May 2018 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2018:1158-1: moderate: Recommended udpate for pam_kwallet
by maintenance＠opensuse.org 07 May '18

07 May '18

openSUSE Recommended Update: Recommended udpate for pam_kwallet ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:1158-1 Rating: moderate References: #1092047 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for pam_kwallet fixes the following issue: - boo#1092047: Regression in previous update, addressed by avoiding giving an stderr to kwallet Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-426=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): pam_kwallet-5.7.1-4.6.1 pam_kwallet-debuginfo-5.7.1-4.6.1 pam_kwallet-debugsource-5.7.1-4.6.1 References: https://bugzilla.suse.com/1092047

1 0

openSUSE-RU-2018:1154-1: Recommended update for cluster-glue
by maintenance＠opensuse.org 05 May '18

05 May '18

openSUSE Recommended Update: Recommended update for cluster-glue ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:1154-1 Rating: low References: #1050908 #1059171 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for cluster-glue provides the following fix: - stonith: Make sure a Reset can continue even if one of the nodes is already off by returning success with RESETPOWERON=0. (bsc#1050908) - stonith:external/ec2: Enforce en_US.UTF-8 locale when invoking aws client. (bsc#1059171) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-425=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): cluster-glue-1.0.12+v1.git.1485976882.03d61cd-2.3.1 cluster-glue-debuginfo-1.0.12+v1.git.1485976882.03d61cd-2.3.1 cluster-glue-debugsource-1.0.12+v1.git.1485976882.03d61cd-2.3.1 libglue-devel-1.0.12+v1.git.1485976882.03d61cd-2.3.1 libglue-devel-debuginfo-1.0.12+v1.git.1485976882.03d61cd-2.3.1 libglue2-1.0.12+v1.git.1485976882.03d61cd-2.3.1 libglue2-debuginfo-1.0.12+v1.git.1485976882.03d61cd-2.3.1 stonith-bladehpi-1.0.12+v1.git.1485976882.03d61cd-2.3.1 stonith-bladehpi-debuginfo-1.0.12+v1.git.1485976882.03d61cd-2.3.1 - openSUSE Leap 42.3 (x86_64): libglue-devel-32bit-1.0.12+v1.git.1485976882.03d61cd-2.3.1 libglue-devel-debuginfo-32bit-1.0.12+v1.git.1485976882.03d61cd-2.3.1 libglue2-32bit-1.0.12+v1.git.1485976882.03d61cd-2.3.1 libglue2-debuginfo-32bit-1.0.12+v1.git.1485976882.03d61cd-2.3.1 References: https://bugzilla.suse.com/1050908 https://bugzilla.suse.com/1059171

1 0

openSUSE-RU-2018:1151-1: Recommended update for rust
by maintenance＠opensuse.org 04 May '18

04 May '18

openSUSE Recommended Update: Recommended update for rust ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:1151-1 Rating: low References: #1030232 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for rust, cargo fixes the following issues: - bsc#1030232: Update rust to 1.24.0, cargo to 0.25.0 These versions are build dependencies for an upcoming update to Mozilla Firefox 60 RSR. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-424=1 Package List: - openSUSE Leap 42.3 (x86_64): cargo-0.25.0-2.6.1 cargo-debuginfo-0.25.0-2.6.1 rust-1.24.0-2.6.3 rust-debuginfo-1.24.0-2.6.3 rust-debugsource-1.24.0-2.6.3 rust-doc-1.24.0-2.6.3 rust-gdb-1.24.0-2.6.3 rust-std-1.24.0-2.6.3 rust-std-debuginfo-1.24.0-2.6.3 - openSUSE Leap 42.3 (noarch): rust-src-1.24.0-2.6.3 References: https://bugzilla.suse.com/1030232

1 0

openSUSE-RU-2018:1150-1: moderate: Recommended update for gcc48
by maintenance＠opensuse.org 04 May '18

