December 2018

openSUSE-SU-2018:4313-1: moderate: Security update for GraphicsMagick
by opensuse-security＠opensuse.org 29 Dec '18

29 Dec '18

openSUSE Security Update: Security update for GraphicsMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4313-1 Rating: moderate References: #1119790 #1119822 Cross-References: CVE-2018-20184 CVE-2018-20189 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now … [View More]

1 0

openSUSE-RU-2018:4312-1: Recommended update for rdma-core
by maintenance＠opensuse.org 29 Dec '18

29 Dec '18

openSUSE Recommended Update: Recommended update for rdma-core ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4312-1 Rating: low References: #1083169 #1086173 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for rdma-core … [View More]provides the following fixes: - Fix rcopy on QLogic hardware. (bsc#1083169) - Add Provide/Obsolete for librdmacm in librdmacm1. (bsc#1086173) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1629=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): ibacm-14-11.1 ibacm-debuginfo-14-11.1 iwpmd-14-11.1 iwpmd-debuginfo-14-11.1 libibcm1-14-11.1 libibcm1-debuginfo-14-11.1 libibumad3-14-11.1 libibumad3-debuginfo-14-11.1 libibverbs-14-11.1 libibverbs-debuginfo-14-11.1 libibverbs-utils-14-11.1 libibverbs-utils-debuginfo-14-11.1 libibverbs1-14-11.1 libibverbs1-debuginfo-14-11.1 libmlx5-1-14-11.1 libmlx5-1-debuginfo-14-11.1 librdmacm-utils-14-11.1 librdmacm-utils-debuginfo-14-11.1 librdmacm1-14-11.1 librdmacm1-debuginfo-14-11.1 rdma-core-14-11.1 rdma-core-debugsource-14-11.1 rdma-core-devel-14-11.1 rdma-ndd-14-11.1 rdma-ndd-debuginfo-14-11.1 rsocket-14-11.1 rsocket-debuginfo-14-11.1 srp_daemon-14-11.1 srp_daemon-debuginfo-14-11.1 - openSUSE Leap 42.3 (x86_64): libibcm1-32bit-14-11.1 libibcm1-debuginfo-32bit-14-11.1 libibumad3-32bit-14-11.1 libibumad3-debuginfo-32bit-14-11.1 libibverbs-32bit-14-11.1 libibverbs-debuginfo-32bit-14-11.1 libibverbs1-32bit-14-11.1 libibverbs1-debuginfo-32bit-14-11.1 libmlx5-1-32bit-14-11.1 libmlx5-1-debuginfo-32bit-14-11.1 librdmacm1-32bit-14-11.1 librdmacm1-debuginfo-32bit-14-11.1 rdma-core-devel-32bit-14-11.1 rsocket-32bit-14-11.1 rsocket-debuginfo-32bit-14-11.1 References: https://bugzilla.suse.com/1083169 https://bugzilla.suse.com/1086173 [View Less]

1 0

openSUSE-RU-2018:4311-1: moderate: Recommended update for yast2-instserver
by maintenance＠opensuse.org 29 Dec '18

29 Dec '18

openSUSE Recommended Update: Recommended update for yast2-instserver ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4311-1 Rating: moderate References: #1103621 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-… [View More]

1 0

openSUSE-RU-2018:4310-1: moderate: Recommended update for hwinfo
by maintenance＠opensuse.org 29 Dec '18

29 Dec '18

openSUSE Recommended Update: Recommended update for hwinfo ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4310-1 Rating: moderate References: #1018271 #1084700 #1107196 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update … [View More]

1 0

openSUSE-RU-2018:4309-1: moderate: Recommended update for selinux-policy
by maintenance＠opensuse.org 29 Dec '18

29 Dec '18

openSUSE Recommended Update: Recommended update for selinux-policy ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4309-1 Rating: moderate References: #1108949 #1109590 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for … [View More]

1 0

openSUSE-RU-2018:4308-1: moderate: Recommended update for libetpan
by maintenance＠opensuse.org 29 Dec '18

29 Dec '18

openSUSE Recommended Update: Recommended update for libetpan ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4308-1 Rating: moderate References: #1109660 Affected Products: openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one recommended fix can now be installed. … [View More]

1 0

openSUSE-SU-2018:4307-1: moderate: Security update for wireshark
by opensuse-security＠opensuse.org 29 Dec '18

29 Dec '18

openSUSE Security Update: Security update for wireshark ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4307-1 Rating: moderate References: #1117740 Cross-References: CVE-2018-19622 CVE-2018-19623 CVE-2018-19624 CVE-2018-19625 CVE-2018-19626 CVE-2018-19627 Affected Products: openSUSE Leap 15.0 … [View More]______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update for wireshark fixes the following issues: Update to Wireshark 2.4.11 (bsc#1117740). Security issues fixed: - CVE-2018-19625: The Wireshark dissection engine could crash (wnpa-sec-2018-51) - CVE-2018-19626: The DCOM dissector could crash (wnpa-sec-2018-52) - CVE-2018-19623: The LBMPDM dissector could crash (wnpa-sec-2018-53) - CVE-2018-19622: The MMSE dissector could go into an infinite loop (wnpa-sec-2018-54) - CVE-2018-19627: The IxVeriWave file parser could crash (wnpa-sec-2018-55) - CVE-2018-19624: The PVFS dissector could crash (wnpa-sec-2018-56) Further bug fixes and updated protocol support as listed in: - https://www.wireshark.org/docs/relnotes/wireshark-2.4.11.html This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1620=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libwireshark9-2.4.11-lp150.2.16.1 libwireshark9-debuginfo-2.4.11-lp150.2.16.1 libwiretap7-2.4.11-lp150.2.16.1 libwiretap7-debuginfo-2.4.11-lp150.2.16.1 libwscodecs1-2.4.11-lp150.2.16.1 libwscodecs1-debuginfo-2.4.11-lp150.2.16.1 libwsutil8-2.4.11-lp150.2.16.1 libwsutil8-debuginfo-2.4.11-lp150.2.16.1 wireshark-2.4.11-lp150.2.16.1 wireshark-debuginfo-2.4.11-lp150.2.16.1 wireshark-debugsource-2.4.11-lp150.2.16.1 wireshark-devel-2.4.11-lp150.2.16.1 wireshark-ui-qt-2.4.11-lp150.2.16.1 wireshark-ui-qt-debuginfo-2.4.11-lp150.2.16.1 References: https://www.suse.com/security/cve/CVE-2018-19622.html https://www.suse.com/security/cve/CVE-2018-19623.html https://www.suse.com/security/cve/CVE-2018-19624.html https://www.suse.com/security/cve/CVE-2018-19625.html https://www.suse.com/security/cve/CVE-2018-19626.html https://www.suse.com/security/cve/CVE-2018-19627.html https://bugzilla.suse.com/1117740 [View Less]

1 0

openSUSE-SU-2018:4306-1: important: Security update for containerd, docker and go
by opensuse-security＠opensuse.org 29 Dec '18

29 Dec '18

openSUSE Security Update: Security update for containerd, docker and go ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4306-1 Rating: important References: #1047218 #1074971 #1080978 #1081495 #1084533 #1086185 #1094680 #1095817 #1098017 #1102522 #1104821 #1105000 #1108038 #1113313 #1113978 #1114209 #1118897 #1118898 #1118899 #1119634 … [View More]

1 0

openSUSE-RU-2018:4305-1: moderate: Recommended update for nfs-utils
by maintenance＠opensuse.org 29 Dec '18

29 Dec '18

openSUSE Recommended Update: Recommended update for nfs-utils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4305-1 Rating: moderate References: #1109792 #1116221 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for nfs-… [View More]

1 0

openSUSE-SU-2018:4304-1: important: Security update for xen
by opensuse-security＠opensuse.org 29 Dec '18

29 Dec '18

openSUSE Security Update: Security update for xen ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4304-1 Rating: important References: #1027519 #1078292 #1091107 #1094508 #1103275 #1103276 #1103279 #1105528 #1108940 #1114405 #1115040 #1115045 #1115047 Cross-References: CVE-2018-15468 CVE-2018-15469 CVE-2018-15470 CVE-2018-18883 CVE-2018-19961 … [View More]CVE-2018-19962 CVE-2018-19965 CVE-2018-19966 CVE-2018-3646 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves 9 vulnerabilities and has four fixes is now available. Description: This update for xen fixes the following issues: Update to Xen 4.10.2 bug fix release (bsc#1027519). Security vulnerabilities fixed: - CVE-2018-19961, CVE-2018-19962: Fixed an issue related to insufficient TLB flushing with AMD IOMMUs, which potentially allowed a guest to escalate its privileges, may cause a Denial of Service (DoS) affecting the entire host, or may be able to access data it is not supposed to access. (XSA-275) (bsc#1115040) - CVE-2018-19965: Fixed an issue related to the INVPCID instruction in case non-canonical addresses are accessed, which may allow a guest to cause Xen to crash, resulting in a Denial of Service (DoS) affecting the entire host. (XSA-279) (bsc#1115045) - CVE-2018-19966: Fixed an issue related to a previous fix for XSA-240, which conflicted with shadow paging and allowed a guest to cause Xen to crash, resulting in a Denial of Service (DoS). (XSA-280) (bsc#1115047) - CVE-2018-18883: Fixed an issue related to inproper restriction of nested VT-x, which allowed a guest to cause Xen to crash, resulting in a Denial of Service (DoS). (XSA-278) (bsc#1114405) - CVE-2018-15468: Fixed incorrect MSR_DEBUGCTL handling, which allowed guests to enable Branch Trace Store and may cause a Denial of Service (DoS) of the entire host. (XSA-269) (bsc#1103276) - CVE-2018-15469: Fixed use of v2 grant tables on ARM, which were not properly implemented and may cause a Denial of Service (DoS). (XSA-268) (bsc#1103275) - CVE-2018-15470: Fixed an issue in the logic in oxenstored for handling writes, which allowed a guest to write memory unbounded leading to system-wide Denial of Service (DoS). (XSA-272) (bsc#1103279) - CVE-2018-3646: Mitigations for VMM aspects of L1 Terminal Fault (XSA-273) (bsc#1091107) Other bugs fixed: - Fixed an issue related to a domU hang on SLE12-SP3 HV (bsc#1108940) - Fixed an issue with xpti=no-dom0 not working as expected (bsc#1105528) - Fixed a kernel oops related to fs/dcache.c called by d_materialise_unique() (bsc#1094508) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1624=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): xen-debugsource-4.10.2_04-lp150.2.12.1 xen-devel-4.10.2_04-lp150.2.12.1 xen-libs-4.10.2_04-lp150.2.12.1 xen-libs-debuginfo-4.10.2_04-lp150.2.12.1 xen-tools-domU-4.10.2_04-lp150.2.12.1 xen-tools-domU-debuginfo-4.10.2_04-lp150.2.12.1 - openSUSE Leap 15.0 (x86_64): xen-4.10.2_04-lp150.2.12.1 xen-doc-html-4.10.2_04-lp150.2.12.1 xen-libs-32bit-4.10.2_04-lp150.2.12.1 xen-libs-32bit-debuginfo-4.10.2_04-lp150.2.12.1 xen-tools-4.10.2_04-lp150.2.12.1 xen-tools-debuginfo-4.10.2_04-lp150.2.12.1 References: https://www.suse.com/security/cve/CVE-2018-15468.html https://www.suse.com/security/cve/CVE-2018-15469.html https://www.suse.com/security/cve/CVE-2018-15470.html https://www.suse.com/security/cve/CVE-2018-18883.html https://www.suse.com/security/cve/CVE-2018-19961.html https://www.suse.com/security/cve/CVE-2018-19962.html https://www.suse.com/security/cve/CVE-2018-19965.html https://www.suse.com/security/cve/CVE-2018-19966.html https://www.suse.com/security/cve/CVE-2018-3646.html https://bugzilla.suse.com/1027519 https://bugzilla.suse.com/1078292 https://bugzilla.suse.com/1091107 https://bugzilla.suse.com/1094508 https://bugzilla.suse.com/1103275 https://bugzilla.suse.com/1103276 https://bugzilla.suse.com/1103279 https://bugzilla.suse.com/1105528 https://bugzilla.suse.com/1108940 https://bugzilla.suse.com/1114405 https://bugzilla.suse.com/1115040 https://bugzilla.suse.com/1115045 https://bugzilla.suse.com/1115047 [View Less]

