May 2018 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-OU-2018:1480-1: Optional update for firewalld
by maintenance＠opensuse.org 31 May '18

31 May '18

openSUSE Optional Update: Optional update for firewalld ______________________________________________________________________________ Announcement ID: openSUSE-OU-2018:1480-1 Rating: low References: #1094051 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update for firewalld fixes the following issues: - minor translation updates and typo fixes (boo#1094051) Patch Instructions: To install this openSUSE Optional Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-545=1 Package List: - openSUSE Leap 15.0 (noarch): firewall-applet-0.5.3-lp150.2.3.1 firewall-config-0.5.3-lp150.2.3.1 firewall-macros-0.5.3-lp150.2.3.1 firewalld-0.5.3-lp150.2.3.1 firewalld-lang-0.5.3-lp150.2.3.1 python3-firewall-0.5.3-lp150.2.3.1 References: https://bugzilla.suse.com/1094051

1 0

openSUSE-RU-2018:1477-1: moderate: Recommended update for lua51-luajit
by maintenance＠opensuse.org 30 May '18

30 May '18

openSUSE Recommended Update: Recommended update for lua51-luajit ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:1477-1 Rating: moderate References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for lua51-luajit fixes the following issues: Provides 32bit library on 64bit systems Fixes and tweak Aarch64 support and excludes s390x Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2018-542=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 x86_64): libluajit-5_1-2-2.1.0~beta2-5.1 lua51-luajit-2.1.0~beta2-5.1 lua51-luajit-devel-2.1.0~beta2-5.1 References:

1 0

openSUSE-RU-2018:1476-1: Recommended update for lxqt-common
by maintenance＠opensuse.org 30 May '18

30 May '18

openSUSE Recommended Update: Recommended update for lxqt-common ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:1476-1 Rating: low References: #1030873 #1049719 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for lxqt-common fixes the following issues: * Default destkop was not set correctly in LXQt environment (boo#1049719) * Use update-alternatives to create default.desktop xsession (boo#1030873) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-544=1 Package List: - openSUSE Leap 42.3 (noarch): lxqt-common-0.11.0-4.3.1 References: https://bugzilla.suse.com/1030873 https://bugzilla.suse.com/1049719

1 0

openSUSE-RU-2018:1474-1: Recommended update for thunar-volman
by maintenance＠opensuse.org 30 May '18

30 May '18

openSUSE Recommended Update: Recommended update for thunar-volman ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:1474-1 Rating: low References: #949808 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for thunar-volman fixes the following issues: - XFCE ignored HintAuto and mounts non-removable devices (boo#949808) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-543=1 Package List: - openSUSE Leap 42.3 (x86_64): thunar-volman-0.8.1-7.3.1 thunar-volman-debuginfo-0.8.1-7.3.1 thunar-volman-debugsource-0.8.1-7.3.1 - openSUSE Leap 42.3 (noarch): thunar-volman-branding-upstream-0.8.1-7.3.1 thunar-volman-lang-0.8.1-7.3.1 References: https://bugzilla.suse.com/949808

1 0

openSUSE-RU-2018:1473-1: moderate: Recommended update for pdns-recursor
by maintenance＠opensuse.org 30 May '18

30 May '18

openSUSE Recommended Update: Recommended update for pdns-recursor ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:1473-1 Rating: moderate References: #1089814 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for pdns-recursor to version 4.1.3 contains a number of bug fixes and improvements: - Add a subtree option to the API cache flush endpoint - Various internal improvements - Bug fixes related to counters - Respect the AXFR timeout while connecting to the RPZ - Delay the loading of RPZ zones until the parsing is done to avoid a race condition The following tracked build fixes are included: - bsc#1089814: build issues with Boost 1.67.0 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2018-540=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): pdns-recursor-4.1.3-8.1 References: https://bugzilla.suse.com/1089814

1 0

openSUSE-SU-2018:1470-1: important: Security update for ceph
by opensuse-security＠opensuse.org 30 May '18

