August 2018 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2018:2507-1: important: Recommended update for quota
by maintenance＠opensuse.org 24 Aug '18

24 Aug '18

openSUSE Recommended Update: Recommended update for quota ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:2507-1 Rating: important References: #1104898 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for quota fixes the following issues: - Fix issue with high cpu load if RQUOTAD_PORT is set in /etc/sysconfig/nfs. (bsc#1104898) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-919=1 Package List: - openSUSE Leap 15.0 (x86_64): quota-4.04-lp150.2.3.1 quota-debuginfo-4.04-lp150.2.3.1 quota-debugsource-4.04-lp150.2.3.1 quota-nfs-4.04-lp150.2.3.1 quota-nfs-debuginfo-4.04-lp150.2.3.1 References: https://bugzilla.suse.com/1104898

1 0

openSUSE-OU-2018:2506-1: moderate: Optional update for sddm
by maintenance＠opensuse.org 24 Aug '18

24 Aug '18

openSUSE Optional Update: Optional update for sddm ______________________________________________________________________________ Announcement ID: openSUSE-OU-2018:2506-1 Rating: moderate References: #1105342 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This optional update for sddm adds the following functionality: * Honor PAM's ambient supplemental groups (boo#1105342) Patch Instructions: To install this openSUSE Optional Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-921=1 Package List: - openSUSE Leap 15.0 (x86_64): sddm-0.17.0-lp150.9.6.1 sddm-branding-openSUSE-0.17.0-lp150.9.6.1 sddm-branding-upstream-0.17.0-lp150.9.6.1 sddm-debuginfo-0.17.0-lp150.9.6.1 sddm-debugsource-0.17.0-lp150.9.6.1 References: https://bugzilla.suse.com/1105342

1 0

openSUSE-RU-2018:2505-1: moderate: Recommended update for spec-cleaner
by maintenance＠opensuse.org 24 Aug '18

24 Aug '18

openSUSE Recommended Update: Recommended update for spec-cleaner ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:2505-1 Rating: moderate References: #1099674 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update brings spec-cleaner to version 1.1.1, including following fixes and improvements: * Fix help message not working * Make libexecdir opt-in rather than opt-out * Account for LICENCE string not just LICENSE * Warn about direct qmake/meson usage * Use https when mentioning bugzilla in header * Use tuples on some places rather than lists Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-918=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-918=1 Package List: - openSUSE Leap 42.3 (noarch): spec-cleaner-1.1.1-54.1 spec-cleaner-format_spec_file-1.1.1-54.1 - openSUSE Leap 15.0 (noarch): spec-cleaner-1.1.1-lp150.2.8.1 spec-cleaner-format_spec_file-1.1.1-lp150.2.8.1 References: https://bugzilla.suse.com/1099674

1 0

openSUSE-RU-2018:2504-1: moderate: Recommended update for Salt
by maintenance＠opensuse.org 24 Aug '18

24 Aug '18

openSUSE Recommended Update: Recommended update for Salt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:2504-1 Rating: moderate References: #1057635 #1072599 #1087055 #1087581 #1087891 #1089526 #1092161 #1094055 #1095507 #1096514 #1097174 #1097413 #1098394 #1099323 #1099460 #1099945 #1100142 #1100225 #1100697 #1101812 #1101880 #1102218 #1102265 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has 23 recommended fixes can now be installed. Description: This update for salt fixes the following issues: - Fix file.blockreplace to avoid throwing IndexError. (bsc#1101812) - Fix pkg.upgrade reports when dealing with multiversion packages. (bsc#1102265) - Fix UnicodeDecodeError using is_binary check. (bsc#1100225) - Fix corrupt public key with m2crypto python3. (bsc#1099323) - Prevent payload crash on decoding binary data. (bsc#1100697) - Accounting for when files in an archive contain non-ascii characters. (bsc#1099460) - Handle packages with multiple version properly with zypper. (bsc#1096514) - Fix file.get_diff regression on 2018.3. (bsc#1098394) - Provide python version mismatch solutions. (bsc#1072599) - Add custom SUSE capabilities as Grains. (bsc#1089526) - Fix file.managed binary file utf8 error. (bsc#1098394) - Multiversion patch plus upstream fix and patch reordering. - Add environment variable to know if yum is invoked from Salt. (bsc#1057635) - Prevent deprecation warning with salt-ssh. (bsc#1095507) - Fix for sorting of multi-version packages. (bsc#1097174, bsc#1097413) - Align SUSE salt-master.service 'LimitNOFILES' limit with upstream Salt. - Add 'other' attribute to GECOS fields to avoid inconsistencies with chfn. - Prevent zypper from parsing repo configuration from not .repo files. (bsc#1094055) - Collect all versions of installed packages on SUSE and RHEL systems. (bsc#1089526) - Fix for [Errno 0] Resolver Error 0 (no error) (bsc#1087581) - Fix for logging during network interface querying (bsc#1087581) - Fallback to PyMySQL (bsc#1087891) - Check dmidecoder executable on each "smbios" call to avoid race condition (bsc#1101880) - Fix mine.get not returning data - workaround for #48020 (bsc#1100142) - Add API log rotation on SUSE package (bsc#1102218) - Add missing dateutils import (bsc#1099945) - remove minion/thin/version if exists to force thin regeneration (bsc#1092161) - Fix rhel packages requires both net-tools and iproute (bsc#1087055) - Backport the new libvirt_events engine from upstream This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-920=1 Package List: - openSUSE Leap 15.0 (x86_64): python2-salt-2018.3.0-lp150.3.6.1 python3-salt-2018.3.0-lp150.3.6.1 salt-2018.3.0-lp150.3.6.1 salt-api-2018.3.0-lp150.3.6.1 salt-cloud-2018.3.0-lp150.3.6.1 salt-doc-2018.3.0-lp150.3.6.1 salt-master-2018.3.0-lp150.3.6.1 salt-minion-2018.3.0-lp150.3.6.1 salt-proxy-2018.3.0-lp150.3.6.1 salt-ssh-2018.3.0-lp150.3.6.1 salt-syndic-2018.3.0-lp150.3.6.1 - openSUSE Leap 15.0 (noarch): salt-bash-completion-2018.3.0-lp150.3.6.1 salt-fish-completion-2018.3.0-lp150.3.6.1 salt-zsh-completion-2018.3.0-lp150.3.6.1 References: https://bugzilla.suse.com/1057635 https://bugzilla.suse.com/1072599 https://bugzilla.suse.com/1087055 https://bugzilla.suse.com/1087581 https://bugzilla.suse.com/1087891 https://bugzilla.suse.com/1089526 https://bugzilla.suse.com/1092161 https://bugzilla.suse.com/1094055 https://bugzilla.suse.com/1095507 https://bugzilla.suse.com/1096514 https://bugzilla.suse.com/1097174 https://bugzilla.suse.com/1097413 https://bugzilla.suse.com/1098394 https://bugzilla.suse.com/1099323 https://bugzilla.suse.com/1099460 https://bugzilla.suse.com/1099945 https://bugzilla.suse.com/1100142 https://bugzilla.suse.com/1100225 https://bugzilla.suse.com/1100697 https://bugzilla.suse.com/1101812 https://bugzilla.suse.com/1101880 https://bugzilla.suse.com/1102218 https://bugzilla.suse.com/1102265

