October 2018 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2018:3140-1: moderate: Recommended update for python3
by maintenance＠opensuse.org 12 Oct '18

12 Oct '18

openSUSE Recommended Update: Recommended update for python3 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3140-1 Rating: moderate References: #1107030 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python3 fixes the following issues: - Add -fwrapv to OPTS, which is default for python3 for bugs which are caused by avoiding it. (bsc#1107030) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1154=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libpython3_6m1_0-3.6.5-lp150.2.3.1 libpython3_6m1_0-debuginfo-3.6.5-lp150.2.3.1 python3-3.6.5-lp150.2.3.1 python3-base-3.6.5-lp150.2.3.1 python3-base-debuginfo-3.6.5-lp150.2.3.1 python3-base-debugsource-3.6.5-lp150.2.3.1 python3-curses-3.6.5-lp150.2.3.1 python3-curses-debuginfo-3.6.5-lp150.2.3.1 python3-dbm-3.6.5-lp150.2.3.1 python3-dbm-debuginfo-3.6.5-lp150.2.3.1 python3-debuginfo-3.6.5-lp150.2.3.1 python3-debugsource-3.6.5-lp150.2.3.1 python3-devel-3.6.5-lp150.2.3.1 python3-devel-debuginfo-3.6.5-lp150.2.3.1 python3-idle-3.6.5-lp150.2.3.1 python3-testsuite-3.6.5-lp150.2.3.1 python3-testsuite-debuginfo-3.6.5-lp150.2.3.1 python3-tk-3.6.5-lp150.2.3.1 python3-tk-debuginfo-3.6.5-lp150.2.3.1 python3-tools-3.6.5-lp150.2.3.1 - openSUSE Leap 15.0 (noarch): python3-doc-3.6.5-lp150.2.3.1 - openSUSE Leap 15.0 (x86_64): libpython3_6m1_0-32bit-3.6.5-lp150.2.3.1 libpython3_6m1_0-32bit-debuginfo-3.6.5-lp150.2.3.1 python3-32bit-3.6.5-lp150.2.3.1 python3-32bit-debuginfo-3.6.5-lp150.2.3.1 python3-base-32bit-3.6.5-lp150.2.3.1 python3-base-32bit-debuginfo-3.6.5-lp150.2.3.1 References: https://bugzilla.suse.com/1107030

1 0

openSUSE-RU-2018:3139-1: moderate: Recommended update for bash
by maintenance＠opensuse.org 12 Oct '18

12 Oct '18

openSUSE Recommended Update: Recommended update for bash ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3139-1 Rating: moderate References: #1095661 #1095670 #1100488 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for bash provides the following fixes: - Bugfix: Parse settings in inputrc for all screen TERM variables starting with "screen." (bsc#1095661) - Make the generation of bash.html reproducible. (bsc#1100488) - Use initgroups(3) instead of setgroups(2) to fix the usage of suid programs. (bsc#1095670) - Fix a problem that could cause hash table bash uses to store exit statuses from asynchronous processes to develop loops in circumstances involving long-running scripts that create and reap many processes. - Fix a problem that could cause the shell to loop if a SIGINT is received inside of a SIGINT trap handler. - Fix cases where a failing readline command (e.g., delete-char at the end of a line) can cause a multi-character key sequence to 'back up' and attempt to re-read some of the characters in the sequence. - Fix a problem when sourcing a file from an interactive shell, that setting the SIGINT handler to the default and typing ^C would cause the shell to exit. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1157=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): bash-4.4-lp150.8.3.1 bash-debuginfo-4.4-lp150.8.3.1 bash-debugsource-4.4-lp150.8.3.1 bash-devel-4.4-lp150.8.3.1 bash-loadables-4.4-lp150.8.3.1 bash-loadables-debuginfo-4.4-lp150.8.3.1 libreadline7-7.0-lp150.8.3.1 libreadline7-debuginfo-7.0-lp150.8.3.1 readline-devel-7.0-lp150.8.3.1 readline-devel-static-7.0-lp150.8.3.1 - openSUSE Leap 15.0 (noarch): bash-doc-4.4-lp150.8.3.1 bash-lang-4.4-lp150.8.3.1 readline-doc-7.0-lp150.8.3.1 - openSUSE Leap 15.0 (x86_64): bash-32bit-debuginfo-4.4-lp150.8.3.1 libreadline7-32bit-7.0-lp150.8.3.1 libreadline7-32bit-debuginfo-7.0-lp150.8.3.1 readline-devel-32bit-7.0-lp150.8.3.1 References: https://bugzilla.suse.com/1095661 https://bugzilla.suse.com/1095670 https://bugzilla.suse.com/1100488

