December 2018 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2018:4313-1: moderate: Security update for GraphicsMagick
by opensuse-security＠opensuse.org 29 Dec '18

29 Dec '18

openSUSE Security Update: Security update for GraphicsMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4313-1 Rating: moderate References: #1119790 #1119822 Cross-References: CVE-2018-20184 CVE-2018-20189 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for GraphicsMagick fixes the following issues: Security issues fixed: - CVE-2018-20184: Fixed heap-based buffer overflow in the WriteTGAImage function of tga.c (bsc#1119822) - CVE-2018-20189: Fixed denial of service vulnerability in ReadDIBImage function of coders/dib.c (bsc#1119790) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1632=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): GraphicsMagick-1.3.25-120.1 GraphicsMagick-debuginfo-1.3.25-120.1 GraphicsMagick-debugsource-1.3.25-120.1 GraphicsMagick-devel-1.3.25-120.1 libGraphicsMagick++-Q16-12-1.3.25-120.1 libGraphicsMagick++-Q16-12-debuginfo-1.3.25-120.1 libGraphicsMagick++-devel-1.3.25-120.1 libGraphicsMagick-Q16-3-1.3.25-120.1 libGraphicsMagick-Q16-3-debuginfo-1.3.25-120.1 libGraphicsMagick3-config-1.3.25-120.1 libGraphicsMagickWand-Q16-2-1.3.25-120.1 libGraphicsMagickWand-Q16-2-debuginfo-1.3.25-120.1 perl-GraphicsMagick-1.3.25-120.1 perl-GraphicsMagick-debuginfo-1.3.25-120.1 References: https://www.suse.com/security/cve/CVE-2018-20184.html https://www.suse.com/security/cve/CVE-2018-20189.html https://bugzilla.suse.com/1119790 https://bugzilla.suse.com/1119822

1 0

openSUSE-RU-2018:4312-1: Recommended update for rdma-core
by maintenance＠opensuse.org 29 Dec '18

29 Dec '18

openSUSE Recommended Update: Recommended update for rdma-core ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4312-1 Rating: low References: #1083169 #1086173 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for rdma-core provides the following fixes: - Fix rcopy on QLogic hardware. (bsc#1083169) - Add Provide/Obsolete for librdmacm in librdmacm1. (bsc#1086173) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1629=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): ibacm-14-11.1 ibacm-debuginfo-14-11.1 iwpmd-14-11.1 iwpmd-debuginfo-14-11.1 libibcm1-14-11.1 libibcm1-debuginfo-14-11.1 libibumad3-14-11.1 libibumad3-debuginfo-14-11.1 libibverbs-14-11.1 libibverbs-debuginfo-14-11.1 libibverbs-utils-14-11.1 libibverbs-utils-debuginfo-14-11.1 libibverbs1-14-11.1 libibverbs1-debuginfo-14-11.1 libmlx5-1-14-11.1 libmlx5-1-debuginfo-14-11.1 librdmacm-utils-14-11.1 librdmacm-utils-debuginfo-14-11.1 librdmacm1-14-11.1 librdmacm1-debuginfo-14-11.1 rdma-core-14-11.1 rdma-core-debugsource-14-11.1 rdma-core-devel-14-11.1 rdma-ndd-14-11.1 rdma-ndd-debuginfo-14-11.1 rsocket-14-11.1 rsocket-debuginfo-14-11.1 srp_daemon-14-11.1 srp_daemon-debuginfo-14-11.1 - openSUSE Leap 42.3 (x86_64): libibcm1-32bit-14-11.1 libibcm1-debuginfo-32bit-14-11.1 libibumad3-32bit-14-11.1 libibumad3-debuginfo-32bit-14-11.1 libibverbs-32bit-14-11.1 libibverbs-debuginfo-32bit-14-11.1 libibverbs1-32bit-14-11.1 libibverbs1-debuginfo-32bit-14-11.1 libmlx5-1-32bit-14-11.1 libmlx5-1-debuginfo-32bit-14-11.1 librdmacm1-32bit-14-11.1 librdmacm1-debuginfo-32bit-14-11.1 rdma-core-devel-32bit-14-11.1 rsocket-32bit-14-11.1 rsocket-debuginfo-32bit-14-11.1 References: https://bugzilla.suse.com/1083169 https://bugzilla.suse.com/1086173

1 0

openSUSE-RU-2018:4311-1: moderate: Recommended update for yast2-instserver
by maintenance＠opensuse.org 29 Dec '18

29 Dec '18

openSUSE Recommended Update: Recommended update for yast2-instserver ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4311-1 Rating: moderate References: #1103621 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-instserver fixes the following issues: - Do not crash when importing a SLE15 installation medium. (bsc#1103621) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1631=1 Package List: - openSUSE Leap 42.3 (noarch): yast2-instserver-3.1.6-4.3.1 References: https://bugzilla.suse.com/1103621

1 0

openSUSE-RU-2018:4310-1: moderate: Recommended update for hwinfo
by maintenance＠opensuse.org 29 Dec '18

29 Dec '18

openSUSE Recommended Update: Recommended update for hwinfo ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4310-1 Rating: moderate References: #1018271 #1084700 #1107196 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for hwinfo provides the following fixes: - Add script tp update PCI and USB IDs. (fate#326431) - Adjust hwinfo know about RISC-V. - Update git2log script. - Fix curl commands. - Fix ID of S-Par storage controller. (bsc#1107196) - Add network interfaces found on mdio bus. (bsc#1018271) - The location of the S-Par drivers virtual buses has changed. (bsc#1107196) - Ensure udev device links are unique. (bsc#1084700) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1628=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): hwinfo-21.62-12.1 hwinfo-debuginfo-21.62-12.1 hwinfo-debugsource-21.62-12.1 hwinfo-devel-21.62-12.1 hwinfo-devel-debuginfo-21.62-12.1 References: https://bugzilla.suse.com/1018271 https://bugzilla.suse.com/1084700 https://bugzilla.suse.com/1107196

1 0

openSUSE-RU-2018:4309-1: moderate: Recommended update for selinux-policy
by maintenance＠opensuse.org 29 Dec '18

29 Dec '18

openSUSE Recommended Update: Recommended update for selinux-policy ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4309-1 Rating: moderate References: #1108949 #1109590 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for selinux-policy fixes the following issues: - Change default state to disabled and disable SELinux after uninstallation of policy to prevent leaving the system in an unbootable state. (bsc#1108949, bsc#1109590) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1630=1 Package List: - openSUSE Leap 42.3 (noarch): selinux-policy-20140730-5.1 selinux-policy-devel-20140730-5.1 selinux-policy-doc-20140730-5.1 selinux-policy-minimum-20140730-5.1 selinux-policy-mls-20140730-5.1 selinux-policy-targeted-20140730-5.1 References: https://bugzilla.suse.com/1108949 https://bugzilla.suse.com/1109590

1 0

openSUSE-RU-2018:4308-1: moderate: Recommended update for libetpan
by maintenance＠opensuse.org 29 Dec '18

29 Dec '18

openSUSE Recommended Update: Recommended update for libetpan ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4308-1 Rating: moderate References: #1109660 Affected Products: openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libetpan fixes the following issues: libetpan was updated to version 1.9.1 to include the following bug fix: - claws-mail could crash when changing folders in ProtonMail with ProtomMail bridge (boo#1109660) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1621=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2018-1621=1 Package List: - openSUSE Leap 15.0 (x86_64): libetpan-debugsource-1.9.1-lp150.2.3.1 libetpan-devel-1.9.1-lp150.2.3.1 libetpan20-1.9.1-lp150.2.3.1 libetpan20-debuginfo-1.9.1-lp150.2.3.1 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): libetpan-debugsource-1.9.1-bp150.3.3.1 libetpan-devel-1.9.1-bp150.3.3.1 libetpan20-1.9.1-bp150.3.3.1 libetpan20-debuginfo-1.9.1-bp150.3.3.1 References: https://bugzilla.suse.com/1109660

1 0

openSUSE-SU-2018:4307-1: moderate: Security update for wireshark
by opensuse-security＠opensuse.org 29 Dec '18

29 Dec '18

openSUSE Security Update: Security update for wireshark ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4307-1 Rating: moderate References: #1117740 Cross-References: CVE-2018-19622 CVE-2018-19623 CVE-2018-19624 CVE-2018-19625 CVE-2018-19626 CVE-2018-19627 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update for wireshark fixes the following issues: Update to Wireshark 2.4.11 (bsc#1117740). Security issues fixed: - CVE-2018-19625: The Wireshark dissection engine could crash (wnpa-sec-2018-51) - CVE-2018-19626: The DCOM dissector could crash (wnpa-sec-2018-52) - CVE-2018-19623: The LBMPDM dissector could crash (wnpa-sec-2018-53) - CVE-2018-19622: The MMSE dissector could go into an infinite loop (wnpa-sec-2018-54) - CVE-2018-19627: The IxVeriWave file parser could crash (wnpa-sec-2018-55) - CVE-2018-19624: The PVFS dissector could crash (wnpa-sec-2018-56) Further bug fixes and updated protocol support as listed in: - https://www.wireshark.org/docs/relnotes/wireshark-2.4.11.html This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1620=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libwireshark9-2.4.11-lp150.2.16.1 libwireshark9-debuginfo-2.4.11-lp150.2.16.1 libwiretap7-2.4.11-lp150.2.16.1 libwiretap7-debuginfo-2.4.11-lp150.2.16.1 libwscodecs1-2.4.11-lp150.2.16.1 libwscodecs1-debuginfo-2.4.11-lp150.2.16.1 libwsutil8-2.4.11-lp150.2.16.1 libwsutil8-debuginfo-2.4.11-lp150.2.16.1 wireshark-2.4.11-lp150.2.16.1 wireshark-debuginfo-2.4.11-lp150.2.16.1 wireshark-debugsource-2.4.11-lp150.2.16.1 wireshark-devel-2.4.11-lp150.2.16.1 wireshark-ui-qt-2.4.11-lp150.2.16.1 wireshark-ui-qt-debuginfo-2.4.11-lp150.2.16.1 References: https://www.suse.com/security/cve/CVE-2018-19622.html https://www.suse.com/security/cve/CVE-2018-19623.html https://www.suse.com/security/cve/CVE-2018-19624.html https://www.suse.com/security/cve/CVE-2018-19625.html https://www.suse.com/security/cve/CVE-2018-19626.html https://www.suse.com/security/cve/CVE-2018-19627.html https://bugzilla.suse.com/1117740

