October 2019 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2019:2419-1: moderate: Recommended update for python-passlib
by maintenance＠opensuse.org 31 Oct '19

31 Oct '19

openSUSE Recommended Update: Recommended update for python-passlib ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2419-1 Rating: moderate References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for python-passlib fixes the following issues: This update supplies python-passlib 1.7.1 to the SUSE Linux Enterprise 12 PackageHub. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2019-2419=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): python-passlib-1.7.1-2.1 python3-passlib-1.7.1-2.1 References:

1 0

openSUSE-RU-2019:2417-1: moderate: Recommended update for php7
by maintenance＠opensuse.org 31 Oct '19

31 Oct '19

openSUSE Recommended Update: Recommended update for php7 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2417-1 Rating: moderate References: #1119396 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for php7 fixes the following issues: - Provide test results via multibuild :test. (bsc#1119396) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2417=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): apache2-mod_php7-7.2.5-lp151.6.12.1 apache2-mod_php7-debuginfo-7.2.5-lp151.6.12.1 php7-7.2.5-lp151.6.12.1 php7-bcmath-7.2.5-lp151.6.12.1 php7-bcmath-debuginfo-7.2.5-lp151.6.12.1 php7-bz2-7.2.5-lp151.6.12.1 php7-bz2-debuginfo-7.2.5-lp151.6.12.1 php7-calendar-7.2.5-lp151.6.12.1 php7-calendar-debuginfo-7.2.5-lp151.6.12.1 php7-ctype-7.2.5-lp151.6.12.1 php7-ctype-debuginfo-7.2.5-lp151.6.12.1 php7-curl-7.2.5-lp151.6.12.1 php7-curl-debuginfo-7.2.5-lp151.6.12.1 php7-dba-7.2.5-lp151.6.12.1 php7-dba-debuginfo-7.2.5-lp151.6.12.1 php7-debuginfo-7.2.5-lp151.6.12.1 php7-debugsource-7.2.5-lp151.6.12.1 php7-devel-7.2.5-lp151.6.12.1 php7-dom-7.2.5-lp151.6.12.1 php7-dom-debuginfo-7.2.5-lp151.6.12.1 php7-embed-7.2.5-lp151.6.12.1 php7-embed-debuginfo-7.2.5-lp151.6.12.1 php7-enchant-7.2.5-lp151.6.12.1 php7-enchant-debuginfo-7.2.5-lp151.6.12.1 php7-exif-7.2.5-lp151.6.12.1 php7-exif-debuginfo-7.2.5-lp151.6.12.1 php7-fastcgi-7.2.5-lp151.6.12.1 php7-fastcgi-debuginfo-7.2.5-lp151.6.12.1 php7-fileinfo-7.2.5-lp151.6.12.1 php7-fileinfo-debuginfo-7.2.5-lp151.6.12.1 php7-firebird-7.2.5-lp151.6.12.1 php7-firebird-debuginfo-7.2.5-lp151.6.12.1 php7-fpm-7.2.5-lp151.6.12.1 php7-fpm-debuginfo-7.2.5-lp151.6.12.1 php7-ftp-7.2.5-lp151.6.12.1 php7-ftp-debuginfo-7.2.5-lp151.6.12.1 php7-gd-7.2.5-lp151.6.12.1 php7-gd-debuginfo-7.2.5-lp151.6.12.1 php7-gettext-7.2.5-lp151.6.12.1 php7-gettext-debuginfo-7.2.5-lp151.6.12.1 php7-gmp-7.2.5-lp151.6.12.1 php7-gmp-debuginfo-7.2.5-lp151.6.12.1 php7-iconv-7.2.5-lp151.6.12.1 php7-iconv-debuginfo-7.2.5-lp151.6.12.1 php7-intl-7.2.5-lp151.6.12.1 php7-intl-debuginfo-7.2.5-lp151.6.12.1 php7-json-7.2.5-lp151.6.12.1 php7-json-debuginfo-7.2.5-lp151.6.12.1 php7-ldap-7.2.5-lp151.6.12.1 php7-ldap-debuginfo-7.2.5-lp151.6.12.1 php7-mbstring-7.2.5-lp151.6.12.1 php7-mbstring-debuginfo-7.2.5-lp151.6.12.1 php7-mysql-7.2.5-lp151.6.12.1 php7-mysql-debuginfo-7.2.5-lp151.6.12.1 php7-odbc-7.2.5-lp151.6.12.1 php7-odbc-debuginfo-7.2.5-lp151.6.12.1 php7-opcache-7.2.5-lp151.6.12.1 php7-opcache-debuginfo-7.2.5-lp151.6.12.1 php7-openssl-7.2.5-lp151.6.12.1 php7-openssl-debuginfo-7.2.5-lp151.6.12.1 php7-pcntl-7.2.5-lp151.6.12.1 php7-pcntl-debuginfo-7.2.5-lp151.6.12.1 php7-pdo-7.2.5-lp151.6.12.1 php7-pdo-debuginfo-7.2.5-lp151.6.12.1 php7-pgsql-7.2.5-lp151.6.12.1 php7-pgsql-debuginfo-7.2.5-lp151.6.12.1 php7-phar-7.2.5-lp151.6.12.1 php7-phar-debuginfo-7.2.5-lp151.6.12.1 php7-posix-7.2.5-lp151.6.12.1 php7-posix-debuginfo-7.2.5-lp151.6.12.1 php7-readline-7.2.5-lp151.6.12.1 php7-readline-debuginfo-7.2.5-lp151.6.12.1 php7-shmop-7.2.5-lp151.6.12.1 php7-shmop-debuginfo-7.2.5-lp151.6.12.1 php7-snmp-7.2.5-lp151.6.12.1 php7-snmp-debuginfo-7.2.5-lp151.6.12.1 php7-soap-7.2.5-lp151.6.12.1 php7-soap-debuginfo-7.2.5-lp151.6.12.1 php7-sockets-7.2.5-lp151.6.12.1 php7-sockets-debuginfo-7.2.5-lp151.6.12.1 php7-sodium-7.2.5-lp151.6.12.1 php7-sodium-debuginfo-7.2.5-lp151.6.12.1 php7-sqlite-7.2.5-lp151.6.12.1 php7-sqlite-debuginfo-7.2.5-lp151.6.12.1 php7-sysvmsg-7.2.5-lp151.6.12.1 php7-sysvmsg-debuginfo-7.2.5-lp151.6.12.1 php7-sysvsem-7.2.5-lp151.6.12.1 php7-sysvsem-debuginfo-7.2.5-lp151.6.12.1 php7-sysvshm-7.2.5-lp151.6.12.1 php7-sysvshm-debuginfo-7.2.5-lp151.6.12.1 php7-test-7.2.5-lp151.6.12.1 php7-tidy-7.2.5-lp151.6.12.1 php7-tidy-debuginfo-7.2.5-lp151.6.12.1 php7-tokenizer-7.2.5-lp151.6.12.1 php7-tokenizer-debuginfo-7.2.5-lp151.6.12.1 php7-wddx-7.2.5-lp151.6.12.1 php7-wddx-debuginfo-7.2.5-lp151.6.12.1 php7-xmlreader-7.2.5-lp151.6.12.1 php7-xmlreader-debuginfo-7.2.5-lp151.6.12.1 php7-xmlrpc-7.2.5-lp151.6.12.1 php7-xmlrpc-debuginfo-7.2.5-lp151.6.12.1 php7-xmlwriter-7.2.5-lp151.6.12.1 php7-xmlwriter-debuginfo-7.2.5-lp151.6.12.1 php7-xsl-7.2.5-lp151.6.12.1 php7-xsl-debuginfo-7.2.5-lp151.6.12.1 php7-zip-7.2.5-lp151.6.12.1 php7-zip-debuginfo-7.2.5-lp151.6.12.1 php7-zlib-7.2.5-lp151.6.12.1 php7-zlib-debuginfo-7.2.5-lp151.6.12.1 - openSUSE Leap 15.1 (noarch): php7-pear-7.2.5-lp151.6.12.1 php7-pear-Archive_Tar-7.2.5-lp151.6.12.1 References: https://bugzilla.suse.com/1119396

