January 2019 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2019:0009-1: important: Security update for singularity
by opensuse-security＠opensuse.org 10 Jan '19

10 Jan '19

openSUSE Security Update: Security update for singularity ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0009-1 Rating: important References: #1111411 Cross-References: CVE-2018-19295 Affected Products: openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for singularity to version 2.6.1 fixes the following issues: Security issues fixed: - CVE-2018-19295: Fixed a local root exploit, related to joining arbitrary mount namespaces (boo#1111411). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-9=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-9=1 Package List: - openSUSE Leap 15.0 (x86_64): libsingularity1-2.6.1-lp150.2.6.1 libsingularity1-debuginfo-2.6.1-lp150.2.6.1 singularity-2.6.1-lp150.2.6.1 singularity-debuginfo-2.6.1-lp150.2.6.1 singularity-debugsource-2.6.1-lp150.2.6.1 singularity-devel-2.6.1-lp150.2.6.1 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): libsingularity1-2.6.1-bp150.3.6.1 singularity-2.6.1-bp150.3.6.1 singularity-devel-2.6.1-bp150.3.6.1 References: https://www.suse.com/security/cve/CVE-2018-19295.html https://bugzilla.suse.com/1111411

1 0

openSUSE-RU-2019:0007-1: moderate: Recommended update for Chromium
by maintenance＠opensuse.org 08 Jan '19

08 Jan '19

openSUSE Recommended Update: Recommended update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0007-1 Rating: moderate References: #1120429 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 openSUSE Backports SLE-15 SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes issues with playing Nexflix on Chromium 71 with Widevine (boo#1120429). Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-7=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-7=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-7=1 - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2019-7=1 Package List: - openSUSE Leap 42.3 (x86_64): chromedriver-71.0.3578.98-192.1 chromedriver-debuginfo-71.0.3578.98-192.1 chromium-71.0.3578.98-192.1 chromium-debuginfo-71.0.3578.98-192.1 chromium-debugsource-71.0.3578.98-192.1 - openSUSE Leap 15.0 (x86_64): chromedriver-71.0.3578.98-lp150.2.36.1 chromedriver-debuginfo-71.0.3578.98-lp150.2.36.1 chromium-71.0.3578.98-lp150.2.36.1 chromium-debuginfo-71.0.3578.98-lp150.2.36.1 chromium-debugsource-71.0.3578.98-lp150.2.36.1 - openSUSE Backports SLE-15 (aarch64 x86_64): chromedriver-71.0.3578.98-bp150.2.29.1 chromedriver-debuginfo-71.0.3578.98-bp150.2.29.1 chromium-71.0.3578.98-bp150.2.29.1 chromium-debuginfo-71.0.3578.98-bp150.2.29.1 chromium-debugsource-71.0.3578.98-bp150.2.29.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): chromedriver-71.0.3578.98-83.1 chromedriver-debuginfo-71.0.3578.98-83.1 chromium-71.0.3578.98-83.1 chromium-debuginfo-71.0.3578.98-83.1 chromium-debugsource-71.0.3578.98-83.1 References: https://bugzilla.suse.com/1120429

1 0

openSUSE-RU-2019:0007-1: moderate: Recommended update for Chromium
by maintenance＠opensuse.org 08 Jan '19

08 Jan '19

openSUSE Recommended Update: Recommended update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0007-1 Rating: moderate References: #1120429 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes issues with playing Nexflix on Chromium 71 with Widevine (boo#1120429). Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2019-7=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): chromedriver-71.0.3578.98-83.1 chromedriver-debuginfo-71.0.3578.98-83.1 chromium-71.0.3578.98-83.1 chromium-debuginfo-71.0.3578.98-83.1 chromium-debugsource-71.0.3578.98-83.1 References: https://bugzilla.suse.com/1120429

1 0

openSUSE-RU-2019:0004-1: Recommended update for vlc
by maintenance＠opensuse.org 04 Jan '19

