October 2018 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2018:3530-1: moderate: Recommended update for glibc
by maintenance＠opensuse.org 27 Oct '18

27 Oct '18

openSUSE Recommended Update: Recommended update for glibc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3530-1 Rating: moderate References: #1102526 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for glibc fixes the following issues: - Fix build on aarch64 with binutils newer than 2.30. - Fix year 2039 bug for localtime with 64-bit time_t (bsc#1102526) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1318=1 Package List: - openSUSE Leap 15.0 (i586 i686 x86_64): glibc-2.26-lp150.11.9.1 glibc-debuginfo-2.26-lp150.11.9.1 glibc-debugsource-2.26-lp150.11.9.1 glibc-devel-2.26-lp150.11.9.1 glibc-devel-debuginfo-2.26-lp150.11.9.1 glibc-devel-static-2.26-lp150.11.9.1 glibc-locale-2.26-lp150.11.9.1 glibc-locale-debuginfo-2.26-lp150.11.9.1 glibc-profile-2.26-lp150.11.9.1 - openSUSE Leap 15.0 (i586 x86_64): glibc-extra-2.26-lp150.11.9.1 glibc-extra-debuginfo-2.26-lp150.11.9.1 glibc-utils-2.26-lp150.11.9.1 glibc-utils-debuginfo-2.26-lp150.11.9.1 glibc-utils-src-debugsource-2.26-lp150.11.9.1 nscd-2.26-lp150.11.9.1 nscd-debuginfo-2.26-lp150.11.9.1 - openSUSE Leap 15.0 (noarch): glibc-html-2.26-lp150.11.9.1 glibc-i18ndata-2.26-lp150.11.9.1 glibc-info-2.26-lp150.11.9.1 - openSUSE Leap 15.0 (x86_64): glibc-32bit-2.26-lp150.11.9.1 glibc-32bit-debuginfo-2.26-lp150.11.9.1 glibc-devel-32bit-2.26-lp150.11.9.1 glibc-devel-32bit-debuginfo-2.26-lp150.11.9.1 glibc-devel-static-32bit-2.26-lp150.11.9.1 glibc-locale-32bit-2.26-lp150.11.9.1 glibc-locale-32bit-debuginfo-2.26-lp150.11.9.1 glibc-profile-32bit-2.26-lp150.11.9.1 glibc-utils-32bit-2.26-lp150.11.9.1 glibc-utils-32bit-debuginfo-2.26-lp150.11.9.1 References: https://bugzilla.suse.com/1102526

1 0

openSUSE-SU-2018:3529-1: moderate: Security update for lcms2
by opensuse-security＠opensuse.org 27 Oct '18

27 Oct '18

openSUSE Security Update: Security update for lcms2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:3529-1 Rating: moderate References: #1108813 Cross-References: CVE-2018-16435 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for lcms2 fixes the following issues: - CVE-2018-16435: Heap-based buffer overflow via a crafted file in the second argument to cmsIT8LoadFromFile (bsc#1108813) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1327=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): lcms2-2.9-lp150.2.3.1 lcms2-debuginfo-2.9-lp150.2.3.1 lcms2-debugsource-2.9-lp150.2.3.1 liblcms2-2-2.9-lp150.2.3.1 liblcms2-2-debuginfo-2.9-lp150.2.3.1 liblcms2-devel-2.9-lp150.2.3.1 - openSUSE Leap 15.0 (noarch): liblcms2-doc-2.9-lp150.2.3.1 - openSUSE Leap 15.0 (x86_64): liblcms2-2-32bit-2.9-lp150.2.3.1 liblcms2-2-32bit-debuginfo-2.9-lp150.2.3.1 liblcms2-devel-32bit-2.9-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-16435.html https://bugzilla.suse.com/1108813

1 0

openSUSE-RU-2018:3528-1: moderate: Recommended update for texlive-specs-n
by maintenance＠opensuse.org 27 Oct '18

