107030) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1154=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libpython3_6m1_0-3.6.5-lp150.2.3.1 libpython3_6m1_0-debuginfo-3.6.5-lp150.2.3.1 python3-3.6.5-lp150.2.3.1 python3-base-3.6.5-lp150.2.3.1 python3-base-debuginfo-3.6.5-lp150.2.3.1 python3-base-debugsource-3.6.5-lp150.2.3.1 python3-curses-3.6.5-lp150.2.3.1 python3-curses-debuginfo-3.6.5-lp150.2.3.1 python3-dbm-3.6.5-lp150.2.3.1 python3-dbm-debuginfo-3.6.5-lp150.2.3.1 python3-debuginfo-3.6.5-lp150.2.3.1 python3-debugsource-3.6.5-lp150.2.3.1 python3-devel-3.6.5-lp150.2.3.1 python3-devel-debuginfo-3.6.5-lp150.2.3.1 python3-idle-3.6.5-lp150.2.3.1 python3-testsuite-3.6.5-lp150.2.3.1 python3-testsuite-debuginfo-3.6.5-lp150.2.3.1 python3-tk-3.6.5-lp150.2.3.1 python3-tk-debuginfo-3.6.5-lp150.2.3.1 python3-tools-3.6.5-lp150.2.3.1 - openSUSE Leap 15.0 (noarch): python3-doc-3.6.5-lp150.2.3.1 - openSUSE Leap 15.0 (x86_64): libpython3_6m1_0-32bit-3.6.5-lp150.2.3.1 libpython3_6m1_0-32bit-debuginfo-3.6.5-lp150.2.3.1 python3-32bit-3.6.5-lp150.2.3.1 python3-32bit-debuginfo-3.6.5-lp150.2.3.1 python3-base-32bit-3.6.5-lp150.2.3.1 python3-base-32bit-debuginfo-3.6.5-lp150.2.3.1 References: https://bugzilla.suse.com/1107030

1 0

openSUSE-RU-2018:3139-1: moderate: Recommended update for bash
by maintenance＠opensuse.org 12 Oct '18

12 Oct '18

openSUSE Recommended Update: Recommended update for bash ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3139-1 Rating: moderate References: #1095661 #1095670 #1100488 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for bash provides the following fixes: - Bugfix: Parse settings in inputrc for all screen TERM variables starting with "screen." (bsc#1095661) - Make the generation of bash.html reproducible. (bsc#1100488) - Use initgroups(3) instead of setgroups(2) to fix the usage of suid programs. (bsc#1095670) - Fix a problem that could cause hash table bash uses to store exit statuses from asynchronous processes to develop loops in circumstances involving long-running scripts that create and reap many processes. - Fix a problem that could cause the shell to loop if a SIGINT is received inside of a SIGINT trap handler. - Fix cases where a failing readline command (e.g., delete-char at the end of a line) can cause a multi-character key sequence to 'back up' and attempt to re-read some of the characters in the sequence. - Fix a problem when sourcing a file from an interactive shell, that setting the SIGINT handler to the default and typing ^C would cause the shell to exit. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1157=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): bash-4.4-lp150.8.3.1 bash-debuginfo-4.4-lp150.8.3.1 bash-debugsource-4.4-lp150.8.3.1 bash-devel-4.4-lp150.8.3.1 bash-loadables-4.4-lp150.8.3.1 bash-loadables-debuginfo-4.4-lp150.8.3.1 libreadline7-7.0-lp150.8.3.1 libreadline7-debuginfo-7.0-lp150.8.3.1 readline-devel-7.0-lp150.8.3.1 readline-devel-static-7.0-lp150.8.3.1 - openSUSE Leap 15.0 (noarch): bash-doc-4.4-lp150.8.3.1 bash-lang-4.4-lp150.8.3.1 readline-doc-7.0-lp150.8.3.1 - openSUSE Leap 15.0 (x86_64): bash-32bit-debuginfo-4.4-lp150.8.3.1 libreadline7-32bit-7.0-lp150.8.3.1 libreadline7-32bit-debuginfo-7.0-lp150.8.3.1 readline-devel-32bit-7.0-lp150.8.3.1 References: https://bugzilla.suse.com/1095661 https://bugzilla.suse.com/1095670 https://bugzilla.suse.com/1100488

1 0

openSUSE-RU-2018:3138-1: moderate: Recommended update for dolphin
by maintenance＠opensuse.org 12 Oct '18

12 Oct '18

openSUSE Recommended Update: Recommended update for dolphin ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3138-1 Rating: moderate References: #1108797 Affected Products: openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for dolphin fixes the following issues: - Prevent accidentally triggering inline rename by just dragging a file (boo#1108797) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1152=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2018-1152=1 Package List: - openSUSE Leap 15.0 (x86_64): dolphin-17.12.3-lp150.2.3.1 dolphin-debuginfo-17.12.3-lp150.2.3.1 dolphin-debugsource-17.12.3-lp150.2.3.1 dolphin-devel-17.12.3-lp150.2.3.1 dolphin-part-17.12.3-lp150.2.3.1 dolphin-part-debuginfo-17.12.3-lp150.2.3.1 libdolphinvcs5-17.12.3-lp150.2.3.1 libdolphinvcs5-debuginfo-17.12.3-lp150.2.3.1 - openSUSE Leap 15.0 (noarch): dolphin-part-lang-17.12.3-lp150.2.3.1 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): dolphin-17.12.3-bp150.3.3.1 dolphin-devel-17.12.3-bp150.3.3.1 dolphin-part-17.12.3-bp150.3.3.1 libdolphinvcs5-17.12.3-bp150.3.3.1 - openSUSE Backports SLE-15 (noarch): dolphin-part-lang-17.12.3-bp150.3.3.1 References: https://bugzilla.suse.com/1108797

1 0

openSUSE-RU-2018:3137-1: Recommended update for at
by maintenance＠opensuse.org 12 Oct '18

12 Oct '18

openSUSE Recommended Update: Recommended update for at ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3137-1 Rating: low References: #879402 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for at fixes the following issues: - The date format of atq was not usable for sorting, introduce -o <timeformat> switch for atq (bsc#879402) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1155=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): at-3.1.14-17.1 at-debuginfo-3.1.14-17.1 at-debugsource-3.1.14-17.1 References: https://bugzilla.suse.com/879402

1 0

openSUSE-RU-2018:3136-1: moderate: Recommended update for gnome-shell
by maintenance＠opensuse.org 12 Oct '18

12 Oct '18

openSUSE Recommended Update: Recommended update for gnome-shell ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3136-1 Rating: moderate References: #1084341 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gnome-shell provides the following fix: - Fix a crash in gnome-shell blur_pixels() when quickly moving windows from one monitor to another. (bsc#1084341) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1153=1 Package List: - openSUSE Leap 15.0 (noarch): gnome-shell-lang-3.26.2+20180130.0d9c74212-lp150.3.3.1 - openSUSE Leap 15.0 (x86_64): gnome-shell-3.26.2+20180130.0d9c74212-lp150.3.3.1 gnome-shell-browser-plugin-3.26.2+20180130.0d9c74212-lp150.3.3.1 gnome-shell-browser-plugin-debuginfo-3.26.2+20180130.0d9c74212-lp150.3.3.1 gnome-shell-calendar-3.26.2+20180130.0d9c74212-lp150.3.3.1 gnome-shell-calendar-debuginfo-3.26.2+20180130.0d9c74212-lp150.3.3.1 gnome-shell-debuginfo-3.26.2+20180130.0d9c74212-lp150.3.3.1 gnome-shell-debugsource-3.26.2+20180130.0d9c74212-lp150.3.3.1 gnome-shell-devel-3.26.2+20180130.0d9c74212-lp150.3.3.1 References: https://bugzilla.suse.com/1084341

1 0

openSUSE-RU-2018:3135-1: moderate: Recommended update for mpich
by maintenance＠opensuse.org 12 Oct '18

12 Oct '18

openSUSE Recommended Update: Recommended update for mpich ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3135-1 Rating: moderate References: #1098653 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for mpich provides the following fixes: - Fix handling of mpi-selector during updates. (bsc#1098653) - macros.hpc-mpich: Replace %%compiler_family by %%hpc_compiler_family. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1151=1 Package List: - openSUSE Leap 15.0 (x86_64): mpich-3.2.1-lp150.5.3.1 mpich-debuginfo-3.2.1-lp150.5.3.1 mpich-debugsource-3.2.1-lp150.5.3.1 mpich-devel-3.2.1-lp150.5.3.1 mpich-gnu-hpc-3.2.1-lp150.5.3.1 mpich-gnu-hpc-devel-3.2.1-lp150.5.3.1 mpich-gnu-hpc-devel-static-3.2.1-lp150.5.3.1 mpich-ofi-3.2.1-lp150.5.3.1 mpich-ofi-debuginfo-3.2.1-lp150.5.3.1 mpich-ofi-debugsource-3.2.1-lp150.5.3.1 mpich-ofi-devel-3.2.1-lp150.5.3.1 mpich-ofi-gnu-hpc-3.2.1-lp150.5.3.1 mpich-ofi-gnu-hpc-devel-3.2.1-lp150.5.3.1 mpich-ofi-gnu-hpc-devel-static-3.2.1-lp150.5.3.1 mpich-ofi_3_2_1-gnu-hpc-3.2.1-lp150.5.3.1 mpich-ofi_3_2_1-gnu-hpc-debuginfo-3.2.1-lp150.5.3.1 mpich-ofi_3_2_1-gnu-hpc-debugsource-3.2.1-lp150.5.3.1 mpich-ofi_3_2_1-gnu-hpc-devel-3.2.1-lp150.5.3.1 mpich-ofi_3_2_1-gnu-hpc-devel-static-3.2.1-lp150.5.3.1 mpich-ofi_3_2_1-gnu-hpc-macros-devel-3.2.1-lp150.5.3.1 mpich_3_2_1-gnu-hpc-3.2.1-lp150.5.3.1 mpich_3_2_1-gnu-hpc-debuginfo-3.2.1-lp150.5.3.1 mpich_3_2_1-gnu-hpc-debugsource-3.2.1-lp150.5.3.1 mpich_3_2_1-gnu-hpc-devel-3.2.1-lp150.5.3.1 mpich_3_2_1-gnu-hpc-devel-static-3.2.1-lp150.5.3.1 mpich_3_2_1-gnu-hpc-macros-devel-3.2.1-lp150.5.3.1 - openSUSE Leap 15.0 (noarch): mpich-gnu-hpc-macros-devel-3.2.1-lp150.5.3.1 mpich-ofi-gnu-hpc-macros-devel-3.2.1-lp150.5.3.1 References: https://bugzilla.suse.com/1098653

1 0

openSUSE-RU-2018:3134-1: Recommended update for sudo
by maintenance＠opensuse.org 12 Oct '18

12 Oct '18

openSUSE Recommended Update: Recommended update for sudo ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3134-1 Rating: low References: #1053911 #1071379 #1098628 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for sudo provides the following fixes: - Fix double free if ipa_hostname is not fully qualified. (bsc#1098628) - Disable insults by default at build time. For new installations this was done via sudoers file, but when upgrading from previous versions it would accidentally be enabled. (bsc#1053911) - Remove not needed sudoers.dist file. (bsc#1071379) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1158=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): sudo-1.8.20p2-2.3.1 sudo-debuginfo-1.8.20p2-2.3.1 sudo-debugsource-1.8.20p2-2.3.1 sudo-devel-1.8.20p2-2.3.1 sudo-test-1.8.20p2-2.3.1 References: https://bugzilla.suse.com/1053911 https://bugzilla.suse.com/1071379 https://bugzilla.suse.com/1098628

1 0

openSUSE-RU-2018:3132-1: moderate: Recommended update for retext
by maintenance＠opensuse.org 12 Oct '18

12 Oct '18

openSUSE Recommended Update: Recommended update for retext ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3132-1 Rating: moderate References: #1040433 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for retext fixes the following issues: - ReText could not be launched from the KDE Application launcher (boo#1040433) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1159=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1159=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2018-1159=1 Package List: - openSUSE Leap 42.3 (noarch): retext-6.0.0-4.3.1 - openSUSE Leap 15.0 (noarch): retext-6.0.0-lp150.2.3.1 - openSUSE Backports SLE-15 (noarch): retext-6.0.0-bp150.3.3.1 References: https://bugzilla.suse.com/1040433

1 0

openSUSE-SU-2018:3110-1: moderate: Security update for libxml2
by opensuse-security＠opensuse.org 12 Oct '18

12 Oct '18

openSUSE Security Update: Security update for libxml2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:3110-1 Rating: moderate References: #1088279 #1102046 #1105166 Cross-References: CVE-2018-14404 CVE-2018-14567 CVE-2018-9251 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for libxml2 fixes the following security issues: - CVE-2018-9251: The xz_decomp function allowed remote attackers to cause a denial of service (infinite loop) via a crafted XML file that triggers LZMA_MEMLIMIT_ERROR, as demonstrated by xmllint (bsc#1088279) - CVE-2018-14567: Prevent denial of service (infinite loop) via a crafted XML file that triggers LZMA_MEMLIMIT_ERROR, as demonstrated by xmllint (bsc#1105166) - CVE-2018-14404: Prevent NULL pointer dereference in the xmlXPathCompOpEval() function when parsing an invalid XPath expression in the XPATH_OP_AND or XPATH_OP_OR case leading to a denial of service attack (bsc#1102046) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1150=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libxml2-2-2.9.7-lp150.2.3.1 libxml2-2-debuginfo-2.9.7-lp150.2.3.1 libxml2-debugsource-2.9.7-lp150.2.3.1 libxml2-devel-2.9.7-lp150.2.3.1 libxml2-tools-2.9.7-lp150.2.3.1 libxml2-tools-debuginfo-2.9.7-lp150.2.3.1 python-libxml2-python-debugsource-2.9.7-lp150.2.3.1 python2-libxml2-python-2.9.7-lp150.2.3.1 python2-libxml2-python-debuginfo-2.9.7-lp150.2.3.1 python3-libxml2-python-2.9.7-lp150.2.3.1 python3-libxml2-python-debuginfo-2.9.7-lp150.2.3.1 - openSUSE Leap 15.0 (noarch): libxml2-doc-2.9.7-lp150.2.3.1 - openSUSE Leap 15.0 (x86_64): libxml2-2-32bit-2.9.7-lp150.2.3.1 libxml2-2-32bit-debuginfo-2.9.7-lp150.2.3.1 libxml2-devel-32bit-2.9.7-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-14404.html https://www.suse.com/security/cve/CVE-2018-14567.html https://www.suse.com/security/cve/CVE-2018-9251.html https://bugzilla.suse.com/1088279 https://bugzilla.suse.com/1102046 https://bugzilla.suse.com/1105166

1 0

openSUSE-SU-2018:3109-1: important: Security update for git
by opensuse-security＠opensuse.org 12 Oct '18

12 Oct '18

openSUSE Security Update: Security update for git ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:3109-1 Rating: important References: #1110949 Cross-References: CVE-2018-17456 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for git fixes the following issues: - CVE-2018-17456: Git allowed remote code execution during processing of a recursive "git clone" of a superproject if a .gitmodules file has a URL field beginning with a '-' character. (boo#1110949). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1147=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): git-2.13.7-16.1 git-arch-2.13.7-16.1 git-core-2.13.7-16.1 git-core-debuginfo-2.13.7-16.1 git-credential-gnome-keyring-2.13.7-16.1 git-credential-gnome-keyring-debuginfo-2.13.7-16.1 git-cvs-2.13.7-16.1 git-daemon-2.13.7-16.1 git-daemon-debuginfo-2.13.7-16.1 git-debugsource-2.13.7-16.1 git-email-2.13.7-16.1 git-gui-2.13.7-16.1 git-svn-2.13.7-16.1 git-svn-debuginfo-2.13.7-16.1 git-web-2.13.7-16.1 gitk-2.13.7-16.1 - openSUSE Leap 42.3 (noarch): git-doc-2.13.7-16.1 References: https://www.suse.com/security/cve/CVE-2018-17456.html https://bugzilla.suse.com/1110949

1 0

openSUSE-SU-2018:3108-1: moderate: Security update for mgetty
by opensuse-security＠opensuse.org 12 Oct '18

12 Oct '18

openSUSE Security Update: Security update for mgetty ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:3108-1 Rating: moderate References: #1108752 #1108756 #1108757 #1108761 #1108762 Cross-References: CVE-2018-16741 CVE-2018-16742 CVE-2018-16743 CVE-2018-16744 CVE-2018-16745 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for mgetty fixes the following issues: - CVE-2018-16741: Fixed a command injection in fax/faxq-helper.c (boo#1108752) - CVE-2018-16742: Stack-based buffer overflow in contrib/scrts.c triggered via command line parameter (boo#1108762) - CVE-2018-16743: Stack-based buffer overflow with long username in contrib/next-login/login.c (boo#1108761) - CVE-2018-16744: Command injection in faxrec.c (boo#1108757) - CVE-2018-16745: Stack-based buffer overflow in fax_notify_mail() in faxrec.c (boo#1108756) - sets maximum length of a string to prevent buffer overflow and thus possible command injection - The obsolete contrib/scrts.c tool was deleted, which contained a buffer overflow. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1144=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): g3utils-1.1.36-65.3.1 g3utils-debuginfo-1.1.36-65.3.1 mgetty-1.1.36-65.3.1 mgetty-debuginfo-1.1.36-65.3.1 mgetty-debugsource-1.1.36-65.3.1 sendfax-1.1.36-65.3.1 sendfax-debuginfo-1.1.36-65.3.1 References: https://www.suse.com/security/cve/CVE-2018-16741.html https://www.suse.com/security/cve/CVE-2018-16742.html https://www.suse.com/security/cve/CVE-2018-16743.html https://www.suse.com/security/cve/CVE-2018-16744.html https://www.suse.com/security/cve/CVE-2018-16745.html https://bugzilla.suse.com/1108752 https://bugzilla.suse.com/1108756 https://bugzilla.suse.com/1108757 https://bugzilla.suse.com/1108761 https://bugzilla.suse.com/1108762

1 0

openSUSE-SU-2018:3107-1: moderate: Security update for libxml2
by opensuse-security＠opensuse.org 12 Oct '18

12 Oct '18

openSUSE Security Update: Security update for libxml2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:3107-1 Rating: moderate References: #1088279 #1088601 #1102046 #1105166 Cross-References: CVE-2017-18258 CVE-2018-14404 CVE-2018-14567 CVE-2018-9251 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for libxml2 fixes the following security issues: - CVE-2018-9251: The xz_decomp function allowed remote attackers to cause a denial of service (infinite loop) via a crafted XML file that triggers LZMA_MEMLIMIT_ERROR, as demonstrated by xmllint (bsc#1088279). - CVE-2018-14567: Prevent denial of service (infinite loop) via a crafted XML file that triggers LZMA_MEMLIMIT_ERROR, as demonstrated by xmllint (bsc#1105166). - CVE-2018-14404: Prevent NULL pointer dereference in the xmlXPathCompOpEval() function when parsing an invalid XPath expression in the XPATH_OP_AND or XPATH_OP_OR case leading to a denial of service attack (bsc#1102046). - CVE-2017-18258: The xz_head function allowed remote attackers to cause a denial of service (memory consumption) via a crafted LZMA file, because the decoder functionality did not restrict memory usage to what is required for a legitimate file (bsc#1088601). This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1149=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libxml2-2-2.9.4-18.1 libxml2-2-debuginfo-2.9.4-18.1 libxml2-debugsource-2.9.4-18.1 libxml2-devel-2.9.4-18.1 libxml2-tools-2.9.4-18.1 libxml2-tools-debuginfo-2.9.4-18.1 python-libxml2-2.9.4-18.1 python-libxml2-debuginfo-2.9.4-18.1 python-libxml2-debugsource-2.9.4-18.1 - openSUSE Leap 42.3 (x86_64): libxml2-2-32bit-2.9.4-18.1 libxml2-2-debuginfo-32bit-2.9.4-18.1 libxml2-devel-32bit-2.9.4-18.1 - openSUSE Leap 42.3 (noarch): libxml2-doc-2.9.4-18.1 References: https://www.suse.com/security/cve/CVE-2017-18258.html https://www.suse.com/security/cve/CVE-2018-14404.html https://www.suse.com/security/cve/CVE-2018-14567.html https://www.suse.com/security/cve/CVE-2018-9251.html https://bugzilla.suse.com/1088279 https://bugzilla.suse.com/1088601 https://bugzilla.suse.com/1102046 https://bugzilla.suse.com/1105166

1 0

openSUSE-SU-2018:3106-1: moderate: Security update for soundtouch
by opensuse-security＠opensuse.org 12 Oct '18

12 Oct '18

openSUSE Security Update: Security update for soundtouch ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:3106-1 Rating: moderate References: #1103676 Cross-References: CVE-2018-1000223 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for soundtouch fixes the following security issue: - CVE-2018-1000223: Prevent buffer overflow in WavInFile::readHeaderBlock() that could have resulted in arbitrary code execution when opening maliocius file in soundstretch utility (bsc#1103676) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1146=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libSoundTouch0-1.8.0-lp150.2.3.1 libSoundTouch0-debuginfo-1.8.0-lp150.2.3.1 soundtouch-1.8.0-lp150.2.3.1 soundtouch-debuginfo-1.8.0-lp150.2.3.1 soundtouch-debugsource-1.8.0-lp150.2.3.1 soundtouch-devel-1.8.0-lp150.2.3.1 - openSUSE Leap 15.0 (x86_64): libSoundTouch0-32bit-1.8.0-lp150.2.3.1 libSoundTouch0-32bit-debuginfo-1.8.0-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-1000223.html https://bugzilla.suse.com/1103676

1 0

openSUSE-SU-2018:3105-1: moderate: Security update for moinmoin-wiki
by opensuse-security＠opensuse.org 12 Oct '18

12 Oct '18

openSUSE Security Update: Security update for moinmoin-wiki ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:3105-1 Rating: moderate References: #1111104 Cross-References: CVE-2017-5934 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for moinmoin-wiki to version 1.9.10 fixes the following security issue: - CVE-2017-5934: Cross-site scripting vulnerability in the GUI editor (boo#1111104) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1145=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1145=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2018-1145=1 Package List: - openSUSE Leap 42.3 (noarch): moinmoin-wiki-1.9.10-4.4.1 - openSUSE Leap 15.0 (noarch): moinmoin-wiki-1.9.10-lp150.2.4.1 - openSUSE Backports SLE-15 (noarch): moinmoin-wiki-1.9.10-bp150.3.4.1 References: https://www.suse.com/security/cve/CVE-2017-5934.html https://bugzilla.suse.com/1111104

1 0

openSUSE-SU-2018:3104-1: moderate: Security update for postgresql10
by opensuse-security＠opensuse.org 12 Oct '18

12 Oct '18

openSUSE Security Update: Security update for postgresql10 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:3104-1 Rating: moderate References: #1108308 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for brings postgresql10 version 10.5 to openSUSE Leap 42.3. (FATE#325659 bnc#1108308) This release marks the change of the versioning scheme for PostgreSQL to a "x.y" format. This means the next minor releases of PostgreSQL will be 10.1, 10.2, ... and the next major release will be 11. * Logical Replication Logical replication extends the current replication features of PostgreSQL with the ability to send modifications on a per-database and per-table level to different PostgreSQL databases. Users can now fine-tune the data replicated to various database clusters and will have the ability to perform zero-downtime upgrades to future major PostgreSQL versions. * Declarative Table Partitioning Table partitioning has existed for years in PostgreSQL but required a user to maintain a nontrivial set of rules and triggers for the partitioning to work. PostgreSQL 10 introduces a table partitioning syntax that lets users easily create and maintain range and list partitioned tables. * Improved Query Parallelism PostgreSQL 10 provides better support for parallelized queries by allowing more parts of the query execution process to be parallelized. Improvements include additional types of data scans that are parallelized as well as optimizations when the data is recombined, such as pre-sorting. These enhancements allow results to be returned more quickly. * Quorum Commit for Synchronous Replication PostgreSQL 10 introduces quorum commit for synchronous replication, which allows for flexibility in how a primary database receives acknowledgement that changes were successfully written to remote replicas. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1148=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libecpg6-10.5-2.1 libecpg6-debuginfo-10.5-2.1 libpq5-10.5-2.1 libpq5-debuginfo-10.5-2.1 postgresql10-10.5-2.1 postgresql10-contrib-10.5-2.1 postgresql10-contrib-debuginfo-10.5-2.1 postgresql10-debuginfo-10.5-2.1 postgresql10-debugsource-10.5-2.1 postgresql10-devel-10.5-2.1 postgresql10-devel-debuginfo-10.5-2.1 postgresql10-libs-debugsource-10.5-2.1 postgresql10-plperl-10.5-2.1 postgresql10-plperl-debuginfo-10.5-2.1 postgresql10-plpython-10.5-2.1 postgresql10-plpython-debuginfo-10.5-2.1 postgresql10-pltcl-10.5-2.1 postgresql10-pltcl-debuginfo-10.5-2.1 postgresql10-server-10.5-2.1 postgresql10-server-debuginfo-10.5-2.1 postgresql10-test-10.5-2.1 - openSUSE Leap 42.3 (x86_64): libecpg6-32bit-10.5-2.1 libecpg6-debuginfo-32bit-10.5-2.1 libpq5-32bit-10.5-2.1 libpq5-debuginfo-32bit-10.5-2.1 - openSUSE Leap 42.3 (noarch): postgresql-init-10-16.3.1 postgresql10-docs-10.5-2.1 References: https://bugzilla.suse.com/1108308

1 0

openSUSE-SU-2018:3103-1: important: Security update for java-1_8_0-openjdk
by opensuse-security＠opensuse.org 12 Oct '18

