May 2018 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2018:1352-1: moderate: Recommended update for llvm4
by maintenance＠opensuse.org 19 May '18

19 May '18

openSUSE Recommended Update: Recommended update for llvm4 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:1352-1 Rating: moderate References: #1092697 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for llvm4 fixes the following issues: - Do not build stage1 with debug info. It was accidentally added with the use of %optflags. This should fix out of memory errors on 32bit architectures and speed up build everywhere else. (boo#1092697) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-475=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): clang4-4.0.1-5.1 clang4-checker-4.0.1-5.1 clang4-debuginfo-4.0.1-5.1 clang4-devel-4.0.1-5.1 libLLVM4-4.0.1-5.1 libLLVM4-debuginfo-4.0.1-5.1 libLTO4-4.0.1-5.1 libLTO4-debuginfo-4.0.1-5.1 libclang4-4.0.1-5.1 libclang4-debuginfo-4.0.1-5.1 libomp4-devel-4.0.1-5.1 libomp4-devel-debuginfo-4.0.1-5.1 lld4-4.0.1-5.1 lld4-debuginfo-4.0.1-5.1 llvm4-4.0.1-5.1 llvm4-LTO-devel-4.0.1-5.1 llvm4-debuginfo-4.0.1-5.1 llvm4-debugsource-4.0.1-5.1 llvm4-devel-4.0.1-5.1 llvm4-devel-debuginfo-4.0.1-5.1 llvm4-gold-4.0.1-5.1 llvm4-gold-debuginfo-4.0.1-5.1 - openSUSE Leap 42.3 (x86_64): clang4-devel-32bit-4.0.1-5.1 libLLVM4-32bit-4.0.1-5.1 libLLVM4-debuginfo-32bit-4.0.1-5.1 libLTO4-32bit-4.0.1-5.1 libLTO4-debuginfo-32bit-4.0.1-5.1 libc++-devel-4.0.1-5.1 libc++1-4.0.1-5.1 libc++1-debuginfo-4.0.1-5.1 libc++abi-devel-4.0.1-5.1 libc++abi1-4.0.1-5.1 libc++abi1-debuginfo-4.0.1-5.1 libclang4-32bit-4.0.1-5.1 libclang4-debuginfo-32bit-4.0.1-5.1 liblldb4-4.0.1-5.1 liblldb4-debuginfo-4.0.1-5.1 lldb4-4.0.1-5.1 lldb4-debuginfo-4.0.1-5.1 lldb4-devel-4.0.1-5.1 llvm4-LTO-devel-32bit-4.0.1-5.1 llvm4-devel-32bit-4.0.1-5.1 llvm4-devel-debuginfo-32bit-4.0.1-5.1 python3-lldb4-4.0.1-5.1 python3-lldb4-debuginfo-4.0.1-5.1 - openSUSE Leap 42.3 (noarch): llvm4-emacs-plugins-4.0.1-5.1 llvm4-vim-plugins-4.0.1-5.1 python3-clang-4.0.1-5.1 References: https://bugzilla.suse.com/1092697

1 0

openSUSE-RU-2018:1351-1: moderate: Recommended update for VirtualBox
by maintenance＠opensuse.org 19 May '18

19 May '18

openSUSE Recommended Update: Recommended update for VirtualBox ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:1351-1 Rating: moderate References: #1093044 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for VirtualBox to version 5.1.38 fixes the following issues: - hosts: support Linux 4.17 changes - guests: support Linux 4.16 and EL 7.5 kernels - guests: 3D fixes for recent guests Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-476=1 Package List: - openSUSE Leap 42.3 (x86_64): python-virtualbox-5.1.38-53.1 python-virtualbox-debuginfo-5.1.38-53.1 virtualbox-5.1.38-53.1 virtualbox-debuginfo-5.1.38-53.1 virtualbox-debugsource-5.1.38-53.1 virtualbox-devel-5.1.38-53.1 virtualbox-guest-kmp-default-5.1.38_k4.4.126_48-53.1 virtualbox-guest-kmp-default-debuginfo-5.1.38_k4.4.126_48-53.1 virtualbox-guest-tools-5.1.38-53.1 virtualbox-guest-tools-debuginfo-5.1.38-53.1 virtualbox-guest-x11-5.1.38-53.1 virtualbox-guest-x11-debuginfo-5.1.38-53.1 virtualbox-host-kmp-default-5.1.38_k4.4.126_48-53.1 virtualbox-host-kmp-default-debuginfo-5.1.38_k4.4.126_48-53.1 virtualbox-qt-5.1.38-53.1 virtualbox-qt-debuginfo-5.1.38-53.1 virtualbox-vnc-5.1.38-53.1 virtualbox-websrv-5.1.38-53.1 virtualbox-websrv-debuginfo-5.1.38-53.1 - openSUSE Leap 42.3 (noarch): virtualbox-guest-desktop-icons-5.1.38-53.1 virtualbox-guest-source-5.1.38-53.1 virtualbox-host-source-5.1.38-53.1 References: https://bugzilla.suse.com/1093044