04 May '18

openSUSE Recommended Update: Recommended update for gcc48 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:1150-1 Rating: moderate References: #1082130 #1083945 #1087932 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for the system compiler gcc48 fixes the following issues: - Support for generating IBM Z series Spectre Variant 2 fix method "expolines" was added (bsc#1083945) - A miscompilation of SPECcpu2017 526.blender was fixed. (bsc#1082130) - ARM Arch64 Cortex-A53 errata 843419 and 835769 were enabled by default, which could have lead to crashes of built binaries on Cortex A53 processors like in the Raspberry Pi3. (bsc#1087932) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-421=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): cpp48-4.8.5-35.1 cpp48-debuginfo-4.8.5-35.1 gcc48-4.8.5-35.1 gcc48-ada-4.8.5-35.1 gcc48-ada-debuginfo-4.8.5-35.1 gcc48-c++-4.8.5-35.1 gcc48-c++-debuginfo-4.8.5-35.1 gcc48-debuginfo-4.8.5-35.1 gcc48-debugsource-4.8.5-35.1 gcc48-fortran-4.8.5-35.1 gcc48-fortran-debuginfo-4.8.5-35.1 gcc48-gij-4.8.5-35.1 gcc48-gij-debuginfo-4.8.5-35.1 gcc48-java-4.8.5-35.1 gcc48-java-debuginfo-4.8.5-35.1 gcc48-locale-4.8.5-35.1 gcc48-obj-c++-4.8.5-35.1 gcc48-obj-c++-debuginfo-4.8.5-35.1 gcc48-objc-4.8.5-35.1 gcc48-objc-debuginfo-4.8.5-35.1 gcc48-testresults-4.8.5-35.1 libada48-4.8.5-35.1 libada48-debuginfo-4.8.5-35.1 libasan0-4.8.5-35.1 libasan0-debuginfo-4.8.5-35.1 libffi48-debugsource-4.8.5-35.1 libffi48-devel-4.8.5-35.1 libgcj48-4.8.5-35.1 libgcj48-debuginfo-4.8.5-35.1 libgcj48-debugsource-4.8.5-35.1 libgcj48-devel-4.8.5-35.1 libgcj48-devel-debuginfo-4.8.5-35.1 libgcj48-jar-4.8.5-35.1 libgcj_bc1-4.8.5-35.1 libobjc4-4.8.5-35.1 libobjc4-debuginfo-4.8.5-35.1 libstdc++48-devel-4.8.5-35.1 - openSUSE Leap 42.3 (x86_64): cross-aarch64-gcc48-icecream-backend-4.8.5-35.1 cross-armv6hl-gcc48-icecream-backend-4.8.5-35.1 cross-armv7hl-gcc48-icecream-backend-4.8.5-35.1 cross-i386-gcc48-icecream-backend-4.8.5-35.1 cross-ia64-gcc48-icecream-backend-4.8.5-35.1 cross-ppc-gcc48-icecream-backend-4.8.5-35.1 cross-ppc64-gcc48-icecream-backend-4.8.5-35.1 cross-ppc64le-gcc48-icecream-backend-4.8.5-35.1 cross-s390-gcc48-icecream-backend-4.8.5-35.1 cross-s390x-gcc48-icecream-backend-4.8.5-35.1 gcc48-32bit-4.8.5-35.1 gcc48-ada-32bit-4.8.5-35.1 gcc48-fortran-32bit-4.8.5-35.1 gcc48-gij-32bit-4.8.5-35.1 gcc48-gij-debuginfo-32bit-4.8.5-35.1 gcc48-objc-32bit-4.8.5-35.1 libada48-32bit-4.8.5-35.1 libada48-32bit-debuginfo-4.8.5-35.1 libasan0-32bit-4.8.5-35.1 libasan0-32bit-debuginfo-4.8.5-35.1 libffi48-devel-32bit-4.8.5-35.1 libgcj48-32bit-4.8.5-35.1 libgcj48-debuginfo-32bit-4.8.5-35.1 libgcj48-devel-32bit-4.8.5-35.1 libgcj48-devel-debuginfo-32bit-4.8.5-35.1 libobjc4-32bit-4.8.5-35.1 libobjc4-32bit-debuginfo-4.8.5-35.1 libstdc++48-devel-32bit-4.8.5-35.1 - openSUSE Leap 42.3 (noarch): gcc48-info-4.8.5-35.1 libstdc++48-doc-4.8.5-35.1 References: https://bugzilla.suse.com/1082130 https://bugzilla.suse.com/1083945 https://bugzilla.suse.com/1087932

1 0

openSUSE-SU-2018:1149-1: moderate: Security update for pam_kwallet
by opensuse-security＠opensuse.org 04 May '18

04 May '18

openSUSE Security Update: Security update for pam_kwallet ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:1149-1 Rating: moderate References: #1090863 Cross-References: CVE-2018-10380 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for pam_kwallet fixes the following issues: Security issue fixed: - CVE-2018-10380: Fix local root vulnerability (boo#1090863). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-423=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): pam_kwallet-5.7.1-4.3.1 pam_kwallet-debuginfo-5.7.1-4.3.1 pam_kwallet-debugsource-5.7.1-4.3.1 References: https://www.suse.com/security/cve/CVE-2018-10380.html https://bugzilla.suse.com/1090863

1 0

openSUSE-OU-2018:1148-1: moderate: Optional update to add llvm4
by maintenance＠opensuse.org 04 May '18