1 0

openSUSE-SU-2018:2503-1: moderate: Security update for ImageMagick
by opensuse-security＠opensuse.org 24 Aug '18

24 Aug '18

openSUSE Security Update: Security update for ImageMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2503-1 Rating: moderate References: #1094741 #1102003 #1102004 #1102005 #1102007 Cross-References: CVE-2018-14434 CVE-2018-14435 CVE-2018-14436 CVE-2018-14437 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves four vulnerabilities and has one errata is now available. Description: This update for ImageMagick fixes the following issues: Security issues fixed: * CVE-2018-14434: A memory leak for a colormap in WriteMPCImage incoders/mpc.c was fixed. (bsc#1102003) * CVE-2018-14435: A memory leak in DecodeImage in coders/pcd.c was fixed. (bsc#1102007) * CVE-2018-14436: A memory leak in ReadMIFFImage in coders/miff.c was fixed. (bsc#1102005) * CVE-2018-14437: A memory leak in parse8BIM in coders/meta.c was fixed. (bsc#1102004) Bug fix: - bsc#1094741: Fix unexpected result with `convert -compose`. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-925=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): ImageMagick-7.0.7.34-lp150.2.9.1 ImageMagick-debuginfo-7.0.7.34-lp150.2.9.1 ImageMagick-debugsource-7.0.7.34-lp150.2.9.1 ImageMagick-devel-7.0.7.34-lp150.2.9.1 ImageMagick-extra-7.0.7.34-lp150.2.9.1 ImageMagick-extra-debuginfo-7.0.7.34-lp150.2.9.1 libMagick++-7_Q16HDRI4-7.0.7.34-lp150.2.9.1 libMagick++-7_Q16HDRI4-debuginfo-7.0.7.34-lp150.2.9.1 libMagick++-devel-7.0.7.34-lp150.2.9.1 libMagickCore-7_Q16HDRI6-7.0.7.34-lp150.2.9.1 libMagickCore-7_Q16HDRI6-debuginfo-7.0.7.34-lp150.2.9.1 libMagickWand-7_Q16HDRI6-7.0.7.34-lp150.2.9.1 libMagickWand-7_Q16HDRI6-debuginfo-7.0.7.34-lp150.2.9.1 perl-PerlMagick-7.0.7.34-lp150.2.9.1 perl-PerlMagick-debuginfo-7.0.7.34-lp150.2.9.1 - openSUSE Leap 15.0 (x86_64): ImageMagick-devel-32bit-7.0.7.34-lp150.2.9.1 libMagick++-7_Q16HDRI4-32bit-7.0.7.34-lp150.2.9.1 libMagick++-7_Q16HDRI4-32bit-debuginfo-7.0.7.34-lp150.2.9.1 libMagick++-devel-32bit-7.0.7.34-lp150.2.9.1 libMagickCore-7_Q16HDRI6-32bit-7.0.7.34-lp150.2.9.1 libMagickCore-7_Q16HDRI6-32bit-debuginfo-7.0.7.34-lp150.2.9.1 libMagickWand-7_Q16HDRI6-32bit-7.0.7.34-lp150.2.9.1 libMagickWand-7_Q16HDRI6-32bit-debuginfo-7.0.7.34-lp150.2.9.1 - openSUSE Leap 15.0 (noarch): ImageMagick-doc-7.0.7.34-lp150.2.9.1 References: https://www.suse.com/security/cve/CVE-2018-14434.html https://www.suse.com/security/cve/CVE-2018-14435.html https://www.suse.com/security/cve/CVE-2018-14436.html https://www.suse.com/security/cve/CVE-2018-14437.html https://bugzilla.suse.com/1094741 https://bugzilla.suse.com/1102003 https://bugzilla.suse.com/1102004 https://bugzilla.suse.com/1102005 https://bugzilla.suse.com/1102007

1 0

openSUSE-SU-2018:2502-1: important: Security update for libgit2
by opensuse-security＠opensuse.org 24 Aug '18

