May 2018 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-OU-2018:1148-1: moderate: Optional update to add llvm4
by maintenance＠opensuse.org 04 May '18

04 May '18

openSUSE Optional Update: Optional update to add llvm4 ______________________________________________________________________________ Announcement ID: openSUSE-OU-2018:1148-1 Rating: moderate References: #1091551 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update provides llvm4, a build dependency for Mozilla Firefox 60 ESR (boo#1091551) Patch Instructions: To install this openSUSE Optional Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-420=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): clang4-4.0.1-2.3 clang4-checker-4.0.1-2.3 clang4-debuginfo-4.0.1-2.3 clang4-devel-4.0.1-2.3 libLLVM4-4.0.1-2.3 libLLVM4-debuginfo-4.0.1-2.3 libLTO4-4.0.1-2.3 libLTO4-debuginfo-4.0.1-2.3 libclang4-4.0.1-2.3 libclang4-debuginfo-4.0.1-2.3 libomp4-devel-4.0.1-2.3 libomp4-devel-debuginfo-4.0.1-2.3 lld4-4.0.1-2.3 lld4-debuginfo-4.0.1-2.3 llvm4-4.0.1-2.3 llvm4-LTO-devel-4.0.1-2.3 llvm4-debuginfo-4.0.1-2.3 llvm4-debugsource-4.0.1-2.3 llvm4-devel-4.0.1-2.3 llvm4-devel-debuginfo-4.0.1-2.3 llvm4-gold-4.0.1-2.3 llvm4-gold-debuginfo-4.0.1-2.3 - openSUSE Leap 42.3 (x86_64): clang4-devel-32bit-4.0.1-2.3 libLLVM4-32bit-4.0.1-2.3 libLLVM4-debuginfo-32bit-4.0.1-2.3 libLTO4-32bit-4.0.1-2.3 libLTO4-debuginfo-32bit-4.0.1-2.3 libc++-devel-4.0.1-2.3 libc++1-4.0.1-2.3 libc++1-debuginfo-4.0.1-2.3 libc++abi-devel-4.0.1-2.3 libc++abi1-4.0.1-2.3 libc++abi1-debuginfo-4.0.1-2.3 libclang4-32bit-4.0.1-2.3 libclang4-debuginfo-32bit-4.0.1-2.3 liblldb4-4.0.1-2.3 liblldb4-debuginfo-4.0.1-2.3 lldb4-4.0.1-2.3 lldb4-debuginfo-4.0.1-2.3 lldb4-devel-4.0.1-2.3 llvm4-LTO-devel-32bit-4.0.1-2.3 llvm4-devel-32bit-4.0.1-2.3 llvm4-devel-debuginfo-32bit-4.0.1-2.3 python3-lldb4-4.0.1-2.3 python3-lldb4-debuginfo-4.0.1-2.3 - openSUSE Leap 42.3 (noarch): llvm4-emacs-plugins-4.0.1-2.3 llvm4-vim-plugins-4.0.1-2.3 python3-clang-4.0.1-2.3 References: https://bugzilla.suse.com/1091551

1 0

openSUSE-RU-2018:1147-1: moderate: Recommended update for xdg-utils
by maintenance＠opensuse.org 04 May '18

04 May '18

openSUSE Recommended Update: Recommended update for xdg-utils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:1147-1 Rating: moderate References: #1051353 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for xdg-utils fixes the following issues: - boo#1051353: Issues setting Chromium as default browser on kde Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-422=1 Package List: - openSUSE Leap 42.3 (noarch): xdg-utils-20160610-7.3.1 References: https://bugzilla.suse.com/1051353

1 0

openSUSE-RU-2018:1143-1: Recommended update for rpm
by maintenance＠opensuse.org 03 May '18

