August 2018 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2018:2372-1: moderate: Recommended update for mdadm
by maintenance＠opensuse.org 16 Aug '18

16 Aug '18

openSUSE Recommended Update: Recommended update for mdadm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:2372-1 Rating: moderate References: #1082766 #1090819 #1095729 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for mdadm provides the following fix: - Assemble: Prevent a segmentation fault with faulty "best" devices. (bsc#1082766, bsc#1095729) - Bugfix: Devices with IDs bigger then 500 can't be assembled anymore under /dev/ (bsc#1090819) - License file gets now installed in the correct directory This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-878=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): mdadm-4.0-5.6.1 mdadm-debuginfo-4.0-5.6.1 mdadm-debugsource-4.0-5.6.1 References: https://bugzilla.suse.com/1082766 https://bugzilla.suse.com/1090819 https://bugzilla.suse.com/1095729

1 0

openSUSE-RU-2018:2371-1: moderate: Recommended update for perf
by maintenance＠opensuse.org 16 Aug '18

16 Aug '18

openSUSE Recommended Update: Recommended update for perf ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:2371-1 Rating: moderate References: #1096885 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for perf provides the following fix: - perf script: Show hw-cache events. (bsc#1096885) - Add JSON perf event lists for GLP (fate#325092) - Support perf core/uncore event list for Skylake server (fate#325122) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-877=1 Package List: - openSUSE Leap 15.0 (x86_64): perf-4.12.14-lp150.8.3.1 perf-debuginfo-4.12.14-lp150.8.3.1 perf-debugsource-4.12.14-lp150.8.3.1 References: https://bugzilla.suse.com/1096885

1 0

openSUSE-RU-2018:2365-1: moderate: Recommended update for opensc
by maintenance＠opensuse.org 16 Aug '18

16 Aug '18

openSUSE Recommended Update: Recommended update for opensc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:2365-1 Rating: moderate References: #1100501 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for opensc fixes the following issues: - Fix for CardOS smart cards (bsc#1100501) - Many improvements in version 0.18.0 (see /usr/share/doc/packages/opensc/NEWS for a complete list) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-872=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): opensc-0.18.0-lp150.2.6.1 opensc-debuginfo-0.18.0-lp150.2.6.1 opensc-debugsource-0.18.0-lp150.2.6.1 - openSUSE Leap 15.0 (x86_64): opensc-32bit-0.18.0-lp150.2.6.1 opensc-32bit-debuginfo-0.18.0-lp150.2.6.1 References: https://bugzilla.suse.com/1100501

1 0

openSUSE-RU-2018:2361-1: moderate: Recommended update for Photini
by maintenance＠opensuse.org 16 Aug '18

16 Aug '18

openSUSE Recommended Update: Recommended update for Photini ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:2361-1 Rating: moderate References: #1103804 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for Photini fixes the following issues: - Add missing runtime dependency on python3-requests (boo#1103804) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-869=1 Package List: - openSUSE Leap 15.0 (noarch): Photini-2018.5.0-lp150.2.3.1 References: https://bugzilla.suse.com/1103804

1 0

openSUSE-RU-2018:2360-1: moderate: Recommended update for bleachbit
by maintenance＠opensuse.org 16 Aug '18

16 Aug '18

openSUSE Recommended Update: Recommended update for bleachbit ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:2360-1 Rating: moderate References: #1104093 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for bleachbit fixes the following issues: - Add missing runtime dependency on python-xml (boo#1104093). Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-870=1 Package List: - openSUSE Leap 15.0 (noarch): bleachbit-2.0-lp150.2.3.1 bleachbit-lang-2.0-lp150.2.3.1 References: https://bugzilla.suse.com/1104093

1 0

openSUSE-RU-2018:2357-1: moderate: Recommended update for xmlcharent
by maintenance＠opensuse.org 16 Aug '18

16 Aug '18

openSUSE Recommended Update: Recommended update for xmlcharent ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:2357-1 Rating: moderate References: #955428 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for xmlcharent fixes the following issue: - avoid rpm script error on installation of xmlcharent (boo#955428) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-871=1 Package List: - openSUSE Leap 42.3 (noarch): xmlcharent-0.3-431.3.1 References: https://bugzilla.suse.com/955428

