September 2018 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-OU-2018:2644-1: moderate: Optional update to add gn
by maintenance＠opensuse.org 07 Sep '18

07 Sep '18

openSUSE Optional Update: Optional update to add gn ______________________________________________________________________________ Announcement ID: openSUSE-OU-2018:2644-1 Rating: moderate References: #1107442 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update adds gn, a build dependency for an upcoming Chromium update. Gn is a a meta-build system that generates build files for Ninja. Patch Instructions: To install this openSUSE Optional Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-974=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-974=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): gn-0.1463-2.1 gn-debuginfo-0.1463-2.1 gn-debugsource-0.1463-2.1 - openSUSE Leap 15.0 (x86_64): gn-0.1463-lp150.2.1 gn-debuginfo-0.1463-lp150.2.1 gn-debugsource-0.1463-lp150.2.1 References: https://bugzilla.suse.com/1107442

1 0

openSUSE-OU-2018:2643-1: moderate: Optional update to add gn
by maintenance＠opensuse.org 07 Sep '18

07 Sep '18

openSUSE Optional Update: Optional update to add gn ______________________________________________________________________________ Announcement ID: openSUSE-OU-2018:2643-1 Rating: moderate References: #1107442 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update adds gn, a build dependency for an upcoming Chromium update. Gn is a a meta-build system that generates build files for Ninja. Patch Instructions: To install this openSUSE Optional Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2018-974=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): gn-0.1463-2.1 References: https://bugzilla.suse.com/1107442

1 0

openSUSE-SU-2018:2642-1: important: Security update for dovecot22
by opensuse-security＠opensuse.org 06 Sep '18

06 Sep '18

openSUSE Security Update: Security update for dovecot22 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2642-1 Rating: important References: #1082828 Cross-References: CVE-2017-15130 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for dovecot22 fixes the following issues: Security issue fixed: - CVE-2017-15130: Fixed a potential denial of service via TLS SNI config lookups, which would slow the process down and could have led to exhaustive memory allocation and/or process restarts (bsc#1082828) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-973=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): dovecot22-2.2.31-2.9.1 dovecot22-backend-mysql-2.2.31-2.9.1 dovecot22-backend-mysql-debuginfo-2.2.31-2.9.1 dovecot22-backend-pgsql-2.2.31-2.9.1 dovecot22-backend-pgsql-debuginfo-2.2.31-2.9.1 dovecot22-backend-sqlite-2.2.31-2.9.1 dovecot22-backend-sqlite-debuginfo-2.2.31-2.9.1 dovecot22-debuginfo-2.2.31-2.9.1 dovecot22-debugsource-2.2.31-2.9.1 dovecot22-devel-2.2.31-2.9.1 dovecot22-fts-2.2.31-2.9.1 dovecot22-fts-debuginfo-2.2.31-2.9.1 dovecot22-fts-lucene-2.2.31-2.9.1 dovecot22-fts-lucene-debuginfo-2.2.31-2.9.1 dovecot22-fts-solr-2.2.31-2.9.1 dovecot22-fts-solr-debuginfo-2.2.31-2.9.1 dovecot22-fts-squat-2.2.31-2.9.1 dovecot22-fts-squat-debuginfo-2.2.31-2.9.1 References: https://www.suse.com/security/cve/CVE-2017-15130.html https://bugzilla.suse.com/1082828

1 0

openSUSE-SU-2018:2628-1: moderate: Security update for wireshark
by opensuse-security＠opensuse.org 05 Sep '18

