March 2018 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2018:0701-1: moderate: Recommended update for systemd
by maintenance＠opensuse.org 16 Mar '18

16 Mar '18

openSUSE Recommended Update: Recommended update for systemd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:0701-1 Rating: moderate References: #1075743 #1078358 #1081170 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for systemd fixes the following issues: - Add dmi/id conditions to 80-acpi-container-hotplug.rules to restrict the rule that it can only be triggered on Huawei Kunlun 9008, 9016 and 9032 machines. (bsc#1078358, bsc#1081170, bsc#1075743) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-259=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): libsystemd0-228-47.1 libsystemd0-debuginfo-228-47.1 libsystemd0-mini-228-47.1 libsystemd0-mini-debuginfo-228-47.1 libudev-devel-228-47.1 libudev-mini-devel-228-47.1 libudev-mini1-228-47.1 libudev-mini1-debuginfo-228-47.1 libudev1-228-47.1 libudev1-debuginfo-228-47.1 nss-myhostname-228-47.1 nss-myhostname-debuginfo-228-47.1 nss-mymachines-228-47.1 nss-mymachines-debuginfo-228-47.1 systemd-228-47.1 systemd-debuginfo-228-47.1 systemd-debugsource-228-47.1 systemd-devel-228-47.1 systemd-logger-228-47.1 systemd-mini-228-47.1 systemd-mini-debuginfo-228-47.1 systemd-mini-debugsource-228-47.1 systemd-mini-devel-228-47.1 systemd-mini-sysvinit-228-47.1 systemd-sysvinit-228-47.1 udev-228-47.1 udev-debuginfo-228-47.1 udev-mini-228-47.1 udev-mini-debuginfo-228-47.1 - openSUSE Leap 42.3 (noarch): systemd-bash-completion-228-47.1 systemd-mini-bash-completion-228-47.1 - openSUSE Leap 42.3 (x86_64): libsystemd0-32bit-228-47.1 libsystemd0-debuginfo-32bit-228-47.1 libudev1-32bit-228-47.1 libudev1-debuginfo-32bit-228-47.1 nss-myhostname-32bit-228-47.1 nss-myhostname-debuginfo-32bit-228-47.1 systemd-32bit-228-47.1 systemd-debuginfo-32bit-228-47.1 References: https://bugzilla.suse.com/1075743 https://bugzilla.suse.com/1078358 https://bugzilla.suse.com/1081170

1 0

openSUSE-RU-2018:0700-1: Recommended update for libsolv, libzypp, zypper
by maintenance＠opensuse.org 16 Mar '18

16 Mar '18

openSUSE Recommended Update: Recommended update for libsolv, libzypp, zypper ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:0700-1 Rating: low References: #1074687 #1075449 #1076415 #1079334 #953130 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: This update for libsolv, libzypp and zypper provides the following fixes: libsolv: - Fix a bug that could make fileconflict detection very slow in some cases. (bnc#953130) - Add new configuration options: ENABLE_RPMDB_LIBRPM and ENABLE_RPMPKG_LIBRPM. - Add a new function to change the whatprovides data: pool_set_whatprovides. - Significant improvements in the selection code. libzypp: - Make sure deleted keys are also removed from rpmdb. (bsc#1075449) - plugin: Don't reject header values containing ':'. (bsc#1074687) - RpmDb::checkPackage: Fix parsing localized rpm output. (bsc#1076415) zypper: - Do not recommend cron as it is not a direct dependency of zypper. (bsc#1079334) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-263=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): libsolv-debugsource-0.6.32-6.1 libsolv-demo-0.6.32-6.1 libsolv-demo-debuginfo-0.6.32-6.1 libsolv-devel-0.6.32-6.1 libsolv-devel-debuginfo-0.6.32-6.1 libsolv-tools-0.6.32-6.1 libsolv-tools-debuginfo-0.6.32-6.1 libzypp-16.17.10-21.1 libzypp-debuginfo-16.17.10-21.1 libzypp-debugsource-16.17.10-21.1 libzypp-devel-16.17.10-21.1 libzypp-devel-doc-16.17.10-21.1 perl-solv-0.6.32-6.1 perl-solv-debuginfo-0.6.32-6.1 python-solv-0.6.32-6.1 python-solv-debuginfo-0.6.32-6.1 python3-solv-0.6.32-6.1 python3-solv-debuginfo-0.6.32-6.1 ruby-solv-0.6.32-6.1 ruby-solv-debuginfo-0.6.32-6.1 zypper-1.13.40-17.2 zypper-debuginfo-1.13.40-17.2 zypper-debugsource-1.13.40-17.2 - openSUSE Leap 42.3 (noarch): zypper-aptitude-1.13.40-17.2 zypper-log-1.13.40-17.2 References: https://bugzilla.suse.com/1074687 https://bugzilla.suse.com/1075449 https://bugzilla.suse.com/1076415 https://bugzilla.suse.com/1079334 https://bugzilla.suse.com/953130