03 May '18

openSUSE Recommended Update: Recommended update for rpm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:1143-1 Rating: low References: #1069934 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for rpm provides the following fixes: - Added a %rpm_vercmp macro which accepts two versions as parameters and returns -1, 0, 1 if the first version is less than, equal or greater than the second version respectively. - Added a %pkg_version macro that accepts a package or capability name as argument and returns the version number of the installed package. If no package provides the argument, it returns the string "~~~". - Added a %pkg_vcmp macro that accepts 3 parameters. The first parameter is a package name or provided capability name, the second argument is an operator ( < <= = >= > != ) and the third parameter is a version string to be compared to the installed version of the first argument. - Added a %pkg_version_cmp macro which accepts a package or capability name as first argument and a version number as second argument and returns -1, 0, 1 or "~~~". The number values have the same meaning as in %rpm_vercmp and the "~~~" string is returned if the package or capability can't be found. (bsc#1069934) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-419=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): python3-rpm-4.11.2-14.4.1 python3-rpm-debuginfo-4.11.2-14.4.1 python3-rpm-debugsource-4.11.2-14.4.1 rpm-4.11.2-14.4.1 rpm-build-4.11.2-14.4.1 rpm-build-debuginfo-4.11.2-14.4.1 rpm-debuginfo-4.11.2-14.4.1 rpm-debugsource-4.11.2-14.4.1 rpm-devel-4.11.2-14.4.1 rpm-python-4.11.2-14.4.1 rpm-python-debuginfo-4.11.2-14.4.1 rpm-python-debugsource-4.11.2-14.4.1 - openSUSE Leap 42.3 (x86_64): rpm-32bit-4.11.2-14.4.1 rpm-debuginfo-32bit-4.11.2-14.4.1 References: https://bugzilla.suse.com/1069934

1 0

openSUSE-RU-2018:1142-1: moderate: Recommended update for openvswitch
by maintenance＠opensuse.org 03 May '18

03 May '18

openSUSE Recommended Update: Recommended update for openvswitch ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:1142-1 Rating: moderate References: #1089476 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for openvswitch fixes the following issues: - Preserve 'enable' status of openvswitch.service file when upgrading from SLE-12-SP3 (bsc#1089476) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-418=1 Package List: - openSUSE Leap 42.3 (x86_64): openvswitch-2.7.0-10.1 openvswitch-debuginfo-2.7.0-10.1 openvswitch-debugsource-2.7.0-10.1 openvswitch-devel-2.7.0-10.1 openvswitch-ovn-central-2.7.0-10.1 openvswitch-ovn-central-debuginfo-2.7.0-10.1 openvswitch-ovn-common-2.7.0-10.1 openvswitch-ovn-common-debuginfo-2.7.0-10.1 openvswitch-ovn-docker-2.7.0-10.1 openvswitch-ovn-host-2.7.0-10.1 openvswitch-ovn-host-debuginfo-2.7.0-10.1 openvswitch-ovn-vtep-2.7.0-10.1 openvswitch-ovn-vtep-debuginfo-2.7.0-10.1 openvswitch-pki-2.7.0-10.1 openvswitch-test-2.7.0-10.1 openvswitch-test-debuginfo-2.7.0-10.1 openvswitch-vtep-2.7.0-10.1 openvswitch-vtep-debuginfo-2.7.0-10.1 python-openvswitch-2.7.0-10.1 python-openvswitch-test-2.7.0-10.1 References: https://bugzilla.suse.com/1089476

1 0

openSUSE-RU-2018:1139-1: Recommended update for php7
by maintenance＠opensuse.org 03 May '18

