December 2018 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2018:4108-1: moderate: Recommended update for yast2-installation
by maintenance＠opensuse.org 13 Dec '18

13 Dec '18

openSUSE Recommended Update: Recommended update for yast2-installation ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4108-1 Rating: moderate References: #1098571 #1105758 #1112769 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for yast2-installation provides the following fixes: - Writing security settings in first AY installation stage, So other modules can rely on these settings now. (bsc#1112769) - Updated document for add_on_products.xml: Added tag "confirm_license" to handle Add-On-products licenses which will be added while installation. (bsc#1105758) - Dialog complex_welcome: Translate the help button if the language has been changed. (bsc#1098571) - Remember the selected role. (fate#325834) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1533=1 Package List: - openSUSE Leap 15.0 (noarch): yast2-installation-4.0.74-lp150.2.15.1 References: https://bugzilla.suse.com/1098571 https://bugzilla.suse.com/1105758 https://bugzilla.suse.com/1112769

1 0

openSUSE-RU-2018:4107-1: moderate: Recommended update for blog
by maintenance＠opensuse.org 13 Dec '18

13 Dec '18

openSUSE Recommended Update: Recommended update for blog ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4107-1 Rating: moderate References: #1071568 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for blog fixes the following issues: - Hardening of the console list generation (bsc#1071568) - Changed description of blog-plymouth in same manner as used by the release notes This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1535=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): blog-2.19-3.3.1 blog-debuginfo-2.19-3.3.1 blog-debugsource-2.19-3.3.1 blog-devel-2.19-3.3.1 blog-plymouth-2.19-3.3.1 References: https://bugzilla.suse.com/1071568

1 0

openSUSE-RU-2018:4106-1: important: Recommended update for exfat-utils, fuse-exfat
by maintenance＠opensuse.org 13 Dec '18

13 Dec '18

openSUSE Recommended Update: Recommended update for exfat-utils, fuse-exfat ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4106-1 Rating: important References: #1118871 Affected Products: openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for exfat-utils, fuse-exfat fixes the following issues: - exfat file systems generated on Linux may have been corrupted when opening them on Windows (boo#1118871) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1538=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2018-1538=1 Package List: - openSUSE Leap 15.0 (x86_64): exfat-utils-1.2.8-lp150.2.3.1 exfat-utils-debuginfo-1.2.8-lp150.2.3.1 exfat-utils-debugsource-1.2.8-lp150.2.3.1 fuse-exfat-1.2.8-lp150.2.3.1 fuse-exfat-debuginfo-1.2.8-lp150.2.3.1 fuse-exfat-debugsource-1.2.8-lp150.2.3.1 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): exfat-utils-1.2.8-bp150.3.3.1 exfat-utils-debuginfo-1.2.8-bp150.3.3.1 exfat-utils-debugsource-1.2.8-bp150.3.3.1 fuse-exfat-1.2.8-bp150.3.3.1 fuse-exfat-debuginfo-1.2.8-bp150.3.3.1 fuse-exfat-debugsource-1.2.8-bp150.3.3.1 References: https://bugzilla.suse.com/1118871

1 0

openSUSE-SU-2018:4105-1: important: Security update for cups
by opensuse-security＠opensuse.org 13 Dec '18