1 0

openSUSE-RU-2018:0699-1: Recommended update for wireless-regdb
by maintenance＠opensuse.org 16 Mar '18

16 Mar '18

openSUSE Recommended Update: Recommended update for wireless-regdb ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:0699-1 Rating: low References: #1074838 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update brings the latest version (2017.12.23) of regulatory domain data for wireless communication devices. (bsc#1074838) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-260=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (noarch): wireless-regdb-2017.12.23-5.3.2 References: https://bugzilla.suse.com/1074838

1 0

openSUSE-RU-2018:0696-1: moderate: Recommended update for messagelib
by maintenance＠opensuse.org 15 Mar '18

15 Mar '18

openSUSE Recommended Update: Recommended update for messagelib ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:0696-1 Rating: moderate References: #1078174 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for messagelib fixes the following issues: - A previous update for boo#1078174 broke binary compatibility of the library. The change has been reverted. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-258=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (x86_64): messagelib-17.04.2-9.1 messagelib-debuginfo-17.04.2-9.1 messagelib-debugsource-17.04.2-9.1 messagelib-devel-17.04.2-9.1 - openSUSE Leap 42.3 (noarch): messagelib-lang-17.04.2-9.1 References: https://bugzilla.suse.com/1078174

1 0

openSUSE-SU-2018:0688-1: moderate: Security update for postgresql94
by opensuse-security＠opensuse.org 15 Mar '18

15 Mar '18

openSUSE Security Update: Security update for postgresql94 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:0688-1 Rating: moderate References: #1077983 Cross-References: CVE-2018-1053 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for postgresql94 fixes the following issues: PostgreSQL was updated to version 9.4.15, the full release notes are here: https://www.postgresql.org/docs/9.4/static/release-9-4-15.html - CVE-2018-1053: Ensure that all temporary files made by pg_upgrade are non-world-readable. (bsc#1077983) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-257=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): postgresql94-9.4.16-18.1 postgresql94-contrib-9.4.16-18.1 postgresql94-contrib-debuginfo-9.4.16-18.1 postgresql94-debuginfo-9.4.16-18.1 postgresql94-debugsource-9.4.16-18.1 postgresql94-devel-9.4.16-18.1 postgresql94-devel-debuginfo-9.4.16-18.1 postgresql94-libs-debugsource-9.4.16-18.1 postgresql94-plperl-9.4.16-18.1 postgresql94-plperl-debuginfo-9.4.16-18.1 postgresql94-plpython-9.4.16-18.1 postgresql94-plpython-debuginfo-9.4.16-18.1 postgresql94-pltcl-9.4.16-18.1 postgresql94-pltcl-debuginfo-9.4.16-18.1 postgresql94-server-9.4.16-18.1 postgresql94-server-debuginfo-9.4.16-18.1 postgresql94-test-9.4.16-18.1 - openSUSE Leap 42.3 (noarch): postgresql94-docs-9.4.16-18.1 References: https://www.suse.com/security/cve/CVE-2018-1053.html https://bugzilla.suse.com/1077983