03 May '18

openSUSE Recommended Update: Recommended update for php7 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:1139-1 Rating: low References: #1090133 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for php7 fixes the following issues: - Fix SplFileObject::getCsvControl() to return escape characters as well (bsc#1090133) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-415=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): apache2-mod_php7-7.0.7-34.1 apache2-mod_php7-debuginfo-7.0.7-34.1 php7-7.0.7-34.1 php7-bcmath-7.0.7-34.1 php7-bcmath-debuginfo-7.0.7-34.1 php7-bz2-7.0.7-34.1 php7-bz2-debuginfo-7.0.7-34.1 php7-calendar-7.0.7-34.1 php7-calendar-debuginfo-7.0.7-34.1 php7-ctype-7.0.7-34.1 php7-ctype-debuginfo-7.0.7-34.1 php7-curl-7.0.7-34.1 php7-curl-debuginfo-7.0.7-34.1 php7-dba-7.0.7-34.1 php7-dba-debuginfo-7.0.7-34.1 php7-debuginfo-7.0.7-34.1 php7-debugsource-7.0.7-34.1 php7-devel-7.0.7-34.1 php7-dom-7.0.7-34.1 php7-dom-debuginfo-7.0.7-34.1 php7-enchant-7.0.7-34.1 php7-enchant-debuginfo-7.0.7-34.1 php7-exif-7.0.7-34.1 php7-exif-debuginfo-7.0.7-34.1 php7-fastcgi-7.0.7-34.1 php7-fastcgi-debuginfo-7.0.7-34.1 php7-fileinfo-7.0.7-34.1 php7-fileinfo-debuginfo-7.0.7-34.1 php7-firebird-7.0.7-34.1 php7-firebird-debuginfo-7.0.7-34.1 php7-fpm-7.0.7-34.1 php7-fpm-debuginfo-7.0.7-34.1 php7-ftp-7.0.7-34.1 php7-ftp-debuginfo-7.0.7-34.1 php7-gd-7.0.7-34.1 php7-gd-debuginfo-7.0.7-34.1 php7-gettext-7.0.7-34.1 php7-gettext-debuginfo-7.0.7-34.1 php7-gmp-7.0.7-34.1 php7-gmp-debuginfo-7.0.7-34.1 php7-iconv-7.0.7-34.1 php7-iconv-debuginfo-7.0.7-34.1 php7-imap-7.0.7-34.1 php7-imap-debuginfo-7.0.7-34.1 php7-intl-7.0.7-34.1 php7-intl-debuginfo-7.0.7-34.1 php7-json-7.0.7-34.1 php7-json-debuginfo-7.0.7-34.1 php7-ldap-7.0.7-34.1 php7-ldap-debuginfo-7.0.7-34.1 php7-mbstring-7.0.7-34.1 php7-mbstring-debuginfo-7.0.7-34.1 php7-mcrypt-7.0.7-34.1 php7-mcrypt-debuginfo-7.0.7-34.1 php7-mysql-7.0.7-34.1 php7-mysql-debuginfo-7.0.7-34.1 php7-odbc-7.0.7-34.1 php7-odbc-debuginfo-7.0.7-34.1 php7-opcache-7.0.7-34.1 php7-opcache-debuginfo-7.0.7-34.1 php7-openssl-7.0.7-34.1 php7-openssl-debuginfo-7.0.7-34.1 php7-pcntl-7.0.7-34.1 php7-pcntl-debuginfo-7.0.7-34.1 php7-pdo-7.0.7-34.1 php7-pdo-debuginfo-7.0.7-34.1 php7-pgsql-7.0.7-34.1 php7-pgsql-debuginfo-7.0.7-34.1 php7-phar-7.0.7-34.1 php7-phar-debuginfo-7.0.7-34.1 php7-posix-7.0.7-34.1 php7-posix-debuginfo-7.0.7-34.1 php7-pspell-7.0.7-34.1 php7-pspell-debuginfo-7.0.7-34.1 php7-readline-7.0.7-34.1 php7-readline-debuginfo-7.0.7-34.1 php7-shmop-7.0.7-34.1 php7-shmop-debuginfo-7.0.7-34.1 php7-snmp-7.0.7-34.1 php7-snmp-debuginfo-7.0.7-34.1 php7-soap-7.0.7-34.1 php7-soap-debuginfo-7.0.7-34.1 php7-sockets-7.0.7-34.1 php7-sockets-debuginfo-7.0.7-34.1 php7-sqlite-7.0.7-34.1 php7-sqlite-debuginfo-7.0.7-34.1 php7-sysvmsg-7.0.7-34.1 php7-sysvmsg-debuginfo-7.0.7-34.1 php7-sysvsem-7.0.7-34.1 php7-sysvsem-debuginfo-7.0.7-34.1 php7-sysvshm-7.0.7-34.1 php7-sysvshm-debuginfo-7.0.7-34.1 php7-tidy-7.0.7-34.1 php7-tidy-debuginfo-7.0.7-34.1 php7-tokenizer-7.0.7-34.1 php7-tokenizer-debuginfo-7.0.7-34.1 php7-wddx-7.0.7-34.1 php7-wddx-debuginfo-7.0.7-34.1 php7-xmlreader-7.0.7-34.1 php7-xmlreader-debuginfo-7.0.7-34.1 php7-xmlrpc-7.0.7-34.1 php7-xmlrpc-debuginfo-7.0.7-34.1 php7-xmlwriter-7.0.7-34.1 php7-xmlwriter-debuginfo-7.0.7-34.1 php7-xsl-7.0.7-34.1 php7-xsl-debuginfo-7.0.7-34.1 php7-zip-7.0.7-34.1 php7-zip-debuginfo-7.0.7-34.1 php7-zlib-7.0.7-34.1 php7-zlib-debuginfo-7.0.7-34.1 - openSUSE Leap 42.3 (noarch): php7-pear-7.0.7-34.1 php7-pear-Archive_Tar-7.0.7-34.1 References: https://bugzilla.suse.com/1090133