24 Aug '18

openSUSE Security Update: Security update for libgit2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2502-1 Rating: important References: #1095219 #1100612 #1100613 #1104641 Cross-References: CVE-2018-10887 CVE-2018-10888 CVE-2018-11235 CVE-2018-15501 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for libgit2 to version 0.26.5 fixes the following issues: The following security vulnerabilities were addressed: - CVE-2018-10887: Fixed an integer overflow which in turn leads to an out of bound read, allowing to read the base object, which could be exploited by an attacker to cause denial of service (DoS) (bsc#1100613). - CVE-2018-10888: Fixed an out-of-bound read while reading a binary delta file, which could be exploited by an attacker t ocause a denial of service (DoS) (bsc#1100612). - CVE-2018-11235: Fixed a remote code execution, which could occur with a crafted .gitmodules file (bsc#1095219) - CVE-2018-15501: Prevent out-of-bounds reads when processing smart-protocol "ng" packets (bsc#1104641) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-922=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libgit2-26-0.26.6-lp150.2.3.1 libgit2-26-debuginfo-0.26.6-lp150.2.3.1 libgit2-debugsource-0.26.6-lp150.2.3.1 libgit2-devel-0.26.6-lp150.2.3.1 - openSUSE Leap 15.0 (x86_64): libgit2-26-32bit-0.26.6-lp150.2.3.1 libgit2-26-32bit-debuginfo-0.26.6-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-10887.html https://www.suse.com/security/cve/CVE-2018-10888.html https://www.suse.com/security/cve/CVE-2018-11235.html https://www.suse.com/security/cve/CVE-2018-15501.html https://bugzilla.suse.com/1095219 https://bugzilla.suse.com/1100612 https://bugzilla.suse.com/1100613 https://bugzilla.suse.com/1104641

1 0

openSUSE-RU-2018:2490-1: moderate: Recommended update for python-websocket-client
by maintenance＠opensuse.org 24 Aug '18

24 Aug '18

openSUSE Recommended Update: Recommended update for python-websocket-client ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:2490-1 Rating: moderate References: #1076519 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-websocket-client fixes the following issues: - The library did not contain a CA bundle and the system CAs had to be manually specified. Make it use the systems ca bundle file by default (boo#1076519) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-916=1 Package List: - openSUSE Leap 15.0 (noarch): python2-websocket-client-0.44.0-lp150.2.3.1 python3-websocket-client-0.44.0-lp150.2.3.1 References: https://bugzilla.suse.com/1076519

1 0

openSUSE-RU-2018:2489-1: moderate: Recommended update for postfix
by maintenance＠opensuse.org 24 Aug '18

24 Aug '18

openSUSE Recommended Update: Recommended update for postfix ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:2489-1 Rating: moderate References: #1087471 #1094965 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for postfix fixes the following issues: - Postfix version update to 3.3.1 (bsc#1094965) * Postfix did not support running as a PID=1 process, which complicated Postfix deployment in containers. The "postfix start-fg" command will now run the Postfix master daemon as a PID=1 process if possible * Segfault in the postconf(1) command after it could not open a Postfix database configuration file due to a file permission error (dereferencing a null pointer) * The luser_relay feature became a black hole, when the luser_relay parameter was set to a non-existent local address (i.e. mail disappeared silently) * Missing error propagation in the tlsproxy(8) daemon could result in a segfault after TLS handshake error (dereferencing a 0xffff...ffff pointer). This daemon handles the TLS protocol when a non-whitelisted client sends a STARTTLS command to postscreen(8). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-917=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): postfix-3.3.1-lp150.4.3.1 postfix-debuginfo-3.3.1-lp150.4.3.1 postfix-debugsource-3.3.1-lp150.4.3.1 postfix-devel-3.3.1-lp150.4.3.1 postfix-lmdb-3.3.1-lp150.4.3.1 postfix-lmdb-debuginfo-3.3.1-lp150.4.3.1 postfix-mysql-3.3.1-lp150.4.3.1 postfix-mysql-debuginfo-3.3.1-lp150.4.3.1 postfix-postgresql-3.3.1-lp150.4.3.1 postfix-postgresql-debuginfo-3.3.1-lp150.4.3.1 - openSUSE Leap 15.0 (noarch): postfix-doc-3.3.1-lp150.4.3.1 References: https://bugzilla.suse.com/1087471 https://bugzilla.suse.com/1094965

1 0

openSUSE-SU-2018:2488-1: moderate: Security update for python-Django
by opensuse-security＠opensuse.org 24 Aug '18

24 Aug '18

openSUSE Security Update: Security update for python-Django ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2488-1 Rating: moderate References: #1102680 Cross-References: CVE-2018-14574 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-Django to version 2.08 fixes the following issues: The following security vulnerability was fixed: - CVE-2018-14574: Fixed an redirection vulnerability in CommonMiddleware (boo#1102680) The following other bugs were fixed: - Fixed a regression in Django 2.0.7 that broke the regex lookup on MariaDB - Fixed a regression where django.template.Template crashed if the template_string argument is lazy - Fixed __regex and __iregex lookups with MySQL - Fixed admin check crash when using a query expression in ModelAdmin.ordering - Fixed admin changelist crash when using a query expression without asc() or desc() in the page’s ordering - Fixed a regression that broke custom template filters that use decorators - Fixed detection of custom URL converters in included pattern - Fixed a regression that added an unnecessary subquery to the GROUP BY clause on MySQL when using a RawSQL annotation - Fixed WKBWriter.write() and write_hex() for empty polygons on GEOS 3.6.1+ - Fixed a regression in Django 1.10 that could result in large memory usage when making edits using ModelAdmin.list_editable - Corrected the import paths that inspectdb generates for django.contrib.postgres fields - Fixed crashes in django.contrib.admindocs when a view is a callable object, such as django.contrib.syndication.views.Feed - Fixed a regression in Django 1.11.12 where QuerySet.values() or values_list() after combining an annotated and unannotated queryset with union(), difference(), or intersection() crashed due to mismatching columns Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-914=1 Package List: - openSUSE Leap 15.0 (noarch): python3-Django-2.0.8-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-14574.html https://bugzilla.suse.com/1102680

1 0

openSUSE-SU-2018:2487-1: Security update for libXcursor
by opensuse-security＠opensuse.org 24 Aug '18