1 0

openSUSE-SU-2018:0684-1: important: Security update for java-1_7_0-openjdk
by opensuse-security＠opensuse.org 15 Mar '18

15 Mar '18

openSUSE Security Update: Security update for java-1_7_0-openjdk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:0684-1 Rating: important References: #1076366 Cross-References: CVE-2018-2579 CVE-2018-2588 CVE-2018-2599 CVE-2018-2602 CVE-2018-2603 CVE-2018-2618 CVE-2018-2629 CVE-2018-2633 CVE-2018-2634 CVE-2018-2637 CVE-2018-2641 CVE-2018-2663 CVE-2018-2677 CVE-2018-2678 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes 14 vulnerabilities is now available. Description: This update for java-1_7_0-openjdk fixes the following issues: Security issues fixed in OpenJDK 7u171 (January 2018 CPU)(bsc#1076366): - CVE-2018-2579: Improve key keying case - CVE-2018-2588: Improve LDAP logins - CVE-2018-2599: Improve reliability of DNS lookups - CVE-2018-2602: Improve usage messages - CVE-2018-2603: Improve PKCS usage - CVE-2018-2618: Stricter key generation - CVE-2018-2629: Improve GSS handling - CVE-2018-2633: Improve LDAP lookup robustness - CVE-2018-2634: Improve property negotiations - CVE-2018-2637: Improve JMX supportive features - CVE-2018-2641: Improve GTK initialization - CVE-2018-2663: More refactoring for deserialization cases - CVE-2018-2677: More refactoring for client deserialization cases - CVE-2018-2678: More refactoring for naming This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-256=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): java-1_7_0-openjdk-1.7.0.171-48.3 java-1_7_0-openjdk-accessibility-1.7.0.171-48.3 java-1_7_0-openjdk-bootstrap-1.7.0.171-48.3 java-1_7_0-openjdk-bootstrap-debuginfo-1.7.0.171-48.3 java-1_7_0-openjdk-bootstrap-debugsource-1.7.0.171-48.3 java-1_7_0-openjdk-bootstrap-devel-1.7.0.171-48.3 java-1_7_0-openjdk-bootstrap-devel-debuginfo-1.7.0.171-48.3 java-1_7_0-openjdk-bootstrap-headless-1.7.0.171-48.3 java-1_7_0-openjdk-bootstrap-headless-debuginfo-1.7.0.171-48.3 java-1_7_0-openjdk-debuginfo-1.7.0.171-48.3 java-1_7_0-openjdk-debugsource-1.7.0.171-48.3 java-1_7_0-openjdk-demo-1.7.0.171-48.3 java-1_7_0-openjdk-demo-debuginfo-1.7.0.171-48.3 java-1_7_0-openjdk-devel-1.7.0.171-48.3 java-1_7_0-openjdk-devel-debuginfo-1.7.0.171-48.3 java-1_7_0-openjdk-headless-1.7.0.171-48.3 java-1_7_0-openjdk-headless-debuginfo-1.7.0.171-48.3 java-1_7_0-openjdk-src-1.7.0.171-48.3 - openSUSE Leap 42.3 (noarch): java-1_7_0-openjdk-javadoc-1.7.0.171-48.3 References: https://www.suse.com/security/cve/CVE-2018-2579.html https://www.suse.com/security/cve/CVE-2018-2588.html https://www.suse.com/security/cve/CVE-2018-2599.html https://www.suse.com/security/cve/CVE-2018-2602.html https://www.suse.com/security/cve/CVE-2018-2603.html https://www.suse.com/security/cve/CVE-2018-2618.html https://www.suse.com/security/cve/CVE-2018-2629.html https://www.suse.com/security/cve/CVE-2018-2633.html https://www.suse.com/security/cve/CVE-2018-2634.html https://www.suse.com/security/cve/CVE-2018-2637.html https://www.suse.com/security/cve/CVE-2018-2641.html https://www.suse.com/security/cve/CVE-2018-2663.html https://www.suse.com/security/cve/CVE-2018-2677.html https://www.suse.com/security/cve/CVE-2018-2678.html https://bugzilla.suse.com/1076366