1 0

openSUSE-SU-2019:2418-1: moderate: Security update for docker-runc
by opensuse-security＠opensuse.org 31 Oct '19

31 Oct '19

openSUSE Security Update: Security update for docker-runc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2418-1 Rating: moderate References: #1152308 Cross-References: CVE-2019-16884 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for docker-runc fixes the following issues: - CVE-2019-16884: Fixed an LSM bypass via malicious Docker images that mount over a /proc directory. (bsc#1152308) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2418=1 Package List: - openSUSE Leap 15.0 (x86_64): docker-runc-1.0.0rc8+gitr3826_425e105d5a03-lp150.5.28.1 docker-runc-debuginfo-1.0.0rc8+gitr3826_425e105d5a03-lp150.5.28.1 References: https://www.suse.com/security/cve/CVE-2019-16884.html https://bugzilla.suse.com/1152308

1 0

openSUSE-RU-2019:2416-1: moderate: Recommended update for php7
by maintenance＠opensuse.org 31 Oct '19

31 Oct '19

openSUSE Recommended Update: Recommended update for php7 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2416-1 Rating: moderate References: #1119396 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for php7 fixes the following issues: - Provide test results via multibuild :test. (bsc#1119396) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2416=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): apache2-mod_php7-7.2.5-lp150.2.28.1 apache2-mod_php7-debuginfo-7.2.5-lp150.2.28.1 php7-7.2.5-lp150.2.28.1 php7-bcmath-7.2.5-lp150.2.28.1 php7-bcmath-debuginfo-7.2.5-lp150.2.28.1 php7-bz2-7.2.5-lp150.2.28.1 php7-bz2-debuginfo-7.2.5-lp150.2.28.1 php7-calendar-7.2.5-lp150.2.28.1 php7-calendar-debuginfo-7.2.5-lp150.2.28.1 php7-ctype-7.2.5-lp150.2.28.1 php7-ctype-debuginfo-7.2.5-lp150.2.28.1 php7-curl-7.2.5-lp150.2.28.1 php7-curl-debuginfo-7.2.5-lp150.2.28.1 php7-dba-7.2.5-lp150.2.28.1 php7-dba-debuginfo-7.2.5-lp150.2.28.1 php7-debuginfo-7.2.5-lp150.2.28.1 php7-debugsource-7.2.5-lp150.2.28.1 php7-devel-7.2.5-lp150.2.28.1 php7-dom-7.2.5-lp150.2.28.1 php7-dom-debuginfo-7.2.5-lp150.2.28.1 php7-embed-7.2.5-lp150.2.28.1 php7-embed-debuginfo-7.2.5-lp150.2.28.1 php7-enchant-7.2.5-lp150.2.28.1 php7-enchant-debuginfo-7.2.5-lp150.2.28.1 php7-exif-7.2.5-lp150.2.28.1 php7-exif-debuginfo-7.2.5-lp150.2.28.1 php7-fastcgi-7.2.5-lp150.2.28.1 php7-fastcgi-debuginfo-7.2.5-lp150.2.28.1 php7-fileinfo-7.2.5-lp150.2.28.1 php7-fileinfo-debuginfo-7.2.5-lp150.2.28.1 php7-firebird-7.2.5-lp150.2.28.1 php7-firebird-debuginfo-7.2.5-lp150.2.28.1 php7-fpm-7.2.5-lp150.2.28.1 php7-fpm-debuginfo-7.2.5-lp150.2.28.1 php7-ftp-7.2.5-lp150.2.28.1 php7-ftp-debuginfo-7.2.5-lp150.2.28.1 php7-gd-7.2.5-lp150.2.28.1 php7-gd-debuginfo-7.2.5-lp150.2.28.1 php7-gettext-7.2.5-lp150.2.28.1 php7-gettext-debuginfo-7.2.5-lp150.2.28.1 php7-gmp-7.2.5-lp150.2.28.1 php7-gmp-debuginfo-7.2.5-lp150.2.28.1 php7-iconv-7.2.5-lp150.2.28.1 php7-iconv-debuginfo-7.2.5-lp150.2.28.1 php7-intl-7.2.5-lp150.2.28.1 php7-intl-debuginfo-7.2.5-lp150.2.28.1 php7-json-7.2.5-lp150.2.28.1 php7-json-debuginfo-7.2.5-lp150.2.28.1 php7-ldap-7.2.5-lp150.2.28.1 php7-ldap-debuginfo-7.2.5-lp150.2.28.1 php7-mbstring-7.2.5-lp150.2.28.1 php7-mbstring-debuginfo-7.2.5-lp150.2.28.1 php7-mysql-7.2.5-lp150.2.28.1 php7-mysql-debuginfo-7.2.5-lp150.2.28.1 php7-odbc-7.2.5-lp150.2.28.1 php7-odbc-debuginfo-7.2.5-lp150.2.28.1 php7-opcache-7.2.5-lp150.2.28.1 php7-opcache-debuginfo-7.2.5-lp150.2.28.1 php7-openssl-7.2.5-lp150.2.28.1 php7-openssl-debuginfo-7.2.5-lp150.2.28.1 php7-pcntl-7.2.5-lp150.2.28.1 php7-pcntl-debuginfo-7.2.5-lp150.2.28.1 php7-pdo-7.2.5-lp150.2.28.1 php7-pdo-debuginfo-7.2.5-lp150.2.28.1 php7-pgsql-7.2.5-lp150.2.28.1 php7-pgsql-debuginfo-7.2.5-lp150.2.28.1 php7-phar-7.2.5-lp150.2.28.1 php7-phar-debuginfo-7.2.5-lp150.2.28.1 php7-posix-7.2.5-lp150.2.28.1 php7-posix-debuginfo-7.2.5-lp150.2.28.1 php7-readline-7.2.5-lp150.2.28.1 php7-readline-debuginfo-7.2.5-lp150.2.28.1 php7-shmop-7.2.5-lp150.2.28.1 php7-shmop-debuginfo-7.2.5-lp150.2.28.1 php7-snmp-7.2.5-lp150.2.28.1 php7-snmp-debuginfo-7.2.5-lp150.2.28.1 php7-soap-7.2.5-lp150.2.28.1 php7-soap-debuginfo-7.2.5-lp150.2.28.1 php7-sockets-7.2.5-lp150.2.28.1 php7-sockets-debuginfo-7.2.5-lp150.2.28.1 php7-sodium-7.2.5-lp150.2.28.1 php7-sodium-debuginfo-7.2.5-lp150.2.28.1 php7-sqlite-7.2.5-lp150.2.28.1 php7-sqlite-debuginfo-7.2.5-lp150.2.28.1 php7-sysvmsg-7.2.5-lp150.2.28.1 php7-sysvmsg-debuginfo-7.2.5-lp150.2.28.1 php7-sysvsem-7.2.5-lp150.2.28.1 php7-sysvsem-debuginfo-7.2.5-lp150.2.28.1 php7-sysvshm-7.2.5-lp150.2.28.1 php7-sysvshm-debuginfo-7.2.5-lp150.2.28.1 php7-test-7.2.5-lp150.2.28.1 php7-tidy-7.2.5-lp150.2.28.1 php7-tidy-debuginfo-7.2.5-lp150.2.28.1 php7-tokenizer-7.2.5-lp150.2.28.1 php7-tokenizer-debuginfo-7.2.5-lp150.2.28.1 php7-wddx-7.2.5-lp150.2.28.1 php7-wddx-debuginfo-7.2.5-lp150.2.28.1 php7-xmlreader-7.2.5-lp150.2.28.1 php7-xmlreader-debuginfo-7.2.5-lp150.2.28.1 php7-xmlrpc-7.2.5-lp150.2.28.1 php7-xmlrpc-debuginfo-7.2.5-lp150.2.28.1 php7-xmlwriter-7.2.5-lp150.2.28.1 php7-xmlwriter-debuginfo-7.2.5-lp150.2.28.1 php7-xsl-7.2.5-lp150.2.28.1 php7-xsl-debuginfo-7.2.5-lp150.2.28.1 php7-zip-7.2.5-lp150.2.28.1 php7-zip-debuginfo-7.2.5-lp150.2.28.1 php7-zlib-7.2.5-lp150.2.28.1 php7-zlib-debuginfo-7.2.5-lp150.2.28.1 - openSUSE Leap 15.0 (noarch): php7-pear-7.2.5-lp150.2.28.1 php7-pear-Archive_Tar-7.2.5-lp150.2.28.1 References: https://bugzilla.suse.com/1119396

