August 2018 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2018:2283-1: important: Security update for ceph
by opensuse-security＠opensuse.org 10 Aug '18

10 Aug '18

openSUSE Security Update: Security update for ceph ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2283-1 Rating: important References: #1092874 #1094932 #1096748 #1099162 Cross-References: CVE-2018-10861 CVE-2018-1128 CVE-2018-1129 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves three vulnerabilities and has one errata is now available. Description: This update for ceph fixes the following issues: Security issues fixed: - CVE-2018-10861: Ensure that ceph-mon does perform authorization on all OSD pool ops (bsc#1099162) - CVE-2018-1129: cephx signature check bypass (bsc#1096748) - CVE-2018-1128: cephx protocol was vulnerable to replay attack (bsc#1096748) Bugs fixed in 12.2.7-420-gc0ef85b854: - luminous: osd: eternal stuck PG in 'unfound_recovery' (bsc#1094932) - bluestore: db.slow used when db is not full (bsc#1092874) - Upstream fixes and improvements, see https://ceph.com/releases/12-2-7-luminous-released/ This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-854=1 Package List: - openSUSE Leap 42.3 (x86_64): ceph-12.2.7+git.1531910353.c0ef85b854-12.1 ceph-base-12.2.7+git.1531910353.c0ef85b854-12.1 ceph-base-debuginfo-12.2.7+git.1531910353.c0ef85b854-12.1 ceph-common-12.2.7+git.1531910353.c0ef85b854-12.1 ceph-common-debuginfo-12.2.7+git.1531910353.c0ef85b854-12.1 ceph-debugsource-12.2.7+git.1531910353.c0ef85b854-12.1 ceph-fuse-12.2.7+git.1531910353.c0ef85b854-12.1 ceph-fuse-debuginfo-12.2.7+git.1531910353.c0ef85b854-12.1 ceph-mds-12.2.7+git.1531910353.c0ef85b854-12.1 ceph-mds-debuginfo-12.2.7+git.1531910353.c0ef85b854-12.1 ceph-mgr-12.2.7+git.1531910353.c0ef85b854-12.1 ceph-mgr-debuginfo-12.2.7+git.1531910353.c0ef85b854-12.1 ceph-mon-12.2.7+git.1531910353.c0ef85b854-12.1 ceph-mon-debuginfo-12.2.7+git.1531910353.c0ef85b854-12.1 ceph-osd-12.2.7+git.1531910353.c0ef85b854-12.1 ceph-osd-debuginfo-12.2.7+git.1531910353.c0ef85b854-12.1 ceph-radosgw-12.2.7+git.1531910353.c0ef85b854-12.1 ceph-radosgw-debuginfo-12.2.7+git.1531910353.c0ef85b854-12.1 ceph-resource-agents-12.2.7+git.1531910353.c0ef85b854-12.1 ceph-test-12.2.7+git.1531910353.c0ef85b854-12.1 ceph-test-debuginfo-12.2.7+git.1531910353.c0ef85b854-12.1 ceph-test-debugsource-12.2.7+git.1531910353.c0ef85b854-12.1 libcephfs-devel-12.2.7+git.1531910353.c0ef85b854-12.1 libcephfs2-12.2.7+git.1531910353.c0ef85b854-12.1 libcephfs2-debuginfo-12.2.7+git.1531910353.c0ef85b854-12.1 librados-devel-12.2.7+git.1531910353.c0ef85b854-12.1 librados-devel-debuginfo-12.2.7+git.1531910353.c0ef85b854-12.1 librados2-12.2.7+git.1531910353.c0ef85b854-12.1 librados2-debuginfo-12.2.7+git.1531910353.c0ef85b854-12.1 libradosstriper-devel-12.2.7+git.1531910353.c0ef85b854-12.1 libradosstriper1-12.2.7+git.1531910353.c0ef85b854-12.1 libradosstriper1-debuginfo-12.2.7+git.1531910353.c0ef85b854-12.1 librbd-devel-12.2.7+git.1531910353.c0ef85b854-12.1 librbd1-12.2.7+git.1531910353.c0ef85b854-12.1 librbd1-debuginfo-12.2.7+git.1531910353.c0ef85b854-12.1 librgw-devel-12.2.7+git.1531910353.c0ef85b854-12.1 librgw2-12.2.7+git.1531910353.c0ef85b854-12.1 librgw2-debuginfo-12.2.7+git.1531910353.c0ef85b854-12.1 python-ceph-compat-12.2.7+git.1531910353.c0ef85b854-12.1 python-cephfs-12.2.7+git.1531910353.c0ef85b854-12.1 python-cephfs-debuginfo-12.2.7+git.1531910353.c0ef85b854-12.1 python-rados-12.2.7+git.1531910353.c0ef85b854-12.1 python-rados-debuginfo-12.2.7+git.1531910353.c0ef85b854-12.1 python-rbd-12.2.7+git.1531910353.c0ef85b854-12.1 python-rbd-debuginfo-12.2.7+git.1531910353.c0ef85b854-12.1 python-rgw-12.2.7+git.1531910353.c0ef85b854-12.1 python-rgw-debuginfo-12.2.7+git.1531910353.c0ef85b854-12.1 python3-ceph-argparse-12.2.7+git.1531910353.c0ef85b854-12.1 python3-cephfs-12.2.7+git.1531910353.c0ef85b854-12.1 python3-cephfs-debuginfo-12.2.7+git.1531910353.c0ef85b854-12.1 python3-rados-12.2.7+git.1531910353.c0ef85b854-12.1 python3-rados-debuginfo-12.2.7+git.1531910353.c0ef85b854-12.1 python3-rbd-12.2.7+git.1531910353.c0ef85b854-12.1 python3-rbd-debuginfo-12.2.7+git.1531910353.c0ef85b854-12.1 python3-rgw-12.2.7+git.1531910353.c0ef85b854-12.1 python3-rgw-debuginfo-12.2.7+git.1531910353.c0ef85b854-12.1 rados-objclass-devel-12.2.7+git.1531910353.c0ef85b854-12.1 rbd-fuse-12.2.7+git.1531910353.c0ef85b854-12.1 rbd-fuse-debuginfo-12.2.7+git.1531910353.c0ef85b854-12.1 rbd-mirror-12.2.7+git.1531910353.c0ef85b854-12.1 rbd-mirror-debuginfo-12.2.7+git.1531910353.c0ef85b854-12.1 rbd-nbd-12.2.7+git.1531910353.c0ef85b854-12.1 rbd-nbd-debuginfo-12.2.7+git.1531910353.c0ef85b854-12.1 References: https://www.suse.com/security/cve/CVE-2018-10861.html https://www.suse.com/security/cve/CVE-2018-1128.html https://www.suse.com/security/cve/CVE-2018-1129.html https://bugzilla.suse.com/1092874 https://bugzilla.suse.com/1094932 https://bugzilla.suse.com/1096748 https://bugzilla.suse.com/1099162