04 May '18

openSUSE Optional Update: Optional update to add llvm4 ______________________________________________________________________________ Announcement ID: openSUSE-OU-2018:1148-1 Rating: moderate References: #1091551 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update provides llvm4, a build dependency for Mozilla Firefox 60 ESR (boo#1091551) Patch Instructions: To install this openSUSE Optional Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-420=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): clang4-4.0.1-2.3 clang4-checker-4.0.1-2.3 clang4-debuginfo-4.0.1-2.3 clang4-devel-4.0.1-2.3 libLLVM4-4.0.1-2.3 libLLVM4-debuginfo-4.0.1-2.3 libLTO4-4.0.1-2.3 libLTO4-debuginfo-4.0.1-2.3 libclang4-4.0.1-2.3 libclang4-debuginfo-4.0.1-2.3 libomp4-devel-4.0.1-2.3 libomp4-devel-debuginfo-4.0.1-2.3 lld4-4.0.1-2.3 lld4-debuginfo-4.0.1-2.3 llvm4-4.0.1-2.3 llvm4-LTO-devel-4.0.1-2.3 llvm4-debuginfo-4.0.1-2.3 llvm4-debugsource-4.0.1-2.3 llvm4-devel-4.0.1-2.3 llvm4-devel-debuginfo-4.0.1-2.3 llvm4-gold-4.0.1-2.3 llvm4-gold-debuginfo-4.0.1-2.3 - openSUSE Leap 42.3 (x86_64): clang4-devel-32bit-4.0.1-2.3 libLLVM4-32bit-4.0.1-2.3 libLLVM4-debuginfo-32bit-4.0.1-2.3 libLTO4-32bit-4.0.1-2.3 libLTO4-debuginfo-32bit-4.0.1-2.3 libc++-devel-4.0.1-2.3 libc++1-4.0.1-2.3 libc++1-debuginfo-4.0.1-2.3 libc++abi-devel-4.0.1-2.3 libc++abi1-4.0.1-2.3 libc++abi1-debuginfo-4.0.1-2.3 libclang4-32bit-4.0.1-2.3 libclang4-debuginfo-32bit-4.0.1-2.3 liblldb4-4.0.1-2.3 liblldb4-debuginfo-4.0.1-2.3 lldb4-4.0.1-2.3 lldb4-debuginfo-4.0.1-2.3 lldb4-devel-4.0.1-2.3 llvm4-LTO-devel-32bit-4.0.1-2.3 llvm4-devel-32bit-4.0.1-2.3 llvm4-devel-debuginfo-32bit-4.0.1-2.3 python3-lldb4-4.0.1-2.3 python3-lldb4-debuginfo-4.0.1-2.3 - openSUSE Leap 42.3 (noarch): llvm4-emacs-plugins-4.0.1-2.3 llvm4-vim-plugins-4.0.1-2.3 python3-clang-4.0.1-2.3 References: https://bugzilla.suse.com/1091551

1 0

openSUSE-RU-2018:1147-1: moderate: Recommended update for xdg-utils
by maintenance＠opensuse.org 04 May '18

04 May '18

openSUSE Recommended Update: Recommended update for xdg-utils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:1147-1 Rating: moderate References: #1051353 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for xdg-utils fixes the following issues: - boo#1051353: Issues setting Chromium as default browser on kde Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-422=1 Package List: - openSUSE Leap 42.3 (noarch): xdg-utils-20160610-7.3.1 References: https://bugzilla.suse.com/1051353

1 0

openSUSE-RU-2018:1143-1: Recommended update for rpm
by maintenance＠opensuse.org 03 May '18

03 May '18

openSUSE Recommended Update: Recommended update for rpm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:1143-1 Rating: low References: #1069934 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for rpm provides the following fixes: - Added a %rpm_vercmp macro which accepts two versions as parameters and returns -1, 0, 1 if the first version is less than, equal or greater than the second version respectively. - Added a %pkg_version macro that accepts a package or capability name as argument and returns the version number of the installed package. If no package provides the argument, it returns the string "~~~". - Added a %pkg_vcmp macro that accepts 3 parameters. The first parameter is a package name or provided capability name, the second argument is an operator ( < <= = >= > != ) and the third parameter is a version string to be compared to the installed version of the first argument. - Added a %pkg_version_cmp macro which accepts a package or capability name as first argument and a version number as second argument and returns -1, 0, 1 or "~~~". The number values have the same meaning as in %rpm_vercmp and the "~~~" string is returned if the package or capability can't be found. (bsc#1069934) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-419=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): python3-rpm-4.11.2-14.4.1 python3-rpm-debuginfo-4.11.2-14.4.1 python3-rpm-debugsource-4.11.2-14.4.1 rpm-4.11.2-14.4.1 rpm-build-4.11.2-14.4.1 rpm-build-debuginfo-4.11.2-14.4.1 rpm-debuginfo-4.11.2-14.4.1 rpm-debugsource-4.11.2-14.4.1 rpm-devel-4.11.2-14.4.1 rpm-python-4.11.2-14.4.1 rpm-python-debuginfo-4.11.2-14.4.1 rpm-python-debugsource-4.11.2-14.4.1 - openSUSE Leap 42.3 (x86_64): rpm-32bit-4.11.2-14.4.1 rpm-debuginfo-32bit-4.11.2-14.4.1 References: https://bugzilla.suse.com/1069934