30 May '18

openSUSE Security Update: Security update for ceph ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:1470-1 Rating: important References: #1051598 #1054061 #1056125 #1056967 #1059458 #1060904 #1061461 #1063014 #1066182 #1066502 #1067088 #1067119 #1067705 #1070357 #1071386 #1074301 #1079076 #1080788 #1081379 #1081600 #1086340 #1087269 #1087493 Cross-References: CVE-2017-16818 CVE-2018-7262 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves two vulnerabilities and has 21 fixes is now available. Description: This update for ceph fixes the following issues: Security issues fixed: - CVE-2018-7262: rgw: malformed http headers can crash rgw (bsc#1081379). - CVE-2017-16818: User reachable asserts allow for DoS (bsc#1063014). Bug fixes: - bsc#1061461: OSDs keep generating coredumps after adding new OSD node to cluster. - bsc#1079076: RGW openssl fixes. - bsc#1067088: Upgrade to SES5 restarted all nodes, majority of OSDs aborts during start. - bsc#1056125: Some OSDs are down when doing performance testing on rbd image in EC Pool. - bsc#1087269: allow_ec_overwrites option not in command options list. - bsc#1051598: Fix mountpoint check for systemctl enable --runtime. - bsc#1070357: Zabbix mgr module doesn't recover from HEALTH_ERR. - bsc#1066502: After upgrading a single OSD from SES 4 to SES 5 the OSDs do not rejoin the cluster. - bsc#1067119: Crushtool decompile creates wrong device entries (device 20 device20) for not existing / deleted OSDs. - bsc#1060904: Loglevel misleading during keystone authentication. - bsc#1056967: Monitors goes down after pool creation on cluster with 120 OSDs. - bsc#1067705: Issues with RGW Multi-Site Federation between SES5 and RH Ceph Storage 2. - bsc#1059458: Stopping / restarting rados gateway as part of deepsea stage.4 executions causes core-dump of radosgw. - bsc#1087493: Commvault cannot reconnect to storage after restarting haproxy. - bsc#1066182: Container synchronization between two Ceph clusters failed. - bsc#1081600: Crash in civetweb/RGW. - bsc#1054061: NFS-GANESHA service failing while trying to list mountpoint on client. - bsc#1074301: OSDs keep aborting: SnapMapper failed asserts. - bsc#1086340: XFS metadata corruption on rbd-nbd mapped image with journaling feature enabled. - bsc#1080788: fsid mismatch when creating additional OSDs. - bsc#1071386: Metadata spill onto block.slow. This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-541=1 Package List: - openSUSE Leap 42.3 (x86_64): ceph-12.2.5+git.1524775272.5e7ea8cf03-9.1 ceph-base-12.2.5+git.1524775272.5e7ea8cf03-9.1 ceph-base-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 ceph-common-12.2.5+git.1524775272.5e7ea8cf03-9.1 ceph-common-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 ceph-debugsource-12.2.5+git.1524775272.5e7ea8cf03-9.1 ceph-fuse-12.2.5+git.1524775272.5e7ea8cf03-9.1 ceph-fuse-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 ceph-mds-12.2.5+git.1524775272.5e7ea8cf03-9.1 ceph-mds-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 ceph-mgr-12.2.5+git.1524775272.5e7ea8cf03-9.1 ceph-mgr-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 ceph-mon-12.2.5+git.1524775272.5e7ea8cf03-9.1 ceph-mon-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 ceph-osd-12.2.5+git.1524775272.5e7ea8cf03-9.1 ceph-osd-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 ceph-radosgw-12.2.5+git.1524775272.5e7ea8cf03-9.1 ceph-radosgw-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 ceph-resource-agents-12.2.5+git.1524775272.5e7ea8cf03-9.1 ceph-test-12.2.5+git.1524775272.5e7ea8cf03-9.1 ceph-test-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 ceph-test-debugsource-12.2.5+git.1524775272.5e7ea8cf03-9.1 libcephfs-devel-12.2.5+git.1524775272.5e7ea8cf03-9.1 libcephfs2-12.2.5+git.1524775272.5e7ea8cf03-9.1 libcephfs2-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 librados-devel-12.2.5+git.1524775272.5e7ea8cf03-9.1 librados-devel-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 librados2-12.2.5+git.1524775272.5e7ea8cf03-9.1 librados2-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 libradosstriper-devel-12.2.5+git.1524775272.5e7ea8cf03-9.1 libradosstriper1-12.2.5+git.1524775272.5e7ea8cf03-9.1 libradosstriper1-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 librbd-devel-12.2.5+git.1524775272.5e7ea8cf03-9.1 librbd1-12.2.5+git.1524775272.5e7ea8cf03-9.1 librbd1-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 librgw-devel-12.2.5+git.1524775272.5e7ea8cf03-9.1 librgw2-12.2.5+git.1524775272.5e7ea8cf03-9.1 librgw2-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 python-ceph-compat-12.2.5+git.1524775272.5e7ea8cf03-9.1 python-cephfs-12.2.5+git.1524775272.5e7ea8cf03-9.1 python-cephfs-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 python-rados-12.2.5+git.1524775272.5e7ea8cf03-9.1 python-rados-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 python-rbd-12.2.5+git.1524775272.5e7ea8cf03-9.1 python-rbd-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 python-rgw-12.2.5+git.1524775272.5e7ea8cf03-9.1 python-rgw-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 python3-ceph-argparse-12.2.5+git.1524775272.5e7ea8cf03-9.1 python3-cephfs-12.2.5+git.1524775272.5e7ea8cf03-9.1 python3-cephfs-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 python3-rados-12.2.5+git.1524775272.5e7ea8cf03-9.1 python3-rados-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 python3-rbd-12.2.5+git.1524775272.5e7ea8cf03-9.1 python3-rbd-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 python3-rgw-12.2.5+git.1524775272.5e7ea8cf03-9.1 python3-rgw-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 rados-objclass-devel-12.2.5+git.1524775272.5e7ea8cf03-9.1 rbd-fuse-12.2.5+git.1524775272.5e7ea8cf03-9.1 rbd-fuse-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 rbd-mirror-12.2.5+git.1524775272.5e7ea8cf03-9.1 rbd-mirror-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 rbd-nbd-12.2.5+git.1524775272.5e7ea8cf03-9.1 rbd-nbd-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 References: https://www.suse.com/security/cve/CVE-2017-16818.html https://www.suse.com/security/cve/CVE-2018-7262.html https://bugzilla.suse.com/1051598 https://bugzilla.suse.com/1054061 https://bugzilla.suse.com/1056125 https://bugzilla.suse.com/1056967 https://bugzilla.suse.com/1059458 https://bugzilla.suse.com/1060904 https://bugzilla.suse.com/1061461 https://bugzilla.suse.com/1063014 https://bugzilla.suse.com/1066182 https://bugzilla.suse.com/1066502 https://bugzilla.suse.com/1067088 https://bugzilla.suse.com/1067119 https://bugzilla.suse.com/1067705 https://bugzilla.suse.com/1070357 https://bugzilla.suse.com/1071386 https://bugzilla.suse.com/1074301 https://bugzilla.suse.com/1079076 https://bugzilla.suse.com/1080788 https://bugzilla.suse.com/1081379 https://bugzilla.suse.com/1081600 https://bugzilla.suse.com/1086340 https://bugzilla.suse.com/1087269 https://bugzilla.suse.com/1087493