24 Aug '18

openSUSE Security Update: Security update for libXcursor ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2487-1 Rating: low References: #1103511 Cross-References: CVE-2015-9262 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libXcursor fixes the following issues: - CVE-2015-9262: _XcursorThemeInherits allowed remote attackers to cause denial of service or potentially code execution via a one-byte heap overflow (bsc#1103511) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-915=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libXcursor-debugsource-1.1.14-10.6.1 libXcursor-devel-1.1.14-10.6.1 libXcursor1-1.1.14-10.6.1 libXcursor1-debuginfo-1.1.14-10.6.1 - openSUSE Leap 42.3 (x86_64): libXcursor-devel-32bit-1.1.14-10.6.1 libXcursor1-32bit-1.1.14-10.6.1 libXcursor1-debuginfo-32bit-1.1.14-10.6.1 References: https://www.suse.com/security/cve/CVE-2015-9262.html https://bugzilla.suse.com/1103511

1 0

openSUSE-SU-2018:2479-1: important: Security update for ceph
by opensuse-security＠opensuse.org 22 Aug '18

22 Aug '18

openSUSE Security Update: Security update for ceph ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2479-1 Rating: important References: #1051598 #1054061 #1056125 #1056967 #1059458 #1060904 #1061461 #1063014 #1066182 #1066502 #1067088 #1067119 #1067705 #1070357 #1071386 #1074301 #1079076 #1080788 #1081379 #1081600 #1086340 #1087269 #1087493 Cross-References: CVE-2017-16818 CVE-2018-7262 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves two vulnerabilities and has 21 fixes is now available. Description: This update for ceph fixes the following issues: Security issues fixed: - CVE-2018-7262: rgw: malformed http headers can crash rgw (bsc#1081379). - CVE-2017-16818: User reachable asserts allow for DoS (bsc#1063014). Bug fixes: - bsc#1061461: OSDs keep generating coredumps after adding new OSD node to cluster. - bsc#1079076: RGW openssl fixes. - bsc#1067088: Upgrade to SES5 restarted all nodes, majority of OSDs aborts during start. - bsc#1056125: Some OSDs are down when doing performance testing on rbd image in EC Pool. - bsc#1087269: allow_ec_overwrites option not in command options list. - bsc#1051598: Fix mountpoint check for systemctl enable --runtime. - bsc#1070357: Zabbix mgr module doesn't recover from HEALTH_ERR. - bsc#1066502: After upgrading a single OSD from SES 4 to SES 5 the OSDs do not rejoin the cluster. - bsc#1067119: Crushtool decompile creates wrong device entries (device 20 device20) for not existing / deleted OSDs. - bsc#1060904: Loglevel misleading during keystone authentication. - bsc#1056967: Monitors goes down after pool creation on cluster with 120 OSDs. - bsc#1067705: Issues with RGW Multi-Site Federation between SES5 and RH Ceph Storage 2. - bsc#1059458: Stopping / restarting rados gateway as part of deepsea stage.4 executions causes core-dump of radosgw. - bsc#1087493: Commvault cannot reconnect to storage after restarting haproxy. - bsc#1066182: Container synchronization between two Ceph clusters failed. - bsc#1081600: Crash in civetweb/RGW. - bsc#1054061: NFS-GANESHA service failing while trying to list mountpoint on client. - bsc#1074301: OSDs keep aborting: SnapMapper failed asserts. - bsc#1086340: XFS metadata corruption on rbd-nbd mapped image with journaling feature enabled. - bsc#1080788: fsid mismatch when creating additional OSDs. - bsc#1071386: Metadata spill onto block.slow. This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-541=1 Package List: - openSUSE Leap 42.3 (x86_64): ceph-12.2.5+git.1524775272.5e7ea8cf03-9.1 ceph-base-12.2.5+git.1524775272.5e7ea8cf03-9.1 ceph-base-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 ceph-common-12.2.5+git.1524775272.5e7ea8cf03-9.1 ceph-common-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 ceph-debugsource-12.2.5+git.1524775272.5e7ea8cf03-9.1 ceph-fuse-12.2.5+git.1524775272.5e7ea8cf03-9.1 ceph-fuse-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 ceph-mds-12.2.5+git.1524775272.5e7ea8cf03-9.1 ceph-mds-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 ceph-mgr-12.2.5+git.1524775272.5e7ea8cf03-9.1 ceph-mgr-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 ceph-mon-12.2.5+git.1524775272.5e7ea8cf03-9.1 ceph-mon-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 ceph-osd-12.2.5+git.1524775272.5e7ea8cf03-9.1 ceph-osd-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 ceph-radosgw-12.2.5+git.1524775272.5e7ea8cf03-9.1 ceph-radosgw-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 ceph-resource-agents-12.2.5+git.1524775272.5e7ea8cf03-9.1 ceph-test-12.2.5+git.1524775272.5e7ea8cf03-9.1 ceph-test-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 ceph-test-debugsource-12.2.5+git.1524775272.5e7ea8cf03-9.1 libcephfs-devel-12.2.5+git.1524775272.5e7ea8cf03-9.1 libcephfs2-12.2.5+git.1524775272.5e7ea8cf03-9.1 libcephfs2-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 librados-devel-12.2.5+git.1524775272.5e7ea8cf03-9.1 librados-devel-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 librados2-12.2.5+git.1524775272.5e7ea8cf03-9.1 librados2-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 libradosstriper-devel-12.2.5+git.1524775272.5e7ea8cf03-9.1 libradosstriper1-12.2.5+git.1524775272.5e7ea8cf03-9.1 libradosstriper1-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 librbd-devel-12.2.5+git.1524775272.5e7ea8cf03-9.1 librbd1-12.2.5+git.1524775272.5e7ea8cf03-9.1 librbd1-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 librgw-devel-12.2.5+git.1524775272.5e7ea8cf03-9.1 librgw2-12.2.5+git.1524775272.5e7ea8cf03-9.1 librgw2-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 python-ceph-compat-12.2.5+git.1524775272.5e7ea8cf03-9.1 python-cephfs-12.2.5+git.1524775272.5e7ea8cf03-9.1 python-cephfs-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 python-rados-12.2.5+git.1524775272.5e7ea8cf03-9.1 python-rados-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 python-rbd-12.2.5+git.1524775272.5e7ea8cf03-9.1 python-rbd-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 python-rgw-12.2.5+git.1524775272.5e7ea8cf03-9.1 python-rgw-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 python3-ceph-argparse-12.2.5+git.1524775272.5e7ea8cf03-9.1 python3-cephfs-12.2.5+git.1524775272.5e7ea8cf03-9.1 python3-cephfs-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 python3-rados-12.2.5+git.1524775272.5e7ea8cf03-9.1 python3-rados-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 python3-rbd-12.2.5+git.1524775272.5e7ea8cf03-9.1 python3-rbd-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 python3-rgw-12.2.5+git.1524775272.5e7ea8cf03-9.1 python3-rgw-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 rados-objclass-devel-12.2.5+git.1524775272.5e7ea8cf03-9.1 rbd-fuse-12.2.5+git.1524775272.5e7ea8cf03-9.1 rbd-fuse-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 rbd-mirror-12.2.5+git.1524775272.5e7ea8cf03-9.1 rbd-mirror-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 rbd-nbd-12.2.5+git.1524775272.5e7ea8cf03-9.1 rbd-nbd-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 References: https://www.suse.com/security/cve/CVE-2017-16818.html https://www.suse.com/security/cve/CVE-2018-7262.html https://bugzilla.suse.com/1051598 https://bugzilla.suse.com/1054061 https://bugzilla.suse.com/1056125 https://bugzilla.suse.com/1056967 https://bugzilla.suse.com/1059458 https://bugzilla.suse.com/1060904 https://bugzilla.suse.com/1061461 https://bugzilla.suse.com/1063014 https://bugzilla.suse.com/1066182 https://bugzilla.suse.com/1066502 https://bugzilla.suse.com/1067088 https://bugzilla.suse.com/1067119 https://bugzilla.suse.com/1067705 https://bugzilla.suse.com/1070357 https://bugzilla.suse.com/1071386 https://bugzilla.suse.com/1074301 https://bugzilla.suse.com/1079076 https://bugzilla.suse.com/1080788 https://bugzilla.suse.com/1081379 https://bugzilla.suse.com/1081600 https://bugzilla.suse.com/1086340 https://bugzilla.suse.com/1087269 https://bugzilla.suse.com/1087493