1 0

openSUSE-RU-2018:1142-1: moderate: Recommended update for openvswitch
by maintenance＠opensuse.org 03 May '18

03 May '18

openSUSE Recommended Update: Recommended update for openvswitch ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:1142-1 Rating: moderate References: #1089476 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for openvswitch fixes the following issues: - Preserve 'enable' status of openvswitch.service file when upgrading from SLE-12-SP3 (bsc#1089476) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-418=1 Package List: - openSUSE Leap 42.3 (x86_64): openvswitch-2.7.0-10.1 openvswitch-debuginfo-2.7.0-10.1 openvswitch-debugsource-2.7.0-10.1 openvswitch-devel-2.7.0-10.1 openvswitch-ovn-central-2.7.0-10.1 openvswitch-ovn-central-debuginfo-2.7.0-10.1 openvswitch-ovn-common-2.7.0-10.1 openvswitch-ovn-common-debuginfo-2.7.0-10.1 openvswitch-ovn-docker-2.7.0-10.1 openvswitch-ovn-host-2.7.0-10.1 openvswitch-ovn-host-debuginfo-2.7.0-10.1 openvswitch-ovn-vtep-2.7.0-10.1 openvswitch-ovn-vtep-debuginfo-2.7.0-10.1 openvswitch-pki-2.7.0-10.1 openvswitch-test-2.7.0-10.1 openvswitch-test-debuginfo-2.7.0-10.1 openvswitch-vtep-2.7.0-10.1 openvswitch-vtep-debuginfo-2.7.0-10.1 python-openvswitch-2.7.0-10.1 python-openvswitch-test-2.7.0-10.1 References: https://bugzilla.suse.com/1089476

1 0

openSUSE-RU-2018:1139-1: Recommended update for php7
by maintenance＠opensuse.org 03 May '18

