October 2018 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2018:3273-1: important: Security update for Chromium
by opensuse-security＠opensuse.org 22 Oct '18

22 Oct '18

openSUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:3273-1 Rating: important References: #1112111 Cross-References: CVE-2018-17462 CVE-2018-17463 CVE-2018-17464 CVE-2018-17465 CVE-2018-17466 CVE-2018-17467 CVE-2018-17468 CVE-2018-17469 CVE-2018-17470 CVE-2018-17471 CVE-2018-17472 CVE-2018-17473 CVE-2018-17474 CVE-2018-17475 CVE-2018-17476 CVE-2018-17477 CVE-2018-5179 Affected Products: openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes 17 vulnerabilities is now available. Description: This update for Chromium to version 70.0.3538.67 fixes multiple issues. Security issues fixed (bsc#1112111): - CVE-2018-17462: Sandbox escape in AppCache - CVE-2018-17463: Remote code execution in V8 - Heap buffer overflow in Little CMS in PDFium - CVE-2018-17464: URL spoof in Omnibox - CVE-2018-17465: Use after free in V8 - CVE-2018-17466: Memory corruption in Angle - CVE-2018-17467: URL spoof in Omnibox - CVE-2018-17468: Cross-origin URL disclosure in Blink - CVE-2018-17469: Heap buffer overflow in PDFium - CVE-2018-17470: Memory corruption in GPU Internals - CVE-2018-17471: Security UI occlusion in full screen mode - CVE-2018-17473: URL spoof in Omnibox - CVE-2018-17474: Use after free in Blink - CVE-2018-17475: URL spoof in Omnibox - CVE-2018-17476: Security UI occlusion in full screen mode - CVE-2018-5179: Lack of limits on update() in ServiceWorker - CVE-2018-17477: UI spoof in Extensions VAAPI hardware accelerated rendering is now enabled by default. This update contains the following packaging changes: - Use the system libusb-1.0 library - Use bundled harfbuzz library - Disable gnome-keyring to avoid crashes Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1208=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2018-1208=1 Package List: - openSUSE Leap 15.0 (x86_64): chromedriver-70.0.3538.67-lp150.2.20.1 chromedriver-debuginfo-70.0.3538.67-lp150.2.20.1 chromium-70.0.3538.67-lp150.2.20.1 chromium-debuginfo-70.0.3538.67-lp150.2.20.1 chromium-debugsource-70.0.3538.67-lp150.2.20.1 - openSUSE Backports SLE-15 (x86_64): chromedriver-70.0.3538.67-bp150.2.14.1 chromedriver-debuginfo-70.0.3538.67-bp150.2.14.1 chromium-70.0.3538.67-bp150.2.14.1 chromium-debuginfo-70.0.3538.67-bp150.2.14.1 chromium-debugsource-70.0.3538.67-bp150.2.14.1 References: https://www.suse.com/security/cve/CVE-2018-17462.html https://www.suse.com/security/cve/CVE-2018-17463.html https://www.suse.com/security/cve/CVE-2018-17464.html https://www.suse.com/security/cve/CVE-2018-17465.html https://www.suse.com/security/cve/CVE-2018-17466.html https://www.suse.com/security/cve/CVE-2018-17467.html https://www.suse.com/security/cve/CVE-2018-17468.html https://www.suse.com/security/cve/CVE-2018-17469.html https://www.suse.com/security/cve/CVE-2018-17470.html https://www.suse.com/security/cve/CVE-2018-17471.html https://www.suse.com/security/cve/CVE-2018-17472.html https://www.suse.com/security/cve/CVE-2018-17473.html https://www.suse.com/security/cve/CVE-2018-17474.html https://www.suse.com/security/cve/CVE-2018-17475.html https://www.suse.com/security/cve/CVE-2018-17476.html https://www.suse.com/security/cve/CVE-2018-17477.html https://www.suse.com/security/cve/CVE-2018-5179.html https://bugzilla.suse.com/1112111

1 0

openSUSE-SU-2018:3258-1: moderate: Security update for icinga
by opensuse-security＠opensuse.org 19 Oct '18