1 0

openSUSE-SU-2019:2415-1: moderate: Security update for binutils
by opensuse-security＠opensuse.org 30 Oct '19

30 Oct '19

openSUSE Security Update: Security update for binutils ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2415-1 Rating: moderate References: #1109412 #1109413 #1109414 #1111996 #1112534 #1112535 #1113247 #1113252 #1113255 #1116827 #1118644 #1118830 #1118831 #1120640 #1121034 #1121035 #1121056 #1133131 #1133232 #1141913 #1142772 #1152590 #1154016 #1154025 Cross-References: CVE-2018-1000876 CVE-2018-17358 CVE-2018-17359 CVE-2018-17360 CVE-2018-17985 CVE-2018-18309 CVE-2018-18483 CVE-2018-18484 CVE-2018-18605 CVE-2018-18606 CVE-2018-18607 CVE-2018-19931 CVE-2018-19932 CVE-2018-20623 CVE-2018-20651 CVE-2018-20671 CVE-2018-6323 CVE-2018-6543 CVE-2018-6759 CVE-2018-6872 CVE-2018-7208 CVE-2018-7568 CVE-2018-7569 CVE-2018-7570 CVE-2018-7642 CVE-2018-7643 CVE-2018-8945 CVE-2019-1010180 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes 28 vulnerabilities is now available. Description: This update for binutils fixes the following issues: binutils was updated to current 2.32 branch [jsc#ECO-368]. Includes following security fixes: - CVE-2018-17358: Fixed invalid memory access in _bfd_stab_section_find_nearest_line in syms.c (bsc#1109412) - CVE-2018-17359: Fixed invalid memory access exists in bfd_zalloc in opncls.c (bsc#1109413) - CVE-2018-17360: Fixed heap-based buffer over-read in bfd_getl32 in libbfd.c (bsc#1109414) - CVE-2018-17985: Fixed a stack consumption problem caused by the cplus_demangle_type (bsc#1116827) - CVE-2018-18309: Fixed an invalid memory address dereference was discovered in read_reloc in reloc.c (bsc#1111996) - CVE-2018-18483: Fixed get_count function provided by libiberty that allowed attackers to cause a denial of service or other unspecified impact (bsc#1112535) - CVE-2018-18484: Fixed stack exhaustion in the C++ demangling functions provided by libiberty, caused by recursive stack frames (bsc#1112534) - CVE-2018-18605: Fixed a heap-based buffer over-read issue was discovered in the function sec_merge_hash_lookup causing a denial of service (bsc#1113255) - CVE-2018-18606: Fixed a NULL pointer dereference in _bfd_add_merge_section when attempting to merge sections with large alignments, causing denial of service (bsc#1113252) - CVE-2018-18607: Fixed a NULL pointer dereference in elf_link_input_bfd when used for finding STT_TLS symbols without any TLS section, causing denial of service (bsc#1113247) - CVE-2018-19931: Fixed a heap-based buffer overflow in bfd_elf32_swap_phdr_in in elfcode.h (bsc#1118831) - CVE-2018-19932: Fixed an integer overflow and infinite loop caused by the IS_CONTAINED_BY_LMA (bsc#1118830) - CVE-2018-20623: Fixed a use-after-free in the error function in elfcomm.c (bsc#1121035) - CVE-2018-20651: Fixed a denial of service via a NULL pointer dereference in elf_link_add_object_symbols in elflink.c (bsc#1121034) - CVE-2018-20671: Fixed an integer overflow that can trigger a heap-based buffer overflow in load_specific_debug_section in objdump.c (bsc#1121056) - CVE-2018-1000876: Fixed integer overflow in bfd_get_dynamic_reloc_upper_bound,bfd_canonicalize_dynamic_reloc in objdump (bsc#1120640) - CVE-2019-1010180: Fixed an out of bound memory access that could lead to crashes (bsc#1142772) - enable xtensa architecture (Tensilica lc6 and related) - Use -ffat-lto-objects in order to provide assembly for static libs (bsc#1141913). - Fixed some LTO build issues (bsc#1133131 bsc#1133232). - riscv: Don't check ABI flags if no code section - Fixed a segfault in ld when building some versions of pacemaker (bsc#1154025, bsc#1154016). - Add avr, epiphany and rx to target_list so that the common binutils can handle all objects we can create with crosses (bsc#1152590). Update to binutils 2.32: * The binutils now support for the C-SKY processor series. * The x86 assembler now supports a -mvexwig=[0|1] option to control encoding of VEX.W-ignored (WIG) VEX instructions. It also has a new -mx86-used-note=[yes|no] option to generate (or not) x86 GNU property notes. * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2), the Loongson EXTensions (EXT) instructions, the Loongson Content Address Memory (CAM) ASE and the Loongson MultiMedia extensions Instructions (MMI) ASE. * The addr2line, c++filt, nm and objdump tools now have a default limit on the maximum amount of recursion that is allowed whilst demangling strings. This limit can be disabled if necessary. * Objdump's --disassemble option can now take a parameter, specifying the starting symbol for disassembly. Disassembly will continue from this symbol up to the next symbol or the end of the function. * The BFD linker will now report property change in linker map file when merging GNU properties. * The BFD linker's -t option now doesn't report members within archives, unless -t is given twice. This makes it more useful when generating a list of files that should be packaged for a linker bug report. * The GOLD linker has improved warning messages for relocations that refer to discarded sections. - Improve relro support on s390 [fate#326356] - Fix broken debug symbols (bsc#1118644) - Handle ELF compressed header alignment correctly. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2415=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): binutils-2.32-lp150.10.1 binutils-debuginfo-2.32-lp150.10.1 binutils-debugsource-2.32-lp150.10.1 binutils-devel-2.32-lp150.10.1 binutils-gold-2.32-lp150.10.1 binutils-gold-debuginfo-2.32-lp150.10.1 - openSUSE Leap 15.0 (x86_64): binutils-devel-32bit-2.32-lp150.10.1 References: https://www.suse.com/security/cve/CVE-2018-1000876.html https://www.suse.com/security/cve/CVE-2018-17358.html https://www.suse.com/security/cve/CVE-2018-17359.html https://www.suse.com/security/cve/CVE-2018-17360.html https://www.suse.com/security/cve/CVE-2018-17985.html https://www.suse.com/security/cve/CVE-2018-18309.html https://www.suse.com/security/cve/CVE-2018-18483.html https://www.suse.com/security/cve/CVE-2018-18484.html https://www.suse.com/security/cve/CVE-2018-18605.html https://www.suse.com/security/cve/CVE-2018-18606.html https://www.suse.com/security/cve/CVE-2018-18607.html https://www.suse.com/security/cve/CVE-2018-19931.html https://www.suse.com/security/cve/CVE-2018-19932.html https://www.suse.com/security/cve/CVE-2018-20623.html https://www.suse.com/security/cve/CVE-2018-20651.html https://www.suse.com/security/cve/CVE-2018-20671.html https://www.suse.com/security/cve/CVE-2018-6323.html https://www.suse.com/security/cve/CVE-2018-6543.html https://www.suse.com/security/cve/CVE-2018-6759.html https://www.suse.com/security/cve/CVE-2018-6872.html https://www.suse.com/security/cve/CVE-2018-7208.html https://www.suse.com/security/cve/CVE-2018-7568.html https://www.suse.com/security/cve/CVE-2018-7569.html https://www.suse.com/security/cve/CVE-2018-7570.html https://www.suse.com/security/cve/CVE-2018-7642.html https://www.suse.com/security/cve/CVE-2018-7643.html https://www.suse.com/security/cve/CVE-2018-8945.html https://www.suse.com/security/cve/CVE-2019-1010180.html https://bugzilla.suse.com/1109412 https://bugzilla.suse.com/1109413 https://bugzilla.suse.com/1109414 https://bugzilla.suse.com/1111996 https://bugzilla.suse.com/1112534 https://bugzilla.suse.com/1112535 https://bugzilla.suse.com/1113247 https://bugzilla.suse.com/1113252 https://bugzilla.suse.com/1113255 https://bugzilla.suse.com/1116827 https://bugzilla.suse.com/1118644 https://bugzilla.suse.com/1118830 https://bugzilla.suse.com/1118831 https://bugzilla.suse.com/1120640 https://bugzilla.suse.com/1121034 https://bugzilla.suse.com/1121035 https://bugzilla.suse.com/1121056 https://bugzilla.suse.com/1133131 https://bugzilla.suse.com/1133232 https://bugzilla.suse.com/1141913 https://bugzilla.suse.com/1142772 https://bugzilla.suse.com/1152590 https://bugzilla.suse.com/1154016 https://bugzilla.suse.com/1154025

