January 2019 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2019:0108-1: important: Security update for webkit2gtk3
by opensuse-security＠opensuse.org 31 Jan '19

31 Jan '19

openSUSE Security Update: Security update for webkit2gtk3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0108-1 Rating: important References: #1119553 #1119554 #1119555 #1119556 #1119557 #1119558 Cross-References: CVE-2018-4437 CVE-2018-4438 CVE-2018-4441 CVE-2018-4442 CVE-2018-4443 CVE-2018-4464 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update for webkit2gtk3 to version 2.22.5 fixes the following issues: Security issues fixed: - CVE-2018-4438: Fixed a logic issue which lead to memory corruption (bsc#1119554) - CVE-2018-4437, CVE-2018-4441, CVE-2018-4442, CVE-2018-4443, CVE-2018-4464: Fixed multiple memory corruption issues with improved memory handling (bsc#1119553, bsc#1119555, bsc#1119556, bsc#1119557, bsc#1119558) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-108=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libjavascriptcoregtk-4_0-18-2.22.5-18.1 libjavascriptcoregtk-4_0-18-debuginfo-2.22.5-18.1 libwebkit2gtk-4_0-37-2.22.5-18.1 libwebkit2gtk-4_0-37-debuginfo-2.22.5-18.1 typelib-1_0-JavaScriptCore-4_0-2.22.5-18.1 typelib-1_0-WebKit2-4_0-2.22.5-18.1 typelib-1_0-WebKit2WebExtension-4_0-2.22.5-18.1 webkit-jsc-4-2.22.5-18.1 webkit-jsc-4-debuginfo-2.22.5-18.1 webkit2gtk-4_0-injected-bundles-2.22.5-18.1 webkit2gtk-4_0-injected-bundles-debuginfo-2.22.5-18.1 webkit2gtk3-debugsource-2.22.5-18.1 webkit2gtk3-devel-2.22.5-18.1 webkit2gtk3-minibrowser-2.22.5-18.1 webkit2gtk3-minibrowser-debuginfo-2.22.5-18.1 webkit2gtk3-plugin-process-gtk2-2.22.5-18.1 webkit2gtk3-plugin-process-gtk2-debuginfo-2.22.5-18.1 - openSUSE Leap 42.3 (noarch): libwebkit2gtk3-lang-2.22.5-18.1 - openSUSE Leap 42.3 (x86_64): libjavascriptcoregtk-4_0-18-32bit-2.22.5-18.1 libjavascriptcoregtk-4_0-18-debuginfo-32bit-2.22.5-18.1 libwebkit2gtk-4_0-37-32bit-2.22.5-18.1 libwebkit2gtk-4_0-37-debuginfo-32bit-2.22.5-18.1 References: https://www.suse.com/security/cve/CVE-2018-4437.html https://www.suse.com/security/cve/CVE-2018-4438.html https://www.suse.com/security/cve/CVE-2018-4441.html https://www.suse.com/security/cve/CVE-2018-4442.html https://www.suse.com/security/cve/CVE-2018-4443.html https://www.suse.com/security/cve/CVE-2018-4464.html https://bugzilla.suse.com/1119553 https://bugzilla.suse.com/1119554 https://bugzilla.suse.com/1119555 https://bugzilla.suse.com/1119556 https://bugzilla.suse.com/1119557 https://bugzilla.suse.com/1119558

1 0

openSUSE-SU-2019:0107-1: important: Security update for pdns-recursor
by opensuse-security＠opensuse.org 31 Jan '19

31 Jan '19

openSUSE Security Update: Security update for pdns-recursor ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0107-1 Rating: important References: #1121889 Cross-References: CVE-2019-3807 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for pdns-recursor fixes the following issues: - CVE-2019-3807: Fixed insufficient validation of DNSSEC signatures (boo#1121889) This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-107=1 Package List: - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): pdns-recursor-4.1.2-bp150.2.6.1 References: https://www.suse.com/security/cve/CVE-2019-3807.html https://bugzilla.suse.com/1121889

1 0

openSUSE-RU-2019:0105-1: moderate: Recommended update for ca-certificates-mozilla
by maintenance＠opensuse.org 31 Jan '19

31 Jan '19

openSUSE Recommended Update: Recommended update for ca-certificates-mozilla ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0105-1 Rating: moderate References: #1121446 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ca-certificates-mozilla fixes the following issues: The package was updated to the 2.30 version of the Mozilla NSS Certificate store. (bsc#1121446) Removed Root CAs: - AC Raiz Certicamara S.A. - Certplus Root CA G1 - Certplus Root CA G2 - OpenTrust Root CA G1 - OpenTrust Root CA G2 - OpenTrust Root CA G3 - Visa eCommerce Root Added Root CAs: - Certigna Root CA (email and server auth) - GTS Root R1 (server auth) - GTS Root R2 (server auth) - GTS Root R3 (server auth) - GTS Root R4 (server auth) - OISTE WISeKey Global Root GC CA (email and server auth) - UCA Extended Validation Root (server auth) - UCA Global G2 Root (email and server auth) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-105=1 Package List: - openSUSE Leap 42.3 (noarch): ca-certificates-mozilla-2.30-21.1 References: https://bugzilla.suse.com/1121446

1 0

openSUSE-SU-2019:0103-1: important: Security update for ghostscript
by opensuse-security＠opensuse.org 31 Jan '19

31 Jan '19

openSUSE Security Update: Security update for ghostscript ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0103-1 Rating: important References: #1122319 Cross-References: CVE-2019-6116 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for ghostscript to version 9.26a fixes the following issues: Security issue fixed: - CVE-2019-6116: subroutines within pseudo-operators must themselves be pseudo-operators (bsc#1122319) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-103=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): ghostscript-9.26a-14.15.1 ghostscript-debuginfo-9.26a-14.15.1 ghostscript-debugsource-9.26a-14.15.1 ghostscript-devel-9.26a-14.15.1 ghostscript-mini-9.26a-14.15.1 ghostscript-mini-debuginfo-9.26a-14.15.1 ghostscript-mini-debugsource-9.26a-14.15.1 ghostscript-mini-devel-9.26a-14.15.1 ghostscript-x11-9.26a-14.15.1 ghostscript-x11-debuginfo-9.26a-14.15.1 libspectre-debugsource-0.2.7-17.7.1 libspectre-devel-0.2.7-17.7.1 libspectre1-0.2.7-17.7.1 libspectre1-debuginfo-0.2.7-17.7.1 References: https://www.suse.com/security/cve/CVE-2019-6116.html https://bugzilla.suse.com/1122319

1 0

openSUSE-SU-2019:0104-1: important: Security update for ghostscript
by opensuse-security＠opensuse.org 31 Jan '19

31 Jan '19

openSUSE Security Update: Security update for ghostscript ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0104-1 Rating: important References: #1122319 Cross-References: CVE-2019-6116 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for ghostscript version 9.26a fixes the following issues: Security issue fixed: - CVE-2019-6116: subroutines within pseudo-operators must themselves be pseudo-operators (bsc#1122319) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-104=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): ghostscript-9.26a-lp150.2.12.1 ghostscript-debuginfo-9.26a-lp150.2.12.1 ghostscript-debugsource-9.26a-lp150.2.12.1 ghostscript-devel-9.26a-lp150.2.12.1 ghostscript-mini-9.26a-lp150.2.12.1 ghostscript-mini-debuginfo-9.26a-lp150.2.12.1 ghostscript-mini-debugsource-9.26a-lp150.2.12.1 ghostscript-mini-devel-9.26a-lp150.2.12.1 ghostscript-x11-9.26a-lp150.2.12.1 ghostscript-x11-debuginfo-9.26a-lp150.2.12.1 - openSUSE Leap 15.0 (x86_64): libspectre-debugsource-0.2.8-lp150.2.9.2 libspectre-devel-0.2.8-lp150.2.9.2 libspectre1-0.2.8-lp150.2.9.2 libspectre1-debuginfo-0.2.8-lp150.2.9.2 References: https://www.suse.com/security/cve/CVE-2019-6116.html https://bugzilla.suse.com/1122319

1 0

openSUSE-RU-2019:0106-1: moderate: Recommended update for ca-certificates-mozilla
by maintenance＠opensuse.org 31 Jan '19

31 Jan '19

openSUSE Recommended Update: Recommended update for ca-certificates-mozilla ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0106-1 Rating: moderate References: #1121446 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ca-certificates-mozilla fixes the following issues: The package was updated to the 2.30 version of the Mozilla NSS Certificate store. (bsc#1121446) Removed Root CAs: - AC Raiz Certicamara S.A. - Certplus Root CA G1 - Certplus Root CA G2 - OpenTrust Root CA G1 - OpenTrust Root CA G2 - OpenTrust Root CA G3 - Visa eCommerce Root Added Root CAs: - Certigna Root CA (email and server auth) - GTS Root R1 (server auth) - GTS Root R2 (server auth) - GTS Root R3 (server auth) - GTS Root R4 (server auth) - OISTE WISeKey Global Root GC CA (email and server auth) - UCA Extended Validation Root (server auth) - UCA Global G2 Root (email and server auth) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-106=1 Package List: - openSUSE Leap 15.0 (noarch): ca-certificates-mozilla-2.30-lp150.3.9.1 References: https://bugzilla.suse.com/1121446

1 0

openSUSE-RU-2019:0102-1: moderate: Recommended update for polkit-default-privs
by maintenance＠opensuse.org 29 Jan '19

29 Jan '19

openSUSE Recommended Update: Recommended update for polkit-default-privs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0102-1 Rating: moderate References: #1119394 #984817 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for polkit-default-privs fixes the following issues: - Backport of additional flatpak rule (bsc#1119394, bsc#984817) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-102=1 Package List: - openSUSE Leap 15.0 (noarch): polkit-default-privs-13.2-lp150.8.12.1 References: https://bugzilla.suse.com/1119394 https://bugzilla.suse.com/984817

1 0

openSUSE-RU-2019:0101-1: important: Recommended update for ncurses
by maintenance＠opensuse.org 29 Jan '19

29 Jan '19

openSUSE Recommended Update: Recommended update for ncurses ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0101-1 Rating: important References: #1121450 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ncurses fixes the following issues: - ncurses applications freezing (bsc#1121450) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-101=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libncurses5-5.9-70.1 libncurses5-debuginfo-5.9-70.1 libncurses6-5.9-70.1 libncurses6-debuginfo-5.9-70.1 ncurses-debugsource-5.9-70.1 ncurses-devel-5.9-70.1 ncurses-devel-debuginfo-5.9-70.1 ncurses-utils-5.9-70.1 ncurses-utils-debuginfo-5.9-70.1 tack-5.9-70.1 tack-debuginfo-5.9-70.1 terminfo-5.9-70.1 terminfo-base-5.9-70.1 - openSUSE Leap 42.3 (x86_64): libncurses5-32bit-5.9-70.1 libncurses5-debuginfo-32bit-5.9-70.1 libncurses6-32bit-5.9-70.1 libncurses6-debuginfo-32bit-5.9-70.1 ncurses-devel-32bit-5.9-70.1 ncurses-devel-debuginfo-32bit-5.9-70.1 References: https://bugzilla.suse.com/1121450

1 0

openSUSE-SU-2019:0096-1: important: Security update for freerdp
by opensuse-security＠opensuse.org 29 Jan '19

29 Jan '19

openSUSE Security Update: Security update for freerdp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0096-1 Rating: important References: #1085416 #1087240 #1104918 #1116708 #1117963 #1117964 #1117965 #1117966 #1117967 #1120507 Cross-References: CVE-2018-0886 CVE-2018-1000852 CVE-2018-8784 CVE-2018-8785 CVE-2018-8786 CVE-2018-8787 CVE-2018-8788 CVE-2018-8789 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves 8 vulnerabilities and has two fixes is now available. Description: This update for freerdp fixes the following issues: Security issues fixed: - CVE-2018-0886: Fix a remote code execution vulnerability (CredSSP) (bsc#1085416, bsc#1087240, bsc#1104918) - CVE-2018-8789: Fix several denial of service vulnerabilities in the in the NTLM Authentication module (bsc#1117965) - CVE-2018-8785: Fix a potential remote code execution vulnerability in the zgfx_decompress function (bsc#1117967) - CVE-2018-8786: Fix a potential remote code execution vulnerability in the update_read_bitmap_update function (bsc#1117966) - CVE-2018-8787: Fix a potential remote code execution vulnerability in the gdi_Bitmap_Decompress function (bsc#1117964) - CVE-2018-8788: Fix a potential remote code execution vulnerability in the nsc_rle_decode function (bsc#1117963) - CVE-2018-8784: Fix a potential remote code execution vulnerability in the zgfx_decompress_segment function (bsc#1116708) - CVE-2018-1000852: Fixed a remote memory access in the drdynvc_process_capability_request function (bsc#1120507) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-96=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): freerdp-2.0.0~git.1463131968.4e66df7-13.1 freerdp-debuginfo-2.0.0~git.1463131968.4e66df7-13.1 freerdp-debugsource-2.0.0~git.1463131968.4e66df7-13.1 freerdp-devel-2.0.0~git.1463131968.4e66df7-13.1 libfreerdp2-2.0.0~git.1463131968.4e66df7-13.1 libfreerdp2-debuginfo-2.0.0~git.1463131968.4e66df7-13.1 References: https://www.suse.com/security/cve/CVE-2018-0886.html https://www.suse.com/security/cve/CVE-2018-1000852.html https://www.suse.com/security/cve/CVE-2018-8784.html https://www.suse.com/security/cve/CVE-2018-8785.html https://www.suse.com/security/cve/CVE-2018-8786.html https://www.suse.com/security/cve/CVE-2018-8787.html https://www.suse.com/security/cve/CVE-2018-8788.html https://www.suse.com/security/cve/CVE-2018-8789.html https://bugzilla.suse.com/1085416 https://bugzilla.suse.com/1087240 https://bugzilla.suse.com/1104918 https://bugzilla.suse.com/1116708 https://bugzilla.suse.com/1117963 https://bugzilla.suse.com/1117964 https://bugzilla.suse.com/1117965 https://bugzilla.suse.com/1117966 https://bugzilla.suse.com/1117967 https://bugzilla.suse.com/1120507

1 0

openSUSE-SU-2019:0094-1: moderate: Security update for libraw
by opensuse-security＠opensuse.org 29 Jan '19

29 Jan '19

openSUSE Security Update: Security update for libraw ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0094-1 Rating: moderate References: #1120498 #1120499 #1120500 #1120515 #1120516 #1120517 #1120519 Cross-References: CVE-2018-20337 CVE-2018-20363 CVE-2018-20364 CVE-2018-20365 CVE-2018-5817 CVE-2018-5818 CVE-2018-5819 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: This update for libraw fixes the following issues: Security issues fixed: - CVE-2018-20337: Fixed a stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp (bsc#1120519) - CVE-2018-20365: Fixed a heap-based buffer overflow in the raw2image function of libraw_cxx.cpp (bsc#1120500) - CVE-2018-20364: Fixed a NULL pointer dereference in the copy_bayer function of libraw_cxx.cpp (bsc#1120499) - CVE-2018-20363: Fixed a NULL pointer dereference in the raw2image function of libraw_cxx.cpp (bsc#1120498) - CVE-2018-5817: Fixed an infinite loop in the unpacked_load_raw function of dcraw_common.cpp (bsc#1120515) - CVE-2018-5818: Fixed an infinite loop in the parse_rollei function of dcraw_common.cpp (bsc#1120516) - CVE-2018-5819: Fixed a denial of service in the parse_sinar_ia function of dcraw_common.cpp (bsc#1120517) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-94=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libraw-debuginfo-0.18.9-lp150.2.6.1 libraw-debugsource-0.18.9-lp150.2.6.1 libraw-devel-0.18.9-lp150.2.6.1 libraw-devel-static-0.18.9-lp150.2.6.1 libraw-tools-0.18.9-lp150.2.6.1 libraw-tools-debuginfo-0.18.9-lp150.2.6.1 libraw16-0.18.9-lp150.2.6.1 libraw16-debuginfo-0.18.9-lp150.2.6.1 References: https://www.suse.com/security/cve/CVE-2018-20337.html https://www.suse.com/security/cve/CVE-2018-20363.html https://www.suse.com/security/cve/CVE-2018-20364.html https://www.suse.com/security/cve/CVE-2018-20365.html https://www.suse.com/security/cve/CVE-2018-5817.html https://www.suse.com/security/cve/CVE-2018-5818.html https://www.suse.com/security/cve/CVE-2018-5819.html https://bugzilla.suse.com/1120498 https://bugzilla.suse.com/1120499 https://bugzilla.suse.com/1120500 https://bugzilla.suse.com/1120515 https://bugzilla.suse.com/1120516 https://bugzilla.suse.com/1120517 https://bugzilla.suse.com/1120519

1 0

openSUSE-SU-2019:0100-1: important: Security update for pdns-recursor
by opensuse-security＠opensuse.org 29 Jan '19

29 Jan '19

openSUSE Security Update: Security update for pdns-recursor ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0100-1 Rating: important References: #1121889 Cross-References: CVE-2019-3807 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for pdns-recursor fixes the following issues: - CVE-2019-3807: Fixed insufficient validation of DNSSEC signatures (boo#1121889) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-100=1 Package List: - openSUSE Leap 15.0 (x86_64): pdns-recursor-4.1.2-lp150.2.6.1 pdns-recursor-debuginfo-4.1.2-lp150.2.6.1 pdns-recursor-debugsource-4.1.2-lp150.2.6.1 References: https://www.suse.com/security/cve/CVE-2019-3807.html https://bugzilla.suse.com/1121889

1 0

openSUSE-OU-2019:0099-1: moderate: Optional update for quassel
by maintenance＠opensuse.org 29 Jan '19

29 Jan '19

openSUSE Optional Update: Optional update for quassel ______________________________________________________________________________ Announcement ID: openSUSE-OU-2019:0099-1 Rating: moderate References: #1122572 Affected Products: openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update for quassel adds support for quasseldroid - quasseldroid support was added (boo#1122572) This update also contains all other upstream improvements and bug fixes, including: - UI improvements - Support for many IRCv3 features, including the display of modern formatting codes - Optional authentication via LDAP - Database improvements, including support for 64 bit IDs and timestamps, and performance tweaks Patch Instructions: To install this openSUSE Optional Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-99=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-99=1 Package List: - openSUSE Leap 15.0 (x86_64): quassel-base-0.13.0-lp150.4.6.1 quassel-client-0.13.0-lp150.4.6.1 quassel-client-debuginfo-0.13.0-lp150.4.6.1 quassel-client-qt5-0.13.0-lp150.4.6.1 quassel-client-qt5-debuginfo-0.13.0-lp150.4.6.1 quassel-core-0.13.0-lp150.4.6.1 quassel-core-debuginfo-0.13.0-lp150.4.6.1 quassel-debuginfo-0.13.0-lp150.4.6.1 quassel-debugsource-0.13.0-lp150.4.6.1 quassel-mono-0.13.0-lp150.4.6.1 quassel-mono-debuginfo-0.13.0-lp150.4.6.1 - openSUSE Backports SLE-15 (x86_64): quassel-base-0.13.0-bp150.4.3.1 quassel-client-0.13.0-bp150.4.3.1 quassel-client-debuginfo-0.13.0-bp150.4.3.1 quassel-client-qt5-0.13.0-bp150.4.3.1 quassel-client-qt5-debuginfo-0.13.0-bp150.4.3.1 quassel-core-0.13.0-bp150.4.3.1 quassel-core-debuginfo-0.13.0-bp150.4.3.1 quassel-debuginfo-0.13.0-bp150.4.3.1 quassel-debugsource-0.13.0-bp150.4.3.1 quassel-mono-0.13.0-bp150.4.3.1 quassel-mono-debuginfo-0.13.0-bp150.4.3.1 References: https://bugzilla.suse.com/1122572

1 0

openSUSE-SU-2019:0098-1: important: Security update for systemd
by opensuse-security＠opensuse.org 29 Jan '19

29 Jan '19

openSUSE Security Update: Security update for systemd ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0098-1 Rating: important References: #1005023 #1045723 #1076696 #1080919 #1093753 #1101591 #1111498 #1114933 #1117063 #1119971 #1120323 Cross-References: CVE-2018-16864 CVE-2018-16865 CVE-2018-16866 CVE-2018-6954 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves four vulnerabilities and has 7 fixes is now available. Description: This update for systemd provides the following fixes: Security issues fixed: - CVE-2018-16864, CVE-2018-16865: Fixed two memory corruptions through attacker-controlled alloca()s (bsc#1120323) - CVE-2018-16866: Fixed an information leak in journald (bsc#1120323) - CVE-2018-6954: Fix mishandling of symlinks present in non-terminal path components (bsc#1080919) - Fixed an issue during system startup in relation to encrypted swap disks (bsc#1119971) Non-security issues fixed: - pam_systemd: Fix 'Cannot create session: Already running in a session' (bsc#1111498) - systemd-vconsole-setup: vconsole setup fails, fonts will not be copied to tty (bsc#1114933) - systemd-tmpfiles-setup: symlinked /tmp to /var/tmp breaking multiple units (bsc#1045723) - Fixed installation issue with /etc/machine-id during update (bsc#1117063) - btrfs: qgroups are assigned to parent qgroups after reboot (bsc#1093753) - logind: Stop managing VT switches if no sessions are registered on that VT. (bsc#1101591) - udev: Downgrade message when settting inotify watch up fails. (bsc#1005023) - udev: Ignore the exit code of systemd-detect-virt for memory hot-add. In SLE-12-SP3, 80-hotplug-cpu-mem.rules has a memory hot-add rule that uses systemd-detect-virt to detect non-zvm environment. The systemd-detect-virt returns exit failure code when it detected _none_ state. The exit failure code causes that the hot-add memory block can not be set to online. (bsc#1076696) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-98=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libsystemd0-234-lp150.20.12.1 libsystemd0-debuginfo-234-lp150.20.12.1 libsystemd0-mini-234-lp150.20.12.1 libsystemd0-mini-debuginfo-234-lp150.20.12.1 libudev-devel-234-lp150.20.12.1 libudev-mini-devel-234-lp150.20.12.1 libudev-mini1-234-lp150.20.12.1 libudev-mini1-debuginfo-234-lp150.20.12.1 libudev1-234-lp150.20.12.1 libudev1-debuginfo-234-lp150.20.12.1 nss-myhostname-234-lp150.20.12.1 nss-myhostname-debuginfo-234-lp150.20.12.1 nss-mymachines-234-lp150.20.12.1 nss-mymachines-debuginfo-234-lp150.20.12.1 nss-systemd-234-lp150.20.12.1 nss-systemd-debuginfo-234-lp150.20.12.1 systemd-234-lp150.20.12.1 systemd-container-234-lp150.20.12.1 systemd-container-debuginfo-234-lp150.20.12.1 systemd-coredump-234-lp150.20.12.1 systemd-coredump-debuginfo-234-lp150.20.12.1 systemd-debuginfo-234-lp150.20.12.1 systemd-debugsource-234-lp150.20.12.1 systemd-devel-234-lp150.20.12.1 systemd-logger-234-lp150.20.12.1 systemd-mini-234-lp150.20.12.1 systemd-mini-container-mini-234-lp150.20.12.1 systemd-mini-container-mini-debuginfo-234-lp150.20.12.1 systemd-mini-coredump-mini-234-lp150.20.12.1 systemd-mini-coredump-mini-debuginfo-234-lp150.20.12.1 systemd-mini-debuginfo-234-lp150.20.12.1 systemd-mini-debugsource-234-lp150.20.12.1 systemd-mini-devel-234-lp150.20.12.1 systemd-mini-sysvinit-234-lp150.20.12.1 systemd-sysvinit-234-lp150.20.12.1 udev-234-lp150.20.12.1 udev-debuginfo-234-lp150.20.12.1 udev-mini-234-lp150.20.12.1 udev-mini-debuginfo-234-lp150.20.12.1 - openSUSE Leap 15.0 (x86_64): libsystemd0-32bit-234-lp150.20.12.1 libsystemd0-32bit-debuginfo-234-lp150.20.12.1 libudev-devel-32bit-234-lp150.20.12.1 libudev1-32bit-234-lp150.20.12.1 libudev1-32bit-debuginfo-234-lp150.20.12.1 nss-myhostname-32bit-234-lp150.20.12.1 nss-myhostname-32bit-debuginfo-234-lp150.20.12.1 nss-mymachines-32bit-234-lp150.20.12.1 nss-mymachines-32bit-debuginfo-234-lp150.20.12.1 systemd-32bit-234-lp150.20.12.1 systemd-32bit-debuginfo-234-lp150.20.12.1 - openSUSE Leap 15.0 (noarch): systemd-bash-completion-234-lp150.20.12.1 systemd-mini-bash-completion-234-lp150.20.12.1 References: https://www.suse.com/security/cve/CVE-2018-16864.html https://www.suse.com/security/cve/CVE-2018-16865.html https://www.suse.com/security/cve/CVE-2018-16866.html https://www.suse.com/security/cve/CVE-2018-6954.html https://bugzilla.suse.com/1005023 https://bugzilla.suse.com/1045723 https://bugzilla.suse.com/1076696 https://bugzilla.suse.com/1080919 https://bugzilla.suse.com/1093753 https://bugzilla.suse.com/1101591 https://bugzilla.suse.com/1111498 https://bugzilla.suse.com/1114933 https://bugzilla.suse.com/1117063 https://bugzilla.suse.com/1119971 https://bugzilla.suse.com/1120323

1 0

openSUSE-SU-2019:0095-1: moderate: Security update for singularity
by opensuse-security＠opensuse.org 29 Jan '19

29 Jan '19

openSUSE Security Update: Security update for singularity ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0095-1 Rating: moderate References: #1100333 #1111411 Cross-References: CVE-2018-12021 CVE-2018-19295 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for singularity to version 2.6.1 fixes the following issues: Security issues fixed: - CVE-2018-19295: Mount points are not mounted with shared mount propagation by default anymore, as this may result in privilege escalation (boo#1111411). - CVE-2018-12021: Fixed a incorrect access control issues on systems supporting overlay file system (boo#1100333). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2019-95=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): libsingularity1-2.6.1-14.1 singularity-2.6.1-14.1 singularity-devel-2.6.1-14.1 References: https://www.suse.com/security/cve/CVE-2018-12021.html https://www.suse.com/security/cve/CVE-2018-19295.html https://bugzilla.suse.com/1100333 https://bugzilla.suse.com/1111411

1 0

openSUSE-SU-2019:0093-1: important: Security update for openssh
by opensuse-security＠opensuse.org 29 Jan '19

29 Jan '19

openSUSE Security Update: Security update for openssh ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0093-1 Rating: important References: #1121571 #1121816 #1121818 #1121821 Cross-References: CVE-2018-20685 CVE-2019-6109 CVE-2019-6110 CVE-2019-6111 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for openssh fixes the following issues: Security issue fixed: - CVE-2018-20685: Fixed an issue where scp client allows remote SSH servers to bypass intended access restrictions (bsc#1121571) - CVE-2019-6109: Fixed an issue where the scp client would allow malicious remote SSH servers to manipulate terminal output via the object name, e.g. by inserting ANSI escape sequences (bsc#1121816) - CVE-2019-6110: Fixed an issue where the scp client would allow malicious remote SSH servers to manipulate stderr output, e.g. by inserting ANSI escape sequences (bsc#1121818) - CVE-2019-6111: Fixed an issue where the scp client would allow malicious remote SSH servers to execute directory traversal attacks and overwrite files (bsc#1121821) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-93=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): openssh-7.2p2-29.1 openssh-askpass-gnome-7.2p2-29.1 openssh-askpass-gnome-debuginfo-7.2p2-29.1 openssh-cavs-7.2p2-29.1 openssh-cavs-debuginfo-7.2p2-29.1 openssh-debuginfo-7.2p2-29.1 openssh-debugsource-7.2p2-29.1 openssh-fips-7.2p2-29.1 openssh-helpers-7.2p2-29.1 openssh-helpers-debuginfo-7.2p2-29.1 References: https://www.suse.com/security/cve/CVE-2018-20685.html https://www.suse.com/security/cve/CVE-2019-6109.html https://www.suse.com/security/cve/CVE-2019-6110.html https://www.suse.com/security/cve/CVE-2019-6111.html https://bugzilla.suse.com/1121571 https://bugzilla.suse.com/1121816 https://bugzilla.suse.com/1121818 https://bugzilla.suse.com/1121821

1 0

openSUSE-SU-2019:0097-1: moderate: Security update for systemd
by opensuse-security＠opensuse.org 29 Jan '19

29 Jan '19

openSUSE Security Update: Security update for systemd ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0097-1 Rating: moderate References: #1005023 #1076696 #1101591 #1114981 #1115518 #1119971 #1120323 Cross-References: CVE-2018-16864 CVE-2018-16865 CVE-2018-16866 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves three vulnerabilities and has four fixes is now available. Description: This update for systemd provides the following fixes: Security issues fixed: - CVE-2018-16864, CVE-2018-16865: Fixed two memory corruptions through attacker-controlled alloca()s (bsc#1120323) - CVE-2018-16866: Fixed an information leak in journald (bsc#1120323) - Fixed an issue during system startup in relation to encrypted swap disks (bsc#1119971) Non-security issues fixed: - core: Queue loading transient units after setting their properties. (bsc#1115518) - logind: Stop managing VT switches if no sessions are registered on that VT. (bsc#1101591) - terminal-util: introduce vt_release() and vt_restore() helpers. - terminal: Unify code for resetting kbd utf8 mode a bit. - terminal Reset should honour default_utf8 kernel setting. - logind: Make session_restore_vt() static. - udev: Downgrade message when settting inotify watch up fails. (bsc#1005023) - log: Never log into foreign fd #2 in PID 1 or its pre-execve() children. (bsc#1114981) - udev: Ignore the exit code of systemd-detect-virt for memory hot-add. In SLE-12-SP3, 80-hotplug-cpu-mem.rules has a memory hot-add rule that uses systemd-detect-virt to detect non-zvm environment. The systemd-detect-virt returns exit failure code when it detected _none_ state. The exit failure code causes that the hot-add memory block can not be set to online. (bsc#1076696) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-97=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libsystemd0-228-65.1 libsystemd0-debuginfo-228-65.1 libsystemd0-mini-228-65.1 libsystemd0-mini-debuginfo-228-65.1 libudev-devel-228-65.1 libudev-mini-devel-228-65.1 libudev-mini1-228-65.1 libudev-mini1-debuginfo-228-65.1 libudev1-228-65.1 libudev1-debuginfo-228-65.1 nss-myhostname-228-65.1 nss-myhostname-debuginfo-228-65.1 nss-mymachines-228-65.1 nss-mymachines-debuginfo-228-65.1 systemd-228-65.1 systemd-debuginfo-228-65.1 systemd-debugsource-228-65.1 systemd-devel-228-65.1 systemd-logger-228-65.1 systemd-mini-228-65.1 systemd-mini-debuginfo-228-65.1 systemd-mini-debugsource-228-65.1 systemd-mini-devel-228-65.1 systemd-mini-sysvinit-228-65.1 systemd-sysvinit-228-65.1 udev-228-65.1 udev-debuginfo-228-65.1 udev-mini-228-65.1 udev-mini-debuginfo-228-65.1 - openSUSE Leap 42.3 (noarch): systemd-bash-completion-228-65.1 systemd-mini-bash-completion-228-65.1 - openSUSE Leap 42.3 (x86_64): libsystemd0-32bit-228-65.1 libsystemd0-debuginfo-32bit-228-65.1 libudev1-32bit-228-65.1 libudev1-debuginfo-32bit-228-65.1 nss-myhostname-32bit-228-65.1 nss-myhostname-debuginfo-32bit-228-65.1 systemd-32bit-228-65.1 systemd-debuginfo-32bit-228-65.1 References: https://www.suse.com/security/cve/CVE-2018-16864.html https://www.suse.com/security/cve/CVE-2018-16865.html https://www.suse.com/security/cve/CVE-2018-16866.html https://bugzilla.suse.com/1005023 https://bugzilla.suse.com/1076696 https://bugzilla.suse.com/1101591 https://bugzilla.suse.com/1114981 https://bugzilla.suse.com/1115518 https://bugzilla.suse.com/1119971 https://bugzilla.suse.com/1120323