05 Sep '18

openSUSE Security Update: Security update for wireshark ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2628-1 Rating: moderate References: #1106514 Cross-References: CVE-2018-16056 CVE-2018-16057 CVE-2018-16058 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for wireshark to version 2.4.9 fixes the following issues: Security issues fixed (bsc#1106514): - CVE-2018-16058: Bluetooth AVDTP dissector crash (wnpa-sec-2018-44) - CVE-2018-16056: Bluetooth Attribute Protocol dissector crash (wnpa-sec-2018-45) - CVE-2018-16057: Radiotap dissector crash (wnpa-sec-2018-46) Further bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-2.4.9.html Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-972=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libwireshark9-2.4.9-lp150.2.10.1 libwireshark9-debuginfo-2.4.9-lp150.2.10.1 libwiretap7-2.4.9-lp150.2.10.1 libwiretap7-debuginfo-2.4.9-lp150.2.10.1 libwscodecs1-2.4.9-lp150.2.10.1 libwscodecs1-debuginfo-2.4.9-lp150.2.10.1 libwsutil8-2.4.9-lp150.2.10.1 libwsutil8-debuginfo-2.4.9-lp150.2.10.1 wireshark-2.4.9-lp150.2.10.1 wireshark-debuginfo-2.4.9-lp150.2.10.1 wireshark-debugsource-2.4.9-lp150.2.10.1 wireshark-devel-2.4.9-lp150.2.10.1 wireshark-ui-qt-2.4.9-lp150.2.10.1 wireshark-ui-qt-debuginfo-2.4.9-lp150.2.10.1 References: https://www.suse.com/security/cve/CVE-2018-16056.html https://www.suse.com/security/cve/CVE-2018-16057.html https://www.suse.com/security/cve/CVE-2018-16058.html https://bugzilla.suse.com/1106514

1 0

openSUSE-OU-2018:2627-1: Optional update for python-pyRFC3339
by maintenance＠opensuse.org 05 Sep '18

05 Sep '18

openSUSE Optional Update: Optional update for python-pyRFC3339 ______________________________________________________________________________ Announcement ID: openSUSE-OU-2018:2627-1 Rating: low References: #1106259 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update for python-pyRFC3339 provides the following changes: - Provide both Python2 and Python3 versions (boo#1106259) Patch Instructions: To install this openSUSE Optional Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-971=1 Package List: - openSUSE Leap 42.3 (noarch): python-pyRFC3339-1.0-4.3.1 python3-pyRFC3339-1.0-4.3.1 References: https://bugzilla.suse.com/1106259

1 0

openSUSE-SU-2018:2623-1: Security update for yubico-piv-tool
by opensuse-security＠opensuse.org 05 Sep '18

05 Sep '18

openSUSE Security Update: Security update for yubico-piv-tool ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2623-1 Rating: low References: #1104809 #1104811 Cross-References: CVE-2018-14779 CVE-2018-14780 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for yubico-piv-tool fixes the following issues: Security issues fixed: - CVE-2018-14779: Fixed an buffer overflow and an out of bounds memory read in ykpiv_transfer_data(), which could be triggered by a malicious token. (boo#1104809, YSA-2018-03) - CVE-2018-14780: Fixed an buffer overflow and an out of bounds memory read in _ykpiv_fetch_object(), which could be triggered by a malicious token. (boo#1104811, YSA-2018-03) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-969=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libykpiv-devel-0.1.6-7.3.1 libykpiv1-0.1.6-7.3.1 libykpiv1-debuginfo-0.1.6-7.3.1 yubico-piv-tool-0.1.6-7.3.1 yubico-piv-tool-debuginfo-0.1.6-7.3.1 yubico-piv-tool-debugsource-0.1.6-7.3.1 References: https://www.suse.com/security/cve/CVE-2018-14779.html https://www.suse.com/security/cve/CVE-2018-14780.html https://bugzilla.suse.com/1104809 https://bugzilla.suse.com/1104811

1 0

openSUSE-RU-2018:2619-1: moderate: Recommended update for KDE Plasma
by maintenance＠opensuse.org 05 Sep '18

