October 2018 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2018:3189-1: moderate: Recommended update for yast2-rmt
by maintenance＠opensuse.org 17 Oct '18

17 Oct '18

openSUSE Recommended Update: Recommended update for yast2-rmt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3189-1 Rating: moderate References: #1088680 #1099324 #1102053 #1102198 #1104232 #1107100 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has 6 recommended fixes can now be installed. Description: This update for rmt-server and yast2-rmt provides the following fixes: rmt-server: - Change file paths to new locations to make RMT work with read-only rootfs. (bsc#1102198) - Change file permissions for rmt.conf. (bsc#1104232) - Make nginx forward to IPv4 address only. (bsc#1107100) - Sort all list outputs alphabetically. (bsc#1088680) - Include 'last_seen_at' field in API systems output for consistency with SCC. - Only show post-install message on initial install yast2-rmt: - Change configuration file path to new location (for rmt-server 1.0.6 and later) - Hide database password in summary. (bsc#1102053) - Set and validate CA private key password. (bsc#1099324) - Reload nginx after configuration. - Translation fixes. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1175=1 Package List: - openSUSE Leap 15.0 (x86_64): rmt-server-1.0.6-lp150.2.9.1 rmt-server-debuginfo-1.0.6-lp150.2.9.1 - openSUSE Leap 15.0 (noarch): yast2-rmt-1.0.3-lp150.2.6.1 References: https://bugzilla.suse.com/1088680 https://bugzilla.suse.com/1099324 https://bugzilla.suse.com/1102053 https://bugzilla.suse.com/1102198 https://bugzilla.suse.com/1104232 https://bugzilla.suse.com/1107100

1 0

openSUSE-RU-2018:3188-1: moderate: Recommended update for salt
by maintenance＠opensuse.org 17 Oct '18

17 Oct '18

openSUSE Recommended Update: Recommended update for salt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3188-1 Rating: moderate References: #1057635 #1072599 #1087055 #1087278 #1087581 #1087891 #1088888 #1089112 #1089362 #1089526 #1091371 #1092161 #1092373 #1094055 #1095507 #1095651 #1095942 #1096514 #1097174 #1097413 #1098394 #1099323 #1099460 #1099945 #1100142 #1100225 #1100697 #1101812 #1101880 #1102013 #1102218 #1102265 #1103530 #1104154 #1106164 #1108969 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has 36 recommended fixes can now be installed. Description: This update provides a lot of fixes for salt. For a detailed list of changes, please refer to the rpm changelog. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1163=1 Package List: - openSUSE Leap 42.3 (noarch): salt-bash-completion-2018.3.0-20.1 salt-fish-completion-2018.3.0-20.1 salt-zsh-completion-2018.3.0-20.1 - openSUSE Leap 42.3 (x86_64): python2-salt-2018.3.0-20.1 python3-salt-2018.3.0-20.1 salt-2018.3.0-20.1 salt-api-2018.3.0-20.1 salt-cloud-2018.3.0-20.1 salt-doc-2018.3.0-20.1 salt-master-2018.3.0-20.1 salt-minion-2018.3.0-20.1 salt-proxy-2018.3.0-20.1 salt-ssh-2018.3.0-20.1 salt-syndic-2018.3.0-20.1 References: https://bugzilla.suse.com/1057635 https://bugzilla.suse.com/1072599 https://bugzilla.suse.com/1087055 https://bugzilla.suse.com/1087278 https://bugzilla.suse.com/1087581 https://bugzilla.suse.com/1087891 https://bugzilla.suse.com/1088888 https://bugzilla.suse.com/1089112 https://bugzilla.suse.com/1089362 https://bugzilla.suse.com/1089526 https://bugzilla.suse.com/1091371 https://bugzilla.suse.com/1092161 https://bugzilla.suse.com/1092373 https://bugzilla.suse.com/1094055 https://bugzilla.suse.com/1095507 https://bugzilla.suse.com/1095651 https://bugzilla.suse.com/1095942 https://bugzilla.suse.com/1096514 https://bugzilla.suse.com/1097174 https://bugzilla.suse.com/1097413 https://bugzilla.suse.com/1098394 https://bugzilla.suse.com/1099323 https://bugzilla.suse.com/1099460 https://bugzilla.suse.com/1099945 https://bugzilla.suse.com/1100142 https://bugzilla.suse.com/1100225 https://bugzilla.suse.com/1100697 https://bugzilla.suse.com/1101812 https://bugzilla.suse.com/1101880 https://bugzilla.suse.com/1102013 https://bugzilla.suse.com/1102218 https://bugzilla.suse.com/1102265 https://bugzilla.suse.com/1103530 https://bugzilla.suse.com/1104154 https://bugzilla.suse.com/1106164 https://bugzilla.suse.com/1108969

1 0

openSUSE-RU-2018:3187-1: moderate: Recommended update for tigervnc
by maintenance＠opensuse.org 17 Oct '18