27 Oct '18

openSUSE Recommended Update: Recommended update for texlive-specs-n ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3528-1 Rating: moderate References: #1077170 #1083212 #1094731 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update fixes the following issues with texlive-specs-n: - Port back changes for bsd_glob of latexmk(.pl). (bsc#1094731) - Use font-config macros *with* xorg-x11-fonts-core (for encodings), mkfontdir (ditto), and mkfontscale. (bsc#1083212) - Avoid broken scripts due former env correction, only repair those scripts where the shebang exists . - Switch over to python 3. (bsc#1077170) - Avoid nasty warning about missing batchmode in ENVironment. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1324=1 Package List: - openSUSE Leap 15.0 (noarch): texlive-latex-notes-zh-cn-2017.137.1.20svn15878-lp150.5.3.1 texlive-latex-papersize-2017.137.1.62svn42296-lp150.5.3.1 texlive-latex-papersize-doc-2017.137.1.62svn42296-lp150.5.3.1 texlive-latex-referenz-2017.137.2svn36671-lp150.5.3.1 texlive-latex-tabellen-2017.137.svn16979-lp150.5.3.1 texlive-latex-tds-2017.137.svn40613-lp150.5.3.1 texlive-latex-tds-doc-2017.137.svn40613-lp150.5.3.1 texlive-latex-veryshortguide-2017.137.svn41844-lp150.5.3.1 texlive-latex-web-companion-2017.137.svn29349-lp150.5.3.1 texlive-latex2e-help-texinfo-2017.137.svn38709-lp150.5.3.1 texlive-latex2e-help-texinfo-fr-2017.137.svn42541-lp150.5.3.1 texlive-latex2e-help-texinfo-spanish-2017.137.svn37356-lp150.5.3.1 texlive-latex2man-2017.137.1.25svn43855-lp150.5.3.1 texlive-latex2man-doc-2017.137.1.25svn43855-lp150.5.3.1 texlive-latex2nemeth-2017.137.1.0svn42300-lp150.5.3.1 texlive-latex2nemeth-doc-2017.137.1.0svn42300-lp150.5.3.1 texlive-latex4wp-2017.137.1.0.10svn35999-lp150.5.3.1 texlive-latex4wp-it-2017.137.1.0.10svn36000-lp150.5.3.1 texlive-latexbangla-2017.137.0.0.2svn42409-lp150.5.3.1 texlive-latexbangla-doc-2017.137.0.0.2svn42409-lp150.5.3.1 texlive-latexbug-2017.137.1.0asvn44566-lp150.5.3.1 texlive-latexbug-doc-2017.137.1.0asvn44566-lp150.5.3.1 texlive-latexcheat-2017.137.1.13svn15878-lp150.5.3.1 texlive-latexcheat-de-2017.137.svn35702-lp150.5.3.1 texlive-latexcheat-esmx-2017.137.2.00svn36866-lp150.5.3.1 texlive-latexcheat-ptbr-2017.137.1.13svn15878-lp150.5.3.1 texlive-latexconfig-2017.137.svn40274-lp150.5.3.1 texlive-latexcourse-rug-2017.137.1.1svn39026-lp150.5.3.1 texlive-latexdemo-2017.137.0.0.1svn34481-lp150.5.3.1 texlive-latexdemo-doc-2017.137.0.0.1svn34481-lp150.5.3.1 texlive-latexdiff-2017.137.1.2.0svn41892-lp150.5.3.1 texlive-latexdiff-doc-2017.137.1.2.0svn41892-lp150.5.3.1 texlive-latexfileinfo-pkgs-2017.137.0.0.22svn26760-lp150.5.3.1 