1 0

openSUSE-RU-2018:1350-1: Recommended update for timezone, timezone-java
by maintenance＠opensuse.org 19 May '18

19 May '18

openSUSE Recommended Update: Recommended update for timezone, timezone-java ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:1350-1 Rating: low References: #1073299 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update provides the latest timezone information (2018e) for your system, including following changes: - North Korea switches back from +0830 to +09 on 2018-05-05. - Ireland's standard time is in the summer, with negative DST offset to standard time used in Winter (bsc#1073299) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-473=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): timezone-2018e-lp150.2.3.3 timezone-debuginfo-2018e-lp150.2.3.3 timezone-debugsource-2018e-lp150.2.3.3 - openSUSE Leap 15.0 (noarch): timezone-java-2018e-lp150.2.3.3 References: https://bugzilla.suse.com/1073299

1 0

openSUSE-RU-2018:1349-1: moderate: Recommended update for python3-apache-libcloud
by maintenance＠opensuse.org 19 May '18

19 May '18

openSUSE Recommended Update: Recommended update for python3-apache-libcloud ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:1349-1 Rating: moderate References: #1073879 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python3-apache-libcloud contains the following fixes: * New load balancer driver for Dimension Data * New DNS driver for AuroraDNS * New DNS driver for WorldWideDNS * New DNS driver for DNSimple * New DNS driver for PointDNS * New DNS driver for Vult DNS * New DNS driver for Liquidweb DNS * New DNS driver for Zonomi DNS * New DNS driver for Durable DNS * Added new South America East region to S3 storage driver * Many more improvements and API v2.0 added to the Dimension Data compute driver * New API v1 support for Google Cloud DNS * New compute driver for Microsoft Azure Virtual Machines service * New compute driver for RunAbove compute service * New compute driver for Cloudwatt compute service * New compute driver for Packet.net * New compute driver for OnApp Cloud service * New compute driver for Dimension Data compute service * New storage driver for AuroraObjects service * New load balancer driver for Softlayer loadbalancing service * New DNS driver for DigitalOcean DNS service * Support for DigitalOcean API v2 which is not used by default. * Support for AWS Signature version 4 and new AWS Frankfurt, Germany region * Support for retrying failed HTTP requests * Improvements in the HostVirtual compute driver This version update to 0.19.0 unifies the Python 2 and Python 3 sources of the module, as used on SLES 12. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-477=1 Package List: - openSUSE Leap 42.3 (noarch): python3-apache-libcloud-0.19.0-7.6.1 References: https://bugzilla.suse.com/1073879

1 0

openSUSE-SU-2018:1348-1: moderate: Security update for ghostscript
by opensuse-security＠opensuse.org 19 May '18

19 May '18

openSUSE Security Update: Security update for ghostscript ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:1348-1 Rating: moderate References: #1090099 Cross-References: CVE-2018-10194 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for ghostscript fixes the following issues: - CVE-2018-10194: A stack-based buffer overflow was fixed in gdevpdts.c (bsc#1090099) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-479=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): ghostscript-9.15-14.6.1 ghostscript-debuginfo-9.15-14.6.1 ghostscript-debugsource-9.15-14.6.1 ghostscript-devel-9.15-14.6.1 ghostscript-mini-9.15-14.6.1 ghostscript-mini-debuginfo-9.15-14.6.1 ghostscript-mini-debugsource-9.15-14.6.1 ghostscript-mini-devel-9.15-14.6.1 ghostscript-x11-9.15-14.6.1 ghostscript-x11-debuginfo-9.15-14.6.1 References: https://www.suse.com/security/cve/CVE-2018-10194.html https://bugzilla.suse.com/1090099

1 0

openSUSE-SU-2018:1347-1: moderate: Security update for enigmail
by opensuse-security＠opensuse.org 19 May '18

19 May '18

openSUSE Security Update: Security update for enigmail ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:1347-1 Rating: moderate References: #1093151 #1093152 Cross-References: CVE-2017-17688 CVE-2017-17689 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for enigmail fixes multiple issues. Security issues fixed: - CVE-2017-17688: CFB gadget attacks allowed to exfiltrate plaintext out of encrypted emails. enigmail now fails on GnuPG integrity check warnings for old Algorithms (bsc#1093151) - CVE-2017-17689: CBC gadget attacks allows to exfiltrate plaintext out of encrypted emails (bsc#1093152) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-474=1 Package List: - openSUSE Leap 15.0 (x86_64): enigmail-2.0.4-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2017-17688.html https://www.suse.com/security/cve/CVE-2017-17689.html https://bugzilla.suse.com/1093151 https://bugzilla.suse.com/1093152

