March 2018 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2018:0676-1: moderate: Recommended update for gcc7
by maintenance＠opensuse.org 14 Mar '18

14 Mar '18

openSUSE Recommended Update: Recommended update for gcc7 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:0676-1 Rating: moderate References: #1074621 #1083290 #1083946 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for gcc7 to 7.3 contains a number of fixes and improvements. The following features were added: Mitigations for Spectre Variant 2: - retpoline support via -mindirect-branch=, -mfunction-return= and friends was added which can be used to mitigate Spectre Variant 2.2. This feature was implemented for x86 (bnc#1074621) and also for the IBM Z platform (bnc#1083946). The following issues were fixed: - nvptx offload target compiler install issues - newlib parts split into cross-nvptx-newlib7-devel - Chromium build failures (bnc#1083290) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-251=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): cpp7-7.3.1+r258313-6.1 cpp7-debuginfo-7.3.1+r258313-6.1 gcc7-7.3.1+r258313-6.1 gcc7-ada-7.3.1+r258313-6.1 gcc7-ada-debuginfo-7.3.1+r258313-6.1 gcc7-c++-7.3.1+r258313-6.1 gcc7-c++-debuginfo-7.3.1+r258313-6.1 gcc7-debuginfo-7.3.1+r258313-6.1 gcc7-debugsource-7.3.1+r258313-6.1 gcc7-fortran-7.3.1+r258313-6.1 gcc7-fortran-debuginfo-7.3.1+r258313-6.1 gcc7-go-7.3.1+r258313-6.1 gcc7-go-debuginfo-7.3.1+r258313-6.1 gcc7-locale-7.3.1+r258313-6.1 gcc7-obj-c++-7.3.1+r258313-6.1 gcc7-obj-c++-debuginfo-7.3.1+r258313-6.1 gcc7-objc-7.3.1+r258313-6.1 gcc7-objc-debuginfo-7.3.1+r258313-6.1 gcc7-testresults-7.3.1+r258313-6.1 libada7-7.3.1+r258313-6.1 libada7-debuginfo-7.3.1+r258313-6.1 libasan4-7.3.1+r258313-6.1 libasan4-debuginfo-7.3.1+r258313-6.1 libatomic1-7.3.1+r258313-6.1 libatomic1-debuginfo-7.3.1+r258313-6.1 libcilkrts5-7.3.1+r258313-6.1 libcilkrts5-debuginfo-7.3.1+r258313-6.1 libgcc_s1-7.3.1+r258313-6.1 libgcc_s1-debuginfo-7.3.1+r258313-6.1 libgfortran4-7.3.1+r258313-6.1 libgfortran4-debuginfo-7.3.1+r258313-6.1 libgo11-7.3.1+r258313-6.1 libgo11-debuginfo-7.3.1+r258313-6.1 libgomp1-7.3.1+r258313-6.1 libgomp1-debuginfo-7.3.1+r258313-6.1 libitm1-7.3.1+r258313-6.1 libitm1-debuginfo-7.3.1+r258313-6.1 libmpx2-7.3.1+r258313-6.1 libmpx2-debuginfo-7.3.1+r258313-6.1 libmpxwrappers2-7.3.1+r258313-6.1 libmpxwrappers2-debuginfo-7.3.1+r258313-6.1 libobjc4-gcc7-7.3.1+r258313-6.1 libobjc4-gcc7-debuginfo-7.3.1+r258313-6.1 libquadmath0-7.3.1+r258313-6.1 libquadmath0-debuginfo-7.3.1+r258313-6.1 libstdc++6-7.3.1+r258313-6.1 libstdc++6-debuginfo-7.3.1+r258313-6.1 libstdc++6-devel-gcc7-7.3.1+r258313-6.1 libstdc++6-locale-7.3.1+r258313-6.1 libubsan0-7.3.1+r258313-6.1 libubsan0-debuginfo-7.3.1+r258313-6.1 - openSUSE Leap 42.3 (noarch): gcc7-info-7.3.1+r258313-6.1 - openSUSE Leap 42.3 (x86_64): cross-nvptx-gcc7-7.3.1+r258313-6.1 cross-nvptx-newlib7-devel-7.3.1+r258313-6.1 gcc7-32bit-7.3.1+r258313-6.1 gcc7-ada-32bit-7.3.1+r258313-6.1 gcc7-c++-32bit-7.3.1+r258313-6.1 gcc7-fortran-32bit-7.3.1+r258313-6.1 gcc7-go-32bit-7.3.1+r258313-6.1 gcc7-obj-c++-32bit-7.3.1+r258313-6.1 gcc7-objc-32bit-7.3.1+r258313-6.1 libada7-32bit-7.3.1+r258313-6.1 libada7-32bit-debuginfo-7.3.1+r258313-6.1 libasan4-32bit-7.3.1+r258313-6.1 libasan4-32bit-debuginfo-7.3.1+r258313-6.1 libatomic1-32bit-7.3.1+r258313-6.1 libatomic1-32bit-debuginfo-7.3.1+r258313-6.1 libcilkrts5-32bit-7.3.1+r258313-6.1 libcilkrts5-32bit-debuginfo-7.3.1+r258313-6.1 libgcc_s1-32bit-7.3.1+r258313-6.1 libgcc_s1-32bit-debuginfo-7.3.1+r258313-6.1 libgfortran4-32bit-7.3.1+r258313-6.1 libgfortran4-32bit-debuginfo-7.3.1+r258313-6.1 libgo11-32bit-7.3.1+r258313-6.1 libgo11-32bit-debuginfo-7.3.1+r258313-6.1 libgomp1-32bit-7.3.1+r258313-6.1 libgomp1-32bit-debuginfo-7.3.1+r258313-6.1 libitm1-32bit-7.3.1+r258313-6.1 libitm1-32bit-debuginfo-7.3.1+r258313-6.1 liblsan0-7.3.1+r258313-6.1 liblsan0-debuginfo-7.3.1+r258313-6.1 libmpx2-32bit-7.3.1+r258313-6.1 libmpx2-32bit-debuginfo-7.3.1+r258313-6.1 libmpxwrappers2-32bit-7.3.1+r258313-6.1 libmpxwrappers2-32bit-debuginfo-7.3.1+r258313-6.1 libobjc4-gcc7-32bit-7.3.1+r258313-6.1 libobjc4-gcc7-32bit-debuginfo-7.3.1+r258313-6.1 libquadmath0-32bit-7.3.1+r258313-6.1 libquadmath0-32bit-debuginfo-7.3.1+r258313-6.1 libstdc++6-32bit-7.3.1+r258313-6.1 libstdc++6-32bit-debuginfo-7.3.1+r258313-6.1 libstdc++6-devel-gcc7-32bit-7.3.1+r258313-6.1 libtsan0-7.3.1+r258313-6.1 libtsan0-debuginfo-7.3.1+r258313-6.1 libubsan0-32bit-7.3.1+r258313-6.1 libubsan0-32bit-debuginfo-7.3.1+r258313-6.1 References: https://bugzilla.suse.com/1074621 https://bugzilla.suse.com/1083290 https://bugzilla.suse.com/1083946