1 0

openSUSE-RU-2018:4303-1: moderate: Recommended update for cloud-init
by maintenance＠opensuse.org 29 Dec '18

29 Dec '18

openSUSE Recommended Update: Recommended update for cloud-init ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4303-1 Rating: moderate References: #1087331 #1095627 #1097388 #1099340 #1101894 #1111427 #1114160 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has 7 recommended … [View More]fixes can now be installed. Description: This update for cloud-init provides the following fixes: - Fix a decoding error that could cause persisting the metadata to fail. (bsc#1101894) - Fix a problem that could cause static network to be configured with BOOTPROTO=none. (bsc#1114160) - Update to version 18.4, including the following fixes (bsc#1087331, bsc#1097388, bsc#1111427, bsc#1095627): * Avoid Python 3 dependency when building for distros with Python 2 support. * Add dhcp-client as requirement as cloud-init uses dhclient to setup a temporary network for metadata retrieval. * Use ds._crawled_metadata instance attribute if set when writing instance-data.json. * ec2: Update crawled metadata and add standardized keys. * lxd: Adjust to snap installed lxd. * Add support for Infiniband network interfaces (IPoIB). * cli: Add cloud-init query subcommand to query instance metadata. * stages: Fix bug causing datasource to have incorrect sys_cfg. * net_util: Ensure static configurations have netmask in translate_network result. * Fall back to root:root on syslog permissions if other options fail. * OpenStack: Support setting mac address on bond. * EphemeralIPv4Network: Be more explicit when adding default route. * OpenStack: Support reading of newer versions of metdata. * OpenStack: Fix a bug that was causing causing 'latest' version to be used from network. * user-data: Use jinja template to render instance-data.json in cloud-config. * config: Disable ssh access to a configured user account. * sysconfig: Refactor sysconfig to accept distro specific templates paths. * hyperv_reporting_handler: Simplify threaded publisher. * VMWare: Fix a network config bug in vm with static IPv4 and no gateway. * logging: Add logging config type hyperv for reporting via Azure KVP * Add datasource Oracle Compute Infrastructure (OCI). * azure: Allow azure to generate network configuration from IMDS per boot. * Scaleway: Add network configuration to the DataSource. * netplan: Correctly render macaddress on a bonds and bridges when provided. * tools: Add 'net-convert' subcommand command to 'cloud-init devel'. * Use typeset or local in profile.d scripts. * OpenNebula: Fix null gateway6. * tools: add '--debug' to tools/net-convert.py * update_metadata: A datasource can support network re-config every boot. * Retry on failed import of gpg receive keys. * tools: Fix run-container when neither source or binary package requested. - Changes from 18.3: * Explicitly prevent `sudo` access for user module. * lxd: Delete default network and detach device if lxd-init created them. * openstack: Avoid unneeded metadata probe on non-openstack platforms. * stages: Fix tracebacks if a module stage is undefined or empty. * Be safer on string/bytes when writing multipart user-data to disk. * Fix get_proc_env for pids that have non-utf8 content in environment. * netplan: Fix mtu if provided by network config for all rendered types. * subp: Support combine_capture argument. * util: Add get_linux_distro function to replace platform.dist * Do not use the systemd_prefix macro, not available in this environment. * openstack: Allow discovery in init-local using dhclient in a sandbox. * yaml_load/schema: Add invalid line and column nums to error message. * Azure: Ignore NTFS mount errors when checking ephemeral drive. * cc_mounts: Do not add devices to fstab that are already present. * ds-identify: Ensure that we have certain tokens in PATH. * read_file_or_url: Move to url_helper, fix bug in its FileResponse. * ds-identify: Recognize container-other as a container. * ds-identify: Remove duplicate call to is_ds_enabled. * azure: Add reported ready marker file. * netinfo: Fix netdev_pformat when a nic does not have an address assigned. * collect-logs: Add -v flag, write to stderr, limit journal to single boot. * IBMCloud: Disable config-drive and nocloud only if IBMCloud is enabled. * Add reporting events and log_time around early source of blocking time. * IBMCloud: recognize provisioning environment during debug boots. * net: Detect unstable network names and trigger a settle if needed. * sysconfig: dhcp6 subnet type should not imply dhcpv4. * schema: In validation, raise ImportError if strict but no jsonschema. * set_passwords: Add newline to end of sshd config, only restart if updated. * net: Depend on iproute2's ip instead of net-tools ifconfig or route. * renderer: Support unicode in render_from_file. * Implement ntp client spec with auto support for distro selection. * apport: Add Brightbox, IBM, LXD, and OpenTelekomCloud to list of clouds. * tests: Fix ec2 integration network metadata validation. * cc_resizefs, util: Handle no /dev/zfs. - The distribution indicator is set to SUSE during template expansion. Do not replace anything set to Ubuntu. - Do not run cloud-init after network-online, this breaks functionality in cloud-init. Certain parts of the code running in this phase expect to run before the network is on-line. - Root should not be enabled by default. Image builders/users that want root access by default should provide an appropriate configuration file during image build or image setup. - Set distribution default to OpenSUSE/SLES. (bsc#1099340) - Run metadata detection after network-online. (bsc#1097388) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1622=1 Package List: - openSUSE Leap 15.0 (x86_64): cloud-init-18.4-lp150.2.9.1 cloud-init-config-suse-18.4-lp150.2.9.1 cloud-init-doc-18.4-lp150.2.9.1 References: https://bugzilla.suse.com/1087331 https://bugzilla.suse.com/1095627 https://bugzilla.suse.com/1097388 https://bugzilla.suse.com/1099340 https://bugzilla.suse.com/1101894 https://bugzilla.suse.com/1111427 https://bugzilla.suse.com/1114160 [View Less]

1 0

openSUSE-SU-2018:4302-1: important: Security update for go
by opensuse-security＠opensuse.org 29 Dec '18

29 Dec '18

openSUSE Security Update: Security update for go ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4302-1 Rating: important References: #1081495 #1119634 #1119706 Cross-References: CVE-2018-7187 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is … [View More]

1 0

openSUSE-RU-2018:4301-1: moderate: Recommended update for python-jira
by maintenance＠opensuse.org 29 Dec '18

29 Dec '18

openSUSE Recommended Update: Recommended update for python-jira ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4301-1 Rating: moderate References: #1120127 Affected Products: openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one recommended fix can now be installed. … [View More]

1 0

openSUSE-SU-2018:4299-1: moderate: Security update for libraw
by opensuse-security＠opensuse.org 28 Dec '18

28 Dec '18

openSUSE Security Update: Security update for libraw ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4299-1 Rating: moderate References: #1097973 #1097974 #1097975 #1118894 Cross-References: CVE-2018-5804 CVE-2018-5805 CVE-2018-5806 CVE-2018-5808 CVE-2018-5816 Affected Products: openSUSE Leap 42.3 … [View More]______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for libraw fixes the following issues: The following security vulnerabilities were addressed: - CVE-2018-5804: Fixed a type confusion error within the identify function that could trigger a division by zero, leading to a denial of service (Dos). (boo#1097975) - CVE-2018-5805: Fixed a boundary error within the quicktake_100_load_raw function that could cause a stack-based buffer overflow and subsequently trigger a crash. (boo#1097973) - CVE-2018-5806: Fixed an error within the leaf_hdr_load_raw function that could trigger a NULL pointer deference, leading to a denial of service (DoS). (boo#1097974) - CVE-2018-5808: Fixed an error within the find_green function that could cause a stack-based buffer overflow and subsequently execute arbitrary code. (boo#1118894) - CVE-2018-5816: Fixed a type confusion error within the identify function that could trigger a division by zero, leading to a denial of service (DoS). (boo#1097975) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1619=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libraw-debugsource-0.17.1-26.1 libraw-devel-0.17.1-26.1 libraw-devel-static-0.17.1-26.1 libraw-tools-0.17.1-26.1 libraw-tools-debuginfo-0.17.1-26.1 libraw15-0.17.1-26.1 libraw15-debuginfo-0.17.1-26.1 References: https://www.suse.com/security/cve/CVE-2018-5804.html https://www.suse.com/security/cve/CVE-2018-5805.html https://www.suse.com/security/cve/CVE-2018-5806.html https://www.suse.com/security/cve/CVE-2018-5808.html https://www.suse.com/security/cve/CVE-2018-5816.html https://bugzilla.suse.com/1097973 https://bugzilla.suse.com/1097974 https://bugzilla.suse.com/1097975 https://bugzilla.suse.com/1118894 [View Less]

1 0

openSUSE-RU-2018:4289-1: moderate: Recommended update for LibreOffice and related libraries
by maintenance＠opensuse.org 28 Dec '18