texlive-latexfileinfo-pkgs-doc-2017.137.0.0.22svn26760-lp150.5.3.1 texlive-latexfileversion-2017.137.0.0.3svn29349-lp150.5.3.1 texlive-latexfileversion-doc-2017.137.0.0.3svn29349-lp150.5.3.1 texlive-latexgit-2017.137.svn41920-lp150.5.3.1 texlive-latexgit-doc-2017.137.svn41920-lp150.5.3.1 texlive-latexindent-2017.137.3.1svn44492-lp150.5.3.1 texlive-latexindent-doc-2017.137.3.1svn44492-lp150.5.3.1 texlive-latexmk-2017.137.4.52csvn43099-lp150.5.3.1 texlive-latexmk-doc-2017.137.4.52csvn43099-lp150.5.3.1 texlive-latexmp-2017.137.1.2.1svn15878-lp150.5.3.1 texlive-latexmp-doc-2017.137.1.2.1svn15878-lp150.5.3.1 texlive-latexpand-2017.137.1.3svn41873-lp150.5.3.1 texlive-latexpand-doc-2017.137.1.3svn41873-lp150.5.3.1 texlive-lato-2017.137.2.2svn24986-lp150.5.3.1 texlive-lato-doc-2017.137.2.2svn24986-lp150.5.3.1 texlive-lato-fonts-2017.137.2.2svn24986-lp150.5.3.1 texlive-layaureo-2017.137.0.0.2svn19087-lp150.5.3.1 texlive-layaureo-doc-2017.137.0.0.2svn19087-lp150.5.3.1 texlive-layouts-2017.137.2.6dsvn42428-lp150.5.3.1 texlive-layouts-doc-2017.137.2.6dsvn42428-lp150.5.3.1 texlive-lazylist-2017.137.1.0asvn17691-lp150.5.3.1 texlive-lazylist-doc-2017.137.1.0asvn17691-lp150.5.3.1 texlive-lcd-2017.137.0.0.3svn16549-lp150.5.3.1 texlive-lcd-doc-2017.137.0.0.3svn16549-lp150.5.3.1 texlive-lcdftypetools-2017.137.svn44166-lp150.5.3.1 texlive-lcg-2017.137.1.3svn31474-lp150.5.3.1 texlive-lcg-doc-2017.137.1.3svn31474-lp150.5.3.1 texlive-lcyw-2017.137.1.1svn15878-lp150.5.3.1 texlive-lcyw-doc-2017.137.1.1svn15878-lp150.5.3.1 texlive-leading-2017.137.0.0.3svn15878-lp150.5.3.1 texlive-leading-doc-2017.137.0.0.3svn15878-lp150.5.3.1 texlive-leadsheets-2017.137.0.0.5asvn43034-lp150.5.3.1 texlive-leadsheets-doc-2017.137.0.0.5asvn43034-lp150.5.3.1 texlive-leaflet-2017.137.1.1bsvn43523-lp150.5.3.1 texlive-leaflet-doc-2017.137.1.1bsvn43523-lp150.5.3.1 texlive-lecturer-2017.137.svn23916-lp150.5.3.1 texlive-lecturer-doc-2017.137.svn23916-lp150.5.3.1 texlive-ledmac-2017.137.0.0.19.4svn41811-lp150.5.3.1 texlive-ledmac-doc-2017.137.0.0.19.4svn41811-lp150.5.3.1 texlive-leftidx-2017.137.svn15878-lp150.5.3.1 texlive-leftidx-doc-2017.137.svn15878-lp150.5.3.1 texlive-leipzig-2017.137.1.1svn34902-lp150.5.3.1 texlive-leipzig-doc-2017.137.1.1svn34902-lp150.5.3.1 texlive-lengthconvert-2017.137.1.0asvn30867-lp150.5.3.1 texlive-lengthconvert-doc-2017.137.1.0asvn30867-lp150.5.3.1 texlive-lettre-2017.137.2.353svn35145-lp150.5.3.1 texlive-lettre-doc-2017.137.2.353svn35145-lp150.5.3.1 texlive-lettrine-2017.137.1.9svn38268-lp150.5.3.1 texlive-lettrine-doc-2017.137.1.9svn38268-lp150.5.3.1 texlive-levy-2017.137.svn21750-lp150.5.3.1 texlive-levy-doc-2017.137.svn21750-lp150.5.3.1 