12 Oct '18

openSUSE Security Update: Security update for java-1_8_0-openjdk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:3103-1 Rating: important References: #1101644 #1101645 #1101651 #1101656 #1106812 Cross-References: CVE-2018-2938 CVE-2018-2940 CVE-2018-2952 CVE-2018-2973 CVE-2018-3639 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for java-1_8_0-openjdk to the jdk8u181 (icedtea 3.9.0) release fixes the following issues: These security issues were fixed: - CVE-2018-2938: Difficult to exploit vulnerability allowed unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in takeover of Java SE (bsc#1101644). - CVE-2018-2940: Vulnerability in subcomponent: Libraries. Easily exploitable vulnerability allowed unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data (bsc#1101645) - CVE-2018-2952: Vulnerability in subcomponent: Concurrency. Difficult to exploit vulnerability allowed unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit (bsc#1101651) - CVE-2018-2973: Vulnerability in subcomponent: JSSE. Difficult to exploit vulnerability allowed unauthenticated attacker with network access via SSL/TLS to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data (bsc#1101656) These non-security issues were fixed: - Improve desktop file usage - Better Internet address support - speculative traps break when classes are redefined - sun/security/pkcs11/ec/ReadCertificates.java fails intermittently - Clean up code that saves the previous versions of redefined classes - Prevent SIGSEGV in ReceiverTypeData::clean_weak_klass_links - RedefineClasses() tests fail assert(((Metadata*)obj)->is_valid()) failed: obj is valid - NMT is not enabled if NMT option is specified after class path specifiers - EndEntityChecker should not process custom extensions after PKIX validation - SupportedDSAParamGen.java failed with timeout - Montgomery multiply intrinsic should use correct name - When determining the ciphersuite lists, there is no debug output for disabled suites. - sun/security/mscapi/SignedObjectChain.java fails on Windows - On Windows Swing changes keyboard layout on a window activation - IfNode::range_check_trap_proj() should handler dying subgraph with single if proj - Even better Internet address support - Newlines in JAXB string values of SOAP-requests are escaped to "
" - TestFlushableGZIPOutputStream failing with IndexOutOfBoundsException - Unable to use JDWP API in JDK 8 to debug JDK 9 VM - Hotspot crash on Cassandra 3.11.1 startup with libnuma 2.0.3 - Performance drop with Java JDK 1.8.0_162-b32 - Upgrade time-zone data to tzdata2018d - Fix potential crash in BufImg_SetupICM - JDK 8u181 l10n resource file update - Remove debug print statements from RMI fix - (tz) Upgrade time-zone data to tzdata2018e - ObjectInputStream filterCheck method throws NullPointerException - adjust reflective access checks This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1143=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): java-1_8_0-openjdk-1.8.0.181-27.1 java-1_8_0-openjdk-accessibility-1.8.0.181-27.1 java-1_8_0-openjdk-debuginfo-1.8.0.181-27.1 java-1_8_0-openjdk-debugsource-1.8.0.181-27.1 java-1_8_0-openjdk-demo-1.8.0.181-27.1 java-1_8_0-openjdk-demo-debuginfo-1.8.0.181-27.1 java-1_8_0-openjdk-devel-1.8.0.181-27.1 java-1_8_0-openjdk-devel-debuginfo-1.8.0.181-27.1 java-1_8_0-openjdk-headless-1.8.0.181-27.1 java-1_8_0-openjdk-headless-debuginfo-1.8.0.181-27.1 java-1_8_0-openjdk-src-1.8.0.181-27.1 - openSUSE Leap 42.3 (noarch): java-1_8_0-openjdk-javadoc-1.8.0.181-27.1 References: https://www.suse.com/security/cve/CVE-2018-2938.html https://www.suse.com/security/cve/CVE-2018-2940.html https://www.suse.com/security/cve/CVE-2018-2952.html https://www.suse.com/security/cve/CVE-2018-2973.html https://www.suse.com/security/cve/CVE-2018-3639.html https://bugzilla.suse.com/1101644 https://bugzilla.suse.com/1101645 https://bugzilla.suse.com/1101651 https://bugzilla.suse.com/1101656 https://bugzilla.suse.com/1106812

1 0

openSUSE-SU-2018:3094-1: important: Security update for ImageMagick
by opensuse-security＠opensuse.org 11 Oct '18

11 Oct '18

openSUSE Security Update: Security update for ImageMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:3094-1 Rating: important References: #1105592 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for ImageMagick fixes the following issues: - Allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading these filetypes only by default security policy (bsc#1105592) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1142=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): ImageMagick-7.0.7.34-lp150.2.18.1 ImageMagick-debuginfo-7.0.7.34-lp150.2.18.1 ImageMagick-debugsource-7.0.7.34-lp150.2.18.1 ImageMagick-devel-7.0.7.34-lp150.2.18.1 ImageMagick-extra-7.0.7.34-lp150.2.18.1 ImageMagick-extra-debuginfo-7.0.7.34-lp150.2.18.1 libMagick++-7_Q16HDRI4-7.0.7.34-lp150.2.18.1 libMagick++-7_Q16HDRI4-debuginfo-7.0.7.34-lp150.2.18.1 libMagick++-devel-7.0.7.34-lp150.2.18.1 libMagickCore-7_Q16HDRI6-7.0.7.34-lp150.2.18.1 libMagickCore-7_Q16HDRI6-debuginfo-7.0.7.34-lp150.2.18.1 libMagickWand-7_Q16HDRI6-7.0.7.34-lp150.2.18.1 libMagickWand-7_Q16HDRI6-debuginfo-7.0.7.34-lp150.2.18.1 perl-PerlMagick-7.0.7.34-lp150.2.18.1 perl-PerlMagick-debuginfo-7.0.7.34-lp150.2.18.1 - openSUSE Leap 15.0 (noarch): ImageMagick-doc-7.0.7.34-lp150.2.18.1 - openSUSE Leap 15.0 (x86_64): ImageMagick-devel-32bit-7.0.7.34-lp150.2.18.1 libMagick++-7_Q16HDRI4-32bit-7.0.7.34-lp150.2.18.1 libMagick++-7_Q16HDRI4-32bit-debuginfo-7.0.7.34-lp150.2.18.1 libMagick++-devel-32bit-7.0.7.34-lp150.2.18.1 libMagickCore-7_Q16HDRI6-32bit-7.0.7.34-lp150.2.18.1 libMagickCore-7_Q16HDRI6-32bit-debuginfo-7.0.7.34-lp150.2.18.1 libMagickWand-7_Q16HDRI6-32bit-7.0.7.34-lp150.2.18.1 libMagickWand-7_Q16HDRI6-32bit-debuginfo-7.0.7.34-lp150.2.18.1 References: https://bugzilla.suse.com/1105592

1 0

openSUSE-RU-2018:3077-1: Recommended update for kupfer
by maintenance＠opensuse.org 09 Oct '18

09 Oct '18

openSUSE Recommended Update: Recommended update for kupfer ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3077-1 Rating: low References: #1102282 Affected Products: openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for kupfer fixes the following issue: - the kupfer package did not specify some of its run-time dependencies (boo#1102282) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1141=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2018-1141=1 Package List: - openSUSE Leap 15.0 (noarch): kupfer-319-lp150.2.4.1 - openSUSE Backports SLE-15 (noarch): kupfer-319-bp150.2.3.1 References: https://bugzilla.suse.com/1102282

1 0

openSUSE-SU-2018:3071-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 08 Oct '18