1 0

openSUSE-SU-2018:4306-1: important: Security update for containerd, docker and go
by opensuse-security＠opensuse.org 29 Dec '18

29 Dec '18

openSUSE Security Update: Security update for containerd, docker and go ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4306-1 Rating: important References: #1047218 #1074971 #1080978 #1081495 #1084533 #1086185 #1094680 #1095817 #1098017 #1102522 #1104821 #1105000 #1108038 #1113313 #1113978 #1114209 #1118897 #1118898 #1118899 #1119634 #1119706 Cross-References: CVE-2018-16873 CVE-2018-16874 CVE-2018-16875 CVE-2018-7187 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves four vulnerabilities and has 17 fixes is now available. Description: This update for containerd, docker and go fixes the following issues: containerd and docker: - Add backport for building containerd (bsc#1102522, bsc#1113313) - Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce. (bsc#1102522) - Enable seccomp support (fate#325877) - Update to containerd v1.1.1, which is the required version for the Docker v18.06.0-ce upgrade. (bsc#1102522) - Put containerd under the podruntime slice (bsc#1086185) - 3rd party registries used the default Docker certificate (bsc#1084533) - Handle build breakage due to missing 'export GOPATH' (caused by resolution of boo#1119634). I believe Docker is one of the only packages with this problem. go: - golang: arbitrary command execution via VCS path (bsc#1081495, CVE-2018-7187) - Make profile.d/go.sh no longer set GOROOT=, in order to make switching between versions no longer break. This ends up removing the need for go.sh entirely (because GOPATH is also set automatically) (boo#1119634) - Fix a regression that broke go get for import path patterns containing "..." (bsc#1119706) Additionally, the package go1.10 has been added. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1626=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): go-1.10.4-lp150.2.7.1 go-doc-1.10.4-lp150.2.7.1 - openSUSE Leap 15.0 (x86_64): containerd-1.1.2-lp150.4.3.1 containerd-ctr-1.1.2-lp150.4.3.1 containerd-kubic-1.1.2-lp150.4.3.1 containerd-kubic-ctr-1.1.2-lp150.4.3.1 docker-18.06.1_ce-lp150.5.6.1 docker-debuginfo-18.06.1_ce-lp150.5.6.1 docker-debugsource-18.06.1_ce-lp150.5.6.1 docker-kubic-18.06.1_ce-lp150.5.6.1 docker-kubic-debuginfo-18.06.1_ce-lp150.5.6.1 docker-kubic-debugsource-18.06.1_ce-lp150.5.6.1 docker-kubic-test-18.06.1_ce-lp150.5.6.1 docker-kubic-test-debuginfo-18.06.1_ce-lp150.5.6.1 docker-libnetwork-0.7.0.1+gitr2664_3ac297bc7fd0-lp150.3.3.1 docker-libnetwork-debuginfo-0.7.0.1+gitr2664_3ac297bc7fd0-lp150.3.3.1 docker-libnetwork-kubic-0.7.0.1+gitr2664_3ac297bc7fd0-lp150.3.3.1 docker-libnetwork-kubic-debuginfo-0.7.0.1+gitr2664_3ac297bc7fd0-lp150.3.3.1 docker-runc-1.0.0rc5+gitr3562_69663f0bd4b6-lp150.5.3.1 docker-runc-debuginfo-1.0.0rc5+gitr3562_69663f0bd4b6-lp150.5.3.1 docker-runc-kubic-1.0.0rc5+gitr3562_69663f0bd4b6-lp150.5.3.1 docker-runc-kubic-debuginfo-1.0.0rc5+gitr3562_69663f0bd4b6-lp150.5.3.1 docker-test-18.06.1_ce-lp150.5.6.1 docker-test-debuginfo-18.06.1_ce-lp150.5.6.1 go-race-1.10.4-lp150.2.7.1 go1.10-1.10.7-lp150.2.1 go1.10-doc-1.10.7-lp150.2.1 go1.10-race-1.10.7-lp150.2.1 golang-github-docker-libnetwork-0.7.0.1+gitr2664_3ac297bc7fd0-lp150.3.3.1 golang-github-docker-libnetwork-kubic-0.7.0.1+gitr2664_3ac297bc7fd0-lp150.3.3.1 - openSUSE Leap 15.0 (noarch): containerd-kubic-test-1.1.2-lp150.4.3.1 containerd-test-1.1.2-lp150.4.3.1 docker-bash-completion-18.06.1_ce-lp150.5.6.1 docker-kubic-bash-completion-18.06.1_ce-lp150.5.6.1 docker-kubic-zsh-completion-18.06.1_ce-lp150.5.6.1 docker-runc-kubic-test-1.0.0rc5+gitr3562_69663f0bd4b6-lp150.5.3.1 docker-runc-test-1.0.0rc5+gitr3562_69663f0bd4b6-lp150.5.3.1 docker-zsh-completion-18.06.1_ce-lp150.5.6.1 golang-packaging-15.0.11-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-16873.html https://www.suse.com/security/cve/CVE-2018-16874.html https://www.suse.com/security/cve/CVE-2018-16875.html https://www.suse.com/security/cve/CVE-2018-7187.html https://bugzilla.suse.com/1047218 https://bugzilla.suse.com/1074971 https://bugzilla.suse.com/1080978 https://bugzilla.suse.com/1081495 https://bugzilla.suse.com/1084533 https://bugzilla.suse.com/1086185 https://bugzilla.suse.com/1094680 https://bugzilla.suse.com/1095817 https://bugzilla.suse.com/1098017 https://bugzilla.suse.com/1102522 https://bugzilla.suse.com/1104821 https://bugzilla.suse.com/1105000 https://bugzilla.suse.com/1108038 https://bugzilla.suse.com/1113313 https://bugzilla.suse.com/1113978 https://bugzilla.suse.com/1114209 https://bugzilla.suse.com/1118897 https://bugzilla.suse.com/1118898 https://bugzilla.suse.com/1118899 https://bugzilla.suse.com/1119634 https://bugzilla.suse.com/1119706

1 0

openSUSE-RU-2018:4305-1: moderate: Recommended update for nfs-utils
by maintenance＠opensuse.org 29 Dec '18

29 Dec '18

openSUSE Recommended Update: Recommended update for nfs-utils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4305-1 Rating: moderate References: #1109792 #1116221 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for nfs-utils fixes the following issues: - Fixes for systemd integration between systemd and rpc-statd or any of its dependencies (bsc#1116221) - Allow rpc.statd to survive "systemctl isolate ..." (bsc#1116221) - Remove README.NFSv4 as outdated and unhelpful (bsc#1109792) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1623=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): nfs-client-2.1.1-lp150.4.6.1 nfs-client-debuginfo-2.1.1-lp150.4.6.1 nfs-doc-2.1.1-lp150.4.6.1 nfs-kernel-server-2.1.1-lp150.4.6.1 nfs-kernel-server-debuginfo-2.1.1-lp150.4.6.1 nfs-utils-debuginfo-2.1.1-lp150.4.6.1 nfs-utils-debugsource-2.1.1-lp150.4.6.1 References: https://bugzilla.suse.com/1109792 https://bugzilla.suse.com/1116221

1 0

openSUSE-SU-2018:4304-1: important: Security update for xen
by opensuse-security＠opensuse.org 29 Dec '18

29 Dec '18

openSUSE Security Update: Security update for xen ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4304-1 Rating: important References: #1027519 #1078292 #1091107 #1094508 #1103275 #1103276 #1103279 #1105528 #1108940 #1114405 #1115040 #1115045 #1115047 Cross-References: CVE-2018-15468 CVE-2018-15469 CVE-2018-15470 CVE-2018-18883 CVE-2018-19961 CVE-2018-19962 CVE-2018-19965 CVE-2018-19966 CVE-2018-3646 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves 9 vulnerabilities and has four fixes is now available. Description: This update for xen fixes the following issues: Update to Xen 4.10.2 bug fix release (bsc#1027519). Security vulnerabilities fixed: - CVE-2018-19961, CVE-2018-19962: Fixed an issue related to insufficient TLB flushing with AMD IOMMUs, which potentially allowed a guest to escalate its privileges, may cause a Denial of Service (DoS) affecting the entire host, or may be able to access data it is not supposed to access. (XSA-275) (bsc#1115040) - CVE-2018-19965: Fixed an issue related to the INVPCID instruction in case non-canonical addresses are accessed, which may allow a guest to cause Xen to crash, resulting in a Denial of Service (DoS) affecting the entire host. (XSA-279) (bsc#1115045) - CVE-2018-19966: Fixed an issue related to a previous fix for XSA-240, which conflicted with shadow paging and allowed a guest to cause Xen to crash, resulting in a Denial of Service (DoS). (XSA-280) (bsc#1115047) - CVE-2018-18883: Fixed an issue related to inproper restriction of nested VT-x, which allowed a guest to cause Xen to crash, resulting in a Denial of Service (DoS). (XSA-278) (bsc#1114405) - CVE-2018-15468: Fixed incorrect MSR_DEBUGCTL handling, which allowed guests to enable Branch Trace Store and may cause a Denial of Service (DoS) of the entire host. (XSA-269) (bsc#1103276) - CVE-2018-15469: Fixed use of v2 grant tables on ARM, which were not properly implemented and may cause a Denial of Service (DoS). (XSA-268) (bsc#1103275) - CVE-2018-15470: Fixed an issue in the logic in oxenstored for handling writes, which allowed a guest to write memory unbounded leading to system-wide Denial of Service (DoS). (XSA-272) (bsc#1103279) - CVE-2018-3646: Mitigations for VMM aspects of L1 Terminal Fault (XSA-273) (bsc#1091107) Other bugs fixed: - Fixed an issue related to a domU hang on SLE12-SP3 HV (bsc#1108940) - Fixed an issue with xpti=no-dom0 not working as expected (bsc#1105528) - Fixed a kernel oops related to fs/dcache.c called by d_materialise_unique() (bsc#1094508) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1624=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): xen-debugsource-4.10.2_04-lp150.2.12.1 xen-devel-4.10.2_04-lp150.2.12.1 xen-libs-4.10.2_04-lp150.2.12.1 xen-libs-debuginfo-4.10.2_04-lp150.2.12.1 xen-tools-domU-4.10.2_04-lp150.2.12.1 xen-tools-domU-debuginfo-4.10.2_04-lp150.2.12.1 - openSUSE Leap 15.0 (x86_64): xen-4.10.2_04-lp150.2.12.1 xen-doc-html-4.10.2_04-lp150.2.12.1 xen-libs-32bit-4.10.2_04-lp150.2.12.1 xen-libs-32bit-debuginfo-4.10.2_04-lp150.2.12.1 xen-tools-4.10.2_04-lp150.2.12.1 xen-tools-debuginfo-4.10.2_04-lp150.2.12.1 References: https://www.suse.com/security/cve/CVE-2018-15468.html https://www.suse.com/security/cve/CVE-2018-15469.html https://www.suse.com/security/cve/CVE-2018-15470.html https://www.suse.com/security/cve/CVE-2018-18883.html https://www.suse.com/security/cve/CVE-2018-19961.html https://www.suse.com/security/cve/CVE-2018-19962.html https://www.suse.com/security/cve/CVE-2018-19965.html https://www.suse.com/security/cve/CVE-2018-19966.html https://www.suse.com/security/cve/CVE-2018-3646.html https://bugzilla.suse.com/1027519 https://bugzilla.suse.com/1078292 https://bugzilla.suse.com/1091107 https://bugzilla.suse.com/1094508 https://bugzilla.suse.com/1103275 https://bugzilla.suse.com/1103276 https://bugzilla.suse.com/1103279 https://bugzilla.suse.com/1105528 https://bugzilla.suse.com/1108940 https://bugzilla.suse.com/1114405 https://bugzilla.suse.com/1115040 https://bugzilla.suse.com/1115045 https://bugzilla.suse.com/1115047