28 Dec '18

openSUSE Recommended Update: Recommended update for LibreOffice and related libraries ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4289-1 Rating: moderate References: #1050305 #1094779 #1096360 #1104876 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has four recommended fixes can now be … [View More]installed. Description: This update for LibreOffice, libepubgen, libetonyek, liblangtag, libmwaw, libnumbertext, libstaroffice, libwps, myspell-dictionaries, xmlsec1 fixes the following issues: LibreOffice was updated to 6.1.3.2 (fate#326624) and contains new features and lots of bugfixes: The full changelog can be found on: https://wiki.documentfoundation.org/ReleaseNotes/6.1 Add more translations: * Belarusian * Bodo * Dogri * Frisian * Gaelic * Paraguayan_Guaran * Upper_Sorbian * Konkani * Kashmiri * Luxembourgish * Monglolian * Manipuri * Burnese * Occitan * Kinyarwanda * Santali * Sanskrit * Sindhi * Sidamo * Tatar * Uzbek * Upper Sorbian * Venetian * Amharic * Asturian * Tibetian * Bosnian * English GB * English ZA * Indonesian * Icelandic * Georgian * Khmer * Lao * Macedonian * Nepali * Oromo * Albanian * Tajik * Uyghur * Vietnamese * Kurdish - Try to build all languages see bsc#1096360 - Make sure to install the KDE5/Qt5 UI/filepicker - Try to implement safeguarding to avoid bsc#1050305 - Disable base-drivers-mysql as it needs mysqlcppcon that is only for mysql and not mariadb, causes issues bsc#1094779 * Users can still connect using jdbc/odbc - Fix java detection on machines with too many cpus libepubgen was updated to 0.1.1: - Avoid <div> inside <p> or <span>. - Avoid writin vertical-align attribute without a value. - Fix generation of invalid XHTML when there is a link starting at the beginning of a footnote. - Handle relative width for images. - Fixed layout: write chapter names to improve navigation. - Support writing mode. - Start a new HTML file at every page span in addition to the splits induced by the chosen split method. This is to ensure that specified writing mode works correctly, as it is HTML <body> attribute. libetonyek was updated to 0.1.8: - More support for keynote content - Add support for Keynote 1 documents. - Add support for Numbers 3 documents. - Fix several issues found by oss-fuzz. - Fix build with glm 0.9.9. - Other fixes and improvements. liblangtag was updated to 0.6.2: - use standard function - fix leak in test libmwaw was updated to 0.3.14: - Support MS Multiplan 1.1 files libnumbertext was update to 1.0.5: - Various fixes in numerical calculations and issues reported on libreoffice tracker libstaroffice was updated to 0.0.6: - retrieve some StarMath's formula, - retrieve some charts as graphic, - retrieve some fields in sda/sdc/sdp text-boxes, - .sdw: retrieve more attachments. libwps was updated to 0.4.9: - QuattroPro: add parser to .wb3 files - Multiplan: add parser to DOS v1-v3 files - charts: try to retrieve charts in .wk*, .wq* files - QuattroPro: add parser to .wb[12] files myspell-dictionaries was updated to 20181025: - Turkish dictionary added - Updated French dictionary xmlsec1 was updated to 1.2.26: - Added xmlsec-mscng module based on Microsoft Cryptography API: Next Generation - Added support for GOST 2012 and fixed CryptoPro CSP provider for GOST R 34.10-2001 in xmlsec-mscrypto This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1612=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): liblangtag-debugsource-0.6.2-8.3.1 liblangtag-devel-0.6.2-8.3.1 liblangtag1-0.6.2-8.3.1 liblangtag1-debuginfo-0.6.2-8.3.1 libnumbertext-1_0-0-1.0.5-2.1 libnumbertext-1_0-0-debuginfo-1.0.5-2.1 libnumbertext-data-1.0.5-2.1 libnumbertext-debugsource-1.0.5-2.1 libnumbertext-devel-1.0.5-2.1 libnumbertext-tools-1.0.5-2.1 libnumbertext-tools-debuginfo-1.0.5-2.1 libxmlsec1-1-1.2.26-10.1 libxmlsec1-1-debuginfo-1.2.26-10.1 libxmlsec1-gcrypt1-1.2.26-10.1 libxmlsec1-gcrypt1-debuginfo-1.2.26-10.1 libxmlsec1-gnutls1-1.2.26-10.1 libxmlsec1-gnutls1-debuginfo-1.2.26-10.1 libxmlsec1-nss1-1.2.26-10.1 libxmlsec1-nss1-debuginfo-1.2.26-10.1 libxmlsec1-openssl1-1.2.26-10.1 libxmlsec1-openssl1-debuginfo-1.2.26-10.1 myspell-dictionaries-20181025-13.1 myspell-lightproof-en-20181025-13.1 myspell-lightproof-hu_HU-20181025-13.1 myspell-lightproof-pt_BR-20181025-13.1 myspell-lightproof-ru_RU-20181025-13.1 xmlsec1-1.2.26-10.1 xmlsec1-debuginfo-1.2.26-10.1 xmlsec1-debugsource-1.2.26-10.1 xmlsec1-devel-1.2.26-10.1 xmlsec1-gcrypt-devel-1.2.26-10.1 xmlsec1-gnutls-devel-1.2.26-10.1 xmlsec1-nss-devel-1.2.26-10.1 xmlsec1-openssl-devel-1.2.26-10.1 - openSUSE Leap 42.3 (x86_64): libepubgen-0_1-1-0.1.1-17.1 libepubgen-0_1-1-debuginfo-0.1.1-17.1 libepubgen-debugsource-0.1.1-17.1 libepubgen-devel-0.1.1-17.1 libetonyek-0_1-1-0.1.8-11.1 libetonyek-0_1-1-debuginfo-0.1.8-11.1 libetonyek-debugsource-0.1.8-11.1 libetonyek-devel-0.1.8-11.1 libetonyek-tools-0.1.8-11.1 libetonyek-tools-debuginfo-0.1.8-11.1 libmwaw-0_3-3-0.3.14-2.6.1 libmwaw-0_3-3-debuginfo-0.3.14-2.6.1 libmwaw-debugsource-0.3.14-2.6.1 libmwaw-devel-0.3.14-2.6.1 libmwaw-tools-0.3.14-2.6.1 libmwaw-tools-debuginfo-0.3.14-2.6.1 libreoffice-6.1.3.2-27.4 libreoffice-base-6.1.3.2-27.4 libreoffice-base-debuginfo-6.1.3.2-27.4 libreoffice-base-drivers-postgresql-6.1.3.2-27.4 libreoffice-base-drivers-postgresql-debuginfo-6.1.3.2-27.4 libreoffice-calc-6.1.3.2-27.4 libreoffice-calc-debuginfo-6.1.3.2-27.4 libreoffice-calc-extensions-6.1.3.2-27.4 libreoffice-debuginfo-6.1.3.2-27.4 libreoffice-debugsource-6.1.3.2-27.4 libreoffice-draw-6.1.3.2-27.4 libreoffice-draw-debuginfo-6.1.3.2-27.4 libreoffice-filters-optional-6.1.3.2-27.4 libreoffice-gnome-6.1.3.2-27.4 libreoffice-gnome-debuginfo-6.1.3.2-27.4 libreoffice-gtk2-6.1.3.2-27.4 libreoffice-gtk2-debuginfo-6.1.3.2-27.4 libreoffice-gtk3-6.1.3.2-27.4 libreoffice-gtk3-debuginfo-6.1.3.2-27.4 libreoffice-impress-6.1.3.2-27.4 libreoffice-impress-debuginfo-6.1.3.2-27.4 libreoffice-mailmerge-6.1.3.2-27.4 libreoffice-math-6.1.3.2-27.4 libreoffice-math-debuginfo-6.1.3.2-27.4 libreoffice-officebean-6.1.3.2-27.4 libreoffice-officebean-debuginfo-6.1.3.2-27.4 libreoffice-pyuno-6.1.3.2-27.4 libreoffice-pyuno-debuginfo-6.1.3.2-27.4 libreoffice-qt5-6.1.3.2-27.4 libreoffice-qt5-debuginfo-6.1.3.2-27.4 libreoffice-sdk-6.1.3.2-27.4 libreoffice-sdk-debuginfo-6.1.3.2-27.4 libreoffice-sdk-doc-6.1.3.2-27.4 libreoffice-writer-6.1.3.2-27.4 libreoffice-writer-debuginfo-6.1.3.2-27.4 libreoffice-writer-extensions-6.1.3.2-27.4 libreofficekit-6.1.3.2-27.4 libreofficekit-devel-6.1.3.2-27.4 libstaroffice-0_0-0-0.0.6-2.6.1 libstaroffice-0_0-0-debuginfo-0.0.6-2.6.1 libstaroffice-debugsource-0.0.6-2.6.1 libstaroffice-devel-0.0.6-2.6.1 libstaroffice-tools-0.0.6-2.6.1 libstaroffice-tools-debuginfo-0.0.6-2.6.1 libwps-0_4-4-0.4.9-17.1 libwps-0_4-4-debuginfo-0.4.9-17.1 libwps-debugsource-0.4.9-17.1 libwps-devel-0.4.9-17.1 libwps-tools-0.4.9-17.1 libwps-tools-debuginfo-0.4.9-17.1 - openSUSE Leap 42.3 (noarch): libepubgen-devel-doc-0.1.1-17.1 libetonyek-devel-doc-0.1.8-11.1 liblangtag-doc-0.6.2-8.3.1 libmwaw-devel-doc-0.3.14-2.6.1 libreoffice-branding-upstream-6.1.3.2-27.4 libreoffice-gdb-pretty-printers-6.1.3.2-27.4 libreoffice-glade-6.1.3.2-27.4 libreoffice-icon-themes-6.1.3.2-27.4 libreoffice-l10n-af-6.1.3.2-27.4 libreoffice-l10n-am-6.1.3.2-27.4 libreoffice-l10n-ar-6.1.3.2-27.4 libreoffice-l10n-as-6.1.3.2-27.4 libreoffice-l10n-ast-6.1.3.2-27.4 libreoffice-l10n-be-6.1.3.2-27.4 libreoffice-l10n-bg-6.1.3.2-27.4 libreoffice-l10n-bn-6.1.3.2-27.4 libreoffice-l10n-bn_IN-6.1.3.2-27.4 libreoffice-l10n-bo-6.1.3.2-27.4 libreoffice-l10n-br-6.1.3.2-27.4 libreoffice-l10n-brx-6.1.3.2-27.4 libreoffice-l10n-bs-6.1.3.2-27.4 libreoffice-l10n-ca-6.1.3.2-27.4 