1 0

openSUSE-SU-2018:2439-1: Security update for GraphicsMagick
by opensuse-security＠opensuse.org 19 Aug '18

19 Aug '18

openSUSE Security Update: Security update for GraphicsMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2439-1 Rating: low References: #1102007 Cross-References: CVE-2018-14435 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for GraphicsMagick fixes the following issues: The following security issue was fixed: - CVE-2018-14435: Fixed a memory leak in DecodeImage in coders/pcd.c (boo#1102007) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-906=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): GraphicsMagick-1.3.25-96.2 GraphicsMagick-debuginfo-1.3.25-96.2 GraphicsMagick-debugsource-1.3.25-96.2 GraphicsMagick-devel-1.3.25-96.2 libGraphicsMagick++-Q16-12-1.3.25-96.2 libGraphicsMagick++-Q16-12-debuginfo-1.3.25-96.2 libGraphicsMagick++-devel-1.3.25-96.2 libGraphicsMagick-Q16-3-1.3.25-96.2 libGraphicsMagick-Q16-3-debuginfo-1.3.25-96.2 libGraphicsMagick3-config-1.3.25-96.2 libGraphicsMagickWand-Q16-2-1.3.25-96.2 libGraphicsMagickWand-Q16-2-debuginfo-1.3.25-96.2 perl-GraphicsMagick-1.3.25-96.2 perl-GraphicsMagick-debuginfo-1.3.25-96.2 References: https://www.suse.com/security/cve/CVE-2018-14435.html https://bugzilla.suse.com/1102007

1 0

openSUSE-SU-2018:2438-1: moderate: Security update for perl-Archive-Zip
by opensuse-security＠opensuse.org 19 Aug '18

19 Aug '18

openSUSE Security Update: Security update for perl-Archive-Zip ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2438-1 Rating: moderate References: #1099497 Cross-References: CVE-2018-10860 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for perl-Archive-Zip fixes the following security issue: - CVE-2018-10860: Prevent directory traversal caused by not properly sanitizing paths while extracting zip files. An attacker able to provide a specially crafted archive for processing could have used this flaw to write or overwrite arbitrary files in the context of the perl interpreter (bsc#1099497) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-904=1 Package List: - openSUSE Leap 15.0 (noarch): perl-Archive-Zip-1.60-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-10860.html https://bugzilla.suse.com/1099497

1 0

openSUSE-RU-2018:2437-1: moderate: Recommended update for libyui-ncurses-pkg
by maintenance＠opensuse.org 19 Aug '18

19 Aug '18

openSUSE Recommended Update: Recommended update for libyui-ncurses-pkg ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:2437-1 Rating: moderate References: #991090 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libyui-ncurses-pkg fixes the following issues: - Fix "out of disk space" error at start when such a large disk is present in the system. (bsc#991090) - Fix displaying negative disk sizes in the disk usage dialog. (bsc#991090) - Added new "Services" filter, displayed only when at least one repository service is present (FATE#321043) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-903=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libyui-ncurses-pkg-debugsource-2.48.5.2-lp150.2.3.1 libyui-ncurses-pkg-devel-2.48.5.2-lp150.2.3.1 libyui-ncurses-pkg8-2.48.5.2-lp150.2.3.1 libyui-ncurses-pkg8-debuginfo-2.48.5.2-lp150.2.3.1 - openSUSE Leap 15.0 (noarch): libyui-ncurses-pkg-doc-2.48.5.2-lp150.2.3.1 References: https://bugzilla.suse.com/991090

1 0

openSUSE-SU-2018:2436-1: important: Security update for xen
by opensuse-security＠opensuse.org 19 Aug '18