1 0

openSUSE-RU-2018:4303-1: moderate: Recommended update for cloud-init
by maintenance＠opensuse.org 29 Dec '18

29 Dec '18

openSUSE Recommended Update: Recommended update for cloud-init ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4303-1 Rating: moderate References: #1087331 #1095627 #1097388 #1099340 #1101894 #1111427 #1114160 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has 7 recommended fixes can now be installed. Description: This update for cloud-init provides the following fixes: - Fix a decoding error that could cause persisting the metadata to fail. (bsc#1101894) - Fix a problem that could cause static network to be configured with BOOTPROTO=none. (bsc#1114160) - Update to version 18.4, including the following fixes (bsc#1087331, bsc#1097388, bsc#1111427, bsc#1095627): * Avoid Python 3 dependency when building for distros with Python 2 support. * Add dhcp-client as requirement as cloud-init uses dhclient to setup a temporary network for metadata retrieval. * Use ds._crawled_metadata instance attribute if set when writing instance-data.json. * ec2: Update crawled metadata and add standardized keys. * lxd: Adjust to snap installed lxd. * Add support for Infiniband network interfaces (IPoIB). * cli: Add cloud-init query subcommand to query instance metadata. * stages: Fix bug causing datasource to have incorrect sys_cfg. * net_util: Ensure static configurations have netmask in translate_network result. * Fall back to root:root on syslog permissions if other options fail. * OpenStack: Support setting mac address on bond. * EphemeralIPv4Network: Be more explicit when adding default route. * OpenStack: Support reading of newer versions of metdata. * OpenStack: Fix a bug that was causing causing 'latest' version to be used from network. * user-data: Use jinja template to render instance-data.json in cloud-config. * config: Disable ssh access to a configured user account. * sysconfig: Refactor sysconfig to accept distro specific templates paths. * hyperv_reporting_handler: Simplify threaded publisher. * VMWare: Fix a network config bug in vm with static IPv4 and no gateway. * logging: Add logging config type hyperv for reporting via Azure KVP * Add datasource Oracle Compute Infrastructure (OCI). * azure: Allow azure to generate network configuration from IMDS per boot. * Scaleway: Add network configuration to the DataSource. * netplan: Correctly render macaddress on a bonds and bridges when provided. * tools: Add 'net-convert' subcommand command to 'cloud-init devel'. * Use typeset or local in profile.d scripts. * OpenNebula: Fix null gateway6. * tools: add '--debug' to tools/net-convert.py * update_metadata: A datasource can support network re-config every boot. * Retry on failed import of gpg receive keys. * tools: Fix run-container when neither source or binary package requested. - Changes from 18.3: * Explicitly prevent `sudo` access for user module. * lxd: Delete default network and detach device if lxd-init created them. * openstack: Avoid unneeded metadata probe on non-openstack platforms. * stages: Fix tracebacks if a module stage is undefined or empty. * Be safer on string/bytes when writing multipart user-data to disk. * Fix get_proc_env for pids that have non-utf8 content in environment. * netplan: Fix mtu if provided by network config for all rendered types. * subp: Support combine_capture argument. * util: Add get_linux_distro function to replace platform.dist * Do not use the systemd_prefix macro, not available in this environment. * openstack: Allow discovery in init-local using dhclient in a sandbox. * yaml_load/schema: Add invalid line and column nums to error message. * Azure: Ignore NTFS mount errors when checking ephemeral drive. * cc_mounts: Do not add devices to fstab that are already present. * ds-identify: Ensure that we have certain tokens in PATH. * read_file_or_url: Move to url_helper, fix bug in its FileResponse. * ds-identify: Recognize container-other as a container. * ds-identify: Remove duplicate call to is_ds_enabled. * azure: Add reported ready marker file. * netinfo: Fix netdev_pformat when a nic does not have an address assigned. * collect-logs: Add -v flag, write to stderr, limit journal to single boot. * IBMCloud: Disable config-drive and nocloud only if IBMCloud is enabled. * Add reporting events and log_time around early source of blocking time. * IBMCloud: recognize provisioning environment during debug boots. * net: Detect unstable network names and trigger a settle if needed. * sysconfig: dhcp6 subnet type should not imply dhcpv4. * schema: In validation, raise ImportError if strict but no jsonschema. * set_passwords: Add newline to end of sshd config, only restart if updated. * net: Depend on iproute2's ip instead of net-tools ifconfig or route. * renderer: Support unicode in render_from_file. * Implement ntp client spec with auto support for distro selection. * apport: Add Brightbox, IBM, LXD, and OpenTelekomCloud to list of clouds. * tests: Fix ec2 integration network metadata validation. * cc_resizefs, util: Handle no /dev/zfs. - The distribution indicator is set to SUSE during template expansion. Do not replace anything set to Ubuntu. - Do not run cloud-init after network-online, this breaks functionality in cloud-init. Certain parts of the code running in this phase expect to run before the network is on-line. - Root should not be enabled by default. Image builders/users that want root access by default should provide an appropriate configuration file during image build or image setup. - Set distribution default to OpenSUSE/SLES. (bsc#1099340) - Run metadata detection after network-online. (bsc#1097388) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1622=1 Package List: - openSUSE Leap 15.0 (x86_64): cloud-init-18.4-lp150.2.9.1 cloud-init-config-suse-18.4-lp150.2.9.1 cloud-init-doc-18.4-lp150.2.9.1 References: https://bugzilla.suse.com/1087331 https://bugzilla.suse.com/1095627 https://bugzilla.suse.com/1097388 https://bugzilla.suse.com/1099340 https://bugzilla.suse.com/1101894 https://bugzilla.suse.com/1111427 https://bugzilla.suse.com/1114160

1 0

openSUSE-SU-2018:4302-1: important: Security update for go
by opensuse-security＠opensuse.org 29 Dec '18

29 Dec '18

openSUSE Security Update: Security update for go ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4302-1 Rating: important References: #1081495 #1119634 #1119706 Cross-References: CVE-2018-7187 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update for go fixes the following issues: - golang: arbitrary command execution via VCS path (bsc#1081495, CVE-2018-7187) - Make profile.d/go.sh no longer set GOROOT=, in order to make switching between versions no longer break. This ends up removing the need for go.sh entirely (because GOPATH is also set automatically) (boo#1119634) - Fix a regression that broke go get for import path patterns containing "..." (bsc#1119706) Additionally, the package go1.10 has been added. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2018-1625=1 Package List: - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): go-1.10.4-bp150.2.3.1 go-doc-1.10.4-bp150.2.3.1 go1.10-1.10.7-bp150.2.1 go1.10-doc-1.10.7-bp150.2.1 - openSUSE Backports SLE-15 (x86_64): go-race-1.10.4-bp150.2.3.1 go1.10-race-1.10.7-bp150.2.1 - openSUSE Backports SLE-15 (noarch): golang-packaging-15.0.11-bp150.3.3.1 References: https://www.suse.com/security/cve/CVE-2018-7187.html https://bugzilla.suse.com/1081495 https://bugzilla.suse.com/1119634 https://bugzilla.suse.com/1119706

1 0

openSUSE-RU-2018:4301-1: moderate: Recommended update for python-jira
by maintenance＠opensuse.org 29 Dec '18

29 Dec '18

openSUSE Recommended Update: Recommended update for python-jira ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4301-1 Rating: moderate References: #1120127 Affected Products: openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-jira fixes the following issues: - add missing run-time dependency on python-pbr boo#1120127 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1627=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2018-1627=1 Package List: - openSUSE Leap 15.0 (noarch): python2-jira-1.0.15-lp150.2.3.1 python3-jira-1.0.15-lp150.2.3.1 - openSUSE Backports SLE-15 (noarch): python2-jira-1.0.15-bp150.3.3.1 python3-jira-1.0.15-bp150.3.3.1 References: https://bugzilla.suse.com/1120127

1 0

openSUSE-SU-2018:4299-1: moderate: Security update for libraw
by opensuse-security＠opensuse.org 28 Dec '18

28 Dec '18

openSUSE Security Update: Security update for libraw ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4299-1 Rating: moderate References: #1097973 #1097974 #1097975 #1118894 Cross-References: CVE-2018-5804 CVE-2018-5805 CVE-2018-5806 CVE-2018-5808 CVE-2018-5816 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for libraw fixes the following issues: The following security vulnerabilities were addressed: - CVE-2018-5804: Fixed a type confusion error within the identify function that could trigger a division by zero, leading to a denial of service (Dos). (boo#1097975) - CVE-2018-5805: Fixed a boundary error within the quicktake_100_load_raw function that could cause a stack-based buffer overflow and subsequently trigger a crash. (boo#1097973) - CVE-2018-5806: Fixed an error within the leaf_hdr_load_raw function that could trigger a NULL pointer deference, leading to a denial of service (DoS). (boo#1097974) - CVE-2018-5808: Fixed an error within the find_green function that could cause a stack-based buffer overflow and subsequently execute arbitrary code. (boo#1118894) - CVE-2018-5816: Fixed a type confusion error within the identify function that could trigger a division by zero, leading to a denial of service (DoS). (boo#1097975) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1619=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libraw-debugsource-0.17.1-26.1 libraw-devel-0.17.1-26.1 libraw-devel-static-0.17.1-26.1 libraw-tools-0.17.1-26.1 libraw-tools-debuginfo-0.17.1-26.1 libraw15-0.17.1-26.1 libraw15-debuginfo-0.17.1-26.1 References: https://www.suse.com/security/cve/CVE-2018-5804.html https://www.suse.com/security/cve/CVE-2018-5805.html https://www.suse.com/security/cve/CVE-2018-5806.html https://www.suse.com/security/cve/CVE-2018-5808.html https://www.suse.com/security/cve/CVE-2018-5816.html https://bugzilla.suse.com/1097973 https://bugzilla.suse.com/1097974 https://bugzilla.suse.com/1097975 https://bugzilla.suse.com/1118894