libreoffice-l10n-ca_valencia-6.1.3.2-27.4 libreoffice-l10n-cs-6.1.3.2-27.4 libreoffice-l10n-cy-6.1.3.2-27.4 libreoffice-l10n-da-6.1.3.2-27.4 libreoffice-l10n-de-6.1.3.2-27.4 libreoffice-l10n-dgo-6.1.3.2-27.4 libreoffice-l10n-dz-6.1.3.2-27.4 libreoffice-l10n-el-6.1.3.2-27.4 libreoffice-l10n-en-6.1.3.2-27.4 libreoffice-l10n-en_GB-6.1.3.2-27.4 libreoffice-l10n-en_ZA-6.1.3.2-27.4 libreoffice-l10n-eo-6.1.3.2-27.4 libreoffice-l10n-es-6.1.3.2-27.4 libreoffice-l10n-et-6.1.3.2-27.4 libreoffice-l10n-eu-6.1.3.2-27.4 libreoffice-l10n-fa-6.1.3.2-27.4 libreoffice-l10n-fi-6.1.3.2-27.4 libreoffice-l10n-fr-6.1.3.2-27.4 libreoffice-l10n-fy-6.1.3.2-27.4 libreoffice-l10n-ga-6.1.3.2-27.4 libreoffice-l10n-gd-6.1.3.2-27.4 libreoffice-l10n-gl-6.1.3.2-27.4 libreoffice-l10n-gu-6.1.3.2-27.4 libreoffice-l10n-gug-6.1.3.2-27.4 libreoffice-l10n-he-6.1.3.2-27.4 libreoffice-l10n-hi-6.1.3.2-27.4 libreoffice-l10n-hr-6.1.3.2-27.4 libreoffice-l10n-hsb-6.1.3.2-27.4 libreoffice-l10n-hu-6.1.3.2-27.4 libreoffice-l10n-id-6.1.3.2-27.4 libreoffice-l10n-is-6.1.3.2-27.4 libreoffice-l10n-it-6.1.3.2-27.4 libreoffice-l10n-ja-6.1.3.2-27.4 libreoffice-l10n-ka-6.1.3.2-27.4 libreoffice-l10n-kab-6.1.3.2-27.4 libreoffice-l10n-kk-6.1.3.2-27.4 libreoffice-l10n-km-6.1.3.2-27.4 libreoffice-l10n-kmr_Latn-6.1.3.2-27.4 libreoffice-l10n-kn-6.1.3.2-27.4 libreoffice-l10n-ko-6.1.3.2-27.4 libreoffice-l10n-kok-6.1.3.2-27.4 libreoffice-l10n-ks-6.1.3.2-27.4 libreoffice-l10n-lb-6.1.3.2-27.4 libreoffice-l10n-lo-6.1.3.2-27.4 libreoffice-l10n-lt-6.1.3.2-27.4 libreoffice-l10n-lv-6.1.3.2-27.4 libreoffice-l10n-mai-6.1.3.2-27.4 libreoffice-l10n-mk-6.1.3.2-27.4 libreoffice-l10n-ml-6.1.3.2-27.4 libreoffice-l10n-mn-6.1.3.2-27.4 libreoffice-l10n-mni-6.1.3.2-27.4 libreoffice-l10n-mr-6.1.3.2-27.4 libreoffice-l10n-my-6.1.3.2-27.4 libreoffice-l10n-nb-6.1.3.2-27.4 libreoffice-l10n-ne-6.1.3.2-27.4 libreoffice-l10n-nl-6.1.3.2-27.4 libreoffice-l10n-nn-6.1.3.2-27.4 libreoffice-l10n-nr-6.1.3.2-27.4 libreoffice-l10n-nso-6.1.3.2-27.4 libreoffice-l10n-oc-6.1.3.2-27.4 libreoffice-l10n-om-6.1.3.2-27.4 libreoffice-l10n-or-6.1.3.2-27.4 libreoffice-l10n-pa-6.1.3.2-27.4 libreoffice-l10n-pl-6.1.3.2-27.4 libreoffice-l10n-pt_BR-6.1.3.2-27.4 libreoffice-l10n-pt_PT-6.1.3.2-27.4 libreoffice-l10n-ro-6.1.3.2-27.4 libreoffice-l10n-ru-6.1.3.2-27.4 libreoffice-l10n-rw-6.1.3.2-27.4 libreoffice-l10n-sa_IN-6.1.3.2-27.4 libreoffice-l10n-sat-6.1.3.2-27.4 libreoffice-l10n-sd-6.1.3.2-27.4 libreoffice-l10n-si-6.1.3.2-27.4 libreoffice-l10n-sid-6.1.3.2-27.4 libreoffice-l10n-sk-6.1.3.2-27.4 libreoffice-l10n-sl-6.1.3.2-27.4 libreoffice-l10n-sq-6.1.3.2-27.4 libreoffice-l10n-sr-6.1.3.2-27.4 libreoffice-l10n-ss-6.1.3.2-27.4 libreoffice-l10n-st-6.1.3.2-27.4 libreoffice-l10n-sv-6.1.3.2-27.4 libreoffice-l10n-sw_TZ-6.1.3.2-27.4 libreoffice-l10n-ta-6.1.3.2-27.4 libreoffice-l10n-te-6.1.3.2-27.4 libreoffice-l10n-tg-6.1.3.2-27.4 libreoffice-l10n-th-6.1.3.2-27.4 libreoffice-l10n-tn-6.1.3.2-27.4 libreoffice-l10n-tr-6.1.3.2-27.4 libreoffice-l10n-ts-6.1.3.2-27.4 libreoffice-l10n-tt-6.1.3.2-27.4 libreoffice-l10n-ug-6.1.3.2-27.4 libreoffice-l10n-uk-6.1.3.2-27.4 libreoffice-l10n-uz-6.1.3.2-27.4 libreoffice-l10n-ve-6.1.3.2-27.4 libreoffice-l10n-vec-6.1.3.2-27.4 libreoffice-l10n-vi-6.1.3.2-27.4 libreoffice-l10n-xh-6.1.3.2-27.4 libreoffice-l10n-zh_CN-6.1.3.2-27.4 libreoffice-l10n-zh_TW-6.1.3.2-27.4 libreoffice-l10n-zu-6.1.3.2-27.4 libstaroffice-devel-doc-0.0.6-2.6.1 myspell-af_NA-20181025-13.1 myspell-af_ZA-20181025-13.1 myspell-an-20181025-13.1 myspell-an_ES-20181025-13.1 myspell-ar-20181025-13.1 myspell-ar_AE-20181025-13.1 myspell-ar_BH-20181025-13.1 myspell-ar_DZ-20181025-13.1 myspell-ar_EG-20181025-13.1 myspell-ar_IQ-20181025-13.1 myspell-ar_JO-20181025-13.1 myspell-ar_KW-20181025-13.1 myspell-ar_LB-20181025-13.1 myspell-ar_LY-20181025-13.1 myspell-ar_MA-20181025-13.1 myspell-ar_OM-20181025-13.1 myspell-ar_QA-20181025-13.1 myspell-ar_SA-20181025-13.1 myspell-ar_SD-20181025-13.1 myspell-ar_SY-20181025-13.1 myspell-ar_TN-20181025-13.1 myspell-ar_YE-20181025-13.1 myspell-be_BY-20181025-13.1 myspell-bg_BG-20181025-13.1 myspell-bn_BD-20181025-13.1 myspell-bn_IN-20181025-13.1 myspell-bo-20181025-13.1 myspell-bo_CN-20181025-13.1 myspell-bo_IN-20181025-13.1 myspell-br_FR-20181025-13.1 myspell-bs-20181025-13.1 myspell-bs_BA-20181025-13.1 myspell-ca-20181025-13.1 myspell-ca_AD-20181025-13.1 myspell-ca_ES-20181025-13.1 myspell-ca_ES_valencia-20181025-13.1 myspell-ca_FR-20181025-13.1 myspell-ca_IT-20181025-13.1 myspell-cs_CZ-20181025-13.1 myspell-da_DK-20181025-13.1 myspell-de-20181025-13.1 myspell-de_AT-20181025-13.1 myspell-de_CH-20181025-13.1 myspell-de_DE-20181025-13.1 myspell-el_GR-20181025-13.1 myspell-en-20181025-13.1 myspell-en_AU-20181025-13.1 myspell-en_BS-20181025-13.1 myspell-en_BZ-20181025-13.1 myspell-en_CA-20181025-13.1 myspell-en_GB-20181025-13.1 myspell-en_GH-20181025-13.1 myspell-en_IE-20181025-13.1 myspell-en_IN-20181025-13.1 myspell-en_JM-20181025-13.1 myspell-en_MW-20181025-13.1 myspell-en_NA-20181025-13.1 myspell-en_NZ-20181025-13.1 myspell-en_PH-20181025-13.1 myspell-en_TT-20181025-13.1 myspell-en_US-20181025-13.1 myspell-en_ZA-20181025-13.1 myspell-en_ZW-20181025-13.1 myspell-es-20181025-13.1 myspell-es_AR-20181025-13.1 myspell-es_BO-20181025-13.1 myspell-es_CL-20181025-13.1 myspell-es_CO-20181025-13.1 myspell-es_CR-20181025-13.1 myspell-es_CU-20181025-13.1 myspell-es_DO-20181025-13.1 myspell-es_EC-20181025-13.1 myspell-es_ES-20181025-13.1 myspell-es_GT-20181025-13.1 myspell-es_HN-20181025-13.1 myspell-es_MX-20181025-13.1 myspell-es_NI-20181025-13.1 myspell-es_PA-20181025-13.1 myspell-es_PE-20181025-13.1 myspell-es_PR-20181025-13.1 myspell-es_PY-20181025-13.1 myspell-es_SV-20181025-13.1 myspell-es_UY-20181025-13.1 myspell-es_VE-20181025-13.1 myspell-et_EE-20181025-13.1 myspell-fr_BE-20181025-13.1 myspell-fr_CA-20181025-13.1 myspell-fr_CH-20181025-13.1 myspell-fr_FR-20181025-13.1 myspell-fr_LU-20181025-13.1 myspell-fr_MC-20181025-13.1 myspell-gd_GB-20181025-13.1 myspell-gl-20181025-13.1 myspell-gl_ES-20181025-13.1 myspell-gu_IN-20181025-13.1 myspell-gug-20181025-13.1 myspell-gug_PY-20181025-13.1 myspell-he_IL-20181025-13.1 myspell-hi_IN-20181025-13.1 myspell-hr_HR-20181025-13.1 myspell-hu_HU-20181025-13.1 myspell-id-20181025-13.1 myspell-id_ID-20181025-13.1 myspell-is-20181025-13.1 myspell-is_IS-20181025-13.1 myspell-it_IT-20181025-13.1 myspell-kmr_Latn-20181025-13.1 myspell-kmr_Latn_SY-20181025-13.1 myspell-kmr_Latn_TR-20181025-13.1 myspell-lo_LA-20181025-13.1 myspell-lt_LT-20181025-13.1 myspell-lv_LV-20181025-13.1 myspell-nb_NO-20181025-13.1 myspell-ne_NP-20181025-13.1 myspell-nl_BE-20181025-13.1 myspell-nl_NL-20181025-13.1 myspell-nn_NO-20181025-13.1 myspell-no-20181025-13.1 myspell-oc_FR-20181025-13.1 myspell-pl_PL-20181025-13.1 myspell-pt_AO-20181025-13.1 myspell-pt_BR-20181025-13.1 myspell-pt_PT-20181025-13.1 myspell-ro-20181025-13.1 myspell-ro_RO-20181025-13.1 myspell-ru_RU-20181025-13.1 myspell-si_LK-20181025-13.1 myspell-sk_SK-20181025-13.1 myspell-sl_SI-20181025-13.1 myspell-sq_AL-20181025-13.1 myspell-sr-20181025-13.1 myspell-sr_CS-20181025-13.1 myspell-sr_Latn_CS-20181025-13.1 myspell-sr_Latn_RS-20181025-13.1 myspell-sr_RS-20181025-13.1 myspell-sv_FI-20181025-13.1 myspell-sv_SE-20181025-13.1 myspell-sw_TZ-20181025-13.1 myspell-te-20181025-13.1 myspell-te_IN-20181025-13.1 myspell-th_TH-20181025-13.1 myspell-tr-20181025-13.1 myspell-tr_TR-20181025-13.1 myspell-uk_UA-20181025-13.1 myspell-vi-20181025-13.1 myspell-vi_VN-20181025-13.1 myspell-zu_ZA-20181025-13.1 References: https://bugzilla.suse.com/1050305 https://bugzilla.suse.com/1094779 https://bugzilla.suse.com/1096360 https://bugzilla.suse.com/1104876 [View Less]