05 Sep '18

openSUSE Recommended Update: Recommended update for KDE Plasma ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:2619-1 Rating: moderate References: #1105686 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for KDE Plasma to 5.12.6 contains a number of bug fixes (boo#1105686). Changes in breeze-gtk: - GTK scrollbar behavior to have warp turned off by default Changes in discover: - notifier may have listed more security updates than total updates - make it possible to launch installed applications Changes in kde-user-manager: - Enable anti-aliasing for user avatars Changes in khotkeys5: - Remove verbose debugging statement Changes in kinfocenter5: - Update kinfocenter docbook to 5 Changes in kscreen5: - Desktop scaling was applied twice in Scale Display preview Changes in kscreenlocker: - Minor translation updates Changes in ksysguard5: - Fix leak of pipe FDs in MD RAID code Changes in kwin5: - Do not save kwinrulesrc on every window opening/closing - Update seat's timestamp after waking up screen through double tap Changes in libksysguard5: - Center more column headings Changes in milou5: - Check changed file name before reloading configuration Changes in plasma-nm: - Unquote remote when importing OpenVPN connections Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-970=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libksysguard5-5.12.6-lp150.2.3.1 libksysguard5-debuginfo-5.12.6-lp150.2.3.1 libksysguard5-debugsource-5.12.6-lp150.2.3.1 libksysguard5-devel-5.12.6-lp150.2.3.1 libksysguard5-helper-5.12.6-lp150.2.3.1 libksysguard5-helper-debuginfo-5.12.6-lp150.2.3.1 - openSUSE Leap 15.0 (noarch): discover-lang-5.12.6-lp150.2.3.1 gtk2-metatheme-breeze-5.12.6-lp150.2.3.1 gtk3-metatheme-breeze-5.12.6-lp150.2.3.1 kde-user-manager-lang-5.12.6-lp150.2.3.1 khotkeys5-lang-5.12.6-lp150.2.3.1 kinfocenter5-lang-5.12.6-lp150.3.3.1 kscreen5-lang-5.12.6-lp150.2.3.1 kscreenlocker-lang-5.12.6-lp150.2.3.1 ksysguard5-lang-5.12.6-lp150.2.3.1 kwin5-lang-5.12.6-lp150.2.3.1 libksysguard5-lang-5.12.6-lp150.2.3.1 milou5-lang-5.12.6-lp150.2.3.1 plasma-nm5-lang-5.12.6-lp150.3.3.1 plasma5-addons-lang-5.12.6-lp150.2.3.1 plasma5-desktop-lang-5.12.6-lp150.3.3.1 plasma5-integration-plugin-lang-5.12.6-lp150.2.3.1 plasma5-session-5.12.6-lp150.2.3.1 plasma5-session-wayland-5.12.6-lp150.2.3.1 plasma5-workspace-lang-5.12.6-lp150.2.3.1 - openSUSE Leap 15.0 (x86_64): breeze-gtk-debugsource-5.12.6-lp150.2.3.1 discover-5.12.6-lp150.2.3.1 discover-debuginfo-5.12.6-lp150.2.3.1 discover-debugsource-5.12.6-lp150.2.3.1 discover-plasmoid-5.12.6-lp150.2.3.1 discover-plasmoid-debuginfo-5.12.6-lp150.2.3.1 kde-user-manager-5.12.6-lp150.2.3.1 kde-user-manager-debuginfo-5.12.6-lp150.2.3.1 kde-user-manager-debugsource-5.12.6-lp150.2.3.1 khotkeys5-5.12.6-lp150.2.3.1 khotkeys5-debuginfo-5.12.6-lp150.2.3.1 khotkeys5-debugsource-5.12.6-lp150.2.3.1 