1 0

openSUSE-SU-2018:1463-1: moderate: Security update for perl-DBD-mysql
by opensuse-security＠opensuse.org 29 May '18

29 May '18

openSUSE Security Update: Security update for perl-DBD-mysql ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:1463-1 Rating: moderate References: #1047059 #1047095 Cross-References: CVE-2017-10788 CVE-2017-10789 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for perl-DBD-mysql fixes the following issues: - CVE-2017-10789: The DBD::mysql module when with mysql_ssl=1 setting enabled, means that SSL is optional (even though this setting's documentation has a \"your communication with the server will be encrypted\" statement), which could lead man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack, a related issue to CVE-2015-3152. (bsc#1047059) - CVE-2017-10788: The DBD::mysql module through 4.043 for Perl allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly have unspecified other impact by triggering (1) certain error responses from a MySQL server or (2) a loss of a network connection to a MySQL server. The use-after-free defect was introduced by relying on incorrect Oracle mysql_stmt_close documentation and code examples. (bsc#1047095) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-539=1 Package List: - openSUSE Leap 42.3 (x86_64): perl-DBD-mysql-4.021-18.3.1 perl-DBD-mysql-debuginfo-4.021-18.3.1 perl-DBD-mysql-debugsource-4.021-18.3.1 References: https://www.suse.com/security/cve/CVE-2017-10788.html https://www.suse.com/security/cve/CVE-2017-10789.html https://bugzilla.suse.com/1047059 https://bugzilla.suse.com/1047095

