October 2018 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-OU-2018:3541-1: Optional update to add gcc8
by maintenance＠opensuse.org 29 Oct '18

29 Oct '18

openSUSE Optional Update: Optional update to add gcc8 ______________________________________________________________________________ Announcement ID: openSUSE-OU-2018:3541-1 Rating: low References: #1084812 #1084842 #1087550 #1094222 #1102564 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has 5 optional fixes can now be installed. Description: This updates adds the GNU Compiler Collection 8 to openSUSE Leap 42.3. The update also supplies gcc8 compatible libstdc++, libgcc_s1 and other gcc derived libraries. Various optimizers have been improved in GCC 8, several of bugs fixed, quite some new warnings added and the error pin-pointing and fix-suggestions have been greatly improved. The GNU Compiler page for GCC 8 contains a summary of all the changes that have happened: https://gcc.gnu.org/gcc-8/changes.html Also changes needed or common pitfalls when porting software are described on: https://gcc.gnu.org/gcc-8/porting_to.html Patch Instructions: To install this openSUSE Optional Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1328=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): cpp8-8.2.1+r264010-2.3 cpp8-debuginfo-8.2.1+r264010-2.3 gcc8-8.2.1+r264010-2.3 gcc8-ada-8.2.1+r264010-2.3 gcc8-ada-debuginfo-8.2.1+r264010-2.3 gcc8-c++-8.2.1+r264010-2.3 gcc8-c++-debuginfo-8.2.1+r264010-2.3 gcc8-debuginfo-8.2.1+r264010-2.3 gcc8-debugsource-8.2.1+r264010-2.3 gcc8-fortran-8.2.1+r264010-2.3 gcc8-fortran-debuginfo-8.2.1+r264010-2.3 gcc8-go-8.2.1+r264010-2.3 gcc8-go-debuginfo-8.2.1+r264010-2.3 gcc8-locale-8.2.1+r264010-2.3 gcc8-obj-c++-8.2.1+r264010-2.3 gcc8-obj-c++-debuginfo-8.2.1+r264010-2.3 gcc8-objc-8.2.1+r264010-2.3 gcc8-objc-debuginfo-8.2.1+r264010-2.3 gcc8-testresults-8.2.1+r264010-2.2 libada8-8.2.1+r264010-2.3 libada8-debuginfo-8.2.1+r264010-2.3 libasan5-8.2.1+r264010-2.3 libasan5-debuginfo-8.2.1+r264010-2.3 libatomic1-8.2.1+r264010-2.3 libatomic1-debuginfo-8.2.1+r264010-2.3 libgcc_s1-8.2.1+r264010-2.3 libgcc_s1-debuginfo-8.2.1+r264010-2.3 libgfortran5-8.2.1+r264010-2.3 libgfortran5-debuginfo-8.2.1+r264010-2.3 libgo13-8.2.1+r264010-2.3 libgo13-debuginfo-8.2.1+r264010-2.3 libgomp1-8.2.1+r264010-2.3 libgomp1-debuginfo-8.2.1+r264010-2.3 libitm1-8.2.1+r264010-2.3 libitm1-debuginfo-8.2.1+r264010-2.3 libmpx2-8.2.1+r264010-2.3 libmpx2-debuginfo-8.2.1+r264010-2.3 libmpxwrappers2-8.2.1+r264010-2.3 libmpxwrappers2-debuginfo-8.2.1+r264010-2.3 libobjc4-gcc8-8.2.1+r264010-2.3 libobjc4-gcc8-debuginfo-8.2.1+r264010-2.3 libquadmath0-8.2.1+r264010-2.3 libquadmath0-debuginfo-8.2.1+r264010-2.3 libstdc++6-8.2.1+r264010-2.3 libstdc++6-debuginfo-8.2.1+r264010-2.3 libstdc++6-devel-gcc8-8.2.1+r264010-2.3 libstdc++6-locale-8.2.1+r264010-2.3 libubsan1-8.2.1+r264010-2.3 libubsan1-debuginfo-8.2.1+r264010-2.3 - openSUSE Leap 42.3 (x86_64): cross-nvptx-gcc8-8.2.1+r264010-2.1 cross-nvptx-newlib8-devel-8.2.1+r264010-2.1 gcc8-32bit-8.2.1+r264010-2.3 gcc8-ada-32bit-8.2.1+r264010-2.3 gcc8-c++-32bit-8.2.1+r264010-2.3 gcc8-fortran-32bit-8.2.1+r264010-2.3 gcc8-go-32bit-8.2.1+r264010-2.3 gcc8-obj-c++-32bit-8.2.1+r264010-2.3 gcc8-objc-32bit-8.2.1+r264010-2.3 libada8-32bit-8.2.1+r264010-2.3 libada8-32bit-debuginfo-8.2.1+r264010-2.3 libasan5-32bit-8.2.1+r264010-2.3 libasan5-32bit-debuginfo-8.2.1+r264010-2.3 libatomic1-32bit-8.2.1+r264010-2.3 libatomic1-32bit-debuginfo-8.2.1+r264010-2.3 libgcc_s1-32bit-8.2.1+r264010-2.3 libgcc_s1-32bit-debuginfo-8.2.1+r264010-2.3 libgfortran5-32bit-8.2.1+r264010-2.3 libgfortran5-32bit-debuginfo-8.2.1+r264010-2.3 libgo13-32bit-8.2.1+r264010-2.3 libgo13-32bit-debuginfo-8.2.1+r264010-2.3 libgomp1-32bit-8.2.1+r264010-2.3 libgomp1-32bit-debuginfo-8.2.1+r264010-2.3 libitm1-32bit-8.2.1+r264010-2.3 libitm1-32bit-debuginfo-8.2.1+r264010-2.3 liblsan0-8.2.1+r264010-2.3 liblsan0-debuginfo-8.2.1+r264010-2.3 libmpx2-32bit-8.2.1+r264010-2.3 libmpx2-32bit-debuginfo-8.2.1+r264010-2.3 libmpxwrappers2-32bit-8.2.1+r264010-2.3 libmpxwrappers2-32bit-debuginfo-8.2.1+r264010-2.3 libobjc4-gcc8-32bit-8.2.1+r264010-2.3 libobjc4-gcc8-32bit-debuginfo-8.2.1+r264010-2.3 libquadmath0-32bit-8.2.1+r264010-2.3 libquadmath0-32bit-debuginfo-8.2.1+r264010-2.3 libstdc++6-32bit-8.2.1+r264010-2.3 libstdc++6-32bit-debuginfo-8.2.1+r264010-2.3 libstdc++6-devel-gcc8-32bit-8.2.1+r264010-2.3 libtsan0-8.2.1+r264010-2.3 libtsan0-debuginfo-8.2.1+r264010-2.3 libubsan1-32bit-8.2.1+r264010-2.3 libubsan1-32bit-debuginfo-8.2.1+r264010-2.3 - openSUSE Leap 42.3 (noarch): gcc8-info-8.2.1+r264010-2.3 References: https://bugzilla.suse.com/1084812 https://bugzilla.suse.com/1084842 https://bugzilla.suse.com/1087550 https://bugzilla.suse.com/1094222 https://bugzilla.suse.com/1102564