1 0

openSUSE-RU-2018:4289-1: moderate: Recommended update for LibreOffice and related libraries
by maintenance＠opensuse.org 28 Dec '18

28 Dec '18

openSUSE Recommended Update: Recommended update for LibreOffice and related libraries ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4289-1 Rating: moderate References: #1050305 #1094779 #1096360 #1104876 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for LibreOffice, libepubgen, libetonyek, liblangtag, libmwaw, libnumbertext, libstaroffice, libwps, myspell-dictionaries, xmlsec1 fixes the following issues: LibreOffice was updated to 6.1.3.2 (fate#326624) and contains new features and lots of bugfixes: The full changelog can be found on: https://wiki.documentfoundation.org/ReleaseNotes/6.1 Add more translations: * Belarusian * Bodo * Dogri * Frisian * Gaelic * Paraguayan_Guaran * Upper_Sorbian * Konkani * Kashmiri * Luxembourgish * Monglolian * Manipuri * Burnese * Occitan * Kinyarwanda * Santali * Sanskrit * Sindhi * Sidamo * Tatar * Uzbek * Upper Sorbian * Venetian * Amharic * Asturian * Tibetian * Bosnian * English GB * English ZA * Indonesian * Icelandic * Georgian * Khmer * Lao * Macedonian * Nepali * Oromo * Albanian * Tajik * Uyghur * Vietnamese * Kurdish - Try to build all languages see bsc#1096360 - Make sure to install the KDE5/Qt5 UI/filepicker - Try to implement safeguarding to avoid bsc#1050305 - Disable base-drivers-mysql as it needs mysqlcppcon that is only for mysql and not mariadb, causes issues bsc#1094779 * Users can still connect using jdbc/odbc - Fix java detection on machines with too many cpus libepubgen was updated to 0.1.1: - Avoid <div> inside <p> or <span>. - Avoid writin vertical-align attribute without a value. - Fix generation of invalid XHTML when there is a link starting at the beginning of a footnote. - Handle relative width for images. - Fixed layout: write chapter names to improve navigation. - Support writing mode. - Start a new HTML file at every page span in addition to the splits induced by the chosen split method. This is to ensure that specified writing mode works correctly, as it is HTML <body> attribute. libetonyek was updated to 0.1.8: - More support for keynote content - Add support for Keynote 1 documents. - Add support for Numbers 3 documents. - Fix several issues found by oss-fuzz. - Fix build with glm 0.9.9. - Other fixes and improvements. liblangtag was updated to 0.6.2: - use standard function - fix leak in test libmwaw was updated to 0.3.14: - Support MS Multiplan 1.1 files libnumbertext was update to 1.0.5: - Various fixes in numerical calculations and issues reported on libreoffice tracker libstaroffice was updated to 0.0.6: - retrieve some StarMath's formula, - retrieve some charts as graphic, - retrieve some fields in sda/sdc/sdp text-boxes, - .sdw: retrieve more attachments. libwps was updated to 0.4.9: - QuattroPro: add parser to .wb3 files - Multiplan: add parser to DOS v1-v3 files - charts: try to retrieve charts in .wk*, .wq* files - QuattroPro: add parser to .wb[12] files myspell-dictionaries was updated to 20181025: - Turkish dictionary added - Updated French dictionary xmlsec1 was updated to 1.2.26: - Added xmlsec-mscng module based on Microsoft Cryptography API: Next Generation - Added support for GOST 2012 and fixed CryptoPro CSP provider for GOST R 34.10-2001 in xmlsec-mscrypto This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1612=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): liblangtag-debugsource-0.6.2-8.3.1 liblangtag-devel-0.6.2-8.3.1 liblangtag1-0.6.2-8.3.1 liblangtag1-debuginfo-0.6.2-8.3.1 libnumbertext-1_0-0-1.0.5-2.1 libnumbertext-1_0-0-debuginfo-1.0.5-2.1 libnumbertext-data-1.0.5-2.1 libnumbertext-debugsource-1.0.5-2.1 libnumbertext-devel-1.0.5-2.1 libnumbertext-tools-1.0.5-2.1 libnumbertext-tools-debuginfo-1.0.5-2.1 libxmlsec1-1-1.2.26-10.1 libxmlsec1-1-debuginfo-1.2.26-10.1 libxmlsec1-gcrypt1-1.2.26-10.1 libxmlsec1-gcrypt1-debuginfo-1.2.26-10.1 libxmlsec1-gnutls1-1.2.26-10.1 libxmlsec1-gnutls1-debuginfo-1.2.26-10.1 libxmlsec1-nss1-1.2.26-10.1 libxmlsec1-nss1-debuginfo-1.2.26-10.1 libxmlsec1-openssl1-1.2.26-10.1 libxmlsec1-openssl1-debuginfo-1.2.26-10.1 myspell-dictionaries-20181025-13.1 myspell-lightproof-en-20181025-13.1 myspell-lightproof-hu_HU-20181025-13.1 myspell-lightproof-pt_BR-20181025-13.1 myspell-lightproof-ru_RU-20181025-13.1 xmlsec1-1.2.26-10.1 xmlsec1-debuginfo-1.2.26-10.1 xmlsec1-debugsource-1.2.26-10.1 xmlsec1-devel-1.2.26-10.1 xmlsec1-gcrypt-devel-1.2.26-10.1 xmlsec1-gnutls-devel-1.2.26-10.1 xmlsec1-nss-devel-1.2.26-10.1 xmlsec1-openssl-devel-1.2.26-10.1 - openSUSE Leap 42.3 (x86_64): libepubgen-0_1-1-0.1.1-17.1 libepubgen-0_1-1-debuginfo-0.1.1-17.1 libepubgen-debugsource-0.1.1-17.1 libepubgen-devel-0.1.1-17.1 libetonyek-0_1-1-0.1.8-11.1 libetonyek-0_1-1-debuginfo-0.1.8-11.1 libetonyek-debugsource-0.1.8-11.1 libetonyek-devel-0.1.8-11.1 libetonyek-tools-0.1.8-11.1 libetonyek-tools-debuginfo-0.1.8-11.1 libmwaw-0_3-3-0.3.14-2.6.1 libmwaw-0_3-3-debuginfo-0.3.14-2.6.1 libmwaw-debugsource-0.3.14-2.6.1 libmwaw-devel-0.3.14-2.6.1 libmwaw-tools-0.3.14-2.6.1 libmwaw-tools-debuginfo-0.3.14-2.6.1 libreoffice-6.1.3.2-27.4 libreoffice-base-6.1.3.2-27.4 libreoffice-base-debuginfo-6.1.3.2-27.4 libreoffice-base-drivers-postgresql-6.1.3.2-27.4 libreoffice-base-drivers-postgresql-debuginfo-6.1.3.2-27.4 libreoffice-calc-6.1.3.2-27.4 libreoffice-calc-debuginfo-6.1.3.2-27.4 libreoffice-calc-extensions-6.1.3.2-27.4 libreoffice-debuginfo-6.1.3.2-27.4 libreoffice-debugsource-6.1.3.2-27.4 libreoffice-draw-6.1.3.2-27.4 libreoffice-draw-debuginfo-6.1.3.2-27.4 libreoffice-filters-optional-6.1.3.2-27.4 libreoffice-gnome-6.1.3.2-27.4 libreoffice-gnome-debuginfo-6.1.3.2-27.4 libreoffice-gtk2-6.1.3.2-27.4 libreoffice-gtk2-debuginfo-6.1.3.2-27.4 libreoffice-gtk3-6.1.3.2-27.4 libreoffice-gtk3-debuginfo-6.1.3.2-27.4 libreoffice-impress-6.1.3.2-27.4 libreoffice-impress-debuginfo-6.1.3.2-27.4 libreoffice-mailmerge-6.1.3.2-27.4 libreoffice-math-6.1.3.2-27.4 libreoffice-math-debuginfo-6.1.3.2-27.4 libreoffice-officebean-6.1.3.2-27.4 libreoffice-officebean-debuginfo-6.1.3.2-27.4 libreoffice-pyuno-6.1.3.2-27.4 libreoffice-pyuno-debuginfo-6.1.3.2-27.4 libreoffice-qt5-6.1.3.2-27.4 libreoffice-qt5-debuginfo-6.1.3.2-27.4 libreoffice-sdk-6.1.3.2-27.4 libreoffice-sdk-debuginfo-6.1.3.2-27.4 libreoffice-sdk-doc-6.1.3.2-27.4 libreoffice-writer-6.1.3.2-27.4 libreoffice-writer-debuginfo-6.1.3.2-27.4 libreoffice-writer-extensions-6.1.3.2-27.4 libreofficekit-6.1.3.2-27.4 libreofficekit-devel-6.1.3.2-27.4 libstaroffice-0_0-0-0.0.6-2.6.1 libstaroffice-0_0-0-debuginfo-0.0.6-2.6.1 libstaroffice-debugsource-0.0.6-2.6.1 libstaroffice-devel-0.0.6-2.6.1 libstaroffice-tools-0.0.6-2.6.1 libstaroffice-tools-debuginfo-0.0.6-2.6.1 libwps-0_4-4-0.4.9-17.1 libwps-0_4-4-debuginfo-0.4.9-17.1 libwps-debugsource-0.4.9-17.1 libwps-devel-0.4.9-17.1 libwps-tools-0.4.9-17.1 libwps-tools-debuginfo-0.4.9-17.1 - openSUSE Leap 42.3 (noarch): libepubgen-devel-doc-0.1.1-17.1 libetonyek-devel-doc-0.1.8-11.1 liblangtag-doc-0.6.2-8.3.1 libmwaw-devel-doc-0.3.14-2.6.1 libreoffice-branding-upstream-6.1.3.2-27.4 libreoffice-gdb-pretty-printers-6.1.3.2-27.4 libreoffice-glade-6.1.3.2-27.4 libreoffice-icon-themes-6.1.3.2-27.4 libreoffice-l10n-af-6.1.3.2-27.4 libreoffice-l10n-am-6.1.3.2-27.4 libreoffice-l10n-ar-6.1.3.2-27.4 libreoffice-l10n-as-6.1.3.2-27.4 libreoffice-l10n-ast-6.1.3.2-27.4 libreoffice-l10n-be-6.1.3.2-27.4 libreoffice-l10n-bg-6.1.3.2-27.4 libreoffice-l10n-bn-6.1.3.2-27.4 libreoffice-l10n-bn_IN-6.1.3.2-27.4 libreoffice-l10n-bo-6.1.3.2-27.4 libreoffice-l10n-br-6.1.3.2-27.4 libreoffice-l10n-brx-6.1.3.2-27.4 libreoffice-l10n-bs-6.1.3.2-27.4 