1 0

openSUSE-RU-2018:2282-1: moderate: Recommended update for ffmpeg
by maintenance＠opensuse.org 09 Aug '18

09 Aug '18

openSUSE Recommended Update: Recommended update for ffmpeg ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:2282-1 Rating: moderate References: #1103064 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ffmpeg-2, ffmpeg-3, ffmpeg-4 contains the following fixes: - improve migration of libswscale-devel from unprefixed packages (boo#1103064) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2018-840=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): ffmpeg-2-debugsource-2.8.15-6.1 ffmpeg-2-libavcodec-devel-2.8.15-6.1 ffmpeg-2-libavdevice-devel-2.8.15-6.1 ffmpeg-2-libavfilter-devel-2.8.15-6.1 ffmpeg-2-libavformat-devel-2.8.15-6.1 ffmpeg-2-libavresample-devel-2.8.15-6.1 ffmpeg-2-libavutil-devel-2.8.15-6.1 ffmpeg-2-libpostproc-devel-2.8.15-6.1 ffmpeg-2-libswresample-devel-2.8.15-6.1 ffmpeg-2-libswscale-devel-2.8.15-6.1 ffmpeg-3-3.4.4-6.1 ffmpeg-3-debuginfo-3.4.4-6.1 ffmpeg-3-debugsource-3.4.4-6.1 ffmpeg-3-libavcodec-devel-3.4.4-6.1 ffmpeg-3-libavdevice-devel-3.4.4-6.1 ffmpeg-3-libavfilter-devel-3.4.4-6.1 ffmpeg-3-libavformat-devel-3.4.4-6.1 ffmpeg-3-libavresample-devel-3.4.4-6.1 ffmpeg-3-libavutil-devel-3.4.4-6.1 ffmpeg-3-libpostproc-devel-3.4.4-6.1 ffmpeg-3-libswresample-devel-3.4.4-6.1 ffmpeg-3-libswscale-devel-3.4.4-6.1 ffmpeg-3-private-devel-3.4.4-6.1 ffmpeg-4-debugsource-4.0.1-10.1 ffmpeg-4-libavcodec-devel-4.0.1-10.1 ffmpeg-4-libavdevice-devel-4.0.1-10.1 ffmpeg-4-libavfilter-devel-4.0.1-10.1 ffmpeg-4-libavformat-devel-4.0.1-10.1 ffmpeg-4-libavresample-devel-4.0.1-10.1 ffmpeg-4-libavutil-devel-4.0.1-10.1 ffmpeg-4-libpostproc-devel-4.0.1-10.1 ffmpeg-4-libswresample-devel-4.0.1-10.1 ffmpeg-4-libswscale-devel-4.0.1-10.1 ffmpeg-4-private-devel-4.0.1-10.1 libavcodec56-2.8.15-6.1 libavcodec56-debuginfo-2.8.15-6.1 libavcodec57-3.4.4-6.1 libavcodec57-debuginfo-3.4.4-6.1 libavcodec58-4.0.1-10.1 libavcodec58-debuginfo-4.0.1-10.1 libavdevice56-2.8.15-6.1 libavdevice56-debuginfo-2.8.15-6.1 libavdevice57-3.4.4-6.1 libavdevice57-debuginfo-3.4.4-6.1 libavdevice58-4.0.1-10.1 libavdevice58-debuginfo-4.0.1-10.1 libavfilter5-2.8.15-6.1 libavfilter5-debuginfo-2.8.15-6.1 libavfilter6-3.4.4-6.1 libavfilter6-debuginfo-3.4.4-6.1 libavfilter7-4.0.1-10.1 libavfilter7-debuginfo-4.0.1-10.1 libavformat56-2.8.15-6.1 libavformat56-debuginfo-2.8.15-6.1 libavformat57-3.4.4-6.1 libavformat57-debuginfo-3.4.4-6.1 libavformat58-4.0.1-10.1 libavformat58-debuginfo-4.0.1-10.1 libavresample2-2.8.15-6.1 libavresample2-debuginfo-2.8.15-6.1 libavresample3-3.4.4-6.1 libavresample3-debuginfo-3.4.4-6.1 libavresample4-4.0.1-10.1 libavresample4-debuginfo-4.0.1-10.1 libavutil54-2.8.15-6.1 libavutil54-debuginfo-2.8.15-6.1 libavutil55-3.4.4-6.1 libavutil55-debuginfo-3.4.4-6.1 libavutil56-4.0.1-10.1 libavutil56-debuginfo-4.0.1-10.1 libpostproc53-2.8.15-6.1 libpostproc53-debuginfo-2.8.15-6.1 libpostproc54-3.4.4-6.1 libpostproc54-debuginfo-3.4.4-6.1 libpostproc55-4.0.1-10.1 libpostproc55-debuginfo-4.0.1-10.1 libswresample1-2.8.15-6.1 libswresample1-debuginfo-2.8.15-6.1 libswresample2-3.4.4-6.1 libswresample2-debuginfo-3.4.4-6.1 libswresample3-4.0.1-10.1 libswresample3-debuginfo-4.0.1-10.1 libswscale3-2.8.15-6.1 libswscale3-debuginfo-2.8.15-6.1 libswscale4-3.4.4-6.1 libswscale4-debuginfo-3.4.4-6.1 libswscale5-4.0.1-10.1 libswscale5-debuginfo-4.0.1-10.1 References: https://bugzilla.suse.com/1103064