1 0

openSUSE-SU-2018:1138-1: moderate: Security update for libraw
by opensuse-security＠opensuse.org 03 May '18

03 May '18

openSUSE Security Update: Security update for libraw ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:1138-1 Rating: moderate References: #1091345 #1091346 Cross-References: CVE-2018-10528 CVE-2018-10529 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for libraw fixes the following issues: * CVE-2018-10528: A stack-based buffer overflow in the utf2char function in libraw_cxx.cpp was fixed. [boo#1091345] * CVE-2018-10529: A out-of-bounds read affecting the X3F property table list implementation in libraw_x3f.cpp and libraw_cxx.cpp was fixed. [boo#1091346] Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-413=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libraw-debugsource-0.17.1-20.1 libraw-devel-0.17.1-20.1 libraw-devel-static-0.17.1-20.1 libraw-tools-0.17.1-20.1 libraw-tools-debuginfo-0.17.1-20.1 libraw15-0.17.1-20.1 libraw15-debuginfo-0.17.1-20.1 References: https://www.suse.com/security/cve/CVE-2018-10528.html https://www.suse.com/security/cve/CVE-2018-10529.html https://bugzilla.suse.com/1091345 https://bugzilla.suse.com/1091346

1 0

openSUSE-SU-2018:1137-1: important: Security update for patch
by opensuse-security＠opensuse.org 03 May '18

03 May '18

openSUSE Security Update: Security update for patch ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:1137-1 Rating: important References: #1080918 #1080951 #1088420 Cross-References: CVE-2016-10713 CVE-2018-1000156 CVE-2018-6951 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for patch fixes the following issues: Security issues fixed: - CVE-2018-1000156: Malicious patch files cause ed to execute arbitrary commands (bsc#1088420). - CVE-2018-6951: Fixed NULL pointer dereference in the intuit_diff_type function in pch.c (bsc#1080918). - CVE-2016-10713: Fixed out-of-bounds access within pch_write_line() in pch.c (bsc#1080918). This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-416=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): patch-2.7.5-9.3.1 patch-debuginfo-2.7.5-9.3.1 patch-debugsource-2.7.5-9.3.1 References: https://www.suse.com/security/cve/CVE-2016-10713.html https://www.suse.com/security/cve/CVE-2018-1000156.html https://www.suse.com/security/cve/CVE-2018-6951.html https://bugzilla.suse.com/1080918 https://bugzilla.suse.com/1080951 https://bugzilla.suse.com/1088420