libreoffice-l10n-ca-6.1.3.2-27.4 libreoffice-l10n-ca_valencia-6.1.3.2-27.4 libreoffice-l10n-cs-6.1.3.2-27.4 libreoffice-l10n-cy-6.1.3.2-27.4 libreoffice-l10n-da-6.1.3.2-27.4 libreoffice-l10n-de-6.1.3.2-27.4 libreoffice-l10n-dgo-6.1.3.2-27.4 libreoffice-l10n-dz-6.1.3.2-27.4 libreoffice-l10n-el-6.1.3.2-27.4 libreoffice-l10n-en-6.1.3.2-27.4 libreoffice-l10n-en_GB-6.1.3.2-27.4 libreoffice-l10n-en_ZA-6.1.3.2-27.4 libreoffice-l10n-eo-6.1.3.2-27.4 libreoffice-l10n-es-6.1.3.2-27.4 libreoffice-l10n-et-6.1.3.2-27.4 libreoffice-l10n-eu-6.1.3.2-27.4 libreoffice-l10n-fa-6.1.3.2-27.4 libreoffice-l10n-fi-6.1.3.2-27.4 libreoffice-l10n-fr-6.1.3.2-27.4 libreoffice-l10n-fy-6.1.3.2-27.4 libreoffice-l10n-ga-6.1.3.2-27.4 libreoffice-l10n-gd-6.1.3.2-27.4 libreoffice-l10n-gl-6.1.3.2-27.4 libreoffice-l10n-gu-6.1.3.2-27.4 libreoffice-l10n-gug-6.1.3.2-27.4 libreoffice-l10n-he-6.1.3.2-27.4 libreoffice-l10n-hi-6.1.3.2-27.4 libreoffice-l10n-hr-6.1.3.2-27.4 libreoffice-l10n-hsb-6.1.3.2-27.4 libreoffice-l10n-hu-6.1.3.2-27.4 libreoffice-l10n-id-6.1.3.2-27.4 libreoffice-l10n-is-6.1.3.2-27.4 libreoffice-l10n-it-6.1.3.2-27.4 libreoffice-l10n-ja-6.1.3.2-27.4 libreoffice-l10n-ka-6.1.3.2-27.4 libreoffice-l10n-kab-6.1.3.2-27.4 libreoffice-l10n-kk-6.1.3.2-27.4 libreoffice-l10n-km-6.1.3.2-27.4 libreoffice-l10n-kmr_Latn-6.1.3.2-27.4 libreoffice-l10n-kn-6.1.3.2-27.4 libreoffice-l10n-ko-6.1.3.2-27.4 libreoffice-l10n-kok-6.1.3.2-27.4 libreoffice-l10n-ks-6.1.3.2-27.4 libreoffice-l10n-lb-6.1.3.2-27.4 libreoffice-l10n-lo-6.1.3.2-27.4 libreoffice-l10n-lt-6.1.3.2-27.4 libreoffice-l10n-lv-6.1.3.2-27.4 libreoffice-l10n-mai-6.1.3.2-27.4 libreoffice-l10n-mk-6.1.3.2-27.4 libreoffice-l10n-ml-6.1.3.2-27.4 libreoffice-l10n-mn-6.1.3.2-27.4 libreoffice-l10n-mni-6.1.3.2-27.4 libreoffice-l10n-mr-6.1.3.2-27.4 libreoffice-l10n-my-6.1.3.2-27.4 libreoffice-l10n-nb-6.1.3.2-27.4 libreoffice-l10n-ne-6.1.3.2-27.4 libreoffice-l10n-nl-6.1.3.2-27.4 libreoffice-l10n-nn-6.1.3.2-27.4 libreoffice-l10n-nr-6.1.3.2-27.4 libreoffice-l10n-nso-6.1.3.2-27.4 libreoffice-l10n-oc-6.1.3.2-27.4 libreoffice-l10n-om-6.1.3.2-27.4 libreoffice-l10n-or-6.1.3.2-27.4 libreoffice-l10n-pa-6.1.3.2-27.4 libreoffice-l10n-pl-6.1.3.2-27.4 libreoffice-l10n-pt_BR-6.1.3.2-27.4 libreoffice-l10n-pt_PT-6.1.3.2-27.4 libreoffice-l10n-ro-6.1.3.2-27.4 libreoffice-l10n-ru-6.1.3.2-27.4 libreoffice-l10n-rw-6.1.3.2-27.4 libreoffice-l10n-sa_IN-6.1.3.2-27.4 libreoffice-l10n-sat-6.1.3.2-27.4 libreoffice-l10n-sd-6.1.3.2-27.4 libreoffice-l10n-si-6.1.3.2-27.4 libreoffice-l10n-sid-6.1.3.2-27.4 libreoffice-l10n-sk-6.1.3.2-27.4 libreoffice-l10n-sl-6.1.3.2-27.4 libreoffice-l10n-sq-6.1.3.2-27.4 libreoffice-l10n-sr-6.1.3.2-27.4 libreoffice-l10n-ss-6.1.3.2-27.4 libreoffice-l10n-st-6.1.3.2-27.4 libreoffice-l10n-sv-6.1.3.2-27.4 libreoffice-l10n-sw_TZ-6.1.3.2-27.4 libreoffice-l10n-ta-6.1.3.2-27.4 libreoffice-l10n-te-6.1.3.2-27.4 libreoffice-l10n-tg-6.1.3.2-27.4 libreoffice-l10n-th-6.1.3.2-27.4 libreoffice-l10n-tn-6.1.3.2-27.4 libreoffice-l10n-tr-6.1.3.2-27.4 libreoffice-l10n-ts-6.1.3.2-27.4 libreoffice-l10n-tt-6.1.3.2-27.4 libreoffice-l10n-ug-6.1.3.2-27.4 libreoffice-l10n-uk-6.1.3.2-27.4 libreoffice-l10n-uz-6.1.3.2-27.4 libreoffice-l10n-ve-6.1.3.2-27.4 libreoffice-l10n-vec-6.1.3.2-27.4 libreoffice-l10n-vi-6.1.3.2-27.4 libreoffice-l10n-xh-6.1.3.2-27.4 libreoffice-l10n-zh_CN-6.1.3.2-27.4 libreoffice-l10n-zh_TW-6.1.3.2-27.4 libreoffice-l10n-zu-6.1.3.2-27.4 libstaroffice-devel-doc-0.0.6-2.6.1 myspell-af_NA-20181025-13.1 myspell-af_ZA-20181025-13.1 myspell-an-20181025-13.1 myspell-an_ES-20181025-13.1 myspell-ar-20181025-13.1 myspell-ar_AE-20181025-13.1 myspell-ar_BH-20181025-13.1 myspell-ar_DZ-20181025-13.1 myspell-ar_EG-20181025-13.1 myspell-ar_IQ-20181025-13.1 myspell-ar_JO-20181025-13.1 myspell-ar_KW-20181025-13.1 myspell-ar_LB-20181025-13.1 myspell-ar_LY-20181025-13.1 myspell-ar_MA-20181025-13.1 myspell-ar_OM-20181025-13.1 myspell-ar_QA-20181025-13.1 myspell-ar_SA-20181025-13.1 myspell-ar_SD-20181025-13.1 myspell-ar_SY-20181025-13.1 myspell-ar_TN-20181025-13.1 myspell-ar_YE-20181025-13.1 myspell-be_BY-20181025-13.1 myspell-bg_BG-20181025-13.1 myspell-bn_BD-20181025-13.1 myspell-bn_IN-20181025-13.1 myspell-bo-20181025-13.1 myspell-bo_CN-20181025-13.1 myspell-bo_IN-20181025-13.1 myspell-br_FR-20181025-13.1 myspell-bs-20181025-13.1 myspell-bs_BA-20181025-13.1 myspell-ca-20181025-13.1 myspell-ca_AD-20181025-13.1 myspell-ca_ES-20181025-13.1 myspell-ca_ES_valencia-20181025-13.1 myspell-ca_FR-20181025-13.1 myspell-ca_IT-20181025-13.1 myspell-cs_CZ-20181025-13.1 myspell-da_DK-20181025-13.1 myspell-de-20181025-13.1 myspell-de_AT-20181025-13.1 myspell-de_CH-20181025-13.1 myspell-de_DE-20181025-13.1 myspell-el_GR-20181025-13.1 myspell-en-20181025-13.1 myspell-en_AU-20181025-13.1 myspell-en_BS-20181025-13.1 myspell-en_BZ-20181025-13.1 myspell-en_CA-20181025-13.1 myspell-en_GB-20181025-13.1 myspell-en_GH-20181025-13.1 myspell-en_IE-20181025-13.1 myspell-en_IN-20181025-13.1 myspell-en_JM-20181025-13.1 myspell-en_MW-20181025-13.1 myspell-en_NA-20181025-13.1 myspell-en_NZ-20181025-13.1 myspell-en_PH-20181025-13.1 myspell-en_TT-20181025-13.1 myspell-en_US-20181025-13.1 myspell-en_ZA-20181025-13.1 myspell-en_ZW-20181025-13.1 myspell-es-20181025-13.1 myspell-es_AR-20181025-13.1 myspell-es_BO-20181025-13.1 myspell-es_CL-20181025-13.1 myspell-es_CO-20181025-13.1 myspell-es_CR-20181025-13.1 myspell-es_CU-20181025-13.1 myspell-es_DO-20181025-13.1 myspell-es_EC-20181025-13.1 myspell-es_ES-20181025-13.1 myspell-es_GT-20181025-13.1 myspell-es_HN-20181025-13.1 myspell-es_MX-20181025-13.1 myspell-es_NI-20181025-13.1 myspell-es_PA-20181025-13.1 myspell-es_PE-20181025-13.1 myspell-es_PR-20181025-13.1 myspell-es_PY-20181025-13.1 myspell-es_SV-20181025-13.1 myspell-es_UY-20181025-13.1 myspell-es_VE-20181025-13.1 myspell-et_EE-20181025-13.1 myspell-fr_BE-20181025-13.1 myspell-fr_CA-20181025-13.1 myspell-fr_CH-20181025-13.1 myspell-fr_FR-20181025-13.1 myspell-fr_LU-20181025-13.1 myspell-fr_MC-20181025-13.1 myspell-gd_GB-20181025-13.1 myspell-gl-20181025-13.1 myspell-gl_ES-20181025-13.1 myspell-gu_IN-20181025-13.1 myspell-gug-20181025-13.1 myspell-gug_PY-20181025-13.1 myspell-he_IL-20181025-13.1 myspell-hi_IN-20181025-13.1 myspell-hr_HR-20181025-13.1 myspell-hu_HU-20181025-13.1 myspell-id-20181025-13.1 myspell-id_ID-20181025-13.1 myspell-is-20181025-13.1 myspell-is_IS-20181025-13.1 myspell-it_IT-20181025-13.1 myspell-kmr_Latn-20181025-13.1 myspell-kmr_Latn_SY-20181025-13.1 myspell-kmr_Latn_TR-20181025-13.1 myspell-lo_LA-20181025-13.1 myspell-lt_LT-20181025-13.1 myspell-lv_LV-20181025-13.1 myspell-nb_NO-20181025-13.1 myspell-ne_NP-20181025-13.1 myspell-nl_BE-20181025-13.1 myspell-nl_NL-20181025-13.1 myspell-nn_NO-20181025-13.1 myspell-no-20181025-13.1 myspell-oc_FR-20181025-13.1 myspell-pl_PL-20181025-13.1 myspell-pt_AO-20181025-13.1 myspell-pt_BR-20181025-13.1 myspell-pt_PT-20181025-13.1 myspell-ro-20181025-13.1 myspell-ro_RO-20181025-13.1 myspell-ru_RU-20181025-13.1 myspell-si_LK-20181025-13.1 myspell-sk_SK-20181025-13.1 myspell-sl_SI-20181025-13.1 myspell-sq_AL-20181025-13.1 myspell-sr-20181025-13.1 myspell-sr_CS-20181025-13.1 myspell-sr_Latn_CS-20181025-13.1 myspell-sr_Latn_RS-20181025-13.1 myspell-sr_RS-20181025-13.1 myspell-sv_FI-20181025-13.1 myspell-sv_SE-20181025-13.1 myspell-sw_TZ-20181025-13.1 myspell-te-20181025-13.1 myspell-te_IN-20181025-13.1 myspell-th_TH-20181025-13.1 myspell-tr-20181025-13.1 myspell-tr_TR-20181025-13.1 myspell-uk_UA-20181025-13.1 myspell-vi-20181025-13.1 myspell-vi_VN-20181025-13.1 myspell-zu_ZA-20181025-13.1 References: https://bugzilla.suse.com/1050305 https://bugzilla.suse.com/1094779 https://bugzilla.suse.com/1096360 https://bugzilla.suse.com/1104876