texlive-lewis-2017.137.0.0.1svn15878-lp150.5.3.1 texlive-lewis-doc-2017.137.0.0.1svn15878-lp150.5.3.1 texlive-lexikon-2017.137.1.0csvn17364-lp150.5.3.1 texlive-lexikon-doc-2017.137.1.0csvn17364-lp150.5.3.1 texlive-lexref-2017.137.1.1asvn36026-lp150.5.3.1 texlive-lexref-doc-2017.137.1.1asvn36026-lp150.5.3.1 texlive-lfb-2017.137.1.0svn15878-lp150.5.3.1 texlive-lfb-doc-2017.137.1.0svn15878-lp150.5.3.1 texlive-lgreek-2017.137.svn21818-lp150.5.3.1 texlive-lgreek-doc-2017.137.svn21818-lp150.5.3.1 texlive-lh-2017.137.3.5gsvn15878-lp150.5.3.1 texlive-lh-doc-2017.137.3.5gsvn15878-lp150.5.3.1 texlive-lhcyr-2017.137.svn31795-lp150.5.3.1 texlive-lhelp-2017.137.2.0svn23638-lp150.5.3.1 texlive-lhelp-doc-2017.137.2.0svn23638-lp150.5.3.1 texlive-libertine-2017.137.5.3.0svn43603-lp150.5.3.1 texlive-libertine-doc-2017.137.5.3.0svn43603-lp150.5.3.1 texlive-libertine-fonts-2017.137.5.3.0svn43603-lp150.5.3.1 texlive-libertinegc-2017.137.1.00svn39746-lp150.5.3.1 texlive-libertinegc-doc-2017.137.1.00svn39746-lp150.5.3.1 texlive-libertinus-2017.137.6.4svn44409-lp150.5.3.1 texlive-libertinus-doc-2017.137.6.4svn44409-lp150.5.3.1 texlive-libertinus-fonts-2017.137.6.4svn44409-lp150.5.3.1 texlive-libertinust1math-2017.137.1.0.4svn44542-lp150.5.3.1 texlive-libertinust1math-doc-2017.137.1.0.4svn44542-lp150.5.3.1 texlive-libertinust1math-fonts-2017.137.1.0.4svn44542-lp150.5.3.1 texlive-libgreek-2017.137.1.0svn27789-lp150.5.3.1 texlive-libgreek-doc-2017.137.1.0svn27789-lp150.5.3.1 texlive-librarian-2017.137.1.0svn19880-lp150.5.3.1 texlive-librarian-doc-2017.137.1.0svn19880-lp150.5.3.1 texlive-librebaskerville-2017.137.svn31741-lp150.5.3.1 texlive-librebaskerville-doc-2017.137.svn31741-lp150.5.3.1 texlive-librebaskerville-fonts-2017.137.svn31741-lp150.5.3.1 texlive-librebodoni-2017.137.svn39375-lp150.5.3.1 texlive-librebodoni-doc-2017.137.svn39375-lp150.5.3.1 texlive-librebodoni-fonts-2017.137.svn39375-lp150.5.3.1 texlive-librecaslon-2017.137.svn31929-lp150.5.3.1 texlive-librecaslon-doc-2017.137.svn31929-lp150.5.3.1 texlive-librecaslon-fonts-2017.137.svn31929-lp150.5.3.1 texlive-libris-2017.137.1.007svn19409-lp150.5.3.1 texlive-libris-doc-2017.137.1.007svn19409-lp150.5.3.1 texlive-libris-fonts-2017.137.1.007svn19409-lp150.5.3.1 texlive-lilyglyphs-2017.137.0.0.2.3svn33164-lp150.5.3.1 texlive-lilyglyphs-doc-2017.137.0.0.2.3svn33164-lp150.5.3.1 texlive-lilyglyphs-fonts-2017.137.0.0.2.3svn33164-lp150.5.3.1 texlive-limap-2017.137.2.1svn41390-lp150.5.3.1 texlive-limap-doc-2017.137.2.1svn41390-lp150.5.3.1 texlive-linearA-2017.137.svn15878-lp150.5.3.1 texlive-linearA-doc-2017.137.svn15878-lp150.5.3.1 texlive-linearA-fonts-2017.137.svn15878-lp150.5.3.1 texlive-linegoal-2017.137.2.9svn21523-lp150.5.3.1 