1 0

openSUSE-SU-2018:0668-1: moderate: Security update for glibc
by opensuse-security＠opensuse.org 13 Mar '18

13 Mar '18

openSUSE Security Update: Security update for glibc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:0668-1 Rating: moderate References: #1081556 Cross-References: CVE-2017-12133 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for glibc fixes the following issues: - CVE-2017-12133: Avoid use-after-free read access in clntudp_call (bsc#1081556) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-250=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 i686 x86_64): glibc-2.22-16.3 glibc-debuginfo-2.22-16.3 glibc-debugsource-2.22-16.3 glibc-devel-2.22-16.3 glibc-devel-debuginfo-2.22-16.3 glibc-devel-static-2.22-16.3 glibc-locale-2.22-16.3 glibc-locale-debuginfo-2.22-16.3 glibc-profile-2.22-16.3 - openSUSE Leap 42.3 (i586 x86_64): glibc-extra-2.22-16.3 glibc-extra-debuginfo-2.22-16.3 glibc-utils-2.22-16.3 glibc-utils-debuginfo-2.22-16.3 glibc-utils-debugsource-2.22-16.3 nscd-2.22-16.3 nscd-debuginfo-2.22-16.3 - openSUSE Leap 42.3 (x86_64): glibc-32bit-2.22-16.3 glibc-debuginfo-32bit-2.22-16.3 glibc-devel-32bit-2.22-16.3 glibc-devel-debuginfo-32bit-2.22-16.3 glibc-devel-static-32bit-2.22-16.3 glibc-locale-32bit-2.22-16.3 glibc-locale-debuginfo-32bit-2.22-16.3 glibc-profile-32bit-2.22-16.3 glibc-utils-32bit-2.22-16.3 glibc-utils-debuginfo-32bit-2.22-16.3 - openSUSE Leap 42.3 (noarch): glibc-html-2.22-16.3 glibc-i18ndata-2.22-16.3 glibc-info-2.22-16.3 References: https://www.suse.com/security/cve/CVE-2017-12133.html https://bugzilla.suse.com/1081556

