September 2018 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2018:2671-1: moderate: Recommended update for python-botocore
by maintenance＠opensuse.org 08 Sep '18

08 Sep '18

openSUSE Recommended Update: Recommended update for python-botocore ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:2671-1 Rating: moderate References: #1066528 #1075263 #1088310 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for python-botocore provides version 1.10.57 and brings various fixes and improvements. It provides support for new APIs and fixes an issue with missing regions when calling get_available_regions(). For a detailed description of all changes please refer to the changelog. Additionally, the following packages have been updated: aws-cli from 1.11.104 to 1.15.40 python-boto3 from 1.4.4 to 1.7.42 python-s3transfer from 0.1.10 to 0.1.13 This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-980=1 Package List: - openSUSE Leap 42.3 (noarch): aws-cli-1.15.40-23.1 python-boto3-1.7.42-15.1 python-botocore-1.10.57-15.1 python-s3transfer-0.1.13-12.1 References: https://bugzilla.suse.com/1066528 https://bugzilla.suse.com/1075263 https://bugzilla.suse.com/1088310

1 0

openSUSE-RU-2018:2670-1: moderate: Recommended update for libvirt
by maintenance＠opensuse.org 08 Sep '18

08 Sep '18

openSUSE Recommended Update: Recommended update for libvirt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:2670-1 Rating: moderate References: #1094325 #1094480 #1094725 #1095556 #959329 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: This update for libvirt fixes the following issues: - Enable virsh blockresize for XEN guests (fate#325467, bsc#1094325, bsc#1094725) - Add SUSE path to OVMF and AAVMF images (bsc#1095556) - Fix leaking of logfile file descriptors (bsc#1094480) - Fixes an issue where the state of a virtual machine was incorrect (bsc#959329) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-986=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libvirt-4.0.0-lp150.7.6.1 libvirt-admin-4.0.0-lp150.7.6.1 libvirt-admin-debuginfo-4.0.0-lp150.7.6.1 libvirt-client-4.0.0-lp150.7.6.1 libvirt-client-debuginfo-4.0.0-lp150.7.6.1 libvirt-daemon-4.0.0-lp150.7.6.1 libvirt-daemon-config-network-4.0.0-lp150.7.6.1 libvirt-daemon-config-nwfilter-4.0.0-lp150.7.6.1 libvirt-daemon-debuginfo-4.0.0-lp150.7.6.1 libvirt-daemon-driver-interface-4.0.0-lp150.7.6.1 libvirt-daemon-driver-interface-debuginfo-4.0.0-lp150.7.6.1 libvirt-daemon-driver-lxc-4.0.0-lp150.7.6.1 libvirt-daemon-driver-lxc-debuginfo-4.0.0-lp150.7.6.1 libvirt-daemon-driver-network-4.0.0-lp150.7.6.1 libvirt-daemon-driver-network-debuginfo-4.0.0-lp150.7.6.1 libvirt-daemon-driver-nodedev-4.0.0-lp150.7.6.1 libvirt-daemon-driver-nodedev-debuginfo-4.0.0-lp150.7.6.1 libvirt-daemon-driver-nwfilter-4.0.0-lp150.7.6.1 libvirt-daemon-driver-nwfilter-debuginfo-4.0.0-lp150.7.6.1 libvirt-daemon-driver-qemu-4.0.0-lp150.7.6.1 libvirt-daemon-driver-qemu-debuginfo-4.0.0-lp150.7.6.1 