1 0

openSUSE-RU-2018:2281-1: moderate: Recommended update for yast2-ftp-server
by maintenance＠opensuse.org 09 Aug '18

09 Aug '18

openSUSE Recommended Update: Recommended update for yast2-ftp-server ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:2281-1 Rating: moderate References: #1041829 #921303 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for yast2-ftp-server fixes the following issues: Feature update: fate#321043: Added additional searchkeys to desktop file. Bug fixes: - bsc#1041829: Do not modify value when Browse dialog is canceled. - bsc#921303: Drop SSLv2 and SSLv3 as it is dropped for security reason for vsftpd. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-843=1 Package List: - openSUSE Leap 15.0 (noarch): yast2-ftp-server-4.0.7-lp150.2.3.1 References: https://bugzilla.suse.com/1041829 https://bugzilla.suse.com/921303

1 0

openSUSE-RU-2018:2280-1: moderate: Recommended update for ffmpeg
by maintenance＠opensuse.org 09 Aug '18

09 Aug '18

openSUSE Recommended Update: Recommended update for ffmpeg ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:2280-1 Rating: moderate References: #1103064 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ffmpeg-2, ffmpeg-3, ffmpeg-4 contains the following fixes: - improve migration of libswscale-devel from unprefixed packages (boo#1103064) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-840=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-840=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): ffmpeg-2-debugsource-2.8.15-6.1 ffmpeg-2-libavcodec-devel-2.8.15-6.1 ffmpeg-2-libavdevice-devel-2.8.15-6.1 ffmpeg-2-libavfilter-devel-2.8.15-6.1 ffmpeg-2-libavformat-devel-2.8.15-6.1 ffmpeg-2-libavresample-devel-2.8.15-6.1 ffmpeg-2-libavutil-devel-2.8.15-6.1 ffmpeg-2-libpostproc-devel-2.8.15-6.1 ffmpeg-2-libswresample-devel-2.8.15-6.1 ffmpeg-2-libswscale-devel-2.8.15-6.1 ffmpeg-3-3.4.4-6.1 ffmpeg-3-debuginfo-3.4.4-6.1 ffmpeg-3-debugsource-3.4.4-6.1 ffmpeg-3-libavcodec-devel-3.4.4-6.1 ffmpeg-3-libavdevice-devel-3.4.4-6.1 ffmpeg-3-libavfilter-devel-3.4.4-6.1 ffmpeg-3-libavformat-devel-3.4.4-6.1 ffmpeg-3-libavresample-devel-3.4.4-6.1 ffmpeg-3-libavutil-devel-3.4.4-6.1 ffmpeg-3-libpostproc-devel-3.4.4-6.1 ffmpeg-3-libswresample-devel-3.4.4-6.1 ffmpeg-3-libswscale-devel-3.4.4-6.1 ffmpeg-3-private-devel-3.4.4-6.1 ffmpeg-4-debugsource-4.0.1-10.1 ffmpeg-4-libavcodec-devel-4.0.1-10.1 ffmpeg-4-libavdevice-devel-4.0.1-10.1 ffmpeg-4-libavfilter-devel-4.0.1-10.1 ffmpeg-4-libavformat-devel-4.0.1-10.1 ffmpeg-4-libavresample-devel-4.0.1-10.1 ffmpeg-4-libavutil-devel-4.0.1-10.1 ffmpeg-4-libpostproc-devel-4.0.1-10.1 ffmpeg-4-libswresample-devel-4.0.1-10.1 ffmpeg-4-libswscale-devel-4.0.1-10.1 ffmpeg-4-private-devel-4.0.1-10.1 libavcodec56-2.8.15-6.1 libavcodec56-debuginfo-2.8.15-6.1 libavcodec57-3.4.4-6.1 libavcodec57-debuginfo-3.4.4-6.1 libavcodec58-4.0.1-10.1 libavcodec58-debuginfo-4.0.1-10.1 libavdevice56-2.8.15-6.1 libavdevice56-debuginfo-2.8.15-6.1 libavdevice57-3.4.4-6.1 libavdevice57-debuginfo-3.4.4-6.1 libavdevice58-4.0.1-10.1 libavdevice58-debuginfo-4.0.1-10.1 libavfilter5-2.8.15-6.1 libavfilter5-debuginfo-2.8.15-6.1 libavfilter6-3.4.4-6.1 libavfilter6-debuginfo-3.4.4-6.1 libavfilter7-4.0.1-10.1 libavfilter7-debuginfo-4.0.1-10.1 libavformat56-2.8.15-6.1 libavformat56-debuginfo-2.8.15-6.1 libavformat57-3.4.4-6.1 libavformat57-debuginfo-3.4.4-6.1 libavformat58-4.0.1-10.1 libavformat58-debuginfo-4.0.1-10.1 libavresample2-2.8.15-6.1 libavresample2-debuginfo-2.8.15-6.1 libavresample3-3.4.4-6.1 libavresample3-debuginfo-3.4.4-6.1 libavresample4-4.0.1-10.1 libavresample4-debuginfo-4.0.1-10.1 libavutil54-2.8.15-6.1 libavutil54-debuginfo-2.8.15-6.1 libavutil55-3.4.4-6.1 libavutil55-debuginfo-3.4.4-6.1 libavutil56-4.0.1-10.1 libavutil56-debuginfo-4.0.1-10.1 libpostproc53-2.8.15-6.1 libpostproc53-debuginfo-2.8.15-6.1 libpostproc54-3.4.4-6.1 libpostproc54-debuginfo-3.4.4-6.1 libpostproc55-4.0.1-10.1 libpostproc55-debuginfo-4.0.1-10.1 libswresample1-2.8.15-6.1 libswresample1-debuginfo-2.8.15-6.1 libswresample2-3.4.4-6.1 libswresample2-debuginfo-3.4.4-6.1 libswresample3-4.0.1-10.1 libswresample3-debuginfo-4.0.1-10.1 libswscale3-2.8.15-6.1 libswscale3-debuginfo-2.8.15-6.1 libswscale4-3.4.4-6.1 libswscale4-debuginfo-3.4.4-6.1 libswscale5-4.0.1-10.1 