July 2018 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2018:2035-1: moderate: Recommended update for ca-certificates-mozilla
by maintenance＠opensuse.org 20 Jul '18

20 Jul '18

openSUSE Recommended Update: Recommended update for ca-certificates-mozilla ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:2035-1 Rating: moderate References: #1100415 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: ca-certificates-mozilla was updated to the 2.24 state of the Mozilla NSS Certificate store. (bsc#1100415) Following CAs were removed: * S-TRUST_Universal_Root_CA * TC_TrustCenter_Class_3_CA_II * TUeRKTRUST_Elektronik_Sertifika_Hizmet_Saglayicisi_H5 This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-754=1 Package List: - openSUSE Leap 15.0 (noarch): ca-certificates-mozilla-2.24-lp150.3.3.1 References: https://bugzilla.suse.com/1100415

1 0

openSUSE-RU-2018:2034-1: moderate: Recommended update for osinfo-db
by maintenance＠opensuse.org 20 Jul '18

20 Jul '18

openSUSE Recommended Update: Recommended update for osinfo-db ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:2034-1 Rating: moderate References: #1098054 #974580 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for osinfo-db provides the following fixes: - Make sure osinfo-query and virt-install detect CaaS Platform 3.0 correctly. (bsc#1098054) - Update database to version 20180612. - Modify volume id for windows 2k12-r2 iso files (bsc#974580): * First, use "X64FREE?" instead of "X64FRE". * Second, add "IR1_SSS_X64FREV_EN-US_DV5". This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-755=1 Package List: - openSUSE Leap 42.3 (noarch): osinfo-db-20180612-8.1 References: https://bugzilla.suse.com/1098054 https://bugzilla.suse.com/974580

1 0

openSUSE-RU-2018:2033-1: moderate: Recommended update for kdump
by maintenance＠opensuse.org 20 Jul '18

20 Jul '18

openSUSE Recommended Update: Recommended update for kdump ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:2033-1 Rating: moderate References: #1047609 #1050349 #1062026 #1072711 #1073972 #1081864 #1083155 #1091304 #1093795 #1094581 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has 10 recommended fixes can now be installed. Description: This update for kdump fixes the following issues: - Restore only static routes in kdump initrd (bsc#1093795) - IP setup: don't bother with IPv4 if there are no addresses (bsc#1062026, bsc#1093795) - IP setup: pass all routes to kdump environment (bsc#1062026, bsc#1093795) - IPv6 setup: pass address prefix in a separate dracut argument (bsc#1062026, bsc#1093795) - Support yes/no style for KDUMP_CONTINUE_ON_ERROR (bsc#1083155) - Fixes an issue where a crashdump was not possible (bsc#1047609) - Replaces obsolete perl-Bootloader library with pbl (bsc#1050349) - Handle additional mounts in the kdump dracut module (bsc#1094581, bsc#1072711) - Run mkinitrd if fadump is active (bsc#1094581, bsc#1072711) - Do not touch dracut variables when generating a non-kdump initrd (bsc#1091304, bsc#1094581) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-752=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): kdump-0.8.16-5.6.1 kdump-debuginfo-0.8.16-5.6.1 kdump-debugsource-0.8.16-5.6.1 References: https://bugzilla.suse.com/1047609 https://bugzilla.suse.com/1050349 https://bugzilla.suse.com/1062026 https://bugzilla.suse.com/1072711 https://bugzilla.suse.com/1073972 https://bugzilla.suse.com/1081864 https://bugzilla.suse.com/1083155 https://bugzilla.suse.com/1091304 https://bugzilla.suse.com/1093795 https://bugzilla.suse.com/1094581

1 0

openSUSE-RU-2018:2032-1: moderate: Recommended update for perl-Bootloader
by maintenance＠opensuse.org 20 Jul '18

20 Jul '18

openSUSE Recommended Update: Recommended update for perl-Bootloader ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:2032-1 Rating: moderate References: #1033776 #1050349 #1082318 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for perl-Bootloader fixes the following issues: - Adds --get-option to pbl (bsc#1033776, bsc#1050349) - Install license file in the correct directory (bsc#1082318) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-753=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): perl-Bootloader-0.921-2.3.1 perl-Bootloader-YAML-0.921-2.3.1 References: https://bugzilla.suse.com/1033776 https://bugzilla.suse.com/1050349 https://bugzilla.suse.com/1082318

1 0

openSUSE-RU-2018:2027-1: moderate: Recommended update for geoclue2
by maintenance＠opensuse.org 20 Jul '18

20 Jul '18

openSUSE Recommended Update: Recommended update for geoclue2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:2027-1 Rating: moderate References: #1051612 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for geoclue2 provides the following fix: - Backport some upstream fixes to improve network availability detection in order to get automatic timezone switch to work properly. (bsc#1051612) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-739=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): geoclue2-2.4.3-5.3.1 geoclue2-debuginfo-2.4.3-5.3.1 geoclue2-debugsource-2.4.3-5.3.1 geoclue2-devel-2.4.3-5.3.1 typelib-1_0-Geoclue-2_0-2.4.3-5.3.1 References: https://bugzilla.suse.com/1051612