19 Aug '18

openSUSE Security Update: Security update for xen ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2436-1 Rating: important References: #1027519 #1091107 #1103276 Cross-References: CVE-2018-3646 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update for xen fixes the following security issues: - CVE-2018-3646: Systems with microprocessors utilizing speculative execution and address translations may have allowed unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access with guest OS privilege via a terminal page fault and a side-channel analysis (bsc#1091107, bsc#1027519). - Incorrect MSR_DEBUGCTL handling let guests enable BTS allowing a malicious or buggy guest administrator can lock up the entire host (bsc#1103276) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-911=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): xen-debugsource-4.10.1_08-lp150.2.9.1 xen-devel-4.10.1_08-lp150.2.9.1 xen-libs-4.10.1_08-lp150.2.9.1 xen-libs-debuginfo-4.10.1_08-lp150.2.9.1 xen-tools-domU-4.10.1_08-lp150.2.9.1 xen-tools-domU-debuginfo-4.10.1_08-lp150.2.9.1 - openSUSE Leap 15.0 (x86_64): xen-4.10.1_08-lp150.2.9.1 xen-doc-html-4.10.1_08-lp150.2.9.1 xen-libs-32bit-4.10.1_08-lp150.2.9.1 xen-libs-32bit-debuginfo-4.10.1_08-lp150.2.9.1 xen-tools-4.10.1_08-lp150.2.9.1 xen-tools-debuginfo-4.10.1_08-lp150.2.9.1 References: https://www.suse.com/security/cve/CVE-2018-3646.html https://bugzilla.suse.com/1027519 https://bugzilla.suse.com/1091107 https://bugzilla.suse.com/1103276

1 0

openSUSE-RU-2018:2435-1: Recommended update for powerline
by maintenance＠opensuse.org 19 Aug '18

19 Aug '18

openSUSE Recommended Update: Recommended update for powerline ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:2435-1 Rating: low References: #1101303 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for powerline fixes the following issues: - powerline intitializaton was not working correctly in vim (boo#10101303) - add correct systemd service for powerline Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-913=1 Package List: - openSUSE Leap 15.0 (x86_64): powerline-2.6-lp150.3.3.1 powerline-debuginfo-2.6-lp150.3.3.1 powerline-debugsource-2.6-lp150.3.3.1 - openSUSE Leap 15.0 (noarch): powerline-docs-2.6-lp150.3.3.1 powerline-fonts-2.6-lp150.3.3.1 tmux-powerline-2.6-lp150.3.3.1 vim-plugin-powerline-2.6-lp150.3.3.1 References: https://bugzilla.suse.com/1101303

1 0

openSUSE-SU-2018:2434-1: important: Security update for xen
by opensuse-security＠opensuse.org 19 Aug '18

19 Aug '18

openSUSE Security Update: Security update for xen ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2434-1 Rating: important References: #1027519 #1091107 #1103276 Cross-References: CVE-2018-3646 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update for xen fixes the following security issues: - CVE-2018-3646: Systems with microprocessors utilizing speculative execution and address translations may have allowed unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access with guest OS privilege via a terminal page fault and a side-channel analysis (bsc#1091107, bsc#1027519). - Incorrect MSR_DEBUGCTL handling let guests enable BTS allowing a malicious or buggy guest administrator can lock up the entire host (bsc#1103276) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-910=1 Package List: - openSUSE Leap 42.3 (x86_64): xen-4.9.2_10-28.1 xen-debugsource-4.9.2_10-28.1 xen-devel-4.9.2_10-28.1 xen-doc-html-4.9.2_10-28.1 xen-libs-4.9.2_10-28.1 xen-libs-debuginfo-4.9.2_10-28.1 xen-tools-4.9.2_10-28.1 xen-tools-debuginfo-4.9.2_10-28.1 xen-tools-domU-4.9.2_10-28.1 xen-tools-domU-debuginfo-4.9.2_10-28.1 References: https://www.suse.com/security/cve/CVE-2018-3646.html https://bugzilla.suse.com/1027519 https://bugzilla.suse.com/1091107 https://bugzilla.suse.com/1103276

1 0

openSUSE-SU-2018:2433-1: moderate: Security update for apache2
by opensuse-security＠opensuse.org 19 Aug '18

19 Aug '18

openSUSE Security Update: Security update for apache2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2433-1 Rating: moderate References: #1101688 #1101689 Cross-References: CVE-2018-1333 CVE-2018-8011 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for apache2 fixes the following issues: The following security vulnerabilities were fixed: - CVE-2018-1333: Fixed a worker exhaustion that could have lead to a denial of service via specially crafted HTTP/2 requests (bsc#1101689). - CVE-2018-8011: Fixed a null pointer dereference in mod_md, which could have lead to a denial of service via specially crafted HTTP requests (bsc#1101688). Note: We are currently not shipping this modules, since it is still considered experimental, but we might start to ship it with future releases. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-907=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): apache2-2.4.33-lp150.2.3.1 apache2-debuginfo-2.4.33-lp150.2.3.1 apache2-debugsource-2.4.33-lp150.2.3.1 apache2-devel-2.4.33-lp150.2.3.1 apache2-event-2.4.33-lp150.2.3.1 apache2-event-debuginfo-2.4.33-lp150.2.3.1 apache2-example-pages-2.4.33-lp150.2.3.1 apache2-prefork-2.4.33-lp150.2.3.1 apache2-prefork-debuginfo-2.4.33-lp150.2.3.1 apache2-utils-2.4.33-lp150.2.3.1 apache2-utils-debuginfo-2.4.33-lp150.2.3.1 apache2-worker-2.4.33-lp150.2.3.1 apache2-worker-debuginfo-2.4.33-lp150.2.3.1 - openSUSE Leap 15.0 (noarch): apache2-doc-2.4.33-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-1333.html https://www.suse.com/security/cve/CVE-2018-8011.html https://bugzilla.suse.com/1101688 https://bugzilla.suse.com/1101689