19 Oct '18

openSUSE Security Update: Security update for icinga ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:3258-1 Rating: moderate References: #1011630 #1018047 #952777 #961115 Cross-References: CVE-2015-8010 CVE-2016-0726 CVE-2016-10089 CVE-2016-8641 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for icinga fixes the following issues: Update to 1.14.0 - CVE-2015-8010: Fixed XSS in the icinga classic UI (boo#952777) - CVE-2016-8641 / CVE-2016-10089: fixed a possible symlink attack for files/dirs created by root (boo#1011630 and boo#1018047) - CVE-2016-0726: removed the pre-configured administrative account with fixed password for the WebUI - (boo#961115) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1206=1 Package List: - openSUSE Leap 42.3 (x86_64): icinga-1.14.0-8.3.2 icinga-debuginfo-1.14.0-8.3.2 icinga-debugsource-1.14.0-8.3.2 icinga-devel-1.14.0-8.3.2 icinga-doc-1.14.0-8.3.2 icinga-idoutils-1.14.0-8.3.2 icinga-idoutils-debuginfo-1.14.0-8.3.2 icinga-idoutils-mysql-1.14.0-8.3.2 icinga-idoutils-oracle-1.14.0-8.3.2 icinga-idoutils-pgsql-1.14.0-8.3.2 icinga-plugins-downtimes-1.14.0-8.3.2 icinga-plugins-eventhandlers-1.14.0-8.3.2 icinga-www-1.14.0-8.3.2 icinga-www-config-1.14.0-8.3.2 icinga-www-debuginfo-1.14.0-8.3.2 monitoring-tools-1.14.0-8.3.2 monitoring-tools-debuginfo-1.14.0-8.3.2 References: https://www.suse.com/security/cve/CVE-2015-8010.html https://www.suse.com/security/cve/CVE-2016-0726.html https://www.suse.com/security/cve/CVE-2016-10089.html https://www.suse.com/security/cve/CVE-2016-8641.html https://bugzilla.suse.com/1011630 https://bugzilla.suse.com/1018047 https://bugzilla.suse.com/952777 https://bugzilla.suse.com/961115

1 0

openSUSE-SU-2018:3245-1: important: Security update for libssh
by opensuse-security＠opensuse.org 19 Oct '18

19 Oct '18

openSUSE Security Update: Security update for libssh ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:3245-1 Rating: important References: #1108020 Cross-References: CVE-2018-10933 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libssh fixes the following security issue: - CVE-2018-10933: Fixed a server mode authentication bypass (boo#1108020). This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1207=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libssh-debugsource-0.6.3-17.1 libssh-devel-0.6.3-17.1 libssh-devel-doc-0.6.3-17.1 libssh4-0.6.3-17.1 libssh4-debuginfo-0.6.3-17.1 - openSUSE Leap 42.3 (x86_64): libssh4-32bit-0.6.3-17.1 libssh4-debuginfo-32bit-0.6.3-17.1 References: https://www.suse.com/security/cve/CVE-2018-10933.html https://bugzilla.suse.com/1108020

1 0

openSUSE-RU-2018:3237-1: moderate: Recommended update for hwinfo
by maintenance＠opensuse.org 18 Oct '18

18 Oct '18

openSUSE Recommended Update: Recommended update for hwinfo ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3237-1 Rating: moderate References: #1072450 #1105003 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for hwinfo provides the following fixes: - Try a more aggressive approach to catch all usb platform controllers. (bsc#1072450) - Detect ARM HISILICON SAS controller. (bsc#1072450) - Check for vmware only when running in a vm. (bsc#1105003) - Add support for RISC-V. This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1202=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): hwinfo-21.57-9.1 hwinfo-debuginfo-21.57-9.1 hwinfo-debugsource-21.57-9.1 hwinfo-devel-21.57-9.1 hwinfo-devel-debuginfo-21.57-9.1 References: https://bugzilla.suse.com/1072450 https://bugzilla.suse.com/1105003

1 0

openSUSE-RU-2018:3236-1: moderate: Recommended update for SUSEConnect
by maintenance＠opensuse.org 18 Oct '18