1 0

openSUSE-SU-2018:3539-1: moderate: Security update for wpa_supplicant
by opensuse-security＠opensuse.org 27 Oct '18

27 Oct '18

openSUSE Security Update: Security update for wpa_supplicant ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:3539-1 Rating: moderate References: #1080798 #1098854 #1099835 #1104205 #1109209 #1111873 Cross-References: CVE-2018-14526 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves one vulnerability and has 5 fixes is now available. Description: This update for wpa_supplicant provides the following fixes: This security issues was fixe: - CVE-2018-14526: Under certain conditions, the integrity of EAPOL-Key messages was not checked, leading to a decryption oracle. An attacker within range of the Access Point and client could have abused the vulnerability to recover sensitive information (bsc#1104205) These non-security issues were fixed: - Fix reading private key passwords from the configuration file. (bsc#1099835) - Enable PWD as EAP method. This allows for password-based authentication, which is easier to setup than most of the other methods, and is used by the Eduroam network. (bsc#1109209) - compile eapol_test binary to allow testing via radius proxy and server (note: this does not match CONFIG_EAPOL_TEST which sets -Werror and activates an assert call inside the code of wpa_supplicant) (bsc#1111873), (fate#326725) - Enabled timestamps in log file when being invoked by systemd service file (bsc#1080798). - Fixes the default file permissions of the debug log file to more sane values, i.e. it is no longer world-readable (bsc#1098854). - Open the debug log file with O_CLOEXEC, which will prevent file descriptor leaking to child processes (bsc#1098854). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1316=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): wpa_supplicant-2.6-lp150.3.6.1 wpa_supplicant-debuginfo-2.6-lp150.3.6.1 wpa_supplicant-debugsource-2.6-lp150.3.6.1 wpa_supplicant-gui-2.6-lp150.3.6.1 wpa_supplicant-gui-debuginfo-2.6-lp150.3.6.1 References: https://www.suse.com/security/cve/CVE-2018-14526.html https://bugzilla.suse.com/1080798 https://bugzilla.suse.com/1098854 https://bugzilla.suse.com/1099835 https://bugzilla.suse.com/1104205 https://bugzilla.suse.com/1109209 https://bugzilla.suse.com/1111873