1 0

openSUSE-SU-2019:0089-1: important: Security update for nodejs8
by opensuse-security＠opensuse.org 28 Jan '19

28 Jan '19

openSUSE Security Update: Security update for nodejs8 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0089-1 Rating: important References: #1117626 #1117627 #1117629 #1117630 Cross-References: CVE-2018-12116 CVE-2018-12121 CVE-2018-12122 CVE-2018-12123 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for nodejs8 to version 8.15.0 fixes the following issues: Security issues fixed: - CVE-2018-12121: Fixed a Denial of Service with large HTTP headers (bsc#1117626) - CVE-2018-12122: Fixed the 'Slowloris' HTTP Denial of Service (bsc#1117627) - CVE-2018-12116: Fixed HTTP request splitting (bsc#1117630) - CVE-2018-12123: Fixed hostname spoofing in URL parser for javascript protocol (bsc#1117629) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-89=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): nodejs8-8.15.0-lp150.2.9.1 nodejs8-debuginfo-8.15.0-lp150.2.9.1 nodejs8-debugsource-8.15.0-lp150.2.9.1 nodejs8-devel-8.15.0-lp150.2.9.1 npm8-8.15.0-lp150.2.9.1 - openSUSE Leap 15.0 (noarch): nodejs8-docs-8.15.0-lp150.2.9.1 References: https://www.suse.com/security/cve/CVE-2018-12116.html https://www.suse.com/security/cve/CVE-2018-12121.html https://www.suse.com/security/cve/CVE-2018-12122.html https://www.suse.com/security/cve/CVE-2018-12123.html https://bugzilla.suse.com/1117626 https://bugzilla.suse.com/1117627 https://bugzilla.suse.com/1117629 https://bugzilla.suse.com/1117630

1 0

openSUSE-SU-2019:0090-1: moderate: Security update for PackageKit
by opensuse-security＠opensuse.org 28 Jan '19

28 Jan '19

openSUSE Security Update: Security update for PackageKit ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0090-1 Rating: moderate References: #1038425 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for PackageKit fixes the following issues: - Fixed displaying the license agreement pop up window during package update (bsc#1038425). This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-90=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): PackageKit-1.1.3-5.6.1 PackageKit-backend-zypp-1.1.3-5.6.1 PackageKit-backend-zypp-debuginfo-1.1.3-5.6.1 PackageKit-debuginfo-1.1.3-5.6.1 PackageKit-debugsource-1.1.3-5.6.1 PackageKit-devel-1.1.3-5.6.1 PackageKit-devel-debuginfo-1.1.3-5.6.1 PackageKit-gstreamer-plugin-1.1.3-5.6.1 PackageKit-gstreamer-plugin-debuginfo-1.1.3-5.6.1 PackageKit-gtk3-module-1.1.3-5.6.1 PackageKit-gtk3-module-debuginfo-1.1.3-5.6.1 libpackagekit-glib2-18-1.1.3-5.6.1 libpackagekit-glib2-18-debuginfo-1.1.3-5.6.1 libpackagekit-glib2-devel-1.1.3-5.6.1 typelib-1_0-PackageKitGlib-1_0-1.1.3-5.6.1 - openSUSE Leap 42.3 (x86_64): libpackagekit-glib2-18-32bit-1.1.3-5.6.1 libpackagekit-glib2-18-debuginfo-32bit-1.1.3-5.6.1 libpackagekit-glib2-devel-32bit-1.1.3-5.6.1 - openSUSE Leap 42.3 (noarch): PackageKit-branding-upstream-1.1.3-5.6.1 PackageKit-lang-1.1.3-5.6.1 References: https://bugzilla.suse.com/1038425

1 0

openSUSE-SU-2019:0092-1: moderate: Security update for wireshark
by opensuse-security＠opensuse.org 28 Jan '19

28 Jan '19

openSUSE Security Update: Security update for wireshark ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0092-1 Rating: moderate References: #1121232 #1121233 #1121234 #1121235 Cross-References: CVE-2019-5717 CVE-2019-5718 CVE-2019-5719 CVE-2019-5721 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for wireshark to version 2.4.12 fixes the following issues: Security issues fixed: - CVE-2019-5717: Fixed a denial of service in the P_MUL dissector (bsc#1121232) - CVE-2019-5718: Fixed a denial of service in the RTSE dissector and other dissectors (bsc#1121233) - CVE-2019-5719: Fixed a denial of service in the ISAKMP dissector (bsc#1121234) - CVE-2019-5721: Fixed a denial of service in the ISAKMP dissector (bsc#1121235) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-92=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libwireshark9-2.4.12-lp150.2.19.1 libwireshark9-debuginfo-2.4.12-lp150.2.19.1 libwiretap7-2.4.12-lp150.2.19.1 libwiretap7-debuginfo-2.4.12-lp150.2.19.1 libwscodecs1-2.4.12-lp150.2.19.1 libwscodecs1-debuginfo-2.4.12-lp150.2.19.1 libwsutil8-2.4.12-lp150.2.19.1 libwsutil8-debuginfo-2.4.12-lp150.2.19.1 wireshark-2.4.12-lp150.2.19.1 wireshark-debuginfo-2.4.12-lp150.2.19.1 wireshark-debugsource-2.4.12-lp150.2.19.1 wireshark-devel-2.4.12-lp150.2.19.1 wireshark-ui-qt-2.4.12-lp150.2.19.1 wireshark-ui-qt-debuginfo-2.4.12-lp150.2.19.1 References: https://www.suse.com/security/cve/CVE-2019-5717.html https://www.suse.com/security/cve/CVE-2019-5718.html https://www.suse.com/security/cve/CVE-2019-5719.html https://www.suse.com/security/cve/CVE-2019-5721.html https://bugzilla.suse.com/1121232 https://bugzilla.suse.com/1121233 https://bugzilla.suse.com/1121234 https://bugzilla.suse.com/1121235

1 0

openSUSE-SU-2019:0091-1: important: Security update for openssh
by opensuse-security＠opensuse.org 28 Jan '19

28 Jan '19

openSUSE Security Update: Security update for openssh ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0091-1 Rating: important References: #1121571 #1121816 #1121818 #1121821 Cross-References: CVE-2018-20685 CVE-2019-6109 CVE-2019-6110 CVE-2019-6111 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for openssh fixes the following issues: Security issues fixed: - CVE-2018-20685: Fixed an issue where scp client allows remote SSH servers to bypass intended access restrictions (bsc#1121571) - CVE-2019-6109: Fixed an issue where the scp client would allow malicious remote SSH servers to manipulate terminal output via the object name, e.g. by inserting ANSI escape sequences (bsc#1121816) - CVE-2019-6110: Fixed an issue where the scp client would allow malicious remote SSH servers to manipulate stderr output, e.g. by inserting ANSI escape sequences (bsc#1121818) - CVE-2019-6111: Fixed an issue where the scp client would allow malicious remote SSH servers to execute directory traversal attacks and overwrite files (bsc#1121821) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-91=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): openssh-7.6p1-lp150.8.9.1 openssh-cavs-7.6p1-lp150.8.9.1 openssh-cavs-debuginfo-7.6p1-lp150.8.9.1 openssh-debuginfo-7.6p1-lp150.8.9.1 openssh-debugsource-7.6p1-lp150.8.9.1 openssh-fips-7.6p1-lp150.8.9.1 openssh-helpers-7.6p1-lp150.8.9.1 openssh-helpers-debuginfo-7.6p1-lp150.8.9.1 - openSUSE Leap 15.0 (x86_64): openssh-askpass-gnome-7.6p1-lp150.8.9.1 openssh-askpass-gnome-debuginfo-7.6p1-lp150.8.9.1 References: https://www.suse.com/security/cve/CVE-2018-20685.html https://www.suse.com/security/cve/CVE-2019-6109.html https://www.suse.com/security/cve/CVE-2019-6110.html https://www.suse.com/security/cve/CVE-2019-6111.html https://bugzilla.suse.com/1121571 https://bugzilla.suse.com/1121816 https://bugzilla.suse.com/1121818 https://bugzilla.suse.com/1121821

1 0

openSUSE-SU-2019:0088-1: important: Security update for nodejs4
by opensuse-security＠opensuse.org 25 Jan '19

25 Jan '19

openSUSE Security Update: Security update for nodejs4 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0088-1 Rating: important References: #1113534 #1113652 #1117625 #1117626 #1117627 #1117629 #1117630 Cross-References: CVE-2018-0734 CVE-2018-12116 CVE-2018-12120 CVE-2018-12121 CVE-2018-12122 CVE-2018-12123 CVE-2018-5407 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: This update for nodejs4 fixes the following issues: Security issues fixed: - CVE-2018-0734: Fixed a timing vulnerability in the DSA signature generation (bsc#1113652) - CVE-2018-5407: Fixed a hyperthread port content side channel attack (aka "PortSmash") (bsc#1113534) - CVE-2018-12120: Fixed that the debugger listens on any interface by default (bsc#1117625) - CVE-2018-12121: Fixed a denial of Service with large HTTP headers (bsc#1117626) - CVE-2018-12122: Fixed the "Slowloris" HTTP Denial of Service (bsc#1117627) - CVE-2018-12116: Fixed HTTP request splitting (bsc#1117630) - CVE-2018-12123: Fixed hostname spoofing in URL parser for javascript protocol (bsc#1117629) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-88=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): nodejs4-4.9.1-20.1 nodejs4-debuginfo-4.9.1-20.1 nodejs4-debugsource-4.9.1-20.1 nodejs4-devel-4.9.1-20.1 npm4-4.9.1-20.1 - openSUSE Leap 42.3 (noarch): nodejs4-docs-4.9.1-20.1 References: https://www.suse.com/security/cve/CVE-2018-0734.html https://www.suse.com/security/cve/CVE-2018-12116.html https://www.suse.com/security/cve/CVE-2018-12120.html https://www.suse.com/security/cve/CVE-2018-12121.html https://www.suse.com/security/cve/CVE-2018-12122.html https://www.suse.com/security/cve/CVE-2018-12123.html https://www.suse.com/security/cve/CVE-2018-5407.html https://bugzilla.suse.com/1113534 https://bugzilla.suse.com/1113652 https://bugzilla.suse.com/1117625 https://bugzilla.suse.com/1117626 https://bugzilla.suse.com/1117627 https://bugzilla.suse.com/1117629 https://bugzilla.suse.com/1117630

1 0

openSUSE-SU-2019:0084-1: important: Security update for virtualbox
by opensuse-security＠opensuse.org 25 Jan '19

25 Jan '19

openSUSE Security Update: Security update for virtualbox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0084-1 Rating: important References: #1122212 Cross-References: CVE-2018-0734 CVE-2018-11763 CVE-2018-11784 CVE-2018-3309 CVE-2019-2446 CVE-2019-2448 CVE-2019-2450 CVE-2019-2451 CVE-2019-2500 CVE-2019-2501 CVE-2019-2504 CVE-2019-2505 CVE-2019-2506 CVE-2019-2508 CVE-2019-2509 CVE-2019-2511 CVE-2019-2520 CVE-2019-2521 CVE-2019-2522 CVE-2019-2523 CVE-2019-2524 CVE-2019-2525 CVE-2019-2526 CVE-2019-2527 CVE-2019-2548 CVE-2019-2552 CVE-2019-2553 CVE-2019-2554 CVE-2019-2555 CVE-2019-2556 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes 30 vulnerabilities is now available. Description: This update for virtualbox version 5.2.24 fixes the following issues: Update fixes multiple vulnerabilities: CVE-2019-2500, CVE-2019-2524, CVE-2019-2552, CVE-2018-3309, CVE-2019-2520 CVE-2019-2521, CVE-2019-2522, CVE-2019-2523, CVE-2019-2526, CVE-2019-2548 CVE-2018-11763, CVE-2019-2511, CVE-2019-2508, CVE-2019-2509, CVE-2019-2527 CVE-2019-2450, CVE-2019-2451, CVE-2019-2555, CVE-2019-2554, CVE-2019-2556 CVE-2018-11784, CVE-2018-0734, CVE-2019-2525, CVE-2019-2446, CVE-2019-2448 CVE-2019-2501, CVE-2019-2504, CVE-2019-2505, CVE-2019-2506, and CVE-2019-2553 (boo#1122212). Non-security issues fixed: - Linux Additions: fix for building vboxvideo on EL 7.6 standard kernel, contributed by Robert Conde - USB: fixed a problem causing failures attaching SuperSpeed devices which report USB version 3.1 (rather than 3.0) on Windows hosts - Audio: added support for surround speaker setups used by Windows 10 Build 1809 - Linux hosts: fixed conflict between Debian and Oracle build desktop files - Linux guests: fixed building drivers on SLES 12.4 - Linux guests: fixed building shared folder driver with older kernels Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-84=1 Package List: - openSUSE Leap 42.3 (noarch): virtualbox-guest-desktop-icons-5.2.24-66.1 virtualbox-guest-source-5.2.24-66.1 virtualbox-host-source-5.2.24-66.1 - openSUSE Leap 42.3 (x86_64): python-virtualbox-5.2.24-66.1 python-virtualbox-debuginfo-5.2.24-66.1 virtualbox-5.2.24-66.1 virtualbox-debuginfo-5.2.24-66.1 virtualbox-debugsource-5.2.24-66.1 virtualbox-devel-5.2.24-66.1 virtualbox-guest-kmp-default-5.2.24_k4.4.165_81-66.1 virtualbox-guest-kmp-default-debuginfo-5.2.24_k4.4.165_81-66.1 virtualbox-guest-tools-5.2.24-66.1 virtualbox-guest-tools-debuginfo-5.2.24-66.1 virtualbox-guest-x11-5.2.24-66.1 virtualbox-guest-x11-debuginfo-5.2.24-66.1 virtualbox-host-kmp-default-5.2.24_k4.4.165_81-66.1 virtualbox-host-kmp-default-debuginfo-5.2.24_k4.4.165_81-66.1 virtualbox-qt-5.2.24-66.1 virtualbox-qt-debuginfo-5.2.24-66.1 virtualbox-vnc-5.2.24-66.1 virtualbox-websrv-5.2.24-66.1 virtualbox-websrv-debuginfo-5.2.24-66.1 References: https://www.suse.com/security/cve/CVE-2018-0734.html https://www.suse.com/security/cve/CVE-2018-11763.html https://www.suse.com/security/cve/CVE-2018-11784.html https://www.suse.com/security/cve/CVE-2018-3309.html https://www.suse.com/security/cve/CVE-2019-2446.html https://www.suse.com/security/cve/CVE-2019-2448.html https://www.suse.com/security/cve/CVE-2019-2450.html https://www.suse.com/security/cve/CVE-2019-2451.html https://www.suse.com/security/cve/CVE-2019-2500.html https://www.suse.com/security/cve/CVE-2019-2501.html https://www.suse.com/security/cve/CVE-2019-2504.html https://www.suse.com/security/cve/CVE-2019-2505.html https://www.suse.com/security/cve/CVE-2019-2506.html https://www.suse.com/security/cve/CVE-2019-2508.html https://www.suse.com/security/cve/CVE-2019-2509.html https://www.suse.com/security/cve/CVE-2019-2511.html https://www.suse.com/security/cve/CVE-2019-2520.html https://www.suse.com/security/cve/CVE-2019-2521.html https://www.suse.com/security/cve/CVE-2019-2522.html https://www.suse.com/security/cve/CVE-2019-2523.html https://www.suse.com/security/cve/CVE-2019-2524.html https://www.suse.com/security/cve/CVE-2019-2525.html https://www.suse.com/security/cve/CVE-2019-2526.html https://www.suse.com/security/cve/CVE-2019-2527.html https://www.suse.com/security/cve/CVE-2019-2548.html https://www.suse.com/security/cve/CVE-2019-2552.html https://www.suse.com/security/cve/CVE-2019-2553.html https://www.suse.com/security/cve/CVE-2019-2554.html https://www.suse.com/security/cve/CVE-2019-2555.html https://www.suse.com/security/cve/CVE-2019-2556.html https://bugzilla.suse.com/1122212

1 0

openSUSE-SU-2019:0085-1: important: Security update for krb5
by opensuse-security＠opensuse.org 25 Jan '19

25 Jan '19

openSUSE Security Update: Security update for krb5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0085-1 Rating: important References: #1120489 Cross-References: CVE-2018-20217 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for krb5 fixes the following security issue: - CVE-2018-20217: Fixed an assertion issue with older encryption types (bsc#1120489) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-85=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): krb5-1.12.5-22.1 krb5-client-1.12.5-22.1 krb5-client-debuginfo-1.12.5-22.1 krb5-debuginfo-1.12.5-22.1 krb5-debugsource-1.12.5-22.1 krb5-devel-1.12.5-22.1 krb5-doc-1.12.5-22.1 krb5-mini-1.12.5-22.1 krb5-mini-debuginfo-1.12.5-22.1 krb5-mini-debugsource-1.12.5-22.1 krb5-mini-devel-1.12.5-22.1 krb5-plugin-kdb-ldap-1.12.5-22.1 krb5-plugin-kdb-ldap-debuginfo-1.12.5-22.1 krb5-plugin-preauth-otp-1.12.5-22.1 krb5-plugin-preauth-otp-debuginfo-1.12.5-22.1 krb5-plugin-preauth-pkinit-1.12.5-22.1 krb5-plugin-preauth-pkinit-debuginfo-1.12.5-22.1 krb5-server-1.12.5-22.1 krb5-server-debuginfo-1.12.5-22.1 - openSUSE Leap 42.3 (x86_64): krb5-32bit-1.12.5-22.1 krb5-debuginfo-32bit-1.12.5-22.1 krb5-devel-32bit-1.12.5-22.1 References: https://www.suse.com/security/cve/CVE-2018-20217.html https://bugzilla.suse.com/1120489

1 0

openSUSE-SU-2019:0086-1: moderate: Security update for soundtouch
by opensuse-security＠opensuse.org 25 Jan '19

25 Jan '19

openSUSE Security Update: Security update for soundtouch ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0086-1 Rating: moderate References: #1108631 #1108632 Cross-References: CVE-2018-17097 CVE-2018-17098 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for soundtouch fixes the following issues: Security issues fixed: - CVE-2018-17098: Fixed a heap corruption from size inconsistency, which allowed remote attackers to cause a denial of service or possibly have other unspecified impact (bsc#1108632) - CVE-2018-17097: Fixed a double free, which allowed remote attackers to cause a denial of service or possibly have other unspecified impact (bsc#1108631) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-86=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libSoundTouch0-1.8.0-lp150.2.9.1 libSoundTouch0-debuginfo-1.8.0-lp150.2.9.1 soundtouch-1.8.0-lp150.2.9.1 soundtouch-debuginfo-1.8.0-lp150.2.9.1 soundtouch-debugsource-1.8.0-lp150.2.9.1 soundtouch-devel-1.8.0-lp150.2.9.1 - openSUSE Leap 15.0 (x86_64): libSoundTouch0-32bit-1.8.0-lp150.2.9.1 libSoundTouch0-32bit-debuginfo-1.8.0-lp150.2.9.1 References: https://www.suse.com/security/cve/CVE-2018-17097.html https://www.suse.com/security/cve/CVE-2018-17098.html https://bugzilla.suse.com/1108631 https://bugzilla.suse.com/1108632

1 0

openSUSE-SU-2019:0087-1: important: Security update for zeromq
by opensuse-security＠opensuse.org 25 Jan '19

25 Jan '19

openSUSE Security Update: Security update for zeromq ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0087-1 Rating: important References: #1082318 #1121717 Cross-References: CVE-2019-6250 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for zeromq fixes the following issues: Security issue fixed: - CVE-2019-6250: fix a remote execution vulnerability due to pointer arithmetic overflow (bsc#1121717) The following tracked packaging change is included: - boo1082318: correctly mark license files as licence instead of documentation. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-87=1 Package List: - openSUSE Leap 15.0 (x86_64): libzmq5-4.2.3-lp150.2.10.1 libzmq5-debuginfo-4.2.3-lp150.2.10.1 zeromq-debugsource-4.2.3-lp150.2.10.1 zeromq-devel-4.2.3-lp150.2.10.1 zeromq-tools-4.2.3-lp150.2.10.1 zeromq-tools-debuginfo-4.2.3-lp150.2.10.1 References: https://www.suse.com/security/cve/CVE-2019-6250.html https://bugzilla.suse.com/1082318 https://bugzilla.suse.com/1121717

1 0

openSUSE-OU-2019:0083-1: moderate: Optional update for datovka
by maintenance＠opensuse.org 24 Jan '19

24 Jan '19

openSUSE Optional Update: Optional update for datovka ______________________________________________________________________________ Announcement ID: openSUSE-OU-2019:0083-1 Rating: moderate References: #1104620 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update provides the latest version of Datovka. Datovka can be used for accessing the Czech eGov system "Datove schranky". Version 4.12.0 contains the following updates: - Bigger attachments allowed (50MB) - HiDPI icons - Other minor updates and feature enhancements Patch Instructions: To install this openSUSE Optional Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-83=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-83=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-83=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): datovka-4.12.0-11.1 datovka-debuginfo-4.12.0-11.1 datovka-debugsource-4.12.0-11.1 - openSUSE Leap 15.0 (x86_64): datovka-4.12.0-lp150.2.6.1 datovka-debuginfo-4.12.0-lp150.2.6.1 datovka-debugsource-4.12.0-lp150.2.6.1 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): datovka-4.12.0-bp150.3.6.1 datovka-debuginfo-4.12.0-bp150.3.6.1 datovka-debugsource-4.12.0-bp150.3.6.1 References: https://bugzilla.suse.com/1104620

1 0

openSUSE-SU-2019:0082-1: important: Security update for ntpsec
by opensuse-security＠opensuse.org 23 Jan '19

23 Jan '19

openSUSE Security Update: Security update for ntpsec ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0082-1 Rating: important References: #1122131 #1122132 #1122134 #1122144 Cross-References: CVE-2019-6442 CVE-2019-6443 CVE-2019-6444 CVE-2019-6445 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for ntpsec to version 1.1.3 fixes the following issues: Security issues fixed: - CVE-2019-6442: Fixed a out of bounds write via a malformed config request (boo#1122132) - CVE-2019-6443: Fixed a stack-based buffer over-read in the ctl_getitem function (boo#1122144) - CVE-2019-6444: Fixed a stack-based buffer over-read in the process_control function (boo#1122134) - CVE-2019-6445: Fixed a NULL pointer dereference in the ctl_getitem function (boo#1122131) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-82=1 Package List: - openSUSE Leap 15.0 (x86_64): ntpsec-1.1.3-lp150.2.3.1 ntpsec-debuginfo-1.1.3-lp150.2.3.1 ntpsec-debugsource-1.1.3-lp150.2.3.1 ntpsec-utils-1.1.3-lp150.2.3.1 python3-ntp-1.1.3-lp150.2.3.1 python3-ntp-debuginfo-1.1.3-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2019-6442.html https://www.suse.com/security/cve/CVE-2019-6443.html https://www.suse.com/security/cve/CVE-2019-6444.html https://www.suse.com/security/cve/CVE-2019-6445.html https://bugzilla.suse.com/1122131 https://bugzilla.suse.com/1122132 https://bugzilla.suse.com/1122134 https://bugzilla.suse.com/1122144

1 0

openSUSE-SU-2019:0081-1: important: Security update for webkit2gtk3
by opensuse-security＠opensuse.org 23 Jan '19

23 Jan '19

openSUSE Security Update: Security update for webkit2gtk3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0081-1 Rating: important References: #1110279 #1116998 #1119558 Cross-References: CVE-2018-11713 CVE-2018-4162 CVE-2018-4163 CVE-2018-4165 CVE-2018-4191 CVE-2018-4197 CVE-2018-4207 CVE-2018-4208 CVE-2018-4209 CVE-2018-4210 CVE-2018-4212 CVE-2018-4213 CVE-2018-4299 CVE-2018-4306 CVE-2018-4309 CVE-2018-4312 CVE-2018-4314 CVE-2018-4315 CVE-2018-4316 CVE-2018-4317 CVE-2018-4318 CVE-2018-4319 CVE-2018-4323 CVE-2018-4328 CVE-2018-4345 CVE-2018-4358 CVE-2018-4359 CVE-2018-4361 CVE-2018-4372 CVE-2018-4373 CVE-2018-4375 CVE-2018-4376 CVE-2018-4378 CVE-2018-4382 CVE-2018-4386 CVE-2018-4392 CVE-2018-4416 CVE-2018-4437 CVE-2018-4438 CVE-2018-4441 CVE-2018-4442 CVE-2018-4443 CVE-2018-4464 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes 43 vulnerabilities is now available. Description: This update for webkit2gtk3 to version 2.22.5 fixes the following issues: Security issues fixed: - CVE-2018-4372, CVE-2018-4345, CVE-2018-4386, CVE-2018-4375, CVE-2018-4376, CVE-2018-4378, CVE-2018-4382, CVE-2018-4392, CVE-2018-4416, CVE-2018-4191, CVE-2018-4197, CVE-2018-4299, CVE-2018-4306, CVE-2018-4309, CVE-2018-4312, CVE-2018-4314, CVE-2018-4315, CVE-2018-4316, CVE-2018-4317, CVE-2018-4318, CVE-2018-4319, CVE-2018-4323, CVE-2018-4328, CVE-2018-4358, CVE-2018-4359, CVE-2018-4361, CVE-2018-4373, CVE-2018-4162, CVE-2018-4163, CVE-2018-4165, CVE-2018-11713, CVE-2018-4207, CVE-2018-4208, CVE-2018-4209, CVE-2018-4210, CVE-2018-4212, CVE-2018-4213, CVE-2018-4437, CVE-2018-4438, CVE-2018-4441, CVE-2018-4442, CVE-2018-4443, CVE-2018-4464 (bsc#1119558, bsc#1116998, bsc#1110279) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-81=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libjavascriptcoregtk-4_0-18-2.22.5-lp150.2.9.1 libjavascriptcoregtk-4_0-18-debuginfo-2.22.5-lp150.2.9.1 libwebkit2gtk-4_0-37-2.22.5-lp150.2.9.1 libwebkit2gtk-4_0-37-debuginfo-2.22.5-lp150.2.9.1 typelib-1_0-JavaScriptCore-4_0-2.22.5-lp150.2.9.1 typelib-1_0-WebKit2-4_0-2.22.5-lp150.2.9.1 typelib-1_0-WebKit2WebExtension-4_0-2.22.5-lp150.2.9.1 webkit-jsc-4-2.22.5-lp150.2.9.1 webkit-jsc-4-debuginfo-2.22.5-lp150.2.9.1 webkit2gtk-4_0-injected-bundles-2.22.5-lp150.2.9.1 webkit2gtk-4_0-injected-bundles-debuginfo-2.22.5-lp150.2.9.1 webkit2gtk3-debugsource-2.22.5-lp150.2.9.1 webkit2gtk3-devel-2.22.5-lp150.2.9.1 webkit2gtk3-minibrowser-2.22.5-lp150.2.9.1 webkit2gtk3-minibrowser-debuginfo-2.22.5-lp150.2.9.1 webkit2gtk3-plugin-process-gtk2-2.22.5-lp150.2.9.1 webkit2gtk3-plugin-process-gtk2-debuginfo-2.22.5-lp150.2.9.1 - openSUSE Leap 15.0 (noarch): libwebkit2gtk3-lang-2.22.5-lp150.2.9.1 - openSUSE Leap 15.0 (x86_64): libjavascriptcoregtk-4_0-18-32bit-2.22.5-lp150.2.9.1 libjavascriptcoregtk-4_0-18-32bit-debuginfo-2.22.5-lp150.2.9.1 libwebkit2gtk-4_0-37-32bit-2.22.5-lp150.2.9.1 libwebkit2gtk-4_0-37-32bit-debuginfo-2.22.5-lp150.2.9.1 References: https://www.suse.com/security/cve/CVE-2018-11713.html https://www.suse.com/security/cve/CVE-2018-4162.html https://www.suse.com/security/cve/CVE-2018-4163.html https://www.suse.com/security/cve/CVE-2018-4165.html https://www.suse.com/security/cve/CVE-2018-4191.html https://www.suse.com/security/cve/CVE-2018-4197.html https://www.suse.com/security/cve/CVE-2018-4207.html https://www.suse.com/security/cve/CVE-2018-4208.html https://www.suse.com/security/cve/CVE-2018-4209.html https://www.suse.com/security/cve/CVE-2018-4210.html https://www.suse.com/security/cve/CVE-2018-4212.html https://www.suse.com/security/cve/CVE-2018-4213.html https://www.suse.com/security/cve/CVE-2018-4299.html https://www.suse.com/security/cve/CVE-2018-4306.html https://www.suse.com/security/cve/CVE-2018-4309.html https://www.suse.com/security/cve/CVE-2018-4312.html https://www.suse.com/security/cve/CVE-2018-4314.html https://www.suse.com/security/cve/CVE-2018-4315.html https://www.suse.com/security/cve/CVE-2018-4316.html https://www.suse.com/security/cve/CVE-2018-4317.html https://www.suse.com/security/cve/CVE-2018-4318.html https://www.suse.com/security/cve/CVE-2018-4319.html https://www.suse.com/security/cve/CVE-2018-4323.html https://www.suse.com/security/cve/CVE-2018-4328.html https://www.suse.com/security/cve/CVE-2018-4345.html https://www.suse.com/security/cve/CVE-2018-4358.html https://www.suse.com/security/cve/CVE-2018-4359.html https://www.suse.com/security/cve/CVE-2018-4361.html https://www.suse.com/security/cve/CVE-2018-4372.html https://www.suse.com/security/cve/CVE-2018-4373.html https://www.suse.com/security/cve/CVE-2018-4375.html https://www.suse.com/security/cve/CVE-2018-4376.html https://www.suse.com/security/cve/CVE-2018-4378.html https://www.suse.com/security/cve/CVE-2018-4382.html https://www.suse.com/security/cve/CVE-2018-4386.html https://www.suse.com/security/cve/CVE-2018-4392.html https://www.suse.com/security/cve/CVE-2018-4416.html https://www.suse.com/security/cve/CVE-2018-4437.html https://www.suse.com/security/cve/CVE-2018-4438.html https://www.suse.com/security/cve/CVE-2018-4441.html https://www.suse.com/security/cve/CVE-2018-4442.html https://www.suse.com/security/cve/CVE-2018-4443.html https://www.suse.com/security/cve/CVE-2018-4464.html https://bugzilla.suse.com/1110279 https://bugzilla.suse.com/1116998 https://bugzilla.suse.com/1119558