1 0

openSUSE-SU-2018:0667-1: moderate: Security update for shadow
by opensuse-security＠opensuse.org 13 Mar '18

13 Mar '18

openSUSE Security Update: Security update for shadow ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:0667-1 Rating: moderate References: #1081294 Cross-References: CVE-2018-7169 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for shadow fixes the following issues: - CVE-2018-7169: Fixed an privilege escalation in newgidmap, which allowed an unprivileged user to be placed in a user namespace where setgroups(2) is allowed. (bsc#1081294) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-249=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): shadow-4.2.1-13.1 shadow-debuginfo-4.2.1-13.1 shadow-debugsource-4.2.1-13.1 References: https://www.suse.com/security/cve/CVE-2018-7169.html https://bugzilla.suse.com/1081294

1 0

openSUSE-SU-2018:0666-1: moderate: Security update for mysql-connector-java
by opensuse-security＠opensuse.org 13 Mar '18

13 Mar '18

openSUSE Security Update: Security update for mysql-connector-java ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:0666-1 Rating: moderate References: #1035210 #1035211 #1035697 Cross-References: CVE-2017-3523 CVE-2017-3586 CVE-2017-3589 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for mysql-connector-java to version to 5.1.42 fixes several issues. These security issues were fixed: - CVE-2017-3589: An unspecified vulnerability in MySQL Connector/J could have resulted in unauthorized update, insert or delete access to some of MySQL Connectors accessible data (bnc#1035210) - CVE-2017-3523: An unspecified vulnerability in MySQL Connector/J could have lead to takeover of MySQL Connectors (bnc#1035697) - CVE-2017-3586: An unspecified vulnerability in MySQL Connectors could have lead to unauthorized update, insert or delete access to some of MySQL Connectors accessible data as well as unauthorized read access to a subset of MySQL Connectors accessible data (bnc#1035211) More infos are available at http://dev.mysql.com/doc/relnotes/connector-j/en/news-5-1.html This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-248=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (noarch): mysql-connector-java-5.1.42-10.3.1 References: https://www.suse.com/security/cve/CVE-2017-3523.html https://www.suse.com/security/cve/CVE-2017-3586.html https://www.suse.com/security/cve/CVE-2017-3589.html https://bugzilla.suse.com/1035210 https://bugzilla.suse.com/1035211 https://bugzilla.suse.com/1035697

1 0

openSUSE-RU-2018:0659-1: moderate: Recommended update for evolution, evolution-data-server
by maintenance＠opensuse.org 10 Mar '18