libvirt-daemon-driver-secret-4.0.0-lp150.7.6.1 libvirt-daemon-driver-secret-debuginfo-4.0.0-lp150.7.6.1 libvirt-daemon-driver-storage-4.0.0-lp150.7.6.1 libvirt-daemon-driver-storage-core-4.0.0-lp150.7.6.1 libvirt-daemon-driver-storage-core-debuginfo-4.0.0-lp150.7.6.1 libvirt-daemon-driver-storage-disk-4.0.0-lp150.7.6.1 libvirt-daemon-driver-storage-disk-debuginfo-4.0.0-lp150.7.6.1 libvirt-daemon-driver-storage-iscsi-4.0.0-lp150.7.6.1 libvirt-daemon-driver-storage-iscsi-debuginfo-4.0.0-lp150.7.6.1 libvirt-daemon-driver-storage-logical-4.0.0-lp150.7.6.1 libvirt-daemon-driver-storage-logical-debuginfo-4.0.0-lp150.7.6.1 libvirt-daemon-driver-storage-mpath-4.0.0-lp150.7.6.1 libvirt-daemon-driver-storage-mpath-debuginfo-4.0.0-lp150.7.6.1 libvirt-daemon-driver-storage-scsi-4.0.0-lp150.7.6.1 libvirt-daemon-driver-storage-scsi-debuginfo-4.0.0-lp150.7.6.1 libvirt-daemon-driver-uml-4.0.0-lp150.7.6.1 libvirt-daemon-driver-uml-debuginfo-4.0.0-lp150.7.6.1 libvirt-daemon-driver-vbox-4.0.0-lp150.7.6.1 libvirt-daemon-driver-vbox-debuginfo-4.0.0-lp150.7.6.1 libvirt-daemon-hooks-4.0.0-lp150.7.6.1 libvirt-daemon-lxc-4.0.0-lp150.7.6.1 libvirt-daemon-qemu-4.0.0-lp150.7.6.1 libvirt-daemon-uml-4.0.0-lp150.7.6.1 libvirt-daemon-vbox-4.0.0-lp150.7.6.1 libvirt-debugsource-4.0.0-lp150.7.6.1 libvirt-devel-4.0.0-lp150.7.6.1 libvirt-doc-4.0.0-lp150.7.6.1 libvirt-libs-4.0.0-lp150.7.6.1 libvirt-libs-debuginfo-4.0.0-lp150.7.6.1 libvirt-lock-sanlock-4.0.0-lp150.7.6.1 libvirt-lock-sanlock-debuginfo-4.0.0-lp150.7.6.1 libvirt-nss-4.0.0-lp150.7.6.1 libvirt-nss-debuginfo-4.0.0-lp150.7.6.1 wireshark-plugin-libvirt-4.0.0-lp150.7.6.1 wireshark-plugin-libvirt-debuginfo-4.0.0-lp150.7.6.1 - openSUSE Leap 15.0 (x86_64): libvirt-client-32bit-debuginfo-4.0.0-lp150.7.6.1 libvirt-daemon-driver-libxl-4.0.0-lp150.7.6.1 libvirt-daemon-driver-libxl-debuginfo-4.0.0-lp150.7.6.1 libvirt-daemon-driver-storage-rbd-4.0.0-lp150.7.6.1 libvirt-daemon-driver-storage-rbd-debuginfo-4.0.0-lp150.7.6.1 libvirt-daemon-xen-4.0.0-lp150.7.6.1 libvirt-devel-32bit-4.0.0-lp150.7.6.1 References: https://bugzilla.suse.com/1094325 https://bugzilla.suse.com/1094480 https://bugzilla.suse.com/1094725 https://bugzilla.suse.com/1095556 https://bugzilla.suse.com/959329

1 0

openSUSE-RU-2018:2669-1: moderate: Recommended update for collectl
by maintenance＠opensuse.org 08 Sep '18

08 Sep '18

openSUSE Recommended Update: Recommended update for collectl ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:2669-1 Rating: moderate References: #1106366 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for collectl fixes the following issues: - The collectl daemon did not start reliably (boo#1106366) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2018-978=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): collectl-4.1.3-5.1 References: https://bugzilla.suse.com/1106366

1 0

openSUSE-RU-2018:2668-1: moderate: Recommended update for yast2-network
by maintenance＠opensuse.org 08 Sep '18