03 May '18

openSUSE Recommended Update: Recommended update for php7 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:1139-1 Rating: low References: #1090133 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for php7 fixes the following issues: - Fix SplFileObject::getCsvControl() to return escape characters as well (bsc#1090133) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-415=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): apache2-mod_php7-7.0.7-34.1 apache2-mod_php7-debuginfo-7.0.7-34.1 php7-7.0.7-34.1 php7-bcmath-7.0.7-34.1 php7-bcmath-debuginfo-7.0.7-34.1 php7-bz2-7.0.7-34.1 php7-bz2-debuginfo-7.0.7-34.1 php7-calendar-7.0.7-34.1 php7-calendar-debuginfo-7.0.7-34.1 php7-ctype-7.0.7-34.1 php7-ctype-debuginfo-7.0.7-34.1 php7-curl-7.0.7-34.1 php7-curl-debuginfo-7.0.7-34.1 php7-dba-7.0.7-34.1 php7-dba-debuginfo-7.0.7-34.1 php7-debuginfo-7.0.7-34.1 php7-debugsource-7.0.7-34.1 php7-devel-7.0.7-34.1 php7-dom-7.0.7-34.1 php7-dom-debuginfo-7.0.7-34.1 php7-enchant-7.0.7-34.1 php7-enchant-debuginfo-7.0.7-34.1 php7-exif-7.0.7-34.1 php7-exif-debuginfo-7.0.7-34.1 php7-fastcgi-7.0.7-34.1 php7-fastcgi-debuginfo-7.0.7-34.1 php7-fileinfo-7.0.7-34.1 php7-fileinfo-debuginfo-7.0.7-34.1 php7-firebird-7.0.7-34.1 php7-firebird-debuginfo-7.0.7-34.1 php7-fpm-7.0.7-34.1 php7-fpm-debuginfo-7.0.7-34.1 php7-ftp-7.0.7-34.1 php7-ftp-debuginfo-7.0.7-34.1 php7-gd-7.0.7-34.1 php7-gd-debuginfo-7.0.7-34.1 php7-gettext-7.0.7-34.1 php7-gettext-debuginfo-7.0.7-34.1 php7-gmp-7.0.7-34.1 php7-gmp-debuginfo-7.0.7-34.1 php7-iconv-7.0.7-34.1 php7-iconv-debuginfo-7.0.7-34.1 php7-imap-7.0.7-34.1 php7-imap-debuginfo-7.0.7-34.1 php7-intl-7.0.7-34.1 php7-intl-debuginfo-7.0.7-34.1 php7-json-7.0.7-34.1 php7-json-debuginfo-7.0.7-34.1 php7-ldap-7.0.7-34.1 php7-ldap-debuginfo-7.0.7-34.1 php7-mbstring-7.0.7-34.1 php7-mbstring-debuginfo-7.0.7-34.1 php7-mcrypt-7.0.7-34.1 php7-mcrypt-debuginfo-7.0.7-34.1 php7-mysql-7.0.7-34.1 php7-mysql-debuginfo-7.0.7-34.1 php7-odbc-7.0.7-34.1 php7-odbc-debuginfo-7.0.7-34.1 php7-opcache-7.0.7-34.1 php7-opcache-debuginfo-7.0.7-34.1 php7-openssl-7.0.7-34.1 php7-openssl-debuginfo-7.0.7-34.1 php7-pcntl-7.0.7-34.1 php7-pcntl-debuginfo-7.0.7-34.1 php7-pdo-7.0.7-34.1 php7-pdo-debuginfo-7.0.7-34.1 php7-pgsql-7.0.7-34.1 php7-pgsql-debuginfo-7.0.7-34.1 php7-phar-7.0.7-34.1 php7-phar-debuginfo-7.0.7-34.1 php7-posix-7.0.7-34.1 php7-posix-debuginfo-7.0.7-34.1 php7-pspell-7.0.7-34.1 php7-pspell-debuginfo-7.0.7-34.1 php7-readline-7.0.7-34.1 php7-readline-debuginfo-7.0.7-34.1 php7-shmop-7.0.7-34.1 php7-shmop-debuginfo-7.0.7-34.1 php7-snmp-7.0.7-34.1 php7-snmp-debuginfo-7.0.7-34.1 php7-soap-7.0.7-34.1 php7-soap-debuginfo-7.0.7-34.1 php7-sockets-7.0.7-34.1 php7-sockets-debuginfo-7.0.7-34.1 php7-sqlite-7.0.7-34.1 php7-sqlite-debuginfo-7.0.7-34.1 php7-sysvmsg-7.0.7-34.1 php7-sysvmsg-debuginfo-7.0.7-34.1 php7-sysvsem-7.0.7-34.1 php7-sysvsem-debuginfo-7.0.7-34.1 php7-sysvshm-7.0.7-34.1 php7-sysvshm-debuginfo-7.0.7-34.1 php7-tidy-7.0.7-34.1 php7-tidy-debuginfo-7.0.7-34.1 php7-tokenizer-7.0.7-34.1 php7-tokenizer-debuginfo-7.0.7-34.1 php7-wddx-7.0.7-34.1 php7-wddx-debuginfo-7.0.7-34.1 php7-xmlreader-7.0.7-34.1 php7-xmlreader-debuginfo-7.0.7-34.1 php7-xmlrpc-7.0.7-34.1 php7-xmlrpc-debuginfo-7.0.7-34.1 php7-xmlwriter-7.0.7-34.1 php7-xmlwriter-debuginfo-7.0.7-34.1 php7-xsl-7.0.7-34.1 php7-xsl-debuginfo-7.0.7-34.1 php7-zip-7.0.7-34.1 php7-zip-debuginfo-7.0.7-34.1 php7-zlib-7.0.7-34.1 php7-zlib-debuginfo-7.0.7-34.1 - openSUSE Leap 42.3 (noarch): php7-pear-7.0.7-34.1 php7-pear-Archive_Tar-7.0.7-34.1 References: https://bugzilla.suse.com/1090133

1 0

openSUSE-SU-2018:1138-1: moderate: Security update for libraw
by opensuse-security＠opensuse.org 03 May '18

03 May '18

openSUSE Security Update: Security update for libraw ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:1138-1 Rating: moderate References: #1091345 #1091346 Cross-References: CVE-2018-10528 CVE-2018-10529 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for libraw fixes the following issues: * CVE-2018-10528: A stack-based buffer overflow in the utf2char function in libraw_cxx.cpp was fixed. [boo#1091345] * CVE-2018-10529: A out-of-bounds read affecting the X3F property table list implementation in libraw_x3f.cpp and libraw_cxx.cpp was fixed. [boo#1091346] Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-413=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libraw-debugsource-0.17.1-20.1 libraw-devel-0.17.1-20.1 libraw-devel-static-0.17.1-20.1 libraw-tools-0.17.1-20.1 libraw-tools-debuginfo-0.17.1-20.1 libraw15-0.17.1-20.1 libraw15-debuginfo-0.17.1-20.1 References: https://www.suse.com/security/cve/CVE-2018-10528.html https://www.suse.com/security/cve/CVE-2018-10529.html https://bugzilla.suse.com/1091345 https://bugzilla.suse.com/1091346