1 0

openSUSE-RU-2018:1346-1: moderate: Recommended update for python3-pyOpenSSL
by maintenance＠opensuse.org 19 May '18

19 May '18

openSUSE Recommended Update: Recommended update for python3-pyOpenSSL ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:1346-1 Rating: moderate References: #1073879 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python3-pyOpenSSL contains the following changes: * OpenSSL.rand.egd() now uses os.urandom() to seed the internal PRNG * Added lacking implementations: OpenSSL.SSL.Context.set_session_id, OpenSSL.SSL.Connection.renegotiate, OpenSSL.SSL.Connection.renegotiate_pending, OpenSSL.SSL.Context.load_client_ca * Fix segmentation fault when using keys larger than 4096-bit to sign data. * Fix various errors triggered depending on client code * Various API extensions This version update to 16.0.0 unifies the Python 2 and Python 3 sources of the module, as used on SLES 12. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-478=1 Package List: - openSUSE Leap 42.3 (noarch): python3-pyOpenSSL-16.0.0-5.3.1 python3-pyOpenSSL-doc-16.0.0-5.3.1 References: https://bugzilla.suse.com/1073879

1 0

openSUSE-SU-2018:1345-1: moderate: Security update for libvorbis
by opensuse-security＠opensuse.org 18 May '18

18 May '18

openSUSE Security Update: Security update for libvorbis ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:1345-1 Rating: moderate References: #1059812 #1091072 Cross-References: CVE-2017-14160 CVE-2018-10393 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for libvorbis fixes the following issues: Security issues fixed: - CVE-2018-10393: Fixed stack-based buffer over-read in bark_noise_hybridm (bsc#1091072). - CVE-2017-14160: Fixed out-of-bounds access inside bark_noise_hybridmp function (bsc#1059812). This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-472=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libvorbis-debugsource-1.3.3-14.1 libvorbis-devel-1.3.3-14.1 libvorbis0-1.3.3-14.1 libvorbis0-debuginfo-1.3.3-14.1 libvorbisenc2-1.3.3-14.1 libvorbisenc2-debuginfo-1.3.3-14.1 libvorbisfile3-1.3.3-14.1 libvorbisfile3-debuginfo-1.3.3-14.1 - openSUSE Leap 42.3 (noarch): libvorbis-doc-1.3.3-14.1 - openSUSE Leap 42.3 (x86_64): libvorbis0-32bit-1.3.3-14.1 libvorbis0-debuginfo-32bit-1.3.3-14.1 libvorbisenc2-32bit-1.3.3-14.1 libvorbisenc2-debuginfo-32bit-1.3.3-14.1 libvorbisfile3-32bit-1.3.3-14.1 libvorbisfile3-debuginfo-32bit-1.3.3-14.1 References: https://www.suse.com/security/cve/CVE-2017-14160.html https://www.suse.com/security/cve/CVE-2018-10393.html https://bugzilla.suse.com/1059812 https://bugzilla.suse.com/1091072

1 0

openSUSE-SU-2018:1344-1: moderate: Security update for curl
by opensuse-security＠opensuse.org 18 May '18

18 May '18

openSUSE Security Update: Security update for curl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:1344-1 Rating: moderate References: #1086825 #1092098 Cross-References: CVE-2018-1000301 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for curl fixes several issues: Security issues fixed: - CVE-2018-1000301: Fixed a RTSP bad headers buffer over-read could crash the curl client (bsc#1092098) Non security issues fixed: - If the DEFAULT_SUSE cipher list is not available use the HIGH cipher alias before failing. (bsc#1086825) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-471=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): curl-7.37.0-36.1 curl-debuginfo-7.37.0-36.1 curl-debugsource-7.37.0-36.1 libcurl-devel-7.37.0-36.1 libcurl4-7.37.0-36.1 libcurl4-debuginfo-7.37.0-36.1 - openSUSE Leap 42.3 (x86_64): libcurl-devel-32bit-7.37.0-36.1 libcurl4-32bit-7.37.0-36.1 libcurl4-debuginfo-32bit-7.37.0-36.1 References: https://www.suse.com/security/cve/CVE-2018-1000301.html https://bugzilla.suse.com/1086825 https://bugzilla.suse.com/1092098

1 0

openSUSE-RU-2018:1343-1: Recommended update for testing the software stack (32 bit)
by maintenance＠opensuse.org 18 May '18

18 May '18

openSUSE Recommended Update: Recommended update for testing the software stack (32 bit) ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:1343-1 Rating: low References: Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update contains a recommended for a 32 bit package for testing the software stack. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-435=1 Package List: - openSUSE Leap 15.0 (x86_64): update-test-32bit-pkg-32bit-5.1-lp150.3.4.2 References:

1 0