08 Sep '18

openSUSE Recommended Update: Recommended update for yast2-network ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:2668-1 Rating: moderate References: #1095761 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-network provides the following fix: - Activate s390 network devices before applying udev naming rules, avoiding the "Invalid key/value pair in /etc/udev/rules.d/70-persistent-net.rules" error. (bsc#1095761) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-984=1 Package List: - openSUSE Leap 42.3 (noarch): yast2-network-3.2.53-15.1 References: https://bugzilla.suse.com/1095761

1 0

openSUSE-SU-2018:2667-1: moderate: Security update for nodejs4
by opensuse-security＠opensuse.org 08 Sep '18

08 Sep '18

openSUSE Security Update: Security update for nodejs4 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2667-1 Rating: moderate References: #1082318 #1091764 #1097158 #1097748 #1105019 Cross-References: CVE-2018-0732 CVE-2018-12115 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves two vulnerabilities and has three fixes is now available. Description: This update for nodejs4 fixes the following issues: Security issues fixed: - CVE-2018-12115: Fixed an out-of-bounds memory write in Buffer that could be used to write to memory outside of a Buffer's memory space buffer (bsc#1105019) - Upgrade to OpenSSL 1.0.2p, which fixed: - CVE-2018-0732: Client denial-of-service due to large DH parameter (bsc#1097158) - ECDSA key extraction via local side-channel Other changes made: - Recommend same major version npm package (bsc#1097748) - Use absolute paths in executable shebang lines - Fix building with ICU61.1 (bsc#1091764) - Install license with %license, not %doc (bsc#1082318) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-991=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): nodejs4-4.9.1-17.1 nodejs4-debuginfo-4.9.1-17.1 nodejs4-debugsource-4.9.1-17.1 nodejs4-devel-4.9.1-17.1 npm4-4.9.1-17.1 - openSUSE Leap 42.3 (noarch): nodejs4-docs-4.9.1-17.1 References: https://www.suse.com/security/cve/CVE-2018-0732.html https://www.suse.com/security/cve/CVE-2018-12115.html https://bugzilla.suse.com/1082318 https://bugzilla.suse.com/1091764 https://bugzilla.suse.com/1097158 https://bugzilla.suse.com/1097748 https://bugzilla.suse.com/1105019

1 0

openSUSE-RU-2018:2666-1: moderate: Recommended update for conman
by maintenance＠opensuse.org 08 Sep '18

08 Sep '18

openSUSE Recommended Update: Recommended update for conman ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:2666-1 Rating: moderate References: #1101647 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for conman fixes the following issues: - Allowed IPMI defaults to be overridden via libipmiconsole.conf. - Updated recognized strings for IPMI workaround-flags. (FATE#326641) - Make sure conmand connects to a newly created UNIX socket with minimal delay. The implementation uses inotify, however this triggers when the other side bind()s to the socket, however a connection is not possible until the other side calls listen(). Thus if the connection fails, reset the poll() timeout to return to connect() as soon as possible (bsc#1101647). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-985=1 Package List: - openSUSE Leap 15.0 (x86_64): conman-0.2.9-lp150.5.3.1 conman-debuginfo-0.2.9-lp150.5.3.1 conman-debugsource-0.2.9-lp150.5.3.1 References: https://bugzilla.suse.com/1101647

1 0

openSUSE-RU-2018:2665-1: moderate: Recommended update for resource-agents
by maintenance＠opensuse.org 08 Sep '18

08 Sep '18

openSUSE Recommended Update: Recommended update for resource-agents ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:2665-1 Rating: moderate References: #1092384 #1096744 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for resource-agents provides the following fixes: - Implements the reload operation on the SAPInstance RA. (bsc#1096744) - Include the enq_server and enq_replicator on the default service list to be monitored for the new S/4 HANA Enq. Services 2. (bsc#1092384) - Improved SAPInstance START profile detection, avoiding the need of setting the START_PROFILE parameter. (bsc#1096744) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-988=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): ldirectord-4.1.1+git0.5a1edf2b-lp150.2.3.1 resource-agents-4.1.1+git0.5a1edf2b-lp150.2.3.1 resource-agents-debuginfo-4.1.1+git0.5a1edf2b-lp150.2.3.1 resource-agents-debugsource-4.1.1+git0.5a1edf2b-lp150.2.3.1 - openSUSE Leap 15.0 (noarch): monitoring-plugins-metadata-4.1.1+git0.5a1edf2b-lp150.2.3.1 References: https://bugzilla.suse.com/1092384 https://bugzilla.suse.com/1096744