1 0

openSUSE-SU-2018:1137-1: important: Security update for patch
by opensuse-security＠opensuse.org 03 May '18

03 May '18

openSUSE Security Update: Security update for patch ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:1137-1 Rating: important References: #1080918 #1080951 #1088420 Cross-References: CVE-2016-10713 CVE-2018-1000156 CVE-2018-6951 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for patch fixes the following issues: Security issues fixed: - CVE-2018-1000156: Malicious patch files cause ed to execute arbitrary commands (bsc#1088420). - CVE-2018-6951: Fixed NULL pointer dereference in the intuit_diff_type function in pch.c (bsc#1080918). - CVE-2016-10713: Fixed out-of-bounds access within pch_write_line() in pch.c (bsc#1080918). This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-416=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): patch-2.7.5-9.3.1 patch-debuginfo-2.7.5-9.3.1 patch-debugsource-2.7.5-9.3.1 References: https://www.suse.com/security/cve/CVE-2016-10713.html https://www.suse.com/security/cve/CVE-2018-1000156.html https://www.suse.com/security/cve/CVE-2018-6951.html https://bugzilla.suse.com/1080918 https://bugzilla.suse.com/1080951 https://bugzilla.suse.com/1088420

1 0

openSUSE-SU-2018:1136-1: important: Security update for corosync
by opensuse-security＠opensuse.org 03 May '18

03 May '18

openSUSE Security Update: Security update for corosync ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:1136-1 Rating: important References: #1066585 #1083561 #1089346 Cross-References: CVE-2018-1084 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update for corosync fixes the following issues: - CVE-2018-1084: Integer overflow in totemcrypto:authenticate_nss_2_3() could lead to command execution (bsc#1089346) - Providing an empty uid or gid results in coroparse adding uid 0. (bsc#1066585) - Fix a problem with configuration file incompatibilities that was causing corosync to not work after upgrading from SLE-11-SP4-HA to SLE-12/15-HA. (bsc#1083561) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-417=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): corosync-2.3.6-10.1 corosync-debuginfo-2.3.6-10.1 corosync-debugsource-2.3.6-10.1 corosync-testagents-2.3.6-10.1 corosync-testagents-debuginfo-2.3.6-10.1 libcorosync-devel-2.3.6-10.1 libcorosync4-2.3.6-10.1 libcorosync4-debuginfo-2.3.6-10.1 - openSUSE Leap 42.3 (x86_64): libcorosync4-32bit-2.3.6-10.1 libcorosync4-debuginfo-32bit-2.3.6-10.1 References: https://www.suse.com/security/cve/CVE-2018-1084.html https://bugzilla.suse.com/1066585 https://bugzilla.suse.com/1083561 https://bugzilla.suse.com/1089346

1 0

openSUSE-SU-2018:1135-1: moderate: Security update for squid
by opensuse-security＠opensuse.org 03 May '18

03 May '18

openSUSE Security Update: Security update for squid ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:1135-1 Rating: moderate References: #1090089 Cross-References: CVE-2018-1172 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update fixes the following issues: - CVE-2018-1172: Squid Proxy Cache Denial of Service vulnerability (bsc#1090089). This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-412=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): squid-3.5.21-15.1 squid-debuginfo-3.5.21-15.1 squid-debugsource-3.5.21-15.1 References: https://www.suse.com/security/cve/CVE-2018-1172.html https://bugzilla.suse.com/1090089

1 0

openSUSE-SU-2018:1134-1: moderate: Security update for dovecot22
by opensuse-security＠opensuse.org 03 May '18