texlive-linegoal-doc-2017.137.2.9svn21523-lp150.5.3.1 texlive-lineno-2017.137.4.41svn21442-lp150.5.3.1 texlive-lineno-doc-2017.137.4.41svn21442-lp150.5.3.1 texlive-ling-macros-2017.137.svn42268-lp150.5.3.1 texlive-ling-macros-doc-2017.137.svn42268-lp150.5.3.1 texlive-linguex-2017.137.4.3svn30815-lp150.5.3.1 texlive-linguex-doc-2017.137.4.3svn30815-lp150.5.3.1 texlive-linop-2017.137.0.0.1svn41304-lp150.5.3.1 texlive-linop-doc-2017.137.0.0.1svn41304-lp150.5.3.1 texlive-lion-msc-2017.137.0.0.27svn44131-lp150.5.3.1 texlive-lion-msc-doc-2017.137.0.0.27svn44131-lp150.5.3.1 texlive-lipsum-2017.137.1.3svn34800-lp150.5.3.1 texlive-lipsum-doc-2017.137.1.3svn34800-lp150.5.3.1 texlive-lisp-on-tex-2017.137.2.0svn38722-lp150.5.3.1 texlive-lisp-on-tex-doc-2017.137.2.0svn38722-lp150.5.3.1 texlive-listbib-2017.137.2.2svn29349-lp150.5.3.1 texlive-listbib-doc-2017.137.2.2svn29349-lp150.5.3.1 texlive-listing-2017.137.1.2svn17373-lp150.5.3.1 texlive-listing-doc-2017.137.1.2svn17373-lp150.5.3.1 texlive-listings-2017.137.1.6svn37534-lp150.5.3.1 texlive-listings-doc-2017.137.1.6svn37534-lp150.5.3.1 texlive-listings-ext-2017.137.67svn29349-lp150.5.3.1 texlive-listings-ext-doc-2017.137.67svn29349-lp150.5.3.1 texlive-listlbls-2017.137.1.03svn34893-lp150.5.3.1 texlive-listlbls-doc-2017.137.1.03svn34893-lp150.5.3.1 texlive-listliketab-2017.137.svn15878-lp150.5.3.1 texlive-listliketab-doc-2017.137.svn15878-lp150.5.3.1 texlive-listofitems-2017.137.1.3svn42530-lp150.5.3.1 texlive-listofitems-doc-2017.137.1.3svn42530-lp150.5.3.1 texlive-listofsymbols-2017.137.0.0.2svn16134-lp150.5.3.1 texlive-listofsymbols-doc-2017.137.0.0.2svn16134-lp150.5.3.1 texlive-lithuanian-2017.137.svn22722-lp150.5.3.1 texlive-lithuanian-doc-2017.137.svn22722-lp150.5.3.1 texlive-liturg-2017.137.1.0svn15878-lp150.5.3.1 texlive-liturg-doc-2017.137.1.0svn15878-lp150.5.3.1 texlive-lkproof-2017.137.3.1svn20021-lp150.5.3.1 texlive-lkproof-doc-2017.137.3.1svn20021-lp150.5.3.1 texlive-lm-2017.137.2.004svn28119-lp150.5.3.1 texlive-lm-doc-2017.137.2.004svn28119-lp150.5.3.1 texlive-lm-fonts-2017.137.2.004svn28119-lp150.5.3.1 texlive-lm-math-2017.137.1.959svn36915-lp150.5.3.1 texlive-lm-math-doc-2017.137.1.959svn36915-lp150.5.3.1 texlive-lm-math-fonts-2017.137.1.959svn36915-lp150.5.3.1 texlive-lmake-2017.137.1.0svn25552-lp150.5.3.1 texlive-lmake-doc-2017.137.1.0svn25552-lp150.5.3.1 texlive-lni-2017.137.1.3svn44368-lp150.5.3.1 texlive-lni-doc-2017.137.1.3svn44368-lp150.5.3.1 texlive-lobster2-2017.137.svn32617-lp150.5.3.1 texlive-lobster2-doc-2017.137.svn32617-lp150.5.3.1 texlive-lobster2-fonts-2017.137.svn32617-lp150.5.3.1 texlive-locality-2017.137.0.0.2svn20422-lp150.5.3.1 