libswscale5-debuginfo-4.0.1-10.1 - openSUSE Leap 42.3 (x86_64): libavcodec56-32bit-2.8.15-6.1 libavcodec56-debuginfo-32bit-2.8.15-6.1 libavcodec57-32bit-3.4.4-6.1 libavcodec57-debuginfo-32bit-3.4.4-6.1 libavcodec58-32bit-4.0.1-10.1 libavcodec58-debuginfo-32bit-4.0.1-10.1 libavdevice56-32bit-2.8.15-6.1 libavdevice56-debuginfo-32bit-2.8.15-6.1 libavdevice57-32bit-3.4.4-6.1 libavdevice57-debuginfo-32bit-3.4.4-6.1 libavdevice58-32bit-4.0.1-10.1 libavdevice58-debuginfo-32bit-4.0.1-10.1 libavfilter5-32bit-2.8.15-6.1 libavfilter5-debuginfo-32bit-2.8.15-6.1 libavfilter6-32bit-3.4.4-6.1 libavfilter6-debuginfo-32bit-3.4.4-6.1 libavfilter7-32bit-4.0.1-10.1 libavfilter7-debuginfo-32bit-4.0.1-10.1 libavformat56-32bit-2.8.15-6.1 libavformat56-debuginfo-32bit-2.8.15-6.1 libavformat57-32bit-3.4.4-6.1 libavformat57-debuginfo-32bit-3.4.4-6.1 libavformat58-32bit-4.0.1-10.1 libavformat58-debuginfo-32bit-4.0.1-10.1 libavresample2-32bit-2.8.15-6.1 libavresample2-debuginfo-32bit-2.8.15-6.1 libavresample3-32bit-3.4.4-6.1 libavresample3-debuginfo-32bit-3.4.4-6.1 libavresample4-32bit-4.0.1-10.1 libavresample4-debuginfo-32bit-4.0.1-10.1 libavutil54-32bit-2.8.15-6.1 libavutil54-debuginfo-32bit-2.8.15-6.1 libavutil55-32bit-3.4.4-6.1 libavutil55-debuginfo-32bit-3.4.4-6.1 libavutil56-32bit-4.0.1-10.1 libavutil56-debuginfo-32bit-4.0.1-10.1 libpostproc53-32bit-2.8.15-6.1 libpostproc53-debuginfo-32bit-2.8.15-6.1 libpostproc54-32bit-3.4.4-6.1 libpostproc54-debuginfo-32bit-3.4.4-6.1 libpostproc55-32bit-4.0.1-10.1 libpostproc55-debuginfo-32bit-4.0.1-10.1 libswresample1-32bit-2.8.15-6.1 libswresample1-debuginfo-32bit-2.8.15-6.1 libswresample2-32bit-3.4.4-6.1 libswresample2-debuginfo-32bit-3.4.4-6.1 libswresample3-32bit-4.0.1-10.1 libswresample3-debuginfo-32bit-4.0.1-10.1 libswscale3-32bit-2.8.15-6.1 libswscale3-debuginfo-32bit-2.8.15-6.1 libswscale4-32bit-3.4.4-6.1 libswscale4-debuginfo-32bit-3.4.4-6.1 libswscale5-32bit-4.0.1-10.1 libswscale5-debuginfo-32bit-4.0.1-10.1 - openSUSE Leap 15.0 (x86_64): ffmpeg-3-3.4.4-lp150.6.1 ffmpeg-3-debuginfo-3.4.4-lp150.6.1 ffmpeg-3-debugsource-3.4.4-lp150.6.1 ffmpeg-3-libavcodec-devel-3.4.4-lp150.6.1 ffmpeg-3-libavdevice-devel-3.4.4-lp150.6.1 ffmpeg-3-libavfilter-devel-3.4.4-lp150.6.1 ffmpeg-3-libavformat-devel-3.4.4-lp150.6.1 ffmpeg-3-libavresample-devel-3.4.4-lp150.6.1 ffmpeg-3-libavutil-devel-3.4.4-lp150.6.1 ffmpeg-3-libpostproc-devel-3.4.4-lp150.6.1 ffmpeg-3-libswresample-devel-3.4.4-lp150.6.1 ffmpeg-3-libswscale-devel-3.4.4-lp150.6.1 ffmpeg-3-private-devel-3.4.4-lp150.6.1 ffmpeg-4-debugsource-4.0.1-lp150.10.1 ffmpeg-4-libavcodec-devel-4.0.1-lp150.10.1 ffmpeg-4-libavdevice-devel-4.0.1-lp150.10.1 ffmpeg-4-libavfilter-devel-4.0.1-lp150.10.1 ffmpeg-4-libavformat-devel-4.0.1-lp150.10.1 ffmpeg-4-libavresample-devel-4.0.1-lp150.10.1 ffmpeg-4-libavutil-devel-4.0.1-lp150.10.1 ffmpeg-4-libpostproc-devel-4.0.1-lp150.10.1 ffmpeg-4-libswresample-devel-4.0.1-lp150.10.1 ffmpeg-4-libswscale-devel-4.0.1-lp150.10.1 ffmpeg-4-private-devel-4.0.1-lp150.10.1 libavcodec57-3.4.4-lp150.6.1 libavcodec57-debuginfo-3.4.4-lp150.6.1 libavcodec58-4.0.1-lp150.10.1 libavcodec58-debuginfo-4.0.1-lp150.10.1 libavdevice57-3.4.4-lp150.6.1 libavdevice57-debuginfo-3.4.4-lp150.6.1 libavdevice58-4.0.1-lp150.10.1 libavdevice58-debuginfo-4.0.1-lp150.10.1 libavfilter6-3.4.4-lp150.6.1 libavfilter6-debuginfo-3.4.4-lp150.6.1 libavfilter7-4.0.1-lp150.10.1 libavfilter7-debuginfo-4.0.1-lp150.10.1 libavformat57-3.4.4-lp150.6.1 libavformat57-debuginfo-3.4.4-lp150.6.1 libavformat58-4.0.1-lp150.10.1 libavformat58-debuginfo-4.0.1-lp150.10.1 libavresample3-3.4.4-lp150.6.1 libavresample3-debuginfo-3.4.4-lp150.6.1 libavresample4-4.0.1-lp150.10.1 libavresample4-debuginfo-4.0.1-lp150.10.1 libavutil55-3.4.4-lp150.6.1 libavutil55-debuginfo-3.4.4-lp150.6.1 libavutil56-4.0.1-lp150.10.1 libavutil56-debuginfo-4.0.1-lp150.10.1 libpostproc54-3.4.4-lp150.6.1 libpostproc54-debuginfo-3.4.4-lp150.6.1 libpostproc55-4.0.1-lp150.10.1 libpostproc55-debuginfo-4.0.1-lp150.10.1 libswresample2-3.4.4-lp150.6.1 libswresample2-debuginfo-3.4.4-lp150.6.1 libswresample3-4.0.1-lp150.10.1 libswresample3-debuginfo-4.0.1-lp150.10.1 libswscale4-3.4.4-lp150.6.1 libswscale4-debuginfo-3.4.4-lp150.6.1 libswscale5-4.0.1-lp150.10.1 libswscale5-debuginfo-4.0.1-lp150.10.1 References: https://bugzilla.suse.com/1103064