10 Mar '18

openSUSE Recommended Update: Recommended update for evolution, evolution-data-server ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:0659-1 Rating: moderate References: #1071124 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for evolution and evolution-data-server provides fixes and enhancements. evolution (update to version 3.22.6): - Selected days drawn with incorrect color. - Don't preserve 'Pre-formatted' format if moving an empty block out of the quoted content. - Possible crash while refreshing spellcheck. - Print the history stack after removing item from it. - History could be saved twice if inserting HTML content. - Print current EEditorWebExtension method if CAMEL_DEBUG is active. - Previous signatures with images not sent properly. - Fix few memory leaks. - Do not override variable name from parent block. - Updated translations. evolution-data-server (update to version 3.22.7): - Ignore errors when getting message for a body-contains search. - Fix a ref/unref imbalance of CamelIMAPXStoreInfo. - Fix a memory leak in camel_imapx_server_append_message_sync(). - Unable to add additional Google calendar. - Avoid unneeded full flags folder update when no changes made. - Correct new module detection when installed by file rename. - Avoid call of g_debug() in the fork process. - Replace deprecated icalproperty_remove_parameter() with icalproperty_remove_parameter_by_kind(). - Replace deprecated icaltime_from_timet() with icaltime_from_timet_with_zone(). - Fix a memory leak. - Local flag changes could be missed and left unsaved on the server. - Notify about new messages early during folder update. - Fix possible use-after-free in CamelVeeFolder with parent_vee_store. - Test for parent_store availability around camel_folder_changed(). - Avoid crash when untagged response doesn't have a token. - Internal Google OAuth2 authentication fails with expired token. - Fix console runtime warnings from vFolder/vStore code on application quit. - Fix build with --disable-google-auth. - Folder summary can be leaked after its folder is freed. - Drop unused 'Deletes' table from folders.db. - Incorrect times provided in e_cal_recur_generate_instances(). - Port to WebKit2. - Junk check fails due to empty cache file. - Always build ESExp structure as a GObject descendant. - Correct version number reference in a developer comment. - Build developer documentation sections and types on the fly. - Default to "Leave messages on server" for new POP3 accounts. - Possible deadlock in camel_imapx_server_stop_idle_sync(). - Possible use-after-free on factory subprocess close. - Add error checks around factory subprocess backend loading. - 'STARTTLS not supported' error ignored. - Instead of query for UID, try to get the object directly. - Backend not initialized when asked to authenticate. - Add default folder names as iCloud provides them. - Release idle_lock before disconnecting the cancellable. - Crash under