04 Jan '19

openSUSE Recommended Update: Recommended update for vlc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0004-1 Rating: low References: #1120651 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for vlc fixes the following issue: - following a previous update to libmastroska, dependencies for vlc-noX were in conflict (boo#1120651) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-4=1 Package List: - openSUSE Leap 42.3 (x86_64): libvlc5-2.2.6-5.1 libvlc5-debuginfo-2.2.6-5.1 libvlccore8-2.2.6-5.1 libvlccore8-debuginfo-2.2.6-5.1 vlc-2.2.6-5.1 vlc-codec-gstreamer-2.2.6-5.1 vlc-codec-gstreamer-debuginfo-2.2.6-5.1 vlc-debuginfo-2.2.6-5.1 vlc-debugsource-2.2.6-5.1 vlc-devel-2.2.6-5.1 vlc-noX-2.2.6-5.1 vlc-noX-debuginfo-2.2.6-5.1 vlc-qt-2.2.6-5.1 vlc-qt-debuginfo-2.2.6-5.1 - openSUSE Leap 42.3 (noarch): vlc-lang-2.2.6-5.1 References: https://bugzilla.suse.com/1120651

1 0

openSUSE-RU-2019:0006-1: moderate: Recommended update for yast2-network
by maintenance＠opensuse.org 04 Jan '19

04 Jan '19

openSUSE Recommended Update: Recommended update for yast2-network ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0006-1 Rating: moderate References: #1039307 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-network fixes the following issues: - YaST can now obtain NTP-Servers through DHCP (fate#323454, bsc#1039307) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-6=1 Package List: - openSUSE Leap 15.0 (noarch): yast2-network-4.0.44-lp150.2.9.1 References: https://bugzilla.suse.com/1039307

1 0

openSUSE-RU-2019:0005-1: important: Recommended update for yast2-ntp-client
by maintenance＠opensuse.org 04 Jan '19

04 Jan '19

openSUSE Recommended Update: Recommended update for yast2-ntp-client ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0005-1 Rating: important References: #1058510 #1075039 #1086526 #1108497 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for yast2-ntp-client provides the following fix: - Save the service status according to the user preferences (bsc#1075039) - Only write the configuration once, and do not save changes when we are only synchronizing the date. (bsc#1108497) - Add support for writing Tinker record via autoyast (bsc#1086526) - Avoid internal error during AutoYaST cloning when fudge records are present (bsc#1058510) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-5=1 Package List: - openSUSE Leap 42.3 (noarch): yast2-ntp-client-3.2.18-6.1 References: https://bugzilla.suse.com/1058510 https://bugzilla.suse.com/1075039 https://bugzilla.suse.com/1086526 https://bugzilla.suse.com/1108497

1 0

openSUSE-RU-2019:0002-1: Recommended update for plasma5-pk-updates
by maintenance＠opensuse.org 01 Jan '19

01 Jan '19

openSUSE Recommended Update: Recommended update for plasma5-pk-updates ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0002-1 Rating: low References: #1086068 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for plasma5-pk-updates fixes the following issues: Various fixes were done to improve the french translations (boo#1086068) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-2=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-2=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): plasma5-pk-updates-0.3.1-20.1 plasma5-pk-updates-debuginfo-0.3.1-20.1 plasma5-pk-updates-debugsource-0.3.1-20.1 - openSUSE Leap 42.3 (noarch): plasma5-pk-updates-lang-0.3.1-20.1 - openSUSE Leap 15.0 (noarch): plasma5-pk-updates-lang-0.3.2-lp150.9.6.1 - openSUSE Leap 15.0 (x86_64): plasma5-pk-updates-0.3.2-lp150.9.6.1 plasma5-pk-updates-debuginfo-0.3.2-lp150.9.6.1 plasma5-pk-updates-debugsource-0.3.2-lp150.9.6.1 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): plasma5-pk-updates-0.3.2-bp150.2.3.1 - openSUSE Backports SLE-15 (noarch): plasma5-pk-updates-lang-0.3.2-bp150.2.3.1 References: https://bugzilla.suse.com/1086068