1 0

openSUSE-RU-2018:3138-1: moderate: Recommended update for dolphin
by maintenance＠opensuse.org 12 Oct '18

12 Oct '18

openSUSE Recommended Update: Recommended update for dolphin ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3138-1 Rating: moderate References: #1108797 Affected Products: openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for dolphin fixes the following issues: - Prevent accidentally triggering inline rename by just dragging a file (boo#1108797) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1152=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2018-1152=1 Package List: - openSUSE Leap 15.0 (x86_64): dolphin-17.12.3-lp150.2.3.1 dolphin-debuginfo-17.12.3-lp150.2.3.1 dolphin-debugsource-17.12.3-lp150.2.3.1 dolphin-devel-17.12.3-lp150.2.3.1 dolphin-part-17.12.3-lp150.2.3.1 dolphin-part-debuginfo-17.12.3-lp150.2.3.1 libdolphinvcs5-17.12.3-lp150.2.3.1 libdolphinvcs5-debuginfo-17.12.3-lp150.2.3.1 - openSUSE Leap 15.0 (noarch): dolphin-part-lang-17.12.3-lp150.2.3.1 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): dolphin-17.12.3-bp150.3.3.1 dolphin-devel-17.12.3-bp150.3.3.1 dolphin-part-17.12.3-bp150.3.3.1 libdolphinvcs5-17.12.3-bp150.3.3.1 - openSUSE Backports SLE-15 (noarch): dolphin-part-lang-17.12.3-bp150.3.3.1 References: https://bugzilla.suse.com/1108797

1 0

openSUSE-RU-2018:3137-1: Recommended update for at
by maintenance＠opensuse.org 12 Oct '18

12 Oct '18

openSUSE Recommended Update: Recommended update for at ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3137-1 Rating: low References: #879402 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for at fixes the following issues: - The date format of atq was not usable for sorting, introduce -o <timeformat> switch for atq (bsc#879402) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1155=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): at-3.1.14-17.1 at-debuginfo-3.1.14-17.1 at-debugsource-3.1.14-17.1 References: https://bugzilla.suse.com/879402

1 0

openSUSE-RU-2018:3136-1: moderate: Recommended update for gnome-shell
by maintenance＠opensuse.org 12 Oct '18

12 Oct '18

openSUSE Recommended Update: Recommended update for gnome-shell ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3136-1 Rating: moderate References: #1084341 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gnome-shell provides the following fix: - Fix a crash in gnome-shell blur_pixels() when quickly moving windows from one monitor to another. (bsc#1084341) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1153=1 Package List: - openSUSE Leap 15.0 (noarch): gnome-shell-lang-3.26.2+20180130.0d9c74212-lp150.3.3.1 - openSUSE Leap 15.0 (x86_64): gnome-shell-3.26.2+20180130.0d9c74212-lp150.3.3.1 gnome-shell-browser-plugin-3.26.2+20180130.0d9c74212-lp150.3.3.1 gnome-shell-browser-plugin-debuginfo-3.26.2+20180130.0d9c74212-lp150.3.3.1 gnome-shell-calendar-3.26.2+20180130.0d9c74212-lp150.3.3.1 gnome-shell-calendar-debuginfo-3.26.2+20180130.0d9c74212-lp150.3.3.1 gnome-shell-debuginfo-3.26.2+20180130.0d9c74212-lp150.3.3.1 gnome-shell-debugsource-3.26.2+20180130.0d9c74212-lp150.3.3.1 gnome-shell-devel-3.26.2+20180130.0d9c74212-lp150.3.3.1 References: https://bugzilla.suse.com/1084341

1 0

openSUSE-RU-2018:3135-1: moderate: Recommended update for mpich
by maintenance＠opensuse.org 12 Oct '18