1 0

openSUSE-SU-2018:4287-1: important: Security update for netatalk
by opensuse-security＠opensuse.org 28 Dec '18

28 Dec '18

openSUSE Security Update: Security update for netatalk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4287-1 Rating: important References: #1119540 Cross-References: CVE-2018-1160 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for netatalk fixes the following issues: Security issue fixed: - CVE-2018-1160 Fixed a missing bounds check in the handling of the DSI OPEN SESSION request, which allowed an unauthenticated to overwrite memory with data of their choice leading for arbitrary code execution with root privileges. (bsc#1119540) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1614=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libatalk16-3.1.7-8.3.1 libatalk16-debuginfo-3.1.7-8.3.1 netatalk-3.1.7-8.3.1 netatalk-debuginfo-3.1.7-8.3.1 netatalk-debugsource-3.1.7-8.3.1 netatalk-devel-3.1.7-8.3.1 References: https://www.suse.com/security/cve/CVE-2018-1160.html https://bugzilla.suse.com/1119540

1 0

openSUSE-RU-2018:4286-1: moderate: Recommended update for endless-sky
by maintenance＠opensuse.org 28 Dec '18

28 Dec '18

openSUSE Recommended Update: Recommended update for endless-sky ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4286-1 Rating: moderate References: #1119628 #1119674 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for endless-sky fixes the following issues: - Prevent that the game blocks the main menu buttons due to broken symlinks in the data directory caused by brp-25-symlink not handling spaces in paths properly (boo#1119628, boo#1119674) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1615=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1615=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2018-1615=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): endless-sky-0.9.6-2.3.1 endless-sky-debuginfo-0.9.6-2.3.1 - openSUSE Leap 15.0 (x86_64): endless-sky-0.9.6-lp150.2.3.1 endless-sky-debuginfo-0.9.6-lp150.2.3.1 - openSUSE Backports SLE-15 (x86_64): endless-sky-0.9.6-bp150.3.3.1 endless-sky-debuginfo-0.9.6-bp150.3.3.1 References: https://bugzilla.suse.com/1119628 https://bugzilla.suse.com/1119674

1 0

openSUSE-RU-2018:4285-1: Recommended update for kubectl
by maintenance＠opensuse.org 28 Dec '18

28 Dec '18

openSUSE Recommended Update: Recommended update for kubectl ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4285-1 Rating: low References: #1119713 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update to kubectl updates the package to the same version (1.10.11) as in the SUSE CaaS Platform (bsc#1119713) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1616=1 Package List: - openSUSE Leap 15.0 (x86_64): kubectl-1.10.11-lp150.6.1 References: https://bugzilla.suse.com/1119713

1 0

openSUSE-SU-2018:4283-1: moderate: Security update for mozilla-nspr and mozilla-nss
by opensuse-security＠opensuse.org 28 Dec '18

28 Dec '18

openSUSE Security Update: Security update for mozilla-nspr and mozilla-nss ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4283-1 Rating: moderate References: #1097410 #1119105 Cross-References: CVE-2018-0495 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for mozilla-nss and mozilla-nspr fixes the following issues: Issues fixed in mozilla-nss: - Update to NSS 3.40.1 (bsc#1119105) - CVE-2018-12404: Fixed a cache side-channel variant of the Bleichenbacher attack (bsc#1119069) - CVE-2018-12384: Fixed an issue in the SSL handshake. NSS responded to an SSLv2-compatible ClientHello with a ServerHello that had an all-zero random. (bsc#1106873) - CVE-2018-0495: Fixed a memory-cache side-channel attack with ECDSA signatures (bsc#1097410) - Fixed a decryption failure during FFDHE key exchange - Various security fixes in the ASN.1 code Issues fixed in mozilla-nspr: - Update mozilla-nspr to 4.20 (bsc#1119105) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1618=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libfreebl3-3.40.1-lp150.2.10.2 libfreebl3-debuginfo-3.40.1-lp150.2.10.2 libsoftokn3-3.40.1-lp150.2.10.2 libsoftokn3-debuginfo-3.40.1-lp150.2.10.2 mozilla-nspr-4.20-lp150.2.3.1 mozilla-nspr-debuginfo-4.20-lp150.2.3.1 mozilla-nspr-debugsource-4.20-lp150.2.3.1 mozilla-nspr-devel-4.20-lp150.2.3.1 mozilla-nss-3.40.1-lp150.2.10.2 mozilla-nss-certs-3.40.1-lp150.2.10.2 mozilla-nss-certs-debuginfo-3.40.1-lp150.2.10.2 mozilla-nss-debuginfo-3.40.1-lp150.2.10.2 mozilla-nss-debugsource-3.40.1-lp150.2.10.2 mozilla-nss-devel-3.40.1-lp150.2.10.2 mozilla-nss-sysinit-3.40.1-lp150.2.10.2 mozilla-nss-sysinit-debuginfo-3.40.1-lp150.2.10.2 mozilla-nss-tools-3.40.1-lp150.2.10.2 mozilla-nss-tools-debuginfo-3.40.1-lp150.2.10.2 - openSUSE Leap 15.0 (x86_64): libfreebl3-32bit-3.40.1-lp150.2.10.2 libfreebl3-32bit-debuginfo-3.40.1-lp150.2.10.2 libsoftokn3-32bit-3.40.1-lp150.2.10.2 libsoftokn3-32bit-debuginfo-3.40.1-lp150.2.10.2 mozilla-nspr-32bit-4.20-lp150.2.3.1 mozilla-nspr-32bit-debuginfo-4.20-lp150.2.3.1 mozilla-nss-32bit-3.40.1-lp150.2.10.2 mozilla-nss-32bit-debuginfo-3.40.1-lp150.2.10.2 mozilla-nss-certs-32bit-3.40.1-lp150.2.10.2 mozilla-nss-certs-32bit-debuginfo-3.40.1-lp150.2.10.2 mozilla-nss-sysinit-32bit-3.40.1-lp150.2.10.2 mozilla-nss-sysinit-32bit-debuginfo-3.40.1-lp150.2.10.2 References: https://www.suse.com/security/cve/CVE-2018-0495.html https://bugzilla.suse.com/1097410 https://bugzilla.suse.com/1119105

1 0

openSUSE-SU-2018:4282-1: moderate: Security update for polkit
by opensuse-security＠opensuse.org 28 Dec '18

28 Dec '18

openSUSE Security Update: Security update for polkit ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4282-1 Rating: moderate References: #1118277 Cross-References: CVE-2018-19788 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for polkit fixes the following issues: Security issue fixed: - CVE-2018-19788: Fixed handling of UIDs over MAX_UINT (boo#1118277) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1617=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libpolkit0-0.113-14.6.1 libpolkit0-debuginfo-0.113-14.6.1 polkit-0.113-14.6.1 polkit-debuginfo-0.113-14.6.1 polkit-debugsource-0.113-14.6.1 polkit-devel-0.113-14.6.1 polkit-devel-debuginfo-0.113-14.6.1 typelib-1_0-Polkit-1_0-0.113-14.6.1 - openSUSE Leap 42.3 (noarch): polkit-doc-0.113-14.6.1 - openSUSE Leap 42.3 (x86_64): libpolkit0-32bit-0.113-14.6.1 libpolkit0-debuginfo-32bit-0.113-14.6.1 References: https://www.suse.com/security/cve/CVE-2018-19788.html https://bugzilla.suse.com/1118277

