December 2018 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2018:4041-1: Security update for rubygem-activejob-5_1
by opensuse-security＠opensuse.org 07 Dec '18

07 Dec '18

openSUSE Security Update: Security update for rubygem-activejob-5_1 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4041-1 Rating: low References: #1117632 Cross-References: CVE-2018-16476 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for rubygem-activejob-5_1 fixes the following issues: Security issue fixed: - CVE-2018-16476: Fixed broken access control vulnerability (bsc#1117632). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1502=1 Package List: - openSUSE Leap 15.0 (x86_64): ruby2.5-rubygem-activejob-5_1-5.1.4-lp150.2.3.1 ruby2.5-rubygem-activejob-doc-5_1-5.1.4-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-16476.html https://bugzilla.suse.com/1117632

1 0

openSUSE-RU-2018:4040-1: Recommended update for Mesa
by maintenance＠opensuse.org 07 Dec '18

07 Dec '18

openSUSE Recommended Update: Recommended update for Mesa ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4040-1 Rating: low References: #1113211 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for Mesa fixes the following issues: - Disallow rgb10 configs for chromium with radeonsi to prevent broken colors in video. (bsc#1113211) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1501=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): Mesa-18.0.2-lp150.18.3.1 Mesa-debugsource-18.0.2-lp150.18.3.1 Mesa-devel-18.0.2-lp150.18.3.1 Mesa-dri-18.0.2-lp150.18.3.1 Mesa-dri-debuginfo-18.0.2-lp150.18.3.1 Mesa-dri-devel-18.0.2-lp150.18.3.1 Mesa-dri-nouveau-18.0.2-lp150.18.3.1 Mesa-dri-nouveau-debuginfo-18.0.2-lp150.18.3.1 Mesa-drivers-debugsource-18.0.2-lp150.18.3.1 Mesa-gallium-18.0.2-lp150.18.3.1 Mesa-gallium-debuginfo-18.0.2-lp150.18.3.1 Mesa-libEGL-devel-18.0.2-lp150.18.3.1 Mesa-libEGL1-18.0.2-lp150.18.3.1 Mesa-libEGL1-debuginfo-18.0.2-lp150.18.3.1 Mesa-libGL-devel-18.0.2-lp150.18.3.1 Mesa-libGL1-18.0.2-lp150.18.3.1 Mesa-libGL1-debuginfo-18.0.2-lp150.18.3.1 Mesa-libGLESv1_CM-devel-18.0.2-lp150.18.3.1 Mesa-libGLESv1_CM1-18.0.2-lp150.18.3.1 Mesa-libGLESv2-2-18.0.2-lp150.18.3.1 Mesa-libGLESv2-devel-18.0.2-lp150.18.3.1 Mesa-libGLESv3-devel-18.0.2-lp150.18.3.1 Mesa-libOpenCL-18.0.2-lp150.18.3.1 Mesa-libOpenCL-debuginfo-18.0.2-lp150.18.3.1 Mesa-libVulkan-devel-18.0.2-lp150.18.3.1 Mesa-libd3d-18.0.2-lp150.18.3.1 Mesa-libd3d-debuginfo-18.0.2-lp150.18.3.1 Mesa-libd3d-devel-18.0.2-lp150.18.3.1 Mesa-libglapi-devel-18.0.2-lp150.18.3.1 Mesa-libglapi0-18.0.2-lp150.18.3.1 Mesa-libglapi0-debuginfo-18.0.2-lp150.18.3.1 Mesa-libva-18.0.2-lp150.18.3.1 Mesa-libva-debuginfo-18.0.2-lp150.18.3.1 libOSMesa-devel-18.0.2-lp150.18.3.1 libOSMesa8-18.0.2-lp150.18.3.1 libOSMesa8-debuginfo-18.0.2-lp150.18.3.1 libXvMC_nouveau-18.0.2-lp150.18.3.1 libXvMC_nouveau-debuginfo-18.0.2-lp150.18.3.1 