12 Oct '18

openSUSE Recommended Update: Recommended update for mpich ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3135-1 Rating: moderate References: #1098653 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for mpich provides the following fixes: - Fix handling of mpi-selector during updates. (bsc#1098653) - macros.hpc-mpich: Replace %%compiler_family by %%hpc_compiler_family. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1151=1 Package List: - openSUSE Leap 15.0 (x86_64): mpich-3.2.1-lp150.5.3.1 mpich-debuginfo-3.2.1-lp150.5.3.1 mpich-debugsource-3.2.1-lp150.5.3.1 mpich-devel-3.2.1-lp150.5.3.1 mpich-gnu-hpc-3.2.1-lp150.5.3.1 mpich-gnu-hpc-devel-3.2.1-lp150.5.3.1 mpich-gnu-hpc-devel-static-3.2.1-lp150.5.3.1 mpich-ofi-3.2.1-lp150.5.3.1 mpich-ofi-debuginfo-3.2.1-lp150.5.3.1 mpich-ofi-debugsource-3.2.1-lp150.5.3.1 mpich-ofi-devel-3.2.1-lp150.5.3.1 mpich-ofi-gnu-hpc-3.2.1-lp150.5.3.1 mpich-ofi-gnu-hpc-devel-3.2.1-lp150.5.3.1 mpich-ofi-gnu-hpc-devel-static-3.2.1-lp150.5.3.1 mpich-ofi_3_2_1-gnu-hpc-3.2.1-lp150.5.3.1 mpich-ofi_3_2_1-gnu-hpc-debuginfo-3.2.1-lp150.5.3.1 mpich-ofi_3_2_1-gnu-hpc-debugsource-3.2.1-lp150.5.3.1 mpich-ofi_3_2_1-gnu-hpc-devel-3.2.1-lp150.5.3.1 mpich-ofi_3_2_1-gnu-hpc-devel-static-3.2.1-lp150.5.3.1 mpich-ofi_3_2_1-gnu-hpc-macros-devel-3.2.1-lp150.5.3.1 mpich_3_2_1-gnu-hpc-3.2.1-lp150.5.3.1 mpich_3_2_1-gnu-hpc-debuginfo-3.2.1-lp150.5.3.1 mpich_3_2_1-gnu-hpc-debugsource-3.2.1-lp150.5.3.1 mpich_3_2_1-gnu-hpc-devel-3.2.1-lp150.5.3.1 mpich_3_2_1-gnu-hpc-devel-static-3.2.1-lp150.5.3.1 mpich_3_2_1-gnu-hpc-macros-devel-3.2.1-lp150.5.3.1 - openSUSE Leap 15.0 (noarch): mpich-gnu-hpc-macros-devel-3.2.1-lp150.5.3.1 mpich-ofi-gnu-hpc-macros-devel-3.2.1-lp150.5.3.1 References: https://bugzilla.suse.com/1098653

1 0

openSUSE-RU-2018:3134-1: Recommended update for sudo
by maintenance＠opensuse.org 12 Oct '18

12 Oct '18

openSUSE Recommended Update: Recommended update for sudo ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3134-1 Rating: low References: #1053911 #1071379 #1098628 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for sudo provides the following fixes: - Fix double free if ipa_hostname is not fully qualified. (bsc#1098628) - Disable insults by default at build time. For new installations this was done via sudoers file, but when upgrading from previous versions it would accidentally be enabled. (bsc#1053911) - Remove not needed sudoers.dist file. (bsc#1071379) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1158=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): sudo-1.8.20p2-2.3.1 sudo-debuginfo-1.8.20p2-2.3.1 sudo-debugsource-1.8.20p2-2.3.1 sudo-devel-1.8.20p2-2.3.1 sudo-test-1.8.20p2-2.3.1 References: https://bugzilla.suse.com/1053911 https://bugzilla.suse.com/1071379 https://bugzilla.suse.com/1098628

1 0

openSUSE-RU-2018:3132-1: moderate: Recommended update for retext
by maintenance＠opensuse.org 12 Oct '18

