July 2018 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2018:2021-1: moderate: Security update for polkit
by opensuse-security＠opensuse.org 20 Jul '18

20 Jul '18

openSUSE Security Update: Security update for polkit ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2021-1 Rating: moderate References: #1099031 Cross-References: CVE-2018-1116 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for polkit fixes the following issues: - CVE-2018-1116: Fixed trusting the client-supplied UID which could lead to a denial of service (too many dialogs) caused by local attackers (boo#1099031) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-735=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libpolkit0-0.113-14.3.1 libpolkit0-debuginfo-0.113-14.3.1 polkit-0.113-14.3.1 polkit-debuginfo-0.113-14.3.1 polkit-debugsource-0.113-14.3.1 polkit-devel-0.113-14.3.1 polkit-devel-debuginfo-0.113-14.3.1 typelib-1_0-Polkit-1_0-0.113-14.3.1 - openSUSE Leap 42.3 (noarch): polkit-doc-0.113-14.3.1 - openSUSE Leap 42.3 (x86_64): libpolkit0-32bit-0.113-14.3.1 libpolkit0-debuginfo-32bit-0.113-14.3.1 References: https://www.suse.com/security/cve/CVE-2018-1116.html https://bugzilla.suse.com/1099031

1 0

openSUSE-RU-2018:2020-1: important: Recommended update for transactional-update
by maintenance＠opensuse.org 20 Jul '18

20 Jul '18

openSUSE Recommended Update: Recommended update for transactional-update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:2020-1 Rating: important References: #1101130 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for transactional-update fixes the following issues: - When using overlayfs, system updates may have caused a loss or invisibility of configuration files. Support for overlayfs extended attributes like trusted.overlay.opaque (boo#1101130) - Improve handling of locale specific packages Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-743=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): transactional-update-2.5-lp150.2.3.2 transactional-update-debuginfo-2.5-lp150.2.3.2 transactional-update-debugsource-2.5-lp150.2.3.2 References: https://bugzilla.suse.com/1101130

1 0

openSUSE-SU-2018:2019-1: moderate: Security update for rsyslog
by opensuse-security＠opensuse.org 20 Jul '18

20 Jul '18

openSUSE Security Update: Security update for rsyslog ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2019-1 Rating: moderate References: #935393 Cross-References: CVE-2015-3243 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for rsyslog fixes the following security issue: - CVE-2015-3243: Prevent weak permissions for generated log files, which allowed local users to obtain sensitive information (bsc#935393). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-738=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): rsyslog-8.33.1-lp150.2.3.2 rsyslog-debuginfo-8.33.1-lp150.2.3.2 rsyslog-debugsource-8.33.1-lp150.2.3.2 rsyslog-diag-tools-8.33.1-lp150.2.3.2 rsyslog-diag-tools-debuginfo-8.33.1-lp150.2.3.2 rsyslog-doc-8.33.1-lp150.2.3.2 rsyslog-module-dbi-8.33.1-lp150.2.3.2 rsyslog-module-dbi-debuginfo-8.33.1-lp150.2.3.2 rsyslog-module-elasticsearch-8.33.1-lp150.2.3.2 rsyslog-module-elasticsearch-debuginfo-8.33.1-lp150.2.3.2 rsyslog-module-gcrypt-8.33.1-lp150.2.3.2 rsyslog-module-gcrypt-debuginfo-8.33.1-lp150.2.3.2 rsyslog-module-gssapi-8.33.1-lp150.2.3.2 rsyslog-module-gssapi-debuginfo-8.33.1-lp150.2.3.2 rsyslog-module-gtls-8.33.1-lp150.2.3.2 rsyslog-module-gtls-debuginfo-8.33.1-lp150.2.3.2 rsyslog-module-mmnormalize-8.33.1-lp150.2.3.2 rsyslog-module-mmnormalize-debuginfo-8.33.1-lp150.2.3.2 rsyslog-module-mysql-8.33.1-lp150.2.3.2 rsyslog-module-mysql-debuginfo-8.33.1-lp150.2.3.2 rsyslog-module-omamqp1-8.33.1-lp150.2.3.2 rsyslog-module-omamqp1-debuginfo-8.33.1-lp150.2.3.2 rsyslog-module-omhttpfs-8.33.1-lp150.2.3.2 rsyslog-module-omhttpfs-debuginfo-8.33.1-lp150.2.3.2 rsyslog-module-omtcl-8.33.1-lp150.2.3.2 rsyslog-module-omtcl-debuginfo-8.33.1-lp150.2.3.2 rsyslog-module-pgsql-8.33.1-lp150.2.3.2 rsyslog-module-pgsql-debuginfo-8.33.1-lp150.2.3.2 rsyslog-module-relp-8.33.1-lp150.2.3.2 rsyslog-module-relp-debuginfo-8.33.1-lp150.2.3.2 rsyslog-module-snmp-8.33.1-lp150.2.3.2 rsyslog-module-snmp-debuginfo-8.33.1-lp150.2.3.2 rsyslog-module-udpspoof-8.33.1-lp150.2.3.2 rsyslog-module-udpspoof-debuginfo-8.33.1-lp150.2.3.2 References: https://www.suse.com/security/cve/CVE-2015-3243.html https://bugzilla.suse.com/935393