18 Oct '18

openSUSE Recommended Update: Recommended update for SUSEConnect ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3236-1 Rating: moderate References: #1098220 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for SUSEConnect fixes the following issues: - Add detection for cloud provider systems (AWS/Google/Azure) (fate#320935) - Does no longer raise an exception when SUSEConnect is being used with zypper's sub-command 'search-packages' behind an SMT (bsc#1098220) - Does no longer install release packages if they are already present This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1204=1 Package List: - openSUSE Leap 42.3 (x86_64): SUSEConnect-0.3.12-2.13.1 References: https://bugzilla.suse.com/1098220

1 0

openSUSE-SU-2018:3235-1: moderate: Security update for java-11-openjdk
by opensuse-security＠opensuse.org 18 Oct '18

18 Oct '18

openSUSE Security Update: Security update for java-11-openjdk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:3235-1 Rating: moderate References: #1111162 #1112142 #1112143 #1112144 #1112145 #1112146 #1112147 #1112148 #1112149 Cross-References: CVE-2018-3136 CVE-2018-3139 CVE-2018-3149 CVE-2018-3150 CVE-2018-3157 CVE-2018-3169 CVE-2018-3180 CVE-2018-3183 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves 8 vulnerabilities and has one errata is now available. Description: This update for java-11-openjdk fixes the following issues: Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU) Security fixes: - S8202936, CVE-2018-3183, bsc#1112148: Improve script engine support - S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses - S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups - S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections stability - S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection stability again - S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute checks - S8200648, CVE-2018-3157, bsc#1112149: Make midi code more sound - S8194534, CVE-2018-3136, bsc#1112142: Manifest better support - S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534 needs updates - S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection Security-In-Depth fixes: - S8194546: Choosier FileManagers - S8195874: Improve jar specification adherence - S8196897: Improve PRNG support - S8197881: Better StringBuilder support - S8201756: Improve cipher inputs - S8203654: Improve cypher state updates - S8204497: Better formatting of decimals - S8200666: Improve LDAP support - S8199110: Address Internet Addresses Update to upstream tag jdk-11+28 (OpenJDK 11 rc1) - S8207317: SSLEngine negotiation fail exception behavior changed from fail-fast to fail-lazy - S8207838: AArch64: Float registers incorrectly restored in JNI call - S8209637: [s390x] Interpreter doesn't call result handler after native calls - S8209670: CompilerThread releasing code buffer in destructor is unsafe - S8209735: Disable avx512 by default - S8209806: API docs should be updated to refer to javase11 - Report version without the "-internal" postfix - Don't build against gdk making the accessibility depend on a particular version of gtk. Update to upstream tag jdk-11+27 - S8031761: [TESTBUG] Add a regression test for JDK-8026328 - S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030 fails with "unexpected values of outer fields of the class" when running with -Xcomp - S8164639: Configure PKCS11 tests to use user-supplied NSS libraries - S8189667: Desktop#moveToTrash expects incorrect "<<ALL FILES>>" FilePermission - S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in -Xcomp - S8195156: [Graal] serviceability/jvmti/GetModulesInfo/ /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode - S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails if run twice - S8201394: Update java.se module summary to reflect removal of java.se.ee module - S8204931: Colors with alpha are painted incorrectly on Linux - S8204966: [TESTBUG] hotspot/test/compiler/whitebox/ /IsMethodCompilableTest.java test fails with -XX:CompileThreshold=1 - S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent quadratic runtime behavior - S8205687: TimeoutHandler generates huge core files - S8206176: Remove the temporary tls13VN field - S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS libs not found - S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE and ja_JP locale. - S8207009: TLS 1.3 half-close and synchronization issues - S8207046: arm32 vm crash: C1 arm32 platform functions parameters type mismatch - S8207139: NMT is not enabled on Windows 2016/10 - S8207237: SSLSocket#setEnabledCipherSuites is accepting empty string - S8207355: C1 compilation hangs in ComputeLinearScanOrder::compute_dominator - S8207746: C2: Lucene crashes on AVX512 instruction - S8207765: HeapMonitorTest.java intermittent failure - S8207944: java.lang.ClassFormatError: Extra bytes at the end of class file test" possibly violation of JVMS 4.7.1 - S8207948: JDK 11 L10n resource file update msg drop 10 - S8207966: HttpClient response without content-length does not return body - S8208125: Cannot input text into JOptionPane Text Input Dialog - S8208164: (str) improve specification of String::lines - S8208166: Still unable to use custom SSLEngine with default TrustManagerFactory after JDK-8207029 - S8208189: ProblemList compiler/graalunit/JttThreadsTest.java - S8208205: ProblemList tests that fail due to 'Error attaching to process: Can't create thread_db agent!' - S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java - S8208251: serviceability/jvmti/HeapMonitor/MyPackage/ /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64 - S8208305: ProblemList compiler/jvmci/compilerToVM/GetFlagValueTest.java - S8208347: ProblemList compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java - S8208353: Upgrade JDK 11 to libpng 1.6.35 - S8208358: update bug ids mentioned in tests - S8208370: fix typo in ReservedStack tests' @requires - S8208391: Differentiate response and connect timeouts in HTTP Client API - S8208466: Fix potential memory leak in harfbuzz shaping. - S8208496: New Test to verify concurrent behavior of TLS. - S8208521: ProblemList more tests that fail due to 'Error attaching to process: Can't create thread_db agent!' - S8208640: [a11y] [macos] Unable to navigate between Radiobuttons in Radio group using keyboard. - S8208663: JDK 11 L10n resource file update msg drop 20 - S8208676: Missing NULL check and resource leak in NetworkPerformanceInterface::NetworkPerformance::network_utilization - S8208691: Tighten up jdk.includeInExceptions security property - S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/ /TestNssDbSqlite.java fails in aarch64 platforms - S8209029: ProblemList tests that fail due to 'Error attaching to process: Can't create thread_db agent!' in jdk-11+25 testing - S8209149: [TESTBUG] runtime/RedefineTests/ /RedefineRunningMethods.java needs a longer timeout - S8209451: Please change jdk 11 milestone to FCS - S8209452: VerifyCACerts.java failed with "At least one cacert test failed" - S8209506: Add Google Trust Services GlobalSign root certificates - S8209537: Two security tests failed after JDK-8164639 due to dependency was missed This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1205=1 Package List: - openSUSE Leap 15.0 (x86_64): java-11-openjdk-11.0.1.0-lp150.2.6.1 java-11-openjdk-accessibility-11.0.1.0-lp150.2.6.1 java-11-openjdk-accessibility-debuginfo-11.0.1.0-lp150.2.6.1 java-11-openjdk-debuginfo-11.0.1.0-lp150.2.6.1 java-11-openjdk-debugsource-11.0.1.0-lp150.2.6.1 java-11-openjdk-demo-11.0.1.0-lp150.2.6.1 java-11-openjdk-devel-11.0.1.0-lp150.2.6.1 java-11-openjdk-headless-11.0.1.0-lp150.2.6.1 java-11-openjdk-jmods-11.0.1.0-lp150.2.6.1 java-11-openjdk-src-11.0.1.0-lp150.2.6.1 - openSUSE Leap 15.0 (noarch): java-11-openjdk-javadoc-11.0.1.0-lp150.2.6.1 References: https://www.suse.com/security/cve/CVE-2018-3136.html https://www.suse.com/security/cve/CVE-2018-3139.html https://www.suse.com/security/cve/CVE-2018-3149.html https://www.suse.com/security/cve/CVE-2018-3150.html https://www.suse.com/security/cve/CVE-2018-3157.html https://www.suse.com/security/cve/CVE-2018-3169.html https://www.suse.com/security/cve/CVE-2018-3180.html https://www.suse.com/security/cve/CVE-2018-3183.html https://bugzilla.suse.com/1111162 https://bugzilla.suse.com/1112142 https://bugzilla.suse.com/1112143 https://bugzilla.suse.com/1112144 https://bugzilla.suse.com/1112145 https://bugzilla.suse.com/1112146 https://bugzilla.suse.com/1112147 https://bugzilla.suse.com/1112148 https://bugzilla.suse.com/1112149

1 0

openSUSE-RU-2018:3234-1: moderate: Recommended update for yast2-network
by maintenance＠opensuse.org 18 Oct '18