1 0

openSUSE-SU-2018:4287-1: important: Security update for netatalk
by opensuse-security＠opensuse.org 28 Dec '18

28 Dec '18

openSUSE Security Update: Security update for netatalk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4287-1 Rating: important References: #1119540 Cross-References: CVE-2018-1160 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This … [View More]

1 0

openSUSE-RU-2018:4286-1: moderate: Recommended update for endless-sky
by maintenance＠opensuse.org 28 Dec '18

28 Dec '18

openSUSE Recommended Update: Recommended update for endless-sky ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4286-1 Rating: moderate References: #1119628 #1119674 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that … [View More]

1 0

openSUSE-RU-2018:4285-1: Recommended update for kubectl
by maintenance＠opensuse.org 28 Dec '18

28 Dec '18

openSUSE Recommended Update: Recommended update for kubectl ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4285-1 Rating: low References: #1119713 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update to kubectl updates the … [View More]

1 0

openSUSE-SU-2018:4283-1: moderate: Security update for mozilla-nspr and mozilla-nss
by opensuse-security＠opensuse.org 28 Dec '18

28 Dec '18

openSUSE Security Update: Security update for mozilla-nspr and mozilla-nss ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4283-1 Rating: moderate References: #1097410 #1119105 Cross-References: CVE-2018-0495 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves one vulnerability and has one … [View More]errata is now available. Description: This update for mozilla-nss and mozilla-nspr fixes the following issues: Issues fixed in mozilla-nss: - Update to NSS 3.40.1 (bsc#1119105) - CVE-2018-12404: Fixed a cache side-channel variant of the Bleichenbacher attack (bsc#1119069) - CVE-2018-12384: Fixed an issue in the SSL handshake. NSS responded to an SSLv2-compatible ClientHello with a ServerHello that had an all-zero random. (bsc#1106873) - CVE-2018-0495: Fixed a memory-cache side-channel attack with ECDSA signatures (bsc#1097410) - Fixed a decryption failure during FFDHE key exchange - Various security fixes in the ASN.1 code Issues fixed in mozilla-nspr: - Update mozilla-nspr to 4.20 (bsc#1119105) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1618=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libfreebl3-3.40.1-lp150.2.10.2 libfreebl3-debuginfo-3.40.1-lp150.2.10.2 libsoftokn3-3.40.1-lp150.2.10.2 libsoftokn3-debuginfo-3.40.1-lp150.2.10.2 mozilla-nspr-4.20-lp150.2.3.1 mozilla-nspr-debuginfo-4.20-lp150.2.3.1 mozilla-nspr-debugsource-4.20-lp150.2.3.1 mozilla-nspr-devel-4.20-lp150.2.3.1 mozilla-nss-3.40.1-lp150.2.10.2 mozilla-nss-certs-3.40.1-lp150.2.10.2 mozilla-nss-certs-debuginfo-3.40.1-lp150.2.10.2 mozilla-nss-debuginfo-3.40.1-lp150.2.10.2 mozilla-nss-debugsource-3.40.1-lp150.2.10.2 mozilla-nss-devel-3.40.1-lp150.2.10.2 mozilla-nss-sysinit-3.40.1-lp150.2.10.2 mozilla-nss-sysinit-debuginfo-3.40.1-lp150.2.10.2 mozilla-nss-tools-3.40.1-lp150.2.10.2 mozilla-nss-tools-debuginfo-3.40.1-lp150.2.10.2 - openSUSE Leap 15.0 (x86_64): libfreebl3-32bit-3.40.1-lp150.2.10.2 libfreebl3-32bit-debuginfo-3.40.1-lp150.2.10.2 libsoftokn3-32bit-3.40.1-lp150.2.10.2 libsoftokn3-32bit-debuginfo-3.40.1-lp150.2.10.2 mozilla-nspr-32bit-4.20-lp150.2.3.1 mozilla-nspr-32bit-debuginfo-4.20-lp150.2.3.1 mozilla-nss-32bit-3.40.1-lp150.2.10.2 mozilla-nss-32bit-debuginfo-3.40.1-lp150.2.10.2 mozilla-nss-certs-32bit-3.40.1-lp150.2.10.2 mozilla-nss-certs-32bit-debuginfo-3.40.1-lp150.2.10.2 mozilla-nss-sysinit-32bit-3.40.1-lp150.2.10.2 mozilla-nss-sysinit-32bit-debuginfo-3.40.1-lp150.2.10.2 References: https://www.suse.com/security/cve/CVE-2018-0495.html https://bugzilla.suse.com/1097410 https://bugzilla.suse.com/1119105 [View Less]

1 0

openSUSE-SU-2018:4282-1: moderate: Security update for polkit
by opensuse-security＠opensuse.org 28 Dec '18

28 Dec '18

openSUSE Security Update: Security update for polkit ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4282-1 Rating: moderate References: #1118277 Cross-References: CVE-2018-19788 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update … [View More]

1 0

openSUSE-RU-2018:4280-1: moderate: Recommended update for gtg
by maintenance＠opensuse.org 28 Dec '18

28 Dec '18

openSUSE Recommended Update: Recommended update for gtg ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4280-1 Rating: moderate References: #1042118 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gtg fixes the following … [View More]

1 0

openSUSE-RU-2018:4276-1: moderate: Recommended update for erlang
by maintenance＠opensuse.org 27 Dec '18

27 Dec '18

openSUSE Recommended Update: Recommended update for erlang ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4276-1 Rating: moderate References: #1118867 #1118869 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: … [View More] This update for erlang fixes the following issues: Erlang was updated to 18.3.4.11 (boo#1118867) or to 20.3.8.15 (boo#1118869) Changes for 18.3.4.11: * stdlib: List subtraction (The -- operator) will now yield properly on large inputs. * erts: List subtraction (The -- operator) will now yield properly on large inputs. * erts: Fixed small memory leak that could occur when sending to a terminating port. * ssh: Fix rare spurios shutdowns of ssh servers when receiveing {'EXIT',_,normal} messages. * ssh: Default exec is disabled when a user-defined shell is enabled Changes for 20.3.8.15: * asn1: Handle erroneous length during decode (BER only) without crashing. * ssh: Incompatibility with newer OpenSSH fixed. Previously versions 7.8 and later could cause Erlang SSH to exit. * ssl: Add engine support for RSA key exchange * erts: List subtraction (The -- operator) will now yield properly on large inputs. * stdlib: List subtraction (The -- operator) will now yield properly on large inputs. * ssl: Extend check for undelivered data at closing, could under some circumstances fail to deliverd all data that was acctualy recivied. * erts: ERTS internal trees of monitor structures could get into an inconsistent state. This could cause 'DOWN' messages not to be delivered when they should, as well as delivery of 'DOWN' messages that should not be delivered. * erts: Fixed bug in ets:select_replace when called with a fully bound key could cause a following call to ets:next or ets:prev to crash the emulator or return invalid result. * eldap: A race condition at close could cause the eldap client to exit with a badarg message as cause. - http://erlang.org/download/OTP-20.3.8.9.README * Fix a regression in OTP-15204 that removed .beam file metadata - http://erlang.org/download/OTP-20.3.8.8.README * inets: Do not use chunked-encoding with 1xx, 204 and 304 responses when using mod_esi * inets: Add robust handling of chunked-encoded HTTP responses with an empty body (1xx, 204, 304) - Changes for 20.3.8.7: - http://erlang.org/download/OTP-20.3.8.7.README * crypto: Update the crypto engine functions to handle multiple loads of an engine * mnesia: Fixed a bug where the bag table index data was not deleted when objects were deleted. * inets: Change status code for no mod found to handle request to 501 * erts: Fixed a bug causing some Erlang references to be inconsistently ordered. This could for example cause failure to look up certain elements with references as keys in search data structures. This bug was introduced in R13B02. Thanks to Simon Cornish for finding the bug and supplying a fix. * compiler: Fixed an issue where files compiled with the +deterministic option differed if they were compiled in a different directory but were otherwise identical. * crypto: Fixed a node crash in crypto:compute_key(ecdh, ...) when passing a wrongly typed Others argument. * erts: Fixed a bug which caused an emulator crash when enif_send() was called by a NIF that executed on a dirty scheduler. The bug was either triggered when the NIF called enif_send() without a message environment, or when the process executing the NIF was send traced. * erts: Fixed a bug causing some Erlang references to be inconsistently ordered. This could for example cause failure to look up certain elements with references as keys in search data structures. This bug was introduced in R13B02. Thanks to Simon Cornish for finding the bug and supplying a fix. * mnesia: When master node is set do not force a load from ram_copies replica when there are no available disc_copies, since that would load an empty table. Wait until a disk replica is available or until user explicitly force_loads the table. * mnesia: Allow to add replicas even if all other replicas are down when the other replicase are not stored on disk. * ssl: Correct handling of empty server SNI extension * ssl: Correct cipher suite handling for ECDHE_*, the incorrect handling could cause an incorrrect suite to be selected and most likly fail the handshake. * asn1: A bug in ASN.1 BER decoding has been fixed. When decoding a recursively enclosed term the length was not propagated to that term decoding, so if the length of the enclosed term was longer than the enclosing that error was not dectected. A hard coded C stack limitation for decoding recursive ASN.1 terms has been introduced. This is currently set to 8 kWords giving a nesting depth of about 1000 levels. Deeper terms can not be decoded, which should not be much of a real world limitation. * erts: Fixed a race condition in the inet driver that could cause receive to hang when the emulator was compiled with gcc8. * erts: Fix bug in generation of erl_crash.dump, which could cause VM to crash. Bug exist since erts-9.2 (OTP-20.2). * ic: Fixed potential buffer overflow bugs in oe_ei_encode_long/ulong/longlong/ulonglong functions on 64-bit architectures. These functions expect 32 bit integers as the IDL type "long" is defined as 32 bits. But there is nothing preventing user code from "breaking" the interface and pass larger values on 64-bit architectures where the C type "long" is 64 bits. * inets: Enhance error handling, that is mod_get will return 403 if a path is a directory and not a file. * kernel: Non semantic change in dist_util.erl to silence dialyzer warning. * ssl: Improve cipher suite handling correcting ECC and TLS-1.2 requierments. Backport of solution for ERL-641 * ssl: Option keyfile defaults to certfile and should be trumped with key. This failed for engine keys. * erl_interface: Make ei_connect and friends also accept state ok_simultaneous during handshake, which means the other node has initiated a connection setup that will be cancelled in favor of this connection. * erts: Fixed a rare bug that could cause processes to be scheduled after they had been freed. * ic: Fixed bug in ic causing potential buffer overrun in funtion oe_ei_encode_atom. Bug exists since ic-4.4.4 (OTP-20.3.4). * kernel: Fix some potential buggy behavior in how ticks are sent on inter node distribution connections. Tick is now sent to c-node even if there are unsent buffered data, as c-nodes need ticks in order to send reply ticks. The amount of sent data was also calculated wrongly when ticks were suppressed due to unsent buffered data. * inets: Options added for setting low-level properties on the underlying TCP connections. The options are: sock_ctrl, sock_data_act and sock_data_pass. See the manual for details. * ssh: SFTP clients reported the error reason "" if a non-OTP sftp server was killed during a long file transmission. Now the signal name (for example "KILL") will be the error reason if the server's reason is empty. The documentation also lacked type information about this class of errors. * ssh: Fix ssh_sftp decode error for sftp protocol version 4 * syntax_tools: Fix a bug regarding reverting map types. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2018-1611=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 x86_64): erlang-18.3.4.11-12.1 erlang-debugger-18.3.4.11-12.1 erlang-debugger-src-18.3.4.11-12.1 erlang-dialyzer-18.3.4.11-12.1 erlang-dialyzer-src-18.3.4.11-12.1 erlang-diameter-18.3.4.11-12.1 erlang-diameter-src-18.3.4.11-12.1 erlang-doc-18.3.4.11-12.1 erlang-epmd-18.3.4.11-12.1 erlang-et-18.3.4.11-12.1 erlang-et-src-18.3.4.11-12.1 erlang-gs-18.3.4.11-12.1 erlang-gs-src-18.3.4.11-12.1 erlang-jinterface-18.3.4.11-12.1 erlang-jinterface-src-18.3.4.11-12.1 erlang-observer-18.3.4.11-12.1 erlang-observer-src-18.3.4.11-12.1 erlang-reltool-18.3.4.11-12.1 erlang-reltool-src-18.3.4.11-12.1 erlang-src-18.3.4.11-12.1 erlang-wx-18.3.4.11-12.1 erlang-wx-src-18.3.4.11-12.1 References: https://bugzilla.suse.com/1118867 https://bugzilla.suse.com/1118869 [View Less]