12 Oct '18

openSUSE Recommended Update: Recommended update for retext ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3132-1 Rating: moderate References: #1040433 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for retext fixes the following issues: - ReText could not be launched from the KDE Application launcher (boo#1040433) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1159=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1159=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2018-1159=1 Package List: - openSUSE Leap 42.3 (noarch): retext-6.0.0-4.3.1 - openSUSE Leap 15.0 (noarch): retext-6.0.0-lp150.2.3.1 - openSUSE Backports SLE-15 (noarch): retext-6.0.0-bp150.3.3.1 References: https://bugzilla.suse.com/1040433

1 0

openSUSE-SU-2018:3110-1: moderate: Security update for libxml2
by opensuse-security＠opensuse.org 12 Oct '18

12 Oct '18

openSUSE Security Update: Security update for libxml2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:3110-1 Rating: moderate References: #1088279 #1102046 #1105166 Cross-References: CVE-2018-14404 CVE-2018-14567 CVE-2018-9251 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for libxml2 fixes the following security issues: - CVE-2018-9251: The xz_decomp function allowed remote attackers to cause a denial of service (infinite loop) via a crafted XML file that triggers LZMA_MEMLIMIT_ERROR, as demonstrated by xmllint (bsc#1088279) - CVE-2018-14567: Prevent denial of service (infinite loop) via a crafted XML file that triggers LZMA_MEMLIMIT_ERROR, as demonstrated by xmllint (bsc#1105166) - CVE-2018-14404: Prevent NULL pointer dereference in the xmlXPathCompOpEval() function when parsing an invalid XPath expression in the XPATH_OP_AND or XPATH_OP_OR case leading to a denial of service attack (bsc#1102046) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1150=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libxml2-2-2.9.7-lp150.2.3.1 libxml2-2-debuginfo-2.9.7-lp150.2.3.1 libxml2-debugsource-2.9.7-lp150.2.3.1 libxml2-devel-2.9.7-lp150.2.3.1 libxml2-tools-2.9.7-lp150.2.3.1 libxml2-tools-debuginfo-2.9.7-lp150.2.3.1 python-libxml2-python-debugsource-2.9.7-lp150.2.3.1 python2-libxml2-python-2.9.7-lp150.2.3.1 python2-libxml2-python-debuginfo-2.9.7-lp150.2.3.1 python3-libxml2-python-2.9.7-lp150.2.3.1 python3-libxml2-python-debuginfo-2.9.7-lp150.2.3.1 - openSUSE Leap 15.0 (noarch): libxml2-doc-2.9.7-lp150.2.3.1 - openSUSE Leap 15.0 (x86_64): libxml2-2-32bit-2.9.7-lp150.2.3.1 libxml2-2-32bit-debuginfo-2.9.7-lp150.2.3.1 libxml2-devel-32bit-2.9.7-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-14404.html https://www.suse.com/security/cve/CVE-2018-14567.html https://www.suse.com/security/cve/CVE-2018-9251.html https://bugzilla.suse.com/1088279 https://bugzilla.suse.com/1102046 https://bugzilla.suse.com/1105166

1 0

openSUSE-SU-2018:3109-1: important: Security update for git
by opensuse-security＠opensuse.org 12 Oct '18

12 Oct '18

openSUSE Security Update: Security update for git ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:3109-1 Rating: important References: #1110949 Cross-References: CVE-2018-17456 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for git fixes the following issues: - CVE-2018-17456: Git allowed remote code execution during processing of a recursive "git clone" of a superproject if a .gitmodules file has a URL field beginning with a '-' character. (boo#1110949). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1147=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): git-2.13.7-16.1 git-arch-2.13.7-16.1 git-core-2.13.7-16.1 git-core-debuginfo-2.13.7-16.1 git-credential-gnome-keyring-2.13.7-16.1 git-credential-gnome-keyring-debuginfo-2.13.7-16.1 git-cvs-2.13.7-16.1 git-daemon-2.13.7-16.1 git-daemon-debuginfo-2.13.7-16.1 git-debugsource-2.13.7-16.1 git-email-2.13.7-16.1 git-gui-2.13.7-16.1 git-svn-2.13.7-16.1 git-svn-debuginfo-2.13.7-16.1 git-web-2.13.7-16.1 gitk-2.13.7-16.1 - openSUSE Leap 42.3 (noarch): git-doc-2.13.7-16.1 References: https://www.suse.com/security/cve/CVE-2018-17456.html https://bugzilla.suse.com/1110949

1 0