libXvMC_r600-18.0.2-lp150.18.3.1 libXvMC_r600-debuginfo-18.0.2-lp150.18.3.1 libgbm-devel-18.0.2-lp150.18.3.1 libgbm1-18.0.2-lp150.18.3.1 libgbm1-debuginfo-18.0.2-lp150.18.3.1 libvdpau_nouveau-18.0.2-lp150.18.3.1 libvdpau_nouveau-debuginfo-18.0.2-lp150.18.3.1 libvdpau_r300-18.0.2-lp150.18.3.1 libvdpau_r300-debuginfo-18.0.2-lp150.18.3.1 libvdpau_r600-18.0.2-lp150.18.3.1 libvdpau_r600-debuginfo-18.0.2-lp150.18.3.1 libvdpau_radeonsi-18.0.2-lp150.18.3.1 libvdpau_radeonsi-debuginfo-18.0.2-lp150.18.3.1 libvulkan_intel-18.0.2-lp150.18.3.1 libvulkan_intel-debuginfo-18.0.2-lp150.18.3.1 libvulkan_radeon-18.0.2-lp150.18.3.1 libvulkan_radeon-debuginfo-18.0.2-lp150.18.3.1 libwayland-egl-devel-18.0.2-lp150.18.3.1 libwayland-egl1-18.0.2-lp150.18.3.1 libwayland-egl1-debuginfo-18.0.2-lp150.18.3.1 libxatracker-devel-1.0.0-lp150.18.3.1 libxatracker2-1.0.0-lp150.18.3.1 libxatracker2-debuginfo-1.0.0-lp150.18.3.1 - openSUSE Leap 15.0 (x86_64): Mesa-32bit-18.0.2-lp150.18.3.1 Mesa-dri-32bit-18.0.2-lp150.18.3.1 Mesa-dri-32bit-debuginfo-18.0.2-lp150.18.3.1 Mesa-dri-nouveau-32bit-18.0.2-lp150.18.3.1 Mesa-dri-nouveau-32bit-debuginfo-18.0.2-lp150.18.3.1 Mesa-gallium-32bit-18.0.2-lp150.18.3.1 Mesa-gallium-32bit-debuginfo-18.0.2-lp150.18.3.1 Mesa-libEGL1-32bit-18.0.2-lp150.18.3.1 Mesa-libEGL1-32bit-debuginfo-18.0.2-lp150.18.3.1 Mesa-libGL1-32bit-18.0.2-lp150.18.3.1 Mesa-libGL1-32bit-debuginfo-18.0.2-lp150.18.3.1 Mesa-libd3d-32bit-18.0.2-lp150.18.3.1 Mesa-libd3d-32bit-debuginfo-18.0.2-lp150.18.3.1 Mesa-libd3d-devel-32bit-18.0.2-lp150.18.3.1 Mesa-libglapi-devel-32bit-18.0.2-lp150.18.3.1 Mesa-libglapi0-32bit-18.0.2-lp150.18.3.1 Mesa-libglapi0-32bit-debuginfo-18.0.2-lp150.18.3.1 libOSMesa-devel-32bit-18.0.2-lp150.18.3.1 libOSMesa8-32bit-18.0.2-lp150.18.3.1 libOSMesa8-32bit-debuginfo-18.0.2-lp150.18.3.1 libXvMC_nouveau-32bit-18.0.2-lp150.18.3.1 libXvMC_nouveau-32bit-debuginfo-18.0.2-lp150.18.3.1 libXvMC_r600-32bit-18.0.2-lp150.18.3.1 libXvMC_r600-32bit-debuginfo-18.0.2-lp150.18.3.1 libgbm-devel-32bit-18.0.2-lp150.18.3.1 libgbm1-32bit-18.0.2-lp150.18.3.1 libgbm1-32bit-debuginfo-18.0.2-lp150.18.3.1 libvdpau_nouveau-32bit-18.0.2-lp150.18.3.1 libvdpau_nouveau-32bit-debuginfo-18.0.2-lp150.18.3.1 libvdpau_r300-32bit-18.0.2-lp150.18.3.1 libvdpau_r300-32bit-debuginfo-18.0.2-lp150.18.3.1 libvdpau_r600-32bit-18.0.2-lp150.18.3.1 libvdpau_r600-32bit-debuginfo-18.0.2-lp150.18.3.1 libvdpau_radeonsi-32bit-18.0.2-lp150.18.3.1 libvdpau_radeonsi-32bit-debuginfo-18.0.2-lp150.18.3.1 libvulkan_intel-32bit-18.0.2-lp150.18.3.1 libvulkan_intel-32bit-debuginfo-18.0.2-lp150.18.3.1 libvulkan_radeon-32bit-18.0.2-lp150.18.3.1 libvulkan_radeon-32bit-debuginfo-18.0.2-lp150.18.3.1 libwayland-egl-devel-32bit-18.0.2-lp150.18.3.1 libwayland-egl1-32bit-18.0.2-lp150.18.3.1 libwayland-egl1-32bit-debuginfo-18.0.2-lp150.18.3.1 References: https://bugzilla.suse.com/1113211