1 0

openSUSE-RU-2018:3538-1: moderate: Recommended update for yast2-users
by maintenance＠opensuse.org 27 Oct '18

27 Oct '18

openSUSE Recommended Update: Recommended update for yast2-users ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3538-1 Rating: moderate References: #1107456 #1112119 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for yast2-users fixes the following issues: - The YaST users module (NIS) may have crashed when attempting to read data from a non-existent user (bsc#1112119, bsc#1107456) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1323=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): yast2-users-4.0.7-lp150.2.6.1 yast2-users-debuginfo-4.0.7-lp150.2.6.1 yast2-users-debugsource-4.0.7-lp150.2.6.1 References: https://bugzilla.suse.com/1107456 https://bugzilla.suse.com/1112119

1 0

openSUSE-SU-2018:3537-1: moderate: Security update for audiofile
by opensuse-security＠opensuse.org 27 Oct '18

27 Oct '18

openSUSE Security Update: Security update for audiofile ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:3537-1 Rating: moderate References: #1111586 Cross-References: CVE-2018-17095 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for audiofile fixes the following issues: - CVE-2018-17095: A heap-based buffer overflow in Expand3To4Module::run could occurred when running sfconvert leading to crashes or code execution when handling untrusted soundfiles (bsc#1111586). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1325=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): audiofile-0.3.6-lp150.2.3.1 audiofile-debuginfo-0.3.6-lp150.2.3.1 audiofile-debugsource-0.3.6-lp150.2.3.1 audiofile-devel-0.3.6-lp150.2.3.1 audiofile-doc-0.3.6-lp150.2.3.1 libaudiofile1-0.3.6-lp150.2.3.1 libaudiofile1-debuginfo-0.3.6-lp150.2.3.1 - openSUSE Leap 15.0 (x86_64): audiofile-devel-32bit-0.3.6-lp150.2.3.1 libaudiofile1-32bit-0.3.6-lp150.2.3.1 libaudiofile1-32bit-debuginfo-0.3.6-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-17095.html https://bugzilla.suse.com/1111586

1 0

openSUSE-RU-2018:3536-1: Recommended update for cpio
by maintenance＠opensuse.org 27 Oct '18

27 Oct '18

openSUSE Recommended Update: Recommended update for cpio ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3536-1 Rating: low References: #1076810 #889138 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for cpio provides the following fix: - Remove an obsolete patch that was causing cpio not to preserve folder permissions. (bsc#1076810, bsc#889138) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1317=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): cpio-2.11-38.3.1 cpio-debuginfo-2.11-38.3.1 cpio-debugsource-2.11-38.3.1 - openSUSE Leap 42.3 (noarch): cpio-lang-2.11-38.3.1 References: https://bugzilla.suse.com/1076810 https://bugzilla.suse.com/889138

1 0

openSUSE-RU-2018:3535-1: moderate: Recommended update for xdm
by maintenance＠opensuse.org 27 Oct '18

27 Oct '18

openSUSE Recommended Update: Recommended update for xdm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3535-1 Rating: moderate References: #1062105 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for xdm fixes the following issues: - Change /etc/X11/xdm/scripts/10-gpg-agent to get it work with every gpg version 2.1 and up. (bsc#1062105) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1320=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): xdm-1.1.11-lp150.11.3.1 xdm-debuginfo-1.1.11-lp150.11.3.1 xdm-debugsource-1.1.11-lp150.11.3.1 xdm-xsession-1.1.11-lp150.11.3.1 References: https://bugzilla.suse.com/1062105

1 0

openSUSE-RU-2018:3534-1: moderate: Recommended update for libyui-qt-pkg
by maintenance＠opensuse.org 27 Oct '18