1 0

openSUSE-SU-2018:2343-1: moderate: Security update for aubio
by opensuse-security＠opensuse.org 16 Aug '18

16 Aug '18

openSUSE Security Update: Security update for aubio ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2343-1 Rating: moderate References: #1102359 #1102364 Cross-References: CVE-2018-14522 CVE-2018-14523 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for aubio fixes the following issues: - CVE-2018-14522: Fixed a crash in aubio_pitch_set_unit (bsc#1102359) - CVE-2018-14523: Fixed a buffer overrread resulting in crash or information leakage in new_aubio_pitchyinfft (bsc#1102364) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-868=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-868=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): aubio-debugsource-0.4.1-9.9.1 aubio-tools-0.4.1-9.9.1 aubio-tools-debuginfo-0.4.1-9.9.1 libaubio-devel-0.4.1-9.9.1 libaubio4-0.4.1-9.9.1 libaubio4-debuginfo-0.4.1-9.9.1 - openSUSE Leap 42.3 (x86_64): libaubio4-32bit-0.4.1-9.9.1 libaubio4-debuginfo-32bit-0.4.1-9.9.1 - openSUSE Leap 15.0 (i586 x86_64): aubio-debugsource-0.4.6-lp150.3.6.1 aubio-tools-0.4.6-lp150.3.6.1 aubio-tools-debuginfo-0.4.6-lp150.3.6.1 libaubio-devel-0.4.6-lp150.3.6.1 libaubio5-0.4.6-lp150.3.6.1 libaubio5-debuginfo-0.4.6-lp150.3.6.1 - openSUSE Leap 15.0 (x86_64): libaubio5-32bit-0.4.6-lp150.3.6.1 libaubio5-32bit-debuginfo-0.4.6-lp150.3.6.1 python-aubio-debugsource-0.4.6-lp150.3.6.1 python2-aubio-0.4.6-lp150.3.6.1 python2-aubio-debuginfo-0.4.6-lp150.3.6.1 python3-aubio-0.4.6-lp150.3.6.1 python3-aubio-debuginfo-0.4.6-lp150.3.6.1 References: https://www.suse.com/security/cve/CVE-2018-14522.html https://www.suse.com/security/cve/CVE-2018-14523.html https://bugzilla.suse.com/1102359 https://bugzilla.suse.com/1102364

1 0

openSUSE-SU-2018:2330-1: important: Security update for seamonkey
by opensuse-security＠opensuse.org 15 Aug '18