1 0

openSUSE-SU-2018:2664-1: important: Security update for chromium
by opensuse-security＠opensuse.org 08 Sep '18

08 Sep '18

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2664-1 Rating: important References: #1106341 #1107235 Cross-References: CVE-2017-15430 CVE-2018-16065 CVE-2018-16066 CVE-2018-16067 CVE-2018-16068 CVE-2018-16069 CVE-2018-16070 CVE-2018-16071 CVE-2018-16073 CVE-2018-16074 CVE-2018-16075 CVE-2018-16076 CVE-2018-16077 CVE-2018-16078 CVE-2018-16079 CVE-2018-16080 CVE-2018-16081 CVE-2018-16082 CVE-2018-16083 CVE-2018-16084 CVE-2018-16085 CVE-2018-16086 CVE-2018-16087 CVE-2018-16088 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes 24 vulnerabilities is now available. Description: This update for Chromium to version 69.0.3497.81 fixes multiple issues. Security issues fixed (boo#1107235): - CVE-2018-16065: Out of bounds write in V8 - CVE-2018-16066:Out of bounds read in Blink - CVE-2018-16067: Out of bounds read in WebAudio - CVE-2018-16068: Out of bounds write in Mojo - CVE-2018-16069:Out of bounds read in SwiftShader - CVE-2018-16070: Integer overflow in Skia - CVE-2018-16071: Use after free in WebRTC - CVE-2018-16073: Site Isolation bypass after tab restore - CVE-2018-16074: Site Isolation bypass using Blob URLS - Out of bounds read in Little-CMS - CVE-2018-16075: Local file access in Blink - CVE-2018-16076: Out of bounds read in PDFium - CVE-2018-16077: Content security policy bypass in Blink - CVE-2018-16078: Credit card information leak in Autofill - CVE-2018-16079: URL spoof in permission dialogs - CVE-2018-16080: URL spoof in full screen mode - CVE-2018-16081: Local file access in DevTools - CVE-2018-16082: Stack buffer overflow in SwiftShader - CVE-2018-16083: Out of bounds read in WebRTC - CVE-2018-16084: User confirmation bypass in external protocol handling - CVE-2018-16085: Use after free in Memory Instrumentation - CVE-2017-15430: Unsafe navigation in Chromecast (boo#1106341) - CVE-2018-16086: Script injection in New Tab Page - CVE-2018-16087: Multiple download restriction bypass - CVE-2018-16088: User gesture requirement bypass The re2 regular expression library was updated to the current version 2018-09-01. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-979=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-979=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libre2-0-20180901-18.1 libre2-0-debuginfo-20180901-18.1 re2-debugsource-20180901-18.1 re2-devel-20180901-18.1 - openSUSE Leap 42.3 (x86_64): chromedriver-69.0.3497.81-168.1 chromedriver-debuginfo-69.0.3497.81-168.1 chromium-69.0.3497.81-168.1 chromium-debuginfo-69.0.3497.81-168.1 chromium-debugsource-69.0.3497.81-168.1 libre2-0-32bit-20180901-18.1 libre2-0-debuginfo-32bit-20180901-18.1 - openSUSE Leap 15.0 (i586 x86_64): libre2-0-20180901-lp150.7.3.1 libre2-0-debuginfo-20180901-lp150.7.3.1 re2-debugsource-20180901-lp150.7.3.1 re2-devel-20180901-lp150.7.3.1 - openSUSE Leap 15.0 (x86_64): chromedriver-69.0.3497.81-lp150.2.10.1 chromedriver-debuginfo-69.0.3497.81-lp150.2.10.1 chromium-69.0.3497.81-lp150.2.10.1 chromium-debuginfo-69.0.3497.81-lp150.2.10.1 chromium-debugsource-69.0.3497.81-lp150.2.10.1 libre2-0-32bit-20180901-lp150.7.3.1 libre2-0-32bit-debuginfo-20180901-lp150.7.3.1 References: https://www.suse.com/security/cve/CVE-2017-15430.html https://www.suse.com/security/cve/CVE-2018-16065.html https://www.suse.com/security/cve/CVE-2018-16066.html https://www.suse.com/security/cve/CVE-2018-16067.html https://www.suse.com/security/cve/CVE-2018-16068.html https://www.suse.com/security/cve/CVE-2018-16069.html https://www.suse.com/security/cve/CVE-2018-16070.html https://www.suse.com/security/cve/CVE-2018-16071.html https://www.suse.com/security/cve/CVE-2018-16073.html https://www.suse.com/security/cve/CVE-2018-16074.html https://www.suse.com/security/cve/CVE-2018-16075.html https://www.suse.com/security/cve/CVE-2018-16076.html https://www.suse.com/security/cve/CVE-2018-16077.html https://www.suse.com/security/cve/CVE-2018-16078.html https://www.suse.com/security/cve/CVE-2018-16079.html https://www.suse.com/security/cve/CVE-2018-16080.html https://www.suse.com/security/cve/CVE-2018-16081.html https://www.suse.com/security/cve/CVE-2018-16082.html https://www.suse.com/security/cve/CVE-2018-16083.html https://www.suse.com/security/cve/CVE-2018-16084.html https://www.suse.com/security/cve/CVE-2018-16085.html https://www.suse.com/security/cve/CVE-2018-16086.html https://www.suse.com/security/cve/CVE-2018-16087.html https://www.suse.com/security/cve/CVE-2018-16088.html https://bugzilla.suse.com/1106341 https://bugzilla.suse.com/1107235