khotkeys5-devel-5.12.6-lp150.2.3.1 kinfocenter5-5.12.6-lp150.3.3.1 kinfocenter5-debuginfo-5.12.6-lp150.3.3.1 kinfocenter5-debugsource-5.12.6-lp150.3.3.1 kscreen5-5.12.6-lp150.2.3.1 kscreen5-debuginfo-5.12.6-lp150.2.3.1 kscreen5-debugsource-5.12.6-lp150.2.3.1 kscreenlocker-5.12.6-lp150.2.3.1 kscreenlocker-debuginfo-5.12.6-lp150.2.3.1 kscreenlocker-debugsource-5.12.6-lp150.2.3.1 kscreenlocker-devel-5.12.6-lp150.2.3.1 ksysguard5-5.12.6-lp150.2.3.1 ksysguard5-debuginfo-5.12.6-lp150.2.3.1 ksysguard5-debugsource-5.12.6-lp150.2.3.1 kwin5-5.12.6-lp150.2.3.1 kwin5-debuginfo-5.12.6-lp150.2.3.1 kwin5-debugsource-5.12.6-lp150.2.3.1 kwin5-devel-5.12.6-lp150.2.3.1 libKScreenLocker5-5.12.6-lp150.2.3.1 libKScreenLocker5-debuginfo-5.12.6-lp150.2.3.1 libksysguard5-32bit-5.12.6-lp150.2.3.1 libksysguard5-32bit-debuginfo-5.12.6-lp150.2.3.1 libksysguard5-devel-32bit-5.12.6-lp150.2.3.1 metatheme-breeze-common-5.12.6-lp150.2.3.1 metatheme-breeze-common-debuginfo-5.12.6-lp150.2.3.1 milou5-5.12.6-lp150.2.3.1 milou5-debuginfo-5.12.6-lp150.2.3.1 milou5-debugsource-5.12.6-lp150.2.3.1 plasma-nm5-5.12.6-lp150.3.3.1 plasma-nm5-debuginfo-5.12.6-lp150.3.3.1 plasma-nm5-debugsource-5.12.6-lp150.3.3.1 plasma-nm5-fortisslvpn-5.12.6-lp150.3.3.1 plasma-nm5-fortisslvpn-debuginfo-5.12.6-lp150.3.3.1 plasma-nm5-iodine-5.12.6-lp150.3.3.1 plasma-nm5-iodine-debuginfo-5.12.6-lp150.3.3.1 plasma-nm5-l2tp-5.12.6-lp150.3.3.1 plasma-nm5-l2tp-debuginfo-5.12.6-lp150.3.3.1 plasma-nm5-openconnect-5.12.6-lp150.3.3.1 plasma-nm5-openconnect-debuginfo-5.12.6-lp150.3.3.1 plasma-nm5-openswan-5.12.6-lp150.3.3.1 plasma-nm5-openswan-debuginfo-5.12.6-lp150.3.3.1 plasma-nm5-openvpn-5.12.6-lp150.3.3.1 plasma-nm5-openvpn-debuginfo-5.12.6-lp150.3.3.1 plasma-nm5-pptp-5.12.6-lp150.3.3.1 plasma-nm5-pptp-debuginfo-5.12.6-lp150.3.3.1 plasma-nm5-ssh-5.12.6-lp150.3.3.1 plasma-nm5-ssh-debuginfo-5.12.6-lp150.3.3.1 plasma-nm5-sstp-5.12.6-lp150.3.3.1 plasma-nm5-sstp-debuginfo-5.12.6-lp150.3.3.1 plasma-nm5-strongswan-5.12.6-lp150.3.3.1 plasma-nm5-strongswan-debuginfo-5.12.6-lp150.3.3.1 plasma-nm5-vpnc-5.12.6-lp150.3.3.1 plasma-nm5-vpnc-debuginfo-5.12.6-lp150.3.3.1 plasma5-addons-5.12.6-lp150.2.3.1 plasma5-addons-debuginfo-5.12.6-lp150.2.3.1 plasma5-addons-debugsource-5.12.6-lp150.2.3.1 plasma5-desktop-5.12.6-lp150.3.3.1 plasma5-desktop-debuginfo-5.12.6-lp150.3.3.1 plasma5-desktop-debugsource-5.12.6-lp150.3.3.1 plasma5-integration-debugsource-5.12.6-lp150.2.3.1 plasma5-integration-plugin-5.12.6-lp150.2.3.1 plasma5-integration-plugin-debuginfo-5.12.6-lp150.2.3.1 plasma5-workspace-5.12.6-lp150.2.3.1 plasma5-workspace-debuginfo-5.12.6-lp150.2.3.1 plasma5-workspace-debugsource-5.12.6-lp150.2.3.1 plasma5-workspace-devel-5.12.6-lp150.2.3.1 plasma5-workspace-libs-5.12.6-lp150.2.3.1 plasma5-workspace-libs-debuginfo-5.12.6-lp150.2.3.1 References: https://bugzilla.suse.com/1105686