1 0

openSUSE-RU-2019:2410-1: moderate: Recommended update for fipscheck
by maintenance＠opensuse.org 29 Oct '19

29 Oct '19

openSUSE Recommended Update: Recommended update for fipscheck ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2410-1 Rating: moderate References: #1149792 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for fipscheck fixes the following issues: - Remove #include of unused fips.h to fix build with OpenSSL 1.1.1 (bsc#1149792) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2410=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): fipscheck-1.4.1-lp150.2.3.1 fipscheck-debuginfo-1.4.1-lp150.2.3.1 fipscheck-debugsource-1.4.1-lp150.2.3.1 fipscheck-devel-1.4.1-lp150.2.3.1 libfipscheck1-1.4.1-lp150.2.3.1 libfipscheck1-debuginfo-1.4.1-lp150.2.3.1 - openSUSE Leap 15.0 (x86_64): libfipscheck1-32bit-1.4.1-lp150.2.3.1 libfipscheck1-32bit-debuginfo-1.4.1-lp150.2.3.1 References: https://bugzilla.suse.com/1149792

1 0

openSUSE-RU-2019:2409-1: moderate: Recommended update for xrdp
by maintenance＠opensuse.org 29 Oct '19

29 Oct '19

openSUSE Recommended Update: Recommended update for xrdp ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2409-1 Rating: moderate References: #1100453 #1138954 #1144327 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for xrdp provides the following fixes: - Enables systemd to handle the daemons, fix daemon start failures. (bsc#1138954, bsc#1144327). - Fixed an issue with delayed X KeyRelease events. (bsc#1100453) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2409=1 Package List: - openSUSE Leap 15.0 (x86_64): libpainter0-0.9.6-lp150.3.3.1 libpainter0-debuginfo-0.9.6-lp150.3.3.1 librfxencode0-0.9.6-lp150.3.3.1 librfxencode0-debuginfo-0.9.6-lp150.3.3.1 xrdp-0.9.6-lp150.3.3.1 xrdp-debuginfo-0.9.6-lp150.3.3.1 xrdp-debugsource-0.9.6-lp150.3.3.1 xrdp-devel-0.9.6-lp150.3.3.1 References: https://bugzilla.suse.com/1100453 https://bugzilla.suse.com/1138954 https://bugzilla.suse.com/1144327

1 0

openSUSE-SU-2019:2408-1: moderate: Security update for nfs-utils
by opensuse-security＠opensuse.org 29 Oct '19

29 Oct '19

openSUSE Security Update: Security update for nfs-utils ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2408-1 Rating: moderate References: #1150733 Cross-References: CVE-2019-3689 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for nfs-utils fixes the following issues: - CVE-2019-3689: Fixed root-owned files stored in insecure /var/lib/nfs. (bsc#1150733) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2408=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): nfs-client-2.1.1-lp150.4.10.1 nfs-client-debuginfo-2.1.1-lp150.4.10.1 nfs-doc-2.1.1-lp150.4.10.1 nfs-kernel-server-2.1.1-lp150.4.10.1 nfs-kernel-server-debuginfo-2.1.1-lp150.4.10.1 nfs-utils-debuginfo-2.1.1-lp150.4.10.1 nfs-utils-debugsource-2.1.1-lp150.4.10.1 References: https://www.suse.com/security/cve/CVE-2019-3689.html https://bugzilla.suse.com/1150733