08 Oct '18

openSUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:3071-1 Rating: important References: #1012382 #1031392 #1043912 #1044189 #1046302 #1046305 #1046306 #1046307 #1046543 #1050244 #1051510 #1054914 #1055014 #1055117 #1055120 #1058659 #1060463 #1061840 #1064232 #1065600 #1065729 #1068032 #1069138 #1071995 #1077761 #1077989 #1078720 #1080157 #1082519 #1082555 #1083647 #1083663 #1084332 #1085030 #1085042 #1085262 #1086282 #1086327 #1089663 #1090078 #1090528 #1092903 #1093389 #1094244 #1095344 #1096748 #1097105 #1097583 #1097584 #1097585 #1097586 #1097587 #1097588 #1098459 #1098782 #1098822 #1099922 #1099999 #1100000 #1100001 #1100132 #1101480 #1101557 #1101669 #1101822 #1102346 #1102495 #1102517 #1102715 #1102870 #1102875 #1102877 #1102879 #1102882 #1102896 #1103269 #1103363 #1103387 #1103405 #1103421 #1103587 #1103636 #1103948 #1103949 #1103961 #1104172 #1104353 #1104365 #1104482 #1104683 #1104708 #1104824 #1104888 #1104890 #1104897 #1105190 #1105247 #1105292 #1105296 #1105322 #1105355 #1105378 #1105396 #1105467 #1105524 #1105536 #1105597 #1105603 #1105672 #1105731 #1105795 #1105907 #1106007 #1106016 #1106105 #1106121 #1106170 #1106178 #1106229 #1106230 #1106231 #1106233 #1106235 #1106236 #1106237 #1106238 #1106240 #1106291 #1106297 #1106333 #1106369 #1106426 #1106427 #1106464 #1106509 #1106511 #1106594 #1106636 #1106688 #1106697 #1106743 #1106779 #1106800 #1106890 #1106891 #1106892 #1106893 #1106894 #1106896 #1106897 #1106898 #1106899 #1106900 #1106901 #1106902 #1106903 #1106905 #1106906 #1106948 #1106995 #1107008 #1107060 #1107061 #1107065 #1107073 #1107074 #1107078 #1107265 #1107319 #1107320 #1107522 #1107535 #1107689 #1107735 #1107756 #1107783 #1107829 #1107870 #1107924 #1107928 #1107945 #1107947 #1107966 #1108010 #1108093 #1108096 #1108170 #1108243 #1108281 #1108323 #1108399 #1108520 #1108823 #1108870 #1109244 #1109269 #1109333 #1109336 #1109337 #1109511 #1109603 #1109806 #1109859 #1109979 #1109992 #1110006 #1110301 #1110363 #1110639 #1110642 #1110643 #1110644 #1110645 #1110646 #1110647 #1110649 #1110650 #1110716 #971975 Cross-References: CVE-2018-10902 CVE-2018-10938 CVE-2018-10940 CVE-2018-1128 CVE-2018-1129 CVE-2018-12896 CVE-2018-13093 CVE-2018-13094 CVE-2018-13095 CVE-2018-14613 CVE-2018-14617 CVE-2018-14633 CVE-2018-15572 CVE-2018-16658 CVE-2018-17182 CVE-2018-6554 CVE-2018-6555 CVE-2018-9363 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves 18 vulnerabilities and has 201 fixes is now available. Description: The openSUSE Leap 15.0 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-14633: A security flaw was found in the chap_server_compute_md5() function in the ISCSI target code in a way an authentication request from an ISCSI initiator is processed. An unauthenticated remote attacker can cause a stack buffer overflow and smash up to 17 bytes of the stack. The attack requires the iSCSI target to be enabled on the victim host. Depending on how the target's code was built (i.e. depending on a compiler, compile flags and hardware architecture) an attack may lead to a system crash and thus to a denial-of-service or possibly to a non-authorized access to data exported by an iSCSI target. Due to the nature of the flaw, privilege escalation cannot be fully ruled out, although we believe it is highly unlikely. Kernel versions 4.18.x, 4.14.x and 3.10.x are believed to be vulnerable (bnc#1107829). - CVE-2018-17182: The vmacache_flush_all function in mm/vmacache.c mishandled sequence number overflows. An attacker can trigger a use-after-free (and possibly gain privileges) via certain thread creation, map, unmap, invalidation, and dereference operations (bnc#1108399). - CVE-2018-14617: There is a NULL pointer dereference and panic in hfsplus_lookup() in fs/hfsplus/dir.c when opening a file (that is purportedly a hard link) in an hfs+ filesystem that has malformed catalog data, and is mounted read-only without a metadata directory (bnc#1102870). - CVE-2018-14613: There is an invalid pointer dereference in io_ctl_map_page() when mounting and operating a crafted btrfs image, because of a lack of block group item validation in check_leaf_item in fs/btrfs/tree-checker.c (bnc#1102896). - CVE-2018-10940: The cdrom_ioctl_media_changed function in drivers/cdrom/cdrom.c allowed local attackers to use a incorrect bounds check in the CDROM driver CDROM_MEDIA_CHANGED ioctl to read out kernel memory (bnc#1092903). - CVE-2018-13093: There is a NULL pointer dereference and panic in lookup_slow() on a NULL inode->i_ops pointer when doing pathwalks on a corrupted xfs image. This occurs because of a lack of proper validation that cached inodes are free during allocation (bnc#1100001). - CVE-2018-13094: An OOPS may occur for a corrupted xfs image after xfs_da_shrink_inode() is called with a NULL bp (bnc#1100000). - CVE-2018-13095: A denial of service (memory corruption and BUG) can occur for a corrupted xfs image upon encountering an inode that is in extent format, but has more extents than fit in the inode fork (bnc#1099999). - CVE-2018-12896: An Integer Overflow in kernel/time/posix-timers.c in the POSIX timer code is caused by the way the overrun accounting works. Depending on interval and expiry time values, the overrun can be larger than INT_MAX, but the accounting is int based. This basically made the accounting values, which are visible to user space via timer_getoverrun(2) and siginfo::si_overrun, random. For example, a local user can cause a denial of service (signed integer overflow) via crafted mmap, futex, timer_create, and timer_settime system calls (bnc#1099922). - CVE-2018-16658: An information leak in cdrom_ioctl_drive_status in drivers/cdrom/cdrom.c could be used by local attackers to read kernel memory because a cast from unsigned long to int interferes with bounds checking. This is similar to CVE-2018-10940 (bnc#1107689). - CVE-2018-6555: The irda_setsockopt function allowed local users to cause a denial of service (ias_object use-after-free and system crash) or possibly have unspecified other impact via an AF_IRDA socket (bnc#1106511). - CVE-2018-6554: Memory leak in the irda_bind function kernel allowed local users to cause a denial of service (memory consumption) by repeatedly binding an AF_IRDA socket (bnc#1106509). - CVE-2018-1129: An attacker having access to ceph cluster network who is able to alter the message payload was able to bypass signature checks done by cephx protocol. Ceph branches master, mimic, luminous and jewel are believed to be vulnerable (bnc#1096748). - CVE-2018-1128: It was found that cephx authentication protocol did not verify ceph clients correctly and was vulnerable to replay attack. Any attacker having access to ceph cluster network who is able to sniff packets on network can use this vulnerability to authenticate with ceph service and perform actions allowed by ceph service. Ceph branches master, mimic, luminous and jewel are believed to be vulnerable (bnc#1096748). - CVE-2018-10938: A crafted network packet sent remotely by an attacker may force the kernel to enter an infinite loop in the cipso_v4_optptr() function in net/ipv4/cipso_ipv4.c leading to a denial-of-service. A certain non-default configuration of LSM (Linux Security Module) and NetLabel should be set up on a system before an attacker could leverage this flaw (bnc#1106016). - CVE-2018-15572: The spectre_v2_select_mitigation function in arch/x86/kernel/cpu/bugs.c did not always fill RSB upon a context switch, which made it easier for attackers to conduct userspace-userspace spectreRSB attacks (bnc#1102517 bnc#1105296). - CVE-2018-10902: It was found that the raw midi kernel driver did not protect against concurrent access which leads to a double realloc (double free) in snd_rawmidi_input_params() and snd_rawmidi_output_status() which are part of snd_rawmidi_ioctl() handler in rawmidi.c file. A malicious local attacker could possibly use this for privilege escalation (bnc#1105322). - CVE-2018-9363: A buffer overflow in bluetooth HID report processing could be used by malicious bluetooth devices to crash the kernel or potentially execute code (bnc#1105292). The following non-security bugs were fixed: - 9p: fix multiple NULL-pointer-dereferences (bsc#1051510). - 9p/net: Fix zero-copy path in the 9p virtio transport (bsc#1051510). - 9p/virtio: fix off-by-one error in sg list bounds check (bsc#1051510). - ACPI / APEI: Remove ghes_ioremap_area (bsc#1051510). - ACPI / bus: Only call dmi_check_system on X86 (bsc#1105597, bsc#1106178). - ACPICA: iasl: Add SMMUv3 device ID mapping index support (bsc#1103387). - ACPI / EC: Add another entry for Thinkpad X1 Carbon 6th (bsc#1051510). - ACPI / EC: Add parameter to force disable the GPE on suspend (bsc#1051510). - ACPI / EC: Use ec_no_wakeup on more Thinkpad X1 Carbon 6th systems (bsc#1051510). - ACPI / EC: Use ec_no_wakeup on Thinkpad X1 Carbon 6th (bsc#1051510). - ACPI / EC: Use ec_no_wakeup on ThinkPad X1 Yoga 3rd (bsc#1051510). - ACPI/IORT: Remove temporary iort_get_id_mapping_index() ACPICA guard (bsc#1103387). - ACPI / pci: Bail early in acpi_pci_add_bus() if there is no ACPI handle (bsc#1051510). - ACPI / pci: pci_link: Allow the absence of _PRS and change log level (bsc#1104172). - ACPI/pci: pci_link: reduce verbosity when IRQ is enabled (bsc#1104172). - ACPI / PM: save NVS memory for ASUS 1025C laptop (bsc#1051510). - ACPI / scan: Initialize status to ACPI_STA_DEFAULT (bsc#1051510). - affs_lookup(): close a race with affs_remove_link() (bsc#1105355). - ahci: Add Intel Ice Lake LP PCI ID (bsc#1051510). - ALSA: bebob: fix memory leak for M-Audio FW1814 and ProjectMix I/O at error path (bsc#1051510). - ALSA: bebob: use address returned by kmalloc() instead of kernel stack for streaming DMA mapping (bsc#1051510). - ALSA: cs46xx: Deliver indirect-PCM transfer error (). - ALSA: cs5535audio: Fix invalid endian conversion (bsc#1051510). - ALSA: emu10k1: Deliver indirect-PCM transfer error (). - ALSA: emu10k1: fix possible info leak to userspace on SNDRV_EMU10K1_IOCTL_INFO (bsc#1051510). - ALSA: fireface: fix memory leak in ff400_switch_fetching_mode() (bsc#1051510). - ALSA: firewire-digi00x: fix memory leak of private data (bsc#1051510). - ALSA: firewire-tascam: fix memory leak of private data (bsc#1051510). - ALSA: fireworks: fix memory leak of response buffer at error path (bsc#1051510). - ALSA: hda: Add AZX_DCAPS_PM_RUNTIME for AMD Raven Ridge (bsc#1051510). - ALSA: hda: Correct Asrock B85M-ITX power_save blacklist entry (bsc#1051510). - ALSA: hda - Fix cancel_work_sync() stall from jackpoll work (bsc#1051510). - ALSA: hda - Sleep for 10ms after entering D3 on Conexant codecs (bsc#1051510). - ALSA: hda - Turn CX8200 into D3 as well upon reboot (bsc#1051510). - ALSA: memalloc: Do not exceed over the requested size (bsc#1051510). - ALSA: mips: Deliver indirect-PCM transfer error (). - ALSA: msnd: Fix the default sample sizes (bsc#1051510). - ALSA: oxfw: fix memory leak for model-dependent data at error path (bsc#1051510). - ALSA: oxfw: fix memory leak of discovered stream formats at error path (bsc#1051510). - ALSA: oxfw: fix memory leak of private data (bsc#1051510). - ALSA: pcm: Fix negative appl_ptr handling in pcm-indirect helpers (). - ALSA: pcm: Fix snd_interval_refine first/last with open min/max (bsc#1051510). - ALSA: pcm: Simplify forward/rewind codes (). - ALSA: pcm: Use a common helper for PCM state check and hwsync (). - ALSA: pcm: Workaround for weird PulseAudio behavior on rewind error (). - ALSA: rme32: Deliver indirect-PCM transfer error (). - ALSA: snd-aoa: add of_node_put() in error path (bsc#1051510). - ALSA: usb-audio: Fix multiple definitions in AU0828_DEVICE() macro (bsc#1051510). - ALSA: virmidi: Fix too long output trigger loop (bsc#1051510). - ALSA: vx222: Fix invalid endian conversions (bsc#1051510). - ALSA: vxpocket: Fix invalid endian conversions (bsc#1051510). - apparmor: ensure that undecidable profile attachments fail (bsc#1106427). - apparmor: fix an error code in __aa_create_ns() (bsc#1106427). - apparmor: Fix regression in profile conflict logic (bsc#1106427) - apparmor: remove no-op permission check in policy_unpack (bsc#1106427). - arm64/acpi: Create arch specific cpu to acpi id helper (bsc#1106903). - arm64: dma-mapping: clear buffers allocated with FORCE_CONTIGUOUS flag (bsc#1106902). - arm64: enable thunderx gpio driver - arm64: Enforce BBM for huge IO/VMAP mappings (bsc#1106890). - arm64: export memblock_reserve()d regions via /proc/iomem (bsc#1106892). - arm64: fix unwind_frame() for filtered out fn for function graph tracing (bsc#1106900). - arm64: fix vmemmap BUILD_BUG_ON() triggering on !vmemmap setups (bsc#1106896). - arm64: fpsimd: Avoid FPSIMD context leakage for the init task (bsc#1106894). - arm64: Ignore hardware dirty bit updates in ptep_set_wrprotect() (bsc#1108010). - arm64: kasan: avoid pfn_to_nid() before page array is initialized (bsc#1106899). - arm64/kasan: do not allocate extra shadow memory (bsc#1106897). - arm64: Make sure permission updates happen for pmd/pud (bsc#1106891). - arm64: mm: check for upper PAGE_SHIFT bits in pfn_valid() (bsc#1106893). - arm64: mm: Ensure writes to swapper are ordered wrt subsequent cache maintenance (bsc#1106906). - arm64/mm/kasan: do not use vmemmap_populate() to initialize shadow (bsc#1106898). - arm64: numa: rework ACPI NUMA initialization (bsc#1106905). - arm64: Update config files. (bsc#1110716) Enable ST LPS25H pressure sensor. - arm64: vgic-v2: Fix proxying of cpuif access (bsc#1106901). - ARM: 8780/1: ftrace: Only set kernel memory back to read-only after boot (bsc#1051510). - arm/asm/tlb.h: Fix build error implicit func declaration (bnc#1105467 Reduce IPIs and atomic ops with improved lazy TLB). - ARM: DRA7/OMAP5: Enable ACTLR[0] (Enable invalidates of BTB) for secondary cores (bsc#1051510). - ARM: hisi: fix error handling and missing of_node_put (bsc#1051510). - ARM: hisi: handle of_iomap and fix missing of_node_put (bsc#1051510). - ARM: imx: flag failure of of_iomap (bsc#1051510). - ARM: imx_v4_v5_defconfig: Select ULPI support (bsc#1051510). - ARM: imx_v6_v7_defconfig: Select ULPI support (bsc#1051510). - ARM: pxa: irq: fix handling of ICMR registers in suspend/resume (bsc#1051510). - ASoC: cs4265: fix MMTLR Data switch control (bsc#1051510). - ASoC: dapm: Fix potential DAI widget pointer deref when linking DAIs (bsc#1051510). - ASoC: dpcm: do not merge format from invalid codec dai (bsc#1051510). - ASoC: es7134: remove 64kHz rate from the supported rates (bsc#1051510). - ASoC: Intel: cht_bsw_max98090: remove useless code, align with ChromeOS driver (bsc#1051510). - ASoC: Intel: cht_bsw_max98090_ti: Fix jack initialization (bsc#1051510). - ASoC: msm8916-wcd-digital: fix RX2 MIX1 and RX3 MIX1 (bsc#1051510). - ASoC: rsnd: cmd: Add missing newline to debug message (bsc#1051510). - ASoC: rsnd: fixup not to call clk_get/set under non-atomic (bsc#1051510). - ASoC: rsnd: move rsnd_ssi_config_init() execute condition into it (bsc#1051510). - ASoC: rsnd: update pointer more accurate (bsc#1051510). - ASoC: rt5514: Add the I2S ASRC support (bsc#1051510). - ASoC: rt5514: Add the missing register in the readable table (bsc#1051510). - ASoC: rt5514: Eliminate the noise in the ASRC case (bsc#1051510). - ASoC: rt5514: Fix the issue of the delay volume applied (bsc#1051510). - ASoC: sirf: Fix potential NULL pointer dereference (bsc#1051510). - ASoC: wm8994: Fix missing break in switch (bsc#1051510). - ASoC: zte: Fix incorrect PCM format bit usages (bsc#1051510). - ata: Fix ZBC_OUT all bit handling (bsc#1051510). - ata: Fix ZBC_OUT command block check (bsc#1051510). - ata: libahci: Allow reconfigure of DEVSLP register (bsc#1051510). - ata: libahci: Correct setting of DEVSLP register (bsc#1051510). - ath10k: disable bundle mgmt tx completion event support (bsc#1051510). - ath10k: prevent active scans on potential unusable channels (bsc#1051510). - ath10k: update the phymode along with bandwidth change request (bsc#1051510). - ath9k: add MSI support (). - ath9k_hw: fix channel maximum power level test (bsc#1051510). - ath9k: report tx status on EOSP (bsc#1051510). - atm: horizon: Fix irq release error (bsc#1105355). - atm: Preserve value of skb->truesize when accounting to vcc (networking-stable-18_07_19). - atm: zatm: fix memcmp casting (bsc#1105355). - atm: zatm: Fix potential Spectre v1 (networking-stable-18_07_19). - audit: allow not equal op for audit by executable (bsc#1051510). - audit: Fix extended comparison of GID/EGID (bsc#1051510). - ax88179_178a: Check for supported Wake-on-LAN modes (bsc#1051510). - b43/leds: Ensure NUL-termination of LED name string (bsc#1051510). - b43legacy/leds: Ensure NUL-termination of LED name string (bsc#1051510). - bcache: avoid unncessary cache prefetch bch_btree_node_get(). - bcache: calculate the number of incremental GC nodes according to the total of btree nodes. - bcache: display rate debug parameters to 0 when writeback is not running. - bcache: do not check return value of debugfs_create_dir(). - bcache: finish incremental GC. - bcache: fix error setting writeback_rate through sysfs interface. - bcache: fix I/O significant decline while backend devices registering. - bcache: free heap cache_set->flush_btree in bch_journal_free. - bcache: make the pr_err statement used for ENOENT only in sysfs_attatch section. - bcache: release dc->writeback_lock properly in bch_writeback_thread(). - bcache: set max writeback rate when I/O request is idle. - bcache: simplify the calculation of the total amount of flash dirty data. - binfmt_elf: Respect error return from `regset->active' (bsc#1051510). - blkdev: __blkdev_direct_IO_simple: fix leak in error case (bsc#1083663). - blk-mq: avoid to synchronize rcu inside blk_cleanup_queue() (bsc#1077989). - block, bfq: return nbytes and not zero from struct cftype .write() method (bsc#1106238). - block: bio_iov_iter_get_pages: fix size of last iovec (bsc#1083663). - block: bio_iov_iter_get_pages: pin more pages for multi-segment IOs (bsc#1083663). - block, dax: remove dead code in blkdev_writepages() (bsc#1104888). - block: do not print a message when the device went away (bsc#1098459). - block: do not warn for flush on read-only device (bsc#1107756). - block: fix warning when I/O elevator is changed as request_queue is being removed (bsc#1109979). - block: Invalidate cache on discard v2 (bsc#1109992). - block: pass inclusive 'lend' parameter to truncate_inode_pages_range (bsc#1109992). - block: properly protect the 'queue' kobj in blk_unregister_queue (bsc#1109979). - bluetooth: Add a new Realtek 8723DE ID 0bda:b009 (bsc#1051510). - bluetooth: avoid killing an already killed socket (bsc#1051510). - bluetooth: btsdio: Do not bind to non-removable BCM43430 (bsc#1103587). - bluetooth: h5: Fix missing dependency on BT_HCIUART_SERDEV (bsc#1051510). - bluetooth: hidp: buffer overflow in hidp_process_report (bsc#1051510). - bluetooth: hidp: Fix handling of strncpy for hid->name information (bsc#1051510). - bluetooth: Use lock_sock_nested in bt_accept_enqueue (bsc#1051510). - bnxt_en: Clean up unused functions (bsc#1086282). - bnxt_en: Do not adjust max_cp_rings by the ones used by RDMA (bsc#1086282). - bnxt_en: Fix VF mac address regression (bsc#1086282 ). - bnxt_re: Fix couple of memory leaks that could lead to IOMMU call traces (bsc#1050244). - bonding: avoid lockdep confusion in bond_get_stats() (netfilter-stable-18_08_04). - bpf: fix references to free_bpf_prog_info() in comments (bsc#1083647). - bpf: fix uninitialized variable in bpf tools (bsc#1083647). - bpf: hash map: decrement counter on error (bsc#1083647). - bpf: powerpc64: pad function address loads with NOPs (bsc#1083647). - bpf, s390: fix potential memleak when later bpf_jit_prog fails (bsc#1083647). - bpf: use GFP_ATOMIC instead of GFP_KERNEL in bpf_parse_prog() (bsc#1083647). - brcmfmac: stop watchdog before detach and free everything (bsc#1051510). - brcmsmac: fix wrap around in conversion from constant to s16 (bsc#1051510). - btrfs: add a comp_refs() helper (dependency for bsc#1031392). - btrfs: Add checker for EXTENT_CSUM (bsc#1102882, bsc#1102896, bsc#1102879, bsc#1102877, bsc#1102875,). - btrfs: Add sanity check for EXTENT_DATA when reading out leaf (bsc#1102882, bsc#1102896, bsc#1102879, bsc#1102877, bsc#1102875,). - btrfs: add tracepoints for outstanding extents mods (dependency for bsc#1031392). - btrfs: Check if item pointer overlaps with the item itself (bsc#1102882, bsc#1102896, bsc#1102879, bsc#1102877, bsc#1102875,). - btrfs: check-integrity: Fix NULL pointer dereference for degraded mount (bsc#1107947). - btrfs: Check that each block group has corresponding chunk at mount time (bsc#1102882, bsc#1102896, bsc#1102879, bsc#1102877, bsc#1102875,). - btrfs: cleanup extent locking sequence (dependency for bsc#1031392). - btrfs: delayed-inode: Remove wrong qgroup meta reservation calls (bsc#1031392). - btrfs: delayed-inode: Use new qgroup meta rsv for delayed inode and item (bsc#1031392). - btrfs: fix data corruption when deduplicating between different files (bsc#1110647). - btrfs: fix duplicate extents after fsync of file with prealloc extents (bsc#1110644). - btrfs: fix error handling in btrfs_dev_replace_start (bsc#1107535). - btrfs: fix fsync after hole punching when using no-holes feature (bsc#1110642). - btrfs: fix loss of prealloc extents past i_size after fsync log replay (bsc#1110643). - btrfs: fix return value on rename exchange failure (bsc#1110645). - btrfs: fix send failure when root has deleted files still open (bsc#1110650). - btrfs: Fix use-after-free when cleaning up fs_devs with a single stale device (bsc#1097105). - btrfs: Fix wrong btrfs_delalloc_release_extents parameter (bsc#1031392). - btrfs: Handle error from btrfs_uuid_tree_rem call in _btrfs_ioctl_set_received_subvol (bsc#1097105). - btrfs: Introduce mount time chunk <-> dev extent mapping check (bsc#1102882, bsc#1102896, bsc#1102879, bsc#1102877, bsc#1102875,). - btrfs: log csums for all modified extents (bsc#1110639). - btrfs: make the delalloc block rsv per inode (dependency for bsc#1031392). - btrfs: Manually implement device_total_bytes getter/setter (bsc#1043912). - btrfs: Move leaf and node validation checker to tree-checker.c (bsc#1102882, bsc#1102896, bsc#1102879, bsc#1102877, bsc#1102875,). - btrfs: qgroup: Add quick exit for non-fs extents (dependency for bsc#1031392). - btrfs: qgroup: Cleanup btrfs_qgroup_prepare_account_extents function (dependency for bsc#1031392). - btrfs: qgroup: Cleanup the remaining old reservation counters (bsc#1031392). - btrfs: qgroup: Commit transaction in advance to reduce early EDQUOT (bsc#1031392). - btrfs: qgroup: Do not use root->qgroup_meta_rsv for qgroup (bsc#1031392). - btrfs: qgroup: Fix qgroup reserved space underflow by only freeing reserved ranges (dependency for bsc#1031392). - btrfs: qgroup: Fix qgroup reserved space underflow caused by buffered write and quotas being enabled (dependency for bsc#1031392). - btrfs: qgroup: Fix wrong qgroup reservation update for relationship modification (bsc#1031392). - btrfs: qgroup: Introduce extent changeset for qgroup reserve functions (dependency for bsc#1031392). - btrfs: qgroup: Introduce function to convert META_PREALLOC into META_PERTRANS (bsc#1031392). - btrfs: qgroup: Introduce helpers to update and access new qgroup rsv (bsc#1031392). - btrfs: qgroup: Make qgroup_reserve and its callers to use separate reservation type (bsc#1031392). - btrfs: qgroup: Return actually freed bytes for qgroup release or free data (dependency for bsc#1031392). - btrfs: qgroup: Skeleton to support separate qgroup reservation type (bsc#1031392). - btrfs: qgroup: Split meta rsv type into meta_prealloc and meta_pertrans (bsc#1031392). - btrfs: qgroup: Update trace events for metadata reservation (bsc#1031392). - btrfs: qgroup: Update trace events to use new separate rsv types (bsc#1031392). - btrfs: qgroup: Use independent and accurate per inode qgroup rsv (bsc#1031392). - btrfs: qgroup: Use root::qgroup_meta_rsv_* to record qgroup meta reserved space (bsc#1031392). - btrfs: qgroup: Use separate meta reservation type for delalloc (bsc#1031392). - btrfs: remove type argument from comp_tree_refs (dependency for bsc#1031392). - btrfs: Remove unused parameters from various functions (bsc#1110649). - btrfs: rework outstanding_extents (dependency for bsc#1031392). - btrfs: round down size diff when shrinking/growing device (bsc#1097105). - btrfs: Round down values which are written for total_bytes_size (bsc#1043912). - btrfs: scrub: Do not use inode page cache in scrub_handle_errored_block() (follow up for bsc#1108096). - btrfs: scrub: Do not use inode pages for device replace (follow up for bsc#1108096). - btrfs: switch args for comp_*_refs (dependency for bsc#1031392). - btrfs: sync log after logging new name (bsc#1110646). - btrfs: tests/qgroup: Fix wrong tree backref level (bsc#1107928). - btrfs: tree-checker: Add checker for dir item (bsc#1102882, bsc#1102896, bsc#1102879, bsc#1102877, bsc#1102875,). - btrfs: tree-checker: Detect invalid and empty essential trees (bsc#1102882, bsc#1102896, bsc#1102879, bsc#1102877, bsc#1102875,). - btrfs: tree-checker: Enhance btrfs_check_node output (bsc#1102882, bsc#1102896, bsc#1102879, bsc#1102877, bsc#1102875,). - btrfs: tree-checker: Enhance output for btrfs_check_leaf (bsc#1102882, bsc#1102896, bsc#1102879, bsc#1102877, bsc#1102875,). - btrfs: tree-checker: Enhance output for check_csum_item (bsc#1102882, bsc#1102896, bsc#1102879, bsc#1102877, bsc#1102875,). - btrfs: tree-checker: Enhance output for check_extent_data_item (bsc#1102882, bsc#1102896, bsc#1102879, bsc#1102877, bsc#1102875,). - btrfs: tree-checker: Fix false panic for sanity test (bsc#1102882, bsc#1102896, bsc#1102879, bsc#1102877, bsc#1102875,). - btrfs: tree-checker: Replace root parameter with fs_info (bsc#1102882, bsc#1102896, bsc#1102879, bsc#1102877, bsc#1102875,). - btrfs: tree-checker: use %zu format string for size_t (bsc#1102882, bsc#1102896, bsc#1102879, bsc#1102877, bsc#1102875,). - btrfs: tree-checker: use %zu format string for size_t (bsc#1102882, bsc#1102896, bsc#1102879, bsc#1102877, bsc#1102875,). - btrfs: tree-checker: Verify block_group_item (bsc#1102882, bsc#1102896, bsc#1102879, bsc#1102877, bsc#1102875,). - btrfs: Verify that every chunk has corresponding block group at mount time (bsc#1102882, bsc#1102896, bsc#1102879, bsc#1102877, bsc#1102875,). - cdrom: Fix info leak/OOB read in cdrom_ioctl_drive_status (bsc#1051510). - ceph: fix incorrect use of strncpy (bsc#1107319). - ceph: return errors from posix_acl_equiv_mode() correctly (bsc#1107320). - cfg80211: nl80211_update_ft_ies() to validate NL80211_ATTR_IE (bsc#1051510). - cfg80211: reg: Init wiphy_idx in regulatory_hint_core() (bsc#1051510). - cgroup: avoid copying strings longer than the buffers (bsc#1051510). - cifs: check kmalloc before use (bsc#1051510). - cifs: Fix stack out-of-bounds in smb{2,3}_create_lease_buf() (bsc#1051510). - cifs: store the leaseKey in the fid on SMB2_open (bsc#1051510). - clk: core: Potentially free connection id (bsc#1051510). - clk: imx6ul: fix missing of_node_put() (bsc#1051510). - clk: meson: gxbb: remove HHI_GEN_CLK_CTNL duplicate definition (bsc#1051510). - clk: mvebu: armada-38x: add support for 1866MHz variants (bsc#1105355). - clk: mvebu: armada-38x: add support for missing clocks (bsc#1105355). - clk: rockchip: fix clk_i2sout parent selection bits on rk3399 (bsc#1051510). - cls_matchall: fix tcf_unbind_filter missing (networking-stable-18_08_21). - coresight: Handle errors in finding input/output ports (bsc#1051510). - coresight: tpiu: Fix disabling timeouts (bsc#1051510). - cpufreq: CPPC: Do not set transition_latency (bsc#1101480). - cpufreq / CPPC: Set platform specific transition_delay_us (bsc#1101480). - cpufreq: CPPC: Use transition_delay_us depending transition_latency (bsc#1101480). - cpufreq: remove setting of policy->cpu in policy->cpus during init (bsc#1101480). - crypto: ablkcipher - fix crash flushing dcache in error path (bsc#1051510). - crypto: blkcipher - fix crash flushing dcache in error path (bsc#1051510). - crypto: caam/jr - fix descriptor DMA unmapping (bsc#1051510). - crypto: caam/qi - fix error path in xts setkey (bsc#1051510). - crypto: ccp - Check for NULL PSP pointer at module unload (bsc#1051510). - crypto: ccp - Fix command completion detection race (bsc#1051510). - crypto: clarify licensing of OpenSSL asm code (). - crypto: sharah - Unregister correct algorithms for SAHARA 3 (bsc#1051510). - crypto: skcipher - fix aligning block size in skcipher_copy_iv() (bsc#1051510). - crypto: skcipher - fix crash flushing dcache in error path (bsc#1051510). - crypto: skcipher - Fix -Wstringop-truncation warnings (bsc#1051510). - crypto: vmac - require a block cipher with 128-bit block size (bsc#1051510). - crypto: vmac - separate tfm and request context (bsc#1051510). - crypto: vmx - Fix sleep-in-atomic bugs (bsc#1051510). - crypto: vmx - Use skcipher for ctr fallback to SLE12-SP4 (bsc#1106464). - crypto: x86/sha256-mb - fix digest copy in sha256_mb_mgr_get_comp_job_avx2() (bsc#1051510). - cxgb4: Fix the condition to check if the card is T5 (bsc#1097585 bsc#1097586 bsc#1097587 bsc#1097588 bsc#1097583 bsc#1097584). - cxl: Configure PSL to not use APC virtual machines (bsc#1055014, git-fixes). - cxl: Fix wrong comparison in cxl_adapter_context_get() (bsc#1055014, git-fixes). - dax: Introduce a ->copy_to_iter dax operation (bsc#1098782). - dax: Make extension of dax_operations transparent (bsc#1098782). - dax: remove default copy_from_iter fallback (bsc#1098782). - dax: remove VM_MIXEDMAP for fsdax and device dax (bsc#1106007). - dax: Report bytes remaining in dax_iomap_actor() (bsc#1098782). - dax: require 'struct page' by default for filesystem dax (bsc#1104888). - dax: store pfns in the radix (bsc#1104888). - dccp: fix undefined behavior with 'cwnd' shift in ccid2_cwnd_restart() (netfilter-stable-18_08_17). - devicectree: bindings: fix location of leds common file (bsc#1051510). - device-dax: Add missing address_space_operations (bsc#1107783). - device-dax: Enable page_mapping() (bsc#1107783). - device-dax: Set page->index (bsc#1107783). - /dev/mem: Add bounce buffer for copy-out (git-fixes). - /dev/mem: Avoid overwriting "err" in read_mem() (git-fixes). - dma-buf: remove redundant initialization of sg_table (bsc#1051510). - dmaengine: hsu: Support