1 0

openSUSE-RU-2018:2018-1: moderate: Recommended update for virt-manager
by maintenance＠opensuse.org 20 Jul '18

20 Jul '18

openSUSE Recommended Update: Recommended update for virt-manager ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:2018-1 Rating: moderate References: #1027942 #1081542 #1081544 #1096819 #1098054 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: This update for virt-manager provides the following fixes: - Fix the "Couldn't find hvm kernel for SUSE tree" error. (bsc#1096819) - Make sure osinfo-query and virt-install detect CaaS Platform 3.0 correctly. (bsc#1098054) - Fix some untranslated text. (bsc#1081544, bsc#1081542) - Backport some missing upstream fixes. (bsc#1027942) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-748=1 Package List: - openSUSE Leap 15.0 (noarch): virt-install-1.5.1-lp150.6.3.1 virt-manager-1.5.1-lp150.6.3.1 virt-manager-common-1.5.1-lp150.6.3.1 References: https://bugzilla.suse.com/1027942 https://bugzilla.suse.com/1081542 https://bugzilla.suse.com/1081544 https://bugzilla.suse.com/1096819 https://bugzilla.suse.com/1098054

1 0

openSUSE-RU-2018:2017-1: moderate: Recommended update for bluez
by maintenance＠opensuse.org 20 Jul '18

20 Jul '18

openSUSE Recommended Update: Recommended update for bluez ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:2017-1 Rating: moderate References: #1094902 #1101119 #995059 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for bluez fixes the following issues: - Bluetooth headset could fail to recommed after suspend/resume (bsc#1101119) - Missing RPi3 bluetooth support (bsc#995059, bsc#1094902) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-744=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): bluez-5.48-lp150.4.3.1 bluez-cups-5.48-lp150.4.3.1 bluez-cups-debuginfo-5.48-lp150.4.3.1 bluez-debuginfo-5.48-lp150.4.3.1 bluez-debugsource-5.48-lp150.4.3.1 bluez-devel-5.48-lp150.4.3.1 bluez-test-5.48-lp150.4.3.1 bluez-test-debuginfo-5.48-lp150.4.3.1 libbluetooth3-5.48-lp150.4.3.1 libbluetooth3-debuginfo-5.48-lp150.4.3.1 - openSUSE Leap 15.0 (x86_64): bluez-devel-32bit-5.48-lp150.4.3.1 libbluetooth3-32bit-5.48-lp150.4.3.1 libbluetooth3-32bit-debuginfo-5.48-lp150.4.3.1 - openSUSE Leap 15.0 (noarch): bluez-auto-enable-devices-5.48-lp150.4.3.1 References: https://bugzilla.suse.com/1094902 https://bugzilla.suse.com/1101119 https://bugzilla.suse.com/995059

1 0

openSUSE-RU-2018:2016-1: moderate: Recommended update for osinfo-db
by maintenance＠opensuse.org 20 Jul '18