1 0

openSUSE-RU-2018:4039-1: moderate: Recommended update for dracut
by maintenance＠opensuse.org 07 Dec '18

07 Dec '18

openSUSE Recommended Update: Recommended update for dracut ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4039-1 Rating: moderate References: #1055834 #1090884 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for dracut fixes the following issues: - 98dracut-systemd: Start systemd-vconsole-setup before dracut-cmdline-ask (bsc#1055834) - Mark the DASD udev rules host-only and handle backslashes in paths for hostonly files (bsc#1090884) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1497=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): dracut-044.1-lp150.14.9.1 dracut-debuginfo-044.1-lp150.14.9.1 dracut-debugsource-044.1-lp150.14.9.1 dracut-fips-044.1-lp150.14.9.1 dracut-ima-044.1-lp150.14.9.1 dracut-tools-044.1-lp150.14.9.1 References: https://bugzilla.suse.com/1055834 https://bugzilla.suse.com/1090884

1 0

openSUSE-SU-2018:4038-1: moderate: Recommended update for php5
by opensuse-security＠opensuse.org 07 Dec '18

07 Dec '18

openSUSE Security Update: Recommended update for php5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4038-1 Rating: moderate References: #1117107 Cross-References: CVE-2018-19518 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for php5 fixes the following issues: Security issue fixed: - CVE-2018-19518: Fixed imap_open script injection flaw (bsc#1117107). This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1506=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): apache2-mod_php5-5.5.14-109.1 apache2-mod_php5-debuginfo-5.5.14-109.1 php5-5.5.14-109.1 php5-bcmath-5.5.14-109.1 php5-bcmath-debuginfo-5.5.14-109.1 php5-bz2-5.5.14-109.1 php5-bz2-debuginfo-5.5.14-109.1 php5-calendar-5.5.14-109.1 php5-calendar-debuginfo-5.5.14-109.1 php5-ctype-5.5.14-109.1 php5-ctype-debuginfo-5.5.14-109.1 php5-curl-5.5.14-109.1 php5-curl-debuginfo-5.5.14-109.1 php5-dba-5.5.14-109.1 php5-dba-debuginfo-5.5.14-109.1 php5-debuginfo-5.5.14-109.1 php5-debugsource-5.5.14-109.1 php5-devel-5.5.14-109.1 php5-dom-5.5.14-109.1 php5-dom-debuginfo-5.5.14-109.1 php5-enchant-5.5.14-109.1 php5-enchant-debuginfo-5.5.14-109.1 php5-exif-5.5.14-109.1 php5-exif-debuginfo-5.5.14-109.1 php5-fastcgi-5.5.14-109.1 php5-fastcgi-debuginfo-5.5.14-109.1 php5-fileinfo-5.5.14-109.1 php5-fileinfo-debuginfo-5.5.14-109.1 php5-firebird-5.5.14-109.1 php5-firebird-debuginfo-5.5.14-109.1 php5-fpm-5.5.14-109.1 php5-fpm-debuginfo-5.5.14-109.1 php5-ftp-5.5.14-109.1 