15 Aug '18

openSUSE Security Update: Security update for seamonkey ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2330-1 Rating: important References: #1020631 #1062195 #1076907 #1077291 #1098998 Cross-References: CVE-2018-12359 CVE-2018-12360 CVE-2018-12362 CVE-2018-12363 CVE-2018-12364 CVE-2018-12365 CVE-2018-12366 CVE-2018-5156 CVE-2018-5188 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes 9 vulnerabilities is now available. Description: This update for seamonkey fixes the following issues: Mozilla Seamonkey was updated to 2.49.4: Now uses Gecko 52.9.1esr (boo#1098998). Security issues fixed with MFSA 2018-16 (boo#1098998): * CVE-2018-12359: Buffer overflow using computed size of canvas element * CVE-2018-12360: Use-after-free when using focus() * CVE-2018-12362: Integer overflow in SSSE3 scaler * CVE-2018-5156: Media recorder segmentation fault when track type is changed during capture * CVE-2018-12363: Use-after-free when appending DOM nodes * CVE-2018-12364: CSRF attacks through 307 redirects and NPAPI plugins * CVE-2018-12365: Compromised IPC child process can list local filenames * CVE-2018-12366: Invalid data handling during QCMS transformations * CVE-2018-5188: Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9 Localizations finally included again (boo#1062195) Updated summary and description to more accurately reflect what SeaMonkey is, giving less prominence to the long- discontinued Mozilla Application Suite that many users may no longer be familiar with Update to Seamonkey 2.49.2 * Gecko 52.6esr (including security relevant fixes) (boo#1077291) * fix issue in Composer * With some themes, the menulist- and history-dropmarker didn't show * Scrollbars didn't show the buttons * WebRTC has been disabled by default. It needs an add-on to enable it per site * The active title bar was not visually emphasized Correct requires and provides handling (boo#1076907) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-867=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-867=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): seamonkey-2.49.4-13.3.2 seamonkey-debuginfo-2.49.4-13.3.2 seamonkey-debugsource-2.49.4-13.3.2 seamonkey-translations-common-2.49.4-13.3.2 seamonkey-translations-other-2.49.4-13.3.2 - openSUSE Leap 15.0 (x86_64): seamonkey-2.49.4-lp150.2.3.2 seamonkey-debuginfo-2.49.4-lp150.2.3.2 seamonkey-debugsource-2.49.4-lp150.2.3.2 seamonkey-translations-common-2.49.4-lp150.2.3.2 seamonkey-translations-other-2.49.4-lp150.2.3.2 References: https://www.suse.com/security/cve/CVE-2018-12359.html https://www.suse.com/security/cve/CVE-2018-12360.html https://www.suse.com/security/cve/CVE-2018-12362.html https://www.suse.com/security/cve/CVE-2018-12363.html https://www.suse.com/security/cve/CVE-2018-12364.html https://www.suse.com/security/cve/CVE-2018-12365.html https://www.suse.com/security/cve/CVE-2018-12366.html https://www.suse.com/security/cve/CVE-2018-5156.html https://www.suse.com/security/cve/CVE-2018-5188.html https://bugzilla.suse.com/1020631 https://bugzilla.suse.com/1062195 https://bugzilla.suse.com/1076907 https://bugzilla.suse.com/1077291 https://bugzilla.suse.com/1098998

1 0

openSUSE-SU-2018:2327-1: moderate: Security update for python-Django
by opensuse-security＠opensuse.org 14 Aug '18

14 Aug '18

openSUSE Security Update: Security update for python-Django ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2327-1 Rating: moderate References: #1102680 Cross-References: CVE-2018-14574 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-Django to 1.11.15 fixes the following issues: This security issue was fixed: - CVE-2018-14574: Prevent open redirect in django.middleware.common.CommonMiddleware (bsc#1102680). These non-security issues were fixed: - Fixed WKBWriter.write() and write_hex() for empty polygons on GEOS 3.6.1+ - Fixed a regression that could result in large memory usage when making edits using ModelAdmin.list_editable - Fixed a regression where QuerySet.values() or values_list() after combining an annotated and unannotated queryset with union(), difference(), or intersection() crashed due to mismatching columns - Fixed crashes in django.contrib.admindocs when a view is a callable object, such as django.contrib.syndication.views.Feed - Fixed a regression where altering a field with a unique constraint may drop and rebuild more foreign keys than necessary - Fixed a regression where combining two annotated values_list() querysets with union(), difference(), or intersection() crashed due to mismatching columns - Fixed a regression where an empty choice could be initially selected for the SelectMultiple and CheckboxSelectMultiple widgets Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2018-866=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): python-Django-1.11.15-11.1 References: https://www.suse.com/security/cve/CVE-2018-14574.html https://bugzilla.suse.com/1102680

1 0

openSUSE-SU-2018:2316-1: moderate: Security update for lxc
by opensuse-security＠opensuse.org 13 Aug '18

13 Aug '18

openSUSE Security Update: Security update for lxc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2316-1 Rating: moderate References: #988348 Cross-References: CVE-2018-6556 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for lxc fixes the following issues: The following security vulnerability was fixed: - CVE-2018-6556: Fixed an information leak and possible open() side effects to regular users via lxc-user-nic (boo#988348) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-865=1 Package List: - openSUSE Leap 15.0 (x86_64): liblxc-devel-2.0.9-lp150.2.6.1 liblxc1-2.0.9-lp150.2.6.1 liblxc1-debuginfo-2.0.9-lp150.2.6.1 lxc-2.0.9-lp150.2.6.1 lxc-debuginfo-2.0.9-lp150.2.6.1 lxc-debugsource-2.0.9-lp150.2.6.1 References: https://www.suse.com/security/cve/CVE-2018-6556.html https://bugzilla.suse.com/988348

1 0