1 0

openSUSE-RU-2019:2406-1: moderate: Recommended update for yast2-services-manager
by maintenance＠opensuse.org 29 Oct '19

29 Oct '19

openSUSE Recommended Update: Recommended update for yast2-services-manager ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2406-1 Rating: moderate References: #1140735 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-services-manager fixes the following issues: - Set BaseTargets::GRAPHICAL and Target::GRAPHICAL if package "xdm" will be installed (instead of xorg-x11-server) (bsc#1140735). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2406=1 Package List: - openSUSE Leap 15.0 (noarch): yast2-services-manager-4.0.11-lp150.10.1 References: https://bugzilla.suse.com/1140735

1 0

openSUSE-RU-2019:2407-1: important: Recommended update for xen
by maintenance＠opensuse.org 29 Oct '19

29 Oct '19

openSUSE Recommended Update: Recommended update for xen ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2407-1 Rating: important References: #1027519 #1126140 #1126141 #1126192 #1126195 #1126196 #1126197 #1126198 #1126201 #1127400 #1129642 #1131811 #1133818 #1137717 #1138294 #1138563 #1145240 #1145774 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves 14 vulnerabilities and has four fixes is now available. Description: This update for xen to version 4.10.4 fixes the following issues: - Fixed an issue where libxenlight could not restore domain vsa6535522 on live migration (bsc#1133818). - Fixed an HPS bug which did not allow to install Windows Server 2016 with 2 CPUs setting or above (bsc#1137717). - Fixed an issue where libxenlight could not create new domain (bsc#1131811). - Fixed an issue where Xen could not pre-allocate 1 shadow page (bsc#1145240). - Fixed an issue where attached pci devices were lost after reboot (bsc#1129642). - Fixed a segmentation fault in Libvrtd during live migration to a VM (bsc#1145774). - Xenpvnetboot is now ported correctly to Python 3 (bsc#1138563). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2407=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): xen-debugsource-4.10.4_04-lp150.2.22.1 xen-devel-4.10.4_04-lp150.2.22.1 xen-libs-4.10.4_04-lp150.2.22.1 xen-libs-debuginfo-4.10.4_04-lp150.2.22.1 xen-tools-domU-4.10.4_04-lp150.2.22.1 xen-tools-domU-debuginfo-4.10.4_04-lp150.2.22.1 - openSUSE Leap 15.0 (x86_64): xen-4.10.4_04-lp150.2.22.1 xen-doc-html-4.10.4_04-lp150.2.22.1 xen-libs-32bit-4.10.4_04-lp150.2.22.1 xen-libs-32bit-debuginfo-4.10.4_04-lp150.2.22.1 xen-tools-4.10.4_04-lp150.2.22.1 xen-tools-debuginfo-4.10.4_04-lp150.2.22.1 References: https://www.suse.com/security/cve/CVE-2018-12126.html https://www.suse.com/security/cve/CVE-2018-12127.html https://www.suse.com/security/cve/CVE-2018-12130.html https://www.suse.com/security/cve/CVE-2019-11091.html https://www.suse.com/security/cve/CVE-2019-17340.html https://www.suse.com/security/cve/CVE-2019-17341.html https://www.suse.com/security/cve/CVE-2019-17342.html https://www.suse.com/security/cve/CVE-2019-17343.html https://www.suse.com/security/cve/CVE-2019-17344.html https://www.suse.com/security/cve/CVE-2019-17345.html https://www.suse.com/security/cve/CVE-2019-17346.html https://www.suse.com/security/cve/CVE-2019-17347.html https://www.suse.com/security/cve/CVE-2019-17348.html https://www.suse.com/security/cve/CVE-2019-17349.html https://bugzilla.suse.com/1027519 https://bugzilla.suse.com/1126140 https://bugzilla.suse.com/1126141 https://bugzilla.suse.com/1126192 https://bugzilla.suse.com/1126195 https://bugzilla.suse.com/1126196 https://bugzilla.suse.com/1126197 https://bugzilla.suse.com/1126198 https://bugzilla.suse.com/1126201 https://bugzilla.suse.com/1127400 https://bugzilla.suse.com/1129642 https://bugzilla.suse.com/1131811 https://bugzilla.suse.com/1133818 https://bugzilla.suse.com/1137717 https://bugzilla.suse.com/1138294 https://bugzilla.suse.com/1138563 https://bugzilla.suse.com/1145240 https://bugzilla.suse.com/1145774

1 0

openSUSE-RU-2019:2403-1: moderate: Recommended update for transactional-update
by maintenance＠opensuse.org 29 Oct '19

29 Oct '19

openSUSE Recommended Update: Recommended update for transactional-update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2403-1 Rating: moderate References: #1132438 #1137890 #1138725 #1139015 #1140057 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: This update for transactional-update contains the following fixes: - Update from version 2.14.2 to 2.15: - Move description of interactiveness. (bsc#1132438) - Enable network during update. (bsc#1137890) - Add compatibility with new overlayfs versions. (bsc#1140057) - Allow updates of the bootloader on EFI systems. (bsc#1139015) - Add support for /boot/writable. (bsc#1138725) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2403=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): transactional-update-2.15-lp151.2.3.1 transactional-update-debuginfo-2.15-lp151.2.3.1 transactional-update-debugsource-2.15-lp151.2.3.1 - openSUSE Leap 15.1 (noarch): transactional-update-zypp-config-2.15-lp151.2.3.1 References: https://bugzilla.suse.com/1132438 https://bugzilla.suse.com/1137890 https://bugzilla.suse.com/1138725 https://bugzilla.suse.com/1139015 https://bugzilla.suse.com/1140057

1 0

openSUSE-RU-2019:2404-1: Recommended update for tuned
by maintenance＠opensuse.org 29 Oct '19

29 Oct '19

openSUSE Recommended Update: Recommended update for tuned ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2404-1 Rating: low References: #1153341 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for tuned fixes the following issues: - Removed an unused config file: /etc/tuned/sap-hana-vmware-variables.conf (bsc#1153341) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2404=1 Package List: - openSUSE Leap 15.1 (noarch): tuned-2.10.0-lp151.5.3.1 tuned-gtk-2.10.0-lp151.5.3.1 tuned-profiles-atomic-2.10.0-lp151.5.3.1 tuned-profiles-nfv-2.10.0-lp151.5.3.1 tuned-profiles-oracle-2.10.0-lp151.5.3.1 tuned-profiles-realtime-2.10.0-lp151.5.3.1 tuned-utils-2.10.0-lp151.5.3.1 tuned-utils-systemtap-2.10.0-lp151.5.3.1 References: https://bugzilla.suse.com/1153341

