April 2018 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2018:0887-1: Recommended update for pesign-obs-integration
by maintenance＠opensuse.org 05 Apr '18

05 Apr '18

openSUSE Recommended Update: Recommended update for pesign-obs-integration ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:0887-1 Rating: low References: #1012422 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for pesign-obs-integration fixes the following issues: - Copy over any *.log files from the first build. (bsc#1012422) - Add aarch64 support. - Fall back to project's certificate in the follow-up spec if it exists. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-335=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): pesign-obs-integration-10.0-31.3.1 References: https://bugzilla.suse.com/1012422

1 0

openSUSE-RU-2018:0886-1: Recommended update for aaa_base
by maintenance＠opensuse.org 05 Apr '18

05 Apr '18

openSUSE Recommended Update: Recommended update for aaa_base ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:0886-1 Rating: low References: #1025743 #1036895 #1038549 #1049577 #1052182 #1079674 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has 6 recommended fixes can now be installed. Description: This update for aaa_base provides the following fixes: - Support changing PS1 even for mksh and user root. (bsc#1036895) - Unset unused variables on profile files. (bsc#1049577) - Unset id in csh.cshrc instead of profile.csh. (bsc#1049577) - Allow that personal ~/.bashrc is read again. (bsc#1052182) - Avoid that IFS becomes global in _ls ksh shell function. (bsc#1079674, bsc#1025743) - Replace "cat > file" by "mv -f ... file" in pre/post to fix issues with clients having these files mmapped. (bsc#1038549) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-331=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): aaa_base-13.2+git20140911.61c1681-28.3.1 aaa_base-debuginfo-13.2+git20140911.61c1681-28.3.1 aaa_base-debugsource-13.2+git20140911.61c1681-28.3.1 aaa_base-extras-13.2+git20140911.61c1681-28.3.1 aaa_base-malloccheck-13.2+git20140911.61c1681-28.3.1 References: https://bugzilla.suse.com/1025743 https://bugzilla.suse.com/1036895 https://bugzilla.suse.com/1038549 https://bugzilla.suse.com/1049577 https://bugzilla.suse.com/1052182 https://bugzilla.suse.com/1079674

1 0

openSUSE-RU-2018:0885-1: Recommended update for growpart
by maintenance＠opensuse.org 05 Apr '18

05 Apr '18

openSUSE Recommended Update: Recommended update for growpart ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:0885-1 Rating: low References: #1064755 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for growpart fixes the following issues: - Add rootgrow script and service wrapper - Ignore sfdisk failure in 2.28.1 when due to reread failing. - Add service file to start growpart via systemd. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-334=1 Package List: - openSUSE Leap 42.3 (noarch): growpart-0.30-11.3.1 growpart-rootgrow-1.0.0-11.3.1 References: https://bugzilla.suse.com/1064755

1 0

openSUSE-RU-2018:0884-1: Recommended update for autoyast2
by maintenance＠opensuse.org 05 Apr '18

05 Apr '18

openSUSE Recommended Update: Recommended update for autoyast2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:0884-1 Rating: low References: #1054400 #1057597 #1059617 #1077292 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for autoyast2 provides the following fixes: - When using Btrfs but without subvolumes, export an empty list instead of removing them from the profile. (bsc#1059617) - Shrink needed disks size automatically in order to handle rounding inaccuracies in LVM installations. (bsc#1057597) - Add default subvolumes to the root partition only if the user has not defined any root partition in the autoyast configuration file. (bsc#1059617) - Add the network_before_proposal flag that will be enable if the network is configured during the first stage. (bsc#1054400) - Report packages which cannot be selected for installation, except those packages not included in the AutoYaST profile. (bnc#1077292) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-332=1 Package List: - openSUSE Leap 42.3 (noarch): autoyast2-3.2.29-6.1 autoyast2-installation-3.2.29-6.1 References: https://bugzilla.suse.com/1054400 https://bugzilla.suse.com/1057597 https://bugzilla.suse.com/1059617 https://bugzilla.suse.com/1077292

1 0

openSUSE-SU-2018:0883-1: moderate: Security update for graphite2
by opensuse-security＠opensuse.org 05 Apr '18

05 Apr '18

openSUSE Security Update: Security update for graphite2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:0883-1 Rating: moderate References: #1084850 Cross-References: CVE-2018-7999 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for graphite2 fixes the following issues: - CVE-2018-7999: Fixed a NULL pointer dereference vulnerability in Segment.cpp that may cause a denial of serivce (bsc#1084850). This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-337=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): graphite2-1.3.1-7.3.1 graphite2-debuginfo-1.3.1-7.3.1 graphite2-debugsource-1.3.1-7.3.1 graphite2-devel-1.3.1-7.3.1 libgraphite2-3-1.3.1-7.3.1 libgraphite2-3-debuginfo-1.3.1-7.3.1 - openSUSE Leap 42.3 (x86_64): libgraphite2-3-32bit-1.3.1-7.3.1 libgraphite2-3-debuginfo-32bit-1.3.1-7.3.1 References: https://www.suse.com/security/cve/CVE-2018-7999.html https://bugzilla.suse.com/1084850

1 0

openSUSE-SU-2018:0882-1: moderate: Security update for docker-distribution
by opensuse-security＠opensuse.org 05 Apr '18

05 Apr '18

openSUSE Security Update: Security update for docker-distribution ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:0882-1 Rating: moderate References: #1033172 #1049850 #1083474 Cross-References: CVE-2017-11468 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update for docker-distribution fixes the following issues: Security issues fixed: - CVE-2017-11468: Fixed a denial of service (memory consumption) via the manifest endpoint (bsc#1049850). Bug fixes: - bsc#1083474: docker-distirbution-registry overwrites configuration file with update. - bsc#1033172: Garbage collector needed - or kindly release docker-distribution-registry in Version 2.4. - Add SuSEfirewall2 service file for TCP port 5000. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-336=1 Package List: - openSUSE Leap 42.3 (x86_64): docker-distribution-debugsource-2.6.2-11.1 docker-distribution-registry-2.6.2-11.1 docker-distribution-registry-debuginfo-2.6.2-11.1 References: https://www.suse.com/security/cve/CVE-2017-11468.html https://bugzilla.suse.com/1033172 https://bugzilla.suse.com/1049850 https://bugzilla.suse.com/1083474

1 0

openSUSE-RU-2018:0881-1: moderate: Recommended update for yast2-users
by maintenance＠opensuse.org 05 Apr '18

05 Apr '18

openSUSE Recommended Update: Recommended update for yast2-users ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:0881-1 Rating: moderate References: #1053564 #1066342 #1080125 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for yast2-users provides the following fixes: - AutoYaST: Write and export SSH authorized keys also for root user. (bsc#1066342) - Fix a freeze while parsing authorized_keys. (bsc#1053564) - Make sure users don't get locked when removing the password expiration date. (bsc#1080125) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-333=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): yast2-users-3.2.14-2.3.1 yast2-users-debuginfo-3.2.14-2.3.1 yast2-users-debugsource-3.2.14-2.3.1 References: https://bugzilla.suse.com/1053564 https://bugzilla.suse.com/1066342 https://bugzilla.suse.com/1080125

1 0