texlive-locality-doc-2017.137.0.0.2svn20422-lp150.5.3.1 texlive-localloc-2017.137.svn21934-lp150.5.3.1 texlive-localloc-doc-2017.137.svn21934-lp150.5.3.1 texlive-logbox-2017.137.1.0svn24499-lp150.5.3.1 texlive-logbox-doc-2017.137.1.0svn24499-lp150.5.3.1 texlive-logical-markup-utils-2017.137.svn15878-lp150.5.3.1 texlive-logical-markup-utils-doc-2017.137.svn15878-lp150.5.3.1 texlive-logicproof-2017.137.svn33254-lp150.5.3.1 texlive-logicproof-doc-2017.137.svn33254-lp150.5.3.1 texlive-logicpuzzle-2017.137.2.5svn34491-lp150.5.3.1 texlive-logicpuzzle-doc-2017.137.2.5svn34491-lp150.5.3.1 texlive-logpap-2017.137.0.0.6svn15878-lp150.5.3.1 texlive-logpap-doc-2017.137.0.0.6svn15878-lp150.5.3.1 texlive-logreq-2017.137.1.0svn19640-lp150.5.3.1 texlive-logreq-doc-2017.137.1.0svn19640-lp150.5.3.1 texlive-lollipop-2017.137.1.07svn41438-lp150.5.3.1 texlive-lollipop-doc-2017.137.1.07svn41438-lp150.5.3.1 texlive-longdivision-2017.137.1.0svn43159-lp150.5.3.1 texlive-longdivision-doc-2017.137.1.0svn43159-lp150.5.3.1 texlive-longfbox-2017.137.1.0svn39028-lp150.5.3.1 texlive-longfbox-doc-2017.137.1.0svn39028-lp150.5.3.1 texlive-longfigure-2017.137.1.0svn34302-lp150.5.3.1 texlive-longfigure-doc-2017.137.1.0svn34302-lp150.5.3.1 texlive-longnamefilelist-2017.137.0.0.2svn27889-lp150.5.3.1 texlive-longnamefilelist-doc-2017.137.0.0.2svn27889-lp150.5.3.1 texlive-loops-2017.137.1.3svn30704-lp150.5.3.1 texlive-loops-doc-2017.137.1.3svn30704-lp150.5.3.1 texlive-lpform-2017.137.svn36918-lp150.5.3.1 texlive-lpform-doc-2017.137.svn36918-lp150.5.3.1 texlive-lpic-2017.137.0.0.8svn20843-lp150.5.3.1 texlive-lpic-doc-2017.137.0.0.8svn20843-lp150.5.3.1 texlive-lplfitch-2017.137.0.0.9svn31077-lp150.5.3.1 texlive-lplfitch-doc-2017.137.0.0.9svn31077-lp150.5.3.1 texlive-lps-2017.137.0.0.7svn21322-lp150.5.3.1 texlive-lps-doc-2017.137.0.0.7svn21322-lp150.5.3.1 texlive-lroundrect-2017.137.1.0svn39804-lp150.5.3.1 texlive-lroundrect-doc-2017.137.1.0svn39804-lp150.5.3.1 texlive-lsc-2017.137.svn15878-lp150.5.3.1 texlive-lsc-doc-2017.137.svn15878-lp150.5.3.1 texlive-lshort-bulgarian-2017.137.svn15878-lp150.5.3.1 texlive-lshort-chinese-2017.137.5.10svn43606-lp150.5.3.1 texlive-lshort-czech-2017.137.4.27svn29803-lp150.5.3.1 texlive-lshort-dutch-2017.137.1.3svn15878-lp150.5.3.1 texlive-lshort-english-2017.137.5.0.5svn37892-lp150.5.3.1 texlive-lshort-estonian-2017.137.5.05svn39323-lp150.5.3.1 texlive-lshort-finnish-2017.137.svn15878-lp150.5.3.1 texlive-lshort-french-2017.137.5.01fr_0svn23332-lp150.5.3.1 texlive-lshort-german-2017.137.3.0bsvn42434-lp150.5.3.1 References: https://bugzilla.suse.com/1077170 https://bugzilla.suse.com/1083212 https://bugzilla.suse.com/1094731