13 Dec '18

openSUSE Security Update: Security update for cups ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4105-1 Rating: important References: #1115750 Cross-References: CVE-2018-4700 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for cups fixes the following issues: Security issue fixed: - CVE-2018-4700: Fixed extremely predictable cookie generation that is effectively breaking the CSRF protection of the CUPS web interface (bsc#1115750). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1539=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): cups-2.2.7-lp150.2.6.1 cups-client-2.2.7-lp150.2.6.1 cups-client-debuginfo-2.2.7-lp150.2.6.1 cups-config-2.2.7-lp150.2.6.1 cups-ddk-2.2.7-lp150.2.6.1 cups-ddk-debuginfo-2.2.7-lp150.2.6.1 cups-debuginfo-2.2.7-lp150.2.6.1 cups-debugsource-2.2.7-lp150.2.6.1 cups-devel-2.2.7-lp150.2.6.1 libcups2-2.2.7-lp150.2.6.1 libcups2-debuginfo-2.2.7-lp150.2.6.1 libcupscgi1-2.2.7-lp150.2.6.1 libcupscgi1-debuginfo-2.2.7-lp150.2.6.1 libcupsimage2-2.2.7-lp150.2.6.1 libcupsimage2-debuginfo-2.2.7-lp150.2.6.1 libcupsmime1-2.2.7-lp150.2.6.1 libcupsmime1-debuginfo-2.2.7-lp150.2.6.1 libcupsppdc1-2.2.7-lp150.2.6.1 libcupsppdc1-debuginfo-2.2.7-lp150.2.6.1 - openSUSE Leap 15.0 (x86_64): cups-devel-32bit-2.2.7-lp150.2.6.1 libcups2-32bit-2.2.7-lp150.2.6.1 libcups2-32bit-debuginfo-2.2.7-lp150.2.6.1 libcupscgi1-32bit-2.2.7-lp150.2.6.1 libcupscgi1-32bit-debuginfo-2.2.7-lp150.2.6.1 libcupsimage2-32bit-2.2.7-lp150.2.6.1 libcupsimage2-32bit-debuginfo-2.2.7-lp150.2.6.1 libcupsmime1-32bit-2.2.7-lp150.2.6.1 libcupsmime1-32bit-debuginfo-2.2.7-lp150.2.6.1 libcupsppdc1-32bit-2.2.7-lp150.2.6.1 libcupsppdc1-32bit-debuginfo-2.2.7-lp150.2.6.1 References: https://www.suse.com/security/cve/CVE-2018-4700.html https://bugzilla.suse.com/1115750

1 0

openSUSE-SU-2018:4104-1: moderate: Security update for compat-openssl098
by opensuse-security＠opensuse.org 13 Dec '18

13 Dec '18

openSUSE Security Update: Security update for compat-openssl098 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4104-1 Rating: moderate References: #1104789 #1110018 #1113534 #1113652 Cross-References: CVE-2016-8610 CVE-2018-0734 CVE-2018-5407 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves three vulnerabilities and has one errata is now available. Description: This update for compat-openssl098 fixes the following issues: Security issues fixed: - CVE-2018-0734: Fixed timing vulnerability in DSA signature generation (bsc#1113652). - CVE-2018-5407: Fixed elliptic curve scalar multiplication timing attack defenses (bsc#1113534). - CVE-2016-8610: Adjusted current fix and add missing error string (bsc#1110018). - Fixed the "One and Done" side-channel attack on RSA (bsc#1104789). This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1529=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): compat-openssl098-debugsource-0.9.8j-27.1 libopenssl0_9_8-0.9.8j-27.1 libopenssl0_9_8-debuginfo-0.9.8j-27.1 - openSUSE Leap 42.3 (x86_64): libopenssl0_9_8-32bit-0.9.8j-27.1 libopenssl0_9_8-debuginfo-32bit-0.9.8j-27.1 References: https://www.suse.com/security/cve/CVE-2016-8610.html https://www.suse.com/security/cve/CVE-2018-0734.html https://www.suse.com/security/cve/CVE-2018-5407.html https://bugzilla.suse.com/1104789 https://bugzilla.suse.com/1110018 https://bugzilla.suse.com/1113534 https://bugzilla.suse.com/1113652

1 0

openSUSE-RU-2018:4103-1: moderate: Recommended update for yast2-auth-client
by maintenance＠opensuse.org 13 Dec '18