1 0

openSUSE-RU-2018:4275-1: moderate: Recommended update for erlang
by maintenance＠opensuse.org 27 Dec '18

27 Dec '18

openSUSE Recommended Update: Recommended update for erlang ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4275-1 Rating: moderate References: #1118867 #1118869 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has two … [View More]recommended fixes can now be installed. Description: This update for erlang fixes the following issues: Erlang was updated to 18.3.4.11 (boo#1118867) or to 20.3.8.15 (boo#1118869) Changes for 18.3.4.11: * stdlib: List subtraction (The -- operator) will now yield properly on large inputs. * erts: List subtraction (The -- operator) will now yield properly on large inputs. * erts: Fixed small memory leak that could occur when sending to a terminating port. * ssh: Fix rare spurios shutdowns of ssh servers when receiveing {'EXIT',_,normal} messages. * ssh: Default exec is disabled when a user-defined shell is enabled Changes for 20.3.8.15: * asn1: Handle erroneous length during decode (BER only) without crashing. * ssh: Incompatibility with newer OpenSSH fixed. Previously versions 7.8 and later could cause Erlang SSH to exit. * ssl: Add engine support for RSA key exchange * erts: List subtraction (The -- operator) will now yield properly on large inputs. * stdlib: List subtraction (The -- operator) will now yield properly on large inputs. * ssl: Extend check for undelivered data at closing, could under some circumstances fail to deliverd all data that was acctualy recivied. * erts: ERTS internal trees of monitor structures could get into an inconsistent state. This could cause 'DOWN' messages not to be delivered when they should, as well as delivery of 'DOWN' messages that should not be delivered. * erts: Fixed bug in ets:select_replace when called with a fully bound key could cause a following call to ets:next or ets:prev to crash the emulator or return invalid result. * eldap: A race condition at close could cause the eldap client to exit with a badarg message as cause. - http://erlang.org/download/OTP-20.3.8.9.README * Fix a regression in OTP-15204 that removed .beam file metadata - http://erlang.org/download/OTP-20.3.8.8.README * inets: Do not use chunked-encoding with 1xx, 204 and 304 responses when using mod_esi * inets: Add robust handling of chunked-encoded HTTP responses with an empty body (1xx, 204, 304) - Changes for 20.3.8.7: - http://erlang.org/download/OTP-20.3.8.7.README * crypto: Update the crypto engine functions to handle multiple loads of an engine * mnesia: Fixed a bug where the bag table index data was not deleted when objects were deleted. * inets: Change status code for no mod found to handle request to 501 * erts: Fixed a bug causing some Erlang references to be inconsistently ordered. This could for example cause failure to look up certain elements with references as keys in search data structures. This bug was introduced in R13B02. Thanks to Simon Cornish for finding the bug and supplying a fix. * compiler: Fixed an issue where files compiled with the +deterministic option differed if they were compiled in a different directory but were otherwise identical. * crypto: Fixed a node crash in crypto:compute_key(ecdh, ...) when passing a wrongly typed Others argument. * erts: Fixed a bug which caused an emulator crash when enif_send() was called by a NIF that executed on a dirty scheduler. The bug was either triggered when the NIF called enif_send() without a message environment, or when the process executing the NIF was send traced. * erts: Fixed a bug causing some Erlang references to be inconsistently ordered. This could for example cause failure to look up certain elements with references as keys in search data structures. This bug was introduced in R13B02. Thanks to Simon Cornish for finding the bug and supplying a fix. * mnesia: When master node is set do not force a load from ram_copies replica when there are no available disc_copies, since that would load an empty table. Wait until a disk replica is available or until user explicitly force_loads the table. * mnesia: Allow to add replicas even if all other replicas are down when the other replicase are not stored on disk. * ssl: Correct handling of empty server SNI extension * ssl: Correct cipher suite handling for ECDHE_*, the incorrect handling could cause an incorrrect suite to be selected and most likly fail the handshake. * asn1: A bug in ASN.1 BER decoding has been fixed. When decoding a recursively enclosed term the length was not propagated to that term decoding, so if the length of the enclosed term was longer than the enclosing that error was not dectected. A hard coded C stack limitation for decoding recursive ASN.1 terms has been introduced. This is currently set to 8 kWords giving a nesting depth of about 1000 levels. Deeper terms can not be decoded, which should not be much of a real world limitation. * erts: Fixed a race condition in the inet driver that could cause receive to hang when the emulator was compiled with gcc8. * erts: Fix bug in generation of erl_crash.dump, which could cause VM to crash. Bug exist since erts-9.2 (OTP-20.2). * ic: Fixed potential buffer overflow bugs in oe_ei_encode_long/ulong/longlong/ulonglong functions on 64-bit architectures. These functions expect 32 bit integers as the IDL type "long" is defined as 32 bits. But there is nothing preventing user code from "breaking" the interface and pass larger values on 64-bit architectures where the C type "long" is 64 bits. * inets: Enhance error handling, that is mod_get will return 403 if a path is a directory and not a file. * kernel: Non semantic change in dist_util.erl to silence dialyzer warning. * ssl: Improve cipher suite handling correcting ECC and TLS-1.2 requierments. Backport of solution for ERL-641 * ssl: Option keyfile defaults to certfile and should be trumped with key. This failed for engine keys. * erl_interface: Make ei_connect and friends also accept state ok_simultaneous during handshake, which means the other node has initiated a connection setup that will be cancelled in favor of this connection. * erts: Fixed a rare bug that could cause processes to be scheduled after they had been freed. * ic: Fixed bug in ic causing potential buffer overrun in funtion oe_ei_encode_atom. Bug exists since ic-4.4.4 (OTP-20.3.4). * kernel: Fix some potential buggy behavior in how ticks are sent on inter node distribution connections. Tick is now sent to c-node even if there are unsent buffered data, as c-nodes need ticks in order to send reply ticks. The amount of sent data was also calculated wrongly when ticks were suppressed due to unsent buffered data. * inets: Options added for setting low-level properties on the underlying TCP connections. The options are: sock_ctrl, sock_data_act and sock_data_pass. See the manual for details. * ssh: SFTP clients reported the error reason "" if a non-OTP sftp server was killed during a long file transmission. Now the signal name (for example "KILL") will be the error reason if the server's reason is empty. The documentation also lacked type information about this class of errors. * ssh: Fix ssh_sftp decode error for sftp protocol version 4 * syntax_tools: Fix a bug regarding reverting map types. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1611=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1611=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2018-1611=1 Package List: - openSUSE Leap 42.3 (x86_64): erlang-18.3.4.11-9.3 erlang-debugger-18.3.4.11-9.3 erlang-debugger-src-18.3.4.11-9.3 erlang-debuginfo-18.3.4.11-9.3 erlang-debugsource-18.3.4.11-9.3 erlang-dialyzer-18.3.4.11-9.3 erlang-dialyzer-debuginfo-18.3.4.11-9.3 erlang-dialyzer-src-18.3.4.11-9.3 erlang-diameter-18.3.4.11-9.3 erlang-diameter-src-18.3.4.11-9.3 erlang-doc-18.3.4.11-9.3 erlang-epmd-18.3.4.11-9.3 erlang-epmd-debuginfo-18.3.4.11-9.3 erlang-et-18.3.4.11-9.3 erlang-et-src-18.3.4.11-9.3 erlang-gs-18.3.4.11-9.3 erlang-gs-src-18.3.4.11-9.3 erlang-jinterface-18.3.4.11-9.3 erlang-jinterface-src-18.3.4.11-9.3 erlang-observer-18.3.4.11-9.3 erlang-observer-src-18.3.4.11-9.3 erlang-reltool-18.3.4.11-9.3 erlang-reltool-src-18.3.4.11-9.3 erlang-src-18.3.4.11-9.3 erlang-wx-18.3.4.11-9.3 erlang-wx-debuginfo-18.3.4.11-9.3 erlang-wx-src-18.3.4.11-9.3 - openSUSE Leap 15.0 (x86_64): erlang-20.3.8.15-lp150.2.3.4 erlang-debugger-20.3.8.15-lp150.2.3.4 erlang-debugger-src-20.3.8.15-lp150.2.3.4 erlang-debuginfo-20.3.8.15-lp150.2.3.4 erlang-debugsource-20.3.8.15-lp150.2.3.4 erlang-dialyzer-20.3.8.15-lp150.2.3.4 erlang-dialyzer-debuginfo-20.3.8.15-lp150.2.3.4 erlang-dialyzer-src-20.3.8.15-lp150.2.3.4 erlang-diameter-20.3.8.15-lp150.2.3.4 erlang-diameter-src-20.3.8.15-lp150.2.3.4 erlang-doc-20.3.8.15-lp150.2.3.4 erlang-epmd-20.3.8.15-lp150.2.3.4 erlang-epmd-debuginfo-20.3.8.15-lp150.2.3.4 erlang-et-20.3.8.15-lp150.2.3.4 erlang-et-src-20.3.8.15-lp150.2.3.4 erlang-jinterface-20.3.8.15-lp150.2.3.4 erlang-jinterface-src-20.3.8.15-lp150.2.3.4 erlang-observer-20.3.8.15-lp150.2.3.4 erlang-observer-src-20.3.8.15-lp150.2.3.4 erlang-reltool-20.3.8.15-lp150.2.3.4 erlang-reltool-src-20.3.8.15-lp150.2.3.4 erlang-src-20.3.8.15-lp150.2.3.4 erlang-wx-20.3.8.15-lp150.2.3.4 erlang-wx-debuginfo-20.3.8.15-lp150.2.3.4 erlang-wx-src-20.3.8.15-lp150.2.3.4 - openSUSE Backports SLE-15 (x86_64): erlang-20.3.8.15-bp150.3.3.1 erlang-debugger-20.3.8.15-bp150.3.3.1 erlang-debugger-src-20.3.8.15-bp150.3.3.1 erlang-dialyzer-20.3.8.15-bp150.3.3.1 erlang-dialyzer-src-20.3.8.15-bp150.3.3.1 erlang-diameter-20.3.8.15-bp150.3.3.1 erlang-diameter-src-20.3.8.15-bp150.3.3.1 erlang-doc-20.3.8.15-bp150.3.3.1 erlang-epmd-20.3.8.15-bp150.3.3.1 erlang-et-20.3.8.15-bp150.3.3.1 erlang-et-src-20.3.8.15-bp150.3.3.1 erlang-jinterface-20.3.8.15-bp150.3.3.1 erlang-jinterface-src-20.3.8.15-bp150.3.3.1 erlang-observer-20.3.8.15-bp150.3.3.1 erlang-observer-src-20.3.8.15-bp150.3.3.1 erlang-reltool-20.3.8.15-bp150.3.3.1 erlang-reltool-src-20.3.8.15-bp150.3.3.1 erlang-src-20.3.8.15-bp150.3.3.1 erlang-wx-20.3.8.15-bp150.3.3.1 erlang-wx-src-20.3.8.15-bp150.3.3.1 References: https://bugzilla.suse.com/1118867 https://bugzilla.suse.com/1118869 [View Less]