20 Jul '18

openSUSE Recommended Update: Recommended update for osinfo-db ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:2016-1 Rating: moderate References: #1098054 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for osinfo-db provides the following fixes: - Make sure osinfo-query and virt-install detect CaaS Platform 3.0 correctly. (bsc#1098054) - Update database to version 20180612. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-746=1 Package List: - openSUSE Leap 15.0 (noarch): osinfo-db-20180612-lp150.2.3.1 References: https://bugzilla.suse.com/1098054

1 0

openSUSE-SU-2018:2015-1: moderate: Security update for libopenmpt
by opensuse-security＠opensuse.org 20 Jul '18

20 Jul '18

openSUSE Security Update: Security update for libopenmpt ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2015-1 Rating: moderate References: #1089080 #1095644 Cross-References: CVE-2018-10017 CVE-2018-11710 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for libopenmpt to version 0.3.9 fixes the following issues: These security issues were fixed: - CVE-2018-11710: Prevent write near address 0 in out-of-memory situations when reading AMS files (bsc#1095644) - CVE-2018-10017: Preven out-of-bounds memory read with IT/ITP/MO3 files containing pattern loops (bsc#1089080) These non-security issues were fixed: - [Bug] openmpt123: Fixed build failure in C++17 due to use of removed feature std::random_shuffle. - STM: Having both Bxx and Cxx commands in a pattern imported the Bxx command incorrectly. - STM: Last character of sample name was missing. - Speed up reading of truncated ULT files. - ULT: Portamento import was sometimes broken. - The resonant filter was sometimes unstable when combining low-volume samples, low cutoff and high mixing rates. - Keep track of active SFx macro during seeking. - The "note cut" duplicate note action did not volume-ramp the previously playing sample. - A song starting with non-existing patterns could not be played. - DSM: Support restart position and 16-bit samples. - DTM: Import global volume. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-742=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libmodplug-devel-0.3.9-lp150.2.3.1 libmodplug1-0.3.9-lp150.2.3.1 libmodplug1-debuginfo-0.3.9-lp150.2.3.1 libopenmpt-debugsource-0.3.9-lp150.2.3.1 libopenmpt-devel-0.3.9-lp150.2.3.1 libopenmpt0-0.3.9-lp150.2.3.1 libopenmpt0-debuginfo-0.3.9-lp150.2.3.1 libopenmpt_modplug1-0.3.9-lp150.2.3.1 libopenmpt_modplug1-debuginfo-0.3.9-lp150.2.3.1 openmpt123-0.3.9-lp150.2.3.1 openmpt123-debuginfo-0.3.9-lp150.2.3.1 - openSUSE Leap 15.0 (x86_64): libmodplug1-32bit-0.3.9-lp150.2.3.1 libmodplug1-32bit-debuginfo-0.3.9-lp150.2.3.1 libopenmpt0-32bit-0.3.9-lp150.2.3.1 libopenmpt0-32bit-debuginfo-0.3.9-lp150.2.3.1 libopenmpt_modplug1-32bit-0.3.9-lp150.2.3.1 libopenmpt_modplug1-32bit-debuginfo-0.3.9-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-10017.html https://www.suse.com/security/cve/CVE-2018-11710.html https://bugzilla.suse.com/1089080 https://bugzilla.suse.com/1095644

1 0

openSUSE-SU-2018:2014-1: moderate: Security update for php7
by opensuse-security＠opensuse.org 20 Jul '18