1 0

openSUSE-RU-2018:2432-1: moderate: Recommended update for linphoneqt
by maintenance＠opensuse.org 19 Aug '18

19 Aug '18

openSUSE Recommended Update: Recommended update for linphoneqt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:2432-1 Rating: moderate References: #1095273 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for linphoneqt fixes the following issues: - some UI elements (buttons, tabs) did not render correctly (boo#1095273) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-905=1 Package List: - openSUSE Leap 15.0 (x86_64): linphone-4.1.1-lp150.3.5.1 linphone-debuginfo-4.1.1-lp150.3.5.1 linphoneqt-debugsource-4.1.1-lp150.3.5.1 References: https://bugzilla.suse.com/1095273

1 0

openSUSE-SU-2018:2431-1: moderate: Security update for curl
by opensuse-security＠opensuse.org 19 Aug '18

19 Aug '18

openSUSE Security Update: Security update for curl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2431-1 Rating: moderate References: #1099793 Cross-References: CVE-2018-0500 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for curl fixes the following issues: Security issue fixed: - CVE-2018-0500: Fix a SMTP send heap buffer overflow (bsc#1099793). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-908=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): curl-7.60.0-lp150.2.9.1 curl-debuginfo-7.60.0-lp150.2.9.1 curl-debugsource-7.60.0-lp150.2.9.1 curl-mini-7.60.0-lp150.2.9.1 curl-mini-debuginfo-7.60.0-lp150.2.9.1 curl-mini-debugsource-7.60.0-lp150.2.9.1 libcurl-devel-7.60.0-lp150.2.9.1 libcurl-mini-devel-7.60.0-lp150.2.9.1 libcurl4-7.60.0-lp150.2.9.1 libcurl4-debuginfo-7.60.0-lp150.2.9.1 libcurl4-mini-7.60.0-lp150.2.9.1 libcurl4-mini-debuginfo-7.60.0-lp150.2.9.1 - openSUSE Leap 15.0 (x86_64): libcurl-devel-32bit-7.60.0-lp150.2.9.1 libcurl4-32bit-7.60.0-lp150.2.9.1 libcurl4-32bit-debuginfo-7.60.0-lp150.2.9.1 References: https://www.suse.com/security/cve/CVE-2018-0500.html https://bugzilla.suse.com/1099793

1 0

openSUSE-RU-2018:2430-1: moderate: Recommended update for screenfetch
by maintenance＠opensuse.org 19 Aug '18

19 Aug '18

openSUSE Recommended Update: Recommended update for screenfetch ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:2430-1 Rating: moderate References: #1103527 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for screenfetch to version 3.8.0 fixes the following issues: - Recommend lsb-release as it is needed for correct detection of distribution (boo#1103527) - Require bc to avoid error on startup - Additional Intel GPU checks - document `-w' command in README.mkdn - document `-w' command in manpage - show CPU temperature Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-912=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-912=1 Package List: - openSUSE Leap 42.3 (noarch): screenfetch-3.8.0-10.6.1 - openSUSE Leap 15.0 (noarch): screenfetch-3.8.0-lp150.2.6.1 References: https://bugzilla.suse.com/1103527

1 0

openSUSE-RU-2018:2429-1: moderate: Recommended update for screenfetch
by maintenance＠opensuse.org 19 Aug '18

19 Aug '18

openSUSE Recommended Update: Recommended update for screenfetch ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:2429-1 Rating: moderate References: #1103527 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for screenfetch to version 3.8.0 fixes the following issues: - Recommend lsb-release as it is needed for correct detection of distribution (boo#1103527) - Require bc to avoid error on startup - Additional Intel GPU checks - document `-w' command in README.mkdn - document `-w' command in manpage - show CPU temperature Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2018-912=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): screenfetch-3.8.0-8.1 References: https://bugzilla.suse.com/1103527

1 0

openSUSE-RU-2018:2428-1: moderate: Recommended update for virtualbox
by maintenance＠opensuse.org 19 Aug '18

19 Aug '18

openSUSE Recommended Update: Recommended update for virtualbox ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:2428-1 Rating: moderate References: #1105201 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for virtualbox fixes the following issues: Update to VirtualBox 5.2.18 (boo#1105201), containing multiple upstream bug fixes: - VMM: fix loading with recent binutils and self-built versions of VirtualBox - NAT: fix --nataliasmode sameports which is a valid setting - VRDP: fixed VM process termination on RDP client disconnect if 3D is enabled for the virtual machine Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-909=1 Package List: - openSUSE Leap 15.0 (noarch): virtualbox-guest-desktop-icons-5.2.18-lp150.4.14.1 virtualbox-guest-source-5.2.18-lp150.4.14.1 virtualbox-host-source-5.2.18-lp150.4.14.1 - openSUSE Leap 15.0 (x86_64): python3-virtualbox-5.2.18-lp150.4.14.1 python3-virtualbox-debuginfo-5.2.18-lp150.4.14.1 virtualbox-5.2.18-lp150.4.14.1 virtualbox-debuginfo-5.2.18-lp150.4.14.1 virtualbox-debugsource-5.2.18-lp150.4.14.1 virtualbox-devel-5.2.18-lp150.4.14.1 virtualbox-guest-kmp-default-5.2.18_k4.12.14_lp150.12.16-lp150.4.14.1 virtualbox-guest-kmp-default-debuginfo-5.2.18_k4.12.14_lp150.12.16-lp150.4.14.1 virtualbox-guest-tools-5.2.18-lp150.4.14.1 virtualbox-guest-tools-debuginfo-5.2.18-lp150.4.14.1 virtualbox-guest-x11-5.2.18-lp150.4.14.1 virtualbox-guest-x11-debuginfo-5.2.18-lp150.4.14.1 virtualbox-host-kmp-default-5.2.18_k4.12.14_lp150.12.16-lp150.4.14.1 virtualbox-host-kmp-default-debuginfo-5.2.18_k4.12.14_lp150.12.16-lp150.4.14.1 virtualbox-qt-5.2.18-lp150.4.14.1 virtualbox-qt-debuginfo-5.2.18-lp150.4.14.1 virtualbox-vnc-5.2.18-lp150.4.14.1 virtualbox-websrv-5.2.18-lp150.4.14.1 virtualbox-websrv-debuginfo-5.2.18-lp150.4.14.1 References: https://bugzilla.suse.com/1105201