1 0

openSUSE-RU-2018:4280-1: moderate: Recommended update for gtg
by maintenance＠opensuse.org 28 Dec '18

28 Dec '18

openSUSE Recommended Update: Recommended update for gtg ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4280-1 Rating: moderate References: #1042118 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gtg fixes the following issues: - gtg may have crashed when python-notify is not installed (boo#1042118) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1613=1 Package List: - openSUSE Leap 42.3 (noarch): gtg-0.3.1-11.5.1 gtg-lang-0.3.1-11.5.1 References: https://bugzilla.suse.com/1042118

1 0

openSUSE-RU-2018:4276-1: moderate: Recommended update for erlang
by maintenance＠opensuse.org 27 Dec '18

27 Dec '18

openSUSE Recommended Update: Recommended update for erlang ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4276-1 Rating: moderate References: #1118867 #1118869 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for erlang fixes the following issues: Erlang was updated to 18.3.4.11 (boo#1118867) or to 20.3.8.15 (boo#1118869) Changes for 18.3.4.11: * stdlib: List subtraction (The -- operator) will now yield properly on large inputs. * erts: List subtraction (The -- operator) will now yield properly on large inputs. * erts: Fixed small memory leak that could occur when sending to a terminating port. * ssh: Fix rare spurios shutdowns of ssh servers when receiveing {'EXIT',_,normal} messages. * ssh: Default exec is disabled when a user-defined shell is enabled Changes for 20.3.8.15: * asn1: Handle erroneous length during decode (BER only) without crashing. * ssh: Incompatibility with newer OpenSSH fixed. Previously versions 7.8 and later could cause Erlang SSH to exit. * ssl: Add engine support for RSA key exchange * erts: List subtraction (The -- operator) will now yield properly on large inputs. * stdlib: List subtraction (The -- operator) will now yield properly on large inputs. * ssl: Extend check for undelivered data at closing, could under some circumstances fail to deliverd all data that was acctualy recivied. * erts: ERTS internal trees of monitor structures could get into an inconsistent state. This could cause 'DOWN' messages not to be delivered when they should, as well as delivery of 'DOWN' messages that should not be delivered. * erts: Fixed bug in ets:select_replace when called with a fully bound key could cause a following call to ets:next or ets:prev to crash the emulator or return invalid result. * eldap: A race condition at close could cause the eldap client to exit with a badarg message as cause. - http://erlang.org/download/OTP-20.3.8.9.README * Fix a regression in OTP-15204 that removed .beam file metadata - http://erlang.org/download/OTP-20.3.8.8.README * inets: Do not use chunked-encoding with 1xx, 204 and 304 responses when using mod_esi * inets: Add robust handling of chunked-encoded HTTP responses with an empty body (1xx, 204, 304) - Changes for 20.3.8.7: - http://erlang.org/download/OTP-20.3.8.7.README * crypto: Update the crypto engine functions to handle multiple loads of an engine * mnesia: Fixed a bug where the bag table index data was not deleted when objects were deleted. * inets: Change status code for no mod found to handle request to 501 * erts: Fixed a bug causing some Erlang references to be inconsistently ordered. This could for example cause failure to look up certain elements with references as keys in search data structures. This bug was introduced in R13B02. Thanks to Simon Cornish for finding the bug and supplying a fix. * compiler: Fixed an issue where files compiled with the +deterministic option differed if they were compiled in a different directory but were otherwise identical. * crypto: Fixed a node crash in crypto:compute_key(ecdh, ...) when passing a wrongly typed Others argument. * erts: Fixed a bug which caused an emulator crash when enif_send() was called by a NIF that executed on a dirty scheduler. The bug was either triggered when the NIF called enif_send() without a message environment, or when the process executing the NIF was send traced. * erts: Fixed a bug causing some Erlang references to be inconsistently ordered. This could for example cause failure to look up certain elements with references as keys in search data structures. This bug was introduced in R13B02. Thanks to Simon Cornish for finding the bug and supplying a fix. * mnesia: When master node is set do not force a load from ram_copies replica when there are no available disc_copies, since that would load an empty table. Wait until a disk replica is available or until user explicitly force_loads the table. * mnesia: Allow to add replicas even if all other replicas are down when the other replicase are not stored on disk. * ssl: Correct handling of empty server SNI extension * ssl: Correct cipher suite handling for ECDHE_*, the incorrect handling could cause an incorrrect suite to be selected and most likly fail the handshake. * asn1: A bug in ASN.1 BER decoding has been fixed. When decoding a recursively enclosed term the length was not propagated to that term decoding, so if the length of the enclosed term was longer than the enclosing that error was not dectected. A hard coded C stack limitation for decoding recursive ASN.1 terms has been introduced. This is currently set to 8 kWords giving a nesting depth of about 1000 levels. Deeper terms can not be decoded, which should not be much of a real world limitation. * erts: Fixed a race condition in the inet driver that could cause receive to hang when the emulator was compiled with gcc8. * erts: Fix bug in generation of erl_crash.dump, which could cause VM to crash. Bug exist since erts-9.2 (OTP-20.2). * ic: Fixed potential buffer overflow bugs in oe_ei_encode_long/ulong/longlong/ulonglong functions on 64-bit architectures. These functions expect 32 bit integers as the IDL type "long" is defined as 32 bits. But there is nothing preventing user code from "breaking" the interface and pass larger values on 64-bit architectures where the C type "long" is 64 bits. * inets: Enhance error handling, that is mod_get will return 403 if a path is a directory and not a file. * kernel: Non semantic change in dist_util.erl to silence dialyzer warning. * ssl: Improve cipher suite handling correcting ECC and TLS-1.2 requierments. Backport of solution for ERL-641 * ssl: Option keyfile defaults to certfile and should be trumped with key. This failed for engine keys. * erl_interface: Make ei_connect and friends also accept state ok_simultaneous during handshake, which means the other node has initiated a connection setup that will be cancelled in favor of this connection. * erts: Fixed a rare bug that could cause processes to be scheduled after they had been freed. * ic: Fixed bug in ic causing potential buffer overrun in funtion oe_ei_encode_atom. Bug exists since ic-4.4.4 (OTP-20.3.4). * kernel: Fix some potential buggy behavior in how ticks are sent on inter node distribution connections. Tick is now sent to c-node even if there are unsent buffered data, as c-nodes need ticks in order to send reply ticks. The amount of sent data was also calculated wrongly when ticks were suppressed due to unsent buffered data. * inets: Options added for setting low-level properties on the underlying TCP connections. The options are: sock_ctrl, sock_data_act and sock_data_pass. See the manual for details. * ssh: SFTP clients reported the error reason "" if a non-OTP sftp server was killed during a long file transmission. Now the signal name (for example "KILL") will be the error reason if the server's reason is empty. The documentation also lacked type information about this class of errors. * ssh: Fix ssh_sftp decode error for sftp protocol version 4 * syntax_tools: Fix a bug regarding reverting map types. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2018-1611=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 x86_64): erlang-18.3.4.11-12.1 erlang-debugger-18.3.4.11-12.1 erlang-debugger-src-18.3.4.11-12.1 erlang-dialyzer-18.3.4.11-12.1 erlang-dialyzer-src-18.3.4.11-12.1 erlang-diameter-18.3.4.11-12.1 erlang-diameter-src-18.3.4.11-12.1 erlang-doc-18.3.4.11-12.1 erlang-epmd-18.3.4.11-12.1 erlang-et-18.3.4.11-12.1 erlang-et-src-18.3.4.11-12.1 erlang-gs-18.3.4.11-12.1 erlang-gs-src-18.3.4.11-12.1 erlang-jinterface-18.3.4.11-12.1 erlang-jinterface-src-18.3.4.11-12.1 erlang-observer-18.3.4.11-12.1 erlang-observer-src-18.3.4.11-12.1 erlang-reltool-18.3.4.11-12.1 erlang-reltool-src-18.3.4.11-12.1 erlang-src-18.3.4.11-12.1 erlang-wx-18.3.4.11-12.1 erlang-wx-src-18.3.4.11-12.1 References: https://bugzilla.suse.com/1118867 https://bugzilla.suse.com/1118869

1 0

openSUSE-RU-2018:4275-1: moderate: Recommended update for erlang
by maintenance＠opensuse.org 27 Dec '18