17 Oct '18

openSUSE Recommended Update: Recommended update for tigervnc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3187-1 Rating: moderate References: #1101470 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for tigervnc fixes the following issues: - It was not possible to install the OpenSSL 1.0 command line interface without being prompted to remove essential packages (bsc#1101470) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1173=1 Package List: - openSUSE Leap 15.0 (x86_64): libXvnc-devel-1.8.0-lp150.10.6.1 libXvnc1-1.8.0-lp150.10.6.1 libXvnc1-debuginfo-1.8.0-lp150.10.6.1 tigervnc-1.8.0-lp150.10.6.1 tigervnc-debuginfo-1.8.0-lp150.10.6.1 tigervnc-debugsource-1.8.0-lp150.10.6.1 xorg-x11-Xvnc-1.8.0-lp150.10.6.1 xorg-x11-Xvnc-debuginfo-1.8.0-lp150.10.6.1 - openSUSE Leap 15.0 (noarch): tigervnc-x11vnc-1.8.0-lp150.10.6.1 xorg-x11-Xvnc-java-1.8.0-lp150.10.6.1 xorg-x11-Xvnc-novnc-1.8.0-lp150.10.6.1 References: https://bugzilla.suse.com/1101470

1 0

openSUSE-RU-2018:3186-1: moderate: Recommended update for osinfo-db
by maintenance＠opensuse.org 17 Oct '18

17 Oct '18

openSUSE Recommended Update: Recommended update for osinfo-db ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3186-1 Rating: moderate References: #1054986 #1102101 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for osinfo-db fixes the following issues: - Add support for sle12sp4 to the database (bsc#1102101) - Add official release date for sle15. Drop 'sles' and 'sled' in favor of just 'sle' (bsc#1054986) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1170=1 Package List: - openSUSE Leap 42.3 (noarch): osinfo-db-20180720-11.1 References: https://bugzilla.suse.com/1054986 https://bugzilla.suse.com/1102101

1 0

openSUSE-SU-2018:3185-1: important: Security update for apache2
by opensuse-security＠opensuse.org 17 Oct '18

17 Oct '18

openSUSE Security Update: Security update for apache2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:3185-1 Rating: important References: #1109961 Cross-References: CVE-2018-11763 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for apache2 fixes the following issues: Security issues fixed: - CVE-2018-11763: In Apache HTTP Server by sending continuous, large SETTINGS frames a client can occupy a connection, server thread and CPU time without any connection timeout coming to effect. This affects only HTTP/2 connections. (bsc#1109961) Bug fixes: - consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation says (patch Juergen Gleiss) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1178=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): apache2-2.4.33-lp150.2.6.1 apache2-debuginfo-2.4.33-lp150.2.6.1 apache2-debugsource-2.4.33-lp150.2.6.1 apache2-devel-2.4.33-lp150.2.6.1 apache2-event-2.4.33-lp150.2.6.1 apache2-event-debuginfo-2.4.33-lp150.2.6.1 apache2-example-pages-2.4.33-lp150.2.6.1 apache2-prefork-2.4.33-lp150.2.6.1 apache2-prefork-debuginfo-2.4.33-lp150.2.6.1 apache2-utils-2.4.33-lp150.2.6.1 apache2-utils-debuginfo-2.4.33-lp150.2.6.1 apache2-worker-2.4.33-lp150.2.6.1 apache2-worker-debuginfo-2.4.33-lp150.2.6.1 - openSUSE Leap 15.0 (noarch): apache2-doc-2.4.33-lp150.2.6.1 References: https://www.suse.com/security/cve/CVE-2018-11763.html https://bugzilla.suse.com/1109961

1 0

openSUSE-RU-2018:3184-1: moderate: Recommended update for bash
by maintenance＠opensuse.org 17 Oct '18

17 Oct '18

openSUSE Recommended Update: Recommended update for bash ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3184-1 Rating: moderate References: #1094121 #1107430 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for bash provides the following fixes: - Fix an inconsistent behaviour regarding expansion of here strings. (bsc#1094121) - Fix mis-matching of null string with '*' pattern. (bsc#1107430) - Fix a crash when the lastpipe option is enabled. - Fix a typo that was preventing the `compat42' shopt option from working as intended. - Help the shell to process any pending traps at redirection. - Fix a crashe due to incorrect conversion from an indexed to associative array. - Avoid the expansion of escape sequences in HOSTNAME in prompt. - Avoid `xtrace' attack over $PS4. This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1174=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): bash-4.3-83.9.1 bash-debuginfo-4.3-83.9.1 bash-debugsource-4.3-83.9.1 bash-devel-4.3-83.9.1 bash-loadables-4.3-83.9.1 bash-loadables-debuginfo-4.3-83.9.1 libreadline6-6.3-83.9.1 libreadline6-debuginfo-6.3-83.9.1 readline-devel-6.3-83.9.1 - openSUSE Leap 42.3 (x86_64): bash-debuginfo-32bit-4.3-83.9.1 libreadline6-32bit-6.3-83.9.1 libreadline6-debuginfo-32bit-6.3-83.9.1 readline-devel-32bit-6.3-83.9.1 - openSUSE Leap 42.3 (noarch): bash-doc-4.3-83.9.1 bash-lang-4.3-83.9.1 readline-doc-6.3-83.9.1 References: https://bugzilla.suse.com/1094121 https://bugzilla.suse.com/1107430