1 0

openSUSE-RU-2018:2663-1: moderate: Recommended update for vhostmd
by maintenance＠opensuse.org 08 Sep '18

08 Sep '18

openSUSE Recommended Update: Recommended update for vhostmd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:2663-1 Rating: moderate References: #1090769 #1098804 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for vhostmd fixes the following issues: - Reconnect to libvirtd in case of a SIGPIPE is raised (bsc#1098804) - vhostmd.service: Fix typo and move Documentation from [Service] to [Unit] section (bsc#1090769) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-977=1 Package List: - openSUSE Leap 15.0 (x86_64): libmetrics-devel-0.4-lp150.2.3.1 libmetrics0-0.4-lp150.2.3.1 libmetrics0-debuginfo-0.4-lp150.2.3.1 vhostmd-0.4-lp150.2.3.1 vhostmd-debuginfo-0.4-lp150.2.3.1 vhostmd-debugsource-0.4-lp150.2.3.1 vm-dump-metrics-0.4-lp150.2.3.1 vm-dump-metrics-debuginfo-0.4-lp150.2.3.1 References: https://bugzilla.suse.com/1090769 https://bugzilla.suse.com/1098804

1 0

openSUSE-RU-2018:2662-1: moderate: Recommended update for vncmanager-controller
by maintenance＠opensuse.org 08 Sep '18

08 Sep '18

openSUSE Recommended Update: Recommended update for vncmanager-controller ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:2662-1 Rating: moderate References: #1102080 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for vncmanager-controller fixes the following issues: - Fixes loading of the gnome shell extensions (bsc#1102080) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-989=1 Package List: - openSUSE Leap 15.0 (x86_64): vncmanager-controller-1.0.0-lp150.2.3.1 vncmanager-controller-debuginfo-1.0.0-lp150.2.3.1 vncmanager-controller-debugsource-1.0.0-lp150.2.3.1 vncmanager-controller-gnome-1.0.0-lp150.2.3.1 References: https://bugzilla.suse.com/1102080

1 0