03 May '18

openSUSE Security Update: Security update for dovecot22 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:1134-1 Rating: moderate References: #1082826 Cross-References: CVE-2017-14461 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for dovecot22 fixes the following issues: - CVE-2017-14461: dovecot22: rfc822_parse_domain Information Leak Vulnerability (bsc#1082826) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-414=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): dovecot22-2.2.31-2.6.1 dovecot22-backend-mysql-2.2.31-2.6.1 dovecot22-backend-mysql-debuginfo-2.2.31-2.6.1 dovecot22-backend-pgsql-2.2.31-2.6.1 dovecot22-backend-pgsql-debuginfo-2.2.31-2.6.1 dovecot22-backend-sqlite-2.2.31-2.6.1 dovecot22-backend-sqlite-debuginfo-2.2.31-2.6.1 dovecot22-debuginfo-2.2.31-2.6.1 dovecot22-debugsource-2.2.31-2.6.1 dovecot22-devel-2.2.31-2.6.1 dovecot22-fts-2.2.31-2.6.1 dovecot22-fts-debuginfo-2.2.31-2.6.1 dovecot22-fts-lucene-2.2.31-2.6.1 dovecot22-fts-lucene-debuginfo-2.2.31-2.6.1 dovecot22-fts-solr-2.2.31-2.6.1 dovecot22-fts-solr-debuginfo-2.2.31-2.6.1 dovecot22-fts-squat-2.2.31-2.6.1 dovecot22-fts-squat-debuginfo-2.2.31-2.6.1 References: https://www.suse.com/security/cve/CVE-2017-14461.html https://bugzilla.suse.com/1082826

1 0

openSUSE-RU-2018:1126-1: moderate: Recommended update for etc-update
by maintenance＠opensuse.org 02 May '18

02 May '18

openSUSE Recommended Update: Recommended update for etc-update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:1126-1 Rating: moderate References: #1091111 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for etc-update fixes the following issues: _ boo#1091111: the etc-update utility did not properly handle files as they are found on rpm-based distributions (.rpmsave, .rpmnew and .rpmorig) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-411=1 Package List: - openSUSE Leap 42.3 (noarch): etc-update-2.3.31-11.5.1 References: https://bugzilla.suse.com/1091111

1 0

openSUSE-SU-2018:1123-1: moderate: Security update for GraphicsMagick
by opensuse-security＠opensuse.org 02 May '18

02 May '18

openSUSE Security Update: Security update for GraphicsMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:1123-1 Rating: moderate References: #1050623 #1055010 #1080522 #1085236 #1086773 #1087027 #1087037 #1089781 Cross-References: CVE-2017-11641 CVE-2017-13066 CVE-2017-18229 CVE-2017-18251 CVE-2017-18254 CVE-2018-10177 CVE-2018-6799 CVE-2018-9018 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes 8 vulnerabilities is now available. Description: This update for GraphicsMagick fixes the following issues: - security update (core) * CVE-2018-6799: The AcquireCacheNexus function in magick/pixel_cache.c in GraphicsMagick before 1.3.28 allows remote attackers to cause a denial of service (heap overwrite) or possibly have unspecified other impact via a crafted image file, because a pixel staging area is not used. [boo#1080522] - security update (png.c) * CVE-2018-9018: In GraphicsMagick 1.3.28, there is a divide-by-zero in the ReadMNGImage function of coders/png.c. Remote attackers could leverage this vulnerability to cause a crash and denial of service via a crafted mng file. [boo#1086773] - security update (gif.c) * CVE-2017-18254: An issue was discovered in ImageMagick 7.0.7. A memory leak vulnerability was found in the function WriteGIFImage in coders/gif.c, which allow remote attackers to cause a denial of service via a crafted file. [boo#1087027] - security update (pcd.c) * CVE-2017-18251: An issue was discovered in ImageMagick 7.0.7. A memory leak vulnerability was found in the function ReadPCDImage in coders/pcd.c, which allow remote attackers to cause a denial of service via a crafted file. [boo#1087037] * CVE-2017-18229: An issue was discovered in GraphicsMagick 1.3.26. An allocation failure vulnerability was found in the function ReadTIFFImage in coders/tiff.c, which allows attackers to cause a denial of service via a crafted file, because file size is not properly used to restrict scanline, strip, and tile allocations. [boo#1085236] * CVE-2017-11641: GraphicsMagick 1.3.26 has a Memory Leak in the PersistCache function in magick/pixel_cache.c during writing of Magick Persistent Cache (MPC) files.[boo#1050623] * CVE-2017-13066: GraphicsMagick 1.3.26 has a memory leak vulnerability in the function CloneImage in magick/image.c. [boo#1055010] * CVE-2018-10177: Specially crafted PNG images may have triggered an infinite loop [bsc#1089781] Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-407=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): GraphicsMagick-1.3.25-87.1 GraphicsMagick-debuginfo-1.3.25-87.1 GraphicsMagick-debugsource-1.3.25-87.1 GraphicsMagick-devel-1.3.25-87.1 libGraphicsMagick++-Q16-12-1.3.25-87.1 libGraphicsMagick++-Q16-12-debuginfo-1.3.25-87.1 libGraphicsMagick++-devel-1.3.25-87.1 libGraphicsMagick-Q16-3-1.3.25-87.1 libGraphicsMagick-Q16-3-debuginfo-1.3.25-87.1 libGraphicsMagick3-config-1.3.25-87.1 libGraphicsMagickWand-Q16-2-1.3.25-87.1 libGraphicsMagickWand-Q16-2-debuginfo-1.3.25-87.1 perl-GraphicsMagick-1.3.25-87.1 perl-GraphicsMagick-debuginfo-1.3.25-87.1 References: https://www.suse.com/security/cve/CVE-2017-11641.html https://www.suse.com/security/cve/CVE-2017-13066.html https://www.suse.com/security/cve/CVE-2017-18229.html https://www.suse.com/security/cve/CVE-2017-18251.html https://www.suse.com/security/cve/CVE-2017-18254.html https://www.suse.com/security/cve/CVE-2018-10177.html https://www.suse.com/security/cve/CVE-2018-6799.html https://www.suse.com/security/cve/CVE-2018-9018.html https://bugzilla.suse.com/1050623 https://bugzilla.suse.com/1055010 https://bugzilla.suse.com/1080522 https://bugzilla.suse.com/1085236 https://bugzilla.suse.com/1086773 https://bugzilla.suse.com/1087027 https://bugzilla.suse.com/1087037 https://bugzilla.suse.com/1089781