1 0

openSUSE-RU-2018:2618-1: moderate: Recommended update for openvswitch
by maintenance＠opensuse.org 04 Sep '18

04 Sep '18

openSUSE Recommended Update: Recommended update for openvswitch ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:2618-1 Rating: moderate References: #1076284 #1094560 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for openvswitch provides the following fixes: - Add support for RedHat distributions. All SUSE macros are now conditional and the spec file has been adapted based on the upstream one. (fate#324537) - Fix documentation installation to make sure the testsuite runs properly. (bsc#1076284) - Bugfix: Call hostname after networking is up (bsc#1094560) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-968=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): openvswitch-2.7.0-16.1 openvswitch-debuginfo-2.7.0-16.1 openvswitch-debugsource-2.7.0-16.1 openvswitch-devel-2.7.0-16.1 openvswitch-ovn-central-2.7.0-16.1 openvswitch-ovn-central-debuginfo-2.7.0-16.1 openvswitch-ovn-common-2.7.0-16.1 openvswitch-ovn-common-debuginfo-2.7.0-16.1 openvswitch-ovn-docker-2.7.0-16.1 openvswitch-ovn-host-2.7.0-16.1 openvswitch-ovn-host-debuginfo-2.7.0-16.1 openvswitch-ovn-vtep-2.7.0-16.1 openvswitch-ovn-vtep-debuginfo-2.7.0-16.1 openvswitch-pki-2.7.0-16.1 openvswitch-test-2.7.0-16.1 openvswitch-test-debuginfo-2.7.0-16.1 openvswitch-vtep-2.7.0-16.1 openvswitch-vtep-debuginfo-2.7.0-16.1 python-openvswitch-2.7.0-16.1 python-openvswitch-test-2.7.0-16.1 References: https://bugzilla.suse.com/1076284 https://bugzilla.suse.com/1094560

1 0

openSUSE-RU-2018:2617-1: moderate: Recommended update for docker
by maintenance＠opensuse.org 04 Sep '18

04 Sep '18

openSUSE Recommended Update: Recommended update for docker ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:2617-1 Rating: moderate References: #1065609 #1073877 #1099277 #1100727 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for docker fixes the following issues: - Build the client binary with -buildmode=pie to fix issues on POWER. (bsc#1100727) - Fix an issue where changed AppArmor profiles don't actually get applied on Docker daemon reboot. (bsc#1099277) - Update to AppArmor patch so that signal mediation also works for signals between in-container processes. (bsc#1073877) - Do not log incorrect warnings when attempting to inject non-existent host files. (bsc#1065609) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-967=1 Package List: - openSUSE Leap 15.0 (noarch): docker-bash-completion-17.09.1_ce-lp150.5.3.1 docker-zsh-completion-17.09.1_ce-lp150.5.3.1 - openSUSE Leap 15.0 (x86_64): docker-17.09.1_ce-lp150.5.3.1 docker-debuginfo-17.09.1_ce-lp150.5.3.1 docker-debugsource-17.09.1_ce-lp150.5.3.1 docker-test-17.09.1_ce-lp150.5.3.1 docker-test-debuginfo-17.09.1_ce-lp150.5.3.1 References: https://bugzilla.suse.com/1065609 https://bugzilla.suse.com/1073877 https://bugzilla.suse.com/1099277 https://bugzilla.suse.com/1100727

1 0

openSUSE-RU-2018:2616-1: moderate: Recommended update for guake
by maintenance＠opensuse.org 04 Sep '18

04 Sep '18

openSUSE Recommended Update: Recommended update for guake ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:2616-1 Rating: moderate References: #1102963 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for guake fixes the following issues: - guake package did not specify the python3-gobject-Gdk dependency and would fail on start (boo#1102963) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-961=1 Package List: - openSUSE Leap 15.0 (noarch): guake-3.2.1-lp150.2.3.1 References: https://bugzilla.suse.com/1102963

1 0