1 0

openSUSE-RU-2019:0077-1: moderate: Recommended update for libstorage-ng
by maintenance＠opensuse.org 22 Jan '19

22 Jan '19

openSUSE Recommended Update: Recommended update for libstorage-ng ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0077-1 Rating: moderate References: #1059972 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libstorage-ng provides the following fixes: - Avoid thread unsafe strerror function. - Create crypttab, lock and log with proper permissions. (bsc#1059972) - Add missing quoting. (bsc#1059972) - Fix some audit issues. - Use exceptions to handle errors. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-77=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libstorage-ng-debuginfo-3.3.316-lp150.2.12.1 libstorage-ng-debugsource-3.3.316-lp150.2.12.1 libstorage-ng-devel-3.3.316-lp150.2.12.1 libstorage-ng-integration-tests-3.3.316-lp150.2.12.1 libstorage-ng-python3-3.3.316-lp150.2.12.1 libstorage-ng-python3-debuginfo-3.3.316-lp150.2.12.1 libstorage-ng-ruby-3.3.316-lp150.2.12.1 libstorage-ng-ruby-debuginfo-3.3.316-lp150.2.12.1 libstorage-ng-utils-3.3.316-lp150.2.12.1 libstorage-ng-utils-debuginfo-3.3.316-lp150.2.12.1 libstorage-ng1-3.3.316-lp150.2.12.1 libstorage-ng1-debuginfo-3.3.316-lp150.2.12.1 - openSUSE Leap 15.0 (noarch): libstorage-ng-lang-3.3.316-lp150.2.12.1 References: https://bugzilla.suse.com/1059972

1 0

openSUSE-RU-2019:0079-1: Recommended update for tpm-tools
by maintenance＠opensuse.org 22 Jan '19

22 Jan '19

openSUSE Recommended Update: Recommended update for tpm-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0079-1 Rating: low References: #1114793 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for tpm-tools provides the following fix: - Fix undefined and binary data being output in the tpm_version command. (bsc#1114793) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-79=1 Package List: - openSUSE Leap 15.0 (x86_64): libtpm_unseal1-1.3.9.1-lp150.3.3.1 libtpm_unseal1-debuginfo-1.3.9.1-lp150.3.3.1 tpm-tools-1.3.9.1-lp150.3.3.1 tpm-tools-debuginfo-1.3.9.1-lp150.3.3.1 tpm-tools-debugsource-1.3.9.1-lp150.3.3.1 tpm-tools-devel-1.3.9.1-lp150.3.3.1 tpm-tools-pkcs11-1.3.9.1-lp150.3.3.1 tpm-tools-pkcs11-debuginfo-1.3.9.1-lp150.3.3.1 References: https://bugzilla.suse.com/1114793

1 0

openSUSE-RU-2019:0075-1: important: Recommended update for drbd
by maintenance＠opensuse.org 22 Jan '19

22 Jan '19

openSUSE Recommended Update: Recommended update for drbd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0075-1 Rating: important References: #1118732 #1118974 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for drbd and drbd-utils fixes the following issues: - split brain handles malfunction with 2 primaries (bsc#1118732) - remove the deprecated comment about drbd-overview (bsc#1118974) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-75=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): drbd-utils-9.4.0-12.1 drbd-utils-debuginfo-9.4.0-12.1 drbd-utils-debugsource-9.4.0-12.1 - openSUSE Leap 42.3 (x86_64): drbd-9.0.11+git.1e2bccdc-2.11.1 drbd-debugsource-9.0.11+git.1e2bccdc-2.11.1 drbd-kmp-default-9.0.11+git.1e2bccdc_k4.4.165_81-2.11.1 drbd-kmp-default-debuginfo-9.0.11+git.1e2bccdc_k4.4.165_81-2.11.1 References: https://bugzilla.suse.com/1118732 https://bugzilla.suse.com/1118974

1 0

openSUSE-RU-2019:0070-1: moderate: Recommended update for docker
by maintenance＠opensuse.org 22 Jan '19

22 Jan '19

openSUSE Recommended Update: Recommended update for docker ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0070-1 Rating: moderate References: #1119634 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for docker fixes the following issues: - Handle build breakage due to missing 'export GOPATH' (caused by resolution of bsc#1119634) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-70=1 Package List: - openSUSE Leap 42.3 (noarch): docker-bash-completion-18.06.1_ce-51.1 docker-kubic-bash-completion-18.06.1_ce-51.1 docker-kubic-zsh-completion-18.06.1_ce-51.1 docker-zsh-completion-18.06.1_ce-51.1 - openSUSE Leap 42.3 (x86_64): docker-18.06.1_ce-51.1 docker-debuginfo-18.06.1_ce-51.1 docker-debugsource-18.06.1_ce-51.1 docker-kubic-18.06.1_ce-51.1 docker-kubic-debuginfo-18.06.1_ce-51.1 docker-kubic-debugsource-18.06.1_ce-51.1 docker-kubic-kubeadm-criconfig-18.06.1_ce-51.1 docker-kubic-test-18.06.1_ce-51.1 docker-kubic-test-debuginfo-18.06.1_ce-51.1 docker-test-18.06.1_ce-51.1 docker-test-debuginfo-18.06.1_ce-51.1 References: https://bugzilla.suse.com/1119634

1 0

openSUSE-RU-2019:0074-1: moderate: Recommended update for Midnight Commander
by maintenance＠opensuse.org 22 Jan '19

22 Jan '19

openSUSE Recommended Update: Recommended update for Midnight Commander ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0074-1 Rating: moderate References: #1119302 Affected Products: openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for Midnight Commander contains multiple bug fixes and improvements: - fix sftp spurious failure message (boo#1119302) - better support for btrfs This update also contains all upstream fixes and improvements in the 4.8.22 version. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-74=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-74=1 Package List: - openSUSE Leap 15.0 (x86_64): mc-4.8.22-lp150.3.6.1 mc-debuginfo-4.8.22-lp150.3.6.1 mc-debugsource-4.8.22-lp150.3.6.1 - openSUSE Leap 15.0 (noarch): mc-lang-4.8.22-lp150.3.6.1 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): mc-4.8.22-bp150.4.3.1 - openSUSE Backports SLE-15 (noarch): mc-lang-4.8.22-bp150.4.3.1 References: https://bugzilla.suse.com/1119302

1 0

openSUSE-RU-2019:0080-1: moderate: Recommended update for yast2-bootloader
by maintenance＠opensuse.org 22 Jan '19

22 Jan '19

openSUSE Recommended Update: Recommended update for yast2-bootloader ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0080-1 Rating: moderate References: #1111236 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-bootloader fixes the following issues: - Do not crash if an unknown device is found in a cloned configuration. (bsc#1111236) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-80=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): yast2-bootloader-4.0.40-lp150.2.11.1 References: https://bugzilla.suse.com/1111236

1 0

openSUSE-RU-2019:0071-1: moderate: Recommended update for timezone
by maintenance＠opensuse.org 22 Jan '19

22 Jan '19

openSUSE Recommended Update: Recommended update for timezone ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0071-1 Rating: moderate References: #1120402 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for timezone fixes the following issues: - Update 2018i: São Tomé and Príncipe switches from +01 to +00 on 2019-01-01. (bsc#1120402) - Update 2018h: Qyzylorda, Kazakhstan moved from +06 to +05 on 2018-12-21 New zone Asia/Qostanay because Qostanay, Kazakhstan didn't move Metlakatla, Alaska observes PST this winter only Guess Morocco will continue to adjust clocks around Ramadan Add predictions for Iran from 2038 through 2090 This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-71=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-71=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): timezone-2018i-57.1 timezone-debuginfo-2018i-57.1 timezone-debugsource-2018i-57.1 - openSUSE Leap 42.3 (noarch): timezone-java-2018i-0.57.1 - openSUSE Leap 15.0 (i586 x86_64): timezone-2018i-lp150.2.16.1 timezone-debuginfo-2018i-lp150.2.16.1 timezone-debugsource-2018i-lp150.2.16.1 - openSUSE Leap 15.0 (noarch): timezone-java-2018i-lp150.2.16.1 References: https://bugzilla.suse.com/1120402

1 0

openSUSE-RU-2019:0072-1: moderate: Recommended update for grub2
by maintenance＠opensuse.org 22 Jan '19

22 Jan '19

openSUSE Recommended Update: Recommended update for grub2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0072-1 Rating: moderate References: #1111955 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for grub2 provides the following fix: - ieee1275: Fix double free in CAS reboot. (bsc#1111955) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-72=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): grub2-2.02-20.1 grub2-branding-upstream-2.02-20.1 grub2-debuginfo-2.02-20.1 grub2-debugsource-2.02-20.1 grub2-i386-pc-2.02-20.1 - openSUSE Leap 42.3 (x86_64): grub2-x86_64-efi-2.02-20.1 grub2-x86_64-xen-2.02-20.1 - openSUSE Leap 42.3 (noarch): grub2-snapper-plugin-2.02-20.1 grub2-systemd-sleep-plugin-2.02-20.1 - openSUSE Leap 42.3 (i586): grub2-i386-efi-2.02-20.1 References: https://bugzilla.suse.com/1111955

1 0

openSUSE-RU-2019:0076-1: important: Recommended update for yast2-rmt
by maintenance＠opensuse.org 22 Jan '19

22 Jan '19

openSUSE Recommended Update: Recommended update for yast2-rmt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0076-1 Rating: important References: #1119386 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-rmt allows user to skip registration (bsc#1119386). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-76=1 Package List: - openSUSE Leap 15.0 (noarch): yast2-rmt-1.2.0-lp150.2.15.1 References: https://bugzilla.suse.com/1119386

1 0

openSUSE-RU-2019:0078-1: moderate: Recommended update for mutter
by maintenance＠opensuse.org 22 Jan '19

22 Jan '19

openSUSE Recommended Update: Recommended update for mutter ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0078-1 Rating: moderate References: #1093541 #1120290 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for mutter fixes the following issue: - Memory leak in gnome-shell (bsc#1093541) - cursor is missing when using magnifier (bsc#1120290) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-78=1 Package List: - openSUSE Leap 15.0 (noarch): mutter-lang-3.26.2+20180207.4b2d21ff0-lp150.4.3.1 - openSUSE Leap 15.0 (x86_64): libmutter-1-0-3.26.2+20180207.4b2d21ff0-lp150.4.3.1 libmutter-1-0-debuginfo-3.26.2+20180207.4b2d21ff0-lp150.4.3.1 mutter-3.26.2+20180207.4b2d21ff0-lp150.4.3.1 mutter-data-3.26.2+20180207.4b2d21ff0-lp150.4.3.1 mutter-debuginfo-3.26.2+20180207.4b2d21ff0-lp150.4.3.1 mutter-debugsource-3.26.2+20180207.4b2d21ff0-lp150.4.3.1 mutter-devel-3.26.2+20180207.4b2d21ff0-lp150.4.3.1 References: https://bugzilla.suse.com/1093541 https://bugzilla.suse.com/1120290

1 0

openSUSE-RU-2019:0073-1: moderate: Recommended update for chrony
by maintenance＠opensuse.org 22 Jan '19

22 Jan '19

openSUSE Recommended Update: Recommended update for chrony ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0073-1 Rating: moderate References: #1117147 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for chrony fixes the following issues: - installing chrony did not generate a sysconfig file (bsc#1117147) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-73=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-73=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): chrony-2.3-4.3.1 chrony-debuginfo-2.3-4.3.1 chrony-debugsource-2.3-4.3.1 - openSUSE Leap 15.0 (i586 x86_64): chrony-3.2-lp150.6.3.1 chrony-debuginfo-3.2-lp150.6.3.1 chrony-debugsource-3.2-lp150.6.3.1 References: https://bugzilla.suse.com/1117147

1 0

openSUSE-RU-2019:0069-1: moderate: Recommended update for several Python modules
by maintenance＠opensuse.org 22 Jan '19

22 Jan '19

openSUSE Recommended Update: Recommended update for several Python modules ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0069-1 Rating: moderate References: #1054413 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update provides several new Python modules and adds the Python 3 variants of existing modules to openSUSE: The following Python 2 and Python 3 modules were added: - python-appdirs - python-python-dateutil The following Python 3 modules were added: - python-PySocks - python-blinker - python-certifi - python-pytz Additionally, the following packages have been updated: python-PySocks from version 1.5.6 to 1.6.8. python-certifi from version 2015.9.6.2 to 2018.4.16. python-pytz from version 2016.10 to 2018.3. This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-69=1 Package List: - openSUSE Leap 42.3 (noarch): python-PySocks-1.6.8-4.3.1 python-alabaster-0.7.10-6.3.1 python-appdirs-1.4.3-5.3.1 python-attrs-18.1.0-4.3.1 python-blinker-1.4-11.1 python-blinker-doc-1.4-11.1 python-certifi-2018.4.16-5.3.1 python-hypothesis-3.40.1-4.3.1 python-imagesize-1.0.0-3.3.1 python-ndg-httpsclient-0.4.0-4.3.1 python-pluggy-0.6.0-4.3.1 python-pytz-2018.3-2.3.1 python-setuptools_scm-2.0.0-4.3.1 python-snowballstemmer-1.2.1-6.3.1 python-sphinx_rtd_theme-0.3.1-7.3.1 python3-PySocks-1.6.8-4.3.1 python3-alabaster-0.7.10-6.3.1 python3-appdirs-1.4.3-5.3.1 python3-attrs-18.1.0-4.3.1 python3-blinker-1.4-11.1 python3-certifi-2018.4.16-5.3.1 python3-hypothesis-3.40.1-4.3.1 python3-imagesize-1.0.0-3.3.1 python3-ndg-httpsclient-0.4.0-4.3.1 python3-pluggy-0.6.0-4.3.1 python3-pytz-2018.3-2.3.1 python3-setuptools_scm-2.0.0-4.3.1 python3-snowballstemmer-1.2.1-6.3.1 python3-sphinx_rtd_theme-0.3.1-7.3.1 References: https://bugzilla.suse.com/1054413

1 0

openSUSE-SU-2019:0068-1: important: Security update for webkit2gtk3
by opensuse-security＠opensuse.org 21 Jan '19

21 Jan '19

openSUSE Security Update: Security update for webkit2gtk3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0068-1 Rating: important References: #1110279 #1116998 Cross-References: CVE-2018-4191 CVE-2018-4197 CVE-2018-4207 CVE-2018-4208 CVE-2018-4209 CVE-2018-4210 CVE-2018-4212 CVE-2018-4213 CVE-2018-4261 CVE-2018-4262 CVE-2018-4263 CVE-2018-4264 CVE-2018-4265 CVE-2018-4266 CVE-2018-4267 CVE-2018-4270 CVE-2018-4272 CVE-2018-4273 CVE-2018-4278 CVE-2018-4284 CVE-2018-4299 CVE-2018-4306 CVE-2018-4309 CVE-2018-4312 CVE-2018-4314 CVE-2018-4315 CVE-2018-4316 CVE-2018-4317 CVE-2018-4318 CVE-2018-4319 CVE-2018-4323 CVE-2018-4328 CVE-2018-4345 CVE-2018-4358 CVE-2018-4359 CVE-2018-4361 CVE-2018-4372 CVE-2018-4373 CVE-2018-4375 CVE-2018-4376 CVE-2018-4378 CVE-2018-4382 CVE-2018-4386 CVE-2018-4392 CVE-2018-4416 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes 45 vulnerabilities is now available. Description: This update for webkit2gtk3 to version 2.22.4 fixes the following issues: Security issues fixed: CVE-2018-4191, CVE-2018-4197, CVE-2018-4299, CVE-2018-4306, CVE-2018-4309, CVE-2018-4392, CVE-2018-4312, CVE-2018-4314, CVE-2018-4315, CVE-2018-4316, CVE-2018-4317, CVE-2018-4318, CVE-2018-4319, CVE-2018-4323, CVE-2018-4328, CVE-2018-4358, CVE-2018-4359, CVE-2018-4361, CVE-2018-4345, CVE-2018-4372, CVE-2018-4373, CVE-2018-4375, CVE-2018-4376, CVE-2018-4416, CVE-2018-4378, CVE-2018-4382, CVE-2018-4386 (bsc#1110279, bsc#1116998). This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-68=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libjavascriptcoregtk-4_0-18-2.22.4-15.1 libjavascriptcoregtk-4_0-18-debuginfo-2.22.4-15.1 libwebkit2gtk-4_0-37-2.22.4-15.1 libwebkit2gtk-4_0-37-debuginfo-2.22.4-15.1 typelib-1_0-JavaScriptCore-4_0-2.22.4-15.1 typelib-1_0-WebKit2-4_0-2.22.4-15.1 typelib-1_0-WebKit2WebExtension-4_0-2.22.4-15.1 webkit-jsc-4-2.22.4-15.1 webkit-jsc-4-debuginfo-2.22.4-15.1 webkit2gtk-4_0-injected-bundles-2.22.4-15.1 webkit2gtk-4_0-injected-bundles-debuginfo-2.22.4-15.1 webkit2gtk3-debugsource-2.22.4-15.1 webkit2gtk3-devel-2.22.4-15.1 webkit2gtk3-minibrowser-2.22.4-15.1 webkit2gtk3-minibrowser-debuginfo-2.22.4-15.1 webkit2gtk3-plugin-process-gtk2-2.22.4-15.1 webkit2gtk3-plugin-process-gtk2-debuginfo-2.22.4-15.1 - openSUSE Leap 42.3 (x86_64): libjavascriptcoregtk-4_0-18-32bit-2.22.4-15.1 libjavascriptcoregtk-4_0-18-debuginfo-32bit-2.22.4-15.1 libwebkit2gtk-4_0-37-32bit-2.22.4-15.1 libwebkit2gtk-4_0-37-debuginfo-32bit-2.22.4-15.1 - openSUSE Leap 42.3 (noarch): libwebkit2gtk3-lang-2.22.4-15.1 References: https://www.suse.com/security/cve/CVE-2018-4191.html https://www.suse.com/security/cve/CVE-2018-4197.html https://www.suse.com/security/cve/CVE-2018-4207.html https://www.suse.com/security/cve/CVE-2018-4208.html https://www.suse.com/security/cve/CVE-2018-4209.html https://www.suse.com/security/cve/CVE-2018-4210.html https://www.suse.com/security/cve/CVE-2018-4212.html https://www.suse.com/security/cve/CVE-2018-4213.html https://www.suse.com/security/cve/CVE-2018-4261.html https://www.suse.com/security/cve/CVE-2018-4262.html https://www.suse.com/security/cve/CVE-2018-4263.html https://www.suse.com/security/cve/CVE-2018-4264.html https://www.suse.com/security/cve/CVE-2018-4265.html https://www.suse.com/security/cve/CVE-2018-4266.html https://www.suse.com/security/cve/CVE-2018-4267.html https://www.suse.com/security/cve/CVE-2018-4270.html https://www.suse.com/security/cve/CVE-2018-4272.html https://www.suse.com/security/cve/CVE-2018-4273.html https://www.suse.com/security/cve/CVE-2018-4278.html https://www.suse.com/security/cve/CVE-2018-4284.html https://www.suse.com/security/cve/CVE-2018-4299.html https://www.suse.com/security/cve/CVE-2018-4306.html https://www.suse.com/security/cve/CVE-2018-4309.html https://www.suse.com/security/cve/CVE-2018-4312.html https://www.suse.com/security/cve/CVE-2018-4314.html https://www.suse.com/security/cve/CVE-2018-4315.html https://www.suse.com/security/cve/CVE-2018-4316.html https://www.suse.com/security/cve/CVE-2018-4317.html https://www.suse.com/security/cve/CVE-2018-4318.html https://www.suse.com/security/cve/CVE-2018-4319.html https://www.suse.com/security/cve/CVE-2018-4323.html https://www.suse.com/security/cve/CVE-2018-4328.html https://www.suse.com/security/cve/CVE-2018-4345.html https://www.suse.com/security/cve/CVE-2018-4358.html https://www.suse.com/security/cve/CVE-2018-4359.html https://www.suse.com/security/cve/CVE-2018-4361.html https://www.suse.com/security/cve/CVE-2018-4372.html https://www.suse.com/security/cve/CVE-2018-4373.html https://www.suse.com/security/cve/CVE-2018-4375.html https://www.suse.com/security/cve/CVE-2018-4376.html https://www.suse.com/security/cve/CVE-2018-4378.html https://www.suse.com/security/cve/CVE-2018-4382.html https://www.suse.com/security/cve/CVE-2018-4386.html https://www.suse.com/security/cve/CVE-2018-4392.html https://www.suse.com/security/cve/CVE-2018-4416.html https://bugzilla.suse.com/1110279 https://bugzilla.suse.com/1116998

1 0

openSUSE-RU-2019:0067-1: moderate: Recommended update for podofo
by maintenance＠opensuse.org 18 Jan '19

18 Jan '19

openSUSE Recommended Update: Recommended update for podofo ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0067-1 Rating: moderate References: #1084894 Affected Products: openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for podofo fixes the following issues: Update to 0.9.6 - Drop multiple patches, now included upstream (like boo#1084894) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-67=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-67=1 Package List: - openSUSE Leap 15.0 (x86_64): libpodofo-devel-0.9.6-lp150.3.3.1 libpodofo0_9_6-0.9.6-lp150.3.3.1 libpodofo0_9_6-debuginfo-0.9.6-lp150.3.3.1 podofo-0.9.6-lp150.3.3.1 podofo-debuginfo-0.9.6-lp150.3.3.1 podofo-debugsource-0.9.6-lp150.3.3.1 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): libpodofo-devel-0.9.6-bp150.3.3.1 libpodofo0_9_6-0.9.6-bp150.3.3.1 libpodofo0_9_6-debuginfo-0.9.6-bp150.3.3.1 podofo-0.9.6-bp150.3.3.1 podofo-debuginfo-0.9.6-bp150.3.3.1 podofo-debugsource-0.9.6-bp150.3.3.1 References: https://bugzilla.suse.com/1084894

1 0

openSUSE-SU-2019:0066-1: important: Security update for podofo
by opensuse-security＠opensuse.org 18 Jan '19

18 Jan '19

openSUSE Security Update: Security update for podofo ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0066-1 Rating: important References: #1023067 #1023069 #1023070 #1023071 #1023380 #1027778 #1027779 #1027782 #1027787 #1032017 #1032018 #1032019 #1035534 #1035596 #1037739 #1075021 #1075026 #1075322 #1075772 #1084894 Cross-References: CVE-2017-5852 CVE-2017-5853 CVE-2017-5854 CVE-2017-5855 CVE-2017-5886 CVE-2017-6840 CVE-2017-6844 CVE-2017-6845 CVE-2017-6847 CVE-2017-7378 CVE-2017-7379 CVE-2017-7380 CVE-2017-7994 CVE-2017-8054 CVE-2017-8787 CVE-2018-5295 CVE-2018-5296 CVE-2018-5308 CVE-2018-5309 CVE-2018-8001 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes 20 vulnerabilities is now available. Description: This update for podofo version 0.9.6 fixes the following issues: Security issues fixed: - CVE-2017-5852: Fix a infinite loop in PoDoFo::PdfPage::GetInheritedKeyFromObject (PdfPage.cpp) (boo#1023067) - CVE-2017-5854: Fix a NULL pointer dereference in PdfOutputStream.cpp (boo#1023070) - CVE-2017-5886: Fix a heap-based buffer overflow in PoDoFo::PdfTokenizer::GetNextToken (PdfTokenizer.cpp) (boo#1023380) - CVE-2017-6844: Fix a buffer overflow in PoDoFo::PdfParser::ReadXRefSubsection (PdfParser.cpp) (boo#1027782) - CVE-2017-6847: Fix a NULL pointer dereference in PoDoFo::PdfVariant::DelayedLoad (PdfVariant.h) (boo#1027778) - CVE-2017-7379: Fix a heap-based buffer overflow in PoDoFo::PdfSimpleEncoding::ConvertToEncoding (PdfEncoding.cpp) (boo#1032018) - CVE-2018-5296: Fix a denial of service in the ReadXRefSubsection function (boo#1075021) - CVE-2018-5309: Fix a integer overflow in the ReadObjectsFromStream function (boo#1075322) - CVE-2017-5853: Fix a signed integer overflow in PdfParser.cpp (boo#1023069) - CVE-2017-5855: Fix a NULL pointer dereference in the ReadXRefSubsection function (boo#1023071) - CVE-2017-6840: Fix a invalid memory read in the GetColorFromStack function (boo#1027787) - CVE-2017-6845: Fix a NULL pointer dereference in the SetNonStrokingColorSpace function (boo#1027779) - CVE-2017-7378: Fix a heap-based buffer overflow in the ExpandTabs function (boo#1032017) - CVE-2017-7380: Fix four null pointer dereferences (boo#1032019) - CVE-2017-8054: Fix a denial of service in the GetPageNodeFromArray function (boo#1035596) - CVE-2018-5295: Fix a integer overflow in the ParseStream function (boo#1075026) - CVE-2018-5308: Fix undefined behavior in the PdfMemoryOutputStream::Write function (boo#1075772) - CVE-2018-8001: Fix a heap overflow read vulnerability in the UnescapeName function (boo#1084894) - CVE-2017-7994, CVE-2017-8787: Fix a denial of service via a crafted PDF document (boo#1035534, boo#1037739) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-66=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libpodofo-devel-0.9.6-10.3.1 libpodofo0_9_6-0.9.6-10.3.1 libpodofo0_9_6-debuginfo-0.9.6-10.3.1 podofo-0.9.6-10.3.1 podofo-debuginfo-0.9.6-10.3.1 podofo-debugsource-0.9.6-10.3.1 References: https://www.suse.com/security/cve/CVE-2017-5852.html https://www.suse.com/security/cve/CVE-2017-5853.html https://www.suse.com/security/cve/CVE-2017-5854.html https://www.suse.com/security/cve/CVE-2017-5855.html https://www.suse.com/security/cve/CVE-2017-5886.html https://www.suse.com/security/cve/CVE-2017-6840.html https://www.suse.com/security/cve/CVE-2017-6844.html https://www.suse.com/security/cve/CVE-2017-6845.html https://www.suse.com/security/cve/CVE-2017-6847.html https://www.suse.com/security/cve/CVE-2017-7378.html https://www.suse.com/security/cve/CVE-2017-7379.html https://www.suse.com/security/cve/CVE-2017-7380.html https://www.suse.com/security/cve/CVE-2017-7994.html https://www.suse.com/security/cve/CVE-2017-8054.html https://www.suse.com/security/cve/CVE-2017-8787.html https://www.suse.com/security/cve/CVE-2018-5295.html https://www.suse.com/security/cve/CVE-2018-5296.html https://www.suse.com/security/cve/CVE-2018-5308.html https://www.suse.com/security/cve/CVE-2018-5309.html https://www.suse.com/security/cve/CVE-2018-8001.html https://bugzilla.suse.com/1023067 https://bugzilla.suse.com/1023069 https://bugzilla.suse.com/1023070 https://bugzilla.suse.com/1023071 https://bugzilla.suse.com/1023380 https://bugzilla.suse.com/1027778 https://bugzilla.suse.com/1027779 https://bugzilla.suse.com/1027782 https://bugzilla.suse.com/1027787 https://bugzilla.suse.com/1032017 https://bugzilla.suse.com/1032018 https://bugzilla.suse.com/1032019 https://bugzilla.suse.com/1035534 https://bugzilla.suse.com/1035596 https://bugzilla.suse.com/1037739 https://bugzilla.suse.com/1075021 https://bugzilla.suse.com/1075026 https://bugzilla.suse.com/1075322 https://bugzilla.suse.com/1075772 https://bugzilla.suse.com/1084894

1 0

openSUSE-RU-2019:0062-1: moderate: Recommended update for ndctl
by maintenance＠opensuse.org 17 Jan '19