1 0

openSUSE-SU-2019:0003-1: moderate: Security update for GraphicsMagick
by opensuse-security＠opensuse.org 01 Jan '19

01 Jan '19

openSUSE Security Update: Security update for GraphicsMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0003-1 Rating: moderate References: #1119790 #1119822 Cross-References: CVE-2018-20184 CVE-2018-20189 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for GraphicsMagick fixes the following issues: Security vulnerabilities fixed: - CVE-2018-20184: Fixed heap-based buffer overflow in the WriteTGAImage function of tga.c (bsc#1119822) - CVE-2018-20189: Fixed denial of service vulnerability in ReadDIBImage function of coders/dib.c (bsc#1119790) This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-3=1 Package List: - openSUSE Backports SLE-15 (x86_64): GraphicsMagick-1.3.29-bp150.2.12.1 GraphicsMagick-devel-1.3.29-bp150.2.12.1 libGraphicsMagick++-Q16-12-1.3.29-bp150.2.12.1 libGraphicsMagick++-devel-1.3.29-bp150.2.12.1 libGraphicsMagick-Q16-3-1.3.29-bp150.2.12.1 libGraphicsMagick3-config-1.3.29-bp150.2.12.1 libGraphicsMagickWand-Q16-2-1.3.29-bp150.2.12.1 perl-GraphicsMagick-1.3.29-bp150.2.12.1 References: https://www.suse.com/security/cve/CVE-2018-20184.html https://www.suse.com/security/cve/CVE-2018-20189.html https://bugzilla.suse.com/1119790 https://bugzilla.suse.com/1119822

1 0

openSUSE-SU-2019:1-1: moderate: Security update for GraphicsMagick
by opensuse-security＠opensuse.org 01 Jan '19

01 Jan '19

openSUSE Security Update: Security update for GraphicsMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1-1 Rating: moderate References: #1119790 #1119822 Cross-References: CVE-2018-20184 CVE-2018-20189 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for GraphicsMagick fixes the following issues: Security vulnerabilities fixed: - CVE-2018-20184: Fixed heap-based buffer overflow in the WriteTGAImage function of tga.c (bsc#1119822) - CVE-2018-20189: Fixed denial of service vulnerability in ReadDIBImage function of coders/dib.c (bsc#1119790) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1=1 Package List: - openSUSE Leap 15.0 (x86_64): GraphicsMagick-1.3.29-lp150.3.18.1 GraphicsMagick-debuginfo-1.3.29-lp150.3.18.1 GraphicsMagick-debugsource-1.3.29-lp150.3.18.1 GraphicsMagick-devel-1.3.29-lp150.3.18.1 libGraphicsMagick++-Q16-12-1.3.29-lp150.3.18.1 libGraphicsMagick++-Q16-12-debuginfo-1.3.29-lp150.3.18.1 libGraphicsMagick++-devel-1.3.29-lp150.3.18.1 libGraphicsMagick-Q16-3-1.3.29-lp150.3.18.1 libGraphicsMagick-Q16-3-debuginfo-1.3.29-lp150.3.18.1 libGraphicsMagick3-config-1.3.29-lp150.3.18.1 libGraphicsMagickWand-Q16-2-1.3.29-lp150.3.18.1 libGraphicsMagickWand-Q16-2-debuginfo-1.3.29-lp150.3.18.1 perl-GraphicsMagick-1.3.29-lp150.3.18.1 perl-GraphicsMagick-debuginfo-1.3.29-lp150.3.18.1 References: https://www.suse.com/security/cve/CVE-2018-20184.html https://www.suse.com/security/cve/CVE-2018-20189.html https://bugzilla.suse.com/1119790 https://bugzilla.suse.com/1119822

1 0