1 0

openSUSE-RU-2018:2427-1: moderate: Recommended update for systemd
by maintenance＠opensuse.org 17 Aug '18

17 Aug '18

openSUSE Recommended Update: Recommended update for systemd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:2427-1 Rating: moderate References: #1039099 #1080382 #1082004 #1082485 #1083158 #1088052 #1088769 #1088890 #1089761 #1090785 #1091265 #1093851 #1095096 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has 13 recommended fixes can now be installed. Description: This update for systemd fixes the following issues: - core: In --user mode, report READY=1 as soon as basic.target is reached. - sd-bus: Extend D-Bus authentication timeout considerably. - scsi_id: Fixup prefix for pre-SPC inquiry reply. (bsc#1039099) - udev: Use MAC address match only for ibmveth/ibmvnic/mlx4. (bsc#1095096) - compat-rules: Generate more compat by-id symlinks for NVMe devices. (bsc#1095096) - udev: Whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator. (bsc#1083158) - udev: Don't create by-partlabel/primary and .../logical symlinks. (bsc#1089761) - rules: Add /dev/disk/by-partuuid symlinks also for dos partition tables. - device: Make sure to always retroactively start device dependencies. (bsc#1088052) - device: Skip deserialization of device units when udevd is not running. - install: "user" and "global" scopes are equivalent for user presets. (bsc#1093851) - install: Search preset files in /run. - man: Updated systemd-analyze blame description for service-units with Type=simple. (bsc#1091265) - logind: Fix crash when shutdown is not issued from a tty. (bsc#1088890) - logind: Do not use an uninitialized variable. (bsc#1088890) - Disable user services by default. (bsc#1090785) - Ship 99-sysctl.conf instead of creating it during package installation/update. (bsc#1088769) Previously this symlink was created in /etc/sysctl.d during %post which made the symlink not owned and more importantly it was created only if /etc/sysctl.conf is already installed which is not always the case during the installation process it seems. So ship the symlink unconditionally and put it in /usr/lib/sysctl.d instead since it's a distro default behavior that might be overriden by sysadmin later. - systemd: Add offline environmental condition to 80-acpi-container-hotplug.rules. (bsc#1080382, bsc#1082485) Add the offline event environmental condition to restrict the rule that is can only be triggered when the change event is received with the "offline" environmental data. The 27664c581 "ACPI / scan: Send change uevent with offine environmental data" kernel patch changed the corresponding code in kernel. This change prevents the udev rules for acpi container be triggered by "udevadm trigger" from user space. - build-sys: Explicitly require python3. (bsc#1082004) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-900=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libsystemd0-228-53.1 libsystemd0-debuginfo-228-53.1 libsystemd0-mini-228-53.1 libsystemd0-mini-debuginfo-228-53.1 libudev-devel-228-53.1 libudev-mini-devel-228-53.1 libudev-mini1-228-53.1 libudev-mini1-debuginfo-228-53.1 libudev1-228-53.1 libudev1-debuginfo-228-53.1 nss-myhostname-228-53.1 nss-myhostname-debuginfo-228-53.1 nss-mymachines-228-53.1 nss-mymachines-debuginfo-228-53.1 systemd-228-53.1 systemd-debuginfo-228-53.1 systemd-debugsource-228-53.1 systemd-devel-228-53.1 systemd-logger-228-53.1 systemd-mini-228-53.1 systemd-mini-debuginfo-228-53.1 systemd-mini-debugsource-228-53.1 systemd-mini-devel-228-53.1 systemd-mini-sysvinit-228-53.1 systemd-sysvinit-228-53.1 udev-228-53.1 udev-debuginfo-228-53.1 udev-mini-228-53.1 udev-mini-debuginfo-228-53.1 - openSUSE Leap 42.3 (noarch): systemd-bash-completion-228-53.1 systemd-mini-bash-completion-228-53.1 - openSUSE Leap 42.3 (x86_64): libsystemd0-32bit-228-53.1 libsystemd0-debuginfo-32bit-228-53.1 libudev1-32bit-228-53.1 libudev1-debuginfo-32bit-228-53.1 nss-myhostname-32bit-228-53.1 nss-myhostname-debuginfo-32bit-228-53.1 systemd-32bit-228-53.1 systemd-debuginfo-32bit-228-53.1 References: https://bugzilla.suse.com/1039099 https://bugzilla.suse.com/1080382 https://bugzilla.suse.com/1082004 https://bugzilla.suse.com/1082485 https://bugzilla.suse.com/1083158 https://bugzilla.suse.com/1088052 https://bugzilla.suse.com/1088769 https://bugzilla.suse.com/1088890 https://bugzilla.suse.com/1089761 https://bugzilla.suse.com/1090785 https://bugzilla.suse.com/1091265 https://bugzilla.suse.com/1093851 https://bugzilla.suse.com/1095096

1 0

openSUSE-RU-2018:2425-1: moderate: Recommended update for ca-certificates-mozilla
by maintenance＠opensuse.org 17 Aug '18

17 Aug '18

openSUSE Recommended Update: Recommended update for ca-certificates-mozilla ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:2425-1 Rating: moderate References: #1100415 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The systemwide Root CA certificates were updated to the 2.24 state of the Mozilla NSS Certificate store. Following CAs were removed: * S-TRUST_Universal_Root_CA * TC_TrustCenter_Class_3_CA_II * TURKTRUST_Elektronik_Sertifika_Hizmet_Saglayicisi_H5 This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-902=1 Package List: - openSUSE Leap 42.3 (noarch): ca-certificates-mozilla-2.24-15.1 References: https://bugzilla.suse.com/1100415

1 0