1 0

openSUSE-RU-2018:4273-1: moderate: Recommended update for libgcrypt
by maintenance＠opensuse.org 23 Dec '18

23 Dec '18

openSUSE Recommended Update: Recommended update for libgcrypt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4273-1 Rating: moderate References: #1117355 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libgcrypt provides … [View More]

1 0

openSUSE-SU-2018:4272-1: important: Security update for yast2-rmt
by opensuse-security＠opensuse.org 23 Dec '18

23 Dec '18

openSUSE Security Update: Security update for yast2-rmt ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4272-1 Rating: important References: #1117602 Cross-References: CVE-2018-17957 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This … [View More]

1 0

openSUSE-RU-2018:4271-1: moderate: Recommended update for cobbler
by maintenance＠opensuse.org 23 Dec '18

23 Dec '18

openSUSE Recommended Update: Recommended update for cobbler ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4271-1 Rating: moderate References: #1113747 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for cobbler fixes the … [View More]

1 0

openSUSE-RU-2018:4270-1: moderate: Recommended update for open-iscsi
by maintenance＠opensuse.org 23 Dec '18

23 Dec '18

openSUSE Recommended Update: Recommended update for open-iscsi ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4270-1 Rating: moderate References: #1100351 #1102589 #1105916 #1111608 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: … [View More]

1 0

openSUSE-RU-2018:4269-1: Recommended update for python-six
by maintenance＠opensuse.org 23 Dec '18

23 Dec '18

openSUSE Recommended Update: Recommended update for python-six ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4269-1 Rating: low References: #1057496 #1113302 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: python-six was updated … [View More]

1 0

openSUSE-RU-2018:4268-1: Recommended update for hyper-v
by maintenance＠opensuse.org 23 Dec '18

23 Dec '18

openSUSE Recommended Update: Recommended update for hyper-v ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4268-1 Rating: low References: #1087658 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for hyper-v provides the … [View More]

1 0

openSUSE-RU-2018:4267-1: moderate: Recommended update for psmisc
by maintenance＠opensuse.org 23 Dec '18

23 Dec '18

openSUSE Recommended Update: Recommended update for psmisc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4267-1 Rating: moderate References: #1098697 #1112780 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for psmisc … [View More]

1 0

openSUSE-RU-2018:4266-1: Recommended update for python-rtslib-fb
by maintenance＠opensuse.org 23 Dec '18

23 Dec '18

openSUSE Recommended Update: Recommended update for python-rtslib-fb ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4266-1 Rating: low References: #1087274 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-rtslib-fb … [View More]

1 0

openSUSE-RU-2018:4265-1: moderate: Recommended update for fonts-config
by maintenance＠opensuse.org 23 Dec '18

23 Dec '18

openSUSE Recommended Update: Recommended update for fonts-config ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4265-1 Rating: moderate References: #1069468 #1101985 #1106850 #998300 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: … [View More]

1 0

openSUSE-RU-2018:4264-1: important: Recommended update for yast2-bootloader
by maintenance＠opensuse.org 23 Dec '18

23 Dec '18

openSUSE Recommended Update: Recommended update for yast2-bootloader ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4264-1 Rating: important References: #1114932 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-… [View More]

1 0

openSUSE-RU-2018:4263-1: moderate: Recommended update for xdm
by maintenance＠opensuse.org 23 Dec '18

23 Dec '18

openSUSE Recommended Update: Recommended update for xdm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4263-1 Rating: moderate References: #1102584 #1118121 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for xdm fixes … [View More]

1 0

openSUSE-SU-2018:4262-1: moderate: Security update for pdns
by opensuse-security＠opensuse.org 22 Dec '18

22 Dec '18

openSUSE Security Update: Security update for pdns ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4262-1 Rating: moderate References: #1114157 Cross-References: CVE-2018-10851 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update … [View More]

1 0

openSUSE-SU-2018:4261-1: moderate: Security update for libqt5-qtbase
by opensuse-security＠opensuse.org 22 Dec '18

22 Dec '18

openSUSE Security Update: Security update for libqt5-qtbase ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4261-1 Rating: moderate References: #1118595 #1118596 Cross-References: CVE-2018-15518 CVE-2018-19873 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now … [View More]available. Description: This update for libqt5-qtbase fixes the following issues: Security issues fixed: - CVE-2018-15518: Fixed double free in QXmlStreamReader (bsc#1118595) - CVE-2018-19873: Fixed Denial of Service on malformed BMP file in QBmpHandler (bsc#1118596) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1592=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libQt5Bootstrap-devel-static-5.6.2-7.6.1 libQt5Concurrent-devel-5.6.2-7.6.1 libQt5Concurrent5-5.6.2-7.6.1 libQt5Concurrent5-debuginfo-5.6.2-7.6.1 libQt5Core-devel-5.6.2-7.6.1 libQt5Core5-5.6.2-7.6.1 libQt5Core5-debuginfo-5.6.2-7.6.1 libQt5DBus-devel-5.6.2-7.6.1 libQt5DBus-devel-debuginfo-5.6.2-7.6.1 libQt5DBus5-5.6.2-7.6.1 libQt5DBus5-debuginfo-5.6.2-7.6.1 libQt5Gui-devel-5.6.2-7.6.1 libQt5Gui5-5.6.2-7.6.1 libQt5Gui5-debuginfo-5.6.2-7.6.1 libQt5Network-devel-5.6.2-7.6.1 libQt5Network5-5.6.2-7.6.1 libQt5Network5-debuginfo-5.6.2-7.6.1 libQt5OpenGL-devel-5.6.2-7.6.1 libQt5OpenGL5-5.6.2-7.6.1 libQt5OpenGL5-debuginfo-5.6.2-7.6.1 libQt5OpenGLExtensions-devel-static-5.6.2-7.6.1 libQt5PlatformHeaders-devel-5.6.2-7.6.1 libQt5PlatformSupport-devel-static-5.6.2-7.6.1 libQt5PrintSupport-devel-5.6.2-7.6.1 libQt5PrintSupport5-5.6.2-7.6.1 libQt5PrintSupport5-debuginfo-5.6.2-7.6.1 libQt5Sql-devel-5.6.2-7.6.1 libQt5Sql5-5.6.2-7.6.1 libQt5Sql5-debuginfo-5.6.2-7.6.1 libQt5Sql5-mysql-5.6.2-7.6.1 libQt5Sql5-mysql-debuginfo-5.6.2-7.6.1 libQt5Sql5-postgresql-5.6.2-7.6.1 libQt5Sql5-postgresql-debuginfo-5.6.2-7.6.1 libQt5Sql5-sqlite-5.6.2-7.6.1 libQt5Sql5-sqlite-debuginfo-5.6.2-7.6.1 libQt5Sql5-unixODBC-5.6.2-7.6.1 libQt5Sql5-unixODBC-debuginfo-5.6.2-7.6.1 libQt5Test-devel-5.6.2-7.6.1 libQt5Test5-5.6.2-7.6.1 libQt5Test5-debuginfo-5.6.2-7.6.1 libQt5Widgets-devel-5.6.2-7.6.1 libQt5Widgets5-5.6.2-7.6.1 libQt5Widgets5-debuginfo-5.6.2-7.6.1 libQt5Xml-devel-5.6.2-7.6.1 libQt5Xml5-5.6.2-7.6.1 libQt5Xml5-debuginfo-5.6.2-7.6.1 libqt5-qtbase-common-devel-5.6.2-7.6.1 libqt5-qtbase-common-devel-debuginfo-5.6.2-7.6.1 libqt5-qtbase-debugsource-5.6.2-7.6.1 libqt5-qtbase-devel-5.6.2-7.6.1 libqt5-qtbase-examples-5.6.2-7.6.1 libqt5-qtbase-examples-debuginfo-5.6.2-7.6.1 - openSUSE Leap 42.3 (noarch): libQt5Core-private-headers-devel-5.6.2-7.6.1 libQt5DBus-private-headers-devel-5.6.2-7.6.1 libQt5Gui-private-headers-devel-5.6.2-7.6.1 libQt5Network-private-headers-devel-5.6.2-7.6.1 libQt5OpenGL-private-headers-devel-5.6.2-7.6.1 libQt5PlatformSupport-private-headers-devel-5.6.2-7.6.1 libQt5PrintSupport-private-headers-devel-5.6.2-7.6.1 libQt5Sql-private-headers-devel-5.6.2-7.6.1 libQt5Test-private-headers-devel-5.6.2-7.6.1 libQt5Widgets-private-headers-devel-5.6.2-7.6.1 libqt5-qtbase-private-headers-devel-5.6.2-7.6.1 - openSUSE Leap 42.3 (x86_64): libQt5Bootstrap-devel-static-32bit-5.6.2-7.6.1 libQt5Concurrent-devel-32bit-5.6.2-7.6.1 libQt5Concurrent5-32bit-5.6.2-7.6.1 libQt5Concurrent5-debuginfo-32bit-5.6.2-7.6.1 libQt5Core-devel-32bit-5.6.2-7.6.1 libQt5Core5-32bit-5.6.2-7.6.1 libQt5Core5-debuginfo-32bit-5.6.2-7.6.1 libQt5DBus-devel-32bit-5.6.2-7.6.1 libQt5DBus-devel-debuginfo-32bit-5.6.2-7.6.1 libQt5DBus5-32bit-5.6.2-7.6.1 libQt5DBus5-debuginfo-32bit-5.6.2-7.6.1 libQt5Gui-devel-32bit-5.6.2-7.6.1 libQt5Gui5-32bit-5.6.2-7.6.1 libQt5Gui5-debuginfo-32bit-5.6.2-7.6.1 libQt5Network-devel-32bit-5.6.2-7.6.1 libQt5Network5-32bit-5.6.2-7.6.1 libQt5Network5-debuginfo-32bit-5.6.2-7.6.1 libQt5OpenGL-devel-32bit-5.6.2-7.6.1 libQt5OpenGL5-32bit-5.6.2-7.6.1 libQt5OpenGL5-debuginfo-32bit-5.6.2-7.6.1 libQt5OpenGLExtensions-devel-static-32bit-5.6.2-7.6.1 libQt5PlatformSupport-devel-static-32bit-5.6.2-7.6.1 libQt5PrintSupport-devel-32bit-5.6.2-7.6.1 libQt5PrintSupport5-32bit-5.6.2-7.6.1 libQt5PrintSupport5-debuginfo-32bit-5.6.2-7.6.1 libQt5Sql-devel-32bit-5.6.2-7.6.1 libQt5Sql5-32bit-5.6.2-7.6.1 libQt5Sql5-debuginfo-32bit-5.6.2-7.6.1 libQt5Sql5-mysql-32bit-5.6.2-7.6.1 libQt5Sql5-mysql-debuginfo-32bit-5.6.2-7.6.1 libQt5Sql5-postgresql-32bit-5.6.2-7.6.1 libQt5Sql5-postgresql-debuginfo-32bit-5.6.2-7.6.1 libQt5Sql5-sqlite-32bit-5.6.2-7.6.1 libQt5Sql5-sqlite-debuginfo-32bit-5.6.2-7.6.1 libQt5Sql5-unixODBC-32bit-5.6.2-7.6.1 libQt5Sql5-unixODBC-debuginfo-32bit-5.6.2-7.6.1 libQt5Test-devel-32bit-5.6.2-7.6.1 libQt5Test5-32bit-5.6.2-7.6.1 libQt5Test5-debuginfo-32bit-5.6.2-7.6.1 libQt5Widgets-devel-32bit-5.6.2-7.6.1 libQt5Widgets5-32bit-5.6.2-7.6.1 libQt5Widgets5-debuginfo-32bit-5.6.2-7.6.1 libQt5Xml-devel-32bit-5.6.2-7.6.1 libQt5Xml5-32bit-5.6.2-7.6.1 libQt5Xml5-debuginfo-32bit-5.6.2-7.6.1 libqt5-qtbase-examples-32bit-5.6.2-7.6.1 libqt5-qtbase-examples-debuginfo-32bit-5.6.2-7.6.1 References: https://www.suse.com/security/cve/CVE-2018-15518.html https://www.suse.com/security/cve/CVE-2018-19873.html https://bugzilla.suse.com/1118595 https://bugzilla.suse.com/1118596 [View Less]