1 0

openSUSE-SU-2018:0681-1: important: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 15 Mar '18

15 Mar '18

openSUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:0681-1 Rating: important References: #1076907 #1085130 Cross-References: CVE-2018-5125 CVE-2018-5127 CVE-2018-5129 CVE-2018-5130 CVE-2018-5131 CVE-2018-5144 CVE-2018-5145 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: This update for Mozilla Firefox to version 52.7.0esr fixes multiple issues. Security issues fixed (bsc#1085130, MFSA 2018-07): - CVE-2018-5127: Buffer overflow manipulating SVG animatedPathSegList - CVE-2018-5129: Out-of-bounds write with malformed IPC messages - CVE-2018-5130: Mismatched RTP payload type can trigger memory corruption - CVE-2018-5131: Fetch API improperly returns cached copies of no-store/no-cache resources - CVE-2018-5144: Integer overflow during Unicode conversion - CVE-2018-5125: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 - CVE-2018-5145: Memory safety bugs fixed in Firefox ESR 52.7 The following bug fixes are included: - bsc#1076907: provide mimehandler(text/html) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-255=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (x86_64): MozillaFirefox-52.7-78.1 MozillaFirefox-branding-upstream-52.7-78.1 MozillaFirefox-buildsymbols-52.7-78.1 MozillaFirefox-debuginfo-52.7-78.1 MozillaFirefox-debugsource-52.7-78.1 MozillaFirefox-devel-52.7-78.1 MozillaFirefox-translations-common-52.7-78.1 MozillaFirefox-translations-other-52.7-78.1 References: https://www.suse.com/security/cve/CVE-2018-5125.html https://www.suse.com/security/cve/CVE-2018-5127.html https://www.suse.com/security/cve/CVE-2018-5129.html https://www.suse.com/security/cve/CVE-2018-5130.html https://www.suse.com/security/cve/CVE-2018-5131.html https://www.suse.com/security/cve/CVE-2018-5144.html https://www.suse.com/security/cve/CVE-2018-5145.html https://bugzilla.suse.com/1076907 https://bugzilla.suse.com/1085130

1 0

openSUSE-SU-2018:0680-1: moderate: Security update for adminer
by opensuse-security＠opensuse.org 15 Mar '18

15 Mar '18

openSUSE Security Update: Security update for adminer ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:0680-1 Rating: moderate References: #1002214 #1083948 Cross-References: CVE-2018-7667 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for adminer fixes the following issues: * Sync up conditional sub-packages with devel package to disable uninstallable pacakges for boo#1002214. * Update to version v4.4.0 for boo#1083948 to resolve CVE-2018-7667 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-253=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (noarch): adminer-4.4.0-4.5.1 adminer-designs-4.4.0-4.5.1 adminer-editor-4.4.0-4.5.1 adminer-firebird-4.4.0-4.5.1 adminer-mysql-4.4.0-4.5.1 adminer-pgsql-4.4.0-4.5.1 adminer-sqlite-4.4.0-4.5.1 References: https://www.suse.com/security/cve/CVE-2018-7667.html https://bugzilla.suse.com/1002214 https://bugzilla.suse.com/1083948

1 0

openSUSE-SU-2018:0679-1: important: Security update for java-1_8_0-openjdk
by opensuse-security＠opensuse.org 15 Mar '18