17 Jan '19

openSUSE Recommended Update: Recommended update for ndctl ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0062-1 Rating: moderate References: #1107113 #1110425 #1120931 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update provides version 63 of ndctl and brings many fixes and improvements: - Use Type=simple instead of Type=forking for service (bsc#1120931) - Enable ppc64le build (FATE#326817) - Drop 'v' from pkgconfig-version (breaks 'ipmctl'). (bsc#1107113, FATE#325527) - ars: Don't invalidate the user-provided command. - autoconf: Include sys/mman.h for MAP_SYNC. - bash-completion: Add completion for ndctl-monitor. - build: Introduce --with-{bash,systemd}. - check-labels: Correct check-labels message wording. - configure: Add -Wunused-result and -D_FORTIFY_SOURCE=2 to cflags. - contrib/do_abidiff: Make the build more robust. - contrib: Add helper scripts for new release. - destroy-namespace: Check for an already-zeroed info block. - documentation/create-namespace: Clarify fsdax wording. - documentation: Add a newline in namespace Theory of Operations. - documentation: Add asciidoctor-extensions.rb to .gitignore. - documentation: Add inject-smart to the Makefile. - documentation: Add man page for monitor. - documentation: Add namespace 'theory of operation'. - documentation: Add the support for asciidoctor. - documentation: Clarify the dimm id for ndctl list d option. - documentation: Document the label-version option for init-labels. - documentation: Fix title and section markers - documentation: Use asciidoctor by default. - filter: Fix "keyword 'all' is ignored" in util_<obj>_filter(). - filter: Refacor util_<obj>_filter() to support multiple space-seperated arguments. - inject-error: Add a --saturate option. - inject-smart: Add an interface to inject ctrl-temperature. - inject-smart: Add an option to uninject smart fields. - inject-smart: Continue in spite of errors for uninject-all. - inject-smart: Fix man page to match the current behavior. - inject: Fix a resource leak in ndctl_namespace_get_clear_unit. - intel: Fallback to smart cached shutdown_count. - lib: Add APIs for retrieving namespace badblocks. - lib: Add dirty-shutdown-count retrieval helper. - lib: Refactor badblocks retrieval routines. - libndctl/ars: Add an API to retrieve clear_err_unit. - libndctl/inject: Add 'v2' APIs for inject and uninject. - libndctl/inject: Inject fewer bytes per block by default. - libndctl/test: Fix a couple of unchecked returns. - libndctl: Fix a resource leak in ndctl_dimm_get_{{event_}flags, health}. - libndctl: Fix potential buffer overflow in write_cache APIs. - libndctl: Fix the uninject-error API actually injecting errors. - libndctl: Improve debug prints in wait_for_scrub_completion. - libndctl: Set errno for routines that don't return an error status. - list: Add alarm_enable_<field> to list. - list: Add controller temperature threshold and alarm. - list: Add controller temperature. - list: Always output array without --human. - list: Display the 'map' location in listings. - list: Fix the verbosity level formatting in the man page. - monitor: Add [--verbose] option to emit extra debug messages. - monitor: Add [Install] Section to systemd unit file of ndctl-monitor. - monitor: Add a config-file section to the man page. - monitor: Add a new command - monitor. - monitor: Add main ndctl monitor configuration file. - monitor: Add the unit file of systemd for ndctl-monitor service. - monitor: Add timestamp and pid to log messages in log_file(). - monitor: Fix a resource leak in parse_monitor_event. - monitor: Fix duplicate prefix in monitor.log. - monitor: Fix formatting for --log in the man page. - monitor: Fix memory leak in monitor_event. - monitor: Fix memory leak in read_config_file. - monitor: Fix the lack of detection of invalid dimm-events. - monitor: Fix the lack of detection of invalid path of log file. - monitor: Fix the severity of "daemon started" message. - monitor: Improve error reporting throughout monitor.c. - monitor: In daemon mode, exit successfully if no DIMMs are found. - monitor: Set default log destination to syslog if "--daemon" is specified. - namespace: Rework namespace action accounting. - ndctl: Add 'list' verbose options. - ndctl: Add CONTRIBUTING.md. - ndctl: Add a test file to .gitignore. - ndctl: Add an API to check support for smart injection. - ndctl: Add an api for getting the ars_status overflow flag. - ndctl: Autoconf detect BUS_MCEERR_AR. - ndctl: Create ndctl udev rules for dirty shutdown. - ndctl: Deprecate undocumented short-options. - ndctl: Fix ABI breakage due to rename of fw_info_get_updated_version. - ndctl: Fix a resource leak in submit_get_firmware_info. - ndctl: Fix libtool versioning. - ndctl: Fix potential null dereference in the smart error handler. - ndctl: Hide null uuids. - ndctl: Refactor validation of the ars_status command. - ndctl: Remove dependency on linker garbage collection. - ndctl: Remove warnings when -O0 is used with -D_FORTIFY_SOURCE=2. - ndctl: Revert "ndctl, intel: Fallback to smart cached shutdown_count". - ndctl: Revert "ndctl: Create ndctl udev rules for dirty shutdown". - ndctl: Simplify JSON print flag handling. - ndctl: Suppress command errors if fallback exists. - ndctl: Update README.md for code blocks. - ndctl: Use max_available_extent for namespace. - ndctl: Warn on variables declared after statement. - ndctl: Work around kernel memory corruption. - prepare-release.sh: Fix revision update checks. - spec: Use pkgconfig for systemd. - test/monitor: Fix inject-smart field in test_filter_dimmevent. - test: Add NFIT_TEST_BUS[01] variable and some helper funtions to common. - test: Add UUID_LIBS for list_smart_dimm. - test: Add a MADV_HWPOISON test. - test: Add a new unit test for max_available_extent namespace. - test: Add a new unit test for monitor. - test: Add a new unit test pfn metadata error clearing. - test: Add common helper functions for test scripts. - test: Add device-dax MADV_HWPOISON test. - test: Add start/wait scrub to injection tests. - test: Check availability of MAP_SYNC for poison test. - test: Cleanup test scripts. - test: Convert remaining tests to use test/common. - test: Disable poison tests for now. - test: Fix a potential null pointer dereference in 'ndctl test'. - test: Fix a resource leak in check_smart_threshold. - test: Fix dax.sh return code. - test: Fix sector-mode.sh to work with label support. - test: Fix tests for the array vs object listing fix. - test: Fix timeouts in device-dax. - test: Remove an unused variable assignment. - test: Remove the firmware image file before the test end. - test: Update libndctl test for controller temperature valid. - test: Update tests for capacity vs namespace-label locking. - tests: Add a new unit test for inject-smart. - udev: Fix a resource leak in save_unsafe_shutdown_count. - util/json: Add a util_namespace_badblocks_to_json() helper. - util/json: Add comments around re-checking the UTIL_JSON_MEDIA_ERRORS flag. - util/json: Fix an error check for region resource. - util/strbuf.h: Include sys/types.h for ssize_t definition. - util: Add OPTION_FILENAME to parse_opt_type. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-62=1 Package List: - openSUSE Leap 15.0 (x86_64): libndctl-devel-63-lp150.2.3.1 libndctl6-63-lp150.2.3.1 libndctl6-debuginfo-63-lp150.2.3.1 ndctl-63-lp150.2.3.1 ndctl-debuginfo-63-lp150.2.3.1 ndctl-debugsource-63-lp150.2.3.1 References: https://bugzilla.suse.com/1107113 https://bugzilla.suse.com/1110425 https://bugzilla.suse.com/1120931

1 0

openSUSE-SU-2019:0058-1: moderate: Security update for live555
by opensuse-security＠opensuse.org 17 Jan '19

17 Jan '19

openSUSE Security Update: Security update for live555 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0058-1 Rating: moderate References: #1114779 #1121892 Cross-References: CVE-2018-4013 CVE-2019-6256 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update fixes two security issues in live555: - CVE-2018-4013: Remote code execution vulnerability (bsc#1114779) - CVE-2019-6256: Denial of Service issue with RTSP-over-HTTP tunneling via x-sessioncookie HTTP headers (boo#1121892) This library is statically linked into VLC. However VLC is not affected because it only uses the live555 library to implement the RTSP client. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-58=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-58=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-58=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): live555-devel-2018.12.14-7.3.1 - openSUSE Leap 15.0 (x86_64): live555-devel-2018.12.14-lp150.2.3.1 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): live555-devel-2018.12.14-bp150.3.3.1 References: https://www.suse.com/security/cve/CVE-2018-4013.html https://www.suse.com/security/cve/CVE-2019-6256.html https://bugzilla.suse.com/1114779 https://bugzilla.suse.com/1121892

1 0

openSUSE-SU-2019:0064-1: important: Security update for zeromq
by opensuse-security＠opensuse.org 17 Jan '19

17 Jan '19

openSUSE Security Update: Security update for zeromq ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0064-1 Rating: important References: #1121717 Cross-References: CVE-2019-6250 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for zeromq fixes the following issues: Security issue fixed: - CVE-2019-6250: fix a remote execution vulnerability due to pointer arithmetic overflow (bsc#1121717) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-64=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libzmq5-4.2.2-2.8.1 libzmq5-debuginfo-4.2.2-2.8.1 zeromq-debugsource-4.2.2-2.8.1 zeromq-devel-4.2.2-2.8.1 zeromq-tools-4.2.2-2.8.1 zeromq-tools-debuginfo-4.2.2-2.8.1 - openSUSE Leap 42.3 (x86_64): libzmq5-32bit-4.2.2-2.8.1 libzmq5-debuginfo-32bit-4.2.2-2.8.1 References: https://www.suse.com/security/cve/CVE-2019-6250.html https://bugzilla.suse.com/1121717

1 0

openSUSE-SU-2019:0054-1: moderate: Security update for gitolite
by opensuse-security＠opensuse.org 17 Jan '19

17 Jan '19

openSUSE Security Update: Security update for gitolite ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0054-1 Rating: moderate References: #1121570 Cross-References: CVE-2018-20683 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for gitolite fixes the following security issue: - CVE-2018-20683: The rsync command line was not handled correctly, allow malicious rsync options (boo#1121570) The version update to 3.6.11 also contains a number of upstream bug fixes. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-54=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-54=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-54=1 Package List: - openSUSE Leap 42.3 (noarch): gitolite-3.6.11-4.6.1 - openSUSE Leap 15.0 (noarch): gitolite-3.6.11-lp150.2.6.1 - openSUSE Backports SLE-15 (noarch): gitolite-3.6.11-bp150.3.6.1 References: https://www.suse.com/security/cve/CVE-2018-20683.html https://bugzilla.suse.com/1121570

1 0

openSUSE-RU-2019:0060-1: moderate: Recommended update for yast2-users
by maintenance＠opensuse.org 17 Jan '19

17 Jan '19

openSUSE Recommended Update: Recommended update for yast2-users ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0060-1 Rating: moderate References: #1118617 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-users provides the following fixes: - Allow the root user to use a public key for authentication (fate#324690) - Improve public key selector help (fate#324690) - Add public keys handling support in an installed system (fate#324690) - Improve the label for importing public SSH keys to clearly state it is about SSH (bsc#1118617) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-60=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): yast2-users-4.0.11-lp150.2.9.1 yast2-users-debuginfo-4.0.11-lp150.2.9.1 yast2-users-debugsource-4.0.11-lp150.2.9.1 References: https://bugzilla.suse.com/1118617

1 0

openSUSE-RU-2019:0059-1: moderate: Recommended update for rpmlint
by maintenance＠opensuse.org 17 Jan '19

17 Jan '19

openSUSE Recommended Update: Recommended update for rpmlint ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0059-1 Rating: moderate References: #1015141 #1076467 #1089114 #1089340 #1095769 #1097339 #1102836 #1104110 #1108037 #1109938 #1111254 #1116686 #1116758 #1119975 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has 14 recommended fixes can now be installed. Description: This update for rpmlint fixes the following issues: - Update rpmlint-checks to version master (bsc#1116686) - whitelist boltd dbus service (bsc#1119975) - whitelist pam_slurm_adopt (bsc#1116758) - Add user/group 'slurm' for package slurm (FATE#316379) - whitelist keepalived dbus service (bsc#1015141) - remove openswan whitelisting (bsc#1089340) - whitelist systemd-timesyncd (bsc#1111254) - whitelist NetworkManager-fortisslvpn (bsc#1109938) - whitelist iwd D-Bus service (bsc#1108037) - whitelist xpra D-Bus service (bsc#1102836) - adjust maximum valid suse_version to 1550 (bsc#1104110) - whitelist ratbagd D-Bus service (bsc#1076467) - whitelist pam_oath PAM module after audit (bsc#1089114) - Update rpmlint-checks to version master (bsc#1097339) - whitelisting NetworkManager-libreswan plugin (bsc#1089340) - add Lua/NodeJS related groups to list of valid groups (bsc#1095769) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-59=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): rpmlint-mini-1.10-lp150.4.3.1 rpmlint-mini-debuginfo-1.10-lp150.4.3.1 rpmlint-mini-debugsource-1.10-lp150.4.3.1 - openSUSE Leap 15.0 (noarch): rpmlint-1.10-lp150.6.3.1 References: https://bugzilla.suse.com/1015141 https://bugzilla.suse.com/1076467 https://bugzilla.suse.com/1089114 https://bugzilla.suse.com/1089340 https://bugzilla.suse.com/1095769 https://bugzilla.suse.com/1097339 https://bugzilla.suse.com/1102836 https://bugzilla.suse.com/1104110 https://bugzilla.suse.com/1108037 https://bugzilla.suse.com/1109938 https://bugzilla.suse.com/1111254 https://bugzilla.suse.com/1116686 https://bugzilla.suse.com/1116758 https://bugzilla.suse.com/1119975

1 0

openSUSE-SU-2019:0065-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 17 Jan '19