20 Jul '18

openSUSE Security Update: Security update for php7 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2014-1 Rating: moderate References: #1099098 Cross-References: CVE-2018-12882 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for php7 fixes the following issues: - CVE-2018-12882: exif_read_from_impl allowed attackers to trigger a use-after-free (in exif_read_from_file) because it closed a stream that it is not responsible for closing (bsc#1099098). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-737=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): apache2-mod_php7-7.2.5-lp150.2.6.1 apache2-mod_php7-debuginfo-7.2.5-lp150.2.6.1 php7-7.2.5-lp150.2.6.1 php7-bcmath-7.2.5-lp150.2.6.1 php7-bcmath-debuginfo-7.2.5-lp150.2.6.1 php7-bz2-7.2.5-lp150.2.6.1 php7-bz2-debuginfo-7.2.5-lp150.2.6.1 php7-calendar-7.2.5-lp150.2.6.1 php7-calendar-debuginfo-7.2.5-lp150.2.6.1 php7-ctype-7.2.5-lp150.2.6.1 php7-ctype-debuginfo-7.2.5-lp150.2.6.1 php7-curl-7.2.5-lp150.2.6.1 php7-curl-debuginfo-7.2.5-lp150.2.6.1 php7-dba-7.2.5-lp150.2.6.1 php7-dba-debuginfo-7.2.5-lp150.2.6.1 php7-debuginfo-7.2.5-lp150.2.6.1 php7-debugsource-7.2.5-lp150.2.6.1 php7-devel-7.2.5-lp150.2.6.1 php7-dom-7.2.5-lp150.2.6.1 php7-dom-debuginfo-7.2.5-lp150.2.6.1 php7-embed-7.2.5-lp150.2.6.1 php7-embed-debuginfo-7.2.5-lp150.2.6.1 php7-enchant-7.2.5-lp150.2.6.1 php7-enchant-debuginfo-7.2.5-lp150.2.6.1 php7-exif-7.2.5-lp150.2.6.1 php7-exif-debuginfo-7.2.5-lp150.2.6.1 php7-fastcgi-7.2.5-lp150.2.6.1 php7-fastcgi-debuginfo-7.2.5-lp150.2.6.1 php7-fileinfo-7.2.5-lp150.2.6.1 php7-fileinfo-debuginfo-7.2.5-lp150.2.6.1 php7-firebird-7.2.5-lp150.2.6.1 php7-firebird-debuginfo-7.2.5-lp150.2.6.1 php7-fpm-7.2.5-lp150.2.6.1 php7-fpm-debuginfo-7.2.5-lp150.2.6.1 php7-ftp-7.2.5-lp150.2.6.1 php7-ftp-debuginfo-7.2.5-lp150.2.6.1 php7-gd-7.2.5-lp150.2.6.1 php7-gd-debuginfo-7.2.5-lp150.2.6.1 php7-gettext-7.2.5-lp150.2.6.1 php7-gettext-debuginfo-7.2.5-lp150.2.6.1 php7-gmp-7.2.5-lp150.2.6.1 php7-gmp-debuginfo-7.2.5-lp150.2.6.1 php7-iconv-7.2.5-lp150.2.6.1 php7-iconv-debuginfo-7.2.5-lp150.2.6.1 php7-intl-7.2.5-lp150.2.6.1 php7-intl-debuginfo-7.2.5-lp150.2.6.1 php7-json-7.2.5-lp150.2.6.1 php7-json-debuginfo-7.2.5-lp150.2.6.1 php7-ldap-7.2.5-lp150.2.6.1 php7-ldap-debuginfo-7.2.5-lp150.2.6.1 php7-mbstring-7.2.5-lp150.2.6.1 php7-mbstring-debuginfo-7.2.5-lp150.2.6.1 php7-mysql-7.2.5-lp150.2.6.1 php7-mysql-debuginfo-7.2.5-lp150.2.6.1 php7-odbc-7.2.5-lp150.2.6.1 php7-odbc-debuginfo-7.2.5-lp150.2.6.1 php7-opcache-7.2.5-lp150.2.6.1 php7-opcache-debuginfo-7.2.5-lp150.2.6.1 php7-openssl-7.2.5-lp150.2.6.1 php7-openssl-debuginfo-7.2.5-lp150.2.6.1 php7-pcntl-7.2.5-lp150.2.6.1 php7-pcntl-debuginfo-7.2.5-lp150.2.6.1 php7-pdo-7.2.5-lp150.2.6.1 php7-pdo-debuginfo-7.2.5-lp150.2.6.1 php7-pgsql-7.2.5-lp150.2.6.1 php7-pgsql-debuginfo-7.2.5-lp150.2.6.1 php7-phar-7.2.5-lp150.2.6.1 php7-phar-debuginfo-7.2.5-lp150.2.6.1 php7-posix-7.2.5-lp150.2.6.1 php7-posix-debuginfo-7.2.5-lp150.2.6.1 php7-readline-7.2.5-lp150.2.6.1 php7-readline-debuginfo-7.2.5-lp150.2.6.1 php7-shmop-7.2.5-lp150.2.6.1 php7-shmop-debuginfo-7.2.5-lp150.2.6.1 php7-snmp-7.2.5-lp150.2.6.1 php7-snmp-debuginfo-7.2.5-lp150.2.6.1 php7-soap-7.2.5-lp150.2.6.1 php7-soap-debuginfo-7.2.5-lp150.2.6.1 php7-sockets-7.2.5-lp150.2.6.1 php7-sockets-debuginfo-7.2.5-lp150.2.6.1 php7-sodium-7.2.5-lp150.2.6.1 php7-sodium-debuginfo-7.2.5-lp150.2.6.1 php7-sqlite-7.2.5-lp150.2.6.1 php7-sqlite-debuginfo-7.2.5-lp150.2.6.1 php7-sysvmsg-7.2.5-lp150.2.6.1 php7-sysvmsg-debuginfo-7.2.5-lp150.2.6.1 php7-sysvsem-7.2.5-lp150.2.6.1 php7-sysvsem-debuginfo-7.2.5-lp150.2.6.1 php7-sysvshm-7.2.5-lp150.2.6.1 php7-sysvshm-debuginfo-7.2.5-lp150.2.6.1 php7-tidy-7.2.5-lp150.2.6.1 php7-tidy-debuginfo-7.2.5-lp150.2.6.1 php7-tokenizer-7.2.5-lp150.2.6.1 php7-tokenizer-debuginfo-7.2.5-lp150.2.6.1 php7-wddx-7.2.5-lp150.2.6.1 php7-wddx-debuginfo-7.2.5-lp150.2.6.1 php7-xmlreader-7.2.5-lp150.2.6.1 php7-xmlreader-debuginfo-7.2.5-lp150.2.6.1 php7-xmlrpc-7.2.5-lp150.2.6.1 php7-xmlrpc-debuginfo-7.2.5-lp150.2.6.1 php7-xmlwriter-7.2.5-lp150.2.6.1 php7-xmlwriter-debuginfo-7.2.5-lp150.2.6.1 php7-xsl-7.2.5-lp150.2.6.1 php7-xsl-debuginfo-7.2.5-lp150.2.6.1 php7-zip-7.2.5-lp150.2.6.1 php7-zip-debuginfo-7.2.5-lp150.2.6.1 php7-zlib-7.2.5-lp150.2.6.1 php7-zlib-debuginfo-7.2.5-lp150.2.6.1 - openSUSE Leap 15.0 (noarch): php7-pear-7.2.5-lp150.2.6.1 php7-pear-Archive_Tar-7.2.5-lp150.2.6.1 References: https://www.suse.com/security/cve/CVE-2018-12882.html https://bugzilla.suse.com/1099098