imapx_server_info_changed_cb(). This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-245=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): evolution-data-server-3.22.7-7.3.1 evolution-data-server-debuginfo-3.22.7-7.3.1 evolution-data-server-debugsource-3.22.7-7.3.1 evolution-data-server-devel-3.22.7-7.3.1 evolution-data-server-doc-3.22.7-7.3.1 gnome-autoar-debugsource-0.2.2-2.1 gnome-autoar-devel-0.2.2-2.1 libcamel-1_2-59-3.22.7-7.3.1 libcamel-1_2-59-debuginfo-3.22.7-7.3.1 libebackend-1_2-10-3.22.7-7.3.1 libebackend-1_2-10-debuginfo-3.22.7-7.3.1 libebook-1_2-16-3.22.7-7.3.1 libebook-1_2-16-debuginfo-3.22.7-7.3.1 libebook-contacts-1_2-2-3.22.7-7.3.1 libebook-contacts-1_2-2-debuginfo-3.22.7-7.3.1 libecal-1_2-19-3.22.7-7.3.1 libecal-1_2-19-debuginfo-3.22.7-7.3.1 libedata-book-1_2-25-3.22.7-7.3.1 libedata-book-1_2-25-debuginfo-3.22.7-7.3.1 libedata-cal-1_2-28-3.22.7-7.3.1 libedata-cal-1_2-28-debuginfo-3.22.7-7.3.1 libedataserver-1_2-22-3.22.7-7.3.1 libedataserver-1_2-22-debuginfo-3.22.7-7.3.1 libedataserverui-1_2-1-3.22.7-7.3.1 libedataserverui-1_2-1-debuginfo-3.22.7-7.3.1 libgnome-autoar-0-0-0.2.2-2.1 libgnome-autoar-0-0-debuginfo-0.2.2-2.1 libgnome-autoar-gtk-0-0-0.2.2-2.1 libgnome-autoar-gtk-0-0-debuginfo-0.2.2-2.1 typelib-1_0-EBook-1_2-3.22.7-7.3.1 typelib-1_0-EBookContacts-1_2-3.22.7-7.3.1 typelib-1_0-EDataServer-1_2-3.22.7-7.3.1 typelib-1_0-GnomeAutoar-0_1-0.2.2-2.1 typelib-1_0-GnomeAutoarGtk-0_1-0.2.2-2.1 - openSUSE Leap 42.3 (x86_64): evolution-3.22.6-5.3.1 evolution-data-server-32bit-3.22.7-7.3.1 evolution-data-server-debuginfo-32bit-3.22.7-7.3.1 evolution-debuginfo-3.22.6-5.3.1 evolution-debugsource-3.22.6-5.3.1 evolution-devel-3.22.6-5.3.1 evolution-plugin-bogofilter-3.22.6-5.3.1 evolution-plugin-bogofilter-debuginfo-3.22.6-5.3.1 evolution-plugin-pst-import-3.22.6-5.3.1 evolution-plugin-pst-import-debuginfo-3.22.6-5.3.1 evolution-plugin-spamassassin-3.22.6-5.3.1 evolution-plugin-spamassassin-debuginfo-3.22.6-5.3.1 glade-catalog-evolution-3.22.6-5.3.1 glade-catalog-evolution-debuginfo-3.22.6-5.3.1 libcamel-1_2-59-32bit-3.22.7-7.3.1 libcamel-1_2-59-debuginfo-32bit-3.22.7-7.3.1 libebackend-1_2-10-32bit-3.22.7-7.3.1 libebackend-1_2-10-debuginfo-32bit-3.22.7-7.3.1 libebook-1_2-16-32bit-3.22.7-7.3.1 libebook-1_2-16-debuginfo-32bit-3.22.7-7.3.1 libebook-contacts-1_2-2-32bit-3.22.7-7.3.1 libebook-contacts-1_2-2-debuginfo-32bit-3.22.7-7.3.1 libecal-1_2-19-32bit-3.22.7-7.3.1 libecal-1_2-19-debuginfo-32bit-3.22.7-7.3.1 libedata-book-1_2-25-32bit-3.22.7-7.3.1 libedata-book-1_2-25-debuginfo-32bit-3.22.7-7.3.1 libedata-cal-1_2-28-32bit-3.22.7-7.3.1 libedata-cal-1_2-28-debuginfo-32bit-3.22.7-7.3.1 libedataserver-1_2-22-32bit-3.22.7-7.3.1 libedataserver-1_2-22-debuginfo-32bit-3.22.7-7.3.1 libedataserverui-1_2-1-32bit-3.22.7-7.3.1 libedataserverui-1_2-1-debuginfo-32bit-3.22.7-7.3.1 - openSUSE Leap 42.3 (noarch): evolution-data-server-lang-3.22.7-7.3.1 evolution-lang-3.22.6-5.3.1 References: https://bugzilla.suse.com/1071124