1 0

openSUSE-RU-2018:2279-1: moderate: Recommended update for vsftpd
by maintenance＠opensuse.org 09 Aug '18

09 Aug '18

openSUSE Recommended Update: Recommended update for vsftpd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:2279-1 Rating: moderate References: #1010177 #1075060 #1093179 #975538 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for vsftpd fixes the following issues: - Add 'rsa_cert_file' and 'dsa_cert_file' options to config file template to make the user aware that either one of those options need to be configured, otherwise vsftpd won't start up if SSL mode is enabled (bsc#975538) - Bugfix: Don't start/stop parameterized systemd units in pre/post actions. These units cannot be used without an explicit parameter and attempts to do so lead to a confusing "failed to try-restart" error message. (bsc#1093179, bsc#1010177) - man page: Added description for 'address_space_limit' option (bsc#1075060) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-841=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): vsftpd-3.0.3-lp150.5.6.1 vsftpd-debuginfo-3.0.3-lp150.5.6.1 vsftpd-debugsource-3.0.3-lp150.5.6.1 References: https://bugzilla.suse.com/1010177 https://bugzilla.suse.com/1075060 https://bugzilla.suse.com/1093179 https://bugzilla.suse.com/975538

1 0

openSUSE-RU-2018:2278-1: Recommended update for yast2-fcoe-client
by maintenance＠opensuse.org 09 Aug '18

09 Aug '18

openSUSE Recommended Update: Recommended update for yast2-fcoe-client ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:2278-1 Rating: low References: #1078991 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-fcoe-client provides the following fix: - Fix wrong interface name with auto_vlan=yes also during an auto-installation. (bsc#1078991) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-842=1 Package List: - openSUSE Leap 42.3 (noarch): yast2-fcoe-client-3.1.16-8.1 References: https://bugzilla.suse.com/1078991

1 0

openSUSE-SU-2018:2265-1: moderate: Recommended update for enigmail
by opensuse-security＠opensuse.org 08 Aug '18

08 Aug '18

openSUSE Security Update: Recommended update for enigmail ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2265-1 Rating: moderate References: #1104036 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for enigmail to 2.0.8 fixes the following issues: The enigmail 2.0.8 release addresses a security issue and solves a few regression bugs. * A security issue has been fixed that allows an attacker to prepare a plain, unauthenticated HTML message in a way that it looks like it's signed and/or encrypted (boo#1104036) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2018-833=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): enigmail-2.0.8-21.1 References: https://bugzilla.suse.com/1104036

1 0

openSUSE-RU-2018:2261-1: moderate: Recommended update for yast2
by maintenance＠opensuse.org 08 Aug '18

08 Aug '18

openSUSE Recommended Update: Recommended update for yast2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:2261-1 Rating: moderate References: #1098919 #1099691 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for yast2 fixes the following issues: - Network: Prevent from crashing when trying to delete some ip aliases from the original devices. (bsc#1098919) - Added additional searchkeys to desktop file. (fate#321043) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-831=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): yast2-4.0.79-lp150.2.6.1 References: https://bugzilla.suse.com/1098919 https://bugzilla.suse.com/1099691

1 0

openSUSE-RU-2018:2260-1: moderate: Recommended update for samba
by maintenance＠opensuse.org 08 Aug '18