1 0

openSUSE-SU-2018:4260-1: moderate: Security update for libnettle
by opensuse-security＠opensuse.org 22 Dec '18

22 Dec '18

openSUSE Security Update: Security update for libnettle ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4260-1 Rating: moderate References: #1118086 Cross-References: CVE-2018-16869 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This … [View More]

1 0

openSUSE-SU-2018:4259-1: moderate: Security update for bluez
by opensuse-security＠opensuse.org 22 Dec '18

22 Dec '18

openSUSE Security Update: Security update for bluez ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4259-1 Rating: moderate References: #1013721 #1013732 Cross-References: CVE-2016-9800 CVE-2016-9801 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. … [View More]

1 0

openSUSE-SU-2018:4258-1: moderate: Security update for perl
by opensuse-security＠opensuse.org 22 Dec '18

22 Dec '18

openSUSE Security Update: Security update for perl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4258-1 Rating: moderate References: #1114674 #1114675 #1114681 #1114686 Cross-References: CVE-2018-18311 CVE-2018-18312 CVE-2018-18313 CVE-2018-18314 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ … [View More]

1 0

openSUSE-SU-2018:4257-1: moderate: Security update for git
by opensuse-security＠opensuse.org 22 Dec '18

22 Dec '18

openSUSE Security Update: Security update for git ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4257-1 Rating: moderate References: #1117257 Cross-References: CVE-2018-19486 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for … [View More]

1 0

openSUSE-SU-2018:4256-1: moderate: Security update for tiff
by opensuse-security＠opensuse.org 22 Dec '18

22 Dec '18

openSUSE Security Update: Security update for tiff ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4256-1 Rating: moderate References: #1017693 #1054594 #1115717 #990460 Cross-References: CVE-2016-10092 CVE-2016-10093 CVE-2016-10094 CVE-2016-6223 CVE-2017-12944 CVE-2018-19210 Affected Products: openSUSE Leap 42.3 … [View More]______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update for tiff fixes the following issues: Security issues fixed: - CVE-2018-19210: Fixed NULL pointer dereference in the TIFFWriteDirectorySec function (bsc#1115717). - CVE-2017-12944: Fixed denial of service issue in the TIFFReadDirEntryArray function (bsc#1054594). - CVE-2016-10094: Fixed heap-based buffer overflow in the _tiffWriteProc function (bsc#1017693). - CVE-2016-10093: Fixed heap-based buffer overflow in the _TIFFmemcpy function (bsc#1017693). - CVE-2016-10092: Fixed heap-based buffer overflow in the TIFFReverseBits function (bsc#1017693). - CVE-2016-6223: Fixed out-of-bounds read on memory-mapped files in TIFFReadRawStrip1() and TIFFReadRawTile1() (bsc#990460). This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1598=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libtiff-devel-4.0.9-43.1 libtiff5-4.0.9-43.1 libtiff5-debuginfo-4.0.9-43.1 tiff-4.0.9-43.1 tiff-debuginfo-4.0.9-43.1 tiff-debugsource-4.0.9-43.1 - openSUSE Leap 42.3 (x86_64): libtiff-devel-32bit-4.0.9-43.1 libtiff5-32bit-4.0.9-43.1 libtiff5-debuginfo-32bit-4.0.9-43.1 References: https://www.suse.com/security/cve/CVE-2016-10092.html https://www.suse.com/security/cve/CVE-2016-10093.html https://www.suse.com/security/cve/CVE-2016-10094.html https://www.suse.com/security/cve/CVE-2016-6223.html https://www.suse.com/security/cve/CVE-2017-12944.html https://www.suse.com/security/cve/CVE-2018-19210.html https://bugzilla.suse.com/1017693 https://bugzilla.suse.com/1054594 https://bugzilla.suse.com/1115717 https://bugzilla.suse.com/990460 [View Less]

1 0

openSUSE-SU-2018:4255-1: important: Security update for go1.10
by opensuse-security＠opensuse.org 22 Dec '18

22 Dec '18

openSUSE Security Update: Security update for go1.10 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4255-1 Rating: important References: #1082409 #1098017 #1113978 #1118897 #1118898 #1118899 #1119634 #1119706 Cross-References: CVE-2018-16873 CVE-2018-16874 CVE-2018-16875 Affected Products: openSUSE Leap 42.3 … [View More]______________________________________________________________________________ An update that solves three vulnerabilities and has 5 fixes is now available. Description: This update for go1.10 fixes the following issues: Security vulnerabilities fixed: - CVE-2018-16873 (bsc#1118897): cmd/go: remote command execution during "go get -u". - CVE-2018-16874 (bsc#1118898): cmd/go: directory traversal in "go get" via curly braces in import paths - CVE-2018-16875 (bsc#1118899): crypto/x509: CPU denial of service Other issues fixed: - Fix build error with PIE linker flags on ppc64le. (bsc#1113978, bsc#1098017) - Review dependencies (requires, recommends and supports) (bsc#1082409) - Make profile.d/go.sh no longer set GOROOT=, in order to make switching between versions no longer break. This ends up removing the need for go.sh entirely (because GOPATH is also set automatically) (boo#1119634) - Fix a regression that broke go get for import path patterns containing "..." (bsc#1119706) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1593=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): go1.10-1.10.7-5.1 go1.10-doc-1.10.7-5.1 - openSUSE Leap 42.3 (x86_64): go1.10-race-1.10.7-5.1 References: https://www.suse.com/security/cve/CVE-2018-16873.html https://www.suse.com/security/cve/CVE-2018-16874.html https://www.suse.com/security/cve/CVE-2018-16875.html https://bugzilla.suse.com/1082409 https://bugzilla.suse.com/1098017 https://bugzilla.suse.com/1113978 https://bugzilla.suse.com/1118897 https://bugzilla.suse.com/1118898 https://bugzilla.suse.com/1118899 https://bugzilla.suse.com/1119634 https://bugzilla.suse.com/1119706 [View Less]

1 0

openSUSE-SU-2018:4254-1: moderate: Security update for ovmf
by opensuse-security＠opensuse.org 22 Dec '18

22 Dec '18

openSUSE Security Update: Security update for ovmf ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4254-1 Rating: moderate References: #1115916 #1115917 Cross-References: CVE-2017-5731 CVE-2017-5732 CVE-2017-5733 CVE-2017-5734 CVE-2017-5735 CVE-2018-3613 Affected Products: openSUSE Leap 42.3 … [View More]______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update for ovmf fixes the following issues: Security issues fixed: - CVE-2018-3613: Fixed AuthVariable Timestamp zeroing issue on APPEND_WRITE (bsc#1115916). - CVE-2017-5731: Fixed privilege escalation via processing of malformed files in TianoCompress.c (bsc#1115917). - CVE-2017-5732: Fixed privilege escalation via processing of malformed files in BaseUefiDecompressLib.c (bsc#1115917). - CVE-2017-5733: Fixed privilege escalation via heap-based buffer overflow in MakeTable() function (bsc#1115917). - CVE-2017-5734: Fixed privilege escalation via stack-based buffer overflow in MakeTable() function (bsc#1115917). - CVE-2017-5735: Fixed privilege escalation via heap-based buffer overflow in Decode() function (bsc#1115917). This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1591=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): ovmf-2017+git1492060560.b6d11d7c46-13.1 ovmf-tools-2017+git1492060560.b6d11d7c46-13.1 - openSUSE Leap 42.3 (noarch): qemu-ovmf-ia32-2017+git1492060560.b6d11d7c46-13.1 qemu-ovmf-x86_64-2017+git1492060560.b6d11d7c46-13.1 - openSUSE Leap 42.3 (x86_64): qemu-ovmf-x86_64-debug-2017+git1492060560.b6d11d7c46-13.1 References: https://www.suse.com/security/cve/CVE-2017-5731.html https://www.suse.com/security/cve/CVE-2017-5732.html https://www.suse.com/security/cve/CVE-2017-5733.html https://www.suse.com/security/cve/CVE-2017-5734.html https://www.suse.com/security/cve/CVE-2017-5735.html https://www.suse.com/security/cve/CVE-2018-3613.html https://bugzilla.suse.com/1115916 https://bugzilla.suse.com/1115917 [View Less]

1 0

openSUSE-RU-2018:4253-1: moderate: Recommended update for nvme-cli
by maintenance＠opensuse.org 22 Dec '18

22 Dec '18

openSUSE Recommended Update: Recommended update for nvme-cli ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4253-1 Rating: moderate References: #1105314 #1111384 #1113400 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This … [View More]

1 0

openSUSE-SU-2018:4252-1: moderate: Security update for tcpdump
by opensuse-security＠opensuse.org 22 Dec '18

22 Dec '18

openSUSE Security Update: Security update for tcpdump ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4252-1 Rating: moderate References: #1117267 Cross-References: CVE-2018-19519 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update … [View More]

1 0

openSUSE-RU-2018:4251-1: moderate: Recommended update for dracut
by maintenance＠opensuse.org 22 Dec '18

22 Dec '18

openSUSE Recommended Update: Recommended update for dracut ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4251-1 Rating: moderate References: #1053248 #937555 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for dracut … [View More]

1 0

openSUSE-RU-2018:4250-1: moderate: Recommended update for pesign-obs-integration
by maintenance＠opensuse.org 22 Dec '18

22 Dec '18

openSUSE Recommended Update: Recommended update for pesign-obs-integration ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4250-1 Rating: moderate References: #1114605 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for … [View More]

1 0

openSUSE-RU-2018:4249-1: moderate: Recommended update for libmtp
by maintenance＠opensuse.org 22 Dec '18

22 Dec '18

openSUSE Recommended Update: Recommended update for libmtp ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4249-1 Rating: moderate References: #1110868 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libmtp fixes the … [View More]

1 0

openSUSE-SU-2018:4248-1: moderate: Security update for tryton
by opensuse-security＠opensuse.org 22 Dec '18

22 Dec '18

openSUSE Security Update: Security update for tryton ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4248-1 Rating: moderate References: #1107771 #1117105 Cross-References: CVE-2018-19443 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available.… [View More]

1 0

openSUSE-RU-2018:4247-1: moderate: Recommended update for grub2
by maintenance＠opensuse.org 22 Dec '18

22 Dec '18

openSUSE Recommended Update: Recommended update for grub2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4247-1 Rating: moderate References: #1110073 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for grub2 fixes the … [View More]

1 0

Main

Development

Information

Community

Social Media

Other

openSUSE Updates