July 2018 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2018:2011-1: moderate: Security update for perl
by opensuse-security＠opensuse.org 20 Jul '18

20 Jul '18

openSUSE Security Update: Security update for perl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2011-1 Rating: moderate References: #1096718 Cross-References: CVE-2018-12015 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for perl fixes the following issues: - CVE-2018-12015: The Archive::Tar module allowed remote attackers to bypass a directory-traversal protection mechanism and overwrite arbitrary files (bsc#1096718) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-751=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): perl-5.26.1-lp150.6.3.1 perl-base-5.26.1-lp150.6.3.1 perl-base-debuginfo-5.26.1-lp150.6.3.1 perl-debuginfo-5.26.1-lp150.6.3.1 perl-debugsource-5.26.1-lp150.6.3.1 - openSUSE Leap 15.0 (noarch): perl-doc-5.26.1-lp150.6.3.1 - openSUSE Leap 15.0 (x86_64): perl-32bit-5.26.1-lp150.6.3.1 perl-32bit-debuginfo-5.26.1-lp150.6.3.1 perl-base-32bit-5.26.1-lp150.6.3.1 perl-base-32bit-debuginfo-5.26.1-lp150.6.3.1 References: https://www.suse.com/security/cve/CVE-2018-12015.html https://bugzilla.suse.com/1096718

1 0

openSUSE-SU-2018:2010-1: important: Security update for perl
by opensuse-security＠opensuse.org 20 Jul '18

20 Jul '18

openSUSE Security Update: Security update for perl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2010-1 Rating: important References: #1068565 #1096718 Cross-References: CVE-2018-12015 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for perl fixes the following issues: This security issue was fixed: - CVE-2018-12015: The Archive::Tar module allowed remote attackers to bypass a directory-traversal protection mechanism and overwrite arbitrary files (bsc#1096718) This non-security issue was fixed: - fix debugger crash in tab completion with Term::ReadLine::Gnu [bsc#1068565] This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-750=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): perl-5.18.2-15.2 perl-base-5.18.2-15.2 perl-base-debuginfo-5.18.2-15.2 perl-debuginfo-5.18.2-15.2 perl-debugsource-5.18.2-15.2 - openSUSE Leap 42.3 (x86_64): perl-32bit-5.18.2-15.2 perl-base-32bit-5.18.2-15.2 perl-base-debuginfo-32bit-5.18.2-15.2 perl-debuginfo-32bit-5.18.2-15.2 - openSUSE Leap 42.3 (noarch): perl-doc-5.18.2-15.2 References: https://www.suse.com/security/cve/CVE-2018-12015.html https://bugzilla.suse.com/1068565 https://bugzilla.suse.com/1096718

1 0

openSUSE-OU-2018:2006-1: moderate: Optional update to add gnu-cobol to the SUSE PackageHub
by maintenance＠opensuse.org 19 Jul '18

19 Jul '18

openSUSE Optional Update: Optional update to add gnu-cobol to the SUSE PackageHub ______________________________________________________________________________ Announcement ID: openSUSE-OU-2018:2006-1 Rating: moderate References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 optional fixes can now be installed. Description: This update adds GNU Cobol to the SUSE PackageHub. GNU Cobol (formerly OpenCOBOL) is a free COBOL compiler. cobc translates COBOL to executable using intermediate C sources, providing full access to nearly all C libraries. Patch Instructions: To install this openSUSE Optional Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2018-733=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): gnu-cobol-3.0rc1-2.1 libcob-devel-3.0rc1-2.1 libcob4-3.0rc1-2.1 References:

1 0

openSUSE-OU-2018:2001-1: moderate: Optional update to add nextcloud to the SUSE PackageHub
by maintenance＠opensuse.org 19 Jul '18

19 Jul '18

openSUSE Optional Update: Optional update to add nextcloud to the SUSE PackageHub ______________________________________________________________________________ Announcement ID: openSUSE-OU-2018:2001-1 Rating: moderate References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 optional fixes can now be installed. Description: This optional update makes nextcloud available in the SUSE PackageHub. Nextcloud is a self-hosted file hosting service. Patch Instructions: To install this openSUSE Optional Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2018-732=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): nextcloud-13.0.4-2.1 References:

1 0

openSUSE-RU-2018:1984-1: moderate: Recommended update for prosody
by maintenance＠opensuse.org 18 Jul '18