1 0

openSUSE-SU-2018:1462-1: Security update for pdns
by opensuse-security＠opensuse.org 29 May '18

29 May '18

openSUSE Security Update: Security update for pdns ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:1462-1 Rating: low References: #1092540 Cross-References: CVE-2018-1046 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: pdns was updated to 4.1.2. Security fixes: * Dnsreplay: bail out on a too small outgoing buffer (CVE-2018-1046 bsc#1092540) Improvements: * API: increase serial after dnssec related updates * Auth: lower ‘packet too short’ loglevel * Make check-zone error on rows that have content but shouldn’t * Auth: avoid an isane amount of new backend connections during an axfr * Report unparseable data in stoul invalid_argument exception * Backport: recheck serial when axfr is done * Backport: add tcp support for alias Bug Fixes: * Auth: allocate new statements after reconnecting to postgresql * Auth-bindbackend: only compare ips in ismaster() (Kees Monshouwer) * Rather than crash, sheepishly report no file/linenum * Document undocumented config vars * Backport #6276 (auth 4.1.x): prevent cname + other data with dnsupdate Misc fixes: * Move includes around to avoid boost L conflict * Backport: update edns option code list * Auth: link dnspcap2protobuf against librt when needed * Fix a warning on botan >= 2.5.0 * Auth 4.1.x: unbreak build Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2018-538=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): pdns-4.1.2-8.1 pdns-backend-godbc-4.1.2-8.1 pdns-backend-ldap-4.1.2-8.1 pdns-backend-lua-4.1.2-8.1 pdns-backend-mydns-4.1.2-8.1 pdns-backend-mysql-4.1.2-8.1 pdns-backend-postgresql-4.1.2-8.1 pdns-backend-remote-4.1.2-8.1 pdns-backend-sqlite3-4.1.2-8.1 References: https://www.suse.com/security/cve/CVE-2018-1046.html https://bugzilla.suse.com/1092540

1 0

openSUSE-RU-2018:1460-1: moderate: Recommended update for fate
by maintenance＠opensuse.org 29 May '18

29 May '18

openSUSE Recommended Update: Recommended update for fate ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:1460-1 Rating: moderate References: #1080586 #1081921 #1088478 #1094520 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for fate fixes the following issues: - New or imported features are sometimes not shown/editable (bsc#1094520) - explicitely select feature if it is the first one (bsc#1081921) - various ECO related improvements (bsc#1080586) - Prefs could have invalid Products (bsc#1088478) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-537=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-537=1 Package List: - openSUSE Leap 42.3 (x86_64): fate-1.6.0.5-35.1 fate-debuginfo-1.6.0.5-35.1 - openSUSE Leap 15.0 (x86_64): fate-1.6.0.5-lp150.2.3.1 fate-debuginfo-1.6.0.5-lp150.2.3.1 References: https://bugzilla.suse.com/1080586 https://bugzilla.suse.com/1081921 https://bugzilla.suse.com/1088478 https://bugzilla.suse.com/1094520

1 0

openSUSE-RU-2018:1459-1: moderate: Recommended update for fate
by maintenance＠opensuse.org 29 May '18

29 May '18

openSUSE Recommended Update: Recommended update for fate ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:1459-1 Rating: moderate References: #1080586 #1081921 #1088478 #1094520 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for fate fixes the following issues: - New or imported features are sometimes not shown/editable (bsc#1094520) - explicitely select feature if it is the first one (bsc#1081921) - various ECO related improvements (bsc#1080586) - Prefs could have invalid Products (bsc#1088478) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2018-537=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): fate-1.6.0.5-25.1 References: https://bugzilla.suse.com/1080586 https://bugzilla.suse.com/1081921 https://bugzilla.suse.com/1088478 https://bugzilla.suse.com/1094520

1 0