1 0

openSUSE-SU-2018:3527-1: Security update for hostapd
by opensuse-security＠opensuse.org 26 Oct '18

26 Oct '18

openSUSE Security Update: Security update for hostapd ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:3527-1 Rating: low References: #1104205 Cross-References: CVE-2018-14526 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: hostapd was updated to fix following security issue: - CVE-2018-14526: Ignore unauthenticated encrypted EAPOL-Key data (bsc#1104205) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1293=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1293=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2018-1293=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): hostapd-2.6-11.1 hostapd-debuginfo-2.6-11.1 hostapd-debugsource-2.6-11.1 - openSUSE Leap 15.0 (x86_64): hostapd-2.6-lp150.2.3.2 hostapd-debuginfo-2.6-lp150.2.3.2 hostapd-debugsource-2.6-lp150.2.3.2 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): hostapd-2.6-bp150.3.3.1 References: https://www.suse.com/security/cve/CVE-2018-14526.html https://bugzilla.suse.com/1104205

1 0

openSUSE-RU-2018:3526-1: moderate: Recommended update for yast2-nfs-client
by maintenance＠opensuse.org 26 Oct '18

26 Oct '18

openSUSE Recommended Update: Recommended update for yast2-nfs-client ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3526-1 Rating: moderate References: #1105674 #1110093 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for yast2-nfs-client fixes the following issues: - The YaST2 NFS Client module may have crashed (bsc#1105674, bsc#1110093) - Added additional searchkeys to desktop file (fate#321043) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1306=1 Package List: - openSUSE Leap 15.0 (noarch): yast2-nfs-client-4.0.8-lp150.2.6.1 References: https://bugzilla.suse.com/1105674 https://bugzilla.suse.com/1110093

1 0

openSUSE-RU-2018:3525-1: moderate: Recommended update for libzypp
by maintenance＠opensuse.org 26 Oct '18

26 Oct '18

openSUSE Recommended Update: Recommended update for libzypp ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3525-1 Rating: moderate References: #1099982 #1109877 #408814 #556664 #939392 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: This update for libzypp fixes the following issues: - Add filesize check for downloads with known size (bsc#408814) - Fix conversion of string and glob to regex when compiling queries (bsc#1099982, bsc#939392, bsc#556664) - Fix blocking wait for finished child process (bsc#1109877) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1304=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libzypp-16.19.0-30.1 libzypp-debuginfo-16.19.0-30.1 libzypp-debugsource-16.19.0-30.1 libzypp-devel-16.19.0-30.1 libzypp-devel-doc-16.19.0-30.1 References: https://bugzilla.suse.com/1099982 https://bugzilla.suse.com/1109877 https://bugzilla.suse.com/408814 https://bugzilla.suse.com/556664 https://bugzilla.suse.com/939392

1 0

openSUSE-SU-2018:3524-1: moderate: Security update for ImageMagick
by opensuse-security＠opensuse.org 26 Oct '18

26 Oct '18

openSUSE Security Update: Security update for ImageMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:3524-1 Rating: moderate References: #1107609 #1112399 Cross-References: CVE-2017-14997 CVE-2018-16644 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for ImageMagick fixes the following issues: - CVE-2017-14997: GraphicsMagick allowed remote attackers to cause a denial of service (excessive memory allocation) because of an integer underflow in ReadPICTImage in coders/pict.c. [bsc#1112399] - CVE-2018-16644: An regression in the security fix for the pict coder was fixed (bsc#1107609) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1312=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): ImageMagick-6.8.8.1-76.1 ImageMagick-debuginfo-6.8.8.1-76.1 ImageMagick-debugsource-6.8.8.1-76.1 ImageMagick-devel-6.8.8.1-76.1 ImageMagick-extra-6.8.8.1-76.1 ImageMagick-extra-debuginfo-6.8.8.1-76.1 libMagick++-6_Q16-3-6.8.8.1-76.1 libMagick++-6_Q16-3-debuginfo-6.8.8.1-76.1 libMagick++-devel-6.8.8.1-76.1 libMagickCore-6_Q16-1-6.8.8.1-76.1 libMagickCore-6_Q16-1-debuginfo-6.8.8.1-76.1 libMagickWand-6_Q16-1-6.8.8.1-76.1 libMagickWand-6_Q16-1-debuginfo-6.8.8.1-76.1 perl-PerlMagick-6.8.8.1-76.1 perl-PerlMagick-debuginfo-6.8.8.1-76.1 - openSUSE Leap 42.3 (x86_64): ImageMagick-devel-32bit-6.8.8.1-76.1 libMagick++-6_Q16-3-32bit-6.8.8.1-76.1 libMagick++-6_Q16-3-debuginfo-32bit-6.8.8.1-76.1 libMagick++-devel-32bit-6.8.8.1-76.1 libMagickCore-6_Q16-1-32bit-6.8.8.1-76.1 libMagickCore-6_Q16-1-debuginfo-32bit-6.8.8.1-76.1 libMagickWand-6_Q16-1-32bit-6.8.8.1-76.1 libMagickWand-6_Q16-1-debuginfo-32bit-6.8.8.1-76.1 - openSUSE Leap 42.3 (noarch): ImageMagick-doc-6.8.8.1-76.1 References: https://www.suse.com/security/cve/CVE-2017-14997.html https://www.suse.com/security/cve/CVE-2018-16644.html https://bugzilla.suse.com/1107609 https://bugzilla.suse.com/1112399