1 0

openSUSE-SU-2018:2013-1: moderate: Security update for gdk-pixbuf
by opensuse-security＠opensuse.org 20 Jul '18

20 Jul '18

openSUSE Security Update: Security update for gdk-pixbuf ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2013-1 Rating: moderate References: #1074462 Cross-References: CVE-2017-1000422 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for gdk-pixbuf fixes the following security issue: - CVE-2017-1000422: Prevent several integer overflow in the gif_get_lzw function resulting in memory corruption and potential code execution (bsc#1074462). This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-741=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): gdk-pixbuf-debugsource-2.34.0-16.1 gdk-pixbuf-devel-2.34.0-16.1 gdk-pixbuf-devel-debuginfo-2.34.0-16.1 gdk-pixbuf-query-loaders-2.34.0-16.1 gdk-pixbuf-query-loaders-debuginfo-2.34.0-16.1 libgdk_pixbuf-2_0-0-2.34.0-16.1 libgdk_pixbuf-2_0-0-debuginfo-2.34.0-16.1 typelib-1_0-GdkPixbuf-2_0-2.34.0-16.1 - openSUSE Leap 42.3 (noarch): gdk-pixbuf-lang-2.34.0-16.1 - openSUSE Leap 42.3 (x86_64): gdk-pixbuf-devel-32bit-2.34.0-16.1 gdk-pixbuf-devel-debuginfo-32bit-2.34.0-16.1 gdk-pixbuf-query-loaders-32bit-2.34.0-16.1 gdk-pixbuf-query-loaders-debuginfo-32bit-2.34.0-16.1 libgdk_pixbuf-2_0-0-32bit-2.34.0-16.1 libgdk_pixbuf-2_0-0-debuginfo-32bit-2.34.0-16.1 References: https://www.suse.com/security/cve/CVE-2017-1000422.html https://bugzilla.suse.com/1074462