php5-ftp-debuginfo-5.5.14-109.1 php5-gd-5.5.14-109.1 php5-gd-debuginfo-5.5.14-109.1 php5-gettext-5.5.14-109.1 php5-gettext-debuginfo-5.5.14-109.1 php5-gmp-5.5.14-109.1 php5-gmp-debuginfo-5.5.14-109.1 php5-iconv-5.5.14-109.1 php5-iconv-debuginfo-5.5.14-109.1 php5-imap-5.5.14-109.1 php5-imap-debuginfo-5.5.14-109.1 php5-intl-5.5.14-109.1 php5-intl-debuginfo-5.5.14-109.1 php5-json-5.5.14-109.1 php5-json-debuginfo-5.5.14-109.1 php5-ldap-5.5.14-109.1 php5-ldap-debuginfo-5.5.14-109.1 php5-mbstring-5.5.14-109.1 php5-mbstring-debuginfo-5.5.14-109.1 php5-mcrypt-5.5.14-109.1 php5-mcrypt-debuginfo-5.5.14-109.1 php5-mssql-5.5.14-109.1 php5-mssql-debuginfo-5.5.14-109.1 php5-mysql-5.5.14-109.1 php5-mysql-debuginfo-5.5.14-109.1 php5-odbc-5.5.14-109.1 php5-odbc-debuginfo-5.5.14-109.1 php5-opcache-5.5.14-109.1 php5-opcache-debuginfo-5.5.14-109.1 php5-openssl-5.5.14-109.1 php5-openssl-debuginfo-5.5.14-109.1 php5-pcntl-5.5.14-109.1 php5-pcntl-debuginfo-5.5.14-109.1 php5-pdo-5.5.14-109.1 php5-pdo-debuginfo-5.5.14-109.1 php5-pgsql-5.5.14-109.1 php5-pgsql-debuginfo-5.5.14-109.1 php5-phar-5.5.14-109.1 php5-phar-debuginfo-5.5.14-109.1 php5-posix-5.5.14-109.1 php5-posix-debuginfo-5.5.14-109.1 php5-pspell-5.5.14-109.1 php5-pspell-debuginfo-5.5.14-109.1 php5-readline-5.5.14-109.1 php5-readline-debuginfo-5.5.14-109.1 php5-shmop-5.5.14-109.1 php5-shmop-debuginfo-5.5.14-109.1 php5-snmp-5.5.14-109.1 php5-snmp-debuginfo-5.5.14-109.1 php5-soap-5.5.14-109.1 php5-soap-debuginfo-5.5.14-109.1 php5-sockets-5.5.14-109.1 php5-sockets-debuginfo-5.5.14-109.1 php5-sqlite-5.5.14-109.1 php5-sqlite-debuginfo-5.5.14-109.1 php5-suhosin-5.5.14-109.1 php5-suhosin-debuginfo-5.5.14-109.1 php5-sysvmsg-5.5.14-109.1 php5-sysvmsg-debuginfo-5.5.14-109.1 php5-sysvsem-5.5.14-109.1 php5-sysvsem-debuginfo-5.5.14-109.1 php5-sysvshm-5.5.14-109.1 php5-sysvshm-debuginfo-5.5.14-109.1 php5-tidy-5.5.14-109.1 php5-tidy-debuginfo-5.5.14-109.1 php5-tokenizer-5.5.14-109.1 php5-tokenizer-debuginfo-5.5.14-109.1 php5-wddx-5.5.14-109.1 php5-wddx-debuginfo-5.5.14-109.1 php5-xmlreader-5.5.14-109.1 php5-xmlreader-debuginfo-5.5.14-109.1 php5-xmlrpc-5.5.14-109.1 php5-xmlrpc-debuginfo-5.5.14-109.1 php5-xmlwriter-5.5.14-109.1 php5-xmlwriter-debuginfo-5.5.14-109.1 php5-xsl-5.5.14-109.1 php5-xsl-debuginfo-5.5.14-109.1 php5-zip-5.5.14-109.1 php5-zip-debuginfo-5.5.14-109.1 php5-zlib-5.5.14-109.1 php5-zlib-debuginfo-5.5.14-109.1 - openSUSE Leap 42.3 (noarch): php5-pear-5.5.14-109.1 References: https://www.suse.com/security/cve/CVE-2018-19518.html https://bugzilla.suse.com/1117107