18 Jul '18

openSUSE Recommended Update: Recommended update for prosody ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:1984-1 Rating: moderate References: #1099987 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This prosody update to version 0.9.14 fixes the following issues: - mod_websocket: Store the request object on the session for use by other modules. - mod_c2s: Avoid concatenating potential nil value. - core.certmanager: Allow all non-whitespace in service name. - mod_disco: Skip code specific to disco on user accounts. - mod_bosh: Store the normalized hostname on session. - MUC: Fix error logged when no persistent rooms present. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-731=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): prosody-0.9.14-2.9.1 prosody-debuginfo-0.9.14-2.9.1 prosody-debugsource-0.9.14-2.9.1 References: https://bugzilla.suse.com/1099987

1 0

openSUSE-SU-2018:1969-1: moderate: Security update for singularity
by opensuse-security＠opensuse.org 16 Jul '18

16 Jul '18

openSUSE Security Update: Security update for singularity ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:1969-1 Rating: moderate References: #1100333 Cross-References: CVE-2018-12021 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for singularity fixes the following issues: - CVE-2018-12021: A race condition might have allowed malicious users to bypass directory image restrictions, like mounting the host root filesystem as a container image (boo#1100333) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2018-730=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): libsingularity1-2.3.2-11.1 libsingularity1-debuginfo-2.3.2-11.1 singularity-2.3.2-11.1 singularity-debuginfo-2.3.2-11.1 singularity-debugsource-2.3.2-11.1 singularity-devel-2.3.2-11.1 References: https://www.suse.com/security/cve/CVE-2018-12021.html https://bugzilla.suse.com/1100333

1 0

openSUSE-RU-2018:1967-1: moderate: Recommended update for SUSEConnect
by maintenance＠opensuse.org 14 Jul '18

14 Jul '18

openSUSE Recommended Update: Recommended update for SUSEConnect ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:1967-1 Rating: moderate References: #1093658 #1094348 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for SUSEConnect provides the following fixes: - Add dependencies needed by the rmt-client-setup script as Recommends. (bsc#1093658, bsc#1094348) - Enhance error message generation. - Add not supported operation exception to PackageSearch API. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-719=1 Package List: - openSUSE Leap 15.0 (x86_64): SUSEConnect-0.3.11-lp150.2.6.1 References: https://bugzilla.suse.com/1093658 https://bugzilla.suse.com/1094348

1 0

openSUSE-RU-2018:1966-1: Recommended update for peek
by maintenance＠opensuse.org 14 Jul '18

14 Jul '18

openSUSE Recommended Update: Recommended update for peek ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:1966-1 Rating: low References: #1099877 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for peek fixes the following issues: - Peek did not specify run-time dependencies on ImageMagick and ffmpeg (boo#1099877 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-721=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): peek-0.8.0-2.3.1 peek-debuginfo-0.8.0-2.3.1 peek-debugsource-0.8.0-2.3.1 - openSUSE Leap 42.3 (noarch): peek-lang-0.8.0-2.3.1 References: https://bugzilla.suse.com/1099877

1 0

openSUSE-RU-2018:1965-1: moderate: Recommended update for lxqt-panel
by maintenance＠opensuse.org 14 Jul '18

14 Jul '18

openSUSE Recommended Update: Recommended update for lxqt-panel ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:1965-1 Rating: moderate References: #1043608 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for lxqt-panel fixes the following issues: - Bugfix: lxqt-panel has called an invalid volume plugin name (boo#1043608) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-715=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-715=1 Package List: - openSUSE Leap 42.3 (x86_64): lxqt-panel-0.11.0-4.3.1 lxqt-panel-debuginfo-0.11.0-4.3.1 lxqt-panel-debugsource-0.11.0-4.3.1 lxqt-panel-devel-0.11.0-4.3.1 - openSUSE Leap 15.0 (x86_64): lxqt-panel-0.12.0-lp150.2.3.1 lxqt-panel-debuginfo-0.12.0-lp150.2.3.1 lxqt-panel-debugsource-0.12.0-lp150.2.3.1 lxqt-panel-devel-0.12.0-lp150.2.3.1 References: https://bugzilla.suse.com/1043608

1 0

openSUSE-RU-2018:1964-1: moderate: Recommended update for yast2-network
by maintenance＠opensuse.org 14 Jul '18

14 Jul '18

openSUSE Recommended Update: Recommended update for yast2-network ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:1964-1 Rating: moderate References: #1095971 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-network provides the following fix: - AutoYaST: Do not crash when trying to convert the /etc/hosts profile declaration from multiple line host entries for the same host to just one line. (bsc#1095971) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-716=1 Package List: - openSUSE Leap 42.3 (noarch): yast2-network-3.2.52-12.1 References: https://bugzilla.suse.com/1095971

1 0