13 Dec '18

openSUSE Recommended Update: Recommended update for yast2-auth-client ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4103-1 Rating: moderate References: #1024841 #1032733 #1038077 #1038291 #1038720 #1040393 #1043184 #1043211 #1054436 #1056158 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has 10 recommended fixes can now be installed. Description: This update for yast2-auth-client fixes the following issues: - Fix a problem in the kerberos configuration file parser that was causing the removal of manually defined values in the default_ccache_name key (bsc#1054436). - Fix a bug that was causing PAM configuration to not allow local user logins if pam_unix2 is being used. (bsc#1056158) - Add the "auth" module name as an alias to "auth-client". (bsc#1043211, bsc#1043184, bsc#1032733) - Correctly install sss name databases even in the presence of special NSS database directives. (bsc#1024841) - Use lower case when doing Active Directory DNS lookups to fix using LDAP and kerberos. (bsc#1038720) - Restore the compatibility with autoyast XML files exported from SLES 12. (bsc#1040393) - Improve some UI captions to make them more consistent. - Fix a spelling problem in kerberos option name "noaddresses". - Fix some translations by removing the usage of interpolated strings, as this is not yet supported in Ruby gettext. (bsc#1038077) This update was imported from SUSE:SLE-12-SP2:Update. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1526=1 Package List: - openSUSE Leap 42.3 (noarch): yast2-auth-client-3.3.17-7.3.1 References: https://bugzilla.suse.com/1024841 https://bugzilla.suse.com/1032733 https://bugzilla.suse.com/1038077 https://bugzilla.suse.com/1038291 https://bugzilla.suse.com/1038720 https://bugzilla.suse.com/1040393 https://bugzilla.suse.com/1043184 https://bugzilla.suse.com/1043211 https://bugzilla.suse.com/1054436 https://bugzilla.suse.com/1056158

1 0

openSUSE-RU-2018:4102-1: moderate: Recommended update for perl-Bootloader
by maintenance＠opensuse.org 13 Dec '18

13 Dec '18

openSUSE Recommended Update: Recommended update for perl-Bootloader ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4102-1 Rating: moderate References: #1079321 #1108777 #994322 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for perl-Bootloader fixes the following issues: - Create temporary files in /tmp (bsc#1108777) - Work without /etc/default/grub_installdevice (bsc#1079321, bsc#994322) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1537=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): perl-Bootloader-0.923-2.6.1 perl-Bootloader-YAML-0.923-2.6.1 References: https://bugzilla.suse.com/1079321 https://bugzilla.suse.com/1108777 https://bugzilla.suse.com/994322

1 0

openSUSE-RU-2018:4101-1: moderate: Recommended update for susefirewall2-to-firewalld
by maintenance＠opensuse.org 13 Dec '18

13 Dec '18

openSUSE Recommended Update: Recommended update for susefirewall2-to-firewalld ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4101-1 Rating: moderate References: #1115001 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for susefirewall2-to-firewalld fixes the following issues: - Add input and forward zone to the known ones (bsc#1115001) - Stop guessing firewall service from port/proto This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1532=1 Package List: - openSUSE Leap 15.0 (noarch): susefirewall2-to-firewalld-0.0.4-lp150.2.6.1 References: https://bugzilla.suse.com/1115001

1 0

openSUSE-RU-2018:4100-1: moderate: Recommended update for adcli, sssd
by maintenance＠opensuse.org 13 Dec '18