dmaengine_terminate_sync() (bsc#1051510). - dmaengine: idma64: Support dmaengine_terminate_sync() (bsc#1051510). - dmaengine: mv_xor_v2: kill the tasklets upon exit (bsc#1051510). - doc/README.SUSE: Remove mentions of cloneconfig (bsc#1103636). - docs: zh_CN: fix location of oops-tracing.txt (bsc#1051510). - Documentation: add some docs for errseq_t (bsc#1107008). - Documentation: ip-sysctl.txt: document addr_gen_mode (bsc#1051510). - driver core: add __printf verification to __ata_ehi_pushv_desc (bsc#1051510). - drivers: hv: vmbus: do not mark HV_PCIE as perf_device (bsc#1051510). - drivers: hv: vmbus: Fix the offer_in_progress in vmbus_process_offer() (bsc#1051510). - drm: Add and handle new aspect ratios in DRM layer (). - drm: Add aspect ratio parsing in DRM layer (). - drm: Add DRM client cap for aspect-ratio (). - drm/amdgpu:add new firmware id for VCN (bsc#1051510). - drm/amdgpu:add tmr mc address into amdgpu_firmware_info (bsc#1051510). - drm/amdgpu: Fix RLC safe mode test in gfx_v9_0_enter_rlc_safe_mode (bsc#1051510). - drm/amdgpu: fix swapped emit_ib_size in vce3 (bsc#1051510). - drm/amdgpu: update tmr mc address (bsc#1100132). - drm/amd/pp/Polaris12: Fix a chunk of registers missed to program (bsc#1051510). - drm/armada: fix colorkey mode property (bsc#1051510). - drm/armada: fix irq handling (bsc#1051510). - drm/arm/malidp: Preserve LAYER_FORMAT contents when setting format (bsc#1051510). - drm/bridge: adv7511: Reset registers on hotplug (bsc#1051510). - drm/bridge/sii8620: Fix display of packed pixel modes (bsc#1051510). - drm/bridge/sii8620: fix display of packed pixel modes in MHL2 (bsc#1051510). - drm/bridge/sii8620: fix loops in EDID fetch logic (bsc#1051510). - drm/cirrus: Use drm_framebuffer_put to avoid kernel oops in clean-up (bsc#1101822). - drm/edid: Add 6 bpc quirk for SDC panel in Lenovo B50-80 (bsc#1051510). - drm: Expose modes with aspect ratio, only if requested (). - drm/exynos: decon5433: Fix per-plane global alpha for XRGB modes (bsc#1051510). - drm/exynos: decon5433: Fix WINCONx reset value (bsc#1051510). - drm/exynos: gsc: Fix support for NV16/61, YUV420/YVU420 and YUV422 modes (bsc#1051510). - drm/fb-helper: Fix typo on kerneldoc (bsc#1051510). - drm: Handle aspect ratio info in legacy modeset path (). - drm/i915/aml: Introducing Amber Lake platform (). - drm/i915/audio: Fix audio enumeration issue on BXT (). - drm/i915/cfl: Add a new CFL PCI ID (). - drm/i915/gvt: clear ggtt entries when destroy vgpu (bsc#1051510). - drm/i915/gvt: Fix the incorrect length of child_device_config issue (bsc#1051510). - drm/i915/gvt: Off by one in intel_vgpu_write_fence() (bsc#1051510). - drm/i915/gvt: request srcu_read_lock before checking if one gfn is valid (bsc#1051510). - drm/i915: Increase LSPCON timeout (bsc#1051510). - drm/i915/kvmgt: Fix potential Spectre v1 (bsc#1051510). - drm/i915/lpe: Mark LPE audio runtime pm as "no callbacks" (bsc#1051510). - drm/i915: Nuke the LVDS lid notifier (bsc#1051510). - drm/i915: Only show debug for state changes when banning (bsc#1051510). - drm/i915/overlay: Allocate physical registers from stolen (bsc#1051510). - drm/i915: Restore user forcewake domains across suspend (bsc#1100132). - drm/i915: set DP Main Stream Attribute for color range on DDI platforms (bsc#1051510). - drm/i915: Unmask user interrupts writes into HWSP on snb/ivb/vlv/hsw (bsc#1051510). - drm/i915/whl: Introducing Whiskey Lake platform (). - drm/imx: imx-ldb: check if channel is enabled before printing warning (bsc#1051510). - drm/imx: imx-ldb: disable LDB on driver bind (bsc#1051510). - drm: mali-dp: Enable Global SE interrupts mask for DP500 (bsc#1051510). - drm/modes: Introduce drm_mode_match() (). - drm/nouveau/drm/nouveau: Fix bogus drm_kms_helper_poll_enable() placement (bsc#1051510). - drm/panel: type promotion bug in s6e8aa0_read_mtp_id() (bsc#1051510). - drm/rockchip: lvds: add missing of_node_put (bsc#1051510). - drm/tegra: Check for malformed offsets and sizes in the 'submit' IOCTL (bsc#1106170). - drm/tegra: Fix comparison operator for buffer size (bsc#1100132). - drm/vc4: Fix the "no scaling" case on multi-planar YUV formats (bsc#1051510). - dwc2: gadget: Fix ISOC IN DDMA PID bitfield value calculation (bsc#1051510). - EDAC, altera: Fix ARM64 build warning (bsc#1051510). - EDAC: Fix memleak in module init error path (bsc#1051510). - EDAC, i7core: Fix memleaks and use-after-free on probe and remove (bsc#1051510). - EDAC, mv64x60: Fix an error handling path (bsc#1051510). - EDAC, octeon: Fix an uninitialized variable warning (bsc#1051510). - EDAC, sb_edac: Fix missing break in switch (bsc#1051510). - errseq: Add to documentation tree (bsc#1107008). - errseq: Always report a writeback error once (bsc#1107008). - ext2: auto disable dax instead of failing mount (bsc#1104888). - ext2, dax: introduce ext2_dax_aops (bsc#1104888). - ext4: auto disable dax instead of failing mount (bsc#1104888). - ext4, dax: add ext4_bmap to ext4_dax_aops (bsc#1104888). - ext4, dax: introduce ext4_dax_aops (bsc#1104888). - ext4, dax: set ext4_dax_aops for dax files (bsc#1104888). - ext4: sysfs: print ext4_super_block fields as little-endian (bsc#1106229). - extcon: Release locking when sending the notification of connector state (bsc#1051510). - f2fs: remove unneeded memory footprint accounting (bsc#1106233). - f2fs: remove unneeded memory footprint accounting (bsc#1106297). - f2fs: validate before set/clear free nat bitmap (bsc#1106231). - f2fs: validate before set/clear free nat bitmap (bsc#1106297). - fat: fix memory allocation failure handling of match_strdup() (bsc#1051510). - fbdev: Distinguish between interlaced and progressive modes (bsc#1051510). - fbdev: omapfb: off by one in omapfb_register_client() (bsc#1051510). - fbdev/via: fix defined but not used warning (bsc#1051510). - fb: fix lost console when the user unplugs a USB adapter (bsc#1051510). - filesystem-dax: Introduce dax_lock_mapping_entry() (bsc#1107783). - filesystem-dax: Set page->index (bsc#1107783). - fix a page leak in vhost_scsi_iov_to_sgl() error recovery (bsc#1051510). - Fix buggy backport in patches.fixes/dax-check-for-queue_flag_dax-in-bdev_dax_supported.patch (bsc#1109859) - Fix kABI breakage due to enum addition for ath10k (bsc#1051510). - Fix kABI breakage with libertas dev field addition (bsc#1051510). - Fix kABI breakage with removing field addition to power_supply (bsc#1051510). - Fix kexec forbidding kernels signed with keys in the secondary keyring to boot (bsc#1110006). - fix __legitimize_mnt()/mntput() race (bsc#1106297). - fix mntput/mntput race (bsc#1106297). - fs/9p/xattr.c: catch the error of p9_client_clunk when setting xattr failed (bsc#1051510). - fs, dax: prepare for dax-specific address_space_operations (bsc#1104888). - fs, dax: use page->mapping to warn if truncate collides with a busy page (bsc#1104888). - fs/proc/proc_sysctl.c: fix potential page fault while unregistering sysctl table (bsc#1106297). - fuse: Add missed unlock_page() to fuse_readpages_fill() (bsc#1106291). - fuse: fix double request_end() (bsc#1106291). - fuse: fix initial parallel dirops (bsc#1106291). - fuse: Fix oops at process_init_reply() (bsc#1106291). - fuse: fix unlocked access to processing queue (bsc#1106291). - fuse: umount should wait for all requests (bsc#1106291). - geneve: update skb dst pmtu on tx path (bsc#1051510). - genirq: Add handle_fasteoi_{level,edge}_irq flow handlers (bsc#1105378). - genirq: Export more irq_chip_*_parent() functions (bsc#1105378). - genirq: Fix editing error in a comment (bsc#1051510). - genirq: Make force irq threading setup more robust (bsc#1051510). - gen_stats: Fix netlink stats dumping in the presence of padding (netfilter-stable-18_07_23). - getxattr: use correct xattr length (bsc#1106235). - getxattr: use correct xattr length (bsc#1106297). - gpio: Add gpio driver support for ThunderX and OCTEON-TX (bsc#1105378). - gpio: Fix wrong rounding in gpio-menz127 (bsc#1051510). - gpiolib-acpi: make sure we trigger edge events at least once on boot (bsc#1051510). - gpiolib: acpi: Switch to cansleep version of GPIO library call (bsc#1051510). - gpiolib: Mark gpio_suffixes array with __maybe_unused (bsc#1051510). - gpio: ml-ioh: Fix buffer underwrite on probe error path (bsc#1051510). - gpio: pxa: Fix potential NULL dereference (bsc#1051510). - gpio: tegra: Move driver registration to subsys_init level (bsc#1051510). - gpio: thunderx: fix error return code in thunderx_gpio_probe() (bsc#1105378). - gpio: thunderx: remove unused .map() hook from irq_domain_ops (bsc#1105378). - gpu: host1x: Check whether size of unpin isn't 0 (bsc#1051510). - gpu: ipu-v3: csi: pass back mbus_code_to_bus_cfg error codes (bsc#1051510). - gpu: ipu-v3: default to id 0 on missing OF alias (bsc#1051510). - gtp: Initialize 64-bit per-cpu stats correctly (bsc#1051510). - HID: add quirk for another PIXART OEM mouse used by HP (bsc#1051510). - HID: hid-ntrig: add error handling for sysfs_create_group (bsc#1051510). - HID: i2c-hid: Add no-irq-after-reset quirk for 0911:5288 device (). - hotplug/cpu: Add operation queuing function (). - hotplug/cpu: Conditionally acquire/release DRC index (). - hotplug/cpu: Provide CPU readd operation (). - i2c: core: ACPI: Properly set status byte to 0 for multi-byte writes (bsc#1051510). - i2c: davinci: Avoid zero value of CLKH (bsc#1051510). - i2c: i801: Add missing documentation entries for Braswell and Kaby Lake (bsc#1051510). - i2c: i801: Add support for Intel Cedar Fork (bsc#1051510). - i2c: i801: Add support for Intel Ice Lake (bsc#1051510). - i2c: i801: Allow ACPI AML access I/O ports not reserved for SMBus (bsc#1051510). - i2c: i801: Consolidate chipset names in documentation and Kconfig (bsc#1051510). - i2c: i801: fix DNV's SMBCTRL register offset (bsc#1051510). - i2c: imx: Fix race condition in dma read (bsc#1051510). - i2c: imx: Fix reinit_completion() use (bsc#1051510). - i2c: uniphier-f: issue STOP only for last message or I2C_M_STOP (bsc#1051510). - i2c: uniphier: issue STOP only for last message or I2C_M_STOP (bsc#1051510). - i2c: xiic: Make the start and the byte count write atomic (bsc#1051510). - i2c: xlp9xx: Fix case where SSIF read transaction completes early (bsc#1105907). - i2c: xlp9xx: Fix issue seen when updating receive length (bsc#1105907). - i2c: xlp9xx: Make sure the transfer size is not more than I2C_SMBUS_BLOCK_SIZE (bsc#1105907). - i40e: fix condition of WARN_ONCE for stat strings (bsc#1107522). - IB/core: type promotion bug in rdma_rw_init_one_mr() (bsc#1046306). - IB/hfi1: Invalid NUMA node information can cause a divide by zero (bsc#1060463). - IB/hfi1: Remove incorrect call to do_interrupt callback (bsc#1060463). - IB/hfi1: Set in_use_ctxts bits for user ctxts only (bsc#1060463 ). - IB/ipoib: Avoid a race condition between start_xmit and cm_rep_handler (bsc#1046307). - IB/ipoib: Fix error return code in ipoib_dev_init() (bsc#1046307 ). - IB/IPoIB: Set ah valid flag in multicast send flow (bsc#1046307 ). - IB/mlx4: Test port number before querying type (bsc#1046302 ). - IB/mlx4: Use 4K pages for kernel QP's WQE buffer (bsc#1046302 ). - IB/mlx5: fix uaccess beyond "count" in debugfs read/write handlers (bsc#1046305). - ibmvnic: Include missing return code checks in reset function (bnc#1107966). - ib_srpt: Fix a use-after-free in srpt_close_ch() (bsc#1046306 ). - ieee802154: ca8210: fix uninitialised data read (bsc#1051510). - ieee802154: fix gcc-4.9 warnings (bsc#1051510). - ieee802154: mrf24j40: fix incorrect mask in mrf24j40_stop (bsc#1051510). - iio: 104-quad-8: Fix off-by-one error in register selection (bsc#1051510). - iio: ad9523: Fix displayed phase (bsc#1051510). - iio: ad9523: Fix return value for ad952x_store() (bsc#1051510). - iio: adc: ina2xx: avoid kthread_stop() with stale task_struct (bsc#1051510). - iio: adc: sun4i-gpadc: select REGMAP_IRQ (bsc#1051510). - iio: sca3000: Fix an error handling path in 'sca3000_probe()' (bsc#1051510). - iio: sca3000: Fix missing return in switch (bsc#1051510). - ima: based on policy verify firmware signatures (pre-allocated buffer) (bsc#1051510). - include/rdma/opa_addr.h: Fix an endianness issue (bsc#1046306 ). - init: rename and re-order boot_cpu_state_init() (bsc#1104365). - Input: atmel_mxt_ts - only use first T9 instance (bsc#1051510). - Input: edt-ft5x06 - fix error handling for factory mode on non-M06 (bsc#1051510). - Input: edt-ft5x06 - implement support for the EDT-M12 series (bsc#1051510). - Input: edt-ft5x06 - make distinction between m06/m09/generic more clear (bsc#1051510). - Input: elantech - enable middle button of touchpad on ThinkPad P72 (bsc#1051510). - input: rohm_bu21023: switch to i2c_lock_bus(..., I2C_LOCK_SEGMENT) (bsc#1051510). - Input: synaptics-rmi4 - fix axis-swap behavior (bsc#1051510). - intel_th: Fix device removal logic (bsc#1051510). - iommu/amd: Add support for higher 64-bit IOMMU Control Register (). - iommu/amd: Add support for IOMMU XT mode (). - iommu/amd: Finish TLB flush in amd_iommu_unmap() (bsc#1106105). - iommu/amd: make sure TLB to be flushed before IOVA freed (bsc#1106105). - iommu/amd: Return devid as alias for ACPI HID devices (bsc#1106105). - iommu/arm-smmu-v3: Do not free page table ops twice (bsc#1106237). - iommu/vt-d: Fix a potential memory leak (bsc#1106105). - iommu/vt-d: Ratelimit each dmar fault printing (bsc#1106105). - ioremap: Update pgtable free interfaces with addr (bsc#1110006). - ipc/shm: fix shmat() nil address after round-down when remapping (bsc#1090078). - ip: hash fragments consistently (netfilter-stable-18_07_27). - ip: in cmsg IP(V6)_ORIGDSTADDR call pskb_may_pull (netfilter-stable-18_07_27). - ipmi:bt: Set the timeout before doing a capabilities check (bsc#1051510). - ipmi: Fix some counter issues (bsc#1105907). - ipmi: Move BT capabilities detection to the detect call (bsc#1106779). - ipmi/powernv: Fix error return code in ipmi_powernv_probe() (git-fixes). - ipmi: Remove ACPI SPMI probing from the SSIF (I2C) driver (bsc#1105907). - ipv4: remove BUG_ON() from fib_compute_spec_dst (netfilter-stable-18_08_01). - ipv4: Return EINVAL when ping_group_range sysctl does not map to user ns (netfilter-stable-18_07_23). - ipv6: fix useless rol32 call on hash (netfilter-stable-18_07_23). - ipv6: ila: select CONFIG_DST_CACHE (netfilter-stable-18_07_23). - ipv6: make DAD fail with enhanced DAD when nonce length differs (netfilter-stable-18_07_23). - ipv6: sr: fix passing wrong flags to crypto_alloc_shash() (networking-stable-18_07_19). - ipvlan: fix IFLA_MTU ignored on NEWLINK (networking-stable-18_07_19). - irqchip/bcm7038-l1: Hide cpu offline callback when building for !SMP (bsc#1051510). - irqdomain: Add irq_domain_{push,pop}_irq() functions (bsc#1105378). - irqdomain: Check for NULL function pointer in irq_domain_free_irqs_hierarchy() (bsc#1105378). - irqdomain: Factor out code to add and remove items to and from the revmap (bsc#1105378). - irqdomain: Prevent potential NULL pointer dereference in irq_domain_push_irq() (bsc#1105378). - irqdomain: Update the comments of fwnode field of irq_domain structure (bsc#1051510). - isdn: Disable IIOCDBGVAR (bsc#1051510). - iw_cxgb4: remove duplicate memcpy() in c4iw_create_listen() (bsc#1046543). - iwlwifi: pcie: do not access periphery registers when not available (bsc#1051510). - ixgbe: Refactor queue disable logic to take completion time into account (bsc#1101557). - ixgbe: Reorder Tx/Rx shutdown to reduce time needed to stop device (bsc#1101557). - kabi fix for check_disk_size_change() (bsc#1098459). - kabi: move s390 mm_context_t lock to mm_struct and ignore the change (bsc#1103421). - kabi: move the new handler to end of machdep_calls and hide it from genksyms (bsc#1094244). - kabi protect hnae_ae_ops (bsc#1107924). - kabi protect struct kvm_sync_regs (bsc#1106948). - kabi/severities: Whitelist libceph, rbd, and ceph (bsc#1096748). - kabi: tpm: change relinquish_locality return value back to void (bsc#1082555). - kabi: tpm: do keep the cmd_ready and go_idle as pm ops (bsc#1082555). - kabi: x86/speculation/l1tf: Increase l1tf memory limit for Nehalem+ (bnc#1105536). - kprobes/x86: Release insn_slot in failure path (bsc#1110006). - kthread, tracing: Do not expose half-written comm when creating kthreads (bsc#1104897). - kvm: arm64: Convert kvm_set_s2pte_readonly() from inline asm to cmpxchg() (bsc#1108010). - kvm: Enforce error in ioctl for compat tasks when !KVM_COMPAT (bsc#1106240). - kvm: nVMX: Do not flush TLB when vmcs12 uses VPID (bsc#1106240). - kvm: nVMX: Fix fault vector for VMX operation at CPL > 0 (bsc#1106105). - kvm: nVMX: Fix injection to L2 when L1 do not intercept external-interrupts (bsc#1106240). - kvm: nVMX: Fix races when sending nested PI while dest enters/leaves L2 (bsc#1106240). - kvm: nVMX: Re-evaluate L1 pending events when running L2 and L1 got posted-interrupt (bsc#1106240). - kvm: nVMX: Use nested_run_pending rather than from_vmentry (bsc#1106240). - kvm: PPC: Book3S: Fix guest DMA when guest partially backed by THP pages (bsc#1077761, git-fixes, bsc#1103948, bsc#1103949). - kvm: PPC: Book3S HV: Use correct pagesize in kvm_unmap_radix() (bsc#1061840, git-fixes). - kvm: s390: add etoken support for guests (bsc#1106948, LTC#171029). - kvm: s390: force bp isolation for VSIE (bsc#1103421). - kvm: s390: implement CPU model only facilities (bsc#1106948, LTC#171029). - kvm: VMX: Do not allow reexecute_instruction() when skipping MMIO instr (bsc#1106240). - kvm: VMX: fixes for vmentry_l1d_flush module parameter (bsc#1106369). - kvm: VMX: Work around kABI breakage in 'enum vmx_l1d_flush_state' (bsc#1106369). - kvm: x86: Change __kvm_apic_update_irr() to also return if max IRR updated (bsc#1106240). - kvm: x86: Default to not allowing emulation retry in kvm_mmu_page_fault (bsc#1106240). - kvm: x86: Do not re-{try,execute} after failed emulation in L2 (bsc#1106240). - kvm: x86: fix APIC page invalidation (bsc#1106240). - kvm: x86: Invert emulation re-execute behavior to make it opt-in (bsc#1106240). - kvm: x86: Merge EMULTYPE_RETRY and EMULTYPE_ALLOW_REEXECUTE (bsc#1106240). - kvm/x86: remove WARN_ON() for when vm_munmap() fails (bsc#1106240). - kvm: x86: SVM: Call x86_spec_ctrl_set_guest/host() with interrupts disabled (git-fixes 1f50ddb4f418). - kvm: x86: vmx: fix vpid leak (bsc#1106240). - l2tp: use sk_dst_check() to avoid race on sk->sk_dst_cache (netfilter-stable-18_08_17). - lan78xx: Check for supported Wake-on-LAN modes (bsc#1051510). - lan78xx: Lan7801 Support for Fixed PHY (bsc#1085262). - lan78xx: remove redundant initialization of pointer 'phydev' (bsc#1085262). - lan78xx: Set ASD in MAC_CR when EEE is enabled (bsc#1085262). - leds: max8997: use mode when calling max8997_led_set_mode (bsc#1051510). - libahci: Fix possible Spectre-v1 pmp indexing in ahci_led_store() (bsc#1051510). - libata: Fix command retry decision (bsc#1051510). - libata: Fix compile warning with ATA_DEBUG enabled (bsc#1051510). - libbpf: Makefile set specified permission mode (bsc#1083647). - libceph: check authorizer reply/challenge length before reading (bsc#1096748). - libceph: factor out __ceph_x_decrypt() (bsc#1096748). - libceph: factor out encrypt_authorizer() (bsc#1096748). - libceph: factor out __prepare_write_connect() (bsc#1096748). - libceph: store ceph_auth_handshake pointer in ceph_connection (bsc#1096748). - libceph: weaken sizeof check in ceph_x_verify_authorizer_reply() (bsc#1096748). - libertas: fix suspend and resume for SDIO connected cards (bsc#1051510). - lib/iov_iter: Fix pipe handling in _copy_to_iter_mcsafe() (bsc#1098782). - libnvdimm, btt: fix uninitialized err_lock (bsc#1103961). - libnvdimm: fix ars_status output length calculation (bsc#1104890). - libnvdimm, nfit: enable support for volatile ranges (bsc#1103961). - libnvdimm, nfit: move the check on nd_reserved2 to the endpoint (bsc#1103961). - libnvdimm, pmem: Fix memcpy_mcsafe() return code handling in nsio_rw_bytes() (bsc#1098782). - libnvdimm, pmem: Restore page attributes when clearing errors (bsc#1107783). - libnvdimm: rename nd_sector_size_{show,store} to nd_size_select_{show,store} (bsc#1103961). - libnvdimm: Use max contiguous area for namespace size (git-fixes). - lib/rhashtable: consider param->min_size when setting initial table size (bsc#1051510). - lib/test_hexdump.c: fix failure on big endian cpu (bsc#1051510). - lib/vsprintf: Remove atomic-unsafe support for %pCr (bsc#1051510). - Limit kernel-source build to architectures for which we build binaries (bsc#1108281). - livepatch: Remove reliable stacktrace check in klp_try_switch_task() (bsc#1071995). - livepatch: Validate module/old func name length (bsc#1071995). - llc: use refcount_inc_not_zero() for llc_sap_find() (netfilter-stable-18_08_17). - mac80211: add stations tied to AP_VLANs during hw reconfig (bsc#1051510). - mac80211: always account for A-MSDU header changes (bsc#1051510). - mac80211: avoid kernel panic when building AMSDU from non-linear SKB (bsc#1051510). - mac80211: fix an off-by-one issue in A-MSDU max_subframe computation (bsc#1051510). - mac80211: fix pending queue hang due to TX_DROP (bsc#1051510). - mac80211: restrict delayed tailroom needed decrement (bsc#1051510). - macros.kernel-source: pass -b properly in kernel module package (bsc#1107870). - mailbox: xgene-slimpro: Fix potential NULL pointer dereference (bsc#1051510). - MAINTAINERS: fix location of ina2xx.txt device tree file (bsc#1051510). - md-cluster: clear another node's suspend_area after the copy is finished (bsc#1106333). - md-cluster: do not send msg if array is closing (bsc#1106333). - md-cluster: release RESYNC lock after the last resync message (bsc#1106688). - md-cluster: show array's status more accurate (bsc#1106333). - media: exynos4-is: Prevent NULL pointer dereference in __isp_video_try_fmt() (bsc#1051510). - media: mem2mem: Remove excessive try_run call (bsc#1051510). - media: omap3isp: fix unbalanced dma_iommu_mapping (bsc#1051510). - media: omap3isp: zero-initialize the isp cam_xclk{a,b} initial data (bsc#1051510). - media: Revert "[media] tvp5150: fix pad format frame height" (bsc#1051510). - media: rtl28xxu: be sure that it won't go past the array size (bsc#1051510). - media: tw686x: Fix oops on buffer alloc failure (bsc#1051510). - media: v4l2-mem2mem: Fix missing v4l2_m2m_try_run call (bsc#1051510). - media: videobuf2-core: do not call memop 'finish' when queueing (bsc#1051510). - mei: bus: type promotion bug in mei_nfc_if_version() (bsc#1051510). - mei: do not update offset in write (bsc#1051510). - mei: ignore not found client in the enumeration (bsc#1051510). - mei: me: enable asynchronous probing (). - memcg, thp: do not invoke oom killer on thp charges (bnc#1089663). - memory: tegra: Apply interrupts mask per SoC (bsc#1051510). - memory: tegra: Do not handle spurious interrupts (bsc#1051510). - mfd: 88pm860x-i2c: switch to i2c_lock_bus(..., I2C_LOCK_SEGMENT) (bsc#1051510). - mfd: arizona: Do not use regmap_read_poll_timeout (bsc#1051510). - mfd: intel-lpss: Add Ice Lake PCI IDs (bsc#1051510). - mfd: lpc_ich: Do not touch SPI-NOR write protection bit on Apollo Lake (bsc#1051510). - mfd: sm501: Set coherent_dma_mask when creating subdevices (bsc#1051510). - mfd: ti_am335x_tscadc: Fix struct clk memory leak (bsc#1051510). - mlxsw: core_acl_flex_actions: Return error for conflicting actions (netfilter-stable-18_08_17). - mmc: omap_hsmmc: fix wakeirq handling on removal (bsc#1051510). - mmc: sdhci: do not try to use 3.3V signaling if not supported (bsc#1051510). - mmc: sdhci-of-esdhc: set proper dma mask for ls104x chips (bsc#1051510). - mmc: tegra: prevent HS200 on Tegra 3 (bsc#1051510). - mm, dax: introduce pfn_t_special() (bsc#1104888). - mm: fix devmem_is_allowed() for sub-page System RAM intersections (bsc#1106800). - mm/huge_memory.c: fix data loss when splitting a file pmd (bnc#1107074). - mm/hugetlb: filter out hugetlb pages if HUGEPAGE migration is not supported (bnc#1106697). - mm, madvise_inject_error: Disable MADV_SOFT_OFFLINE for ZONE_DEVICE pages (bsc#1107783). - mm, madvise_inject_error: Let memory_failure() optionally take a page reference (bsc#1107783). - mm: memcg: fix use after free in mem_cgroup_iter() (bnc#1107065). - mm, memory_failure: Collect mapping size in collect_procs() (bsc#1107783). - mm, memory_failure: Teach memory_failure() about dev_pagemap pages (bsc#1107783). - mm, numa: Migrate pages to local nodes quicker early in the lifetime of a task (bnc#1101669 optimise numa balancing for fast migrate). - mm, numa: Remove rate-limiting of automatic numa balancing migration (bnc#1101669 optimise numa balancing for fast migrate). - mm, numa: Remove rate-limiting of automatic numa balancing migration kabi (bnc#1101669 optimise numa balancing for fast migrate). - mm, page_alloc: double zone's batchsize (bnc#971975 VM performance -- page allocator). - mm/vmalloc: add interfaces to free unmapped page table (bsc#1110006). - mm/vmscan: wake up flushers for legacy cgroups too (bnc#1107061). - module: exclude SHN_UNDEF symbols from kallsyms api (bsc#1071995). - Move the previous hv netvsc fix to the sorted section (bsc#1104708) - net/9p/client.c: version pointer uninitialized (bsc#1051510). - net/9p: fix error path of p9_virtio_probe (bsc#1051510). - net/9p: Switch to wait_event_killable() (bsc#1051510). - net/9p/trans_fd.c: fix race by holding the lock (bsc#1051510). - net/9p/trans_fd.c: fix race-condition by flushing workqueue before the kfree() (bsc#1051510). - net: bcmgenet: correct bad merge (bsc#1051510). - net: bcmgenet: enable loopback during UniMAC sw_reset (bsc#1051510). - net: bcmgenet: Fix sparse warnings in bcmgenet_put_tx_csum() (bsc#1051510). - net: bcmgenet: Fix unmapping of fragments in bcmgenet_xmit() (bsc#1051510). - net: bcmgenet: prevent duplicate calls of bcmgenet_dma_teardown (bsc#1051510). - net: dccp: avoid crash in ccid3_hc_rx_send_feedback() (networking-stable-18_07_19). - net: dccp: switch rx_tstamp_last_feedback to monotonic clock (networking-stable-18_07_19). - net: diag: Do not double-free TCP_NEW_SYN_RECV sockets in tcp_abort (netfilter-stable-18_07_23). - net: dsa: Do not suspend/resume closed slave_dev (netfilter-stable-18_08_04). - net: ena: Eliminate duplicate barriers on weakly-ordered archs (bsc#1108093). - net: ena: fix device destruction to gracefully free resources (bsc#1108093). - net: ena: fix driver when PAGE_SIZE == 64kB (bsc#1108093). - net: ena: fix incorrect usage of memory barriers (bsc#1108093). - net: ena: fix missing calls to READ_ONCE (bsc#1108093). - net: ena: fix missing lock during device destruction (bsc#1108093). - net: ena: fix potential double ena_destroy_device() (bsc#1108093). - net: ena: fix surprise unplug NULL dereference kernel crash (bsc#1108093). - net: ena: Fix use of uninitialized DMA address bits field (netfilter-stable-18_08_01). - net: ethernet: mvneta: Fix napi structure mixup on armada 3700 (networking-stable-18_08_21). - netfilter: do not set F_IFACE on ipv6 fib lookups (netfilter-stable-18_06_25). - netfilter: ip6t_rpfilter: provide input interface for route lookup (netfilter-stable-18_06_25). - netfilter: ip6t_rpfilter: set F_IFACE for linklocal addresses (git-fixes). - netfilter: nat: Revert "netfilter: nat: convert nat bysrc hash to rhashtable" (netfilter-stable-17_11_16). - netfilter: nf_tables: add missing netlink attrs to policies (netfilter-stable-18_06_27). - netfilter: nf_tables: do not assume chain stats are set when jumplabel is set (netfilter-stable-18_06_27). - netfilter: nf_tables: fix memory leak on error exit return (netfilter-stable-18_06_27). - netfilter: nf_tables: nft_compat: fix refcount leak on xt module (netfilter-stable-18_06_27). - netfilter: nf_tables: use WARN_ON_ONCE instead of BUG_ON in nft_do_chain() (netfilter-stable-18_06_25). - netfilter: nft_compat: fix handling of large matchinfo size (netfilter-stable-18_06_27). - netfilter: nft_compat: prepare for indirect info storage (netfilter-stable-18_06_27). - netfilter: nft_meta: fix wrong value dereference in nft_meta_set_eval (netfilter-stable-18_06_27). - net: fix amd-xgbe flow-control issue (netfilter-stable-18_08_01). - net: fix use-after-free in GRO with ESP (networking-stable-18_07_19). - net: hns3: add unlikely for error check (bsc#1104353 ). - net: hns3: Fix comments for hclge_get_ring_chain_from_mbx (bsc#1104353). - net: hns3: Fix desc num set to default when setting channel (bsc#1104353). - net: hns3: Fix for command format parsing error in hclge_is_all_function_id_zero (bsc#1104353). - net: hns3: Fix for information of phydev lost problem when down/up (bsc#1104353). - net: hns3: Fix for l4 checksum offload bug (bsc#1104353 ). - net: hns3: Fix for mac pause not disable in pfc mode (bsc#1104353). - net: hns3: Fix for mailbox message truncated problem (bsc#1104353). - net: hns3: Fix for phy link issue when using marvell phy driver (bsc#1104353). - net: hns3: Fix for reset_level default assignment probelm (bsc#1104353). - net: hns3: Fix for using wrong mask and shift in hclge_get_ring_chain_from_mbx (bsc#1104353). - net: hns3: Fix for waterline not setting correctly (bsc#1104353 ). - net: hns3: Fix get_vector ops in hclgevf_main module (bsc#1104353). - net: hns3: Fix MSIX allocation issue for VF (bsc#1104353 ). - net: hns3: fix page_offset overflow when CONFIG_ARM64_64K_PAGES (bsc#1104353). - net: hns3: Fix return value error in hns3_reset_notify_down_enet (bsc#1104353). - net: hns3: fix return value error while hclge_cmd_csq_clean failed (bsc#1104353). - net: hns3: Fix warning bug when doing lp selftest (bsc#1104353 ). - net: hns3: modify hnae_ to hnae3_ (bsc#1104353). - net: hns3: Prevent sending command during global or core reset (bsc#1104353). - net: hns3: remove some redundant assignments (bsc#1104353 ). - net: hns3: remove unnecessary ring configuration operation while resetting (bsc#1104353). - net: hns3: simplify hclge_cmd_csq_clean (bsc#1104353 ). - net: hns3: Standardize the handle of return value (bsc#1104353 ). - net: hns: add netif_carrier_off before change speed and duplex (bsc#1107924). - net: hns: add the code for cleaning pkt in chip (bsc#1107924). - net/ipv4: Set oif in fib_compute_spec_dst (netfilter-stable-18_07_23). - netlink: Do not shift on 64 for ngroups (git-fixes). - netlink: Do not shift with UB on nlk->ngroups (netfilter-stable-18_08_01). - netlink: Do not subscribe to non-existent groups (netfilter-stable-18_08_01). - netlink: Fix spectre v1 gadget in netlink_create() (netfilter-stable-18_08_04). - net: mdio-mux: bcm-iproc: fix wrong getter and setter pair (netfilter-stable-18_08_01). - net/mlx5e: Avoid dealing with vport representors if not being e-switch manager (networking-stable-18_07_19). - net/mlx5: E-Switch, Avoid setup attempt if not being e-switch manager (networking-stable-18_07_19). - net: mvneta: fix mvneta_config_rss on armada 3700 (networking-stable-18_08_21). - net: mvneta: fix the Rx desc DMA address in the Rx path (networking-stable-18_07_19). - net/packet: fix use-after-free (networking-stable-18_07_19). - Netperf performance issue due to AppArmor net mediation (bsc#1108520) - net: phy: consider PHY_IGNORE_INTERRUPT in phy_start_aneg_priv (netfilter-stable-18_07_27). - net: phy: fix flag masking in __set_phy_supported (netfilter-stable-18_07_23). - net: rtnl_configure_link: fix dev flags changes arg to __dev_notify_flags (git-fixes). - net_sched: blackhole: tell upper qdisc about dropped packets (networking-stable-18_07_19). - net_sched: Fix missing res info when create new tc_index filter (netfilter-stable-18_08_17). - net: skb_segment() should not return NULL (netfilter-stable-18_07_27). - net: stmmac: align DMA stuff to largest cache line length (netfilter-stable-18_08_01). - net: stmmac: Fix WoL for PCI-based setups (netfilter-stable-18_08_04). - net: stmmac: mark PM functions as __maybe_unused (git-fixes). - net: sungem: fix rx checksum support (networking-stable-18_07_19). - net: systemport: Fix CRC forwarding check for SYSTEMPORT Lite (netfilter-stable-18_07_23). - nfc: Fix possible memory corruption when handling SHDLC I-Frame commands (bsc#1051510). - nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (git-fixes). - nfsd: remove blocked locks on client teardown (git-fixes). - nfs/filelayout: fix oops when freeing filelayout segment (bsc#1105190). - nfs/filelayout: Fix racy setting of fl->dsaddr in filelayout_check_deviceid() (bsc#1105190). - nfs/pnfs: fix nfs_direct_req ref leak when i/o falls back to the mds (git-fixes). - nfs: Use an appropriate work queue for direct-write completion (bsc#1082519). - nfsv4 client live hangs after live data migration recovery (git-fixes). - nfsv4: Fix a sleep in atomic context in nfs4_callback_sequence() (git-fixes). - nfsv4: Fix possible 1-byte stack overflow in nfs_idmap_read_and_verify_message (git-fixes). - nl80211: Add a missing break in parse_station_flags (bsc#1051510). - nl80211: check nla_parse_nested() return values (bsc#1051510). - nvme_fc: add 'nvme_discovery' sysfs attribute to fc transport device (bsc#1044189). - nvme: register ns_id attributes as default sysfs groups (bsc#1105247). - parport: sunbpp: fix error return code (bsc#1051510). - partitions/aix: append null character to print data from disk (bsc#1051510). - partitions/aix: fix usage of uninitialized lv_info and lvname structures (bsc#1051510). - pci: aardvark: Fix I/O space page leak (git-fixes). - pci: aardvark: Size bridges before resources allocation (bsc#1109806). - pci: Add pci_resize_resource() for resizing BARs (bsc#1105355). - pci: Add PCI resource type mask #define (bsc#1105355). - pci: Add resizable BAR infrastructure (bsc#1105355). - pci: Allow release of resources that were never assigned (bsc#1105355). - pci: Cleanup PCI_REBAR_CTRL_BAR_SHIFT handling (bsc#1105355). - pci: designware: Fix I/O space page leak (bsc#1109806). - pci: faraday: Add missing of_node_put() (bsc#1109806). - pci: faraday: Fix I/O space page leak (bsc#1109806). - pci: hotplug: Do not leak pci_slot on registration failure (bsc#1051510). - pci: hv: Make sure the bus domain is really unique (git-fixes). - pci: Match Root Port's MPS to endpoint's MPSS as necessary (bsc#1109269). - pci: mvebu: Fix I/O space end address calculation (bsc#1051510). - pci: OF: Fix I/O space page leak (git-fixes). - pci: pciehp: Fix unprotected list iteration in IRQ handler (bsc#1051510). - pci: pciehp: Fix use-after-free on unplug (bsc#1051510). - PCI/portdrv: Compute MSI/MSI-X IRQ vectors after final allocation (bsc#1109806). - PCI/portdrv: Factor out Interrupt Message Number lookup (bsc#1109806). - pci: Restore resized BAR state on resume (bsc#1105355). - pci: Skip MPS logic for Virtual Functions (VFs) (bsc#1051510). - pci: versatile: Fix I/O space page leak (bsc#1109806). - pci: xgene: Fix I/O space page leak (bsc#1109806). - pci: xilinx: Add missing of_node_put() (bsc#1109806). - pci: xilinx-nwl: Add missing of_node_put() (bsc#1109806). - pinctrl/amd: only handle irq if it is pending and unmasked (bsc#1051510). - pinctrl: cannonlake: Fix community ordering for H variant (bsc#1051510). - pinctrl: cannonlake: Fix HOSTSW_OWN register offset of H variant (bsc#1051510). - pinctrl: core: Return selector to the pinctrl driver (bsc#1051510). - pinctrl: freescale: off by one in imx1_pinconf_group_dbg_show() (bsc#1051510). - pinctrl: imx: off by one in imx_pinconf_group_dbg_show() (bsc#1051510). - pinctrl: pinmux: Return selector to the pinctrl driver (bsc#1051510). - pinctrl: qcom: spmi-gpio: Fix pmic_gpio_config_get() to be compliant (bsc#1051510). - pinctrl: single: Fix group and function selector use (bsc#1051510). - pipe: actually allow root to exceed the pipe buffer limits (bsc#1106297). - platform/x86: alienware-wmi: Correct a memory leak (bsc#1051510). - platform/x86: asus-nb-wmi: Add keymap entry for lid flip action on UX360 (bsc#1051510). - platform/x86: thinkpad_acpi: Proper model/release matching (bsc#1051510). - platform/x86: toshiba_acpi: Fix defined but not used build warnings (bsc#1051510). - PM / clk: signedness bug in of_pm_clk_add_clks() (bsc#1051510). - PM / devfreq: rk3399_dmc: Fix duplicated opp table on reload (bsc#1051510). - PM / Domains: Fix error path during attach in genpd (bsc#1051510). - pmem: Switch to copy_to_iter_mcsafe() (bsc#1098782). - PM / runtime: Drop usage count for suppliers at device link removal (bsc#1100132). - PM / sleep: wakeup: Fix build error caused by missing SRCU support (bsc#1051510). - pnfs/blocklayout: off by one in bl_map_stripe() (git-fixes). - power: gemini-poweroff: Avoid more spurious poweroffs (bsc#1051510). - power: generic-adc-battery: check for duplicate properties copied from iio channels (bsc#1051510). - power: generic-adc-battery: fix out-of-bounds write when copying channel properties (bsc#1051510). - powernv/pseries: consolidate code for mce early handling (bsc#1094244). - powerpc/64s: Default l1d_size to 64K in RFI fallback flush (bsc#1068032, git-fixes). - powerpc/64s: Fix compiler store ordering to SLB shadow area (bsc#1094244). - powerpc/64s: Fix DT CPU features Power9 DD2.1 logic (bsc#1055117). - powerpc/64s: move machine check SLB flushing to mm/slb.c (bsc#1094244). - powerpc64s: Show ori31 availability in spectre_v1 sysfs file not v2 (bsc#1068032, bsc#1080157, git-fixes). - powerpc: Avoid code patching freed init sections (bnc#1107735). - powerpc/fadump: cleanup crash memory ranges support (bsc#1103269). - powerpc/fadump: re-register firmware-assisted dump if already registered (bsc#1108170, bsc#1108823). - powerpc: Fix size calculation using resource_size() (bnc#1012382). - powerpc: KABI add aux_ptr to hole in paca_struct to extend it with additional members (bsc#1094244). - powerpc: kabi: move mce_data_buf into paca_aux (bsc#1094244). - powerpc/kprobes: Fix call trace due to incorrect preempt count (bsc#1065729). - powerpc/lib: Fix the feature fixup tests to actually work (bsc#1065729). - powerpc: make feature-fixup tests fortify-safe (bsc#1065729). - powerpc/mce: Fix SLB rebolting during MCE recovery path (bsc#1094244). - powerpc/numa: Use associativity if VPHN hcall is successful (bsc#1110363). - powerpc/perf: Fix IMC allocation routine (bsc#1054914). - powerpc/perf: Fix memory allocation for core-imc based on num_possible_cpus() (bsc#1054914). - powerpc/perf: Remove sched_task function defined for thread-imc (bsc#1054914). - powerpc/pkeys: Fix reading of ibm, processor-storage-keys property (bsc#1109244). - powerpc/powernv/npu: Do a PID GPU TLB flush when invalidating a large address range (bsc#1055120). - powerpc/pseries: Avoid using the size greater than RTAS_ERROR_LOG_MAX (bsc#1094244). - powerpc/pseries: Defer the logging of rtas error to irq work queue (bsc#1094244). - powerpc/pseries: Define MCE error event section (bsc#1094244). - powerpc/pseries: Disable CPU hotplug across migrations (bsc#1065729). - powerpc/pseries: Display machine check error details (bsc#1094244). - powerpc/pseries: Dump the SLB contents on SLB MCE errors (bsc#1094244). - powerpc/pseries: fix EEH recovery of some IOV devices (bsc#1078720, git-fixes). - powerpc/pseries: Fix endianness while restoring of r3 in MCE handler (bsc#1094244). - powerpc/pseries: Flush SLB contents on SLB MCE errors (bsc#1094244). - powerpc/pseries: Remove prrn_work workqueue (bsc#1102495, bsc#1109337). - powerpc/pseries: Remove unneeded uses of dlpar work queue (bsc#1102495, bsc#1109337). - powerpc/tm: Avoid possible userspace r1 corruption on reclaim (bsc#1109333). - powerpc/tm: Fix userspace r13 corruption (bsc#1109333). - powerpc/topology: Get topology for shared processors at boot (bsc#1104683). - powerpc/xive: Fix trying to "push" an already active pool VP (bsc#1085030, git-fixes). - power: remove possible deadlock when unregistering power_supply (bsc#1051510). - power: supply: axp288_charger: Fix initial constant_charge_current value (bsc#1051510). - power: supply: max77693_charger: fix unintentional fall-through (bsc#1051510). - power: vexpress: fix corruption in notifier registration (bsc#1051510). - ppp: Destroy the mutex when cleanup (bsc#1051510). - ppp: fix __percpu annotation (bsc#1051510). - pstore: Fix incorrect persistent ram buffer mapping (bsc#1051510). - ptp: fix missing break in switch (bsc#1105355). - ptr_ring: fail early if queue occupies more than KMALLOC_MAX_SIZE (bsc#1105355). - ptr_ring: fix up after recent ptr_ring changes (bsc#1105355). - ptr_ring: prevent integer overflow when calculating size (bsc#1105355). - pwm: tiehrpwm: Fix disabling of output of PWMs (bsc#1051510). - qlge: Fix netdev features configuration (bsc#1098822). - r8152: Check for supported Wake-on-LAN Modes (bsc#1051510). - r8169: add support for NCube 8168 network card (bsc#1051510). - random: add new ioctl RNDRESEEDCRNG (bsc#1051510). - random: fix possible sleeping allocation from irq context (bsc#1051510). - random: mix rdrand with entropy sent in from userspace (bsc#1051510). - random: set up the NUMA crng instances after the CRNG is fully initialized (bsc#1051510). - RDMA/bnxt_re: Fix a bunch of off by one bugs in qplib_fp.c (bsc#1050244). - RDMA/bnxt_re: Fix a couple off by one bugs (bsc#1050244 ). - RDMA/i40w: Hold read semaphore while looking after VMA (bsc#1058659). - RDMA/uverbs: Expand primary and alt AV port checks (bsc#1046306 ). - readahead: stricter check for bdi io_pages (VM Functionality, git fixes). - regulator: fix crash caused by null driver data (bsc#1051510). - reiserfs: fix broken xattr handling (heap corruption, bad retval) (bsc#1106236). - Replace magic for trusting the secondary keyring with #define (bsc#1051510). - Revert "btrfs: qgroups: Retry after commit on getting EDQUOT" (bsc#1031392). - Revert "ipc/shm: Fix shmat mmap nil-page protection" (bsc#1090078). - Revert "mm: page_alloc: skip over regions of invalid pfns where possible" (bnc#1107078). - Revert "pci: Add ACS quirk for Intel 300 series" (bsc#1051510). - Revert "UBIFS: Fix potential integer overflow in allocation" (bsc#1051510). - Revert "vhost: cache used event for better performance" (bsc#1090528). - Revert "vmalloc: back off when the current task is killed" (bnc#1107073). - rhashtable: add schedule points (bsc#1051510). - rndis_wlan: potential buffer overflow in rndis_wlan_auth_indication() (bsc#1051510). - root dentries need RCU-delayed freeing (bsc#1106297). - rsi: Fix 'invalid vdd' warning in mmc (bsc#1051510). - rtc: ensure rtc_set_alarm fails when alarms are not supported (bsc#1051510). - rtnetlink: add rtnl_link_state check in rtnl_configure_link (netfilter-stable-18_07_27). - rxrpc: Fix user call ID check in rxrpc_service_prealloc_one (netfilter-stable-18_08_04). - s390: always save and restore all registers on context switch (bsc#1103421). - s390/crypto: Fix return code checking in cbc_paes_crypt() (bnc#1108323, LTC#171709). - s390: detect etoken facility (bsc#1103421). - s390/entry.S: use assembler alternatives (bsc#1103421). - s390: fix br_r1_trampoline for machines without exrl (git-fixes, bsc#1103421). - s390: fix compat system call table (bsc#1103421). - s390: fix handling of -1 in set{,fs}id16 syscalls (bsc#1103421). - s390/lib: use expoline for all bcr instructions (git-fixes, bsc#1103421). - s390/mm: fix local TLB flushing vs. detach of an mm address space (bsc#1103421). - s390/mm: fix race on mm->context.flush_mm (bsc#1103421). - s390/pci: fix out of bounds access during irq setup (bnc#1108323, LTC#171068). - s390: Prevent hotplug rwsem recursion (bsc#1105731). - s390/qdio: reset old sbal_state flags (LTC#171525, bsc#1106948). - s390/qeth: consistently re-enable device features (bsc#1104482, LTC#170340). - s390/qeth: do not clobber buffer on async TX completion (bsc#1104482, LTC#170340). - s390/qeth: rely on kernel for feature recovery (bsc#1104482, LTC#170340). - s390/qeth: use vzalloc for QUERY OAT buffer (LTC#171527, bsc#1106948). - s390/runtime instrumentation: simplify task exit handling (bsc#1103421). - s390: use expoline thunks for all branches generated by the BPF JIT (bsc#1103421). - samples/bpf: adjust rlimit RLIMIT_MEMLOCK for xdp1 (bsc#1083647). - sched/debug: Reverse the order of printing faults (bnc#1101669 optimise numa balancing for fast migrate). - sched/fair: Fix bandwidth timer clock drift condition (Git-fixes). - sched/fair: Fix vruntime_normalized() for remote non-migration wakeup (git-fixes). - sched/numa: Avoid task migration for small NUMA improvement (bnc#1101669 optimise numa balancing for fast migrate). - sched/numa: Do not move imbalanced load purely on the basis of an idle CPU (bnc#1101669 optimise numa balancing for fast migrate). - sched/numa: Evaluate move once per node (bnc#1101669 optimise numa balancing for fast migrate). - sched/numa: Evaluate move once per node (bnc#1101669 optimise numa balancing for fast migrate). - sched/numa: Modify migrate_swap() to accept additional parameters (bnc#1101669 optimise numa balancing for fast migrate). - sched/numa: Move task_numa_placement() closer to numa_migrate_preferred() (bnc#1101669 optimise numa balancing for fast migrate). - sched/numa: Pass destination CPU as a parameter to migrate_task_rq (bnc#1101669 optimise numa balancing for fast migrate). - sched/numa: Pass destination CPU as a parameter to migrate_task_rq kabi (bnc#1101669 optimise numa balancing for fast migrate). - sched/numa: Remove numa_has_capacity() (bnc#1101669 optimise numa balancing for fast migrate). - sched/numa: Remove redundant field (bnc#1101669 optimise numa balancing for fast migrate). - sched/numa: Remove redundant field -kabi (bnc#1101669 optimise numa balancing for fast migrate). - sched/numa: remove unused code from update_numa_stats() (bnc#1101669 optimise numa balancing for fast migrate). - sched/numa: remove unused nr_running field (bnc#1101669 optimise numa balancing for fast migrate). - sched/numa: Remove unused task_capacity from 'struct numa_stats' (bnc#1101669 optimise numa balancing for fast migrate). - sched/numa: Remove unused task_capacity from 'struct numa_stats' (bnc#1101669 optimise numa balancing for fast migrate). - sched/numa: Reset scan rate whenever task moves across nodes (bnc#1101669 optimise numa balancing for fast migrate). - sched/numa: Set preferred_node based on best_cpu (bnc#1101669 optimise numa balancing for fast migrate). - sched/numa: Simplify load_too_imbalanced() (bnc#1101669 optimise numa balancing for fast migrate). - sched/numa: Skip nodes that are at 'hoplimit' (bnc#1101669 optimise numa balancing for fast migrate). - sched/numa: Stop comparing tasks for NUMA placement after selecting an idle core (bnc#1101669 optimise numa balancing for fast migrate). - sched/numa: Stop multiple tasks from moving to the CPU at the same time (bnc#1101669 optimise numa balancing for fast migrate). - sched/numa: Stop multiple tasks from moving to the CPU at the same time kabi (bnc#1101669 optimise numa balancing for fast migrate). - sched/numa: Update the scan period without holding the numa_group lock (bnc#1101669 optimise numa balancing for fast migrate). - sched/numa: Use group_weights to identify if migration degrades locality (bnc#1101669 optimise numa balancing for fast migrate). - sched/numa: Use task faults only if numa_group is not yet set up (bnc#1101669 optimise numa balancing for fast migrate). - scripts/git_sort/git_sort.py: Add fixes branch from mkp/scsi.git. - scripts/git_sort/git_sort.py: add libnvdimm-for-next branch - scripts/git_sort/git_sort.py: add mkp 4.20/scsi-queue - scripts: modpost: check memory allocation results (bsc#1051510). - scsi: cxlflash: Abstract hardware dependent assignments (). - scsi: cxlflash: Acquire semaphore before invoking ioctl services (). - scsi: cxlflash: Adapter context init can return error (). - scsi: cxlflash: Adapter context support for OCXL (). - scsi: cxlflash: Add argument identifier names (). - scsi: cxlflash: Add include guards to backend.h (). - scsi: cxlflash: Avoid clobbering context control register value (). - scsi: cxlflash: Enable OCXL operations (). - scsi: cxlflash: Explicitly cache number of interrupts per context (). - scsi: cxlflash: Handle spurious interrupts (). - scsi: cxlflash: Hardware AFU for OCXL (). - scsi: cxlflash: Introduce object handle fop (). - scsi: cxlflash: Introduce OCXL backend (). - scsi: cxlflash: Introduce OCXL context state machine (). - scsi: cxlflash: Isolate external module dependencies (). - scsi: cxlflash: Limit the debug logs in the IO path (). - scsi: cxlflash: MMIO map the AFU (). - scsi: cxlflash: Preserve number of interrupts for master contexts (). - scsi: cxlflash: Read host AFU configuration (). - scsi: cxlflash: Read host function configuration (). - scsi: cxlflash: Register for translation errors (). - scsi: cxlflash: Remove commmands from pending list on timeout (). - scsi: cxlflash: Remove embedded CXL work structures (). - scsi: cxlflash: Setup AFU acTag range (). - scsi: cxlflash: Setup AFU PASID (). - scsi: cxlflash: Setup function acTag range (). - scsi: cxlflash: Setup function OCXL link (). - scsi: cxlflash: Setup LISNs for master contexts (). - scsi: cxlflash: Setup LISNs for user contexts (). - scsi: cxlflash: Setup OCXL transaction layer (). - scsi: cxlflash: Staging to support future accelerators (). - scsi: cxlflash: Support adapter context discovery (). - scsi: cxlflash: Support adapter context mmap and release (). - scsi: cxlflash: Support adapter context polling (). - scsi: cxlflash: Support adapter context reading (). - scsi: cxlflash: Support adapter file descriptors for OCXL (). - scsi: cxlflash: Support AFU interrupt management (). - scsi: cxlflash: Support AFU interrupt mapping and registration (). - scsi: cxlflash: Support AFU reset (). - scsi: cxlflash: Support AFU state toggling (). - scsi: cxlflash: Support file descriptor mapping (). - scsi: cxlflash: Support image reload policy modification (). - scsi: cxlflash: Support process element lifecycle (). - scsi: cxlflash: Support process specific mappings (). - scsi: cxlflash: Support reading adapter VPD data (). - scsi: cxlflash: Support starting an adapter context (). - scsi: cxlflash: Support starting user contexts (). - scsi: cxlflash: Synchronize reset and remove ops (). - scsi: cxlflash: Use IDR to manage adapter contexts (). - scsi: cxlflash: Use local mutex for AFU serialization (). - scsi: cxlflash: Yield to active send threads (). - scsi_debug: call resp_XXX function after setting host_scribble (bsc#1069138). - scsi_debug: reset injection flags for every_nth > 0 (bsc#1069138). - scsi: fcoe: hold disc_mutex when traversing rport lists (bsc#1077989). - scsi: hisi_sas: Add a flag to filter PHY events during reset (). - scsi: hisi_sas: add memory barrier in task delivery function (). - scsi: hisi_sas: Add missing PHY spinlock init (). - scsi: hisi_sas: Add SATA FIS check for v3 hw (). - scsi: hisi_sas: Adjust task reject period during host reset (). - scsi: hisi_sas: Drop hisi_sas_slot_abort() (). - scsi: hisi_sas: Fix the conflict between dev gone and host reset (). - scsi: hisi_sas: Fix the failure of recovering PHY from STP link timeout (). - scsi: hisi_sas: Implement handlers of PCIe FLR for v3 hw (). - scsi: hisi_sas: Only process broadcast change in phy_bcast_v3_hw() (). - scsi: hisi_sas: Pre-allocate slot DMA buffers (). - scsi: hisi_sas: Release all remaining resources in clear nexus ha (). - scsi: hisi_sas: relocate some common code for v3 hw (). - scsi: hisi_sas: tidy channel interrupt handler for v3 hw (). - scsi: hisi_sas: Tidy hisi_sas_task_prep() (). - scsi: hisi_sas: tidy host controller reset function a bit (). - scsi: hisi_sas: Update a couple of register settings for v3 hw (). - scsi: hisi_sas: Use dmam_alloc_coherent() (). - scsi: hpsa: limit transfer length to 1MB, not 512kB (bsc#1102346). - scsi: ipr: System hung while dlpar adding primary ipr adapter back (bsc#1109336). - scsi: libfc: Add lockdep annotations (bsc#1077989). - scsi: libfc: fixup lockdep annotations (bsc#1077989). - scsi: libfc: fixup 'sleeping function called from invalid context' (bsc#1077989). - scsi: libfc: hold disc_mutex in fc_disc_stop_rports() (bsc#1077989). - scsi: lpfc: Correct MDS diag and nvmet configuration (bsc#1106636). - scsi: mpt3sas: Fix calltrace observed while running IO & reset (bsc#1077989). - scsi: qla2xxx: Add appropriate debug info for invalid RX_ID (bsc#1108870). - scsi: qla2xxx: Add logic to detect ABTS hang and response completion (bsc#1108870). - scsi: qla2xxx: Add longer window for chip reset (bsc#1086327,). - scsi: qla2xxx: Add mode control for each physical port (bsc#1108870). - scsi: qla2xxx: Add support for ZIO6 interrupt threshold (bsc#1108870). - scsi: qla2xxx: Allow FC-NVMe underrun to be handled by transport (bsc#1108870). - scsi: qla2xxx: Check for Register disconnect (bsc#1108870). - scsi: qla2xxx: Cleanup for N2N code (bsc#1086327,). - scsi: qla2xxx: Decrement login retry count for only plogi (bsc#1108870). - scsi: qla2xxx: Defer chip reset until target mode is enabled (bsc#1108870). - scsi: qla2xxx: Fix deadlock between ATIO and HW lock (bsc#1108870). - scsi: qla2xxx: Fix double increment of switch scan retry count (bsc#1108870). - scsi: qla2xxx: Fix dropped srb resource (bsc#1108870). - scsi: qla2xxx: Fix duplicate switch's Nport ID entries (bsc#1108870). - scsi: qla2xxx: Fix early srb free on abort (bsc#1108870). - scsi: qla2xxx: Fix iIDMA error (bsc#1108870). - scsi: qla2xxx: Fix incorrect port speed being set for FC adapters (bsc#1108870). - scsi: qla2xxx: Fix ISP recovery on unload (bsc#1086327,). - scsi: qla2xxx: Fix issue reported by static checker for qla2x00_els_dcmd2_sp_done() (bsc#1086327,). - scsi: qla2xxx: Fix login retry count (bsc#1086327,). - scsi: qla2xxx: Fix Management Server NPort handle reservation logic (bsc#1086327,). - scsi: qla2xxx: Fix N2N link re-connect (bsc#1086327,). - scsi: qla2xxx: Fix out of order Termination and ABTS response (bsc#1108870). - scsi: qla2xxx: Fix port speed display on chip reset (bsc#1108870). - scsi: qla2xxx: Fix premature command free (bsc#1108870). - scsi: qla2xxx: Fix process response queue for ISP26XX and above (bsc#1108870). - scsi: qla2xxx: Fix race between switch cmd completion and timeout (bsc#1086327,). - scsi: qla2xxx: Fix race condition for resource cleanup (bsc#1108870). - scsi: qla2xxx: Fix redundant fc_rport registration (bsc#1086327,). - scsi: qla2xxx: Fix Remote port registration (bsc#1108870). - scsi: qla2xxx: Fix session state stuck in Get Port DB (bsc#1086327,). - scsi: qla2xxx: Fix stalled relogin (bsc#1086327,). - scsi: qla2xxx: Fix stuck session in PLOGI state (bsc#1108870). - scsi: qla2xxx: Fix unintended Logout (bsc#1086327,). - scsi: qla2xxx: Flush mailbox commands on chip reset (bsc#1086327,). - scsi: qla2xxx: Force fw cleanup on ADISC error (bsc#1108870). - scsi: qla2xxx: Increase abort timeout value (bsc#1108870). - scsi: qla2xxx: Migrate NVME N2N handling into state machine (bsc#1086327,). - scsi: qla2xxx: Move ABTS code behind qpair (bsc#1108870). - scsi: qla2xxx: Move {get|rel}_sp to base_qpair struct (bsc#1108870). - scsi: qla2xxx: Move rport registration out of internal work_list (bsc#1108870). - scsi: qla2xxx: Prevent sysfs access when chip is down (bsc#1086327,). - scsi: qla2xxx: Reduce holding sess_lock to prevent CPU lock-up (bsc#1108870). - scsi: qla2xxx: Reject bsg request if chip is down (bsc#1108870). - scsi: qla2xxx: Remove all rports if fabric scan retry fails (bsc#1108870). - scsi: qla2xxx: Remove ASYNC GIDPN switch command (bsc#1108870). - scsi: qla2xxx: Remove redundant check for fcport deletion (bsc#1108870). - scsi: qla2xxx: Remove stale ADISC_DONE event (bsc#1108870). - scsi: qla2xxx: Remove stale debug trace message from tcm_qla2xxx (bsc#1108870). - scsi: qla2xxx: Save frame payload size from ICB (bsc#1086327,). - scsi: qla2xxx: Serialize mailbox request (bsc#1108870). - scsi: qla2xxx: shutdown chip if reset fail (bsc#1108870). - scsi: qla2xxx: Silent erroneous message (bsc#1086327,). - scsi: qla2xxx: Spinlock recursion in qla_target (bsc#1086327,). - scsi: qla2xxx: Terminate Plogi/PRLI if WWN is 0 (bsc#1108870). - scsi: qla2xxx: Turn off IOCB timeout timer on IOCB completion (bsc#1108870). - scsi: qla2xxx: Update driver to version 10.00.00.09-k (bsc#1108870). - scsi: qla2xxx: Update driver version to 10.00.00.08-k (bsc#1086327,). - scsi: qla2xxx: Update driver version to 10.00.00.10-k (bsc#1108870). - scsi: qla2xxx: Update driver version to 10.00.00.11-k (bsc#1108870). - scsi: qla2xxx: Update rscn_rcvd field to more meaningful scan_needed (bsc#1108870). - scsi: qla2xxx: Use correct qpair for ABTS/CMD (bsc#1108870). - security: check for kstrdup() failure in lsm_append() (bsc#1051510). - selftests/bpf: fix a typo in map in map test (bsc#1083647). - selftests/bpf/test_maps: exit child process without error in ENOMEM case (bsc#1083647). - serial: 8250: Do not service RX FIFO if interrupts are disabled (bsc#1051510). - serial: 8250_dw: Add ACPI support for uart on Broadcom SoC (bsc#1051510). - serial: 8250_dw: always set baud rate in dw8250_set_termios (bsc#1051510). - serial: core: mark port as initialized after successful IRQ change (bsc#1051510). - serial: enable spi in sc16is7xx driver References: bsc#1105672 - serial: make sc16is7xx driver supported References: bsc#1105672 - serial: pxa: Fix an error handling path in 'serial_pxa_probe()' (bsc#1051510). - serial: sh-sci: Stop RX FIFO timer during port shutdown (bsc#1051510). - serial: xuartps: fix typo in cdns_uart_startup (bsc#1051510). - series.conf: Sort automatic NUMA balancing related patch - slab: __GFP_ZERO is incompatible with a constructor (bnc#1107060). - smsc75xx: Check for Wake-on-LAN modes (bsc#1051510). - smsc95xx: Check for Wake-on-LAN modes (bsc#1051510). - spi: cadence: Change usleep_range() to udelay(), for atomic context (bsc#1051510). - spi: davinci: fix a NULL pointer dereference (bsc#1051510). - spi-nor: intel-spi: Fix number of protected range registers for BYT/LPT (). - spi: pxa2xx: Add support for Intel Ice Lake (bsc#1051510). - spi: spi-fsl-dspi: Fix imprecise abort on VF500 during probe (bsc#1051510). - sr9800: Check for supported Wake-on-LAN modes (bsc#1051510). - sr: get/drop reference to device in revalidate and check_events (bsc#1109979). - staging: bcm2835-audio: Check if workqueue allocation failed (). - staging: bcm2835-audio: constify snd_pcm_ops structures (). - staging: bcm2835-audio: Deliver indirect-PCM transfer error (). - staging: bcm2835-audio: Disconnect and free vchi_instance on module_exit() (). - staging: bcm2835-audio: Do not leak workqueue if open fails (). - staging: bcm2835-audio: make snd_pcm_hardware const (). - staging: bcm2835-camera: fix timeout handling in wait_for_completion_timeout (bsc#1051510). - staging: bcm2835-camera: handle wait_for_completion_timeout return properly (bsc#1051510). - staging: comedi: ni_mio_common: fix subdevice flags for PFI subdevice (bsc#1051510). - staging: lustre: disable preempt while sampling processor id (bsc#1051510). - staging: lustre: fix bug in osc_enter_cache_try (bsc#1051510). - staging: lustre: ldlm: free resource when ldlm_lock_create() fails (bsc#1051510). - staging: lustre: libcfs: fix test for libcfs_ioctl_hdr minimum size (bsc#1051510). - staging: lustre: libcfs: Prevent harmless read underflow (bsc#1051510). - staging: lustre: llite: correct removexattr detection (bsc#1051510). - staging: lustre: llite: initialize xattr->xe_namelen (bsc#1051510). - staging: lustre: lmv: correctly iput lmo_root (bsc#1051510). - staging: lustre: lov: use correct env in lov_io_data_version_end() (bsc#1051510). - staging: lustre: o2iblnd: Fix crash in kiblnd_handle_early_rxs() (bsc#1051510). - staging: lustre: o2iblnd: Fix FastReg map/unmap for MLX5 (bsc#1051510). - staging: lustre: o2iblnd: fix race at kiblnd_connect_peer (bsc#1051510). - staging: lustre: obdclass: return -EFAULT if copy_from_user() fails (bsc#1051510). - staging: lustre: obd_mount: use correct niduuid suffix (bsc#1051510). - staging: lustre: ptlrpc: kfree used instead of kvfree (bsc#1051510). - staging: lustre: remove invariant in cl_io_read_ahead() (bsc#1051510). - staging: lustre: statahead: remove incorrect test on agl_list_empty() (bsc#1051510). - staging: lustre: Use 'kvfree()' for memory allocated by 'kvzalloc()' (bsc#1051510). - staging: rts5208: fix missing error check on call to rtsx_write_register (bsc#1051510). - staging: vc04_services: bcm2835-audio: Add blank line after declaration (). - staging: vc04_services: bcm2835-audio: add SPDX identifiers (). - staging: vc04_services: bcm2835-audio: Change to unsigned int * (). - staging: vc04_services: bcm2835-audio Format multiline comment (). - staging: vc04_services: bcm2835-audio: remove redundant license text (). - staging: vc04_services: Fix platform_no_drv_owner.cocci warnings (). - staging: vc04_services: please do not use multiple blank lines (). - stmmac: fix DMA channel hang in half-duplex mode (networking-stable-18_07_19). - string: drop __must_check from strscpy() and