1 0

openSUSE-SU-2018:1136-1: important: Security update for corosync
by opensuse-security＠opensuse.org 03 May '18

03 May '18

openSUSE Security Update: Security update for corosync ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:1136-1 Rating: important References: #1066585 #1083561 #1089346 Cross-References: CVE-2018-1084 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update for corosync fixes the following issues: - CVE-2018-1084: Integer overflow in totemcrypto:authenticate_nss_2_3() could lead to command execution (bsc#1089346) - Providing an empty uid or gid results in coroparse adding uid 0. (bsc#1066585) - Fix a problem with configuration file incompatibilities that was causing corosync to not work after upgrading from SLE-11-SP4-HA to SLE-12/15-HA. (bsc#1083561) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-417=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): corosync-2.3.6-10.1 corosync-debuginfo-2.3.6-10.1 corosync-debugsource-2.3.6-10.1 corosync-testagents-2.3.6-10.1 corosync-testagents-debuginfo-2.3.6-10.1 libcorosync-devel-2.3.6-10.1 libcorosync4-2.3.6-10.1 libcorosync4-debuginfo-2.3.6-10.1 - openSUSE Leap 42.3 (x86_64): libcorosync4-32bit-2.3.6-10.1 libcorosync4-debuginfo-32bit-2.3.6-10.1 References: https://www.suse.com/security/cve/CVE-2018-1084.html https://bugzilla.suse.com/1066585 https://bugzilla.suse.com/1083561 https://bugzilla.suse.com/1089346

1 0

openSUSE-SU-2018:1135-1: moderate: Security update for squid
by opensuse-security＠opensuse.org 03 May '18

03 May '18

openSUSE Security Update: Security update for squid ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:1135-1 Rating: moderate References: #1090089 Cross-References: CVE-2018-1172 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update fixes the following issues: - CVE-2018-1172: Squid Proxy Cache Denial of Service vulnerability (bsc#1090089). This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-412=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): squid-3.5.21-15.1 squid-debuginfo-3.5.21-15.1 squid-debugsource-3.5.21-15.1 References: https://www.suse.com/security/cve/CVE-2018-1172.html https://bugzilla.suse.com/1090089

1 0

openSUSE-SU-2018:1134-1: moderate: Security update for dovecot22
by opensuse-security＠opensuse.org 03 May '18

03 May '18

openSUSE Security Update: Security update for dovecot22 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:1134-1 Rating: moderate References: #1082826 Cross-References: CVE-2017-14461 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for dovecot22 fixes the following issues: - CVE-2017-14461: dovecot22: rfc822_parse_domain Information Leak Vulnerability (bsc#1082826) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-414=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): dovecot22-2.2.31-2.6.1 dovecot22-backend-mysql-2.2.31-2.6.1 dovecot22-backend-mysql-debuginfo-2.2.31-2.6.1 dovecot22-backend-pgsql-2.2.31-2.6.1 dovecot22-backend-pgsql-debuginfo-2.2.31-2.6.1 dovecot22-backend-sqlite-2.2.31-2.6.1 dovecot22-backend-sqlite-debuginfo-2.2.31-2.6.1 dovecot22-debuginfo-2.2.31-2.6.1 dovecot22-debugsource-2.2.31-2.6.1 dovecot22-devel-2.2.31-2.6.1 dovecot22-fts-2.2.31-2.6.1 dovecot22-fts-debuginfo-2.2.31-2.6.1 dovecot22-fts-lucene-2.2.31-2.6.1 dovecot22-fts-lucene-debuginfo-2.2.31-2.6.1 dovecot22-fts-solr-2.2.31-2.6.1 dovecot22-fts-solr-debuginfo-2.2.31-2.6.1 dovecot22-fts-squat-2.2.31-2.6.1 dovecot22-fts-squat-debuginfo-2.2.31-2.6.1 References: https://www.suse.com/security/cve/CVE-2017-14461.html https://bugzilla.suse.com/1082826

1 0