1 0

openSUSE-RU-2019:2402-1: moderate: Recommended update for timezone
by maintenance＠opensuse.org 29 Oct '19

29 Oct '19

openSUSE Recommended Update: Recommended update for timezone ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2402-1 Rating: moderate References: #1150451 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for timezone fixes the following issues: - Fiji observes DST from 2019-11-10 to 2020-01-12. - Norfolk Island starts observing Australian-style DST. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2402=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): timezone-2019c-lp150.67.1 timezone-debuginfo-2019c-lp150.67.1 timezone-debugsource-2019c-lp150.67.1 References: https://bugzilla.suse.com/1150451

1 0

openSUSE-RU-2019:2405-1: important: Recommended update for tcsh
by maintenance＠opensuse.org 29 Oct '19

29 Oct '19

openSUSE Recommended Update: Recommended update for tcsh ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2405-1 Rating: important References: #1153839 #1154877 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for tcsh fixes the following issues: - Avoid breakage in sourcing standard system files (bsc#1153839) - A regression has been fixed where glob expansion would not work properly. (bsc#1154877) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2405=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): tcsh-6.20.00-lp151.3.9.1 tcsh-debuginfo-6.20.00-lp151.3.9.1 tcsh-debugsource-6.20.00-lp151.3.9.1 - openSUSE Leap 15.1 (noarch): tcsh-lang-6.20.00-lp151.3.9.1 References: https://bugzilla.suse.com/1153839 https://bugzilla.suse.com/1154877

1 0

openSUSE-RU-2019:2401-1: moderate: Recommended update for mysql-connector-cpp
by maintenance＠opensuse.org 29 Oct '19

29 Oct '19

openSUSE Recommended Update: Recommended update for mysql-connector-cpp ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2401-1 Rating: moderate References: #1149792 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for mysql-connector-cpp fixes the following issues: - Add missing zlib build dependency, which used to be pulled in by libopenssl-devel. (bsc#1149792) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2401=1 Package List: - openSUSE Leap 15.0 (x86_64): libmysqlcppconn-devel-1.1.9-lp150.3.3.1 libmysqlcppconn7-1.1.9-lp150.3.3.1 libmysqlcppconn7-debuginfo-1.1.9-lp150.3.3.1 mysql-connector-cpp-debugsource-1.1.9-lp150.3.3.1 References: https://bugzilla.suse.com/1149792

1 0

openSUSE-RU-2019:2400-1: important: Recommended update for tcsh
by maintenance＠opensuse.org 29 Oct '19

29 Oct '19

openSUSE Recommended Update: Recommended update for tcsh ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2400-1 Rating: important References: #1153839 #1154877 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for tcsh fixes the following issues: - Avoid breakage in sourcing standard system files (bsc#1153839) - A regression has been fixed where glob expansion would not work properly. (bsc#1154877) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2400=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): tcsh-6.20.00-lp150.2.9.1 tcsh-debuginfo-6.20.00-lp150.2.9.1 tcsh-debugsource-6.20.00-lp150.2.9.1 - openSUSE Leap 15.0 (noarch): tcsh-lang-6.20.00-lp150.2.9.1 References: https://bugzilla.suse.com/1153839 https://bugzilla.suse.com/1154877

1 0

openSUSE-SU-2019:2399-1: moderate: Security update for lz4
by opensuse-security＠opensuse.org 28 Oct '19

28 Oct '19

openSUSE Security Update: Security update for lz4 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2399-1 Rating: moderate References: #1153936 Cross-References: CVE-2019-17543 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for lz4 fixes the following issues: - CVE-2019-17543: Fixed a heap-based buffer overflow in LZ4_write32 (bsc#1153936). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2399=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): liblz4-1-1.8.0-lp151.3.3.1 liblz4-1-debuginfo-1.8.0-lp151.3.3.1 liblz4-devel-1.8.0-lp151.3.3.1 lz4-1.8.0-lp151.3.3.1 lz4-debuginfo-1.8.0-lp151.3.3.1 lz4-debugsource-1.8.0-lp151.3.3.1 - openSUSE Leap 15.1 (x86_64): liblz4-1-32bit-1.8.0-lp151.3.3.1 liblz4-1-32bit-debuginfo-1.8.0-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2019-17543.html https://bugzilla.suse.com/1153936

1 0

openSUSE-SU-2019:2398-1: moderate: Security update for lz4
by opensuse-security＠opensuse.org 28 Oct '19

28 Oct '19

openSUSE Security Update: Security update for lz4 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2398-1 Rating: moderate References: #1153936 Cross-References: CVE-2019-17543 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for lz4 fixes the following issues: - CVE-2019-17543: Fixed a heap-based buffer overflow in LZ4_write32 (bsc#1153936). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2398=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): liblz4-1-1.8.0-lp150.2.3.1 liblz4-1-debuginfo-1.8.0-lp150.2.3.1 liblz4-devel-1.8.0-lp150.2.3.1 lz4-1.8.0-lp150.2.3.1 lz4-debuginfo-1.8.0-lp150.2.3.1 lz4-debugsource-1.8.0-lp150.2.3.1 - openSUSE Leap 15.0 (x86_64): liblz4-1-32bit-1.8.0-lp150.2.3.1 liblz4-1-32bit-debuginfo-1.8.0-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2019-17543.html https://bugzilla.suse.com/1153936

1 0

openSUSE-SU-2019:2397-1: moderate: Security update for sysstat
by opensuse-security＠opensuse.org 28 Oct '19

28 Oct '19

openSUSE Security Update: Security update for sysstat ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2397-1 Rating: moderate References: #1150114 Cross-References: CVE-2019-16167 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for sysstat fixes the following issue: - CVE-2019-16167: Fixed a memory corruption due to an integer overflow. (bsc#1150114) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2397=1 Package List: - openSUSE Leap 15.0 (x86_64): sysstat-12.0.2-lp150.16.1 sysstat-debuginfo-12.0.2-lp150.16.1 sysstat-debugsource-12.0.2-lp150.16.1 sysstat-isag-12.0.2-lp150.16.1 References: https://www.suse.com/security/cve/CVE-2019-16167.html https://bugzilla.suse.com/1150114

1 0

openSUSE-SU-2019:2395-1: moderate: Security update for sysstat
by opensuse-security＠opensuse.org 28 Oct '19

28 Oct '19

openSUSE Security Update: Security update for sysstat ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2395-1 Rating: moderate References: #1150114 Cross-References: CVE-2019-16167 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for sysstat fixes the following issue: - CVE-2019-16167: Fixed a memory corruption due to an integer overflow. (bsc#1150114) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2395=1 Package List: - openSUSE Leap 15.1 (x86_64): sysstat-12.0.2-lp151.3.9.1 sysstat-debuginfo-12.0.2-lp151.3.9.1 sysstat-debugsource-12.0.2-lp151.3.9.1 sysstat-isag-12.0.2-lp151.3.9.1 References: https://www.suse.com/security/cve/CVE-2019-16167.html https://bugzilla.suse.com/1150114

1 0

openSUSE-SU-2019:2394-1: moderate: Security update for zziplib
by opensuse-security＠opensuse.org 28 Oct '19