1 0

openSUSE-RU-2018:3183-1: moderate: Recommended update for alsa
by maintenance＠opensuse.org 17 Oct '18

17 Oct '18

openSUSE Recommended Update: Recommended update for alsa ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3183-1 Rating: moderate References: #1091678 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for alsa provides the following fixes: - Fix UCM profile parsing with longname. (bsc#1091678) - Add Dell WD15 dock UCM profile. (bsc#1091678) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1171=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): alsa-1.1.5-lp150.5.3.1 alsa-debugsource-1.1.5-lp150.5.3.1 alsa-devel-1.1.5-lp150.5.3.1 libasound2-1.1.5-lp150.5.3.1 libasound2-debuginfo-1.1.5-lp150.5.3.1 - openSUSE Leap 15.0 (noarch): alsa-docs-1.1.5-lp150.5.3.1 - openSUSE Leap 15.0 (x86_64): alsa-devel-32bit-1.1.5-lp150.5.3.1 libasound2-32bit-1.1.5-lp150.5.3.1 libasound2-32bit-debuginfo-1.1.5-lp150.5.3.1 References: https://bugzilla.suse.com/1091678

1 0

openSUSE-RU-2018:3182-1: moderate: Recommended update for hawk2
by maintenance＠opensuse.org 17 Oct '18

17 Oct '18

openSUSE Recommended Update: Recommended update for hawk2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3182-1 Rating: moderate References: #1069296 #1076421 #1080439 #1083511 #1085515 #1089802 #1090562 #1090657 #1090667 #1092108 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has 10 recommended fixes can now be installed. Description: This update for hawk2 fixes the following issues: - Fix remote nodes iteration (bsc#1080439) - Handle failure to fetch cluster name-bsc (bsc#1083511) - Return after redirect in reports (bsc#1090562) - Fix acl_enabled (bsc#1069296) - Fix acl_version check (bsc#1089802) - Make resource stop/start icon dependent on target-role (bsc#1076421) - Set Symmetrical to False when score is Serialize (bsc#1085515) - Improve hawk-server side cookie handling (bsc#1090667) - Set secure flag to enforce https (bsc#1090657) - Remove json extension from javascript delete operations (bsc#1092108) - Comply routes' id with resources' ID (bsc#1092108) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1166=1 Package List: - openSUSE Leap 42.3 (x86_64): hawk2-2.1.0+git.1516013868.bada8da4-9.2 hawk2-debuginfo-2.1.0+git.1516013868.bada8da4-9.2 hawk2-debugsource-2.1.0+git.1516013868.bada8da4-9.2 References: https://bugzilla.suse.com/1069296 https://bugzilla.suse.com/1076421 https://bugzilla.suse.com/1080439 https://bugzilla.suse.com/1083511 https://bugzilla.suse.com/1085515 https://bugzilla.suse.com/1089802 https://bugzilla.suse.com/1090562 https://bugzilla.suse.com/1090657 https://bugzilla.suse.com/1090667 https://bugzilla.suse.com/1092108

1 0

openSUSE-RU-2018:3181-1: Recommended update for sdcc
by maintenance＠opensuse.org 17 Oct '18

17 Oct '18

openSUSE Recommended Update: Recommended update for sdcc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3181-1 Rating: low References: #1109976 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for sdcc fixes no visible issues for users. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1169=1 Package List: - openSUSE Leap 15.0 (x86_64): sdcc-3.6.0-lp150.3.3.3 sdcc-debuginfo-3.6.0-lp150.3.3.3 sdcc-debugsource-3.6.0-lp150.3.3.3 sdcc-libc-sources-3.6.0-lp150.3.3.3 - openSUSE Leap 15.0 (noarch): sdcc-doc-3.6.0-lp150.3.3.3 References: https://bugzilla.suse.com/1109976

1 0

openSUSE-RU-2018:3180-1: moderate: Recommended update for resource-agents
by maintenance＠opensuse.org 17 Oct '18

17 Oct '18

openSUSE Recommended Update: Recommended update for resource-agents ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3180-1 Rating: moderate References: #1090882 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for resource-agents provides the following fix: - pgsql: Avoid changing owner and group of /dev/null to postgres. (bsc#1090882) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1167=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): ldirectord-4.0.1+git.1495055229.643177f1-15.1 resource-agents-4.0.1+git.1495055229.643177f1-15.1 resource-agents-debuginfo-4.0.1+git.1495055229.643177f1-15.1 resource-agents-debugsource-4.0.1+git.1495055229.643177f1-15.1 - openSUSE Leap 42.3 (noarch): monitoring-plugins-metadata-4.0.1+git.1495055229.643177f1-15.1 References: https://bugzilla.suse.com/1090882

1 0