17 Jan '19

openSUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0065-1 Rating: important References: #1024718 #1046299 #1050242 #1050244 #1051510 #1055121 #1055186 #1058115 #1060463 #1065729 #1078248 #1079935 #1082387 #1083647 #1086282 #1086283 #1086423 #1087978 #1088386 #1090888 #1091405 #1094244 #1097593 #1102875 #1102877 #1102879 #1102882 #1102896 #1103257 #1104353 #1104427 #1104967 #1105168 #1106105 #1106110 #1106615 #1106913 #1108270 #1109272 #1109665 #1110558 #1111188 #1111469 #1111696 #1111795 #1113722 #1114279 #1114871 #1116040 #1116183 #1116336 #1116803 #1116841 #1117115 #1117162 #1117165 #1117186 #1117561 #1117656 #1117953 #1118152 #1118215 #1118316 #1118319 #1118428 #1118484 #1118752 #1118760 #1118761 #1118762 #1118766 #1118767 #1118768 #1118769 #1118771 #1118772 #1118773 #1118774 #1118775 #1118798 #1118809 #1118962 #1119017 #1119086 #1119212 #1119322 #1119410 #1119714 #1119749 #1119804 #1119946 #1119962 #1119968 #1120036 #1120046 #1120053 #1120054 #1120055 #1120058 #1120088 #1120092 #1120094 #1120096 #1120097 #1120173 #1120214 #1120223 #1120228 #1120230 #1120232 #1120234 #1120235 #1120238 #1120594 #1120598 #1120600 #1120601 #1120602 #1120603 #1120604 #1120606 #1120612 #1120613 #1120614 #1120615 #1120616 #1120617 #1120618 #1120620 #1120621 #1120632 #1120633 #1120743 #1121017 #1121058 #1121263 #1121273 #1121477 #1121483 #1121621 #1121714 #1121715 Cross-References: CVE-2018-12232 CVE-2018-14625 CVE-2018-16862 CVE-2018-16884 CVE-2018-18397 CVE-2018-19407 CVE-2018-19824 CVE-2018-19854 CVE-2018-19985 CVE-2018-20169 CVE-2018-9568 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves 11 vulnerabilities and has 131 fixes is now available. Description: The openSUSE Leap 15.0 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-19407: The vcpu_scan_ioapic function in arch/x86/kvm/x86.c allowed local users to cause a denial of service (NULL pointer dereference and BUG) via crafted system calls that reach a situation where ioapic is uninitialized (bnc#1116841). - CVE-2018-14625: An attacker might have bene able to have an uncontrolled read to kernel-memory from within a vm guest. A race condition between connect() and close() function may allow an attacker using the AF_VSOCK protocol to gather a 4 byte information leak or possibly intercept or corrupt AF_VSOCK messages destined to other clients (bnc#1106615). - CVE-2018-19985: The function hso_probe read if_num from the USB device (as an u8) and used it without a length check to index an array, resulting in an OOB memory read in hso_probe or hso_get_config_data that could be used by local attackers (bsc#1120743). - CVE-2018-16884: NFS41+ shares mounted in different network namespaces at the same time can make bc_svc_process() use wrong back-channel IDs and cause a use-after-free vulnerability. Thus a malicious container user can cause a host kernel memory corruption and a system panic. Due to the nature of the flaw, privilege escalation cannot be fully ruled out (bnc#1119946). - CVE-2018-20169: The USB subsystem mishandled size checks during the reading of an extra descriptor, related to __usb_get_extra_descriptor in drivers/usb/core/usb.c (bnc#1119714). - CVE-2018-18397: The userfaultfd implementation mishandled access control for certain UFFDIO_ ioctl calls, as demonstrated by allowing local users to write data into holes in a tmpfs file (if the user has read-only access to that file, and that file contains holes), related to fs/userfaultfd.c and mm/userfaultfd.c (bnc#1117656). - CVE-2018-12232: In net/socket.c there was a race condition between fchownat and close in cases where they target the same socket file descriptor, related to the sock_close and sockfs_setattr functions. fchownat did not increment the file descriptor reference count, which allowed close to set the socket to NULL during fchownat's execution, leading to a NULL pointer dereference and system crash (bnc#1097593). - CVE-2018-9568: In sk_clone_lock of sock.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. (bnc#1118319). - CVE-2018-16862: A security flaw was found in the way that the cleancache subsystem clears an inode after the final file truncation (removal). The new file created with the same inode may contain leftover pages from cleancache and the old file data instead of the new one (bnc#1117186). - CVE-2018-19854: An issue was discovered in the crypto_report_one() and related functions in crypto/crypto_user.c (the crypto user configuration API) do not fully initialize structures that are copied to userspace, potentially leaking sensitive memory to user programs. NOTE: this is a CVE-2013-2547 regression but with easier exploitability because the attacker did not need a capability (however, the system must have the CONFIG_CRYPTO_USER kconfig option) (bnc#1118428). - CVE-2018-19824: A local user could exploit a use-after-free in the ALSA driver by supplying a malicious USB Sound device (with zero interfaces) that is mishandled in usb_audio_probe in sound/usb/card.c (bnc#1118152). The following non-security bugs were fixed: - ACPI / CPPC: Check for valid PCC subspace only if PCC is used (bsc#1117115). - ACPI / CPPC: Update all pr_(debug/err) messages to log the susbspace id (bsc#1117115). - aio: fix spectre gadget in lookup_ioctx (bsc#1120594). - alsa: cs46xx: Potential NULL dereference in probe (bsc#1051510). - alsa: emu10k1: Fix potential Spectre v1 vulnerabilities (bsc#1051510). - alsa: emux: Fix potential Spectre v1 vulnerabilities (bsc#1051510). - alsa: fireface: fix for state to fetch PCM frames (bsc#1051510). - alsa: fireface: fix reference to wrong register for clock configuration (bsc#1051510). - alsa: firewire-lib: fix wrong assignment for 'out_packet_without_header' tracepoint (bsc#1051510). - alsa: firewire-lib: fix wrong handling payload_length as payload_quadlet (bsc#1051510). - alsa: firewire-lib: use the same print format for 'without_header' tracepoints (bsc#1051510). - alsa: hda: add mute LED support for HP EliteBook 840 G4 (bsc#1051510). - alsa: hda: Add support for AMD Stoney Ridge (bsc#1051510). - alsa: hda/ca0132 - make pci_iounmap() call conditional (bsc#1051510). - alsa: hda: fix front speakers on Huawei MBXP (bsc#1051510). - alsa: hda/realtek - Add support for Acer Aspire C24-860 headset mic (bsc#1051510). - alsa: hda/realtek - Add unplug function into unplug state of Headset Mode for ALC225 (bsc#1051510). - alsa: hda/realtek: ALC286 mic and headset-mode fixups for Acer Aspire U27-880 (bsc#1051510). - alsa: hda/realtek: ALC294 mic and headset-mode fixups for ASUS X542UN (bsc#1051510). - alsa: hda/realtek - Disable headset Mic VREF for headset mode of ALC225 (bsc#1051510). - alsa: hda/realtek: Enable audio jacks of ASUS UX391UA with ALC294 (bsc#1051510). - alsa: hda/realtek: Enable audio jacks of ASUS UX433FN/UX333FA with ALC294 (bsc#1051510). - alsa: hda/realtek: Enable audio jacks of ASUS UX533FD with ALC294 (bsc#1051510). - alsa: hda/realtek: Enable the headset mic auto detection for ASUS laptops (bsc#1051510). - alsa: hda/realtek - Fixed headphone issue for ALC700 (bsc#1051510). - alsa: hda/realtek: Fix mic issue on Acer AIO Veriton Z4660G (bsc#1051510). - alsa: hda/realtek: Fix mic issue on Acer AIO Veriton Z4860G/Z6860G (bsc#1051510). - alsa: hda/realtek - Fix speaker output regression on Thinkpad T570 (bsc#1051510). - alsa: hda/realtek - Fix the mute LED regresion on Lenovo X1 Carbon (bsc#1051510). - alsa: hda/realtek - Support Dell headset mode for New AIO platform (bsc#1051510). - alsa: hda/tegra: clear pending irq handlers (bsc#1051510). - alsa: pcm: Call snd_pcm_unlink() conditionally at closing (bsc#1051510). - alsa: pcm: Fix interval evaluation with openmin/max (bsc#1051510). - alsa: pcm: Fix potential Spectre v1 vulnerability (bsc#1051510). - alsa: pcm: Fix starvation on down_write_nonblock() (bsc#1051510). - alsa: rme9652: Fix potential Spectre v1 vulnerability (bsc#1051510). - alsa: trident: Suppress gcc string warning (bsc#1051510). - alsa: usb-audio: Add SMSL D1 to quirks for native DSD support (bsc#1051510). - alsa: usb-audio: Add support for Encore mDSD USB DAC (bsc#1051510). - alsa: usb-audio: Avoid access before bLength check in build_audio_procunit() (bsc#1051510). - alsa: usb-audio: Fix an out-of-bound read in create_composite_quirks (bsc#1051510). - alsa: x86: Fix runtime PM for hdmi-lpe-audio (bsc#1051510). - apparmor: do not try to replace stale label in ptrace access check (git-fixes). - apparmor: do not try to replace stale label in ptraceme check (git-fixes). - apparmor: Fix uninitialized value in aa_split_fqname (git-fixes). - arm64: Add work around for Arm Cortex-A55 Erratum 1024718 (bsc#1120612). - arm64: atomics: Remove '&' from '+&' asm constraint in lse atomics (bsc#1120613). - arm64: cpu_errata: include required headers (bsc#1120615). - arm64: dma-mapping: Fix FORCE_CONTIGUOUS buffer clearing (bsc#1120633). - arm64: Fix /proc/iomem for reserved but not memory regions (bsc#1120632). - arm64: lse: Add early clobbers to some input/output asm operands (bsc#1120614). - arm64: lse: remove -fcall-used-x0 flag (bsc#1120618). - arm64: mm: always enable CONFIG_HOLES_IN_ZONE (bsc#1120617). - arm64/numa: Report correct memblock range for the dummy node (bsc#1120620). - arm64/numa: Unify common error path in numa_init() (bsc#1120621). - arm64: remove no-op -p linker flag (bsc#1120616). - ASoC: dapm: Recalculate audio map forcely when card instantiated (bsc#1051510). - ASoC: intel: cht_bsw_max98090_ti: Add pmc_plt_clk_0 quirk for Chromebook Clapper (bsc#1051510). - ASoC: intel: cht_bsw_max98090_ti: Add pmc_plt_clk_0 quirk for Chromebook Gnawty (bsc#1051510). - ASoC: intel: mrfld: fix uninitialized variable access (bsc#1051510). - ASoC: omap-abe-twl6040: Fix missing audio card caused by deferred probing (bsc#1051510). - ASoC: omap-dmic: Add pm_qos handling to avoid overruns with CPU_IDLE (bsc#1051510). - ASoC: omap-mcbsp: Fix latency value calculation for pm_qos (bsc#1051510). - ASoC: omap-mcpdm: Add pm_qos handling to avoid under/overruns with CPU_IDLE (bsc#1051510). - ASoC: rsnd: fixup clock start checker (bsc#1051510). - ASoC: wm_adsp: Fix dma-unsafe read of scratch registers (bsc#1051510). - ath10k: do not assume this is a PCI dev in generic code (bsc#1051510). - ath6kl: Only use match sets when firmware supports it (bsc#1051510). - b43: Fix error in cordic routine (bsc#1051510). - bcache: fix miss key refill->end in writeback (Git-fixes). - bcache: trace missed reading by cache_missed (Git-fixes). - blk-mq: remove synchronize_rcu() from blk_mq_del_queue_tag_set() (Git-fixes). - block: allow max_discard_segments to be stacked (Git-fixes). - block: blk_init_allocated_queue() set q->fq as NULL in the fail case (Git-fixes). - block: really disable runtime-pm for blk-mq (Git-fixes). - block: reset bi_iter.bi_done after splitting bio (Git-fixes). - block/swim: Fix array bounds check (Git-fixes). - bnxt_en: do not try to offload VLAN 'modify' action (bsc#1050242 ). - bnxt_en: Fix enables field in HWRM_QUEUE_COS2BW_CFG request (bsc#1086282). - bnxt_en: Fix VNIC reservations on the PF (bsc#1086282 ). - bnxt_en: get the reduced max_irqs by the ones used by RDMA (bsc#1050242). - bpf: fix check of allowed specifiers in bpf_trace_printk (bsc#1083647). - bpf: use per htab salt for bucket hash (git-fixes). - btrfs: Always try all copies when reading extent buffers (git-fixes). - btrfs: delete dead code in btrfs_orphan_add() (bsc#1111469). - btrfs: delete dead code in btrfs_orphan_commit_root() (bsc#1111469). - btrfs: do not BUG_ON() in btrfs_truncate_inode_items() (bsc#1111469). - btrfs: do not check inode's runtime flags under root->orphan_lock (bsc#1111469). - btrfs: do not return ino to ino cache if inode item removal fails (bsc#1111469). - btrfs: fix ENOSPC caused by orphan items reservations (bsc#1111469). - btrfs: Fix error handling in btrfs_cleanup_ordered_extents (git-fixes). - btrfs: fix error handling in btrfs_truncate() (bsc#1111469). - btrfs: fix error handling in btrfs_truncate_inode_items() (bsc#1111469). - btrfs: fix fsync of files with multiple hard links in new directories (1120173). - btrfs: Fix memory barriers usage with device stats counters (git-fixes). - btrfs: fix use-after-free on root->orphan_block_rsv (bsc#1111469). - btrfs: get rid of BTRFS_INODE_HAS_ORPHAN_ITEM (bsc#1111469). - btrfs: get rid of unused orphan infrastructure (bsc#1111469). - btrfs: move btrfs_truncate_block out of trans handle (bsc#1111469). - btrfs: qgroup: Dirty all qgroups before rescan (bsc#1120036). - btrfs: refactor btrfs_evict_inode() reserve refill dance (bsc#1111469). - btrfs: renumber BTRFS_INODE_ runtime flags and switch to enums (bsc#1111469). - btrfs: reserve space for O_TMPFILE orphan item deletion (bsc#1111469). - btrfs: run delayed items before dropping the snapshot (bsc#1121263, bsc#1111188). - btrfs: stop creating orphan items for truncate (bsc#1111469). - btrfs: tree-checker: Do not check max block group size as current max chunk size limit is unreliable (fixes for bsc#1102882, bsc#1102896, bsc#1102879, bsc#1102877, bsc#1102875). - btrfs: update stale comments referencing vmtruncate() (bsc#1111469). - can: flexcan: flexcan_irq(): fix indention (bsc#1051510). - cdrom: do not attempt to fiddle with cdo->capability (bsc#1051510). - ceph: do not update importing cap's mseq when handing cap export (bsc#1121273). - char_dev: extend dynamic allocation of majors into a higher range (bsc#1121058). - char_dev: Fix off-by-one bugs in find_dynamic_major() (bsc#1121058). - clk: mmp: Off by one in mmp_clk_add() (bsc#1051510). - clk: mvebu: Off by one bugs in cp110_of_clk_get() (bsc#1051510). - compiler-gcc.h: Add __attribute__((gnu_inline)) to all inline declarations (git-fixes). - config: arm64: enable erratum 1024718 - cpufeature: avoid warning when compiling with clang (Git-fixes). - cpufreq / CPPC: Add cpuinfo_cur_freq support for CPPC (bsc#1117115). - cpufreq: CPPC: fix build in absence of v3 support (bsc#1117115). - cpupower: remove stringop-truncation waring (git-fixes). - crypto: bcm - fix normal/non key hash algorithm failure (bsc#1051510). - crypto: ccp - Add DOWNLOAD_FIRMWARE SEV command (). - crypto: ccp - Add GET_ID SEV command (). - crypto: ccp - Add psp enabled message when initialization succeeds (). - crypto: ccp - Add support for new CCP/PSP device ID (). - crypto: ccp - Allow SEV firmware to be chosen based on Family and Model (). - crypto: ccp - Fix static checker warning (). - crypto: ccp - Remove unused #defines (). - crypto: ccp - Support register differences between PSP devices (). - dasd: fix deadlock in dasd_times_out (bsc#1121477, LTC#174111). - dax: Check page->mapping isn't NULL (bsc#1120054). - dax: Do not access a freed inode (bsc#1120055). - device property: Define type of PROPERTY_ENRTY_*() macros (bsc#1051510). - device property: fix fwnode_graph_get_next_endpoint() documentation (bsc#1051510). - disable stringop truncation warnings for now (git-fixes). - dm: allocate struct mapped_device with kvzalloc (Git-fixes). - dm cache: destroy migration_cache if cache target registration failed (Git-fixes). - dm cache: fix resize crash if user does not reload cache table (Git-fixes). - dm cache metadata: ignore hints array being too small during resize (Git-fixes). - dm cache metadata: save in-core policy_hint_size to on-disk superblock (Git-fixes). - dm cache metadata: set dirty on all cache blocks after a crash (Git-fixes). - dm cache: only allow a single io_mode cache feature to be requested (Git-fixes). - dm crypt: do not decrease device limits (Git-fixes). - dm: fix report zone remapping to account for partition offset (Git-fixes). - dm integrity: change 'suspending' variable from bool to int (Git-fixes). - dm ioctl: harden copy_params()'s copy_from_user() from malicious users (Git-fixes). - dm linear: eliminate linear_end_io call if CONFIG_DM_ZONED disabled (Git-fixes). - dm linear: fix linear_end_io conditional definition (Git-fixes). - dm thin: handle running out of data space vs concurrent discard (Git-fixes). - dm thin metadata: remove needless work from __commit_transaction (Git-fixes). - dm thin: stop no_space_timeout worker when switching to write-mode (Git-fixes). - dm writecache: fix a crash due to reading past end of dirty_bitmap (Git-fixes). - dm writecache: report start_sector in status line (Git-fixes). - dm zoned: fix metadata block ref counting (Git-fixes). - dm zoned: fix various dmz_get_mblock() issues (Git-fixes). - doc/README.SUSE: correct GIT url No more gitorious, github we use. - drivers/net/usb: add device id for TP-LINK UE300 USB 3.0 Ethernet (bsc#1119749). - drivers/net/usb/r8152: remove the unneeded variable "ret" in rtl8152_system_suspend (bsc#1119749). - drm/amdgpu/gmc8: update MC firmware for polaris (bsc#1113722) - drm/amdgpu: update mc firmware image for polaris12 variants (bsc#1113722) - drm/amdgpu: update SMC firmware image for polaris10 variants (bsc#1113722) - drm/i915/execlists: Apply a full mb before execution for Braswell (bsc#1113722) - drm/ioctl: Fix Spectre v1 vulnerabilities (bsc#1113722) - drm/nouveau/kms: Fix memory leak in nv50_mstm_del() (bsc#1113722) - drm: rcar-du: Fix external clock error checks (bsc#1113722) - drm: rcar-du: Fix vblank initialization (bsc#1113722) - drm/rockchip: psr: do not dereference encoder before it is null (bsc#1113722) - drm: set is_master to 0 upon drm_new_set_master() failure (bsc#1113722) - drm/vc4: Set ->is_yuv to false when num_planes == 1 (bsc#1113722) - drm/vc4: ->x_scaling[1] should never be set to VC4_SCALING_NONE (bsc#1113722) - dt-bindings: add compatible string for Allwinner V3s SoC (git-fixes). - dt-bindings: arm: Document SoC compatible value for Armadillo-800 EVA (git-fixes). - dt-bindings: clock: add rk3399 DDR3 standard speed bins (git-fixes). - dt-bindings: clock: mediatek: add binding for fixed-factor clock axisel_d4 (git-fixes). - dt-bindings: mfd: axp20x: Add AXP806 to supported list of chips (git-fixes). - dt-bindings: net: Remove duplicate NSP Ethernet MAC binding document (git-fixes). - dt-bindings: panel: lvds: Fix path to display timing bindings (git-fixes). - dt-bindings: phy: sun4i-usb-phy: Add property descriptions for H3 (git-fixes). - dt-bindings: pwm: renesas: tpu: Fix "compatible" prop description (git-fixes). - dt-bindings: rcar-dmac: Document missing error interrupt (git-fixes). - edac, {i7core,sb,skx}_edac: Fix uncorrected error counting (bsc#1114279). - edac, skx_edac: Fix logical channel intermediate decoding (bsc#1114279). - efi: Move some sysfs files to be read-only by root (bsc#1051510). - ethernet: fman: fix wrong of_node_put() in probe function (bsc#1119017). - exportfs: fix 'passing zero to ERR_PTR()' warning (bsc#1118773). - ext2: fix potential use after free (bsc#1118775). - ext4: avoid possible double brelse() in add_new_gdb() on error path (bsc#1118760). - ext4: fix EXT4_IOC_GROUP_ADD ioctl (bsc#1120604). - ext4: fix possible use after free in ext4_quota_enable (bsc#1120602). - ext4: missing unlock/put_page() in ext4_try_to_write_inline_data() (bsc#1120603). - extable: Consolidate *kernel_text_address() functions (bsc#1120092). - extable: Enable RCU if it is not watching in kernel_text_address() (bsc#1120092). - fbdev: fbcon: Fix unregister crash when more than one framebuffer (bsc#1113722) - fbdev: fbmem: behave better with small rotated displays and many CPUs (bsc#1113722) - firmware: add firmware_request_nowarn() - load firmware without warnings (). - Fix the breakage of KMP build on x86_64 (bsc#1121017) - fscache: Fix race in fscache_op_complete() due to split atomic_sub & read (Git-fixes). - fscache: Pass the correct cancelled indications to fscache_op_complete() (Git-fixes). - fs: fix lost error code in dio_complete (bsc#1118762). - fs/xfs: Use %pS printk format for direct addresses (git-fixes). - fuse: fix blocked_waitq wakeup (git-fixes). - fuse: fix leaked notify reply (git-fixes). - fuse: fix possibly missed wake-up after abort (git-fixes). - fuse: Fix use-after-free in fuse_dev_do_read() (git-fixes). - fuse: Fix use-after-free in fuse_dev_do_write() (git-fixes). - fuse: fix use-after-free in fuse_direct_IO() (git-fixes). - fuse: set FR_SENT while locked (git-fixes). - gcc-plugins: Add include required by GCC release 8 (git-fixes). - gcc-plugins: Use dynamic initializers (git-fixes). - gfs2: Do not leave s_fs_info pointing to freed memory in init_sbd (bsc#1118769). - gfs2: Fix loop in gfs2_rbm_find (bsc#1120601). - gfs2: Get rid of potential double-freeing in gfs2_create_inode (bsc#1120600). - gfs2_meta: ->mount() can get NULL dev_name (bsc#1118768). - gfs2: Put bitmap buffers in put_super (bsc#1118772). - git_sort.py: Remove non-existent remote tj/libata - gpio: davinci: Remove unused member of davinci_gpio_controller (git-fixes). - gpiolib-acpi: Only defer request_irq for GpioInt ACPI event handlers (bsc#1051510). - gpiolib: Fix return value of gpio_to_desc() stub if !GPIOLIB (bsc#1051510). - gpio: max7301: fix driver for use with CONFIG_VMAP_STACK (bsc#1051510). - gpio: mvebu: only fail on missing clk if pwm is actually to be used (bsc#1051510). - HID: Add quirk for Primax PIXART OEM mice (bsc#1119410). - HID: input: Ignore battery reported by Symbol DS4308 (bsc#1051510). - HID: multitouch: Add pointstick support for Cirque Touchpad (bsc#1051510). - hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (bnc#1116336). - i2c: axxia: properly handle master timeout (bsc#1051510). - i2c: scmi: Fix probe error on devices with an empty SMB0001 ACPI device node (bsc#1051510). - ib/hfi1: Add mtu check for operational data VLs (bsc#1060463 ). - ibmvnic: Convert reset work item mutex to spin lock (). - ibmvnic: Fix non-atomic memory allocation in IRQ context (). - ib/rxe: support for 802.1q VLAN on the listener (bsc#1082387). - ieee802154: 6lowpan: set IFLA_LINK (bsc#1051510). - ieee802154: at86rf230: switch from BUG_ON() to WARN_ON() on problem (bsc#1051510). - ieee802154: at86rf230: use __func__ macro for debug messages (bsc#1051510). - ieee802154: fakelb: switch from BUG_ON() to WARN_ON() on problem (bsc#1051510). - Include modules.fips in kernel-binary as well as kernel-binary-base (). - initramfs: fix initramfs rebuilds w/ compression after disabling (git-fixes). - input: add official Raspberry Pi's touchscreen driver (). - input: cros_ec_keyb - fix button/switch capability reports (bsc#1051510). - input: elan_i2c - add ACPI ID for Lenovo IdeaPad 330-15ARR (bsc#1051510). - input: elan_i2c - add ELAN0620 to the ACPI table (bsc#1051510). - input: elan_i2c - add support for ELAN0621 touchpad (bsc#1051510). - input: hyper-v - fix wakeup from suspend-to-idle (bsc#1051510). - input: matrix_keypad - check for errors from of_get_named_gpio() (bsc#1051510). - input: nomadik-ske-keypad - fix a loop timeout test (bsc#1051510). - input: omap-keypad - fix keyboard debounce configuration (bsc#1051510). - input: synaptics - add PNP ID for ThinkPad P50 to SMBus (bsc#1051510). - input: synaptics - enable SMBus for HP 15-ay000 (bsc#1051510). - input: xpad - quirk all PDP Xbox One gamepads (bsc#1051510). - integrity/security: fix digsig.c build error with header file (bsc#1051510). - intel_th: msu: Fix an off-by-one in attribute store (bsc#1051510). - iommu/amd: Fix amd_iommu=force_isolation (bsc#1106105). - iommu/vt-d: Handle domain agaw being less than iommu agaw (bsc#1106105). - iwlwifi: add new cards for 9560, 9462, 9461 and killer series (bsc#1051510). - iwlwifi: fix LED command capability bit (bsc#1119086). - iwlwifi: nvm: get num of hw addresses from firmware (bsc#1119086). - iwlwifi: pcie: do not reset TXQ write pointer (bsc#1051510). - jffs2: free jffs2_sb_info through jffs2_kill_sb() (bsc#1118767). - jump_label: Split out code under the hotplug lock (bsc#1106913). - kabi: hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (bnc#1116336). - kabi protect hnae_ae_ops (bsc#1104353). - kbuild: allow to use GCC toolchain not in Clang search path (git-fixes). - kbuild: fix linker feature test macros when cross compiling with Clang (git-fixes). - kbuild: make missing $DEPMOD a Warning instead of an Error (git-fixes). - kbuild: rpm-pkg: keep spec file until make mrproper (git-fixes). - kbuild: suppress packed-not-aligned warning for default setting only (git-fixes). - kbuild: verify that $DEPMOD is installed (git-fixes). - kernfs: Replace strncpy with memcpy (bsc#1120053). - keys: Fix the use of the C++ keyword "private" in uapi/linux/keyctl.h (Git-fixes). - kobject: Replace strncpy with memcpy (git-fixes). - kprobes: Make list and blacklist root user read only (git-fixes). - kvm: PPC: Book3S PR: Enable use on POWER9 inside HPT-mode guests (bsc#1118484). - kvm: svm: Ensure an IBPB on all affected CPUs when freeing a vmcb (bsc#1114279). - libata: whitelist all SAMSUNG MZ7KM* solid-state disks (bsc#1051510). - libceph: fall back to sendmsg for slab pages (bsc#1118316). - libnvdimm, pfn: Pad pfn namespaces relative to other regions (bsc#1118962). - lib/raid6: Fix arm64 test build (bsc#1051510). - lib/ubsan.c: do not mark __ubsan_handle_builtin_unreachable as noreturn (bsc#1051510). - Limit max FW API version for QCA9377 (bsc#1121714, bsc#1121715). - linux/bitmap.h: fix type of nbits in bitmap_shift_right() (bsc#1051510). - locking/barriers: Convert users of lockless_dereference() to READ_ONCE() (Git-fixes). - locking/static_keys: Improve uninitialized key warning (bsc#1106913). - mac80211: Clear beacon_int in ieee80211_do_stop (bsc#1051510). - mac80211: fix reordering of buffered broadcast packets (bsc#1051510). - mac80211_hwsim: fix module init error paths for netlink (bsc#1051510). - mac80211_hwsim: Timer should be initialized before device registered (bsc#1051510). - mac80211: ignore NullFunc frames in the duplicate detection (bsc#1051510). - mac80211: ignore tx status for PS stations in ieee80211_tx_status_ext (bsc#1051510). - Mark HI and TASKLET softirq synchronous (git-fixes). - media: em28xx: Fix use-after-free when disconnecting (bsc#1051510). - media: em28xx: make v4l2-compliance happier by starting sequence on zero (bsc#1051510). - media: omap3isp: Unregister media device as first (bsc#1051510). - mmc: bcm2835: reset host on timeout (bsc#1051510). - mmc: core: Allow BKOPS and CACHE ctrl even if no HPI support (bsc#1051510). - mmc: core: Reset HPI enabled state during re-init and in case of errors (bsc#1051510). - mmc: core: Use a minimum 1600ms timeout when enabling CACHE ctrl (bsc#1051510). - mmc: dw_mmc-bluefield: Add driver extension (bsc#1118752). - mmc: dw_mmc-k3: add sd support for hi3660 (bsc#1118752). - MMC: OMAP: fix broken MMC on OMAP15XX/OMAP5910/OMAP310 (bsc#1051510). - mmc: omap_hsmmc: fix DMA API warning (bsc#1051510). - mmc: sdhci: fix the timeout check window for clock and reset (bsc#1051510). - mm: do not miss the last page because of round-off error (bnc#1118798). - mm: do not warn about large allocations for slab (git fixes (slab)). - mm/huge_memory.c: reorder operations in __split_huge_page_tail() (VM Functionality bsc#1119962). - mm: hugetlb: yield when prepping struct pages (git fixes (memory initialisation)). - mm: lower the printk loglevel for __dump_page messages (generic hotplug debugability). - mm, memory_hotplug: be more verbose for memory offline failures (generic hotplug debugability). - mm, memory_hotplug: drop pointless block alignment checks from __offline_pages (generic hotplug debugability). - mm, memory_hotplug: print reason for the offlining failure (generic hotplug debugability). - mm: migration: fix migration of huge PMD shared pages (bnc#1086423). - mm: only report isolation failures when offlining memory (generic hotplug debugability). - mm: print more information about mapping in __dump_page (generic hotplug debugability). - mm: put_and_wait_on_page_locked() while page is migrated (bnc#1109272). - mm: sections are not offlined during memory hotremove (bnc#1119968). - mm: shmem.c: Correctly annotate new inodes for lockdep (Git fixes: shmem). - mm/vmstat.c: fix NUMA statistics updates (git fixes). - Move dell_rbu fix to sorted section (bsc#1087978). - mtd: cfi: convert inline functions to macros (git-fixes). - mtd: Fix comparison in map_word_andequal() (git-fixes). - namei: allow restricted O_CREAT of FIFOs and regular files (bsc#1118766). - nbd: do not allow invalid blocksize settings (Git-fixes). - net: bgmac: Fix endian access in bgmac_dma_tx_ring_free() (bsc#1051510). - net: dsa: mv88e6xxx: Fix binding documentation for MDIO busses (git-fixes). - net: dsa: qca8k: Add QCA8334 binding documentation (git-fixes). - net: ena: fix crash during ena_remove() (bsc#1111696 bsc#1117561). - net: ena: update driver version from 2.0.1 to 2.0.2 (bsc#1111696 bsc#1117561). - net: hns3: Add nic state check before calling netif_tx_wake_queue (bsc#1104353). - net: hns3: Add support for hns3_nic_netdev_ops.ndo_do_ioctl (bsc#1104353). - net: hns3: bugfix for buffer not free problem during resetting (bsc#1104353). - net: hns3: bugfix for handling mailbox while the command queue reinitialized (bsc#1104353). - net: hns3: bugfix for hclge_mdio_write and hclge_mdio_read (bsc#1104353). - net: hns3: bugfix for is_valid_csq_clean_head() (bsc#1104353 ). - net: hns3: bugfix for reporting unknown vector0 interrupt repeatly problem (bsc#1104353). - net: hns3: bugfix for rtnl_lock's range in the hclgevf_reset() (bsc#1104353). - net: hns3: bugfix for the initialization of command queue's spin lock (bsc#1104353). - net: hns3: Check hdev state when getting link status (bsc#1104353). - net: hns3: Clear client pointer when initialize client failed or unintialize finished (bsc#1104353). - net: hns3: Fix cmdq registers initialization issue for vf (bsc#1104353). - net: hns3: Fix error of checking used vlan id (bsc#1104353 ). - net: hns3: Fix ets validate issue (bsc#1104353). - net: hns3: Fix for netdev not up problem when setting mtu (bsc#1104353). - net: hns3: Fix for out-of-bounds access when setting pfc back pressure (bsc#1104353). - net: hns3: Fix for packet buffer setting bug (bsc#1104353 ). - net: hns3: Fix for rx vlan id handle to support Rev 0x21 hardware (bsc#1104353). - net: hns3: Fix for setting speed for phy failed problem (bsc#1104353). - net: hns3: Fix for vf vlan delete failed problem (bsc#1104353 ). - net: hns3: Fix loss of coal configuration while doing reset (bsc#1104353). - net: hns3: Fix parameter type for q_id in hclge_tm_q_to_qs_map_cfg() (bsc#1104353). - net: hns3: Fix ping exited problem when doing lp selftest (bsc#1104353). - net: hns3: Preserve vlan 0 in hardware table (bsc#1104353 ). - net: hns3: remove unnecessary queue reset in the hns3_uninit_all_ring() (bsc#1104353). - net: hns3: Set STATE_DOWN bit of hdev state when stopping net (bsc#1104353). - net/mlx4_core: Correctly set PFC param if global pause is turned off (bsc#1046299). - net: usb: r8152: constify usb_device_id (bsc#1119749). - net: usb: r8152: use irqsave() in USB's complete callback (bsc#1119749). - nospec: Allow index argument to have const-qualified type (git-fixes) - nospec: Kill array_index_nospec_mask_check() (git-fixes). - nvme-fc: resolve io failures during connect (bsc#1116803). - nvme-multipath: zero out ANA log buffer (bsc#1105168). - nvme: validate controller state before rescheduling keep alive (bsc#1103257). - objtool: Detect RIP-relative switch table references (bsc#1058115). - objtool: Detect RIP-relative switch table references, part 2 (bsc#1058115). - objtool: Fix another switch table detection issue (bsc#1058115). - objtool: Fix double-free in .cold detection error path (bsc#1058115). - objtool: Fix GCC 8 cold subfunction detection for aliased functions (bsc#1058115). - objtool: Fix "noreturn" detection for recursive sibling calls (bsc#1058115). - objtool: Fix segfault in .cold detection with -ffunction-sections (bsc#1058115). - objtool: Support GCC 8's cold subfunctions (bsc#1058115). - objtool: Support GCC 8 switch tables (bsc#1058115). - panic: avoid deadlocks in re-entrant console drivers (bsc#1088386). - PCI: Add ACS quirk for Ampere root ports (bsc#1120058). - PCI: Add ACS quirk for APM X-Gene devices (bsc#1120058). - PCI: Convert device-specific ACS quirks from NULL termination to ARRAY_SIZE (bsc#1120058). - PCI: Delay after FLR of Intel DC P3700 NVMe (bsc#1120058). - PCI: Disable Samsung SM961/PM961 NVMe before FLR (bsc#1120058). - PCI: Export pcie_has_flr() (bsc#1120058). - PCI: iproc: Activate PAXC bridge quirk for more devices (bsc#1120058). - PCI: Mark Ceton InfiniTV4 INTx masking as broken (bsc#1120058). - PCI: Mark fall-through switch cases before enabling -Wimplicit-fallthrough (bsc#1120058). - PCI: Mark Intel XXV710 NIC INTx masking as broken (bsc#1120058). - perf tools: Fix tracing_path_mount proper path (git-fixes). - platform-msi: Free descriptors in platform_msi_domain_free() (bsc#1051510). - powerpc/64s: consolidate MCE counter increment (bsc#1094244). - powerpc/64s/radix: Fix process table entry cache invalidation (bsc#1055186, git-fixes). - powerpc/boot: Expose Kconfig symbols to wrapper (bsc#1065729). - powerpc/boot: Fix build failures with -j 1 (bsc#1065729). - powerpc/pkeys: Fix handling of pkey state across fork() (bsc#1078248, git-fixes). - powerpc/powernv: Fix save/restore of SPRG3 on entry/exit from stop (idle) (bsc#1055121). - powerpc/pseries: Track LMB nid instead of using device tree (bsc#1108270). - powerpc/traps: restore recoverability of machine_check interrupts (bsc#1094244). - power: supply: olpc_battery: correct the temperature units (bsc#1051510). - ptrace: Remove unused ptrace_may_access_sched() and MODE_IBRS (bsc#1106913). - qed: Add driver support for 20G link speed (bsc#1110558). - qed: Add support for virtual link (bsc#1111795). - qede: Add driver support for 20G link speed (bsc#1110558). - r8152: add byte_enable for ocp_read_word function (bsc#1119749). - r8152: add Linksys USB3GIGV1 id (bsc#1119749). - r8152: add r8153_phy_status function (bsc#1119749). - r8152: adjust lpm settings for RTL8153 (bsc#1119749). - r8152: adjust rtl8153_runtime_enable function (bsc#1119749). - r8152: adjust the settings about MAC clock speed down for RTL8153 (bsc#1119749). - r8152: adjust U2P3 for RTL8153 (bsc#1119749). - r8152: avoid rx queue more than 1000 packets (bsc#1119749). - r8152: check if disabling ALDPS is finished (bsc#1119749). - r8152: correct the definition (bsc#1119749). - r8152: disable RX aggregation on Dell TB16 dock (bsc#1119749). - r8152: disable RX aggregation on new Dell TB16 dock (bsc#1119749). - r8152: fix wrong checksum status for received IPv4 packets (bsc#1119749). - r8152: move calling delay_autosuspend function (bsc#1119749). - r8152: move the default coalesce setting for RTL8153 (bsc#1119749). - r8152: move the initialization to reset_resume function (bsc#1119749). - r8152: move the setting of rx aggregation (bsc#1119749). - r8152: replace napi_complete with napi_complete_done (bsc#1119749). - r8152: set rx mode early when linking on (bsc#1119749). - r8152: split rtl8152_resume function (bsc#1119749). - r8152: support new chip 8050 (bsc#1119749). - r8152: support RTL8153B (bsc#1119749). - rbd: whitelist RBD_FEATURE_OPERATIONS feature bit (Git-fixes). - rcu: Allow for page faults in NMI handlers (bsc#1120092). - rdma/bnxt_re: Add missing spin lock initialization (bsc#1050244 ). - rdma/bnxt_re: Avoid accessing the device structure after it is freed (bsc#1050244). - rdma/bnxt_re: Avoid NULL check after accessing the pointer (bsc#1086283). - rdma/bnxt_re: Fix system hang when registration with L2 driver fails (bsc#1086283). - rdma/hns: Bugfix pbl configuration for rereg mr (bsc#1104427 ). - rdma_rxe: make rxe work over 802.1q VLAN devices (bsc#1082387). - reset: remove remaining WARN_ON() in <linux/reset.h> (Git-fixes). - Revert commit ef9209b642f "staging: rtl8723bs: Fix indenting errors and an off-by-one mistake in core/rtw_mlme_ext.c" (bsc#1051510). - Revert "iommu/io-pgtable-arm: Check for v7s-incapable systems" (bsc#1106105). - Revert "PCI/ASPM: Do not initialize link state when aspm_disabled is set" (bsc#1051510). - Revert "scsi: lpfc: ls_rjt erroneus FLOGIs" (bsc#1119322). - ring-buffer: Allow for rescheduling when removing pages (bsc#1120238). - ring-buffer: Do no reuse reader page if still in use (bsc#1120096). - ring-buffer: Mask out the info bits when returning buffer page length (bsc#1120094). - rtc: hctosys: Add missing range error reporting (bsc#1051510). - rtc: m41t80: Correct alarm month range with RTC reads (bsc#1051510). - rtc: pcf2127: fix a kmemleak caused in pcf2127_i2c_gather_write (bsc#1051510). - rtc: snvs: Add timeouts to avoid kernel lockups (bsc#1051510). - rtl8xxxu: Fix missing break in switch (bsc#1051510). - s390/dasd: simplify locking in dasd_times_out (bsc#1104967,). - s390/kdump: Fix elfcorehdr size calculation (bsc#1117953, LTC#171112). - s390/kdump: Make elfcorehdr size calculation ABI compliant (bsc#1117953, LTC#171112). - s390/qeth: fix length check in SNMP processing (bsc#1117953, LTC#173657). - s390/qeth: remove outdated portname debug msg (bsc#1117953, LTC#172960). - s390/qeth: sanitize strings in debug messages (bsc#1117953, LTC#172960). - sbitmap: fix race in wait batch accounting (Git-fixes). - sched/core: Fix cpu.max vs. cpuhotplug deadlock (bsc#1106913). - sched/fair: Fix infinite loop in update_blocked_averages() by reverting a9e7f6544b9c (Git fixes (scheduler)). - sched/smt: Expose sched_smt_present static key (bsc#1106913). - sched/smt: Make sched_smt_present track topology (bsc#1106913). - sched, tracing: Fix trace_sched_pi_setprio() for deboosting (bsc#1120228). - scripts/git-pre-commit: make executable. - scripts/git_sort/git_sort.py: change SCSI git repos to make series sorting more failsafe. - scsi: lpfc: Cap NPIV vports to 256 (bsc#1118215). - scsi: lpfc: Correct code setting non existent bits in sli4 ABORT WQE (bsc#1118215). - scsi: lpfc: Correct topology type reporting on G7 adapters (bsc#1118215). - scsi: lpfc: Defer LS_ACC to FLOGI on point to point logins (bsc#1118215). - scsi: lpfc: Enable Management features for IF_TYPE=6 (bsc#1119322). - scsi: lpfc: Fix a duplicate 0711 log message number (bsc#1118215). - scsi: lpfc: fix block guard enablement on SLI3 adapters (bsc#1079935). - scsi: lpfc: Fix dif and first burst use in write commands (bsc#1118215). - scsi: lpfc: Fix discovery failures during port failovers with lots of vports (bsc#1118215). - scsi: lpfc: Fix driver release of fw-logging buffers (bsc#1118215). - scsi: lpfc: Fix kernel Oops due to null pring pointers (bsc#1118215). - scsi: lpfc: Fix panic when FW-log buffsize is not initialized (bsc#1118215). - scsi: lpfc: ls_rjt erroneus FLOGIs (bsc#1118215). - scsi: lpfc: refactor mailbox structure context fields (bsc#1118215). - scsi: lpfc: rport port swap discovery issue (bsc#1118215). - scsi: lpfc: update driver version to 12.0.0.9 (bsc#1118215). - scsi: lpfc: update manufacturer attribute to reflect Broadcom (bsc#1118215). - scsi: target: add emulate_pr backstore attr to toggle PR support (bsc#1091405). - scsi: target: drop unused pi_prot_format attribute storage (bsc#1091405). - scsi: zfcp: fix posting too many status read buffers leading to adapter shutdown (bsc#1121483, LTC#174588). - skd: Avoid that module unloading triggers a use-after-free (Git-fixes). - skd: Submit requests to firmware before triggering the doorbell (Git-fixes). - soc: bcm2835: sync firmware properties with downstream () - spi: bcm2835: Avoid finishing transfer prematurely in IRQ mode (bsc#1051510). - spi: bcm2835: Fix book-keeping of DMA termination (bsc#1051510). - spi: bcm2835: Fix race on DMA termination (bsc#1051510). - spi: bcm2835: Unbreak the build of esoteric configs (bsc#1051510). - splice: do not read more than available pipe space (bsc#1119212). - staging: bcm2835-camera: Abort probe if there is no camera (bsc#1051510). - staging: rtl8712: Fix possible buffer overrun (bsc#1051510). - staging: rtl8723bs: Add missing return for cfg80211_rtw_get_station (bsc#1051510). - staging: rts5208: fix gcc-8 logic error warning (bsc#1051510). - staging: wilc1000: fix missing read_write setting when reading data (bsc#1051510). - Stop building F2FS (boo#1109665) As per the information in the bugzilla issue f2fs is no longer supported on opensuse distributions. - supported.conf: add raspberrypi-ts driver - supported.conf: whitelist bluefield eMMC driver - target/iscsi: avoid NULL dereference in CHAP auth error path (bsc#1117165). - target: se_dev_attrib.emulate_pr ABI stability (bsc#1091405). - team: no need to do team_notify_peers or team_mcast_rejoin when disabling port (bsc#1051510). - termios, tty/tty_baudrate.c: fix buffer overrun (bsc#1051510). - test_hexdump: use memcpy instead of strncpy (bsc#1051510). - tmpfs: make lseek(SEEK_DATA/SEK_HOLE) return ENXIO with a negative offset (bsc#1051510). - tools: hv: fcopy: set 'error' in case an unknown operation was requested (git-fixes). - tools: hv: include string.h in hv_fcopy_daemon (git-fixes). - tools/power/cpupower: fix compilation with STATIC=true (git-fixes). - tools/power turbostat: fix possible sprintf buffer overflow (git-fixes). - tracing/blktrace: Fix to allow setting same value (Git-fixes). - tracing: Fix bad use of igrab in trace_uprobe.c (bsc#1120046). - tracing: Fix crash when freeing instances with event triggers (bsc#1120230). - tracing: Fix crash when it fails to alloc ring buffer (bsc#1120097). - tracing: Fix double free of event_trigger_data (bsc#1120234). - tracing: Fix missing return symbol in function_graph output (bsc#1120232). - tracing: Fix possible double free in event_enable_trigger_func() (bsc#1120235). - tracing: Fix possible double free on failure of allocating trace buffer (bsc#1120214). - tracing: Fix regex_match_front() to not over compare the test string (bsc#1120223). - tracing: Fix trace_pipe behavior for instance traces (bsc#1120088). - tracing: Remove RCU work arounds from stack tracer (bsc#1120092). - tracing/samples: Fix creation and deletion of simple_thread_fn creation (git-fixes). - tty: Do not return -EAGAIN in blocking read (bsc#1116040). - tty: do not set TTY_IO_ERROR flag if console port (bsc#1051510). - tty: serial: 8250_mtk: always resume the device in probe (bsc#1051510). - ubifs: Handle re-linking of inodes correctly while recovery (bsc#1120598). - udf: Allow mounting volumes with incorrect identification strings (bsc#1118774). - unifdef: use memcpy instead of strncpy (bsc#1051510). - usb: appledisplay: Add 27" Apple Cinema Display (bsc#1051510). - usb: core: quirks: add RESET_RESUME quirk for Cherry G230 Stream series (bsc#1051510). - usb: dwc2: host: use hrtimer for NAK retries (git-fixes). - usb: hso: Fix OOB memory access in hso_probe/hso_get_config_data (bsc#1051510). - usbip: vhci_hcd: check rhport before using in vhci_hub_control() (bsc#1090888). - usb: omap_udc: fix crashes on probe error and module removal (bsc#1051510). - usb: omap_udc: fix omap_udc_start() on 15xx machines (bsc#1051510). - usb: omap_udc: fix USB gadget functionality on Palm Tungsten E (bsc#1051510). - usb: omap_udc: use devm_request_irq() (bsc#1051510). - usb: quirk: add no-LPM quirk on SanDisk Ultra Flair device (bsc#1051510). - usb: serial: option: add Fibocom NL668 series (bsc#1051510). - usb: serial: option: add GosunCn ZTE WeLink ME3630 (bsc#1051510). - usb: serial: option: add HP lt4132 (bsc#1051510). - usb: serial: option: add Simcom SIM7500/SIM7600 (MBIM mode) (bsc#1051510). - usb: serial: option: add Telit LN940 series (bsc#1051510). - usb: usbip: Fix BUG: KASAN: slab-out-of-bounds in vhci_hub_control() (bsc#1106110). - usb: usb-storage: Add new IDs to ums-realtek (bsc#1051510). - usb: xhci: fix uninitialized completion when USB3 port got wrong status (bsc#1051510). - usb: xhci: Prevent bus suspend if a port connect change or polling state is detected (bsc#1051510). - userfaultfd: clear the vma->vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (bsc#1118761). - userfaultfd: remove uffd flags from vma->vm_flags if UFFD_EVENT_FORK fails (bsc#1118809). - v9fs_dir_readdir: fix double-free on p9stat_read error (bsc#1118771). - watchdog/core: Add missing prototypes for weak functions (git-fixes). - wireless: airo: potential buffer overflow in sprintf() (bsc#1051510). - wlcore: Fix the return value in case of error in 'wlcore_vendor_cmd_smart_config_start()' (bsc#1051510). - x86/bugs: Add AMD's SPEC_CTRL MSR usage (bsc#1106913). - x86/bugs: Fix the AMD SSBD usage of the SPEC_CTRL MSR (bsc#1106913). - x86/bugs: Switch the selection of mitigation from CPU vendor to CPU features (bsc#1106913). - x86/decoder: Fix and update the opcodes map (bsc#1058115). - x86/kabi: Fix cpu_tlbstate issue (bsc#1106913). - x86/l1tf: Show actual SMT state (bsc#1106913). - x86/MCE/AMD: Fix the thresholding machinery initialization order (bsc#1114279). - x86/mm: Fix decoy address handling vs 32-bit builds (bsc#1120606). - x86/PCI: Add additional VMD device root ports to VMD AER quirk (bsc#1120058). - x86/PCI: Add "pci=big_root_window" option for AMD 64-bit windows (bsc#1120058). - x86/PCI: Apply VMD's AERSID fixup generically (bsc#1120058). - x86/PCI: Avoid AMD SB7xx EHCI USB wakeup defect (bsc#1120058). - x86/PCI: Enable a 64bit BAR on AMD Family 15h (Models 00-1f, 30-3f, 60-7f) (bsc#1120058). - x86/PCI: Enable AMD 64-bit window on resume (bsc#1120058). - x86/PCI: Fix infinite loop in search for 64bit BAR placement (bsc#1120058). - x86/PCI: Move and shrink AMD 64-bit window to avoid conflict (bsc#1120058). - x86/PCI: Move VMD quirk to x86 fixups (bsc#1120058). - x86/PCI: Only enable a 64bit BAR on single-socket AMD Family 15h (bsc#1120058). - x86/PCI: Use is_vmd() rather than relying on the domain number (bsc#1120058). - x86/process: Consolidate and simplify switch_to_xtra() code (bsc#1106913). - x86/pti: Document fix wrong index (git-fixes). - x86/retpoline: Make CONFIG_RETPOLINE depend on compiler support (bsc#1106913). - x86/retpoline: Remove minimal retpoline support (bsc#1106913). - x86/speculataion: Mark command line parser data __initdata (bsc#1106913). - x86/speculation: Add command line control for indirect branch speculation (bsc#1106913). - x86/speculation: Add prctl() control for indirect branch speculation (bsc#1106913). - x86/speculation: Add seccomp Spectre v2 user space protection mode (bsc#1106913). - x86/speculation: Apply IBPB more strictly to avoid cross-process data leak (bsc#1106913). - x86/speculation: Avoid __switch_to_xtra() calls (bsc#1106913). - x86/speculation: Clean up spectre_v2_parse_cmdline() (bsc#1106913). - x86/speculation: Disable STIBP when enhanced IBRS is in use (bsc#1106913). - x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation (bsc#1106913). - x86/speculation: Enable prctl mode for spectre_v2_user (bsc#1106913). - x86/speculation/l1tf: Drop the swap storage limit restriction when l1tf=off (bnc#1114871). - x86/speculation: Mark string arrays const correctly (bsc#1106913). - x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() (bsc#1106913). - x86/speculation: Prepare arch_smt_update() for PRCTL mode (bsc#1106913). - x86/speculation: Prepare for conditional IBPB in switch_mm() (bsc#1106913). - x86/speculation: Prepare for per task indirect branch speculation control (bsc#1106913). - x86/speculation: Prevent stale SPEC_CTRL msr content (bsc#1106913). - x86/speculation: Propagate information about RSB filling mitigation to sysfs (bsc#1106913). - x86/speculation: Provide IBPB always command line options (bsc#1106913). - x86/speculation: Remove unnecessary ret variable in cpu_show_common() (bsc#1106913). - x86/speculation: Rename SSBD update functions (bsc#1106913). - x86/speculation: Reorder the spec_v2 code (bsc#1106913). - x86/speculation: Reorganize speculation control MSRs update (bsc#1106913). - x86/speculation: Rework SMT state change (bsc#1106913). - x86/speculation: Split out TIF update (bsc#1106913). - x86/speculation: Unify conditional spectre v2 print functions (bsc#1106913). - x86/speculation: Update the TIF_SSBD comment (bsc#1106913). - xen/netfront: tolerate frags with no data (bnc#1119804). - xen/x86: add diagnostic printout to xen_mc_flush() in case of error (bnc#1116183). - xfs: Align compat attrlist_by_handle with native implementation (git-fixes). - xfs: Fix xqmstats offsets in /proc/fs/xfs/xqmstat (git-fixes). - xfs: xfs_buf: drop useless LIST_HEAD (git-fixes). - xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (bsc#1117162). - xhci: Do not prevent USB2 bus suspend in state check intended for USB3 only (bsc#1051510). - xhci: Prevent U1/U2 link pm states if exit latency is too long (bsc#1051510). - xfs: fix quotacheck dquot id overflow infinite loop (bsc#1121621). Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-65=1 Package List: - openSUSE Leap 15.0 (x86_64): kernel-debug-4.12.14-lp150.12.45.1 kernel-debug-base-4.12.14-lp150.12.45.1 kernel-debug-base-debuginfo-4.12.14-lp150.12.45.1 kernel-debug-debuginfo-4.12.14-lp150.12.45.1 kernel-debug-debugsource-4.12.14-lp150.12.45.1 kernel-debug-devel-4.12.14-lp150.12.45.1 kernel-debug-devel-debuginfo-4.12.14-lp150.12.45.1 kernel-default-4.12.14-lp150.12.45.1 kernel-default-base-4.12.14-lp150.12.45.1 kernel-default-base-debuginfo-4.12.14-lp150.12.45.1 kernel-default-debuginfo-4.12.14-lp150.12.45.1 kernel-default-debugsource-4.12.14-lp150.12.45.1 kernel-default-devel-4.12.14-lp150.12.45.1 kernel-default-devel-debuginfo-4.12.14-lp150.12.45.1 kernel-kvmsmall-4.12.14-lp150.12.45.1 kernel-kvmsmall-base-4.12.14-lp150.12.45.1 kernel-kvmsmall-base-debuginfo-4.12.14-lp150.12.45.1 kernel-kvmsmall-debuginfo-4.12.14-lp150.12.45.1 kernel-kvmsmall-debugsource-4.12.14-lp150.12.45.1 kernel-kvmsmall-devel-4.12.14-lp150.12.45.1 kernel-kvmsmall-devel-debuginfo-4.12.14-lp150.12.45.1 kernel-obs-build-4.12.14-lp150.12.45.1 kernel-obs-build-debugsource-4.12.14-lp150.12.45.1 kernel-obs-qa-4.12.14-lp150.12.45.1 kernel-syms-4.12.14-lp150.12.45.1 kernel-vanilla-4.12.14-lp150.12.45.1 kernel-vanilla-base-4.12.14-lp150.12.45.1 kernel-vanilla-base-debuginfo-4.12.14-lp150.12.45.1 kernel-vanilla-debuginfo-4.12.14-lp150.12.45.1 kernel-vanilla-debugsource-4.12.14-lp150.12.45.1 kernel-vanilla-devel-4.12.14-lp150.12.45.1 kernel-vanilla-devel-debuginfo-4.12.14-lp150.12.45.1 - openSUSE Leap 15.0 (noarch): kernel-devel-4.12.14-lp150.12.45.1 kernel-docs-4.12.14-lp150.12.45.1 kernel-docs-html-4.12.14-lp150.12.45.1 kernel-macros-4.12.14-lp150.12.45.1 kernel-source-4.12.14-lp150.12.45.1 kernel-source-vanilla-4.12.14-lp150.12.45.1 References: https://www.suse.com/security/cve/CVE-2018-12232.html https://www.suse.com/security/cve/CVE-2018-14625.html https://www.suse.com/security/cve/CVE-2018-16862.html https://www.suse.com/security/cve/CVE-2018-16884.html https://www.suse.com/security/cve/CVE-2018-18397.html https://www.suse.com/security/cve/CVE-2018-19407.html https://www.suse.com/security/cve/CVE-2018-19824.html https://www.suse.com/security/cve/CVE-2018-19854.html https://www.suse.com/security/cve/CVE-2018-19985.html https://www.suse.com/security/cve/CVE-2018-20169.html https://www.suse.com/security/cve/CVE-2018-9568.html https://bugzilla.suse.com/1024718 https://bugzilla.suse.com/1046299 https://bugzilla.suse.com/1050242 https://bugzilla.suse.com/1050244 https://bugzilla.suse.com/1051510 https://bugzilla.suse.com/1055121 https://bugzilla.suse.com/1055186 https://bugzilla.suse.com/1058115 https://bugzilla.suse.com/1060463 https://bugzilla.suse.com/1065729 https://bugzilla.suse.com/1078248 https://bugzilla.suse.com/1079935 https://bugzilla.suse.com/1082387 https://bugzilla.suse.com/1083647 https://bugzilla.suse.com/1086282 https://bugzilla.suse.com/1086283 https://bugzilla.suse.com/1086423 https://bugzilla.suse.com/1087978 https://bugzilla.suse.com/1088386 https://bugzilla.suse.com/1090888 https://bugzilla.suse.com/1091405 https://bugzilla.suse.com/1094244 https://bugzilla.suse.com/1097593 https://bugzilla.suse.com/1102875 https://bugzilla.suse.com/1102877 https://bugzilla.suse.com/1102879 https://bugzilla.suse.com/1102882 https://bugzilla.suse.com/1102896 https://bugzilla.suse.com/1103257 https://bugzilla.suse.com/1104353 https://bugzilla.suse.com/1104427 https://bugzilla.suse.com/1104967 https://bugzilla.suse.com/1105168 https://bugzilla.suse.com/1106105 https://bugzilla.suse.com/1106110 https://bugzilla.suse.com/1106615 https://bugzilla.suse.com/1106913 https://bugzilla.suse.com/1108270 https://bugzilla.suse.com/1109272 https://bugzilla.suse.com/1109665 https://bugzilla.suse.com/1110558 https://bugzilla.suse.com/1111188 https://bugzilla.suse.com/1111469 https://bugzilla.suse.com/1111696 https://bugzilla.suse.com/1111795 https://bugzilla.suse.com/1113722 https://bugzilla.suse.com/1114279 https://bugzilla.suse.com/1114871 https://bugzilla.suse.com/1116040 https://bugzilla.suse.com/1116183 https://bugzilla.suse.com/1116336 https://bugzilla.suse.com/1116803 https://bugzilla.suse.com/1116841 https://bugzilla.suse.com/1117115 https://bugzilla.suse.com/1117162 https://bugzilla.suse.com/1117165 https://bugzilla.suse.com/1117186 https://bugzilla.suse.com/1117561 https://bugzilla.suse.com/1117656 https://bugzilla.suse.com/1117953 https://bugzilla.suse.com/1118152 https://bugzilla.suse.com/1118215 https://bugzilla.suse.com/1118316 https://bugzilla.suse.com/1118319 https://bugzilla.suse.com/1118428 https://bugzilla.suse.com/1118484 https://bugzilla.suse.com/1118752 https://bugzilla.suse.com/1118760 https://bugzilla.suse.com/1118761 https://bugzilla.suse.com/1118762 https://bugzilla.suse.com/1118766 https://bugzilla.suse.com/1118767 https://bugzilla.suse.com/1118768 https://bugzilla.suse.com/1118769 https://bugzilla.suse.com/1118771 https://bugzilla.suse.com/1118772 https://bugzilla.suse.com/1118773 https://bugzilla.suse.com/1118774 https://bugzilla.suse.com/1118775 https://bugzilla.suse.com/1118798 https://bugzilla.suse.com/1118809 https://bugzilla.suse.com/1118962 https://bugzilla.suse.com/1119017 https://bugzilla.suse.com/1119086 https://bugzilla.suse.com/1119212 https://bugzilla.suse.com/1119322 https://bugzilla.suse.com/1119410 https://bugzilla.suse.com/1119714 https://bugzilla.suse.com/1119749 https://bugzilla.suse.com/1119804 https://bugzilla.suse.com/1119946 https://bugzilla.suse.com/1119962 https://bugzilla.suse.com/1119968 https://bugzilla.suse.com/1120036 https://bugzilla.suse.com/1120046 https://bugzilla.suse.com/1120053 https://bugzilla.suse.com/1120054 https://bugzilla.suse.com/1120055 https://bugzilla.suse.com/1120058 https://bugzilla.suse.com/1120088 https://bugzilla.suse.com/1120092 https://bugzilla.suse.com/1120094 https://bugzilla.suse.com/1120096 https://bugzilla.suse.com/1120097 https://bugzilla.suse.com/1120173 https://bugzilla.suse.com/1120214 https://bugzilla.suse.com/1120223 https://bugzilla.suse.com/1120228 https://bugzilla.suse.com/1120230 https://bugzilla.suse.com/1120232 https://bugzilla.suse.com/1120234 https://bugzilla.suse.com/1120235 https://bugzilla.suse.com/1120238 https://bugzilla.suse.com/1120594 https://bugzilla.suse.com/1120598 https://bugzilla.suse.com/1120600 https://bugzilla.suse.com/1120601 https://bugzilla.suse.com/1120602 https://bugzilla.suse.com/1120603 https://bugzilla.suse.com/1120604 https://bugzilla.suse.com/1120606 https://bugzilla.suse.com/1120612 https://bugzilla.suse.com/1120613 https://bugzilla.suse.com/1120614 https://bugzilla.suse.com/1120615 https://bugzilla.suse.com/1120616 https://bugzilla.suse.com/1120617 https://bugzilla.suse.com/1120618 https://bugzilla.suse.com/1120620 https://bugzilla.suse.com/1120621 https://bugzilla.suse.com/1120632 https://bugzilla.suse.com/1120633 https://bugzilla.suse.com/1120743 https://bugzilla.suse.com/1121017 https://bugzilla.suse.com/1121058 https://bugzilla.suse.com/1121263 https://bugzilla.suse.com/1121273 https://bugzilla.suse.com/1121477 https://bugzilla.suse.com/1121483 https://bugzilla.suse.com/1121621 https://bugzilla.suse.com/1121714 https://bugzilla.suse.com/1121715