restore strscpy() usages in cgroup (bsc#1051510). - strparser: Remove early eaten to fix full tcp receive buffer stall (networking-stable-18_07_19). - sunxi-rsb: Include OF based modalias in device uevent (bsc#1051510). - sys: do not hold uts_sem while accessing userspace memory (bnc#1106995). - target_core_rbd: break up free_device callback (bsc#1105524). - target_core_rbd: use RCU in free_device (bsc#1105524). - tcp: add max_quickacks param to tcp_incr_quickack and tcp_enter_quickack_mode (netfilter-stable-18_08_01). - tcp: add one more quick ack after after ECN events (netfilter-stable-18_08_01). - tcp_bbr: fix bw probing to raise in-flight data for very small BDPs (netfilter-stable-18_08_01). - tcp: do not aggressively quick ack after ECN events (netfilter-stable-18_08_01). - tcp: do not cancel delay-AcK on DCTCP special ACK (netfilter-stable-18_07_27). - tcp: do not delay ACK in DCTCP upon CE status change (netfilter-stable-18_07_27). - tcp: do not force quickack when receiving out-of-order packets (netfilter-stable-18_08_01). - tcp: fix dctcp delayed ACK schedule (netfilter-stable-18_07_27). - tcp: fix Fast Open key endianness (networking-stable-18_07_19). - tcp: helpers to send special DCTCP ack (netfilter-stable-18_07_27). - tcp: prevent bogus FRTO undos with non-SACK flows (networking-stable-18_07_19). - tcp: refactor tcp_ecn_check_ce to remove sk type cast (netfilter-stable-18_08_01). - tg3: Add higher cpu clock for 5762 (netfilter-stable-18_07_23). - thermal_hwmon: Pass the originating device down to hwmon_device_register_with_info (bsc#1103363). - thermal_hwmon: Sanitize attribute name passed to hwmon (bsc#1103363). - thermal: thermal_hwmon: Convert to hwmon_device_register_with_info() (bsc#1103363). - ti: ethernet: cpdma: Use correct format for genpool_* (bsc#1051510). - tools/power turbostat: fix -S on UP systems (bsc#1051510). - tools/power turbostat: Read extended processor family from CPUID (bsc#1051510). - tools: usb: ffs-test: Fix build on big endian systems (bsc#1051510). - tpm: cmd_ready command can be issued only after granting locality (bsc#1082555). - tpm: fix race condition in tpm_common_write() (bsc#1082555). - tpm: fix use after free in tpm2_load_context() (bsc#1082555). - tpm: Introduce flag TPM_TRANSMIT_RAW (bsc#1082555). - tpm: separate cmd_ready/go_idle from runtime_pm (bsc#1082555). - tpm: tpm_crb: relinquish locality on error path (bsc#1082555). - tpm: vtpm_proxy: Implement request_locality function (bsc#1082555). - tracepoint: Do not warn on ENOMEM (bsc#1051510). - tty: fix termios input-speed encoding (bsc#1051510). - tty: fix termios input-speed encoding when using BOTHER (bsc#1051510). - tty: serial: 8250: Revert NXP SC16C2552 workaround (bsc#1051510). - uart: fix race between uart_put_char() and uart_shutdown() (bsc#1051510). - ubifs: Check data node size before truncate (bsc#1051510). - ubifs: Fix directory size calculation for symlinks (bsc#1106230). - ubifs: Fix memory leak in lprobs self-check (bsc#1051510). - ubifs: Fix synced_i_size calculation for xattr inodes (bsc#1051510). - ubifs: xattr: Do not operate on deleted inodes (bsc#1051510). - udlfb: set optimal write delay (bsc#1051510). - udl-kms: avoid division (bsc#1051510). - udl-kms: change down_interruptible to down (bsc#1051510). - udl-kms: fix crash due to uninitialized memory (bsc#1051510). - udl-kms: handle allocation failure (bsc#1051510). - uio, lib: Fix CONFIG_ARCH_HAS_UACCESS_MCSAFE compilation (bsc#1098782). - uio: potential double frees if __uio_register_device() fails (bsc#1051510). - Update config files, make CRYPTO_CRCT10DIF_PCLMUL built-in (bsc#1105603). - Update patches.drivers/0016-arm64-vgic-v2-Fix-proxying-of-cpuif-access.patch (bsc#1106901, bsc#1107265). - Update patches.fixes/4.4.139-043-powerpc-mm-hash-Add-missing-isync-prior-to-ke.pat ch (bnc#1012382, bsc#1094244). - Update patch tag of dmi fix (bsc#1105597) Also moved to the sorted section. - Update patch tags of recent security fixes (bsc#1106426) - uprobes: Use synchronize_rcu() not synchronize_sched() (bsc#1051510). - uprobes/x86: Remove incorrect WARN_ON() in uprobe_init_insn() (bsc#1051510). - usb: cdc-wdm: do not enable interrupts in USB-giveback (bsc#1051510). - usb: Do not die twice if PCI xhci host is not responding in resume (bsc#1051510). - usb: dwc2: fix isoc split in transfer with no data (bsc#1051510). - usb: dwc2: gadget: Fix issue in dwc2_gadget_start_isoc() (bsc#1051510). - usb: dwc3: change stream event enable bit back to 13 (bsc#1051510). - usb: dwc3: pci: add support for Intel IceLake (bsc#1051510). - usb: gadget: composite: fix delayed_status race condition when set_interface (bsc#1051510). - usb: gadget: dwc2: fix memory leak in gadget_init() (bsc#1051510). - usb: gadget: r8a66597: Fix a possible sleep-in-atomic-context bugs in r8a66597_queue() (bsc#1051510). - usb: gadget: r8a66597: Fix two possible sleep-in-atomic-context bugs in init_controller() (bsc#1051510). - usb: gadget: udc: renesas_usb3: fix maxpacket size of ep0 (bsc#1051510). - usb: net2280: Fix erroneous synchronization change (bsc#1051510). - usb: option: add support for DW5821e (bsc#1051510). - usb/phy: fix PPC64 build errors in phy-fsl-usb.c (bsc#1051510). - usb: serial: io_ti: fix array underflow in completion handler (bsc#1051510). - usb: serial: kobil_sct: fix modem-status error handling (bsc#1051510). - usb: serial: pl2303: add a new device id for ATEN (bsc#1051510). - usb: serial: sierra: fix potential deadlock at close (bsc#1051510). - usb: serial: ti_usb_3410_5052: fix array underflow in completion handler (bsc#1051510). - usb: xhci: increase CRS timeout value (bsc#1051510). - userns: move user access out of the mutex (bsc#1051510). - vfio/pci: Virtualize Maximum Payload Size (bsc#1051510). - vfio/pci: Virtualize Maximum Read Request Size (bsc#1051510). - vfio/type1: Fix task tracking for QEMU vCPU hotplug (bsc#1051510). - vfs: do not test owner for NFS in set_posix_acl() (bsc#1103405). - vhost: correctly check the iova range when waking virtqueue (bsc#1051510). - vhost: do not try to access device IOTLB when not initialized (bsc#1051510). - vhost_net: validate sock before trying to put its fd (networking-stable-18_07_19). - vhost: reset metadata cache when initializing new IOTLB (netfilter-stable-18_08_17). - vhost: use mutex_lock_nested() in vhost_dev_lock_vqs() (bsc#1051510). - video: fbdev: pxafb: clear allocated memory for video modes (bsc#1051510). - video: goldfishfb: fix memory leak on driver remove (bsc#1051510). - vmci: type promotion bug in qp_host_get_user_memory() (bsc#1105355). - vmw_balloon: do not use 2MB without batching (bsc#1051510). - vmw_balloon: fix inflation of 64-bit GFNs (bsc#1051510). - vmw_balloon: fix VMCI use when balloon built into kernel (bsc#1051510). - vmw_balloon: remove inflation rate limiting (bsc#1051510). - vmw_balloon: VMCI_DOORBELL_SET does not check status (bsc#1051510). - VSOCK: fix loopback on big-endian systems (networking-stable-18_07_19). - vsock: split dwork to avoid reinitializations (netfilter-stable-18_08_17). - vxlan: add new fdb alloc and create helpers (netfilter-stable-18_07_27). - vxlan: fix default fdb entry netlink notify ordering during netdev create (netfilter-stable-18_07_27). - vxlan: make netlink notify in vxlan_fdb_destroy optional (netfilter-stable-18_07_27). - wan/fsl_ucc_hdlc: use IS_ERR_VALUE() to check return value of qe_muram_alloc (bsc#1051510). - watchdog: Mark watchdog touch functions as notrace (git-fixes). - wlcore: Add missing PM call for wlcore_cmd_wait_for_event_or_timeout() (bsc#1051510). - wlcore: Set rx_status boottime_ns field on rx (bsc#1051510). - Workaround kABI breakage by __must_check drop of strscpy() (bsc#1051510). - x86/apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (bsc#1110006). - x86/apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (bsc#1110006). - x86/apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (bsc#1110006). - x86/apic/vector: Fix off by one in error path (bsc#1110006). - x86/asm/memcpy_mcsafe: Add labels for __memcpy_mcsafe() write fault handling (bsc#1098782). - x86/asm/memcpy_mcsafe: Add write-protection-fault handling (bsc#1098782). - x86/asm/memcpy_mcsafe: Define copy_to_iter_mcsafe() (bsc#1098782). - x86/asm/memcpy_mcsafe: Fix copy_to_user_mcsafe() exception handling (bsc#1098782). - x86/asm/memcpy_mcsafe: Provide original memcpy_mcsafe_unrolled (bsc#1098782). - x86/asm/memcpy_mcsafe: Remove loop unrolling (bsc#1098782). - x86/asm/memcpy_mcsafe: Return bytes remaining (bsc#1098782). - x86/boot: Fix kexec booting failure in the SEV bit detection code (bsc#1110301). - x86/build/64: Force the linker to use 2MB page size (bsc#1109603). - x86/CPU/AMD: Derive CPU topology from CPUID function 0xB when available (). - x86/CPU: Modify detect_extended_topology() to return result (). - x86/dumpstack: Save first regs set for the executive summary (bsc#1110006). - x86/dumpstack: Unify show_regs() (bsc#1110006). - x86/entry/64: Remove %ebx handling from error_entry/exit (bnc#1102715). - x86/entry/64: Wipe KASAN stack shadow before rewind_stack_do_exit() (bsc#1110006). - x86/espfix/64: Fix espfix double-fault handling on 5-level systems (bsc#1110006). - x86/events/intel/ds: Fix bts_interrupt_threshold alignment (git-fixes c1961a4631da). - x86/idt: Load idt early in start_secondary (bsc#1110006). - x86/init: fix build with CONFIG_SWAP=n (bnc#1106121). - x86: irq_remapping: Move irq remapping mode enum (). - x86/kasan/64: Teach KASAN about the cpu_entry_area (kasan). - x86/kexec: Avoid double free_page() upon do_kexec_load() failure (bsc#1110006). - x86/kvm: fix LAPIC timer drift when guest uses periodic mode (bsc#1106240). - x86/mce: Fix set_mce_nospec() to avoid #GP fault (bsc#1107783). - x86/mce: Improve error message when kernel cannot recover (bsc#1110006). - x86/mce: Improve error message when kernel cannot recover (bsc#1110301). - x86/mcelog: Get rid of RCU remnants (git-fixes 5de97c9f6d85). - x86/memory_failure: Introduce {set, clear}_mce_nospec() (bsc#1107783). - x86-memory_failure-Introduce-set-clear-_mce_nospec.patch: Fixup compilation breakage on s390 and arm due to missing clear_mce_nospec(). - x86/mm: Add TLB purge to free pmd/pte page interfaces (bsc#1110006). - x86/mm: Disable ioremap free page handling on x86-PAE (bsc#1110006). - x86/mm: Drop TS_COMPAT on 64-bit exec() syscall (bsc#1110006). - x86/mm: Expand static page table for fixmap space (bsc#1110006). - x86/mm: Fix ELF_ET_DYN_BASE for 5-level paging (bsc#1110006). - x86/mm: implement free pmd/pte page interfaces (bsc#1110006). - x86/mm/kasan: Do not use vmemmap_populate() to initialize shadow (kasan). - x86/mm/memory_hotplug: determine block size based on the end of boot memory (bsc#1108243). - x86/mm/pat: Prepare {reserve, free}_memtype() for "decoy" addresses (bsc#1107783). - x86/mm/tlb: Always use lazy TLB mode (bnc#1105467 Reduce IPIs and atomic ops with improved lazy TLB). - x86/mm/tlb: Leave lazy TLB mode at page table free time (bnc#1105467 Reduce IPIs and atomic ops with improved lazy TLB). - x86/mm/tlb: Make lazy TLB mode lazier (bnc#1105467 Reduce IPIs and atomic ops with improved lazy TLB). - x86/mm/tlb: Only send page table free TLB flush to lazy TLB CPUs (bnc#1105467 Reduce IPIs and atomic ops with improved lazy TLB). - x86/mm/tlb: Restructure switch_mm_irqs_off() (bnc#1105467 Reduce IPIs and atomic ops with improved lazy TLB). - x86/mm/tlb: Skip atomic operations for 'init_mm' in switch_mm_irqs_off() (bnc#1105467 Reduce IPIs and atomic ops with improved lazy TLB). - x86/mpx: Do not allow MPX if we have mappings above 47-bit (bsc#1110006). - x86: msr-index.h: Correct SNB_C1/C3_AUTO_UNDEMOTE defines (bsc#1110006). - x86: msr-index.h: Correct SNB_C1/C3_AUTO_UNDEMOTE defines (bsc#1110301). - x86/paravirt: Fix spectre-v2 mitigations for paravirt guests (bnc#1065600). - x86/pci: Make broadcom_postcore_init() check acpi_disabled (bsc#1110006). - x86/pkeys: Do not special case protection key 0 (bsc#1110006). - x86/pkeys: Override pkey when moving away from PROT_EXEC (bsc#1110006). - x86/platform/UV: Add adjustable set memory block size function (bsc#1108243). - x86/platform/UV: Add kernel parameter to set memory block size (bsc#1108243). - x86/platform/UV: Mark memblock related init code and data correctly (bsc#1108243). - x86/platform/UV: Use new set memory block size function (bsc#1108243). - x86/process: Do not mix user/kernel regs in 64bit __show_regs() (bsc#1110006). - x86/process: Re-export start_thread() (bsc#1110006). - x86/spectre: Add missing family 6 check to microcode check (git-fixes a5b296636453). - x86/speculation/l1tf: Fix off-by-one error when warning that system has too much RAM (bnc#1105536). - x86/speculation/l1tf: Increase l1tf memory limit for Nehalem+ (bnc#1105536). - x86/speculation/l1tf: Suggest what to do on systems with too much RAM (bnc#1105536). - x86/speculation: Use ARCH_CAPABILITIES to skip L1D flush on vmentry (bsc#1106369). - x86/vdso: Fix lsl operand order (bsc#1110006). - x86/vdso: Fix lsl operand order (bsc#1110301). - x86/vdso: Fix vDSO build if a retpoline is emitted (git-fixes 76b043848fd2). - x86/xen: Add call of speculative_store_bypass_ht_init() to PV paths (bnc#1065600). - x86/xen/efi: Initialize only the EFI struct members used by Xen (bnc#1107945). - xen: avoid crash in disable_hotplug_cpu (bsc#1106594). - xen/blkback: do not keep persistent grants too long (bsc#1085042). - xen/blkback: move persistent grants flags to bool (bsc#1085042). - xen/blkback: remove unused pers_gnts_lock from struct (bsc#1085042). - xen/blkfront: cleanup stale persistent grants (bsc#1085042). - xen/blkfront: reorder tests in xlblk_init() (bsc#1085042). - xenbus: track caller request id (bnc#1065600). - xen: issue warning message when out of grant maptrack entries (bsc#1105795). - xen-netfront-dont-bug-in-case-of-too-many-frags.patch: (bnc#1104824). - xen-netfront: fix queue name setting (bnc#1065600). - xen-netfront: fix warn message as irq device name has '/' (bnc#1065600). - xen: xenbus_dev_frontend: Fix XS_TRANSACTION_END handling (bnc#1065600). - xen: xenbus_dev_frontend: Really return response string (bnc#1065600). - xfs: add a new xfs_iext_lookup_extent_before helper (bsc#1095344). - xfs: add asserts for the mmap lock in xfs_{insert,collapse}_file_space (bsc#1095344). - xfs: add a xfs_bmap_fork_to_state helper (bsc#1095344). - xfs: add a xfs_iext_update_extent helper (bsc#1095344). - xfs: add comments documenting the rebalance algorithm (bsc#1095344). - xfs: add some comments to xfs_iext_insert/xfs_iext_insert_node (bsc#1095344). - xfs: allow unaligned extent records in xfs_bmbt_disk_set_all (bsc#1095344). - xfs, dax: introduce xfs_dax_aops (bsc#1104888). - xfs: do not create overlapping extents in xfs_bmap_add_extent_delay_real (bsc#1095344). - xfs: do not rely on extent indices in xfs_bmap_collapse_extents (bsc#1095344). - xfs: do not rely on extent indices in xfs_bmap_insert_extents (bsc#1095344). - xfs: do not set XFS_BTCUR_BPRV_WASDEL in xfs_bunmapi (bsc#1095344). - xfs: fix memory leak in xfs_iext_free_last_leaf (bsc#1095344). - xfs: fix number of records handling in xfs_iext_split_leaf (bsc#1095344). - xfs: Fix per-inode DAX flag inheritance (Git-fixes bsc#1109511). - xfs: fix type usage (bsc#1095344). - xfs: handle zero entries case in xfs_iext_rebalance_leaf (bsc#1095344). - xfs: inline xfs_shift_file_space into callers (bsc#1095344). - xfs: introduce the xfs_iext_cursor abstraction (bsc#1095344). - xfs: iterate backwards in xfs_reflink_cancel_cow_blocks (bsc#1095344). - xfs: iterate over extents in xfs_bmap_extents_to_btree (bsc#1095344). - xfs: iterate over extents in xfs_iextents_copy (bsc#1095344). - xfs: make better use of the 'state' variable in xfs_bmap_del_extent_real (bsc#1095344). - xfs: merge xfs_bmap_read_extents into xfs_iread_extents (bsc#1095344). - xfs: move pre/post-bmap tracing into xfs_iext_update_extent (bsc#1095344). - xfs: move some code around inside xfs_bmap_shift_extents (bsc#1095344). - xfs: move some more code into xfs_bmap_del_extent_real (bsc#1095344). - xfs: move xfs_bmbt_irec and xfs_exntst_t to xfs_types.h (bsc#1095344). - xfs: move xfs_iext_insert tracepoint to report useful information (bsc#1095344). - xfs: pass an on-disk extent to xfs_bmbt_validate_extent (bsc#1095344). - xfs: pass a struct xfs_bmbt_irec to xfs_bmbt_lookup_eq (bsc#1095344). - xfs: pass a struct xfs_bmbt_irec to xfs_bmbt_update (bsc#1095344). - xfs: pass struct xfs_bmbt_irec to xfs_bmbt_validate_extent (bsc#1095344). - xfs: preserve i_rdev when recycling a reclaimable inode (bsc#1095344). - xfs: refactor delalloc accounting in xfs_bmap_add_extent_delay_real (bsc#1095344). - xfs: refactor dir2 leaf readahead shadow buffer cleverness (bsc#1095344). - xfs: refactor xfs_bmap_add_extent_delay_real (bsc#1095344). - xfs: refactor xfs_bmap_add_extent_hole_delay (bsc#1095344). - xfs: refactor xfs_bmap_add_extent_hole_real (bsc#1095344). - xfs: refactor xfs_bmap_add_extent_unwritten_real (bsc#1095344). - xfs: refactor xfs_del_extent_real (bsc#1095344). - xfs: remove a duplicate assignment in xfs_bmap_add_extent_delay_real (bsc#1095344). - xfs: remove all xfs_bmbt_set_* helpers except for xfs_bmbt_set_all (bsc#1095344). - xfs: remove a superflous assignment in xfs_iext_remove_node (bsc#1095344). - xfs: Remove dead code from inode recover function (bsc#1105396). - xfs: remove if_rdev (bsc#1095344). - xfs: remove post-bmap tracing in xfs_bmap_local_to_extents (bsc#1095344). - xfs: remove support for inlining data/extents into the inode fork (bsc#1095344). - xfs: remove the never fully implemented UUID fork format (bsc#1095344). - xfs: remove the nr_extents argument to xfs_iext_insert (bsc#1095344). - xfs: remove the nr_extents argument to xfs_iext_remove (bsc#1095344). - xfs: remove XFS_BMAP_MAX_SHIFT_EXTENTS (bsc#1095344). - xfs: remove XFS_BMAP_TRACE_EXLIST (bsc#1095344). - xfs: remove xfs_bmbt_get_state (bsc#1095344). - xfs: remove xfs_bmse_shift_one (bsc#1095344). - xfs: rename bno to end in __xfs_bunmapi (bsc#1095344). - xfs: repair malformed inode items during log recovery (bsc#1105396). - xfs: replace xfs_bmbt_lookup_ge with xfs_bmbt_lookup_first (bsc#1095344). - xfs: replace xfs_qm_get_rtblks with a direct call to xfs_bmap_count_leaves (bsc#1095344). - xfs: rewrite getbmap using the xfs_iext_* helpers (bsc#1095344). - xfs: rewrite xfs_bmap_count_leaves using xfs_iext_get_extent (bsc#1095344). - xfs: rewrite xfs_bmap_first_unused to make better use of xfs_iext_get_extent (bsc#1095344). - xfs: simplify the xfs_getbmap interface (bsc#1095344). - xfs: simplify xfs_reflink_convert_cow (bsc#1095344). - xfs: split xfs_bmap_shift_extents (bsc#1095344). - xfs: switch xfs_bmap_local_to_extents to use xfs_iext_insert (bsc#1095344). - xfs: treat idx as a cursor in xfs_bmap_add_extent_delay_real (bsc#1095344). - xfs: treat idx as a cursor in xfs_bmap_add_extent_hole_delay (bsc#1095344). - xfs: treat idx as a cursor in xfs_bmap_add_extent_hole_real (bsc#1095344). - xfs: treat idx as a cursor in xfs_bmap_add_extent_unwritten_real (bsc#1095344). - xfs: treat idx as a cursor in xfs_bmap_collapse_extents (bsc#1095344). - xfs: treat idx as a cursor in xfs_bmap_del_extent_* (bsc#1095344). - xfs: trivial indentation fixup for xfs_iext_remove_node (bsc#1095344). - xfs: update got in xfs_bmap_shift_update_extent (bsc#1095344). - xfs: use a b+tree for the in-core extent list (bsc#1095344). - xfs: use correct state defines in xfs_bmap_del_extent_{cow,delay} (bsc#1095344). - xfs: use the state defines in xfs_bmap_del_extent_real (bsc#1095344). - xfs: use xfs_bmap_del_extent_delay for the data fork as well (bsc#1095344). - xfs: use xfs_iext_*_extent helpers in xfs_bmap_shift_extents (bsc#1095344). - xfs: use xfs_iext_*_extent helpers in xfs_bmap_split_extent_at (bsc#1095344). - xfs: use xfs_iext_get_extent instead of open coding it (bsc#1095344). - xfs: use xfs_iext_get_extent in xfs_bmap_first_unused (bsc#1095344). - xhci: Fix perceived dead host due to runtime suspend race with event handler (bsc#1051510). - xhci: Fix use after free for URB cancellation on a reallocated endpoint (bsc#1051510). - zram: fix null dereference of handle (bsc#1105355). Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1140=1 Package List: - openSUSE Leap 15.0 (x86_64): kernel-debug-4.12.14-lp150.12.19.2 kernel-debug-base-4.12.14-lp150.12.19.2 kernel-debug-base-debuginfo-4.12.14-lp150.12.19.2 kernel-debug-debuginfo-4.12.14-lp150.12.19.2 kernel-debug-debugsource-4.12.14-lp150.12.19.2 kernel-debug-devel-4.12.14-lp150.12.19.2 kernel-debug-devel-debuginfo-4.12.14-lp150.12.19.2 kernel-default-4.12.14-lp150.12.19.2 kernel-default-base-4.12.14-lp150.12.19.2 kernel-default-base-debuginfo-4.12.14-lp150.12.19.2 kernel-default-debuginfo-4.12.14-lp150.12.19.2 kernel-default-debugsource-4.12.14-lp150.12.19.2 kernel-default-devel-4.12.14-lp150.12.19.2 kernel-default-devel-debuginfo-4.12.14-lp150.12.19.2 kernel-kvmsmall-4.12.14-lp150.12.19.2 kernel-kvmsmall-base-4.12.14-lp150.12.19.2 kernel-kvmsmall-base-debuginfo-4.12.14-lp150.12.19.2 kernel-kvmsmall-debuginfo-4.12.14-lp150.12.19.2 kernel-kvmsmall-debugsource-4.12.14-lp150.12.19.2 kernel-kvmsmall-devel-4.12.14-lp150.12.19.2 kernel-kvmsmall-devel-debuginfo-4.12.14-lp150.12.19.2 kernel-obs-build-4.12.14-lp150.12.19.2 kernel-obs-build-debugsource-4.12.14-lp150.12.19.2 kernel-obs-qa-4.12.14-lp150.12.19.2 kernel-syms-4.12.14-lp150.12.19.1 kernel-vanilla-4.12.14-lp150.12.19.2 kernel-vanilla-base-4.12.14-lp150.12.19.2 kernel-vanilla-base-debuginfo-4.12.14-lp150.12.19.2 kernel-vanilla-debuginfo-4.12.14-lp150.12.19.2 kernel-vanilla-debugsource-4.12.14-lp150.12.19.2 kernel-vanilla-devel-4.12.14-lp150.12.19.2 kernel-vanilla-devel-debuginfo-4.12.14-lp150.12.19.2 - openSUSE Leap 15.0 (noarch): kernel-devel-4.12.14-lp150.12.19.1 kernel-docs-4.12.14-lp150.12.19.3 kernel-docs-html-4.12.14-lp150.12.19.3 kernel-macros-4.12.14-lp150.12.19.1 kernel-source-4.12.14-lp150.12.19.1 kernel-source-vanilla-4.12.14-lp150.12.19.1 References: https://www.suse.com/security/cve/CVE-2018-10902.html https://www.suse.com/security/cve/CVE-2018-10938.html https://www.suse.com/security/cve/CVE-2018-10940.html https://www.suse.com/security/cve/CVE-2018-1128.html https://www.suse.com/security/cve/CVE-2018-1129.html https://www.suse.com/security/cve/CVE-2018-12896.html https://www.suse.com/security/cve/CVE-2018-13093.html https://www.suse.com/security/cve/CVE-2018-13094.html https://www.suse.com/security/cve/CVE-2018-13095.html https://www.suse.com/security/cve/CVE-2018-14613.html https://www.suse.com/security/cve/CVE-2018-14617.html https://www.suse.com/security/cve/CVE-2018-14633.html https://www.suse.com/security/cve/CVE-2018-15572.html https://www.suse.com/security/cve/CVE-2018-16658.html https://www.suse.com/security/cve/CVE-2018-17182.html https://www.suse.com/security/cve/CVE-2018-6554.html https://www.suse.com/security/cve/CVE-2018-6555.html https://www.suse.com/security/cve/CVE-2018-9363.html https://bugzilla.suse.com/1012382 https://bugzilla.suse.com/1031392 https://bugzilla.suse.com/1043912 https://bugzilla.suse.com/1044189 https://bugzilla.suse.com/1046302 https://bugzilla.suse.com/1046305 https://bugzilla.suse.com/1046306 https://bugzilla.suse.com/1046307 https://bugzilla.suse.com/1046543 https://bugzilla.suse.com/1050244 https://bugzilla.suse.com/1051510 https://bugzilla.suse.com/1054914 https://bugzilla.suse.com/1055014 https://bugzilla.suse.com/1055117 https://bugzilla.suse.com/1055120 https://bugzilla.suse.com/1058659 https://bugzilla.suse.com/1060463 https://bugzilla.suse.com/1061840 https://bugzilla.suse.com/1064232 https://bugzilla.suse.com/1065600 https://bugzilla.suse.com/1065729 https://bugzilla.suse.com/1068032 https://bugzilla.suse.com/1069138 https://bugzilla.suse.com/1071995 https://bugzilla.suse.com/1077761 https://bugzilla.suse.com/1077989 https://bugzilla.suse.com/1078720 https://bugzilla.suse.com/1080157 https://bugzilla.suse.com/1082519 https://bugzilla.suse.com/1082555 https://bugzilla.suse.com/1083647 https://bugzilla.suse.com/1083663 https://bugzilla.suse.com/1084332 https://bugzilla.suse.com/1085030 https://bugzilla.suse.com/1085042 https://bugzilla.suse.com/1085262 https://bugzilla.suse.com/1086282 https://bugzilla.suse.com/1086327 https://bugzilla.suse.com/1089663 https://bugzilla.suse.com/1090078 https://bugzilla.suse.com/1090528 https://bugzilla.suse.com/1092903 https://bugzilla.suse.com/1093389 https://bugzilla.suse.com/1094244 https://bugzilla.suse.com/1095344 https://bugzilla.suse.com/1096748 https://bugzilla.suse.com/1097105 https://bugzilla.suse.com/1097583 https://bugzilla.suse.com/1097584 https://bugzilla.suse.com/1097585 https://bugzilla.suse.com/1097586 https://bugzilla.suse.com/1097587 https://bugzilla.suse.com/1097588 https://bugzilla.suse.com/1098459 https://bugzilla.suse.com/1098782 https://bugzilla.suse.com/1098822 https://bugzilla.suse.com/1099922 https://bugzilla.suse.com/1099999 https://bugzilla.suse.com/1100000 https://bugzilla.suse.com/1100001 https://bugzilla.suse.com/1100132 https://bugzilla.suse.com/1101480 https://bugzilla.suse.com/1101557 https://bugzilla.suse.com/1101669 https://bugzilla.suse.com/1101822 https://bugzilla.suse.com/1102346 https://bugzilla.suse.com/1102495 https://bugzilla.suse.com/1102517 https://bugzilla.suse.com/1102715 https://bugzilla.suse.com/1102870 https://bugzilla.suse.com/1102875 https://bugzilla.suse.com/1102877 https://bugzilla.suse.com/1102879 https://bugzilla.suse.com/1102882 https://bugzilla.suse.com/1102896 https://bugzilla.suse.com/1103269 https://bugzilla.suse.com/1103363 https://bugzilla.suse.com/1103387 https://bugzilla.suse.com/1103405 https://bugzilla.suse.com/1103421 https://bugzilla.suse.com/1103587 https://bugzilla.suse.com/1103636 https://bugzilla.suse.com/1103948 https://bugzilla.suse.com/1103949 https://bugzilla.suse.com/1103961 https://bugzilla.suse.com/1104172 https://bugzilla.suse.com/1104353 https://bugzilla.suse.com/1104365 https://bugzilla.suse.com/1104482 https://bugzilla.suse.com/1104683 https://bugzilla.suse.com/1104708 https://bugzilla.suse.com/1104824 https://bugzilla.suse.com/1104888 https://bugzilla.suse.com/1104890 https://bugzilla.suse.com/1104897 https://bugzilla.suse.com/1105190 https://bugzilla.suse.com/1105247 https://bugzilla.suse.com/1105292 https://bugzilla.suse.com/1105296 https://bugzilla.suse.com/1105322 https://bugzilla.suse.com/1105355 https://bugzilla.suse.com/1105378 https://bugzilla.suse.com/1105396 https://bugzilla.suse.com/1105467 https://bugzilla.suse.com/1105524 https://bugzilla.suse.com/1105536 https://bugzilla.suse.com/1105597 https://bugzilla.suse.com/1105603 https://bugzilla.suse.com/1105672 https://bugzilla.suse.com/1105731 https://bugzilla.suse.com/1105795 https://bugzilla.suse.com/1105907 https://bugzilla.suse.com/1106007 https://bugzilla.suse.com/1106016 https://bugzilla.suse.com/1106105 https://bugzilla.suse.com/1106121 https://bugzilla.suse.com/1106170 https://bugzilla.suse.com/1106178 https://bugzilla.suse.com/1106229 https://bugzilla.suse.com/1106230 https://bugzilla.suse.com/1106231 https://bugzilla.suse.com/1106233 https://bugzilla.suse.com/1106235 https://bugzilla.suse.com/1106236 https://bugzilla.suse.com/1106237 https://bugzilla.suse.com/1106238 https://bugzilla.suse.com/1106240 https://bugzilla.suse.com/1106291 https://bugzilla.suse.com/1106297 https://bugzilla.suse.com/1106333 https://bugzilla.suse.com/1106369 https://bugzilla.suse.com/1106426 https://bugzilla.suse.com/1106427 https://bugzilla.suse.com/1106464 https://bugzilla.suse.com/1106509 https://bugzilla.suse.com/1106511 https://bugzilla.suse.com/1106594 https://bugzilla.suse.com/1106636 https://bugzilla.suse.com/1106688 https://bugzilla.suse.com/1106697 https://bugzilla.suse.com/1106743 https://bugzilla.suse.com/1106779 https://bugzilla.suse.com/1106800 https://bugzilla.suse.com/1106890 https://bugzilla.suse.com/1106891 https://bugzilla.suse.com/1106892 https://bugzilla.suse.com/1106893 https://bugzilla.suse.com/1106894 https://bugzilla.suse.com/1106896 https://bugzilla.suse.com/1106897 https://bugzilla.suse.com/1106898 https://bugzilla.suse.com/1106899 https://bugzilla.suse.com/1106900 https://bugzilla.suse.com/1106901 https://bugzilla.suse.com/1106902 https://bugzilla.suse.com/1106903 https://bugzilla.suse.com/1106905 https://bugzilla.suse.com/1106906 https://bugzilla.suse.com/1106948 https://bugzilla.suse.com/1106995 https://bugzilla.suse.com/1107008 https://bugzilla.suse.com/1107060 https://bugzilla.suse.com/1107061 https://bugzilla.suse.com/1107065 https://bugzilla.suse.com/1107073 https://bugzilla.suse.com/1107074 https://bugzilla.suse.com/1107078 https://bugzilla.suse.com/1107265 https://bugzilla.suse.com/1107319 https://bugzilla.suse.com/1107320 https://bugzilla.suse.com/1107522 https://bugzilla.suse.com/1107535 https://bugzilla.suse.com/1107689 https://bugzilla.suse.com/1107735 https://bugzilla.suse.com/1107756 https://bugzilla.suse.com/1107783 https://bugzilla.suse.com/1107829 https://bugzilla.suse.com/1107870 https://bugzilla.suse.com/1107924 https://bugzilla.suse.com/1107928 https://bugzilla.suse.com/1107945 https://bugzilla.suse.com/1107947 https://bugzilla.suse.com/1107966 https://bugzilla.suse.com/1108010 https://bugzilla.suse.com/1108093 https://bugzilla.suse.com/1108096 https://bugzilla.suse.com/1108170 https://bugzilla.suse.com/1108243 https://bugzilla.suse.com/1108281 https://bugzilla.suse.com/1108323 https://bugzilla.suse.com/1108399 https://bugzilla.suse.com/1108520 https://bugzilla.suse.com/1108823 https://bugzilla.suse.com/1108870 https://bugzilla.suse.com/1109244 https://bugzilla.suse.com/1109269 https://bugzilla.suse.com/1109333 https://bugzilla.suse.com/1109336 https://bugzilla.suse.com/1109337 https://bugzilla.suse.com/1109511 https://bugzilla.suse.com/1109603 https://bugzilla.suse.com/1109806 https://bugzilla.suse.com/1109859 https://bugzilla.suse.com/1109979 https://bugzilla.suse.com/1109992 https://bugzilla.suse.com/1110006 https://bugzilla.suse.com/1110301 https://bugzilla.suse.com/1110363 https://bugzilla.suse.com/1110639 https://bugzilla.suse.com/1110642 https://bugzilla.suse.com/1110643 https://bugzilla.suse.com/1110644 https://bugzilla.suse.com/1110645 https://bugzilla.suse.com/1110646 https://bugzilla.suse.com/1110647 https://bugzilla.suse.com/1110649 https://bugzilla.suse.com/1110650 https://bugzilla.suse.com/1110716 https://bugzilla.suse.com/971975