27 Dec '18

openSUSE Recommended Update: Recommended update for erlang ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4275-1 Rating: moderate References: #1118867 #1118869 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for erlang fixes the following issues: Erlang was updated to 18.3.4.11 (boo#1118867) or to 20.3.8.15 (boo#1118869) Changes for 18.3.4.11: * stdlib: List subtraction (The -- operator) will now yield properly on large inputs. * erts: List subtraction (The -- operator) will now yield properly on large inputs. * erts: Fixed small memory leak that could occur when sending to a terminating port. * ssh: Fix rare spurios shutdowns of ssh servers when receiveing {'EXIT',_,normal} messages. * ssh: Default exec is disabled when a user-defined shell is enabled Changes for 20.3.8.15: * asn1: Handle erroneous length during decode (BER only) without crashing. * ssh: Incompatibility with newer OpenSSH fixed. Previously versions 7.8 and later could cause Erlang SSH to exit. * ssl: Add engine support for RSA key exchange * erts: List subtraction (The -- operator) will now yield properly on large inputs. * stdlib: List subtraction (The -- operator) will now yield properly on large inputs. * ssl: Extend check for undelivered data at closing, could under some circumstances fail to deliverd all data that was acctualy recivied. * erts: ERTS internal trees of monitor structures could get into an inconsistent state. This could cause 'DOWN' messages not to be delivered when they should, as well as delivery of 'DOWN' messages that should not be delivered. * erts: Fixed bug in ets:select_replace when called with a fully bound key could cause a following call to ets:next or ets:prev to crash the emulator or return invalid result. * eldap: A race condition at close could cause the eldap client to exit with a badarg message as cause. - http://erlang.org/download/OTP-20.3.8.9.README * Fix a regression in OTP-15204 that removed .beam file metadata - http://erlang.org/download/OTP-20.3.8.8.README * inets: Do not use chunked-encoding with 1xx, 204 and 304 responses when using mod_esi * inets: Add robust handling of chunked-encoded HTTP responses with an empty body (1xx, 204, 304) - Changes for 20.3.8.7: - http://erlang.org/download/OTP-20.3.8.7.README * crypto: Update the crypto engine functions to handle multiple loads of an engine * mnesia: Fixed a bug where the bag table index data was not deleted when objects were deleted. * inets: Change status code for no mod found to handle request to 501 * erts: Fixed a bug causing some Erlang references to be inconsistently ordered. This could for example cause failure to look up certain elements with references as keys in search data structures. This bug was introduced in R13B02. Thanks to Simon Cornish for finding the bug and supplying a fix. * compiler: Fixed an issue where files compiled with the +deterministic option differed if they were compiled in a different directory but were otherwise identical. * crypto: Fixed a node crash in crypto:compute_key(ecdh, ...) when passing a wrongly typed Others argument. * erts: Fixed a bug which caused an emulator crash when enif_send() was called by a NIF that executed on a dirty scheduler. The bug was either triggered when the NIF called enif_send() without a message environment, or when the process executing the NIF was send traced. * erts: Fixed a bug causing some Erlang references to be inconsistently ordered. This could for example cause failure to look up certain elements with references as keys in search data structures. This bug was introduced in R13B02. Thanks to Simon Cornish for finding the bug and supplying a fix. * mnesia: When master node is set do not force a load from ram_copies replica when there are no available disc_copies, since that would load an empty table. Wait until a disk replica is available or until user explicitly force_loads the table. * mnesia: Allow to add replicas even if all other replicas are down when the other replicase are not stored on disk. * ssl: Correct handling of empty server SNI extension * ssl: Correct cipher suite handling for ECDHE_*, the incorrect handling could cause an incorrrect suite to be selected and most likly fail the handshake. * asn1: A bug in ASN.1 BER decoding has been fixed. When decoding a recursively enclosed term the length was not propagated to that term decoding, so if the length of the enclosed term was longer than the enclosing that error was not dectected. A hard coded C stack limitation for decoding recursive ASN.1 terms has been introduced. This is currently set to 8 kWords giving a nesting depth of about 1000 levels. Deeper terms can not be decoded, which should not be much of a real world limitation. * erts: Fixed a race condition in the inet driver that could cause receive to hang when the emulator was compiled with gcc8. * erts: Fix bug in generation of erl_crash.dump, which could cause VM to crash. Bug exist since erts-9.2 (OTP-20.2). * ic: Fixed potential buffer overflow bugs in oe_ei_encode_long/ulong/longlong/ulonglong functions on 64-bit architectures. These functions expect 32 bit integers as the IDL type "long" is defined as 32 bits. But there is nothing preventing user code from "breaking" the interface and pass larger values on 64-bit architectures where the C type "long" is 64 bits. * inets: Enhance error handling, that is mod_get will return 403 if a path is a directory and not a file. * kernel: Non semantic change in dist_util.erl to silence dialyzer warning. * ssl: Improve cipher suite handling correcting ECC and TLS-1.2 requierments. Backport of solution for ERL-641 * ssl: Option keyfile defaults to certfile and should be trumped with key. This failed for engine keys. * erl_interface: Make ei_connect and friends also accept state ok_simultaneous during handshake, which means the other node has initiated a connection setup that will be cancelled in favor of this connection. * erts: Fixed a rare bug that could cause processes to be scheduled after they had been freed. * ic: Fixed bug in ic causing potential buffer overrun in funtion oe_ei_encode_atom. Bug exists since ic-4.4.4 (OTP-20.3.4). * kernel: Fix some potential buggy behavior in how ticks are sent on inter node distribution connections. Tick is now sent to c-node even if there are unsent buffered data, as c-nodes need ticks in order to send reply ticks. The amount of sent data was also calculated wrongly when ticks were suppressed due to unsent buffered data. * inets: Options added for setting low-level properties on the underlying TCP connections. The options are: sock_ctrl, sock_data_act and sock_data_pass. See the manual for details. * ssh: SFTP clients reported the error reason "" if a non-OTP sftp server was killed during a long file transmission. Now the signal name (for example "KILL") will be the error reason if the server's reason is empty. The documentation also lacked type information about this class of errors. * ssh: Fix ssh_sftp decode error for sftp protocol version 4 * syntax_tools: Fix a bug regarding reverting map types. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1611=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1611=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2018-1611=1 Package List: - openSUSE Leap 42.3 (x86_64): erlang-18.3.4.11-9.3 erlang-debugger-18.3.4.11-9.3 erlang-debugger-src-18.3.4.11-9.3 erlang-debuginfo-18.3.4.11-9.3 erlang-debugsource-18.3.4.11-9.3 erlang-dialyzer-18.3.4.11-9.3 erlang-dialyzer-debuginfo-18.3.4.11-9.3 erlang-dialyzer-src-18.3.4.11-9.3 erlang-diameter-18.3.4.11-9.3 erlang-diameter-src-18.3.4.11-9.3 erlang-doc-18.3.4.11-9.3 erlang-epmd-18.3.4.11-9.3 erlang-epmd-debuginfo-18.3.4.11-9.3 erlang-et-18.3.4.11-9.3 erlang-et-src-18.3.4.11-9.3 erlang-gs-18.3.4.11-9.3 erlang-gs-src-18.3.4.11-9.3 erlang-jinterface-18.3.4.11-9.3 erlang-jinterface-src-18.3.4.11-9.3 erlang-observer-18.3.4.11-9.3 erlang-observer-src-18.3.4.11-9.3 erlang-reltool-18.3.4.11-9.3 erlang-reltool-src-18.3.4.11-9.3 erlang-src-18.3.4.11-9.3 erlang-wx-18.3.4.11-9.3 erlang-wx-debuginfo-18.3.4.11-9.3 erlang-wx-src-18.3.4.11-9.3 - openSUSE Leap 15.0 (x86_64): erlang-20.3.8.15-lp150.2.3.4 erlang-debugger-20.3.8.15-lp150.2.3.4 erlang-debugger-src-20.3.8.15-lp150.2.3.4 erlang-debuginfo-20.3.8.15-lp150.2.3.4 erlang-debugsource-20.3.8.15-lp150.2.3.4 erlang-dialyzer-20.3.8.15-lp150.2.3.4 erlang-dialyzer-debuginfo-20.3.8.15-lp150.2.3.4 erlang-dialyzer-src-20.3.8.15-lp150.2.3.4 erlang-diameter-20.3.8.15-lp150.2.3.4 erlang-diameter-src-20.3.8.15-lp150.2.3.4 erlang-doc-20.3.8.15-lp150.2.3.4 erlang-epmd-20.3.8.15-lp150.2.3.4 erlang-epmd-debuginfo-20.3.8.15-lp150.2.3.4 erlang-et-20.3.8.15-lp150.2.3.4 erlang-et-src-20.3.8.15-lp150.2.3.4 erlang-jinterface-20.3.8.15-lp150.2.3.4 erlang-jinterface-src-20.3.8.15-lp150.2.3.4 erlang-observer-20.3.8.15-lp150.2.3.4 erlang-observer-src-20.3.8.15-lp150.2.3.4 erlang-reltool-20.3.8.15-lp150.2.3.4 erlang-reltool-src-20.3.8.15-lp150.2.3.4 erlang-src-20.3.8.15-lp150.2.3.4 erlang-wx-20.3.8.15-lp150.2.3.4 erlang-wx-debuginfo-20.3.8.15-lp150.2.3.4 erlang-wx-src-20.3.8.15-lp150.2.3.4 - openSUSE Backports SLE-15 (x86_64): erlang-20.3.8.15-bp150.3.3.1 erlang-debugger-20.3.8.15-bp150.3.3.1 erlang-debugger-src-20.3.8.15-bp150.3.3.1 erlang-dialyzer-20.3.8.15-bp150.3.3.1 erlang-dialyzer-src-20.3.8.15-bp150.3.3.1 erlang-diameter-20.3.8.15-bp150.3.3.1 erlang-diameter-src-20.3.8.15-bp150.3.3.1 erlang-doc-20.3.8.15-bp150.3.3.1 erlang-epmd-20.3.8.15-bp150.3.3.1 erlang-et-20.3.8.15-bp150.3.3.1 erlang-et-src-20.3.8.15-bp150.3.3.1 erlang-jinterface-20.3.8.15-bp150.3.3.1 erlang-jinterface-src-20.3.8.15-bp150.3.3.1 erlang-observer-20.3.8.15-bp150.3.3.1 erlang-observer-src-20.3.8.15-bp150.3.3.1 erlang-reltool-20.3.8.15-bp150.3.3.1 erlang-reltool-src-20.3.8.15-bp150.3.3.1 erlang-src-20.3.8.15-bp150.3.3.1 erlang-wx-20.3.8.15-bp150.3.3.1 erlang-wx-src-20.3.8.15-bp150.3.3.1 References: https://bugzilla.suse.com/1118867 https://bugzilla.suse.com/1118869

1 0

openSUSE-RU-2018:4273-1: moderate: Recommended update for libgcrypt
by maintenance＠opensuse.org 23 Dec '18

23 Dec '18

openSUSE Recommended Update: Recommended update for libgcrypt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4273-1 Rating: moderate References: #1117355 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libgcrypt provides the following fix: - Fail selftests when checksum file is missing in FIPS mode only. (bsc#1117355) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1607=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libgcrypt-cavs-1.6.1-48.1 libgcrypt-cavs-debuginfo-1.6.1-48.1 libgcrypt-debugsource-1.6.1-48.1 libgcrypt-devel-1.6.1-48.1 libgcrypt-devel-debuginfo-1.6.1-48.1 libgcrypt20-1.6.1-48.1 libgcrypt20-debuginfo-1.6.1-48.1 libgcrypt20-hmac-1.6.1-48.1 - openSUSE Leap 42.3 (x86_64): libgcrypt-devel-32bit-1.6.1-48.1 libgcrypt-devel-debuginfo-32bit-1.6.1-48.1 libgcrypt20-32bit-1.6.1-48.1 libgcrypt20-debuginfo-32bit-1.6.1-48.1 libgcrypt20-hmac-32bit-1.6.1-48.1 References: https://bugzilla.suse.com/1117355

1 0

openSUSE-SU-2018:4272-1: important: Security update for yast2-rmt
by opensuse-security＠opensuse.org 23 Dec '18

23 Dec '18

openSUSE Security Update: Security update for yast2-rmt ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4272-1 Rating: important References: #1117602 Cross-References: CVE-2018-17957 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for yast2-rmt to version 1.1.12 fixes the following issues: Security issue fixed: - CVE-2018-17957: Secure MySQL credentials by not exposing them on the command line (bsc#1117602) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1604=1 Package List: - openSUSE Leap 15.0 (noarch): yast2-rmt-1.1.2-lp150.2.12.1 References: https://www.suse.com/security/cve/CVE-2018-17957.html https://bugzilla.suse.com/1117602

1 0