1 0

openSUSE-SU-2019:0061-1: Security update for libunwind
by opensuse-security＠opensuse.org 17 Jan '19

17 Jan '19

openSUSE Security Update: Security update for libunwind ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0061-1 Rating: low References: #1122012 #936786 Cross-References: CVE-2015-3239 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for libunwind fixes one minor security issue and one bug. The following security issue was fixed: - CVE-2015-3239: off-by-one error that could be triggered when reading untrusted binaries (boo#936786) The following packaging bug was fixed: - boo#1122012: The 32 bit were not generated on Leap 42.3 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-61=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libunwind-1.1-15.3.1 libunwind-debuginfo-1.1-15.3.1 libunwind-debugsource-1.1-15.3.1 libunwind-devel-1.1-15.3.1 - openSUSE Leap 42.3 (x86_64): libunwind-32bit-1.1-15.3.1 libunwind-debuginfo-32bit-1.1-15.3.1 References: https://www.suse.com/security/cve/CVE-2015-3239.html https://bugzilla.suse.com/1122012 https://bugzilla.suse.com/936786

1 0

openSUSE-RU-2019:0056-1: moderate: Recommended update for mozilla-nss
by maintenance＠opensuse.org 17 Jan '19

17 Jan '19

openSUSE Recommended Update: Recommended update for mozilla-nss ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0056-1 Rating: moderate References: #1090767 #1121045 #1121207 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for mozilla-nss fixes the following issues: - The hmac packages used in FIPS certification inadvertently removed in last update: re-added. (bsc#1121207) - Added "Suggest:" for libfreebl3 and libsoftokn3 respective -hmac packages to avoid dependency issues during updates (bsc#1090767, bsc#1121045) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-56=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libfreebl3-3.40.1-lp150.2.13.1 libfreebl3-debuginfo-3.40.1-lp150.2.13.1 libfreebl3-hmac-3.40.1-lp150.2.13.1 libsoftokn3-3.40.1-lp150.2.13.1 libsoftokn3-debuginfo-3.40.1-lp150.2.13.1 libsoftokn3-hmac-3.40.1-lp150.2.13.1 mozilla-nss-3.40.1-lp150.2.13.1 mozilla-nss-certs-3.40.1-lp150.2.13.1 mozilla-nss-certs-debuginfo-3.40.1-lp150.2.13.1 mozilla-nss-debuginfo-3.40.1-lp150.2.13.1 mozilla-nss-debugsource-3.40.1-lp150.2.13.1 mozilla-nss-devel-3.40.1-lp150.2.13.1 mozilla-nss-sysinit-3.40.1-lp150.2.13.1 mozilla-nss-sysinit-debuginfo-3.40.1-lp150.2.13.1 mozilla-nss-tools-3.40.1-lp150.2.13.1 mozilla-nss-tools-debuginfo-3.40.1-lp150.2.13.1 - openSUSE Leap 15.0 (x86_64): libfreebl3-32bit-3.40.1-lp150.2.13.1 libfreebl3-32bit-debuginfo-3.40.1-lp150.2.13.1 libsoftokn3-32bit-3.40.1-lp150.2.13.1 libsoftokn3-32bit-debuginfo-3.40.1-lp150.2.13.1 mozilla-nss-32bit-3.40.1-lp150.2.13.1 mozilla-nss-32bit-debuginfo-3.40.1-lp150.2.13.1 mozilla-nss-certs-32bit-3.40.1-lp150.2.13.1 mozilla-nss-certs-32bit-debuginfo-3.40.1-lp150.2.13.1 mozilla-nss-sysinit-32bit-3.40.1-lp150.2.13.1 mozilla-nss-sysinit-32bit-debuginfo-3.40.1-lp150.2.13.1 References: https://bugzilla.suse.com/1090767 https://bugzilla.suse.com/1121045 https://bugzilla.suse.com/1121207

1 0

openSUSE-RU-2019:0055-1: moderate: Recommended update for python3-susepubliccloudinfo
by maintenance＠opensuse.org 17 Jan '19

17 Jan '19

openSUSE Recommended Update: Recommended update for python3-susepubliccloudinfo ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0055-1 Rating: moderate References: #1121150 #1121151 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for python3-susepubliccloudinfo fixes the following issues: Update to version 1.1.0 (bsc#1121151, bsc#1121150) + Support new inactive state + Remove awscvsgen and associated subpackage This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-55=1 Package List: - openSUSE Leap 15.0 (noarch): python3-susepubliccloudinfo-1.1.0-lp150.2.6.1 References: https://bugzilla.suse.com/1121150 https://bugzilla.suse.com/1121151

1 0

openSUSE-SU-2019:0053-1: important: Security update for LibVNCServer
by opensuse-security＠opensuse.org 17 Jan '19

17 Jan '19

openSUSE Security Update: Security update for LibVNCServer ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0053-1 Rating: important References: #1120114 #1120115 #1120116 #1120117 #1120118 #1120119 #1120120 #1120121 #1120122 Cross-References: CVE-2018-15126 CVE-2018-15127 CVE-2018-20019 CVE-2018-20020 CVE-2018-20021 CVE-2018-20022 CVE-2018-20023 CVE-2018-20024 CVE-2018-6307 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes 9 vulnerabilities is now available. Description: This update for LibVNCServer fixes the following issues: Security issues fixed: - CVE-2018-15126: Fixed use-after-free in file transfer extension (bsc#1120114) - CVE-2018-6307: Fixed use-after-free in file transfer extension server code (bsc#1120115) - CVE-2018-20020: Fixed heap out-of-bound write inside structure in VNC client code (bsc#1120116) - CVE-2018-15127: Fixed heap out-of-bounds write in rfbserver.c (bsc#1120117) - CVE-2018-20019: Fixed multiple heap out-of-bound writes in VNC client code (bsc#1120118) - CVE-2018-20023: Fixed information disclosure through improper initialization in VNC Repeater client code (bsc#1120119) - CVE-2018-20022: Fixed information disclosure through improper initialization in VNC client code (bsc#1120120) - CVE-2018-20024: Fixed NULL pointer dereference in VNC client code (bsc#1120121) - CVE-2018-20021: Fixed infinite loop in VNC client code (bsc#1120122) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-53=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): LibVNCServer-debugsource-0.9.10-lp150.3.3.1 LibVNCServer-devel-0.9.10-lp150.3.3.1 libvncclient0-0.9.10-lp150.3.3.1 libvncclient0-debuginfo-0.9.10-lp150.3.3.1 libvncserver0-0.9.10-lp150.3.3.1 libvncserver0-debuginfo-0.9.10-lp150.3.3.1 References: https://www.suse.com/security/cve/CVE-2018-15126.html https://www.suse.com/security/cve/CVE-2018-15127.html https://www.suse.com/security/cve/CVE-2018-20019.html https://www.suse.com/security/cve/CVE-2018-20020.html https://www.suse.com/security/cve/CVE-2018-20021.html https://www.suse.com/security/cve/CVE-2018-20022.html https://www.suse.com/security/cve/CVE-2018-20023.html https://www.suse.com/security/cve/CVE-2018-20024.html https://www.suse.com/security/cve/CVE-2018-6307.html https://bugzilla.suse.com/1120114 https://bugzilla.suse.com/1120115 https://bugzilla.suse.com/1120116 https://bugzilla.suse.com/1120117 https://bugzilla.suse.com/1120118 https://bugzilla.suse.com/1120119 https://bugzilla.suse.com/1120120 https://bugzilla.suse.com/1120121 https://bugzilla.suse.com/1120122

1 0

openSUSE-SU-2019:0057-1: important: Security update for wget
by opensuse-security＠opensuse.org 17 Jan '19

17 Jan '19

openSUSE Security Update: Security update for wget ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0057-1 Rating: important References: #1120382 Cross-References: CVE-2018-20483 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for wget fixes the following issues: Security issue fixed: - CVE-2018-20483: Fixed an information disclosure through file metadata (bsc#1120382) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-57=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): wget-1.19.5-lp150.2.3.1 wget-debuginfo-1.19.5-lp150.2.3.1 wget-debugsource-1.19.5-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-20483.html https://bugzilla.suse.com/1120382

1 0

openSUSE-SU-2019:0063-1: important: Security update for krb5
by opensuse-security＠opensuse.org 17 Jan '19

17 Jan '19

openSUSE Security Update: Security update for krb5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0063-1 Rating: important References: #1120489 Cross-References: CVE-2018-20217 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for krb5 fixes the following issues: Security issue fixed: - CVE-2018-20217: Fixed an assertion issue with older encryption types (bsc#1120489) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-63=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): krb5-1.15.2-lp150.5.3.1 krb5-client-1.15.2-lp150.5.3.1 krb5-client-debuginfo-1.15.2-lp150.5.3.1 krb5-debuginfo-1.15.2-lp150.5.3.1 krb5-debugsource-1.15.2-lp150.5.3.1 krb5-devel-1.15.2-lp150.5.3.1 krb5-mini-1.15.2-lp150.5.3.1 krb5-mini-debuginfo-1.15.2-lp150.5.3.1 krb5-mini-debugsource-1.15.2-lp150.5.3.1 krb5-mini-devel-1.15.2-lp150.5.3.1 krb5-plugin-kdb-ldap-1.15.2-lp150.5.3.1 krb5-plugin-kdb-ldap-debuginfo-1.15.2-lp150.5.3.1 krb5-plugin-preauth-otp-1.15.2-lp150.5.3.1 krb5-plugin-preauth-otp-debuginfo-1.15.2-lp150.5.3.1 krb5-plugin-preauth-pkinit-1.15.2-lp150.5.3.1 krb5-plugin-preauth-pkinit-debuginfo-1.15.2-lp150.5.3.1 krb5-server-1.15.2-lp150.5.3.1 krb5-server-debuginfo-1.15.2-lp150.5.3.1 - openSUSE Leap 15.0 (x86_64): krb5-32bit-1.15.2-lp150.5.3.1 krb5-32bit-debuginfo-1.15.2-lp150.5.3.1 krb5-devel-32bit-1.15.2-lp150.5.3.1 References: https://www.suse.com/security/cve/CVE-2018-20217.html https://bugzilla.suse.com/1120489

1 0

openSUSE-SU-2019:0052-1: important: Security update for mutt
by opensuse-security＠opensuse.org 17 Jan '19

17 Jan '19

openSUSE Security Update: Security update for mutt ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0052-1 Rating: important References: #1061343 #1094717 #1101428 #1101566 #1101567 #1101568 #1101569 #1101570 #1101571 #1101573 #1101576 #1101577 #1101578 #1101581 #1101582 #1101583 #1101588 #1101589 #1120935 #980830 #982129 #986534 Cross-References: CVE-2014-9116 CVE-2018-14349 CVE-2018-14350 CVE-2018-14351 CVE-2018-14352 CVE-2018-14353 CVE-2018-14354 CVE-2018-14355 CVE-2018-14356 CVE-2018-14357 CVE-2018-14358 CVE-2018-14359 CVE-2018-14360 CVE-2018-14361 CVE-2018-14362 CVE-2018-14363 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves 16 vulnerabilities and has 6 fixes is now available. Description: This update for mutt fixes the following issues: Security issues fixed: - bsc#1101428: Mutt 1.10.1 security release update. - CVE-2018-14351: Fix imap/command.c that mishandles long IMAP status mailbox literal count size (bsc#1101583). - CVE-2018-14353: Fix imap_quote_string in imap/util.c that has an integer underflow (bsc#1101581). - CVE-2018-14362: Fix pop.c that does not forbid characters that may have unsafe interaction with message-cache pathnames (bsc#1101567). - CVE-2018-14354: Fix arbitrary command execution from remote IMAP servers via backquote characters (bsc#1101578). - CVE-2018-14352: Fix imap_quote_string in imap/util.c that does not leave room for quote characters (bsc#1101582). - CVE-2018-14356: Fix pop.c that mishandles a zero-length UID (bsc#1101576). - CVE-2018-14355: Fix imap/util.c that mishandles ".." directory traversal in a mailbox name (bsc#1101577). - CVE-2018-14349: Fix imap/command.c that mishandles a NO response without a message (bsc#1101589). - CVE-2018-14350: Fix imap/message.c that has a stack-based buffer overflow for a FETCH response with along INTERNALDATE field (bsc#1101588). - CVE-2018-14363: Fix newsrc.c that does not properlyrestrict '/' characters that may have unsafe interaction with cache pathnames (bsc#1101566). - CVE-2018-14359: Fix buffer overflow via base64 data (bsc#1101570). - CVE-2018-14358: Fix imap/message.c that has a stack-based buffer overflow for a FETCH response with along RFC822.SIZE field (bsc#1101571). - CVE-2018-14360: Fix nntp_add_group in newsrc.c that has a stack-based buffer overflow because of incorrect sscanf usage (bsc#1101569). - CVE-2018-14357: Fix that remote IMAP servers are allowed to execute arbitrary commands via backquote characters (bsc#1101573). - CVE-2018-14361: Fix that nntp.c proceeds even if memory allocation fails for messages data (bsc#1101568). Bug fixes: - mutt reports as neomutt and incorrect version (bsc#1094717) - No sidebar available in mutt 1.6.1 from Tumbleweed snapshot 20160517 (bsc#980830) - mutt-1.6.1 unusable when built with --enable-sidebar (bsc#982129) - (neo)mutt displaying times in Zulu time (bsc#1061343) - mutt unconditionally segfaults when displaying a message (bsc#986534) - For openSUSE Leap 42.3, retain split of -lang and -doc (boo#1120935) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-52=1 Package List: - openSUSE Leap 42.3 (noarch): mutt-doc-1.10.1-2.5.1 mutt-lang-1.10.1-2.5.1 - openSUSE Leap 42.3 (x86_64): mutt-1.10.1-2.5.1 mutt-debuginfo-1.10.1-2.5.1 mutt-debugsource-1.10.1-2.5.1 References: https://www.suse.com/security/cve/CVE-2014-9116.html https://www.suse.com/security/cve/CVE-2018-14349.html https://www.suse.com/security/cve/CVE-2018-14350.html https://www.suse.com/security/cve/CVE-2018-14351.html https://www.suse.com/security/cve/CVE-2018-14352.html https://www.suse.com/security/cve/CVE-2018-14353.html https://www.suse.com/security/cve/CVE-2018-14354.html https://www.suse.com/security/cve/CVE-2018-14355.html https://www.suse.com/security/cve/CVE-2018-14356.html https://www.suse.com/security/cve/CVE-2018-14357.html https://www.suse.com/security/cve/CVE-2018-14358.html https://www.suse.com/security/cve/CVE-2018-14359.html https://www.suse.com/security/cve/CVE-2018-14360.html https://www.suse.com/security/cve/CVE-2018-14361.html https://www.suse.com/security/cve/CVE-2018-14362.html https://www.suse.com/security/cve/CVE-2018-14363.html https://bugzilla.suse.com/1061343 https://bugzilla.suse.com/1094717 https://bugzilla.suse.com/1101428 https://bugzilla.suse.com/1101566 https://bugzilla.suse.com/1101567 https://bugzilla.suse.com/1101568 https://bugzilla.suse.com/1101569 https://bugzilla.suse.com/1101570 https://bugzilla.suse.com/1101571 https://bugzilla.suse.com/1101573 https://bugzilla.suse.com/1101576 https://bugzilla.suse.com/1101577 https://bugzilla.suse.com/1101578 https://bugzilla.suse.com/1101581 https://bugzilla.suse.com/1101582 https://bugzilla.suse.com/1101583 https://bugzilla.suse.com/1101588 https://bugzilla.suse.com/1101589 https://bugzilla.suse.com/1120935 https://bugzilla.suse.com/980830 https://bugzilla.suse.com/982129 https://bugzilla.suse.com/986534

1 0

openSUSE-SU-2019:0048-1: important: Security update for irssi
by opensuse-security＠opensuse.org 13 Jan '19

13 Jan '19

openSUSE Security Update: Security update for irssi ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0048-1 Rating: important References: #1121396 Cross-References: CVE-2019-5882 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 openSUSE Backports SLE-15 SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for irssi fixes the following issues: - CVE-2019-5882: Use after free when hidden lines were expired from the scroll buffer (boo#1121396) This update to the 1.1.2 version also fixes a number of stability issues and bugs. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-48=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-48=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-48=1 - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2019-48=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): irssi-1.1.2-29.1 irssi-debuginfo-1.1.2-29.1 irssi-debugsource-1.1.2-29.1 irssi-devel-1.1.2-29.1 - openSUSE Leap 15.0 (x86_64): irssi-1.1.2-lp150.2.4.1 irssi-debuginfo-1.1.2-lp150.2.4.1 irssi-debugsource-1.1.2-lp150.2.4.1 irssi-devel-1.1.2-lp150.2.4.1 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): irssi-1.1.2-bp150.3.4.1 irssi-devel-1.1.2-bp150.3.4.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): irssi-1.1.2-47.1 irssi-devel-1.1.2-47.1 References: https://www.suse.com/security/cve/CVE-2019-5882.html https://bugzilla.suse.com/1121396

1 0

openSUSE-RU-2019:0046-1: moderate: Recommended update for suse-build-key
by maintenance＠opensuse.org 13 Jan '19

13 Jan '19

openSUSE Recommended Update: Recommended update for suse-build-key ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0046-1 Rating: moderate References: #1044232 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for suse-build-key fixes the following issues: - The SUSE PTF signing keys were marked as documentation and were thus excluded from appliance builds (bsc#1044232) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-46=1 Package List: - openSUSE Leap 15.0 (noarch): suse-build-key-12.0-lp150.3.3.1 References: https://bugzilla.suse.com/1044232

1 0

openSUSE-RU-2019:0049-1: moderate: Recommended update for mutter
by maintenance＠opensuse.org 13 Jan '19

13 Jan '19

openSUSE Recommended Update: Recommended update for mutter ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0049-1 Rating: moderate References: #1017412 #1024748 #1045440 #1052058 #1093541 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: This update for mutter provides the following fix: - Memory leak in gnome-shell (bsc#1093541) - Drop stray assert to avoid crash when static workspace number is decreased. (bsc#1045440) - Add RGB16_565 format to support 16-bit color depth sessions. (fate#323412, bsc#1024748) - Fix memory leak in meta_prop_get_values(). (bsc#1017412) - Implement _NET_RESTACK_WINDOW and respect the sibling field of XConfigureRequestEvent. This way X11 window stack operations work as expected. (bsc#1052058) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-49=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libmutter0-3.20.3-6.3.1 libmutter0-debuginfo-3.20.3-6.3.1 mutter-3.20.3-6.3.1 mutter-data-3.20.3-6.3.1 mutter-debuginfo-3.20.3-6.3.1 mutter-debugsource-3.20.3-6.3.1 mutter-devel-3.20.3-6.3.1 typelib-1_0-Meta-3_0-3.20.3-6.3.1 - openSUSE Leap 42.3 (noarch): mutter-lang-3.20.3-6.3.1 References: https://bugzilla.suse.com/1017412 https://bugzilla.suse.com/1024748 https://bugzilla.suse.com/1045440 https://bugzilla.suse.com/1052058 https://bugzilla.suse.com/1093541

1 0

openSUSE-RU-2019:0047-1: moderate: Recommended update for yast2-storage-ng
by maintenance＠opensuse.org 13 Jan '19

13 Jan '19

openSUSE Recommended Update: Recommended update for yast2-storage-ng ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0047-1 Rating: moderate References: #1059972 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-storage-ng provides the following fix: - partitioner: Do not allow to create BTRFS subvolumes with unsafe characters in the path. (bsc#1059972) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-47=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): yast2-storage-ng-4.0.216-lp150.2.21.1 References: https://bugzilla.suse.com/1059972

1 0

openSUSE-SU-2019:0050-1: moderate: Security update for aria2
by opensuse-security＠opensuse.org 13 Jan '19