1 0

openSUSE-SU-2018:1120-1: moderate: Security update for flac
by opensuse-security＠opensuse.org 02 May '18

02 May '18

openSUSE Security Update: Security update for flac ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:1120-1 Rating: moderate References: #1091045 Cross-References: CVE-2017-6888 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for flac fixes the following issues: - CVE-2017-6888: Fix memory leak in read_metadata_vorbiscomment_() function could lead to denial of service (boo#1091045). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-408=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): flac-1.3.2-2.3.1 flac-debuginfo-1.3.2-2.3.1 flac-debugsource-1.3.2-2.3.1 flac-devel-1.3.2-2.3.1 libFLAC++6-1.3.2-2.3.1 libFLAC++6-debuginfo-1.3.2-2.3.1 libFLAC8-1.3.2-2.3.1 libFLAC8-debuginfo-1.3.2-2.3.1 - openSUSE Leap 42.3 (noarch): flac-doc-1.3.2-2.3.1 - openSUSE Leap 42.3 (x86_64): flac-devel-32bit-1.3.2-2.3.1 libFLAC++6-32bit-1.3.2-2.3.1 libFLAC++6-debuginfo-32bit-1.3.2-2.3.1 libFLAC8-32bit-1.3.2-2.3.1 libFLAC8-debuginfo-32bit-1.3.2-2.3.1 References: https://www.suse.com/security/cve/CVE-2017-6888.html https://bugzilla.suse.com/1091045

1 0

openSUSE-SU-2018:1119-1: moderate: Security update for quassel
by opensuse-security＠opensuse.org 02 May '18

02 May '18

openSUSE Security Update: Security update for quassel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:1119-1 Rating: moderate References: #1069468 #1090495 Cross-References: CVE-2018-1000178 CVE-2018-1000179 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for quassel fixes the following issues: Security fixes (boo#1090495): - CVE-2018-1000178: A heap metadata corruption in qdatastream could have been exploited to launch an unauthenticated remote code execution - CVE-2018-1000179: A remote attacker could have caused a Denial of Service attack by initiating login attempts before the core got initialized The following tracked packaging change is included: - boo#1069468: no longer use /var/adm/fillup-templates This update also includes various small bug fixes in the upstream 0.12.4 release. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-409=1 Package List: - openSUSE Leap 42.3 (x86_64): quassel-base-0.12.5-5.3.1 quassel-client-0.12.5-5.3.1 quassel-client-debuginfo-0.12.5-5.3.1 quassel-client-qt5-0.12.5-5.3.1 quassel-client-qt5-debuginfo-0.12.5-5.3.1 quassel-core-0.12.5-5.3.1 quassel-core-debuginfo-0.12.5-5.3.1 quassel-debugsource-0.12.5-5.3.1 quassel-mono-0.12.5-5.3.1 quassel-mono-debuginfo-0.12.5-5.3.1 References: https://www.suse.com/security/cve/CVE-2018-1000178.html https://www.suse.com/security/cve/CVE-2018-1000179.html https://bugzilla.suse.com/1069468 https://bugzilla.suse.com/1090495

1 0

openSUSE-RU-2018:1118-1: Recommended update for yast2-packager
by maintenance＠opensuse.org 02 May '18

02 May '18

openSUSE Recommended Update: Recommended update for yast2-packager ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:1118-1 Rating: low References: #1078323 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-packager adds a warning to inform the user that changes in a repository managed by a service will be lost in the next refresh of the service (bsc#1078323). This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-410=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): yast2-packager-3.2.26-6.1 References: https://bugzilla.suse.com/1078323

1 0