1 0

openSUSE-RU-2018:3523-1: moderate: Recommended update for yast2-packager
by maintenance＠opensuse.org 26 Oct '18

26 Oct '18

openSUSE Recommended Update: Recommended update for yast2-packager ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3523-1 Rating: moderate References: #1073696 #926841 #991090 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for yast2-packager provides the following fixes: - Do not display a false "not enough free space" warning popup if the free space is bigger than 8EiB (2^63). (bsc#991090) - Do not display the "not enough free space" warning for partitions where nothing is going to be installed. (bsc#926841) - Check the parent directory if the target directory does not exist. (bsc#1073696) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1300=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): yast2-packager-3.2.26.1-9.1 References: https://bugzilla.suse.com/1073696 https://bugzilla.suse.com/926841 https://bugzilla.suse.com/991090

1 0

openSUSE-RU-2018:3522-1: moderate: Recommended update for libyui-ncurses-pkg
by maintenance＠opensuse.org 26 Oct '18

26 Oct '18

openSUSE Recommended Update: Recommended update for libyui-ncurses-pkg ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3522-1 Rating: moderate References: #991090 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libyui-ncurses-pkg provides the following fixes: - Do not display "out of disk space" error at start when such a large disk (bigger than 8EiB) is present in the system. (bsc#991090) - Fix displaying negative disk sizes in the disk usage dialog. (bsc#991090) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1308=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libyui-ncurses-pkg-debugsource-2.48.4.1-5.3.1 libyui-ncurses-pkg-devel-2.48.4.1-5.3.1 libyui-ncurses-pkg7-2.48.4.1-5.3.1 libyui-ncurses-pkg7-debuginfo-2.48.4.1-5.3.1 - openSUSE Leap 42.3 (noarch): libyui-ncurses-pkg-doc-2.48.4.1-5.3.1 References: https://bugzilla.suse.com/991090

1 0

openSUSE-RU-2018:3521-1: moderate: Recommended update for yast2-bootloader and rubygem-cfa_grub2
by maintenance＠opensuse.org 26 Oct '18

26 Oct '18

openSUSE Recommended Update: Recommended update for yast2-bootloader and rubygem-cfa_grub2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3521-1 Rating: moderate References: #1053559 #1089829 #1094031 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update addresses some bugs for yast2-bootloader and rubygem-cfa_grub2: yast2-bootloader: - Fixed crash while reading grub settings from installed system (bsc#1094031) - Fix an internal error when GRUB_TERMINAL contains multiple values (bsc#1053559) - Added additional searchkeys to desktop file (fate#321043) - Does no longer crash when required package is not installed (bsc#1089829) rubygem-cfa_grub2: - cfa_grub2 can now handle multiple values for GRUB_TERMINAL. This is required by yast2-bootloader to work properly (bsc#1053559) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1301=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): ruby2.5-rubygem-cfa_grub2-1.0.1-lp150.2.3.1 ruby2.5-rubygem-cfa_grub2-doc-1.0.1-lp150.2.3.1 yast2-bootloader-4.0.39-lp150.2.8.1 References: https://bugzilla.suse.com/1053559 https://bugzilla.suse.com/1089829 https://bugzilla.suse.com/1094031

1 0