15 Mar '18

openSUSE Security Update: Security update for java-1_8_0-openjdk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:0679-1 Rating: important References: #1076366 Cross-References: CVE-2018-2579 CVE-2018-2582 CVE-2018-2588 CVE-2018-2599 CVE-2018-2602 CVE-2018-2603 CVE-2018-2618 CVE-2018-2629 CVE-2018-2633 CVE-2018-2634 CVE-2018-2637 CVE-2018-2641 CVE-2018-2663 CVE-2018-2677 CVE-2018-2678 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes 15 vulnerabilities is now available. Description: This update for java-1_8_0-openjdk fixes the following issues: Security issues fix in jdk8u161 (icedtea 3.7.0)(bsc#1076366): - CVE-2018-2579: Improve key keying case - CVE-2018-2582: Better interface invocations - CVE-2018-2588: Improve LDAP logins - CVE-2018-2599: Improve reliability of DNS lookups - CVE-2018-2602: Improve usage messages - CVE-2018-2603: Improve PKCS usage - CVE-2018-2618: Stricter key generation - CVE-2018-2629: Improve GSS handling - CVE-2018-2633: Improve LDAP lookup robustness - CVE-2018-2634: Improve property negotiations - CVE-2018-2637: Improve JMX supportive features - CVE-2018-2641: Improve GTK initialization - CVE-2018-2663: More refactoring for deserialization cases - CVE-2018-2677: More refactoring for client deserialization cases - CVE-2018-2678: More refactoring for naming deserialization cases This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-254=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): java-1_8_0-openjdk-1.8.0.161-21.1 java-1_8_0-openjdk-accessibility-1.8.0.161-21.1 java-1_8_0-openjdk-debuginfo-1.8.0.161-21.1 java-1_8_0-openjdk-debugsource-1.8.0.161-21.1 java-1_8_0-openjdk-demo-1.8.0.161-21.1 java-1_8_0-openjdk-demo-debuginfo-1.8.0.161-21.1 java-1_8_0-openjdk-devel-1.8.0.161-21.1 java-1_8_0-openjdk-devel-debuginfo-1.8.0.161-21.1 java-1_8_0-openjdk-headless-1.8.0.161-21.1 java-1_8_0-openjdk-headless-debuginfo-1.8.0.161-21.1 java-1_8_0-openjdk-src-1.8.0.161-21.1 - openSUSE Leap 42.3 (noarch): java-1_8_0-openjdk-javadoc-1.8.0.161-21.1 References: https://www.suse.com/security/cve/CVE-2018-2579.html https://www.suse.com/security/cve/CVE-2018-2582.html https://www.suse.com/security/cve/CVE-2018-2588.html https://www.suse.com/security/cve/CVE-2018-2599.html https://www.suse.com/security/cve/CVE-2018-2602.html https://www.suse.com/security/cve/CVE-2018-2603.html https://www.suse.com/security/cve/CVE-2018-2618.html https://www.suse.com/security/cve/CVE-2018-2629.html https://www.suse.com/security/cve/CVE-2018-2633.html https://www.suse.com/security/cve/CVE-2018-2634.html https://www.suse.com/security/cve/CVE-2018-2637.html https://www.suse.com/security/cve/CVE-2018-2641.html https://www.suse.com/security/cve/CVE-2018-2663.html https://www.suse.com/security/cve/CVE-2018-2677.html https://www.suse.com/security/cve/CVE-2018-2678.html https://bugzilla.suse.com/1076366

1 0

openSUSE-RU-2018:0677-1: Recommended update for amazon-ssm-agent
by maintenance＠opensuse.org 14 Mar '18

14 Mar '18

openSUSE Recommended Update: Recommended update for amazon-ssm-agent ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:0677-1 Rating: low References: #1067256 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for amazon-ssm-agent provides version 2.2.45.0 and brings the following fixes and improvements: - Added versioning support for Parameter Store. - Added additional gatherers for inventory, including windows service gatherer, windows registry gatherer, file metadata gatherer, windows role gatherer. - Added support for aws:downloadContent plugin to download content from GitHub, S3 and documents from SSM documents. - Added support for aws:runDocument plugin to execute SSM documents. - Improved speed of initial association application on boot. - Various aws:configurePackage service integration changes. - Improved home directory detection in non-x64 linux platforms to address cases where shared AWS SDK credentials were not available in on-prem instances. - Added exponential backoff in bucket region check for s3 upload. - Fixed an issue with orchestration directory cleanup for RunCommand. - Support for command execution out-of-process This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-252=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): amazon-ssm-agent-2.2.45.0-2.3.1 References: https://bugzilla.suse.com/1067256

1 0