1 0

openSUSE-RU-2018:4037-1: moderate: Recommended update for crmsh
by maintenance＠opensuse.org 07 Dec '18

07 Dec '18

openSUSE Recommended Update: Recommended update for crmsh ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4037-1 Rating: moderate References: #1052088 #1106946 #1109974 #1109975 #1110463 #1111579 #1112593 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has 7 recommended fixes can now be installed. Description: This update for crmsh fixes the following issues: - cibconfig: Normalize - to _ in param names (bsc#1111579) - ra: Handle obsoletes attribute (bsc#1111579) - ui_cluster: restart cluster is added (bsc#1052088) - Auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593) - bootstrap: Skip netmask check on GCP (bsc#1106946) - utils: Detect local IP on GCP (bsc#1106946) - bootstrap: Correctly check rrp_mode flag (bsc#1110463) - bootstrap: Pick first match for multiple routes (bsc#1106946) - utils: Use cloud metadata service to discover IP (bsc#1106946) - bootstrap: change default ip address way for both mcast and unicat(bsc#1109975,bsc#1109974) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1495=1 Package List: - openSUSE Leap 15.0 (noarch): crmsh-4.0.0+git.1542103310.dd114188-lp150.2.9.1 crmsh-scripts-4.0.0+git.1542103310.dd114188-lp150.2.9.1 crmsh-test-4.0.0+git.1542103310.dd114188-lp150.2.9.1 References: https://bugzilla.suse.com/1052088 https://bugzilla.suse.com/1106946 https://bugzilla.suse.com/1109974 https://bugzilla.suse.com/1109975 https://bugzilla.suse.com/1110463 https://bugzilla.suse.com/1111579 https://bugzilla.suse.com/1112593

1 0

openSUSE-RU-2018:4036-1: moderate: Recommended update for suse-build-key
by maintenance＠opensuse.org 07 Dec '18

07 Dec '18

openSUSE Recommended Update: Recommended update for suse-build-key ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4036-1 Rating: moderate References: #1044232 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for suse-build-key fixes the following issues: - Install the PTF key also to /usr/lib/rpm/gnupg/keys/ so it can exists also on systems where documentation is not installed. (bsc#1044232) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1496=1 Package List: - openSUSE Leap 42.3 (noarch): suse-build-key-12.0-14.6.1 References: https://bugzilla.suse.com/1044232

1 0

openSUSE-RU-2018:4035-1: moderate: Recommended update for permissions
by maintenance＠opensuse.org 07 Dec '18

07 Dec '18

openSUSE Recommended Update: Recommended update for permissions ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4035-1 Rating: moderate References: #1028304 #1047247 #1050467 #1097665 #1111251 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: This update for permissions fixes the following issues: - Allow setuid root for start-suid tool of singularity (group only) bsc#1028304 - Allow setuid root for authbind binary (bsc#1111251) - A incorrect error message was adjusted (bsc#1047247 bsc#1097665) - Make btmp root:utmp (bsc#1050467) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1494=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): permissions-2015.09.28.1626-19.1 permissions-debuginfo-2015.09.28.1626-19.1 permissions-debugsource-2015.09.28.1626-19.1 References: https://bugzilla.suse.com/1028304 https://bugzilla.suse.com/1047247 https://bugzilla.suse.com/1050467 https://bugzilla.suse.com/1097665 https://bugzilla.suse.com/1111251