28 Oct '19

openSUSE Security Update: Security update for zziplib ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2394-1 Rating: moderate References: #1107424 #1129403 Cross-References: CVE-2018-16548 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for zziplib fixes the following issues: Security issue fixed: - CVE-2018-16548: Prevented memory leak from __zzip_parse_root_directory(). Free allocated structure if its address is not passed back. (bsc#1107424) Other issue addressed: - Prevented a division by zero (bsc#1129403). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2394=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libzzip-0-13-0.13.69-lp150.7.1 libzzip-0-13-debuginfo-0.13.69-lp150.7.1 zziplib-debugsource-0.13.69-lp150.7.1 zziplib-devel-0.13.69-lp150.7.1 zziplib-devel-debuginfo-0.13.69-lp150.7.1 - openSUSE Leap 15.0 (x86_64): libzzip-0-13-32bit-0.13.69-lp150.7.1 libzzip-0-13-32bit-debuginfo-0.13.69-lp150.7.1 zziplib-devel-32bit-0.13.69-lp150.7.1 zziplib-devel-32bit-debuginfo-0.13.69-lp150.7.1 References: https://www.suse.com/security/cve/CVE-2018-16548.html https://bugzilla.suse.com/1107424 https://bugzilla.suse.com/1129403

1 0

openSUSE-SU-2019:2396-1: moderate: Security update for zziplib
by opensuse-security＠opensuse.org 28 Oct '19

28 Oct '19

openSUSE Security Update: Security update for zziplib ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2396-1 Rating: moderate References: #1107424 #1129403 Cross-References: CVE-2018-16548 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for zziplib fixes the following issues: Security issue fixed: - CVE-2018-16548: Prevented memory leak from __zzip_parse_root_directory(). Free allocated structure if its address is not passed back. (bsc#1107424) Other issue addressed: - Prevented a division by zero (bsc#1129403). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2396=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libzzip-0-13-0.13.69-lp151.4.3.1 libzzip-0-13-debuginfo-0.13.69-lp151.4.3.1 zziplib-debugsource-0.13.69-lp151.4.3.1 zziplib-devel-0.13.69-lp151.4.3.1 zziplib-devel-debuginfo-0.13.69-lp151.4.3.1 - openSUSE Leap 15.1 (x86_64): libzzip-0-13-32bit-0.13.69-lp151.4.3.1 libzzip-0-13-32bit-debuginfo-0.13.69-lp151.4.3.1 zziplib-devel-32bit-0.13.69-lp151.4.3.1 zziplib-devel-32bit-debuginfo-0.13.69-lp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2018-16548.html https://bugzilla.suse.com/1107424 https://bugzilla.suse.com/1129403

1 0

openSUSE-RU-2019:2391-1: important: Recommended update for libzypp, zypper, libsolv and PackageKit
by maintenance＠opensuse.org 27 Oct '19