13 Jan '19

openSUSE Security Update: Security update for aria2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0050-1 Rating: moderate References: #1120488 Cross-References: CVE-2019-3500 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for aria2 fixes the following security issue: - CVE-2019-3500: Metadata and potential password leaks via --log= (boo#1120488) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-50=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-50=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-50=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): aria2-1.24.0-4.4.1 aria2-debuginfo-1.24.0-4.4.1 aria2-debugsource-1.24.0-4.4.1 aria2-devel-1.24.0-4.4.1 libaria2-0-1.24.0-4.4.1 libaria2-0-debuginfo-1.24.0-4.4.1 - openSUSE Leap 42.3 (noarch): aria2-lang-1.24.0-4.4.1 - openSUSE Leap 15.0 (x86_64): aria2-1.33.1-lp150.2.4.1 aria2-debuginfo-1.33.1-lp150.2.4.1 aria2-debugsource-1.33.1-lp150.2.4.1 aria2-devel-1.33.1-lp150.2.4.1 libaria2-0-1.33.1-lp150.2.4.1 libaria2-0-debuginfo-1.33.1-lp150.2.4.1 - openSUSE Leap 15.0 (noarch): aria2-lang-1.33.1-lp150.2.4.1 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): aria2-1.33.1-bp150.3.7.1 aria2-devel-1.33.1-bp150.3.7.1 libaria2-0-1.33.1-bp150.3.7.1 - openSUSE Backports SLE-15 (noarch): aria2-lang-1.33.1-bp150.3.7.1 References: https://www.suse.com/security/cve/CVE-2019-3500.html https://bugzilla.suse.com/1120488

1 0

openSUSE-SU-2019:0048-1: important: Security update for irssi
by opensuse-security＠opensuse.org 13 Jan '19

13 Jan '19

openSUSE Security Update: Security update for irssi ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0048-1 Rating: important References: #1121396 Cross-References: CVE-2019-5882 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for irssi fixes the following issues: - CVE-2019-5882: Use after free when hidden lines were expired from the scroll buffer (boo#1121396) This update to the 1.1.2 version also fixes a number of stability issues and bugs. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2019-48=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): irssi-1.1.2-47.1 irssi-devel-1.1.2-47.1 References: https://www.suse.com/security/cve/CVE-2019-5882.html https://bugzilla.suse.com/1121396

1 0

openSUSE-SU-2019:0051-1: moderate: Security update for sssd
by opensuse-security＠opensuse.org 13 Jan '19

13 Jan '19

openSUSE Security Update: Security update for sssd ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0051-1 Rating: moderate References: #1010700 #1072728 #1080156 #1087320 #1098377 #1101877 #1110299 Cross-References: CVE-2018-10852 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves one vulnerability and has 6 fixes is now available. Description: This update for sssd provides the following fixes: This security issue was fixed: - CVE-2018-10852: Set stricter permissions on /var/lib/sss/pipes/sudo to prevent the disclosure of sudo rules for arbitrary users (bsc#1098377) These non-security issues were fixed: - Fix a segmentation fault in sss_cache command. (bsc#1072728) - Fix a failure in autofs initialisation sequence upon system boot. (bsc#1010700) - Fix race condition on boot between SSSD and autofs. (bsc#1010700) - Fix a bug where file descriptors were not closed (bsc#1080156) - Fix an issue where sssd logs were not rotated properly (bsc#1080156) - Remove whitespaces from netgroup entries (bsc#1087320) - Remove misleading log messages (bsc#1101877) - exit() the forked process if exec()-ing a child process fails (bsc#1110299) - Do not schedule the machine renewal task if adcli is not executable (bsc#1110299) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-51=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libipa_hbac-devel-1.13.4-12.1 libipa_hbac0-1.13.4-12.1 libipa_hbac0-debuginfo-1.13.4-12.1 libsss_idmap-devel-1.13.4-12.1 libsss_idmap0-1.13.4-12.1 libsss_idmap0-debuginfo-1.13.4-12.1 libsss_nss_idmap-devel-1.13.4-12.1 libsss_nss_idmap0-1.13.4-12.1 libsss_nss_idmap0-debuginfo-1.13.4-12.1 libsss_sudo-1.13.4-12.1 libsss_sudo-debuginfo-1.13.4-12.1 python-ipa_hbac-1.13.4-12.1 python-ipa_hbac-debuginfo-1.13.4-12.1 python-sss_nss_idmap-1.13.4-12.1 python-sss_nss_idmap-debuginfo-1.13.4-12.1 python-sssd-config-1.13.4-12.1 python-sssd-config-debuginfo-1.13.4-12.1 sssd-1.13.4-12.1 sssd-ad-1.13.4-12.1 sssd-ad-debuginfo-1.13.4-12.1 sssd-debuginfo-1.13.4-12.1 sssd-debugsource-1.13.4-12.1 sssd-ipa-1.13.4-12.1 sssd-ipa-debuginfo-1.13.4-12.1 sssd-krb5-1.13.4-12.1 sssd-krb5-common-1.13.4-12.1 sssd-krb5-common-debuginfo-1.13.4-12.1 sssd-krb5-debuginfo-1.13.4-12.1 sssd-ldap-1.13.4-12.1 sssd-ldap-debuginfo-1.13.4-12.1 sssd-proxy-1.13.4-12.1 sssd-proxy-debuginfo-1.13.4-12.1 sssd-tools-1.13.4-12.1 sssd-tools-debuginfo-1.13.4-12.1 - openSUSE Leap 42.3 (x86_64): sssd-32bit-1.13.4-12.1 sssd-debuginfo-32bit-1.13.4-12.1 References: https://www.suse.com/security/cve/CVE-2018-10852.html https://bugzilla.suse.com/1010700 https://bugzilla.suse.com/1072728 https://bugzilla.suse.com/1080156 https://bugzilla.suse.com/1087320 https://bugzilla.suse.com/1098377 https://bugzilla.suse.com/1101877 https://bugzilla.suse.com/1110299

1 0

openSUSE-RU-2019:0028-1: moderate: Recommended update for yast2-network
by maintenance＠opensuse.org 12 Jan '19

12 Jan '19

openSUSE Recommended Update: Recommended update for yast2-network ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0028-1 Rating: moderate References: #1103712 #1105230 #1107470 #1108852 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for yast2-network provides the following fixes: - Fixes to the networking AutoYaST schema. (bsc#1103712, bsc#1108852) * Permitted the use of 'listentry' element in list entries. * Added missed s390 device 'layer2' boolean element. - Does no longer crash with internal error when 0.0.0.0 netmask is used in the routing tab. (bsc#1105230) - Fix a problem that was causing duplicate entry for network devices in 70-persistent-net-rules. (bsc#1107470) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-28=1 Package List: - openSUSE Leap 42.3 (noarch): yast2-network-3.2.55-18.1 References: https://bugzilla.suse.com/1103712 https://bugzilla.suse.com/1105230 https://bugzilla.suse.com/1107470 https://bugzilla.suse.com/1108852

1 0

openSUSE-RU-2019:0017-1: moderate: Recommended update for sxiv
by maintenance＠opensuse.org 12 Jan '19

12 Jan '19

openSUSE Recommended Update: Recommended update for sxiv ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0017-1 Rating: moderate References: #1104541 Affected Products: openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for sxiv contains the following bug fix: - sxiv may have failed to load images due to a missing dependency on imlib2-loaders (boo#1104541) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-17=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-17=1 Package List: - openSUSE Leap 15.0 (x86_64): sxiv-24-lp150.2.3.1 sxiv-debuginfo-24-lp150.2.3.1 sxiv-debugsource-24-lp150.2.3.1 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): sxiv-24-bp150.3.3.1 sxiv-debuginfo-24-bp150.3.3.1 sxiv-debugsource-24-bp150.3.3.1 References: https://bugzilla.suse.com/1104541

1 0

openSUSE-RU-2019:0024-1: moderate: Recommended update for crmsh
by maintenance＠opensuse.org 12 Jan '19

12 Jan '19

openSUSE Recommended Update: Recommended update for crmsh ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0024-1 Rating: moderate References: #1111202 #1111579 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for crmsh provides the following fixes: - Fix an issue where 'crm configure edit' displayed several warnings when editing a bootstrap option. (bsc#1111202) - cibconfig: Normalize - to _ in parameter names. (bsc#1111579) - ra: Handle the obsoletes attribute. (bsc#1111579) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-24=1 Package List: - openSUSE Leap 42.3 (noarch): crmsh-3.0.3-10.6.1 crmsh-scripts-3.0.3-10.6.1 crmsh-test-3.0.3-10.6.1 References: https://bugzilla.suse.com/1111202 https://bugzilla.suse.com/1111579

1 0

openSUSE-RU-2019:0037-1: moderate: Recommended update for kernel-firmware
by maintenance＠opensuse.org 12 Jan '19

12 Jan '19

openSUSE Recommended Update: Recommended update for kernel-firmware ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0037-1 Rating: moderate References: #1101818 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for kernel-firmware provides the following improvements: - Changes in version 20181026 (fate#326045, fate#325856, fate#326294): * qed: Add 8.37.7.0 firmware image. * amdgpu: Add raven dmcu firmware. * amdgpu: Update raven firmware to 18.40. * amdgpu: Update fiji firmware to 18.40. * amdgpu: Update tonga firmware to 18.40. * amdgpu: Update carrizo firmware to 18.40. * amdgpu: Update polaris10 firmware to 18.40. * amdgpu: Update vega10 firmware to 18.40. * linux-firmware: Add firmware for mt7650e. * linux-firmware: Add MC firmware for NXP DPAA2 SoCs. * linux-firmware: Liquidio: Fix GPL compliance issue. * linux-firmware: Update firmware file for Intel Bluetooth,8265. * linux-firmware: Update firmware patch for Intel Bluetooth 8260. * linux-firmware: Update firmware file for Intel Bluetooth,9260. * linux-firmware: Update firmware file for Intel Bluetooth,9560. * linux-firmware: Add firmware for mt7610e. * Update Intel OPA hfi1 firmware. * ath10k: QCA9984 hw1.0: Update board-2.bin. * ath10k: QCA9984 hw1.0: Update firmware-5.bin to 10.4-3.6.0.1-00003. * ath10k: QCA988X hw2.0: Update firmware-5.bin to 10.2.4-1.0-00041. * ath10k: QCA9888 hw2.0: Update board-2.bin. * ath10k: QCA9888 hw2.0: Update firmware-5.bin to 10.4-3.6-00140. * ath10k: QCA9887 hw1.0: Update firmware-5.bin to 10.2.4-1.0-00041. * ath10k: QCA9377 hw1.0: Add firmware-6.bin to WLAN.TF.2.1-00021-QCARMSWP-1. * ath10k: QCA6174 hw3.0: Update firmware-6.bin to RM.4.4.1.c2-00057-QCARMSWP-1. * ath10k: QCA4019 hw1.0: Update board-2.bin. * ath10k: QCA4019 hw1.0: Update firmware-5.bin to 10.4-3.6-00140. * nfp: Add Agilio BPF firmware rev 2.0.6.124. * rtw88: Add firmware file for driver rtw88. * nfp: Update Agilio SmartNIC flower firmware to rev AOTC-2.9.A.37. * iwlwifi: Add -41.ucode firmwares for 9000 series. * iwlwifi: Update firmwares for 9000 series. * iwlwifi: Update firmwares for 7000, 8000 and 9000 series. * nfp: Update Agilio SmartNIC firmware to rev 2.1.13. - Changes in version 20181001 (fate#326291,fate#326079): * ti-connectivity: Add firmware for CC2560(A) Bluetooth. * linux-firmware: mediatek: Add firmware for mt7668u Bluetooth. * nvidia: Add GV100 signed firmware. * firmware/icl/dmc: Add v1.07 of DMC for Icelake. * linux-firmware: Add Marvell SD8997 firmware image. * qca: Update BT firmware files for QCA ROME chip. - Changes in version 20180913: * brcm: Update firmware for bcm43362 sdio. * Mellanox: Add new mlxsw_spectrum firmware 13.1703.4. * rtl_bt: Add firmware and configuration files for the Bluetooth part of RTL8822CU. * nvidia: Switch GP10[2467] to newer scrubber/ACR firmware (from GP108). - Changes in version 20180825: * amdgpu: Sync up polaris10 firmware with 18.30 release. * amdgpu: Sync up vega10 firmware with 18.30 release. * amdgpu: Sync up raven firmware with 18.30 release. * amdgpu: Sync up polaris12 firmware with 18.30 release. * amdgpu: Sync up tonga firmware with 18.30 release. * amdgpu: Sync up polaris11 firmware with 18.30 release. * amdgpu: Sync up fiji firmware with 18.30 release. * linux-firmware: Add firmware for mhdp8546. * qed: Add firmware 8.37.7.0. - Changes in version 20180814: * linux-firmware: Update firmware patch for Intel Bluetooth 7265 (D1). * linux-firmware: Update firmware file for Intel Bluetooth,9560. * linux-firmware: Update firmware file for Intel Bluetooth,9260. * linux-firmware: Update firmware file for Intel Bluetooth,8265. * linux-firmware: Update firmware patch for Intel Bluetooth 8260. * linux-firmware: Add firmware for mt76x0. * qcom: Update venus firmware files for v5.2. * nfp: Update Agilio SmartNIC flower firmware to rev AOTC-2.9.A.31. - Changes in version 20180730: * linux-firmware: Add firmware for mt76x2u. * wl18xx: Update firmware file 8.9.0.0.79. * Mellanox: Add new mlxsw_spectrum firmware 13.1702.6. * WHENCE: Remove reference to amdgpu/vegam_me_2.bin. * linux-firmware: mediatek: Add MT7622 Bluetooth firmwares and license file. * brcm: Add 43430 based AP6212 and 1DX NVRAM. * linux-firmware: Update Marvell USB8801 B0 firmware image. - Changes in version 20180717: * amdgpu: Update copyright date. * amdgpu: Add initial VegaM firmware. * amdgpu: Sync up vega10 firmware with 18.20 release. * amdgpu: Sync up raven firmware with 18.20 release. * amdgpu: Sync up polaris12 firmware with 18.20 release. * amdgpu: Sync up polaris11 firmware with 18.20 release. * amdgpu: Sync up polaris10 firmware with 18.20 release. * amdgpu: Sync up verde firmware with 18.20 release. * amdgpu: Sync up pitcairn firmware with 18.20 release. * amdgpu: Sync up tahiti firmware with 18.20 release. * amdgpu: Sync up oland firmware with 18.20 release. * amdgpu: Sync up hainan firmware with 18.20 release. * amdgpu: Sync up kaveri firmware with 18.20 release. * amdgpu: Sync up mullins firmware with 18.20 release. * amdgpu: Sync up kabini firmware with 18.20 release. * amdgpu: Sync up hawaii firmware with 18.20 release. * amdgpu: Sync up bonaire firmware with 18.20 release. * WHENCE: Fix typo Version. * cxgb4: Update firmware to revision 1.20.8.0. - Changes in version 20180606: * brcm: Update firmware for bcm4356 pcie. * brcm: Update firmware for bcm4354 sdio. * brcm: Update firmware for bcm43362 sdio. * brcm: Update firmware for bcm43340 sdio. * brcm: Update firmware for bcm43430 sdio. * Update Cypress license termination clause. * amdgpu: Update vega10 VCE firmware to version 55.3. * linux-firmware: Update firmware patch for Intel Bluetooth 7265 (D0). * linux-firmware: Update firmware patch for Intel Bluetooth 7265 (D1). * qcom: Add venus firmware files for v5.2. * linux-firmware: liquidio: Update vswitch firmware to v1.7.2. - Remove unnecessary python dependency. (bsc#1101818) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-37=1 Package List: - openSUSE Leap 15.0 (noarch): kernel-firmware-20181026-lp150.2.6.1 ucode-amd-20181026-lp150.2.6.1 References: https://bugzilla.suse.com/1101818

1 0

openSUSE-RU-2019:0041-1: moderate: Recommended update for ceph
by maintenance＠opensuse.org 12 Jan '19

12 Jan '19

openSUSE Recommended Update: Recommended update for ceph ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0041-1 Rating: moderate References: #1109009 #1110415 #1110416 #1110419 #1112872 #1114414 #1116205 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has 7 recommended fixes can now be installed. Description: This update for ceph fixes the following issues: * rgw: resharding produces invalid values of bucket stats (bsc#1110419) * rgw: Fix log level of gc_iterate_entries (bsc#1114414) * rgw: dynamic reshard fixe (bsc#1109009) * bsc#1110415, bsc#1110416 # rgw: es module: set compression type correctly # rgw: ES sync: be more restrictive on object system attrs # rgw: ES sync: wrap all the decode bls in try block # rgw: librgw: initialize curl and http client for multisite * bsc#1116205, bsc#1112872 # rgw: allow init complete to proceed in case of erroneus zone deletes # rgw: period update: check for dangling master zone references # tests: tests for master zone deletion # tests: rgw: test_multi: python 2-3 compatibility This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-41=1 Package List: - openSUSE Leap 42.3 (x86_64): ceph-12.2.10+git.1544718327.fc6f0c7299-18.1 ceph-base-12.2.10+git.1544718327.fc6f0c7299-18.1 ceph-base-debuginfo-12.2.10+git.1544718327.fc6f0c7299-18.1 ceph-common-12.2.10+git.1544718327.fc6f0c7299-18.1 ceph-common-debuginfo-12.2.10+git.1544718327.fc6f0c7299-18.1 ceph-debugsource-12.2.10+git.1544718327.fc6f0c7299-18.1 ceph-fuse-12.2.10+git.1544718327.fc6f0c7299-18.1 ceph-fuse-debuginfo-12.2.10+git.1544718327.fc6f0c7299-18.1 ceph-mds-12.2.10+git.1544718327.fc6f0c7299-18.1 ceph-mds-debuginfo-12.2.10+git.1544718327.fc6f0c7299-18.1 ceph-mgr-12.2.10+git.1544718327.fc6f0c7299-18.1 ceph-mgr-debuginfo-12.2.10+git.1544718327.fc6f0c7299-18.1 ceph-mon-12.2.10+git.1544718327.fc6f0c7299-18.1 ceph-mon-debuginfo-12.2.10+git.1544718327.fc6f0c7299-18.1 ceph-osd-12.2.10+git.1544718327.fc6f0c7299-18.1 ceph-osd-debuginfo-12.2.10+git.1544718327.fc6f0c7299-18.1 ceph-radosgw-12.2.10+git.1544718327.fc6f0c7299-18.1 ceph-radosgw-debuginfo-12.2.10+git.1544718327.fc6f0c7299-18.1 ceph-resource-agents-12.2.10+git.1544718327.fc6f0c7299-18.1 ceph-test-12.2.10+git.1544718327.fc6f0c7299-18.1 ceph-test-debuginfo-12.2.10+git.1544718327.fc6f0c7299-18.1 ceph-test-debugsource-12.2.10+git.1544718327.fc6f0c7299-18.1 libcephfs-devel-12.2.10+git.1544718327.fc6f0c7299-18.1 libcephfs2-12.2.10+git.1544718327.fc6f0c7299-18.1 libcephfs2-debuginfo-12.2.10+git.1544718327.fc6f0c7299-18.1 librados-devel-12.2.10+git.1544718327.fc6f0c7299-18.1 librados-devel-debuginfo-12.2.10+git.1544718327.fc6f0c7299-18.1 librados2-12.2.10+git.1544718327.fc6f0c7299-18.1 librados2-debuginfo-12.2.10+git.1544718327.fc6f0c7299-18.1 libradosstriper-devel-12.2.10+git.1544718327.fc6f0c7299-18.1 libradosstriper1-12.2.10+git.1544718327.fc6f0c7299-18.1 libradosstriper1-debuginfo-12.2.10+git.1544718327.fc6f0c7299-18.1 librbd-devel-12.2.10+git.1544718327.fc6f0c7299-18.1 librbd1-12.2.10+git.1544718327.fc6f0c7299-18.1 librbd1-debuginfo-12.2.10+git.1544718327.fc6f0c7299-18.1 librgw-devel-12.2.10+git.1544718327.fc6f0c7299-18.1 librgw2-12.2.10+git.1544718327.fc6f0c7299-18.1 librgw2-debuginfo-12.2.10+git.1544718327.fc6f0c7299-18.1 python-ceph-compat-12.2.10+git.1544718327.fc6f0c7299-18.1 python-cephfs-12.2.10+git.1544718327.fc6f0c7299-18.1 python-cephfs-debuginfo-12.2.10+git.1544718327.fc6f0c7299-18.1 python-rados-12.2.10+git.1544718327.fc6f0c7299-18.1 python-rados-debuginfo-12.2.10+git.1544718327.fc6f0c7299-18.1 python-rbd-12.2.10+git.1544718327.fc6f0c7299-18.1 python-rbd-debuginfo-12.2.10+git.1544718327.fc6f0c7299-18.1 python-rgw-12.2.10+git.1544718327.fc6f0c7299-18.1 python-rgw-debuginfo-12.2.10+git.1544718327.fc6f0c7299-18.1 python3-ceph-argparse-12.2.10+git.1544718327.fc6f0c7299-18.1 python3-cephfs-12.2.10+git.1544718327.fc6f0c7299-18.1 python3-cephfs-debuginfo-12.2.10+git.1544718327.fc6f0c7299-18.1 python3-rados-12.2.10+git.1544718327.fc6f0c7299-18.1 python3-rados-debuginfo-12.2.10+git.1544718327.fc6f0c7299-18.1 python3-rbd-12.2.10+git.1544718327.fc6f0c7299-18.1 python3-rbd-debuginfo-12.2.10+git.1544718327.fc6f0c7299-18.1 python3-rgw-12.2.10+git.1544718327.fc6f0c7299-18.1 python3-rgw-debuginfo-12.2.10+git.1544718327.fc6f0c7299-18.1 rados-objclass-devel-12.2.10+git.1544718327.fc6f0c7299-18.1 rbd-fuse-12.2.10+git.1544718327.fc6f0c7299-18.1 rbd-fuse-debuginfo-12.2.10+git.1544718327.fc6f0c7299-18.1 rbd-mirror-12.2.10+git.1544718327.fc6f0c7299-18.1 rbd-mirror-debuginfo-12.2.10+git.1544718327.fc6f0c7299-18.1 rbd-nbd-12.2.10+git.1544718327.fc6f0c7299-18.1 rbd-nbd-debuginfo-12.2.10+git.1544718327.fc6f0c7299-18.1 References: https://bugzilla.suse.com/1109009 https://bugzilla.suse.com/1110415 https://bugzilla.suse.com/1110416 https://bugzilla.suse.com/1110419 https://bugzilla.suse.com/1112872 https://bugzilla.suse.com/1114414 https://bugzilla.suse.com/1116205

1 0

openSUSE-RU-2019:0023-1: Recommended update for acl
by maintenance＠opensuse.org 12 Jan '19

12 Jan '19

openSUSE Recommended Update: Recommended update for acl ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0023-1 Rating: low References: #953659 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for acl fixes the following issues: - quote: Escape literal backslashes (bsc#953659). This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-23=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): acl-2.2.52-11.3.1 acl-debuginfo-2.2.52-11.3.1 acl-debugsource-2.2.52-11.3.1 libacl-devel-2.2.52-11.3.1 libacl1-2.2.52-11.3.1 libacl1-debuginfo-2.2.52-11.3.1 - openSUSE Leap 42.3 (x86_64): libacl-devel-32bit-2.2.52-11.3.1 libacl1-32bit-2.2.52-11.3.1 libacl1-debuginfo-32bit-2.2.52-11.3.1 References: https://bugzilla.suse.com/953659

1 0

openSUSE-RU-2019:0040-1: moderate: Recommended update for apache2
by maintenance＠opensuse.org 12 Jan '19

12 Jan '19

openSUSE Recommended Update: Recommended update for apache2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0040-1 Rating: moderate References: #1108989 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for apache2 provides the following fix: - Fix full scoreboard error. (bsc#1108989) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-40=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): apache2-2.4.23-34.1 apache2-debuginfo-2.4.23-34.1 apache2-debugsource-2.4.23-34.1 apache2-devel-2.4.23-34.1 apache2-event-2.4.23-34.1 apache2-event-debuginfo-2.4.23-34.1 apache2-example-pages-2.4.23-34.1 apache2-prefork-2.4.23-34.1 apache2-prefork-debuginfo-2.4.23-34.1 apache2-utils-2.4.23-34.1 apache2-utils-debuginfo-2.4.23-34.1 apache2-worker-2.4.23-34.1 apache2-worker-debuginfo-2.4.23-34.1 - openSUSE Leap 42.3 (noarch): apache2-doc-2.4.23-34.1 References: https://bugzilla.suse.com/1108989

1 0

openSUSE-RU-2019:0032-1: moderate: Recommended update for python3-ec2uploadimg
by maintenance＠opensuse.org 12 Jan '19

12 Jan '19

openSUSE Recommended Update: Recommended update for python3-ec2uploadimg ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0032-1 Rating: moderate References: #1118027 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python3-ec2uploadimg fixes the following issues: - Support ARM architecture (bsc#1118027) - Use the proper subnet if no default subnet exists in the account This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-32=1 Package List: - openSUSE Leap 15.0 (noarch): python3-ec2uploadimg-5.0.1-lp150.2.3.1 References: https://bugzilla.suse.com/1118027

1 0

openSUSE-RU-2019:0027-1: moderate: Recommended update for yast2
by maintenance＠opensuse.org 12 Jan '19

12 Jan '19

openSUSE Recommended Update: Recommended update for yast2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0027-1 Rating: moderate References: #1093052 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2 fixes the following issues: yast2: - When only one firewall is installed but not running, choose it instead of the default SuSEfirewall2 (bsc#1093052). yast2-firewall: - YaST now installs SuSEFirewall2 when it is selected as the firewall backend (bsc#1093052) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-27=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): yast2-3.2.46-2.9.1 - openSUSE Leap 42.3 (noarch): yast2-firewall-3.2.1-2.3.1 References: https://bugzilla.suse.com/1093052

1 0

openSUSE-RU-2019:0030-1: important: Recommended update for yast2-bootloader
by maintenance＠opensuse.org 12 Jan '19

12 Jan '19

openSUSE Recommended Update: Recommended update for yast2-bootloader ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0030-1 Rating: important References: #1070233 #1093838 #1119781 #1119919 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for yast2-bootloader fixes the following issues: - Do not crash when clicking on booting during upgrade (bsc#1070233,bsc#1093838,bsc#1119919,bsc#1119781) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-30=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): yast2-bootloader-3.2.27.3-13.1 References: https://bugzilla.suse.com/1070233 https://bugzilla.suse.com/1093838 https://bugzilla.suse.com/1119781 https://bugzilla.suse.com/1119919

1 0

openSUSE-RU-2019:0026-1: moderate: Recommended update for gnome-control-center
by maintenance＠opensuse.org 12 Jan '19

12 Jan '19

openSUSE Recommended Update: Recommended update for gnome-control-center ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0026-1 Rating: moderate References: #1078968 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gnome-control-center provides the following fix: - user-accounts: Remove implicit language setting when a new user navigates to the user panel for the first time. (bsc#1078968) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-26=1 Package List: - openSUSE Leap 42.3 (x86_64): gnome-control-center-3.20.1-18.3.1 gnome-control-center-color-3.20.1-18.3.1 gnome-control-center-debuginfo-3.20.1-18.3.1 gnome-control-center-debugsource-3.20.1-18.3.1 gnome-control-center-devel-3.20.1-18.3.1 gnome-control-center-goa-3.20.1-18.3.1 gnome-control-center-user-faces-3.20.1-18.3.1 - openSUSE Leap 42.3 (noarch): gnome-control-center-lang-3.20.1-18.3.1 References: https://bugzilla.suse.com/1078968

1 0

openSUSE-RU-2019:0029-1: Recommended update for acl
by maintenance＠opensuse.org 12 Jan '19

12 Jan '19

openSUSE Recommended Update: Recommended update for acl ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0029-1 Rating: low References: #953659 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for acl fixes the following issues: - test: Add helper library to fake passwd/group files. - quote: Escape literal backslashes. (bsc#953659) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-29=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): acl-2.2.52-lp150.3.3.1 acl-debuginfo-2.2.52-lp150.3.3.1 acl-debugsource-2.2.52-lp150.3.3.1 libacl-devel-2.2.52-lp150.3.3.1 libacl1-2.2.52-lp150.3.3.1 libacl1-debuginfo-2.2.52-lp150.3.3.1 - openSUSE Leap 15.0 (x86_64): libacl-devel-32bit-2.2.52-lp150.3.3.1 libacl1-32bit-2.2.52-lp150.3.3.1 libacl1-32bit-debuginfo-2.2.52-lp150.3.3.1 References: https://bugzilla.suse.com/953659

1 0

openSUSE-RU-2019:0018-1: Recommended update for gnucash-docs
by maintenance＠opensuse.org 12 Jan '19

12 Jan '19

openSUSE Recommended Update: Recommended update for gnucash-docs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0018-1 Rating: low References: #1099804 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gnucash-docs fixes the following issue: - gnucash-docs did not recommend gnome-help and may have been unable to retrieve and open guide files (boo#1099804) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-18=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-18=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-18=1 Package List: - openSUSE Leap 42.3 (noarch): gnucash-docs-2.6.16-8.3.1 - openSUSE Leap 15.0 (noarch): gnucash-docs-3.0-lp150.2.3.1 - openSUSE Backports SLE-15 (noarch): gnucash-docs-3.0-bp150.3.3.1 References: https://bugzilla.suse.com/1099804

1 0

openSUSE-SU-2019:0022-1: important: Security update for gthumb
by opensuse-security＠opensuse.org 12 Jan '19

12 Jan '19

openSUSE Security Update: Security update for gthumb ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0022-1 Rating: important References: #1113749 Cross-References: CVE-2018-18718 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for gthumb fixes the following issues: Security issue fixed: - CVE-2018-18718: Fixed a double-free in add_themes_from_dir function from dlg-contact-sheet.c (boo#1113749) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-22=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-22=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-22=1 Package List: - openSUSE Leap 42.3 (noarch): gthumb-lang-3.4.2-7.3.1 - openSUSE Leap 42.3 (x86_64): gthumb-3.4.2-7.3.1 gthumb-debuginfo-3.4.2-7.3.1 gthumb-debugsource-3.4.2-7.3.1 gthumb-devel-3.4.2-7.3.1 - openSUSE Leap 15.0 (x86_64): gthumb-3.6.1-lp150.3.3.1 gthumb-debuginfo-3.6.1-lp150.3.3.1 gthumb-debugsource-3.6.1-lp150.3.3.1 gthumb-devel-3.6.1-lp150.3.3.1 - openSUSE Leap 15.0 (noarch): gthumb-lang-3.6.1-lp150.3.3.1 - openSUSE Backports SLE-15 (x86_64): gthumb-3.6.1-bp150.2.3.1 gthumb-devel-3.6.1-bp150.2.3.1 - openSUSE Backports SLE-15 (noarch): gthumb-lang-3.6.1-bp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-18718.html https://bugzilla.suse.com/1113749

1 0

openSUSE-SU-2019:0042-1: important: Security update for java-1_7_0-openjdk
by opensuse-security＠opensuse.org 12 Jan '19