1 0

openSUSE-SU-2018:4034-1: important: Security update for ncurses
by opensuse-security＠opensuse.org 07 Dec '18

07 Dec '18

openSUSE Security Update: Security update for ncurses ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4034-1 Rating: important References: #1115929 Cross-References: CVE-2018-19211 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for ncurses fixes the following issue: Security issue fixed: - CVE-2018-19211: Fixed denial of service issue that was triggered by a NULL pointer dereference at function _nc_parse_entry (bsc#1115929). This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1509=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libncurses5-5.9-66.1 libncurses5-debuginfo-5.9-66.1 libncurses6-5.9-66.1 libncurses6-debuginfo-5.9-66.1 ncurses-debugsource-5.9-66.1 ncurses-devel-5.9-66.1 ncurses-devel-debuginfo-5.9-66.1 ncurses-utils-5.9-66.1 ncurses-utils-debuginfo-5.9-66.1 tack-5.9-66.1 tack-debuginfo-5.9-66.1 terminfo-5.9-66.1 terminfo-base-5.9-66.1 - openSUSE Leap 42.3 (x86_64): libncurses5-32bit-5.9-66.1 libncurses5-debuginfo-32bit-5.9-66.1 libncurses6-32bit-5.9-66.1 libncurses6-debuginfo-32bit-5.9-66.1 ncurses-devel-32bit-5.9-66.1 ncurses-devel-debuginfo-32bit-5.9-66.1 References: https://www.suse.com/security/cve/CVE-2018-19211.html https://bugzilla.suse.com/1115929

1 0

openSUSE-RU-2018:4033-1: important: Recommended update for multipath-tools
by maintenance＠opensuse.org 07 Dec '18