1 0

openSUSE-RU-2018:0658-1: Recommended update for yast2-drbd
by maintenance＠opensuse.org 10 Mar '18

10 Mar '18

openSUSE Recommended Update: Recommended update for yast2-drbd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:0658-1 Rating: low References: #1069131 #1069132 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for yast2-drbd fixes the following issues: - Fix error message when writing resource conf to disk (bsc#1069131, bsc#1069132) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-246=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (noarch): yast2-drbd-3.3.0-4.3.1 References: https://bugzilla.suse.com/1069131 https://bugzilla.suse.com/1069132

1 0

openSUSE-SU-2018:0657-1: moderate: Security update for php7
by opensuse-security＠opensuse.org 10 Mar '18

10 Mar '18

openSUSE Security Update: Security update for php7 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:0657-1 Rating: moderate References: #1076970 #1083639 Cross-References: CVE-2018-7584 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for php7 provides the following fix: Security issues fixed: - CVE-2018-7584: Fixed stack-based buffer under-read while parsing an HTTPresponse in the php_stream_url_wrap_http_ex (bsc#1083639). Bug fixes: - Fix a memory leak in the pg_escape_bytea function of the pgsql extension. (bsc#1076970) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-244=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): apache2-mod_php7-7.0.7-31.1 apache2-mod_php7-debuginfo-7.0.7-31.1 php7-7.0.7-31.1 php7-bcmath-7.0.7-31.1 php7-bcmath-debuginfo-7.0.7-31.1 php7-bz2-7.0.7-31.1 php7-bz2-debuginfo-7.0.7-31.1 php7-calendar-7.0.7-31.1 php7-calendar-debuginfo-7.0.7-31.1 php7-ctype-7.0.7-31.1 php7-ctype-debuginfo-7.0.7-31.1 php7-curl-7.0.7-31.1 php7-curl-debuginfo-7.0.7-31.1 php7-dba-7.0.7-31.1 php7-dba-debuginfo-7.0.7-31.1 php7-debuginfo-7.0.7-31.1 php7-debugsource-7.0.7-31.1 php7-devel-7.0.7-31.1 php7-dom-7.0.7-31.1 php7-dom-debuginfo-7.0.7-31.1 php7-enchant-7.0.7-31.1 php7-enchant-debuginfo-7.0.7-31.1 php7-exif-7.0.7-31.1 php7-exif-debuginfo-7.0.7-31.1 php7-fastcgi-7.0.7-31.1 php7-fastcgi-debuginfo-7.0.7-31.1 php7-fileinfo-7.0.7-31.1 php7-fileinfo-debuginfo-7.0.7-31.1 php7-firebird-7.0.7-31.1 php7-firebird-debuginfo-7.0.7-31.1 php7-fpm-7.0.7-31.1 php7-fpm-debuginfo-7.0.7-31.1 php7-ftp-7.0.7-31.1 php7-ftp-debuginfo-7.0.7-31.1 php7-gd-7.0.7-31.1 php7-gd-debuginfo-7.0.7-31.1 php7-gettext-7.0.7-31.1 php7-gettext-debuginfo-7.0.7-31.1 php7-gmp-7.0.7-31.1 php7-gmp-debuginfo-7.0.7-31.1 php7-iconv-7.0.7-31.1 php7-iconv-debuginfo-7.0.7-31.1 php7-imap-7.0.7-31.1 php7-imap-debuginfo-7.0.7-31.1 php7-intl-7.0.7-31.1 php7-intl-debuginfo-7.0.7-31.1 php7-json-7.0.7-31.1 php7-json-debuginfo-7.0.7-31.1 php7-ldap-7.0.7-31.1 php7-ldap-debuginfo-7.0.7-31.1 php7-mbstring-7.0.7-31.1 php7-mbstring-debuginfo-7.0.7-31.1 php7-mcrypt-7.0.7-31.1 php7-mcrypt-debuginfo-7.0.7-31.1 php7-mysql-7.0.7-31.1 php7-mysql-debuginfo-7.0.7-31.1 php7-odbc-7.0.7-31.1 php7-odbc-debuginfo-7.0.7-31.1 php7-opcache-7.0.7-31.1 php7-opcache-debuginfo-7.0.7-31.1 php7-openssl-7.0.7-31.1 php7-openssl-debuginfo-7.0.7-31.1 php7-pcntl-7.0.7-31.1 php7-pcntl-debuginfo-7.0.7-31.1 php7-pdo-7.0.7-31.1 php7-pdo-debuginfo-7.0.7-31.1 php7-pgsql-7.0.7-31.1 php7-pgsql-debuginfo-7.0.7-31.1 php7-phar-7.0.7-31.1 php7-phar-debuginfo-7.0.7-31.1 php7-posix-7.0.7-31.1 php7-posix-debuginfo-7.0.7-31.1 php7-pspell-7.0.7-31.1 php7-pspell-debuginfo-7.0.7-31.1 php7-readline-7.0.7-31.1 php7-readline-debuginfo-7.0.7-31.1 php7-shmop-7.0.7-31.1 php7-shmop-debuginfo-7.0.7-31.1 php7-snmp-7.0.7-31.1 php7-snmp-debuginfo-7.0.7-31.1 php7-soap-7.0.7-31.1 php7-soap-debuginfo-7.0.7-31.1 php7-sockets-7.0.7-31.1 php7-sockets-debuginfo-7.0.7-31.1 php7-sqlite-7.0.7-31.1 php7-sqlite-debuginfo-7.0.7-31.1 php7-sysvmsg-7.0.7-31.1 php7-sysvmsg-debuginfo-7.0.7-31.1 php7-sysvsem-7.0.7-31.1 php7-sysvsem-debuginfo-7.0.7-31.1 php7-sysvshm-7.0.7-31.1 php7-sysvshm-debuginfo-7.0.7-31.1 php7-tidy-7.0.7-31.1 php7-tidy-debuginfo-7.0.7-31.1 php7-tokenizer-7.0.7-31.1 php7-tokenizer-debuginfo-7.0.7-31.1 php7-wddx-7.0.7-31.1 php7-wddx-debuginfo-7.0.7-31.1 php7-xmlreader-7.0.7-31.1 php7-xmlreader-debuginfo-7.0.7-31.1 php7-xmlrpc-7.0.7-31.1 php7-xmlrpc-debuginfo-7.0.7-31.1 php7-xmlwriter-7.0.7-31.1 php7-xmlwriter-debuginfo-7.0.7-31.1 php7-xsl-7.0.7-31.1 php7-xsl-debuginfo-7.0.7-31.1 php7-zip-7.0.7-31.1 php7-zip-debuginfo-7.0.7-31.1 php7-zlib-7.0.7-31.1 php7-zlib-debuginfo-7.0.7-31.1 - openSUSE Leap 42.3 (noarch): php7-pear-7.0.7-31.1 php7-pear-Archive_Tar-7.0.7-31.1 References: https://www.suse.com/security/cve/CVE-2018-7584.html https://bugzilla.suse.com/1076970 https://bugzilla.suse.com/1083639