18 Oct '18

openSUSE Recommended Update: Recommended update for yast2-network ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3234-1 Rating: moderate References: #1052042 #1086454 #1095113 #1095971 #1098407 #1099691 #1103712 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has 7 recommended fixes can now be installed. Description: This update for yast2-network fixes the following issues: - Added additional searchkeys to desktop file (fate#321043, bsc#1099691) - lan_test: stubbin Host.GetModified call (bsc#1052042). - Fixed flickering testcase which has been introduced by fixing (bsc#1052042) - Bugfix: Do not crash when trying to convert the /etc/hosts profile declaration from multiple line host entries for the same host to just one line (bsc#1095971) - Bugfix: Inform the user about empty host name entries (bsc#1095113) - Bugfix: Does no longer enforce particular mode for IPoIB devices by default (bsc#1086454) - Makes yast2-network independent of AutoYaST (bsc#1098407) - Fixes to the networking AY schema (bsc#1103712) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1201=1 Package List: - openSUSE Leap 15.0 (noarch): yast2-network-4.0.39-lp150.2.3.1 References: https://bugzilla.suse.com/1052042 https://bugzilla.suse.com/1086454 https://bugzilla.suse.com/1095113 https://bugzilla.suse.com/1095971 https://bugzilla.suse.com/1098407 https://bugzilla.suse.com/1099691 https://bugzilla.suse.com/1103712

1 0

openSUSE-RU-2018:3233-1: moderate: Recommended update for intel-gpu-tools
by maintenance＠opensuse.org 18 Oct '18

18 Oct '18

openSUSE Recommended Update: Recommended update for intel-gpu-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3233-1 Rating: moderate References: #1106186 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for intel-gpu-tools fixes the following issues: - Fixes a bug where it was not possible to run intel_gpu_top from terminal inside a desktop session (bsc#1106186) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1203=1 Package List: - openSUSE Leap 15.0 (x86_64): intel-gpu-tools-1.19-lp150.2.3.1 intel-gpu-tools-debuginfo-1.19-lp150.2.3.1 intel-gpu-tools-debugsource-1.19-lp150.2.3.1 References: https://bugzilla.suse.com/1106186

1 0

openSUSE-RU-2018:3232-1: moderate: Recommended update for SUSEConnect
by maintenance＠opensuse.org 18 Oct '18

18 Oct '18

openSUSE Recommended Update: Recommended update for SUSEConnect ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3232-1 Rating: moderate References: #1098220 #1101470 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for SUSEConnect fixes the following issues: - Detect if system is in cloud provider AWS/Google/Azure. (fate#320935) - Fix doesn't fail when trying to parse an empty body. (bsc#1098220) - Don't install release packages if they are already present - Fix .spec file for running SUSEConnect on Fedora28 - Changed "openssl" requirement to "openssl(cli)". (bsc#1101470) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1200=1 Package List: - openSUSE Leap 15.0 (x86_64): SUSEConnect-0.3.12-lp150.2.9.1 References: https://bugzilla.suse.com/1098220 https://bugzilla.suse.com/1101470

1 0

openSUSE-RU-2018:3231-1: moderate: Recommended update for open-vm-tools
by maintenance＠opensuse.org 18 Oct '18

18 Oct '18

openSUSE Recommended Update: Recommended update for open-vm-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3231-1 Rating: moderate References: #1103868 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for open-vm-tools fixes the following issues: Update to 10.3.0 (build 8931395) - Starting with 10.3.0, open-vm-tools builds with xmlsec1 by default (instead of building with xml-security). To revert to the old behavior and build with xml-security, use the option '--enable-xmlsecurity' for the ./configure command. - Remove vgauthd.service from the %pre and %post section in the spec file. This allows vmtoolsd.service to enable vgauthd if needed which creates the vmtoolsd.service.requires/vgauthd.service symlink. (bsc#1103868) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1199=1 Package List: - openSUSE Leap 42.3 (x86_64): libvmtools-devel-10.3.0-14.1 libvmtools0-10.3.0-14.1 libvmtools0-debuginfo-10.3.0-14.1 open-vm-tools-10.3.0-14.1 open-vm-tools-debuginfo-10.3.0-14.1 open-vm-tools-debugsource-10.3.0-14.1 open-vm-tools-desktop-10.3.0-14.1 open-vm-tools-desktop-debuginfo-10.3.0-14.1 References: https://bugzilla.suse.com/1103868

1 0