1 0

openSUSE-RU-2018:3063-1: moderate: Recommended update for krb5
by maintenance＠opensuse.org 06 Oct '18

06 Oct '18

openSUSE Recommended Update: Recommended update for krb5 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3063-1 Rating: moderate References: #1088921 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for krb5 provides the following fix: - Resolve krb5 GSS credentials immediately if the application requests the lifetime. (bsc#1088921) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1137=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): krb5-1.12.5-19.2 krb5-client-1.12.5-19.2 krb5-client-debuginfo-1.12.5-19.2 krb5-debuginfo-1.12.5-19.2 krb5-debugsource-1.12.5-19.2 krb5-devel-1.12.5-19.2 krb5-doc-1.12.5-19.2 krb5-mini-1.12.5-19.1 krb5-mini-debuginfo-1.12.5-19.1 krb5-mini-debugsource-1.12.5-19.1 krb5-mini-devel-1.12.5-19.1 krb5-plugin-kdb-ldap-1.12.5-19.2 krb5-plugin-kdb-ldap-debuginfo-1.12.5-19.2 krb5-plugin-preauth-otp-1.12.5-19.2 krb5-plugin-preauth-otp-debuginfo-1.12.5-19.2 krb5-plugin-preauth-pkinit-1.12.5-19.2 krb5-plugin-preauth-pkinit-debuginfo-1.12.5-19.2 krb5-server-1.12.5-19.2 krb5-server-debuginfo-1.12.5-19.2 - openSUSE Leap 42.3 (x86_64): krb5-32bit-1.12.5-19.2 krb5-debuginfo-32bit-1.12.5-19.2 krb5-devel-32bit-1.12.5-19.2 References: https://bugzilla.suse.com/1088921

1 0

openSUSE-SU-2018:3062-1: moderate: Security update for php7
by opensuse-security＠opensuse.org 06 Oct '18

06 Oct '18

openSUSE Security Update: Security update for php7 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:3062-1 Rating: moderate References: #1108554 #1108753 Cross-References: CVE-2018-17082 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for php7 fixes the following issues: This security issue was fixed: - CVE-2018-17082: The Apache2 component in PHP allowed XSS via the body of a "Transfer-Encoding: chunked" request, because the bucket brigade was mishandled in the php_handler function (bsc#1108753) This non-security issue was fixed: - reenable php7-dba support of Berkeley DB (bsc#1108554) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1131=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): apache2-mod_php7-7.2.5-lp150.2.15.1 apache2-mod_php7-debuginfo-7.2.5-lp150.2.15.1 php7-7.2.5-lp150.2.15.1 php7-bcmath-7.2.5-lp150.2.15.1 php7-bcmath-debuginfo-7.2.5-lp150.2.15.1 php7-bz2-7.2.5-lp150.2.15.1 php7-bz2-debuginfo-7.2.5-lp150.2.15.1 php7-calendar-7.2.5-lp150.2.15.1 php7-calendar-debuginfo-7.2.5-lp150.2.15.1 php7-ctype-7.2.5-lp150.2.15.1 php7-ctype-debuginfo-7.2.5-lp150.2.15.1 php7-curl-7.2.5-lp150.2.15.1 php7-curl-debuginfo-7.2.5-lp150.2.15.1 php7-dba-7.2.5-lp150.2.15.1 php7-dba-debuginfo-7.2.5-lp150.2.15.1 php7-debuginfo-7.2.5-lp150.2.15.1 php7-debugsource-7.2.5-lp150.2.15.1 php7-devel-7.2.5-lp150.2.15.1 php7-dom-7.2.5-lp150.2.15.1 php7-dom-debuginfo-7.2.5-lp150.2.15.1 php7-embed-7.2.5-lp150.2.15.1 php7-embed-debuginfo-7.2.5-lp150.2.15.1 php7-enchant-7.2.5-lp150.2.15.1 php7-enchant-debuginfo-7.2.5-lp150.2.15.1 php7-exif-7.2.5-lp150.2.15.1 php7-exif-debuginfo-7.2.5-lp150.2.15.1 php7-fastcgi-7.2.5-lp150.2.15.1 php7-fastcgi-debuginfo-7.2.5-lp150.2.15.1 php7-fileinfo-7.2.5-lp150.2.15.1 php7-fileinfo-debuginfo-7.2.5-lp150.2.15.1 php7-firebird-7.2.5-lp150.2.15.1 php7-firebird-debuginfo-7.2.5-lp150.2.15.1 php7-fpm-7.2.5-lp150.2.15.1 php7-fpm-debuginfo-7.2.5-lp150.2.15.1 php7-ftp-7.2.5-lp150.2.15.1 php7-ftp-debuginfo-7.2.5-lp150.2.15.1 php7-gd-7.2.5-lp150.2.15.1 php7-gd-debuginfo-7.2.5-lp150.2.15.1 php7-gettext-7.2.5-lp150.2.15.1 php7-gettext-debuginfo-7.2.5-lp150.2.15.1 php7-gmp-7.2.5-lp150.2.15.1 php7-gmp-debuginfo-7.2.5-lp150.2.15.1 php7-iconv-7.2.5-lp150.2.15.1 php7-iconv-debuginfo-7.2.5-lp150.2.15.1 php7-intl-7.2.5-lp150.2.15.1 php7-intl-debuginfo-7.2.5-lp150.2.15.1 php7-json-7.2.5-lp150.2.15.1 php7-json-debuginfo-7.2.5-lp150.2.15.1 php7-ldap-7.2.5-lp150.2.15.1 php7-ldap-debuginfo-7.2.5-lp150.2.15.1 php7-mbstring-7.2.5-lp150.2.15.1 php7-mbstring-debuginfo-7.2.5-lp150.2.15.1 php7-mysql-7.2.5-lp150.2.15.1 php7-mysql-debuginfo-7.2.5-lp150.2.15.1 php7-odbc-7.2.5-lp150.2.15.1 php7-odbc-debuginfo-7.2.5-lp150.2.15.1 php7-opcache-7.2.5-lp150.2.15.1 php7-opcache-debuginfo-7.2.5-lp150.2.15.1 php7-openssl-7.2.5-lp150.2.15.1 php7-openssl-debuginfo-7.2.5-lp150.2.15.1 php7-pcntl-7.2.5-lp150.2.15.1 php7-pcntl-debuginfo-7.2.5-lp150.2.15.1 php7-pdo-7.2.5-lp150.2.15.1 php7-pdo-debuginfo-7.2.5-lp150.2.15.1 php7-pgsql-7.2.5-lp150.2.15.1 php7-pgsql-debuginfo-7.2.5-lp150.2.15.1 php7-phar-7.2.5-lp150.2.15.1 php7-phar-debuginfo-7.2.5-lp150.2.15.1 php7-posix-7.2.5-lp150.2.15.1 php7-posix-debuginfo-7.2.5-lp150.2.15.1 php7-readline-7.2.5-lp150.2.15.1 php7-readline-debuginfo-7.2.5-lp150.2.15.1 php7-shmop-7.2.5-lp150.2.15.1 php7-shmop-debuginfo-7.2.5-lp150.2.15.1 php7-snmp-7.2.5-lp150.2.15.1 php7-snmp-debuginfo-7.2.5-lp150.2.15.1 php7-soap-7.2.5-lp150.2.15.1 php7-soap-debuginfo-7.2.5-lp150.2.15.1 php7-sockets-7.2.5-lp150.2.15.1 php7-sockets-debuginfo-7.2.5-lp150.2.15.1 php7-sodium-7.2.5-lp150.2.15.1 php7-sodium-debuginfo-7.2.5-lp150.2.15.1 php7-sqlite-7.2.5-lp150.2.15.1 php7-sqlite-debuginfo-7.2.5-lp150.2.15.1 php7-sysvmsg-7.2.5-lp150.2.15.1 php7-sysvmsg-debuginfo-7.2.5-lp150.2.15.1 php7-sysvsem-7.2.5-lp150.2.15.1 php7-sysvsem-debuginfo-7.2.5-lp150.2.15.1 php7-sysvshm-7.2.5-lp150.2.15.1 php7-sysvshm-debuginfo-7.2.5-lp150.2.15.1 php7-tidy-7.2.5-lp150.2.15.1 php7-tidy-debuginfo-7.2.5-lp150.2.15.1 php7-tokenizer-7.2.5-lp150.2.15.1 php7-tokenizer-debuginfo-7.2.5-lp150.2.15.1 php7-wddx-7.2.5-lp150.2.15.1 php7-wddx-debuginfo-7.2.5-lp150.2.15.1 php7-xmlreader-7.2.5-lp150.2.15.1 php7-xmlreader-debuginfo-7.2.5-lp150.2.15.1 php7-xmlrpc-7.2.5-lp150.2.15.1 php7-xmlrpc-debuginfo-7.2.5-lp150.2.15.1 php7-xmlwriter-7.2.5-lp150.2.15.1 php7-xmlwriter-debuginfo-7.2.5-lp150.2.15.1 php7-xsl-7.2.5-lp150.2.15.1 php7-xsl-debuginfo-7.2.5-lp150.2.15.1 php7-zip-7.2.5-lp150.2.15.1 php7-zip-debuginfo-7.2.5-lp150.2.15.1 php7-zlib-7.2.5-lp150.2.15.1 php7-zlib-debuginfo-7.2.5-lp150.2.15.1 - openSUSE Leap 15.0 (noarch): php7-pear-7.2.5-lp150.2.15.1 php7-pear-Archive_Tar-7.2.5-lp150.2.15.1 References: https://www.suse.com/security/cve/CVE-2018-17082.html https://bugzilla.suse.com/1108554 https://bugzilla.suse.com/1108753

1 0

openSUSE-RU-2018:3061-1: moderate: Recommended update for yast2-firstboot
by maintenance＠opensuse.org 06 Oct '18

06 Oct '18

openSUSE Recommended Update: Recommended update for yast2-firstboot ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3061-1 Rating: moderate References: #1104158 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-firstboot provides the following fix: - An Exception error was triggered when calling firstboot_write client (bsc#1104158) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1135=1 Package List: - openSUSE Leap 15.0 (noarch): yast2-firstboot-4.0.6-lp150.2.6.1 References: https://bugzilla.suse.com/1104158