08 Aug '18

openSUSE Recommended Update: Recommended update for samba ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:2260-1 Rating: moderate References: #1065551 #1071090 #1088574 #1093864 #1094881 #1099702 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has 6 recommended fixes can now be installed. Description: This update provides version 4.7.8 of samba and fixes the following issues: - Update tevent to version 0.9.36. - Update talloc to verison 2.1.11. - Use new foreground execution flags for systemd samba daemons. (bsc#1088574, bsc#1071090, bsc#1065551, bsc#1094881) - Add missing package descriptions for several sub-packages. (bsc#1093864) - s3/smbd: Generic fix for incorrect reporting of stream dos attributes on a directory. - ceph/VFS: Add asynchronous fsync to ceph module, fake using synchronous call. - s3/libsmbclient: Fix hard-coded connection error return of ETIMEDOUT. - s3/smbd: Fix SMB2-FLUSH against directories. - s3/smbd/printing: Re-implement delete-on-close semantics for print files missing since 3.5.x. - python: Fix talloc frame use in make_simple_acl(). - winbindd on the AD DC is slow for passdb queries. - No Backtrace given by Samba's AD DC by default. - winbindd doesn't recover loss of netlogon secure channel in case the peer DC is rebooted. - s3/smbd: Fix interaction between chown and SD flags. - s4-heimdal: Fix the format-truncation errors. - vfs_ceph: Add fake async pwrite/pread send/recv hooks. - printing: Return the same error code as Windows does on upload failures. - winbind: Improve child selection. - winbind: Maintain a binding handle per domain and always go via wb_domain_request_send(). - winbindd doesn't recover loss of netlogon secure channel in case the peer DC is rebooted. - Looking up the user using the UPN results in user name with the REALM instead of the DOMAIN. - rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair. - smbclient: Fix broken notify. - libads: Fix the build --without-ads. - winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids. - winbindd: Initialize type = SID_NAME_UNKNOWN in wb_lookupsids_single_done(). - s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call(). - A disconnecting winbind client can cause a problem in the winbind parent child communication. - winbind: Use one queue for all domain children. - Minimize the lifetime of winbindd_cli_state->{pw,gr}ent_state. - winbind should avoid using fstrcpy(domain->dcname,...) on a char *. - The winbind parent should find the dc of a foreign domain via the primary domain. - nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged pipe is not accessable. - Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP NTLM2 packet check failed due to invalid signature!). - s3/VFS: Fix memory leak in vfs_ceph. - rpc_server: Fix NetSessEnum with stale sessions. - dfree cache returning incorrect data for sub directory mounts. - Looking up the user using the UPN results in user name with the REALM instead of the DOMAIN. - s3/passdb: Do not return OK if we don't have pinfo set up. - s3/utils: Do not segfault on error in DoDNSUpdate(). - s4/auth_sam: Allow logons with an empty domain name. - s3/ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error, we don't own it here. - s3/smbd: Fix possible directory fd leak if the underlying OS doesn't support fdopendir(). - Round-tripping ACL get/set through vfs_fruit will increase the number of ACE entries without limit. - s3/smbd/SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit issues. - s3/smbd: Files or directories can't be opened DELETE_ON_CLOSE without delete access. - s3/smbd: Fix memory leak in vfswrap_getwd(). - s3/smbd: Unix extensions attempts to change wrong field in fchown call. - s3/smbd: Don't use the directory cache for SMB2/3. - build: Fix libceph-common detection. - build: Fix ceph_statx check when configured with libcephfs_dir. - vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async. - ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script. - s3/lib/messages: Don't use the result of sec_init() before calling sec_init(). - smbd can panic if the client-supplied channel sequence number wraps. - dsdb: Fix Uninitialized scalar variable. - s3/libsmb: Allow -U"\\administrator" to work. - Windows 10 cannot logon on Samba NT4 domain. - smbc_opendir should not return EEXIST with invalid login credentials. - s3/smbd: Map nterror on smb2_flush errorpath. - libsmb: Use smb2 tcon if conn_protocol >= SMB2_02. - subnet: Avoid a segfault when renaming subnet objects. - 'wbinfo --name-to-sid' returns misleading result on invalid query. - s3/smbd: Do not crash if we fail to init the session table. - Allow AESNI to be used on all processor supporting AESNI. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-837=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): ctdb-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 ctdb-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 ctdb-pcp-pmda-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 ctdb-pcp-pmda-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 ctdb-tests-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 ctdb-tests-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libdcerpc-binding0-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libdcerpc-binding0-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libdcerpc-devel-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libdcerpc-samr-devel-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libdcerpc-samr0-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libdcerpc-samr0-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libdcerpc0-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libdcerpc0-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libndr-devel-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libndr-krb5pac-devel-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libndr-krb5pac0-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libndr-krb5pac0-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libndr-nbt-devel-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libndr-nbt0-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libndr-nbt0-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libndr-standard-devel-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libndr-standard0-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libndr-standard0-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libndr0-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libndr0-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libnetapi-devel-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libnetapi0-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libnetapi0-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamba-credentials-devel-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamba-credentials0-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamba-credentials0-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamba-errors-devel-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamba-errors0-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamba-errors0-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamba-hostconfig-devel-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamba-hostconfig0-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamba-hostconfig0-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamba-passdb-devel-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamba-passdb0-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamba-passdb0-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamba-policy-devel-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamba-policy0-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamba-policy0-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamba-util-devel-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamba-util0-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamba-util0-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamdb-devel-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamdb0-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamdb0-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsmbclient-devel-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsmbclient0-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsmbclient0-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsmbconf-devel-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsmbconf0-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsmbconf0-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsmbldap-devel-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsmbldap2-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsmbldap2-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libtalloc-devel-2.1.11-lp150.2.3.1 