1 0

openSUSE-RU-2018:2012-1: moderate: Recommended update for bind
by maintenance＠opensuse.org 20 Jul '18

20 Jul '18

openSUSE Recommended Update: Recommended update for bind ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:2012-1 Rating: moderate References: #901577 #965748 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for bind provides the following fix: - Fixed ldapdump to use a temporary pseudo nameserver that conforms to BIND's expected syntax. Prior versions would not work correctly with an LDAP backed DNS server. (bsc#965748) - Add SPF records in dnszone-schema file. (bsc#901577) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-745=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): bind-9.11.2-lp150.8.6.1 bind-chrootenv-9.11.2-lp150.8.6.1 bind-debuginfo-9.11.2-lp150.8.6.1 bind-debugsource-9.11.2-lp150.8.6.1 bind-devel-9.11.2-lp150.8.6.1 bind-lwresd-9.11.2-lp150.8.6.1 bind-lwresd-debuginfo-9.11.2-lp150.8.6.1 bind-utils-9.11.2-lp150.8.6.1 bind-utils-debuginfo-9.11.2-lp150.8.6.1 libbind9-160-9.11.2-lp150.8.6.1 libbind9-160-debuginfo-9.11.2-lp150.8.6.1 libdns169-9.11.2-lp150.8.6.1 libdns169-debuginfo-9.11.2-lp150.8.6.1 libirs-devel-9.11.2-lp150.8.6.1 libirs160-9.11.2-lp150.8.6.1 libirs160-debuginfo-9.11.2-lp150.8.6.1 libisc166-9.11.2-lp150.8.6.1 libisc166-debuginfo-9.11.2-lp150.8.6.1 libisccc160-9.11.2-lp150.8.6.1 libisccc160-debuginfo-9.11.2-lp150.8.6.1 libisccfg160-9.11.2-lp150.8.6.1 libisccfg160-debuginfo-9.11.2-lp150.8.6.1 liblwres160-9.11.2-lp150.8.6.1 liblwres160-debuginfo-9.11.2-lp150.8.6.1 - openSUSE Leap 15.0 (x86_64): bind-devel-32bit-9.11.2-lp150.8.6.1 libbind9-160-32bit-9.11.2-lp150.8.6.1 libbind9-160-32bit-debuginfo-9.11.2-lp150.8.6.1 libdns169-32bit-9.11.2-lp150.8.6.1 libdns169-32bit-debuginfo-9.11.2-lp150.8.6.1 libirs160-32bit-9.11.2-lp150.8.6.1 libirs160-32bit-debuginfo-9.11.2-lp150.8.6.1 libisc166-32bit-9.11.2-lp150.8.6.1 libisc166-32bit-debuginfo-9.11.2-lp150.8.6.1 libisccc160-32bit-9.11.2-lp150.8.6.1 libisccc160-32bit-debuginfo-9.11.2-lp150.8.6.1 libisccfg160-32bit-9.11.2-lp150.8.6.1 libisccfg160-32bit-debuginfo-9.11.2-lp150.8.6.1 liblwres160-32bit-9.11.2-lp150.8.6.1 liblwres160-32bit-debuginfo-9.11.2-lp150.8.6.1 - openSUSE Leap 15.0 (noarch): bind-doc-9.11.2-lp150.8.6.1 python3-bind-9.11.2-lp150.8.6.1 References: https://bugzilla.suse.com/901577 https://bugzilla.suse.com/965748

1 0