1 0

openSUSE-RU-2018:3060-1: moderate: Recommended update for yast2 and yast2-services-manager
by maintenance＠opensuse.org 06 Oct '18

06 Oct '18

openSUSE Recommended Update: Recommended update for yast2 and yast2-services-manager ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3060-1 Rating: moderate References: #1080738 #1093111 #1096027 #1098910 #1104568 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: This update for yast2 and yast2-services-manager provides the following fixes: Fixes in both packages: - Add support for systemd services that can only be started on-demand. (fate#319428, bsc#1104568) - Fix support to handle services during early 1st stage. (fate#319428) Fixes in yast2: - Improve systemd socket detection. (fate#319428) - Fix an exception in SystemService#find_many. - Add a method to detect whether a systemd service exists in the underlying system or not. (fate#319428) - Fix systemd socket detection. - Do not display "download failed" error when using unsigned packages. (bsc#1096027) - Firewall state can now be correctly determined. (bsc#1093111) - Increases the timeout for systemctl command executions (bsc#1098910) - CWM: allow to define next handler for CWM#show and define default next handler in CWM::Dialog. This is needed for Expert Partitioner. (fate#318196) Fixes in yast2-services-manager: - Show systemd state and substate for each service, e.g. "Active (Running)". (bsc#1080738) - Added a new menu button to select the service start mode (on boot, on demand or manually). (fate#319427) - Added additional searchkeys to desktop file. (fate#321043) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1136=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): yast2-4.0.87-lp150.2.9.1 - openSUSE Leap 15.0 (noarch): yast2-services-manager-4.0.7-lp150.2.3.1 References: https://bugzilla.suse.com/1080738 https://bugzilla.suse.com/1093111 https://bugzilla.suse.com/1096027 https://bugzilla.suse.com/1098910 https://bugzilla.suse.com/1104568

1 0

openSUSE-RU-2018:3059-1: important: Recommended update for kdump
by maintenance＠opensuse.org 06 Oct '18

06 Oct '18

openSUSE Recommended Update: Recommended update for kdump ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3059-1 Rating: important References: #1091186 #1102609 #1107098 #1108170 #1109784 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: This update for kdump provides the following fixes: - fadump: Add udev event support for fadump. (bsc#1108170) - Turn off NUMA in the kdump kernel. (bsc#1109784, bsc#1102609) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1132=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): kdump-0.8.16-5.12.1 kdump-debuginfo-0.8.16-5.12.1 kdump-debugsource-0.8.16-5.12.1 References: https://bugzilla.suse.com/1091186 https://bugzilla.suse.com/1102609 https://bugzilla.suse.com/1107098 https://bugzilla.suse.com/1108170 https://bugzilla.suse.com/1109784

1 0

openSUSE-RU-2018:3058-1: Recommended update for libqt5-qtbase
by maintenance＠opensuse.org 06 Oct '18

06 Oct '18

openSUSE Recommended Update: Recommended update for libqt5-qtbase ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3058-1 Rating: low References: #1057971 #1108889 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for libqt5-qtbase provides the following fixes: - Fix crash with XLIB_SKIP_ARGB_VISUALS set (bsc#1057971) - Avoid using the hardcoded resolution that libinput is giving as a real pixel delta - Add patch to fix fails to load pixmap cursors on XRendur less system. (bsc#1108889) - Add patch to fix crash with XLIB_SKIP_ARGB_VISUALS set. (bsc#1057971, kde#384540) - Add patch to avoid using the hardcoded resolution that libinput is giving as a real pixel delta (QTBUG-59261). This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1133=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libQt5Bootstrap-devel-static-5.6.2-7.3.1 libQt5Concurrent-devel-5.6.2-7.3.1 libQt5Concurrent5-5.6.2-7.3.1 libQt5Concurrent5-debuginfo-5.6.2-7.3.1 libQt5Core-devel-5.6.2-7.3.1 libQt5Core5-5.6.2-7.3.1 libQt5Core5-debuginfo-5.6.2-7.3.1 libQt5DBus-devel-5.6.2-7.3.1 libQt5DBus-devel-debuginfo-5.6.2-7.3.1 libQt5DBus5-5.6.2-7.3.1 libQt5DBus5-debuginfo-5.6.2-7.3.1 libQt5Gui-devel-5.6.2-7.3.1 libQt5Gui5-5.6.2-7.3.1 libQt5Gui5-debuginfo-5.6.2-7.3.1 libQt5Network-devel-5.6.2-7.3.1 libQt5Network5-5.6.2-7.3.1 libQt5Network5-debuginfo-5.6.2-7.3.1 libQt5OpenGL-devel-5.6.2-7.3.1 libQt5OpenGL5-5.6.2-7.3.1 libQt5OpenGL5-debuginfo-5.6.2-7.3.1 libQt5OpenGLExtensions-devel-static-5.6.2-7.3.1 libQt5PlatformHeaders-devel-5.6.2-7.3.1 libQt5PlatformSupport-devel-static-5.6.2-7.3.1 libQt5PrintSupport-devel-5.6.2-7.3.1 libQt5PrintSupport5-5.6.2-7.3.1 libQt5PrintSupport5-debuginfo-5.6.2-7.3.1 libQt5Sql-devel-5.6.2-7.3.1 libQt5Sql5-5.6.2-7.3.1 libQt5Sql5-debuginfo-5.6.2-7.3.1 libQt5Sql5-mysql-5.6.2-7.3.1 libQt5Sql5-mysql-debuginfo-5.6.2-7.3.1 libQt5Sql5-postgresql-5.6.2-7.3.1 libQt5Sql5-postgresql-debuginfo-5.6.2-7.3.1 libQt5Sql5-sqlite-5.6.2-7.3.1 libQt5Sql5-sqlite-debuginfo-5.6.2-7.3.1 libQt5Sql5-unixODBC-5.6.2-7.3.1 libQt5Sql5-unixODBC-debuginfo-5.6.2-7.3.1 libQt5Test-devel-5.6.2-7.3.1 libQt5Test5-5.6.2-7.3.1 libQt5Test5-debuginfo-5.6.2-7.3.1 libQt5Widgets-devel-5.6.2-7.3.1 libQt5Widgets5-5.6.2-7.3.1 libQt5Widgets5-debuginfo-5.6.2-7.3.1 libQt5Xml-devel-5.6.2-7.3.1 libQt5Xml5-5.6.2-7.3.1 libQt5Xml5-debuginfo-5.6.2-7.3.1 libqt5-qtbase-common-devel-5.6.2-7.3.1 libqt5-qtbase-common-devel-debuginfo-5.6.2-7.3.1 libqt5-qtbase-debugsource-5.6.2-7.3.1 libqt5-qtbase-devel-5.6.2-7.3.1 libqt5-qtbase-examples-5.6.2-7.3.1 libqt5-qtbase-examples-debuginfo-5.6.2-7.3.1 - openSUSE Leap 42.3 (noarch): libQt5Core-private-headers-devel-5.6.2-7.3.1 libQt5DBus-private-headers-devel-5.6.2-7.3.1 libQt5Gui-private-headers-devel-5.6.2-7.3.1 libQt5Network-private-headers-devel-5.6.2-7.3.1 libQt5OpenGL-private-headers-devel-5.6.2-7.3.1 libQt5PlatformSupport-private-headers-devel-5.6.2-7.3.1 libQt5PrintSupport-private-headers-devel-5.6.2-7.3.1 libQt5Sql-private-headers-devel-5.6.2-7.3.1 libQt5Test-private-headers-devel-5.6.2-7.3.1 libQt5Widgets-private-headers-devel-5.6.2-7.3.1 libqt5-qtbase-private-headers-devel-5.6.2-7.3.1 - openSUSE Leap 42.3 (x86_64): libQt5Bootstrap-devel-static-32bit-5.6.2-7.3.1 libQt5Concurrent-devel-32bit-5.6.2-7.3.1 libQt5Concurrent5-32bit-5.6.2-7.3.1 libQt5Concurrent5-debuginfo-32bit-5.6.2-7.3.1 libQt5Core-devel-32bit-5.6.2-7.3.1 libQt5Core5-32bit-5.6.2-7.3.1 libQt5Core5-debuginfo-32bit-5.6.2-7.3.1 libQt5DBus-devel-32bit-5.6.2-7.3.1 libQt5DBus-devel-debuginfo-32bit-5.6.2-7.3.1 libQt5DBus5-32bit-5.6.2-7.3.1 libQt5DBus5-debuginfo-32bit-5.6.2-7.3.1 libQt5Gui-devel-32bit-5.6.2-7.3.1 libQt5Gui5-32bit-5.6.2-7.3.1 libQt5Gui5-debuginfo-32bit-5.6.2-7.3.1 libQt5Network-devel-32bit-5.6.2-7.3.1 libQt5Network5-32bit-5.6.2-7.3.1 libQt5Network5-debuginfo-32bit-5.6.2-7.3.1 libQt5OpenGL-devel-32bit-5.6.2-7.3.1 libQt5OpenGL5-32bit-5.6.2-7.3.1 libQt5OpenGL5-debuginfo-32bit-5.6.2-7.3.1 libQt5OpenGLExtensions-devel-static-32bit-5.6.2-7.3.1 libQt5PlatformSupport-devel-static-32bit-5.6.2-7.3.1 libQt5PrintSupport-devel-32bit-5.6.2-7.3.1 libQt5PrintSupport5-32bit-5.6.2-7.3.1 libQt5PrintSupport5-debuginfo-32bit-5.6.2-7.3.1 libQt5Sql-devel-32bit-5.6.2-7.3.1 libQt5Sql5-32bit-5.6.2-7.3.1 libQt5Sql5-debuginfo-32bit-5.6.2-7.3.1 libQt5Sql5-mysql-32bit-5.6.2-7.3.1 libQt5Sql5-mysql-debuginfo-32bit-5.6.2-7.3.1 libQt5Sql5-postgresql-32bit-5.6.2-7.3.1 libQt5Sql5-postgresql-debuginfo-32bit-5.6.2-7.3.1 libQt5Sql5-sqlite-32bit-5.6.2-7.3.1 libQt5Sql5-sqlite-debuginfo-32bit-5.6.2-7.3.1 libQt5Sql5-unixODBC-32bit-5.6.2-7.3.1 libQt5Sql5-unixODBC-debuginfo-32bit-5.6.2-7.3.1 libQt5Test-devel-32bit-5.6.2-7.3.1 libQt5Test5-32bit-5.6.2-7.3.1 libQt5Test5-debuginfo-32bit-5.6.2-7.3.1 libQt5Widgets-devel-32bit-5.6.2-7.3.1 libQt5Widgets5-32bit-5.6.2-7.3.1 libQt5Widgets5-debuginfo-32bit-5.6.2-7.3.1 libQt5Xml-devel-32bit-5.6.2-7.3.1 libQt5Xml5-32bit-5.6.2-7.3.1 libQt5Xml5-debuginfo-32bit-5.6.2-7.3.1 libqt5-qtbase-examples-32bit-5.6.2-7.3.1 libqt5-qtbase-examples-debuginfo-32bit-5.6.2-7.3.1 References: https://bugzilla.suse.com/1057971 https://bugzilla.suse.com/1108889

1 0

openSUSE-SU-2018:3057-1: important: Security update for java-1_8_0-openjdk
by opensuse-security＠opensuse.org 06 Oct '18

06 Oct '18

openSUSE Security Update: Security update for java-1_8_0-openjdk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:3057-1 Rating: important References: #1101644 #1101645 #1101651 #1101656 #1106812 Cross-References: CVE-2018-2938 CVE-2018-2940 CVE-2018-2952 CVE-2018-2973 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves four vulnerabilities and has one errata is now available. Description: This update for java-1_8_0-openjdk to the jdk8u181 (icedtea 3.9.0) release fixes the following issues: These security issues were fixed: - CVE-2018-2938: Difficult to exploit vulnerability allowed unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in takeover of Java SE (bsc#1101644). - CVE-2018-2940: Vulnerability in subcomponent: Libraries. Easily exploitable vulnerability allowed unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data (bsc#1101645) - CVE-2018-2952: Vulnerability in subcomponent: Concurrency. Difficult to exploit vulnerability allowed unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit (bsc#1101651) - CVE-2018-2973: Vulnerability in subcomponent: JSSE. Difficult to exploit vulnerability allowed unauthenticated attacker with network access via SSL/TLS to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data (bsc#1101656) These non-security issues were fixed: - Improve desktop file usage - Better Internet address support - speculative traps break when classes are redefined - sun/security/pkcs11/ec/ReadCertificates.java fails intermittently - Clean up code that saves the previous versions of redefined classes - Prevent SIGSEGV in ReceiverTypeData::clean_weak_klass_links - RedefineClasses() tests fail assert(((Metadata*)obj)->is_valid()) failed: obj is valid - NMT is not enabled if NMT option is specified after class path specifiers - EndEntityChecker should not process custom extensions after PKIX validation - SupportedDSAParamGen.java failed with timeout - Montgomery multiply intrinsic should use correct name - When determining the ciphersuite lists, there is no debug output for disabled suites. - sun/security/mscapi/SignedObjectChain.java fails on Windows - On Windows Swing changes keyboard layout on a window activation - IfNode::range_check_trap_proj() should handler dying subgraph with single if proj - Even better Internet address support - Newlines in JAXB string values of SOAP-requests are escaped to "
" - TestFlushableGZIPOutputStream failing with IndexOutOfBoundsException - Unable to use JDWP API in JDK 8 to debug JDK 9 VM - Hotspot crash on Cassandra 3.11.1 startup with libnuma 2.0.3 - Performance drop with Java JDK 1.8.0_162-b32 - Upgrade time-zone data to tzdata2018d - Fix potential crash in BufImg_SetupICM - JDK 8u181 l10n resource file update - Remove debug print statements from RMI fix - (tz) Upgrade time-zone data to tzdata2018e - ObjectInputStream filterCheck method throws NullPointerException - adjust reflective access checks - Fixed builds on s390 (bsc#1106812) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1138=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): java-1_8_0-openjdk-1.8.0.181-lp150.2.6.1 java-1_8_0-openjdk-accessibility-1.8.0.181-lp150.2.6.1 java-1_8_0-openjdk-debuginfo-1.8.0.181-lp150.2.6.1 java-1_8_0-openjdk-debugsource-1.8.0.181-lp150.2.6.1 java-1_8_0-openjdk-demo-1.8.0.181-lp150.2.6.1 java-1_8_0-openjdk-demo-debuginfo-1.8.0.181-lp150.2.6.1 java-1_8_0-openjdk-devel-1.8.0.181-lp150.2.6.1 java-1_8_0-openjdk-devel-debuginfo-1.8.0.181-lp150.2.6.1 java-1_8_0-openjdk-headless-1.8.0.181-lp150.2.6.1 java-1_8_0-openjdk-headless-debuginfo-1.8.0.181-lp150.2.6.1 java-1_8_0-openjdk-src-1.8.0.181-lp150.2.6.1 - openSUSE Leap 15.0 (noarch): java-1_8_0-openjdk-javadoc-1.8.0.181-lp150.2.6.1 References: https://www.suse.com/security/cve/CVE-2018-2938.html https://www.suse.com/security/cve/CVE-2018-2940.html https://www.suse.com/security/cve/CVE-2018-2952.html https://www.suse.com/security/cve/CVE-2018-2973.html https://bugzilla.suse.com/1101644 https://bugzilla.suse.com/1101645 https://bugzilla.suse.com/1101651 https://bugzilla.suse.com/1101656 https://bugzilla.suse.com/1106812

1 0

openSUSE-SU-2018:3056-1: moderate: Security update for php5
by opensuse-security＠opensuse.org 06 Oct '18

06 Oct '18

openSUSE Security Update: Security update for php5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:3056-1 Rating: moderate References: #1108753 Cross-References: CVE-2018-17082 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for php5 fixes the following issue: - CVE-2018-17082: The Apache2 component in PHP allowed XSS via the body of a "Transfer-Encoding: chunked" request, because the bucket brigade was mishandled in the php_handler function (bsc#1108753) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1130=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): apache2-mod_php5-5.5.14-106.2 apache2-mod_php5-debuginfo-5.5.14-106.2 php5-5.5.14-106.2 php5-bcmath-5.5.14-106.2 php5-bcmath-debuginfo-5.5.14-106.2 php5-bz2-5.5.14-106.2 php5-bz2-debuginfo-5.5.14-106.2 php5-calendar-5.5.14-106.2 php5-calendar-debuginfo-5.5.14-106.2 php5-ctype-5.5.14-106.2 php5-ctype-debuginfo-5.5.14-106.2 php5-curl-5.5.14-106.2 php5-curl-debuginfo-5.5.14-106.2 php5-dba-5.5.14-106.2 php5-dba-debuginfo-5.5.14-106.2 php5-debuginfo-5.5.14-106.2 php5-debugsource-5.5.14-106.2 php5-devel-5.5.14-106.2 php5-dom-5.5.14-106.2 php5-dom-debuginfo-5.5.14-106.2 php5-enchant-5.5.14-106.2 php5-enchant-debuginfo-5.5.14-106.2 php5-exif-5.5.14-106.2 php5-exif-debuginfo-5.5.14-106.2 php5-fastcgi-5.5.14-106.2 php5-fastcgi-debuginfo-5.5.14-106.2 php5-fileinfo-5.5.14-106.2 php5-fileinfo-debuginfo-5.5.14-106.2 php5-firebird-5.5.14-106.2 php5-firebird-debuginfo-5.5.14-106.2 php5-fpm-5.5.14-106.2 php5-fpm-debuginfo-5.5.14-106.2 php5-ftp-5.5.14-106.2 php5-ftp-debuginfo-5.5.14-106.2 php5-gd-5.5.14-106.2 php5-gd-debuginfo-5.5.14-106.2 php5-gettext-5.5.14-106.2 php5-gettext-debuginfo-5.5.14-106.2 php5-gmp-5.5.14-106.2 php5-gmp-debuginfo-5.5.14-106.2 php5-iconv-5.5.14-106.2 php5-iconv-debuginfo-5.5.14-106.2 php5-imap-5.5.14-106.2 php5-imap-debuginfo-5.5.14-106.2 php5-intl-5.5.14-106.2 php5-intl-debuginfo-5.5.14-106.2 php5-json-5.5.14-106.2 php5-json-debuginfo-5.5.14-106.2 php5-ldap-5.5.14-106.2 php5-ldap-debuginfo-5.5.14-106.2 php5-mbstring-5.5.14-106.2 php5-mbstring-debuginfo-5.5.14-106.2 php5-mcrypt-5.5.14-106.2 php5-mcrypt-debuginfo-5.5.14-106.2 php5-mssql-5.5.14-106.2 php5-mssql-debuginfo-5.5.14-106.2 php5-mysql-5.5.14-106.2 php5-mysql-debuginfo-5.5.14-106.2 php5-odbc-5.5.14-106.2 php5-odbc-debuginfo-5.5.14-106.2 php5-opcache-5.5.14-106.2 php5-opcache-debuginfo-5.5.14-106.2 php5-openssl-5.5.14-106.2 php5-openssl-debuginfo-5.5.14-106.2 php5-pcntl-5.5.14-106.2 php5-pcntl-debuginfo-5.5.14-106.2 php5-pdo-5.5.14-106.2 php5-pdo-debuginfo-5.5.14-106.2 php5-pgsql-5.5.14-106.2 php5-pgsql-debuginfo-5.5.14-106.2 php5-phar-5.5.14-106.2 php5-phar-debuginfo-5.5.14-106.2 php5-posix-5.5.14-106.2 php5-posix-debuginfo-5.5.14-106.2 php5-pspell-5.5.14-106.2 php5-pspell-debuginfo-5.5.14-106.2 php5-readline-5.5.14-106.2 php5-readline-debuginfo-5.5.14-106.2 php5-shmop-5.5.14-106.2 php5-shmop-debuginfo-5.5.14-106.2 php5-snmp-5.5.14-106.2 php5-snmp-debuginfo-5.5.14-106.2 php5-soap-5.5.14-106.2 php5-soap-debuginfo-5.5.14-106.2 php5-sockets-5.5.14-106.2 php5-sockets-debuginfo-5.5.14-106.2 php5-sqlite-5.5.14-106.2 php5-sqlite-debuginfo-5.5.14-106.2 php5-suhosin-5.5.14-106.2 php5-suhosin-debuginfo-5.5.14-106.2 php5-sysvmsg-5.5.14-106.2 php5-sysvmsg-debuginfo-5.5.14-106.2 php5-sysvsem-5.5.14-106.2 php5-sysvsem-debuginfo-5.5.14-106.2 php5-sysvshm-5.5.14-106.2 php5-sysvshm-debuginfo-5.5.14-106.2 php5-tidy-5.5.14-106.2 php5-tidy-debuginfo-5.5.14-106.2 php5-tokenizer-5.5.14-106.2 php5-tokenizer-debuginfo-5.5.14-106.2 php5-wddx-5.5.14-106.2 php5-wddx-debuginfo-5.5.14-106.2 php5-xmlreader-5.5.14-106.2 php5-xmlreader-debuginfo-5.5.14-106.2 php5-xmlrpc-5.5.14-106.2 php5-xmlrpc-debuginfo-5.5.14-106.2 php5-xmlwriter-5.5.14-106.2 php5-xmlwriter-debuginfo-5.5.14-106.2 php5-xsl-5.5.14-106.2 php5-xsl-debuginfo-5.5.14-106.2 php5-zip-5.5.14-106.2 php5-zip-debuginfo-5.5.14-106.2 php5-zlib-5.5.14-106.2 php5-zlib-debuginfo-5.5.14-106.2 - openSUSE Leap 42.3 (noarch): php5-pear-5.5.14-106.2 References: https://www.suse.com/security/cve/CVE-2018-17082.html https://bugzilla.suse.com/1108753

1 0

openSUSE-RU-2018:3055-1: moderate: Recommended update for ca-certificates
by maintenance＠opensuse.org 06 Oct '18

06 Oct '18

openSUSE Recommended Update: Recommended update for ca-certificates ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3055-1 Rating: moderate References: #1101470 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ca-certificates fixes the following issues: - It was not possible to install the OpenSSL 1.0 command line interface from the Legacy Module without being prompted to remove essential packages (bsc#1101470) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1134=1 Package List: - openSUSE Leap 15.0 (noarch): ca-certificates-2+git20170807.10b2785-lp150.6.3.1 References: https://bugzilla.suse.com/1101470

1 0

openSUSE-SU-2018:3054-1: moderate: Security update for tomcat
by opensuse-security＠opensuse.org 06 Oct '18

06 Oct '18

openSUSE Security Update: Security update for tomcat ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:3054-1 Rating: moderate References: #1067720 #1093697 #1102379 #1102400 #1102410 Cross-References: CVE-2018-1336 CVE-2018-8014 CVE-2018-8034 CVE-2018-8037 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves four vulnerabilities and has one errata is now available. Description: This update for tomcat to version 9.0.10 fixes the following issues: Security issues fixed: - CVE-2018-1336: An improper handing of overflow in the UTF-8 decoder with supplementary characters could have lead to an infinite loop in the decoder causing a Denial of Service (bsc#1102400). - CVE-2018-8014: Fix insecure default CORS filter settings (bsc#1093697). - CVE-2018-8034: The host name verification when using TLS with the WebSocket client was missing. It is now enabled by default (bsc#1102379). - CVE-2018-8037: If an async request was completed by the application at the same time as the container triggered the async timeout, a race condition existed that could have resulted in a user seeing a response intended for a different user. An additional issue was present in the NIO and NIO2 connectors that did not correctly track the closure of the connection when an async request was completed by the application and timed out by the container at the same time. This could also have resulted in a user seeing a response intended for another user (bsc#1102410). Bug fixes: - Avoid overwriting of customer's configuration during update (bsc#1067720) - Disable adding OSGi metadata to JAR files - See changelog at http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.10_(markt ) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1129=1 Package List: - openSUSE Leap 15.0 (noarch): tomcat-9.0.10-lp150.2.3.2 tomcat-admin-webapps-9.0.10-lp150.2.3.2 tomcat-docs-webapp-9.0.10-lp150.2.3.2 tomcat-el-3_0-api-9.0.10-lp150.2.3.2 tomcat-embed-9.0.10-lp150.2.3.2 tomcat-javadoc-9.0.10-lp150.2.3.2 tomcat-jsp-2_3-api-9.0.10-lp150.2.3.2 tomcat-jsvc-9.0.10-lp150.2.3.2 tomcat-lib-9.0.10-lp150.2.3.2 tomcat-servlet-4_0-api-9.0.10-lp150.2.3.2 tomcat-webapps-9.0.10-lp150.2.3.2 References: https://www.suse.com/security/cve/CVE-2018-1336.html https://www.suse.com/security/cve/CVE-2018-8014.html https://www.suse.com/security/cve/CVE-2018-8034.html https://www.suse.com/security/cve/CVE-2018-8037.html https://bugzilla.suse.com/1067720 https://bugzilla.suse.com/1093697 https://bugzilla.suse.com/1102379 https://bugzilla.suse.com/1102400 https://bugzilla.suse.com/1102410

1 0

openSUSE-RU-2018:3053-1: Recommended update for gnome-shell-extensions
by maintenance＠opensuse.org 06 Oct '18

06 Oct '18

openSUSE Recommended Update: Recommended update for gnome-shell-extensions ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3053-1 Rating: low References: #1095325 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gnome-shell-extensions fixes the following issues: - Bugfix: Don't allow user to enable sle-classic extension in tweak tool (bsc#1095325) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1127=1 Package List: - openSUSE Leap 15.0 (noarch): gnome-shell-classic-3.26.2-lp150.6.3.1 gnome-shell-extensions-common-3.26.2-lp150.6.3.1 gnome-shell-extensions-common-lang-3.26.2-lp150.6.3.1 References: https://bugzilla.suse.com/1095325

1 0