libtalloc2-2.1.11-lp150.2.3.1 libtalloc2-debuginfo-2.1.11-lp150.2.3.1 libtevent-devel-0.9.36-lp150.2.3.1 libtevent-util-devel-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libtevent-util0-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libtevent-util0-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libtevent0-0.9.36-lp150.2.3.1 libtevent0-debuginfo-0.9.36-lp150.2.3.1 libwbclient-devel-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libwbclient0-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libwbclient0-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 python-talloc-2.1.11-lp150.2.3.1 python-talloc-debuginfo-2.1.11-lp150.2.3.1 python-talloc-devel-2.1.11-lp150.2.3.1 python-tevent-0.9.36-lp150.2.3.1 python-tevent-debuginfo-0.9.36-lp150.2.3.1 python3-talloc-2.1.11-lp150.2.3.1 python3-talloc-debuginfo-2.1.11-lp150.2.3.1 python3-talloc-devel-2.1.11-lp150.2.3.1 python3-tevent-0.9.36-lp150.2.3.1 python3-tevent-debuginfo-0.9.36-lp150.2.3.1 samba-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 samba-client-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 samba-client-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 samba-core-devel-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 samba-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 samba-debugsource-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 samba-dsdb-modules-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 samba-dsdb-modules-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 samba-kdc-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 samba-kdc-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 samba-libs-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 samba-libs-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 samba-pidl-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 samba-python-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 samba-python-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 samba-test-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 samba-test-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 samba-winbind-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 samba-winbind-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 talloc-debugsource-2.1.11-lp150.2.3.1 talloc-man-2.1.11-lp150.2.3.1 tevent-debugsource-0.9.36-lp150.2.3.1 tevent-man-0.9.36-lp150.2.3.1 - openSUSE Leap 15.0 (x86_64): libdcerpc-binding0-32bit-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libdcerpc-binding0-32bit-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libdcerpc-samr0-32bit-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libdcerpc-samr0-32bit-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libdcerpc0-32bit-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libdcerpc0-32bit-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libndr-krb5pac0-32bit-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libndr-krb5pac0-32bit-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libndr-nbt0-32bit-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libndr-nbt0-32bit-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libndr-standard0-32bit-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libndr-standard0-32bit-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libndr0-32bit-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libndr0-32bit-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libnetapi0-32bit-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libnetapi0-32bit-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamba-credentials0-32bit-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamba-credentials0-32bit-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamba-errors0-32bit-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamba-errors0-32bit-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamba-hostconfig0-32bit-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamba-hostconfig0-32bit-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamba-passdb0-32bit-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamba-passdb0-32bit-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamba-policy0-32bit-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamba-policy0-32bit-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamba-util0-32bit-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamba-util0-32bit-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamdb0-32bit-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamdb0-32bit-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsmbclient0-32bit-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsmbclient0-32bit-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsmbconf0-32bit-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsmbconf0-32bit-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsmbldap2-32bit-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsmbldap2-32bit-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libtalloc2-32bit-2.1.11-lp150.2.3.1 libtalloc2-32bit-debuginfo-2.1.11-lp150.2.3.1 libtevent-util0-32bit-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libtevent-util0-32bit-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libtevent0-32bit-0.9.36-lp150.2.3.1 libtevent0-32bit-debuginfo-0.9.36-lp150.2.3.1 libwbclient0-32bit-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libwbclient0-32bit-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 python-talloc-32bit-2.1.11-lp150.2.3.1 python-talloc-32bit-debuginfo-2.1.11-lp150.2.3.1 python-tevent-32bit-0.9.36-lp150.2.3.1 python-tevent-32bit-debuginfo-0.9.36-lp150.2.3.1 python3-talloc-32bit-2.1.11-lp150.2.3.1 python3-talloc-32bit-debuginfo-2.1.11-lp150.2.3.1 python3-tevent-32bit-0.9.36-lp150.2.3.1 python3-tevent-32bit-debuginfo-0.9.36-lp150.2.3.1 samba-ceph-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 samba-ceph-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 samba-client-32bit-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 samba-client-32bit-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 samba-kdc-32bit-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 samba-kdc-32bit-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 samba-libs-32bit-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 samba-libs-32bit-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 samba-winbind-32bit-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 samba-winbind-32bit-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 - openSUSE Leap 15.0 (noarch): samba-doc-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 References: https://bugzilla.suse.com/1065551 https://bugzilla.suse.com/1071090 https://bugzilla.suse.com/1088574 https://bugzilla.suse.com/1093864 https://bugzilla.suse.com/1094881 https://bugzilla.suse.com/1099702