1 0

openSUSE-SU-2018:0651-1: moderate: Security update for python-Django
by opensuse-security＠opensuse.org 09 Mar '18

09 Mar '18

openSUSE Security Update: Security update for python-Django ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:0651-1 Rating: moderate References: Cross-References: CVE-2018-7536 CVE-2018-7537 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for python-Django fixes the following issues: Update to 1.11.11 * Fixes CVE-2018-7536, CVE-2018-7537 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2018-243=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): python-Django-1.11.11-8.1 References: https://www.suse.com/security/cve/CVE-2018-7536.html https://www.suse.com/security/cve/CVE-2018-7537.html

1 0

openSUSE-RU-2018:0649-1: moderate: Recommended update for yast2, yast2-nfs-client, yast2-services-manager
by maintenance＠opensuse.org 09 Mar '18

09 Mar '18

openSUSE Recommended Update: Recommended update for yast2, yast2-nfs-client, yast2-services-manager ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:0649-1 Rating: moderate References: #1037214 #1037891 #1045658 #1049138 #1058376 #1061306 #1064437 #1075535 #1077310 #956755 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has 10 recommended fixes can now be installed. Description: This update for yast2, yast2-nfs-client and yast2-services-manager provides fixes and enhancements: - Use fewer calls to systemctl to speed up startup. (bsc#1045658) - Implement performance enhancements for handling systemd services. (bsc#1045658) - Add YaST2 logs to the default list of files for System Log browser. (bsc#1049138) - Fix the name and icon displayed for the application window. (bsc#1037891) - Improve the logic to report if SuSEfirewall2 is selected or installed when installing OES using integrated media to make sure it gets properly activated. The problem would happen once the product is registered and manual network configuration is selected. (bsc#1037214) - Fix storing device information to avoid incorrect "not found" states when querying network interfaces subsequently. (bsc#956755, bsc#1061306) - Add infrastructure to preserve existing comments in configuration files. (bsc#1064437) - Preserve comments when editing /etc/fstab. (bsc#1064437) - Fix starting Gnome Control Center. (bsc#1058376, bsc#1075535) - Fixed list of the URL schemes without host and fix processing URLs with the "hd:/" scheme. (bsc#1077310) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-241=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): yast2-3.2.43-2.3.1 - openSUSE Leap 42.3 (noarch): yast2-nfs-client-3.1.18-4.3.1 yast2-services-manager-3.2.2-2.3.1 References: https://bugzilla.suse.com/1037214 https://bugzilla.suse.com/1037891 https://bugzilla.suse.com/1045658 https://bugzilla.suse.com/1049138 https://bugzilla.suse.com/1058376 https://bugzilla.suse.com/1061306 https://bugzilla.suse.com/1064437 https://bugzilla.suse.com/1075535 https://bugzilla.suse.com/1077310 https://bugzilla.suse.com/956755

1 0

openSUSE-RU-2018:0648-1: moderate: Recommended update for monitoring-plugins-zypper
by maintenance＠opensuse.org 09 Mar '18

09 Mar '18

openSUSE Recommended Update: Recommended update for monitoring-plugins-zypper ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:0648-1 Rating: moderate References: #1006387 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for monitoring-plugins-zypper fixes the following issues: - boo#1006387: The package removed AppArmor protection from running processes during installation/upgrade This update also updates the list of openSUSE distribution releases considered as maintained. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-242=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (noarch): monitoring-plugins-zypper-1.95-8.1 References: https://bugzilla.suse.com/1006387

1 0