1 0

openSUSE-RU-2018:2026-1: moderate: Recommended update for dmenu.Leap
by maintenance＠opensuse.org 20 Jul '18

20 Jul '18

openSUSE Recommended Update: Recommended update for dmenu.Leap ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:2026-1 Rating: moderate References: #1100004 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for dmenu.Leap fixes the following issues: - Add missing dmenu_path script from version 4.8 (boo#1100004) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-736=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): dmenu-4.5-16.3.1 References: https://bugzilla.suse.com/1100004

1 0

openSUSE-RU-2018:2025-1: moderate: Recommended update for cloud-netconfig
by maintenance＠opensuse.org 20 Jul '18

20 Jul '18

openSUSE Recommended Update: Recommended update for cloud-netconfig ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:2025-1 Rating: moderate References: #1095485 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for cloud-netconfig fixes the following issues: - Make interface names in Azure persistent. (bsc#1095485) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-749=1 Package List: - openSUSE Leap 15.0 (noarch): cloud-netconfig-azure-0.7-lp150.4.3.1 cloud-netconfig-ec2-0.7-lp150.4.3.1 References: https://bugzilla.suse.com/1095485

1 0

openSUSE-RU-2018:2024-1: moderate: Recommended update for timezone
by maintenance＠opensuse.org 20 Jul '18

20 Jul '18

openSUSE Recommended Update: Recommended update for timezone ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:2024-1 Rating: moderate References: #1093392 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for timezone provides the following fixes: - yast2-country is no longer setting TIMEZONE in /etc/sysconfig/clock and is calling systemd timedatectl instead. Do not set /etc/localtime on timezone package updates to avoid setting an incorrect timezone. (bsc#1093392) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-740=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): timezone-2018e-lp150.2.6.1 timezone-debuginfo-2018e-lp150.2.6.1 timezone-debugsource-2018e-lp150.2.6.1 - openSUSE Leap 15.0 (noarch): timezone-java-2018e-lp150.2.6.1 References: https://bugzilla.suse.com/1093392

1 0

openSUSE-SU-2018:2023-1: moderate: Security update for mercurial
by opensuse-security＠opensuse.org 20 Jul '18

20 Jul '18

openSUSE Security Update: Security update for mercurial ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2023-1 Rating: moderate References: #1100353 #1100354 #1100355 Cross-References: CVE-2018-13346 CVE-2018-13347 CVE-2018-13348 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for mercurial fixes the following issues: Security issues fixed: - CVE-2018-13348: Fix the mpatch_decode function in mpatch.c that mishandles certain situations where there should be at least 12 bytes remaining after thecurrent position in the patch data (boo#1100353). - CVE-2018-13347: Fix mpatch.c that mishandles integer addition and subtraction (boo#1100355). - CVE-2018-13346: Fix the mpatch_apply function in mpatch.c that incorrectly proceeds in cases where the fragment start is past the end of the original data (boo#1100354). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-734=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): mercurial-4.2.3-15.1 mercurial-debuginfo-4.2.3-15.1 mercurial-debugsource-4.2.3-15.1 - openSUSE Leap 42.3 (noarch): mercurial-lang-4.2.3-15.1 References: https://www.suse.com/security/cve/CVE-2018-13346.html https://www.suse.com/security/cve/CVE-2018-13347.html https://www.suse.com/security/cve/CVE-2018-13348.html https://bugzilla.suse.com/1100353 https://bugzilla.suse.com/1100354 https://bugzilla.suse.com/1100355

1 0

openSUSE-RU-2018:2022-1: moderate: Recommended update for zypper-docker
by maintenance＠opensuse.org 20 Jul '18

20 Jul '18

openSUSE Recommended Update: Recommended update for zypper-docker ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:2022-1 Rating: moderate References: #1018823 #1022052 #1097442 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for zypper-docker provides version 2.0.0 and brings the following fixes and improvements: - Features + Allow inspection of stopped containers. Using zypper-docker luc,lpc or pchkc on a stopped container is now possible. + Analyze container instead of base image by default. Note: This is a backwards incompatible change. If the base image of a container needs to be analyzed, which was the former default a new --base flag can be used. e.g. zypper-docker pchkc --base <Container-ID> - Minor Improvements / Fixes + Add short forms of commands to help section. (bsc#1022052) + Fix bug that caused images not to be removed properly in some cases. + Fix bug that caused lpc command to log to stdout. + Fix bug that caused force flag not to work with zypper-docker images. + Fix zypper-docker ps command. + Fix bug with zypper-docker up/patch --no-recommends. + Fix update behavior when getting a zypper update. - Other + Update and use zypper exit codes. (bsc#1018823) + Support recent version of the docker API. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-747=1 Package List: - openSUSE Leap 42.3 (x86_64): zypper-docker-2.0.0-4.3.1 zypper-docker-debuginfo-2.0.0-4.3.1 zypper-docker-debugsource-2.0.0-4.3.1 References: https://bugzilla.suse.com/1018823 https://bugzilla.suse.com/1022052 https://bugzilla.suse.com/1097442

1 0