13 Dec '18

openSUSE Recommended Update: Recommended update for adcli, sssd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4100-1 Rating: moderate References: #1109849 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for adcli and sssd provides the following improvement: - Include adcli in the product and make sssd require it for sssd-ad. (fate#326619, bsc#1109849) The adcli enables sssd to do password renewal when using Active Directory. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1531=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libipa_hbac-devel-1.16.1-lp150.2.6.1 libipa_hbac0-1.16.1-lp150.2.6.1 libipa_hbac0-debuginfo-1.16.1-lp150.2.6.1 libnfsidmap-sss-1.16.1-lp150.2.6.1 libnfsidmap-sss-debuginfo-1.16.1-lp150.2.6.1 libsss_certmap-devel-1.16.1-lp150.2.6.1 libsss_certmap0-1.16.1-lp150.2.6.1 libsss_certmap0-debuginfo-1.16.1-lp150.2.6.1 libsss_idmap-devel-1.16.1-lp150.2.6.1 libsss_idmap0-1.16.1-lp150.2.6.1 libsss_idmap0-debuginfo-1.16.1-lp150.2.6.1 libsss_nss_idmap-devel-1.16.1-lp150.2.6.1 libsss_nss_idmap0-1.16.1-lp150.2.6.1 libsss_nss_idmap0-debuginfo-1.16.1-lp150.2.6.1 libsss_simpleifp-devel-1.16.1-lp150.2.6.1 libsss_simpleifp0-1.16.1-lp150.2.6.1 libsss_simpleifp0-debuginfo-1.16.1-lp150.2.6.1 python3-ipa_hbac-1.16.1-lp150.2.6.1 python3-ipa_hbac-debuginfo-1.16.1-lp150.2.6.1 python3-sss-murmur-1.16.1-lp150.2.6.1 python3-sss-murmur-debuginfo-1.16.1-lp150.2.6.1 python3-sss_nss_idmap-1.16.1-lp150.2.6.1 python3-sss_nss_idmap-debuginfo-1.16.1-lp150.2.6.1 python3-sssd-config-1.16.1-lp150.2.6.1 python3-sssd-config-debuginfo-1.16.1-lp150.2.6.1 sssd-1.16.1-lp150.2.6.1 sssd-ad-1.16.1-lp150.2.6.1 sssd-ad-debuginfo-1.16.1-lp150.2.6.1 sssd-dbus-1.16.1-lp150.2.6.1 sssd-dbus-debuginfo-1.16.1-lp150.2.6.1 sssd-debuginfo-1.16.1-lp150.2.6.1 sssd-debugsource-1.16.1-lp150.2.6.1 sssd-ipa-1.16.1-lp150.2.6.1 sssd-ipa-debuginfo-1.16.1-lp150.2.6.1 sssd-krb5-1.16.1-lp150.2.6.1 sssd-krb5-common-1.16.1-lp150.2.6.1 sssd-krb5-common-debuginfo-1.16.1-lp150.2.6.1 sssd-krb5-debuginfo-1.16.1-lp150.2.6.1 sssd-ldap-1.16.1-lp150.2.6.1 sssd-ldap-debuginfo-1.16.1-lp150.2.6.1 sssd-proxy-1.16.1-lp150.2.6.1 sssd-proxy-debuginfo-1.16.1-lp150.2.6.1 sssd-tools-1.16.1-lp150.2.6.1 sssd-tools-debuginfo-1.16.1-lp150.2.6.1 sssd-wbclient-1.16.1-lp150.2.6.1 sssd-wbclient-debuginfo-1.16.1-lp150.2.6.1 sssd-wbclient-devel-1.16.1-lp150.2.6.1 sssd-winbind-idmap-1.16.1-lp150.2.6.1 sssd-winbind-idmap-debuginfo-1.16.1-lp150.2.6.1 - openSUSE Leap 15.0 (x86_64): adcli-0.8.2-lp150.2.1 adcli-debuginfo-0.8.2-lp150.2.1 adcli-debugsource-0.8.2-lp150.2.1 adcli-doc-0.8.2-lp150.2.1 sssd-32bit-1.16.1-lp150.2.6.1 sssd-32bit-debuginfo-1.16.1-lp150.2.6.1 References: https://bugzilla.suse.com/1109849

1 0

openSUSE-RU-2018:4099-1: moderate: Recommended update for icewm
by maintenance＠opensuse.org 13 Dec '18

13 Dec '18

openSUSE Recommended Update: Recommended update for icewm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4099-1 Rating: moderate References: #1105301 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for icewm fixes the following issues: - Adds a recommended package to ensure "Lock Workstation" works (bsc#1105301) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1536=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): icewm-1.3.12-6.12.1 icewm-debugsource-1.3.12-6.12.1 icewm-default-1.3.12-6.12.1 icewm-default-debuginfo-1.3.12-6.12.1 icewm-lite-1.3.12-6.12.1 icewm-lite-debuginfo-1.3.12-6.12.1 - openSUSE Leap 42.3 (noarch): icewm-config-upstream-1.3.12-6.12.1 icewm-lang-1.3.12-6.12.1 References: https://bugzilla.suse.com/1105301

1 0