May 2018 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-FU-2018:1342-1: moderate: Feature update for testing the software stack
by maintenance＠opensuse.org 18 May '18

18 May '18

openSUSE Feature Update: Feature update for testing the software stack ______________________________________________________________________________ Announcement ID: openSUSE-FU-2018:1342-1 Rating: moderate References: Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has 0 feature fixes can now be installed. Description: This update contains a feature update for testing the software stack. Patch Instructions: To install this openSUSE Feature Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-432=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): update-test-feature-5.1-lp150.3.4.2 References:

1 0

openSUSE-RU-2018:1341-1: moderate: Recommended update for testing the software stack
by maintenance＠opensuse.org 18 May '18

18 May '18

openSUSE Recommended Update: Recommended update for testing the software stack ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:1341-1 Rating: moderate References: Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update contains a recommended update for testing the software stack. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-427=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): update-test-trivial-5.1-lp150.3.3.2 References:

1 0

openSUSE-SU-2018:1340-1: moderate: Security update for testing the software stack
by opensuse-security＠opensuse.org 18 May '18

18 May '18

openSUSE Security Update: Security update for testing the software stack ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:1340-1 Rating: moderate References: Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update contains a security update for testing the software stack. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-428=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): update-test-security-5.1-lp150.3.4.2 References:

1 0

openSUSE-RU-2018:1339-1: Interactive update for testing the software stack
by maintenance＠opensuse.org 18 May '18

18 May '18

openSUSE Recommended Update: Interactive update for testing the software stack ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:1339-1 Rating: low References: Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update contains an interactive update for testing the software stack. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-431=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): update-test-interactive-5.1-lp150.3.4.2 References:

1 0

openSUSE-RU-2018:1338-1: Softwarestack update for testing the software stack
by maintenance＠opensuse.org 18 May '18

18 May '18

openSUSE Recommended Update: Softwarestack update for testing the software stack ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:1338-1 Rating: low References: Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update contains a softwarestack update for testing the software stack. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-429=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): update-test-affects-package-manager-5.1-lp150.3.4.2 References:

1 0

openSUSE-RU-2018:1337-1: moderate: Relogin update for testing the software stack
by maintenance＠opensuse.org 18 May '18

18 May '18

openSUSE Recommended Update: Relogin update for testing the software stack ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:1337-1 Rating: moderate References: Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update contains a update suggesting a relogin for testing the software stack. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-434=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): update-test-relogin-suggested-5.1-lp150.3.4.2 References:

1 0

openSUSE-RU-2018:1336-1: moderate: Reboot update for testing the software stack
by maintenance＠opensuse.org 18 May '18

18 May '18

openSUSE Recommended Update: Reboot update for testing the software stack ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:1336-1 Rating: moderate References: Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update contains a update requesting a reboot for testing the software stack. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-433=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): update-test-reboot-needed-5.1-lp150.3.4.2 References:

1 0

openSUSE-OU-2018:1335-1: Optional update for testing the software stack
by maintenance＠opensuse.org 18 May '18

18 May '18

openSUSE Optional Update: Optional update for testing the software stack ______________________________________________________________________________ Announcement ID: openSUSE-OU-2018:1335-1 Rating: low References: Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has 0 optional fixes can now be installed. Description: This update contains an optional update for testing the software stack. Patch Instructions: To install this openSUSE Optional Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-430=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): update-test-optional-5.1-lp150.3.4.2 References:

1 0

openSUSE-SU-2018:1330-1: moderate: Security update for enigmail
by opensuse-security＠opensuse.org 17 May '18

17 May '18

openSUSE Security Update: Security update for enigmail ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:1330-1 Rating: moderate References: #1093151 #1093152 Cross-References: CVE-2017-17688 CVE-2017-17689 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for enigmail to version 2.0.4 fixes multiple issues. Security issues fixed: - CVE-2017-17688: CFB gadget attacks allowed to exfiltrate plaintext out of encrypted emails. enigmail now fails on GnuPG integrity check warnings for old Algorithms (bsc#1093151) - CVE-2017-17689: CBC gadget attacks allows to exfiltrate plaintext out of encrypted emails (bsc#1093152) This update also includes new and updated functionality: - The Encryption and Signing buttons now work for both OpenPGP and S/MIME. Enigmail will chose between S/MIME or OpenPGP depending on whether the keys for all recipients are available for the respective standard - Support for the Autocrypt standard, which is now enabled by default - Support for Pretty Easy Privacy (p≡p) - Support for Web Key Directory (WKD) - The message subject can now be encrypted and replaced with a dummy subject, following the Memory Hole standard forprotected Email Headers - keys on keyring are automatically refreshed from keyservers at irregular intervals - Subsequent updates of Enigmail no longer require a restart of Thunderbird - Keys are internally addressed using the fingerprint instead of the key ID Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-470=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): enigmail-2.0.4-12.1 References: https://www.suse.com/security/cve/CVE-2017-17688.html https://www.suse.com/security/cve/CVE-2017-17689.html https://bugzilla.suse.com/1093151 https://bugzilla.suse.com/1093152

1 0

openSUSE-SU-2018:1329-1: moderate: Security update for enigmail
by opensuse-security＠opensuse.org 17 May '18

17 May '18

openSUSE Security Update: Security update for enigmail ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:1329-1 Rating: moderate References: #1093151 #1093152 Cross-References: CVE-2017-17688 CVE-2017-17689 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for enigmail to version 2.0.4 fixes multiple issues. Security issues fixed: - CVE-2017-17688: CFB gadget attacks allowed to exfiltrate plaintext out of encrypted emails. enigmail now fails on GnuPG integrity check warnings for old Algorithms (bsc#1093151) - CVE-2017-17689: CBC gadget attacks allows to exfiltrate plaintext out of encrypted emails (bsc#1093152) This update also includes new and updated functionality: - The Encryption and Signing buttons now work for both OpenPGP and S/MIME. Enigmail will chose between S/MIME or OpenPGP depending on whether the keys for all recipients are available for the respective standard - Support for the Autocrypt standard, which is now enabled by default - Support for Pretty Easy Privacy (p≡p) - Support for Web Key Directory (WKD) - The message subject can now be encrypted and replaced with a dummy subject, following the Memory Hole standard forprotected Email Headers - keys on keyring are automatically refreshed from keyservers at irregular intervals - Subsequent updates of Enigmail no longer require a restart of Thunderbird - Keys are internally addressed using the fingerprint instead of the key ID Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2018-470=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): enigmail-2.0.4-9.1 References: https://www.suse.com/security/cve/CVE-2017-17688.html https://www.suse.com/security/cve/CVE-2017-17689.html https://bugzilla.suse.com/1093151 https://bugzilla.suse.com/1093152

1 0