27 Oct '18

openSUSE Recommended Update: Recommended update for libyui-qt-pkg ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3534-1 Rating: moderate References: #991090 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libyui-qt-pkg provides the following fixes: - Do not display "out of disk space" error at start when such a large disk (bigger than 8EiB) is present in the system. (bsc#991090) - Fix displaying negative disk sizes in the disk usage dialog. (bsc#991090) - Added new "Services" view, displayed only when at least one repository service is present. (fate#321043) - Display the busy cursor while package filtering is in progress. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1326=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libyui-qt-pkg-debugsource-2.45.15.2-lp150.2.3.1 libyui-qt-pkg-devel-2.45.15.2-lp150.2.3.1 libyui-qt-pkg8-2.45.15.2-lp150.2.3.1 libyui-qt-pkg8-debuginfo-2.45.15.2-lp150.2.3.1 - openSUSE Leap 15.0 (noarch): libyui-qt-pkg-doc-2.45.15.2-lp150.2.3.1 References: https://bugzilla.suse.com/991090

1 0

openSUSE-RU-2018:3533-1: important: Recommended update for xfsprogs
by maintenance＠opensuse.org 27 Oct '18

27 Oct '18

openSUSE Recommended Update: Recommended update for xfsprogs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3533-1 Rating: important References: #1089777 #1105068 #1105396 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for xfsprogs fixes the following issues: - avoid divide-by-zero when hardware reports optimal i/o size as 0 (bsc#1089777) - repair: shift inode back into place if corrupted by bad log replay (bsc#1105396) This update also contains the following tracked packaging change: - Explictly disable systemd unit files for scrub (bsc#1105068) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1322=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): xfsprogs-4.15.0-lp150.3.4.1 xfsprogs-debuginfo-4.15.0-lp150.3.4.1 xfsprogs-debugsource-4.15.0-lp150.3.4.1 xfsprogs-devel-4.15.0-lp150.3.4.1 References: https://bugzilla.suse.com/1089777 https://bugzilla.suse.com/1105068 https://bugzilla.suse.com/1105396

1 0

openSUSE-OU-2018:3532-1: Optional update for tdb
by maintenance＠opensuse.org 27 Oct '18

27 Oct '18

openSUSE Optional Update: Optional update for tdb ______________________________________________________________________________ Announcement ID: openSUSE-OU-2018:3532-1 Rating: low References: #1109571 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update for tdb fixes the following issues: - The package license should have been LGPL (bsc#1109571) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Optional Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1319=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libtdb-devel-1.3.15-lp150.2.3.1 libtdb1-1.3.15-lp150.2.3.1 libtdb1-debuginfo-1.3.15-lp150.2.3.1 python-tdb-1.3.15-lp150.2.3.1 python-tdb-debuginfo-1.3.15-lp150.2.3.1 python3-tdb-1.3.15-lp150.2.3.1 python3-tdb-debuginfo-1.3.15-lp150.2.3.1 tdb-debugsource-1.3.15-lp150.2.3.1 tdb-tools-1.3.15-lp150.2.3.1 tdb-tools-debuginfo-1.3.15-lp150.2.3.1 - openSUSE Leap 15.0 (x86_64): libtdb1-32bit-1.3.15-lp150.2.3.1 libtdb1-32bit-debuginfo-1.3.15-lp150.2.3.1 python-tdb-32bit-1.3.15-lp150.2.3.1 python-tdb-32bit-debuginfo-1.3.15-lp150.2.3.1 python3-tdb-32bit-1.3.15-lp150.2.3.1 python3-tdb-32bit-debuginfo-1.3.15-lp150.2.3.1 References: https://bugzilla.suse.com/1109571

1 0

openSUSE-RU-2018:3531-1: moderate: Recommended update for kmod
by maintenance＠opensuse.org 27 Oct '18

27 Oct '18

openSUSE Recommended Update: Recommended update for kmod ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3531-1 Rating: moderate References: #1112928 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for kmod provides the following fixes: - Allow 'modprobe -c' print the status of "allow_unsupported_modules" option. (bsc#1112928) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1321=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): kmod-25-lp150.4.3.1 kmod-compat-25-lp150.4.3.1 kmod-debuginfo-25-lp150.4.3.1 kmod-debugsource-25-lp150.4.3.1 libkmod-devel-25-lp150.4.3.1 libkmod2-25-lp150.4.3.1 libkmod2-debuginfo-25-lp150.4.3.1 - openSUSE Leap 15.0 (noarch): kmod-bash-completion-25-lp150.4.3.1 References: https://bugzilla.suse.com/1112928

1 0