1 0

openSUSE-SU-2018:2259-1: moderate: Security update for clamav
by opensuse-security＠opensuse.org 08 Aug '18

08 Aug '18

openSUSE Security Update: Security update for clamav ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2259-1 Rating: moderate References: #1101410 #1101412 #1101654 #1103040 Cross-References: CVE-2018-0360 CVE-2018-0361 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves two vulnerabilities and has two fixes is now available. Description: This update for clamav to version 0.100.1 fixes the following issues: The following security vulnerabilities were addressed: - CVE-2018-0360: HWP integer overflow, infinite loop vulnerability (bsc#1101410) - CVE-2018-0361: PDF object length check, unreasonably long time to parse relatively small file (bsc#1101412) - Buffer over-read in unRAR code due to missing max value checks in table initialization - Libmspack heap buffer over-read in CHM parser (bsc#1103040) - PDF parser bugs The following other changes were made: - Disable YARA support for licensing reasons (bsc#1101654). - Add HTTPS support for clamsubmit - Fix for DNS resolution for users on IPv4-only machines where IPv6 is not available or is link-local only This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-838=1 Package List: - openSUSE Leap 15.0 (x86_64): clamav-0.100.1-lp150.2.3.1 clamav-debuginfo-0.100.1-lp150.2.3.1 clamav-debugsource-0.100.1-lp150.2.3.1 clamav-devel-0.100.1-lp150.2.3.1 libclamav7-0.100.1-lp150.2.3.1 libclamav7-debuginfo-0.100.1-lp150.2.3.1 libclammspack0-0.100.1-lp150.2.3.1 libclammspack0-debuginfo-0.100.1-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-0360.html https://www.suse.com/security/cve/CVE-2018-0361.html https://bugzilla.suse.com/1101410 https://bugzilla.suse.com/1101412 https://bugzilla.suse.com/1101654 https://bugzilla.suse.com/1103040

1 0