12 Jan '19

openSUSE Security Update: Security update for java-1_7_0-openjdk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0042-1 Rating: important References: #1101644 #1101645 #1101651 #1101656 #1112142 #1112143 #1112144 #1112146 #1112147 #1112152 #1112153 Cross-References: CVE-2018-13785 CVE-2018-16435 CVE-2018-2938 CVE-2018-2940 CVE-2018-2952 CVE-2018-2973 CVE-2018-3136 CVE-2018-3139 CVE-2018-3149 CVE-2018-3169 CVE-2018-3180 CVE-2018-3214 CVE-2018-3639 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes 13 vulnerabilities is now available. Description: This update for java-1_7_0-openjdk to version 7u201 fixes the following issues: Security issues fixed: - CVE-2018-3136: Manifest better support (bsc#1112142) - CVE-2018-3139: Better HTTP Redirection (bsc#1112143) - CVE-2018-3149: Enhance JNDI lookups (bsc#1112144) - CVE-2018-3169: Improve field accesses (bsc#1112146) - CVE-2018-3180: Improve TLS connections stability (bsc#1112147) - CVE-2018-3214: Better RIFF reading support (bsc#1112152) - CVE-2018-13785: Upgrade JDK 8u to libpng 1.6.35 (bsc#1112153) - CVE-2018-16435: heap-based buffer overflow in SetData function in cmsIT8LoadFromFile - CVE-2018-2938: Support Derby connections (bsc#1101644) - CVE-2018-2940: Better stack walking (bsc#1101645) - CVE-2018-2952: Exception to Pattern Syntax (bsc#1101651) - CVE-2018-2973: Improve LDAP support (bsc#1101656) - CVE-2018-3639 cpu speculative store bypass mitigation This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-42=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): java-1_7_0-openjdk-1.7.0.201-54.1 java-1_7_0-openjdk-accessibility-1.7.0.201-54.1 java-1_7_0-openjdk-bootstrap-1.7.0.201-54.1 java-1_7_0-openjdk-bootstrap-debuginfo-1.7.0.201-54.1 java-1_7_0-openjdk-bootstrap-debugsource-1.7.0.201-54.1 java-1_7_0-openjdk-bootstrap-devel-1.7.0.201-54.1 java-1_7_0-openjdk-bootstrap-devel-debuginfo-1.7.0.201-54.1 java-1_7_0-openjdk-bootstrap-headless-1.7.0.201-54.1 java-1_7_0-openjdk-bootstrap-headless-debuginfo-1.7.0.201-54.1 java-1_7_0-openjdk-debuginfo-1.7.0.201-54.1 java-1_7_0-openjdk-debugsource-1.7.0.201-54.1 java-1_7_0-openjdk-demo-1.7.0.201-54.1 java-1_7_0-openjdk-demo-debuginfo-1.7.0.201-54.1 java-1_7_0-openjdk-devel-1.7.0.201-54.1 java-1_7_0-openjdk-devel-debuginfo-1.7.0.201-54.1 java-1_7_0-openjdk-headless-1.7.0.201-54.1 java-1_7_0-openjdk-headless-debuginfo-1.7.0.201-54.1 java-1_7_0-openjdk-src-1.7.0.201-54.1 - openSUSE Leap 42.3 (noarch): java-1_7_0-openjdk-javadoc-1.7.0.201-54.1 References: https://www.suse.com/security/cve/CVE-2018-13785.html https://www.suse.com/security/cve/CVE-2018-16435.html https://www.suse.com/security/cve/CVE-2018-2938.html https://www.suse.com/security/cve/CVE-2018-2940.html https://www.suse.com/security/cve/CVE-2018-2952.html https://www.suse.com/security/cve/CVE-2018-2973.html https://www.suse.com/security/cve/CVE-2018-3136.html https://www.suse.com/security/cve/CVE-2018-3139.html https://www.suse.com/security/cve/CVE-2018-3149.html https://www.suse.com/security/cve/CVE-2018-3169.html https://www.suse.com/security/cve/CVE-2018-3180.html https://www.suse.com/security/cve/CVE-2018-3214.html https://www.suse.com/security/cve/CVE-2018-3639.html https://bugzilla.suse.com/1101644 https://bugzilla.suse.com/1101645 https://bugzilla.suse.com/1101651 https://bugzilla.suse.com/1101656 https://bugzilla.suse.com/1112142 https://bugzilla.suse.com/1112143 https://bugzilla.suse.com/1112144 https://bugzilla.suse.com/1112146 https://bugzilla.suse.com/1112147 https://bugzilla.suse.com/1112152 https://bugzilla.suse.com/1112153

1 0

openSUSE-RU-2019:0035-1: moderate: Recommended update for osinfo-db
by maintenance＠opensuse.org 12 Jan '19

12 Jan '19

openSUSE Recommended Update: Recommended update for osinfo-db ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0035-1 Rating: moderate References: #1086715 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for osinfo-db fixes the following issues: - Add correct release date for SLE12-SP4 - Update database to versions 20181116,20181011 - Add support for sle15sp1 (bsc#1086715) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-35=1 Package List: - openSUSE Leap 42.3 (noarch): osinfo-db-20181116-14.1 References: https://bugzilla.suse.com/1086715

1 0

openSUSE-RU-2019:0031-1: moderate: Recommended update for rollback-helper
by maintenance＠opensuse.org 12 Jan '19

12 Jan '19

openSUSE Recommended Update: Recommended update for rollback-helper ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0031-1 Rating: moderate References: #1088552 #1108618 #1113048 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for rollback-helper fixes the following issues: - Run before any other services calling zypper (bsc#1113048) - Retry network connection if it doesn't work yet (bsc#1108618) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-31=1 Package List: - openSUSE Leap 42.3 (noarch): rollback-helper-1.0+git20181112.65db4d0-3.6.1 References: https://bugzilla.suse.com/1088552 https://bugzilla.suse.com/1108618 https://bugzilla.suse.com/1113048

1 0

openSUSE-SU-2019:0045-1: important: Security update for LibVNCServer
by opensuse-security＠opensuse.org 12 Jan '19

12 Jan '19

openSUSE Security Update: Security update for LibVNCServer ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0045-1 Rating: important References: #1120114 #1120115 #1120116 #1120117 #1120118 #1120119 #1120120 #1120121 #1120122 Cross-References: CVE-2018-15126 CVE-2018-15127 CVE-2018-20019 CVE-2018-20020 CVE-2018-20021 CVE-2018-20022 CVE-2018-20023 CVE-2018-20024 CVE-2018-6307 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes 9 vulnerabilities is now available. Description: This update for LibVNCServer fixes the following issues: Security issues fixed: - CVE-2018-15126: Fixed use-after-free in file transfer extension (bsc#1120114) - CVE-2018-6307: Fixed use-after-free in file transfer extension server code (bsc#1120115) - CVE-2018-20020: Fixed heap out-of-bound write inside structure in VNC client code (bsc#1120116) - CVE-2018-15127: Fixed heap out-of-bounds write in rfbserver.c (bsc#1120117) - CVE-2018-20019: Fixed multiple heap out-of-bound writes in VNC client code (bsc#1120118) - CVE-2018-20023: Fixed information disclosure through improper initialization in VNC Repeater client code (bsc#1120119) - CVE-2018-20022: Fixed information disclosure through improper initialization in VNC client code (bsc#1120120) - CVE-2018-20024: Fixed NULL pointer dereference in VNC client code (bsc#1120121) - CVE-2018-20021: Fixed infinite loop in VNC client code (bsc#1120122) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-45=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): LibVNCServer-debugsource-0.9.9-16.6.1 LibVNCServer-devel-0.9.9-16.6.1 libvncclient0-0.9.9-16.6.1 libvncclient0-debuginfo-0.9.9-16.6.1 libvncserver0-0.9.9-16.6.1 libvncserver0-debuginfo-0.9.9-16.6.1 linuxvnc-0.9.9-16.6.1 linuxvnc-debuginfo-0.9.9-16.6.1 References: https://www.suse.com/security/cve/CVE-2018-15126.html https://www.suse.com/security/cve/CVE-2018-15127.html https://www.suse.com/security/cve/CVE-2018-20019.html https://www.suse.com/security/cve/CVE-2018-20020.html https://www.suse.com/security/cve/CVE-2018-20021.html https://www.suse.com/security/cve/CVE-2018-20022.html https://www.suse.com/security/cve/CVE-2018-20023.html https://www.suse.com/security/cve/CVE-2018-20024.html https://www.suse.com/security/cve/CVE-2018-6307.html https://bugzilla.suse.com/1120114 https://bugzilla.suse.com/1120115 https://bugzilla.suse.com/1120116 https://bugzilla.suse.com/1120117 https://bugzilla.suse.com/1120118 https://bugzilla.suse.com/1120119 https://bugzilla.suse.com/1120120 https://bugzilla.suse.com/1120121 https://bugzilla.suse.com/1120122

1 0

openSUSE-OU-2019:0034-1: Optional update to add brotli
by maintenance＠opensuse.org 12 Jan '19

12 Jan '19

openSUSE Optional Update: Optional update to add brotli ______________________________________________________________________________ Announcement ID: openSUSE-OU-2019:0034-1 Rating: low References: #1106391 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update supplies the brotli compressor. (FATE#326659) It is a requirement for an upcoming webkit2gtk3 update. Patch Instructions: To install this openSUSE Optional Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-34=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): brotli-1.0.2-2.1 brotli-debuginfo-1.0.2-2.1 brotli-debugsource-1.0.2-2.1 libbrotli-devel-1.0.2-2.1 libbrotlicommon1-1.0.2-2.1 libbrotlicommon1-debuginfo-1.0.2-2.1 libbrotlidec1-1.0.2-2.1 libbrotlidec1-debuginfo-1.0.2-2.1 libbrotlienc1-1.0.2-2.1 libbrotlienc1-debuginfo-1.0.2-2.1 References: https://bugzilla.suse.com/1106391

1 0

openSUSE-SU-2019:0044-1: important: Security update for haproxy
by opensuse-security＠opensuse.org 12 Jan '19

12 Jan '19

openSUSE Security Update: Security update for haproxy ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0044-1 Rating: important References: #1119368 #1119419 Cross-References: CVE-2018-20102 CVE-2018-20103 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for haproxy to version 1.8.15 fixes the following issues: Security issues fixed: - CVE-2018-20102: Fixed an out-of-bounds read in dns_validate_dns_response(), which allowed for memory disclosure (bsc#1119368) - CVE-2018-20103: Fixed an infinite recursion via crafted packet allows stack exhaustion and denial of service (bsc#1119419) Other notable bug fixes: - Fix off-by-one write in dns_validate_dns_response() - Fix out-of-bounds read via signedness error in dns_validate_dns_response() - Prevent out-of-bounds read in dns_validate_dns_response() - Prevent out-of-bounds read in dns_read_name() - Prevent stack-exhaustion via recursion loop in dns_read_name For a full list of changes, please refer to: https://www.haproxy.org/download/1.8/src/CHANGELOG This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-44=1 Package List: - openSUSE Leap 15.0 (x86_64): haproxy-1.8.15~git0.6b6a350a-lp150.2.6.1 haproxy-debuginfo-1.8.15~git0.6b6a350a-lp150.2.6.1 haproxy-debugsource-1.8.15~git0.6b6a350a-lp150.2.6.1 References: https://www.suse.com/security/cve/CVE-2018-20102.html https://www.suse.com/security/cve/CVE-2018-20103.html https://bugzilla.suse.com/1119368 https://bugzilla.suse.com/1119419

1 0

openSUSE-SU-2019:0020-1: moderate: Security update for gpg2
by opensuse-security＠opensuse.org 12 Jan '19

12 Jan '19

openSUSE Security Update: Security update for gpg2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0020-1 Rating: moderate References: #1120346 Cross-References: CVE-2018-1000858 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for gpg2 fixes the following issue: Security issue fixed: - CVE-2018-1000858: Fixed a Cross Site Request Forgery(CSRF) vulnerability in dirmngr that can result in Attacker controlled CSRF (bsc#1120346). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-20=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): gpg2-2.2.5-lp150.3.6.1 gpg2-debuginfo-2.2.5-lp150.3.6.1 gpg2-debugsource-2.2.5-lp150.3.6.1 - openSUSE Leap 15.0 (noarch): gpg2-lang-2.2.5-lp150.3.6.1 References: https://www.suse.com/security/cve/CVE-2018-1000858.html https://bugzilla.suse.com/1120346

1 0

openSUSE-RU-2019:0025-1: moderate: Recommended update for gdb
by maintenance＠opensuse.org 12 Jan '19

12 Jan '19

openSUSE Recommended Update: Recommended update for gdb ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0025-1 Rating: moderate References: #1109013 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gdb provides the following fix: - Fix a crash when reading core. (bsc#1109013) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-25=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): gdb-8.2-10.1 gdb-debuginfo-8.2-10.1 gdb-debugsource-8.2-10.1 gdb-testresults-8.2-10.1 gdbserver-8.2-10.1 gdbserver-debuginfo-8.2-10.1 References: https://bugzilla.suse.com/1109013

1 0

openSUSE-RU-2019:0038-1: moderate: Recommended update for osinfo-db
by maintenance＠opensuse.org 12 Jan '19

12 Jan '19

openSUSE Recommended Update: Recommended update for osinfo-db ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0038-1 Rating: moderate References: #1086715 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for osinfo-db fixes the following issues: - Add correct release date for SLE12-SP4. - Update database to versions 20181116, 20181011, 20180920, 20180903. - Add support for sle15sp1. (bsc#1086715) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-38=1 Package List: - openSUSE Leap 15.0 (noarch): osinfo-db-20181116-lp150.2.9.1 References: https://bugzilla.suse.com/1086715

1 0

openSUSE-RU-2019:0036-1: moderate: Recommended update for gdm
by maintenance＠opensuse.org 12 Jan '19

12 Jan '19

openSUSE Recommended Update: Recommended update for gdm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0036-1 Rating: moderate References: #1112834 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gdm fixes the following issues: - Ignore duplicate desktop file with same "Name" value, including symlinks of desktop files. (bsc#1112834) - Drop the hardcoded "default.desktop" as LightDM and SDDM use symlinks as aliases. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-36=1 Package List: - openSUSE Leap 15.0 (noarch): gdm-branding-upstream-3.26.2.1-lp150.11.6.1 gdm-lang-3.26.2.1-lp150.11.6.1 gdmflexiserver-3.26.2.1-lp150.11.6.1 - openSUSE Leap 15.0 (x86_64): gdm-3.26.2.1-lp150.11.6.1 gdm-debuginfo-3.26.2.1-lp150.11.6.1 gdm-debugsource-3.26.2.1-lp150.11.6.1 gdm-devel-3.26.2.1-lp150.11.6.1 libgdm1-3.26.2.1-lp150.11.6.1 libgdm1-debuginfo-3.26.2.1-lp150.11.6.1 typelib-1_0-Gdm-1_0-3.26.2.1-lp150.11.6.1 References: https://bugzilla.suse.com/1112834

1 0

openSUSE-RU-2019:0033-1: moderate: Recommended update for apparmor
by maintenance＠opensuse.org 12 Jan '19

12 Jan '19

openSUSE Recommended Update: Recommended update for apparmor ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0033-1 Rating: moderate References: #1111345 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for apparmor fixes the following issues: - Update the last dnsmasq fix for logfiles when running under apparmor (bsc#1111345) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-33=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): apache2-mod_apparmor-2.12-lp150.6.6.1 apache2-mod_apparmor-debuginfo-2.12-lp150.6.6.1 apparmor-debugsource-2.12-lp150.6.6.1 apparmor-parser-2.12-lp150.6.6.1 apparmor-parser-debuginfo-2.12-lp150.6.6.1 libapparmor-debugsource-2.12-lp150.6.6.1 libapparmor-devel-2.12-lp150.6.6.1 libapparmor1-2.12-lp150.6.6.1 libapparmor1-debuginfo-2.12-lp150.6.6.1 pam_apparmor-2.12-lp150.6.6.1 pam_apparmor-debuginfo-2.12-lp150.6.6.1 perl-apparmor-2.12-lp150.6.6.1 perl-apparmor-debuginfo-2.12-lp150.6.6.1 python3-apparmor-2.12-lp150.6.6.1 python3-apparmor-debuginfo-2.12-lp150.6.6.1 ruby-apparmor-2.12-lp150.6.6.1 ruby-apparmor-debuginfo-2.12-lp150.6.6.1 - openSUSE Leap 15.0 (noarch): apparmor-abstractions-2.12-lp150.6.6.1 apparmor-docs-2.12-lp150.6.6.1 apparmor-parser-lang-2.12-lp150.6.6.1 apparmor-profiles-2.12-lp150.6.6.1 apparmor-utils-2.12-lp150.6.6.1 apparmor-utils-lang-2.12-lp150.6.6.1 - openSUSE Leap 15.0 (x86_64): libapparmor1-32bit-2.12-lp150.6.6.1 libapparmor1-32bit-debuginfo-2.12-lp150.6.6.1 pam_apparmor-32bit-2.12-lp150.6.6.1 pam_apparmor-32bit-debuginfo-2.12-lp150.6.6.1 References: https://bugzilla.suse.com/1111345

1 0

openSUSE-RU-2019:0039-1: moderate: Recommended update for xfsprogs
by maintenance＠opensuse.org 12 Jan '19

12 Jan '19

openSUSE Recommended Update: Recommended update for xfsprogs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0039-1 Rating: moderate References: #1119063 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for xfsprogs fixes the following issues: - Fix root inode's parent when it's bogus for sf directory (xfs repair). (bsc#1119063) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-39=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): xfsprogs-4.15.0-lp150.3.7.1 xfsprogs-debuginfo-4.15.0-lp150.3.7.1 xfsprogs-debugsource-4.15.0-lp150.3.7.1 xfsprogs-devel-4.15.0-lp150.3.7.1 References: https://bugzilla.suse.com/1119063

1 0

openSUSE-SU-2019:0043-1: important: Security update for java-1_8_0-openjdk
by opensuse-security＠opensuse.org 12 Jan '19

12 Jan '19

openSUSE Security Update: Security update for java-1_8_0-openjdk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0043-1 Rating: important References: #1112142 #1112143 #1112144 #1112146 #1112147 #1112148 #1112152 #1112153 Cross-References: CVE-2018-13785 CVE-2018-16435 CVE-2018-3136 CVE-2018-3139 CVE-2018-3149 CVE-2018-3169 CVE-2018-3180 CVE-2018-3183 CVE-2018-3214 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes 9 vulnerabilities is now available. Description: This update for java-1_8_0-openjdk to version 8u191 fixes the following issues: Security issues fixed: - CVE-2018-3136: Manifest better support (bsc#1112142) - CVE-2018-3139: Better HTTP Redirection (bsc#1112143) - CVE-2018-3149: Enhance JNDI lookups (bsc#1112144) - CVE-2018-3169: Improve field accesses (bsc#1112146) - CVE-2018-3180: Improve TLS connections stability (bsc#1112147) - CVE-2018-3214: Better RIFF reading support (bsc#1112152) - CVE-2018-13785: Upgrade JDK 8u to libpng 1.6.35 (bsc#1112153) - CVE-2018-3183: Improve script engine support (bsc#1112148) - CVE-2018-16435: heap-based buffer overflow in SetData function in cmsIT8LoadFromFile This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-43=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-43=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): java-1_8_0-openjdk-1.8.0.191-30.1 java-1_8_0-openjdk-accessibility-1.8.0.191-30.1 java-1_8_0-openjdk-debuginfo-1.8.0.191-30.1 java-1_8_0-openjdk-debugsource-1.8.0.191-30.1 java-1_8_0-openjdk-demo-1.8.0.191-30.1 java-1_8_0-openjdk-demo-debuginfo-1.8.0.191-30.1 java-1_8_0-openjdk-devel-1.8.0.191-30.1 java-1_8_0-openjdk-devel-debuginfo-1.8.0.191-30.1 java-1_8_0-openjdk-headless-1.8.0.191-30.1 java-1_8_0-openjdk-headless-debuginfo-1.8.0.191-30.1 java-1_8_0-openjdk-src-1.8.0.191-30.1 - openSUSE Leap 42.3 (noarch): java-1_8_0-openjdk-javadoc-1.8.0.191-30.1 - openSUSE Leap 15.0 (i586 x86_64): java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2 java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2 java-1_8_0-openjdk-debuginfo-1.8.0.191-lp150.2.9.2 java-1_8_0-openjdk-debugsource-1.8.0.191-lp150.2.9.2 java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2 java-1_8_0-openjdk-demo-debuginfo-1.8.0.191-lp150.2.9.2 java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2 java-1_8_0-openjdk-devel-debuginfo-1.8.0.191-lp150.2.9.2 java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2 java-1_8_0-openjdk-headless-debuginfo-1.8.0.191-lp150.2.9.2 java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2 - openSUSE Leap 15.0 (noarch): java-1_8_0-openjdk-javadoc-1.8.0.191-lp150.2.9.2 References: https://www.suse.com/security/cve/CVE-2018-13785.html https://www.suse.com/security/cve/CVE-2018-16435.html https://www.suse.com/security/cve/CVE-2018-3136.html https://www.suse.com/security/cve/CVE-2018-3139.html https://www.suse.com/security/cve/CVE-2018-3149.html https://www.suse.com/security/cve/CVE-2018-3169.html https://www.suse.com/security/cve/CVE-2018-3180.html https://www.suse.com/security/cve/CVE-2018-3183.html https://www.suse.com/security/cve/CVE-2018-3214.html https://bugzilla.suse.com/1112142 https://bugzilla.suse.com/1112143 https://bugzilla.suse.com/1112144 https://bugzilla.suse.com/1112146 https://bugzilla.suse.com/1112147 https://bugzilla.suse.com/1112148 https://bugzilla.suse.com/1112152 https://bugzilla.suse.com/1112153

1 0

openSUSE-SU-2019:0019-1: moderate: Security update for discount
by opensuse-security＠opensuse.org 12 Jan '19

12 Jan '19

openSUSE Security Update: Security update for discount ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0019-1 Rating: moderate References: #1094809 #1098252 Cross-References: CVE-2018-11468 CVE-2018-12495 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for discount to version 2.2.4 fixes the following issues: Security issues fixed: - CVE-2018-11468: Fixed a heap-based buffer over-read in the __mkd_trim_line function from mkdio.c (boo#1094809) - CVE-2018-12495: Fixed a heap-based buffer over-read via a crafted file (boo#1098252) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-19=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-19=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-19=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): discount-2.2.4-7.3.1 discount-debugsource-2.2.4-7.3.1 libmarkdown-devel-2.2.4-7.3.1 libmarkdown2-2.2.4-7.3.1 libmarkdown2-debuginfo-2.2.4-7.3.1 - openSUSE Leap 15.0 (x86_64): discount-2.2.4-lp150.2.3.1 discount-debugsource-2.2.4-lp150.2.3.1 libmarkdown-devel-2.2.4-lp150.2.3.1 libmarkdown2-2.2.4-lp150.2.3.1 libmarkdown2-debuginfo-2.2.4-lp150.2.3.1 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): discount-2.2.4-bp150.3.3.1 libmarkdown-devel-2.2.4-bp150.3.3.1 libmarkdown2-2.2.4-bp150.3.3.1 References: https://www.suse.com/security/cve/CVE-2018-11468.html https://www.suse.com/security/cve/CVE-2018-12495.html https://bugzilla.suse.com/1094809 https://bugzilla.suse.com/1098252

1 0

openSUSE-SU-2019:0021-1: important: Security update for libgit2
by opensuse-security＠opensuse.org 12 Jan '19

12 Jan '19

openSUSE Security Update: Security update for libgit2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0021-1 Rating: important References: #1110949 #1114729 Cross-References: CVE-2018-19456 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for libgit2 fixes the following issues: Security issues fixed: - CVE-2018-19456: Fixed a code execution by malicious .gitmodules file (bsc#1110949) - various string-to-integer and buffer handling fixes (bsc#1114729). This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-21=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libgit2-24-0.24.1-10.6.1 libgit2-24-debuginfo-0.24.1-10.6.1 libgit2-debugsource-0.24.1-10.6.1 libgit2-devel-0.24.1-10.6.1 - openSUSE Leap 42.3 (x86_64): libgit2-24-32bit-0.24.1-10.6.1 libgit2-24-debuginfo-32bit-0.24.1-10.6.1 References: https://www.suse.com/security/cve/CVE-2018-19456.html https://bugzilla.suse.com/1110949 https://bugzilla.suse.com/1114729

1 0

openSUSE-SU-2019:0016-1: moderate: Security update for GraphicsMagick
by opensuse-security＠opensuse.org 11 Jan '19

11 Jan '19

openSUSE Security Update: Security update for GraphicsMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0016-1 Rating: moderate References: #1120381 Cross-References: CVE-2018-20467 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for GraphicsMagick fixes the following issue: Security issue fixed: - CVE-2018-20467: Fixed infinite loop in coders/bmp.c (boo#1120381) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-16=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): GraphicsMagick-1.3.25-123.1 GraphicsMagick-debuginfo-1.3.25-123.1 GraphicsMagick-debugsource-1.3.25-123.1 GraphicsMagick-devel-1.3.25-123.1 libGraphicsMagick++-Q16-12-1.3.25-123.1 libGraphicsMagick++-Q16-12-debuginfo-1.3.25-123.1 libGraphicsMagick++-devel-1.3.25-123.1 libGraphicsMagick-Q16-3-1.3.25-123.1 libGraphicsMagick-Q16-3-debuginfo-1.3.25-123.1 libGraphicsMagick3-config-1.3.25-123.1 libGraphicsMagickWand-Q16-2-1.3.25-123.1 libGraphicsMagickWand-Q16-2-debuginfo-1.3.25-123.1 perl-GraphicsMagick-1.3.25-123.1 perl-GraphicsMagick-debuginfo-1.3.25-123.1 References: https://www.suse.com/security/cve/CVE-2018-20467.html https://bugzilla.suse.com/1120381

1 0

openSUSE-RU-2019:0014-1: moderate: Recommended update for mirror
by maintenance＠opensuse.org 11 Jan '19

11 Jan '19

openSUSE Recommended Update: Recommended update for mirror ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0014-1 Rating: moderate References: #1117110 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for mirror provides the following fix: - Check if a directory must be removed. In case all the previous content of a directory is removed, but new content for the directory was downloaded, do not remove it. (bsc#1117110) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-14=1 Package List: - openSUSE Leap 15.0 (noarch): mirror-2.9-lp150.2.3.1 References: https://bugzilla.suse.com/1117110

1 0

openSUSE-RU-2019:0013-1: moderate: Recommended update for python-rtslib
by maintenance＠opensuse.org 11 Jan '19

11 Jan '19

openSUSE Recommended Update: Recommended update for python-rtslib ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0013-1 Rating: moderate References: #1113573 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-rtslib provides the following fix: - Add srpt_wwn WWN type handling. (bsc#1113573) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-13=1 Package List: - openSUSE Leap 42.3 (noarch): python-rtslib-2.2-19.6.1 References: https://bugzilla.suse.com/1113573

1 0

openSUSE-RU-2019:0011-1: moderate: Recommended update for OpenIPMI
by maintenance＠opensuse.org 11 Jan '19

11 Jan '19

openSUSE Recommended Update: Recommended update for OpenIPMI ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0011-1 Rating: moderate References: #1060799 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for OpenIPMI provides the following fix: - On aarch64 hardware, the IPMI hardware was detected but an incorrect driver was loaded ("ipmi_si.ko" rather than the correct "ipmi_ssif.ko"). The fix adds a new entry to /etc/sysconfig/ipmi which defines the name of the driver to load. A utility (/usr/lib/openipmi-helper) then uses this name to load the correct driveri. (bsc#1060799) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-11=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): OpenIPMI-2.0.21-14.1 OpenIPMI-debuginfo-2.0.21-14.1 OpenIPMI-debugsource-2.0.21-14.1 OpenIPMI-devel-2.0.21-14.1 OpenIPMI-python-2.0.21-14.1 OpenIPMI-python-debuginfo-2.0.21-14.1 References: https://bugzilla.suse.com/1060799

1 0

openSUSE-RU-2019:0012-1: moderate: Recommended update for mirror
by maintenance＠opensuse.org 11 Jan '19

11 Jan '19

openSUSE Recommended Update: Recommended update for mirror ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0012-1 Rating: moderate References: #1117110 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for mirror provides the following fix: - Check if a directory must be removed. In case all the previous content of a directory is removed, but new content for the directory was downloaded, do not remove it. (bsc#1117110) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-12=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): mirror-2.9-914.3.1 References: https://bugzilla.suse.com/1117110

1 0

openSUSE-SU-2019:0010-1: moderate: Security update for polkit
by opensuse-security＠opensuse.org 10 Jan '19

10 Jan '19

openSUSE Security Update: Security update for polkit ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0010-1 Rating: moderate References: #1118277 Cross-References: CVE-2018-19788 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for polkit fixes the following issues: Security issue fixed: - CVE-2018-19788: Fixed handling of UIDs over MAX_UINT (bsc#1118277) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-10=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libpolkit0-0.114-lp150.2.6.1 libpolkit0-debuginfo-0.114-lp150.2.6.1 polkit-0.114-lp150.2.6.1 polkit-debuginfo-0.114-lp150.2.6.1 polkit-debugsource-0.114-lp150.2.6.1 polkit-devel-0.114-lp150.2.6.1 polkit-devel-debuginfo-0.114-lp150.2.6.1 typelib-1_0-Polkit-1_0-0.114-lp150.2.6.1 - openSUSE Leap 15.0 (x86_64): libpolkit0-32bit-0.114-lp150.2.6.1 libpolkit0-32bit-debuginfo-0.114-lp150.2.6.1 - openSUSE Leap 15.0 (noarch): polkit-doc-0.114-lp150.2.6.1 References: https://www.suse.com/security/cve/CVE-2018-19788.html https://bugzilla.suse.com/1118277

1 0

openSUSE-SU-2019:0008-1: moderate: Security update for libraw
by opensuse-security＠opensuse.org 10 Jan '19

10 Jan '19

openSUSE Security Update: Security update for libraw ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0008-1 Rating: moderate References: #1097975 #1103200 #1103206 Cross-References: CVE-2018-5804 CVE-2018-5813 CVE-2018-5815 CVE-2018-5816 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for libraw fixes the following issues: The following security vulnerabilities were addressed: - CVE-2018-5813: Fixed an error within the "parse_minolta()" function (dcraw/dcraw.c) that could be exploited to trigger an infinite loop via a specially crafted file. This could be exploited to cause a DoS.(boo#1103200). - CVE-2018-5815: Fixed an integer overflow in the internal/dcraw_common.cpp:parse_qt() function, that could be exploited to cause an infinite loop via a specially crafted Apple QuickTime file. (boo#1103206) - CVE-2018-5804,CVE-2018-5816: Fixed a type confusion error in the identify function (bsc#1097975) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-8=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libraw-debuginfo-0.18.9-lp150.2.3.1 libraw-debugsource-0.18.9-lp150.2.3.1 libraw-devel-0.18.9-lp150.2.3.1 libraw-devel-static-0.18.9-lp150.2.3.1 libraw-tools-0.18.9-lp150.2.3.1 libraw-tools-debuginfo-0.18.9-lp150.2.3.1 libraw16-0.18.9-lp150.2.3.1 libraw16-debuginfo-0.18.9-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-5804.html https://www.suse.com/security/cve/CVE-2018-5813.html https://www.suse.com/security/cve/CVE-2018-5815.html https://www.suse.com/security/cve/CVE-2018-5816.html https://bugzilla.suse.com/1097975 https://bugzilla.suse.com/1103200 https://bugzilla.suse.com/1103206

1 0