07 Dec '18

openSUSE Recommended Update: Recommended update for multipath-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4033-1 Rating: important References: #1075539 #1093220 #1098177 #1098458 #1099007 #1099008 #1099026 #1099036 #1099484 #1108728 #1108875 #1110352 #1110354 #1110355 #1110418 #1110586 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has 16 recommended fixes can now be installed. Description: This update for multipath-tools provides the following fixes: - multipath-tools/tests: Add tests for get_unaligned_beXX. (bsc#1099036) - multipath: Print sysfs state in fast list mode. (bsc#1110354) - multipathd: Use nanosleep for strict timing. (bsc#1110418) - multipathd: Try SCSI persistent reservations for SCSI only. (bsc#1108875) - multipathd: Release uxsocket and resource when cancel thread. (bsc#1110355) - multipathd: Register threads that use rcu calls. (bsc#1110418) - multipath: Don't start multipathd unnecessarily. (bsc#1098177) - multipathd: Minor upstream bug fixes. (bsc#1110418) - multipathd: Function return value tweaks. (bsc#1110418) - multipathd: Fix reservation_key check. (bsc#1099008) - multipathd: Fix memory leak on error in configure. (bsc#1110418) - multipathd: Decrease the log level of uevent messages. (bsc#1110586) - libmultipath: Set dm_conf_verbosity. (bsc#1110418) - libmultipath: Print correct default for delay_*_checks. (bsc#1110418, bsc#1099026) - libmultipath/get_uid: Don't quit prematurely without udev. (bsc#1108728) - libmultipath: get_uid: Check VPD pages for SCSI only. (bsc#1108728) - libmultipath: Fix sgio_get_vpd(). (bsc#1099484) - libmultipath: Fix null dereference int alloc_path_group. (bsc#1110418) - libmultipath: Fix memory leak in process_config_dir(). (bsc#1110352) - libmultipath: Fix log_pthread processing. (bsc#1110418) - libmultipath: Fix length issues in get_vpd_sgio. (bsc#1110418) - libmultipath: Fix gcc 8.1 "truncated output" warnings. (bsc#1099007) - libmultipath: Fix basenamecpy. (bsc#1110418) - libmultipath: Don't use malformed uevents. (bsc#1110418) - libmultipath: Avoid error messages from RDAC check. (bsc#1075539) - libmultipath: Allow sysfs_pathinfo to return SKIPPED. (bsc#1098458) - libmultipath: Add (get|put)_unaligned_be64. (bsc#1099036) - libmultipath: pathinfo: Skip hidden devices. (bsc#1110586) - libmpathpersist: Use O_RDONLY file descriptors. (bsc#1093220) - libmpathpersist: Remove duplicate test in readfullstatus. (bsc#1099007) - libmpathpersist: Fix typo in mpath_format_readfullstatus. (bsc#1099007) - libmpathpersist: Fix stack overflow in mpath_format_readfullstatus(). (bsc#1099007) - libmpathpersist: Fix byte swapping for big endian systems. (bsc#1099036) - libmpathpersist: Decrease log level of various messages. (bsc#1099007) - libmpathpersist: Fix an off-by-one error in PRIN length check. (bsc#1099007) - Introduce the ibmultipath/unaligned.h header file. (bsc#1099036) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1498=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): kpartx-0.7.3+102+suse.be95116-lp150.2.3.1 kpartx-debuginfo-0.7.3+102+suse.be95116-lp150.2.3.1 libdmmp-devel-0.7.3+102+suse.be95116-lp150.2.3.1 libdmmp0_1_0-0.7.3+102+suse.be95116-lp150.2.3.1 libdmmp0_1_0-debuginfo-0.7.3+102+suse.be95116-lp150.2.3.1 multipath-tools-0.7.3+102+suse.be95116-lp150.2.3.1 multipath-tools-debuginfo-0.7.3+102+suse.be95116-lp150.2.3.1 multipath-tools-debugsource-0.7.3+102+suse.be95116-lp150.2.3.1 multipath-tools-devel-0.7.3+102+suse.be95116-lp150.2.3.1 - openSUSE Leap 15.0 (x86_64): multipath-tools-rbd-0.7.3+102+suse.be95116-lp150.2.3.1 multipath-tools-rbd-debuginfo-0.7.3+102+suse.be95116-lp150.2.3.1 References: https://bugzilla.suse.com/1075539 https://bugzilla.suse.com/1093220 https://bugzilla.suse.com/1098177 https://bugzilla.suse.com/1098458 https://bugzilla.suse.com/1099007 https://bugzilla.suse.com/1099008 https://bugzilla.suse.com/1099026 https://bugzilla.suse.com/1099036 https://bugzilla.suse.com/1099484 https://bugzilla.suse.com/1108728 https://bugzilla.suse.com/1108875 https://bugzilla.suse.com/1110352 https://bugzilla.suse.com/1110354 https://bugzilla.suse.com/1110355 https://bugzilla.suse.com/1110418 https://bugzilla.suse.com/1110586

1 0

openSUSE-SU-2018:4032-1: important: Security update for apache2-mod_jk
by opensuse-security＠opensuse.org 07 Dec '18

07 Dec '18

openSUSE Security Update: Security update for apache2-mod_jk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4032-1 Rating: important References: #1114612 Cross-References: CVE-2018-11759 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for apache2-mod_jk fixes the following issue: Security issue fixed: - CVE-2018-11759: Fixed connector path traversal due to mishandled HTTP requests in httpd (bsc#1114612). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1510=1 Package List: - openSUSE Leap 15.0 (x86_64): apache2-mod_jk-1.2.43-lp150.2.3.1 apache2-mod_jk-debuginfo-1.2.43-lp150.2.3.1 apache2-mod_jk-debugsource-1.2.43-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-11759.html https://bugzilla.suse.com/1114612

1 0