27 Oct '19

openSUSE Recommended Update: Recommended update for libzypp, zypper, libsolv and PackageKit ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2391-1 Rating: important References: #1049825 #1116995 #1120629 #1120630 #1120631 #1127155 #1127608 #1130306 #1131113 #1131823 #1134226 #1135749 #1137977 #1139795 #1140039 #1145521 #1146027 #1146415 #1146947 #1153557 #859480 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves three vulnerabilities and has 18 fixes is now available. Description: This update for libzypp, zypper, libsolv and PackageKit fixes the following issues: Security issues fixed in libsolv: - CVE-2018-20532: Fixed NULL pointer dereference at ext/testcase.c (function testcase_read) (bsc#1120629). - CVE-2018-20533: Fixed NULL pointer dereference at ext/testcase.c (function testcase_str2dep_complex) in libsolvext.a (bsc#1120630). - CVE-2018-20534: Fixed illegal address access at src/pool.h (function pool_whatprovides) in libsolv.a (bsc#1120631). Other issues addressed in libsolv: - Fixed an issue where libsolv failed to build against swig 4.0 by updating the version to 0.7.5 (bsc#1135749). - Fixed an issue with the package name (bsc#1131823). - repo_add_rpmdb: do not copy bad solvables from the old solv file - Fixed an issue with cleandeps updates in which all packages were not updated - Experimental DISTTYPE_CONDA and REL_CONDA support - Fixed cleandeps jobs when using patterns (bsc#1137977) - Fixed favorq leaking between solver runs if the solver is reused - Fixed SOLVER_FLAG_FOCUS_BEST updateing packages without reason - Be more correct with multiversion packages that obsolete their own name (bnc#1127155) - Fix repository priority handling for multiversion packages - Make code compatible with swig 4.0, remove obj0 instances - repo2solv: support zchunk compressed data - Remove NO_BRP_STRIP_DEBUG=true as brp-15-strip-debug will not strip debug info for archives Issues fixed in libzypp: - Fix empty metalink downloads if filesize is unknown (bsc#1153557) - Recognize riscv64 as architecture - Fix installation of new header file (fixes #185) - zypp.conf: Introduce `solver.focus` to define the resolvers general attitude when resolving jobs. (bsc#1146415) - New container detection algorithm for zypper ps (bsc#1146947) - Fix leaking filedescriptors in MediaCurl. (bsc#1116995) - Run file conflict check on dry-run. (bsc#1140039) - Do not remove orphan products if the .prod file is owned by a package. (bsc#1139795) - Rephrase file conflict check summary. (bsc#1140039) - Fix bash completions option detection. (bsc#1049825) - Fixes a bug where zypper exited on SIGPIPE when downloading packages (bsc#1145521) - Fixes an issue where zypper exited with a segmentation fault when updating via YaST2 (bsc#1146027) - PublicKey::algoName: supply key algorithm and length Issues fixed in zypper: - Update to version 1.14.30 - Ignore SIGPIPE while STDOUT/STDERR are OK (bsc#1145521) - Dump stacktrace on SIGPIPE (bsc#1145521) - info: The requested info must be shown in QUIET mode (fixes #287) - Fix local/remote url classification. - Rephrase file conflict check summary (bsc#1140039) - Fix bash completions option detection (bsc#1049825) - man: split '--with[out]' like options to ease searching. - Unhided 'ps' command in help - Added option to show more conflict information - Rephrased `zypper ps` hint (bsc#859480) - Fixed repo refresh not returning 106-ZYPPER_EXIT_INF_REPOS_SKIPPED if --root is used (bsc#1134226) - Fixed unknown package handling in zypper install (bsc#1127608) - Re-show progress bar after pressing retry upon install error (bsc#1131113) Issues fixed in PackageKit: - Port the cron configuration variables to the systemd timer script, and add -sendwait parameter to mail in the script(bsc#1130306). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2391=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): PackageKit-1.1.10-lp151.8.6.1 PackageKit-backend-zypp-1.1.10-lp151.8.6.1 PackageKit-backend-zypp-debuginfo-1.1.10-lp151.8.6.1 PackageKit-debuginfo-1.1.10-lp151.8.6.1 PackageKit-debugsource-1.1.10-lp151.8.6.1 PackageKit-devel-1.1.10-lp151.8.6.1 PackageKit-devel-debuginfo-1.1.10-lp151.8.6.1 PackageKit-gstreamer-plugin-1.1.10-lp151.8.6.1 PackageKit-gstreamer-plugin-debuginfo-1.1.10-lp151.8.6.1 PackageKit-gtk3-module-1.1.10-lp151.8.6.1 PackageKit-gtk3-module-debuginfo-1.1.10-lp151.8.6.1 libpackagekit-glib2-18-1.1.10-lp151.8.6.1 libpackagekit-glib2-18-debuginfo-1.1.10-lp151.8.6.1 libpackagekit-glib2-devel-1.1.10-lp151.8.6.1 libsolv-debuginfo-0.7.6-lp151.2.3.2 libsolv-debugsource-0.7.6-lp151.2.3.2 libsolv-demo-0.7.6-lp151.2.3.2 libsolv-demo-debuginfo-0.7.6-lp151.2.3.2 libsolv-devel-0.7.6-lp151.2.3.2 libsolv-devel-debuginfo-0.7.6-lp151.2.3.2 libsolv-tools-0.7.6-lp151.2.3.2 libsolv-tools-debuginfo-0.7.6-lp151.2.3.2 libyui-ncurses-pkg-debugsource-2.48.9-lp151.2.3.1 libyui-ncurses-pkg-devel-2.48.9-lp151.2.3.1 libyui-ncurses-pkg9-2.48.9-lp151.2.3.1 libyui-ncurses-pkg9-debuginfo-2.48.9-lp151.2.3.1 libyui-qt-pkg-debugsource-2.45.27-lp151.2.3.1 libyui-qt-pkg-devel-2.45.27-lp151.2.3.1 libyui-qt-pkg9-2.45.27-lp151.2.3.1 libyui-qt-pkg9-debuginfo-2.45.27-lp151.2.3.1 libzypp-17.15.0-lp151.2.3.2 libzypp-debuginfo-17.15.0-lp151.2.3.2 libzypp-debugsource-17.15.0-lp151.2.3.2 libzypp-devel-17.15.0-lp151.2.3.2 libzypp-devel-doc-17.15.0-lp151.2.3.2 perl-solv-0.7.6-lp151.2.3.2 perl-solv-debuginfo-0.7.6-lp151.2.3.2 python-solv-0.7.6-lp151.2.3.2 python-solv-debuginfo-0.7.6-lp151.2.3.2 python3-solv-0.7.6-lp151.2.3.2 python3-solv-debuginfo-0.7.6-lp151.2.3.2 ruby-solv-0.7.6-lp151.2.3.2 ruby-solv-debuginfo-0.7.6-lp151.2.3.2 typelib-1_0-PackageKitGlib-1_0-1.1.10-lp151.8.6.1 yast2-pkg-bindings-4.1.2-lp151.2.3.1 yast2-pkg-bindings-debuginfo-4.1.2-lp151.2.3.1 yast2-pkg-bindings-debugsource-4.1.2-lp151.2.3.1 zypper-1.14.30-lp151.2.3.1 zypper-debuginfo-1.14.30-lp151.2.3.1 zypper-debugsource-1.14.30-lp151.2.3.1 - openSUSE Leap 15.1 (x86_64): libpackagekit-glib2-18-32bit-1.1.10-lp151.8.6.1 libpackagekit-glib2-18-32bit-debuginfo-1.1.10-lp151.8.6.1 libpackagekit-glib2-devel-32bit-1.1.10-lp151.8.6.1 - openSUSE Leap 15.1 (noarch): PackageKit-branding-upstream-1.1.10-lp151.8.6.1 PackageKit-lang-1.1.10-lp151.8.6.1 libyui-ncurses-pkg-doc-2.48.9-lp151.2.3.1 libyui-qt-pkg-doc-2.45.27-lp151.2.3.1 yast2-pkg-bindings-devel-doc-4.1.2-lp151.2.3.1 zypper-aptitude-1.14.30-lp151.2.3.1 zypper-log-1.14.30-lp151.2.3.1 zypper-needs-restarting-1.14.30-lp151.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-20532.html https://www.suse.com/security/cve/CVE-2018-20533.html https://www.suse.com/security/cve/CVE-2018-20534.html https://bugzilla.suse.com/1049825 https://bugzilla.suse.com/1116995 https://bugzilla.suse.com/1120629 https://bugzilla.suse.com/1120630 https://bugzilla.suse.com/1120631 https://bugzilla.suse.com/1127155 https://bugzilla.suse.com/1127608 https://bugzilla.suse.com/1130306 https://bugzilla.suse.com/1131113 https://bugzilla.suse.com/1131823 https://bugzilla.suse.com/1134226 https://bugzilla.suse.com/1135749 https://bugzilla.suse.com/1137977 https://bugzilla.suse.com/1139795 https://bugzilla.suse.com/1140039 https://bugzilla.suse.com/1145521 https://bugzilla.suse.com/1146027 https://bugzilla.suse.com/1146415 https://bugzilla.suse.com/1146947 https://bugzilla.suse.com/1153557 https://bugzilla.suse.com/859480

1 0

openSUSE-SU-2019:2392-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 27 Oct '19

27 Oct '19

openSUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2392-1 Rating: important References: #1046299 #1046303 #1046305 #1050244 #1050536 #1050545 #1051510 #1055186 #1061840 #1064802 #1065600 #1066129 #1073513 #1086323 #1087092 #1089644 #1093205 #1097583 #1097584 #1097585 #1097586 #1097587 #1097588 #1098291 #1101674 #1109158 #1114279 #1117665 #1123080 #1133140 #1134303 #1135642 #1135854 #1135873 #1137799 #1140729 #1140845 #1140883 #1141600 #1142635 #1142667 #1144375 #1144449 #1145099 #1148410 #1150452 #1150465 #1150875 #1151508 #1152788 #1152791 #1153112 #1153158 #1153236 #1153263 #1153646 #1153713 #1153717 #1153718 #1153719 #1153811 #1154108 #1154189 #1154354 #1154372 #1154578 #1154607 #1154608 #1154610 #1154611 #1154651 #1154747 #118461_FIXME #133135_FIXME #135757_FIXME #147830_FIXME #147831_FIXME #158172_FIXME #165544_FIXME #166495_FIXME #172859_FIXME #172860_FIXME #181778_FIXME #229268_FIXME #229269_FIXME #229270_FIXME #229274_FIXME #229277_FIXME #229279_FIXME #229280_FIXME #229281_FIXME #229283_FIXME #229285_FIXME #229286_FIXME #229297_FIXME #296718_FIXME #358767_FIXME #359798_FIXME #802154 #814594 #919448 #987367 #998153 Cross-References: CVE-2019-16232 CVE-2019-16234 CVE-2019-17056 CVE-2019-17133 CVE-2019-17666 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves 5 vulnerabilities and has 98 fixes is now available. Description: The openSUSE Leap 15.0 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-17666: rtl_p2p_noa_ie in drivers/net/wireless/realtek/rtlwifi/ps.c lacked a certain upper-bound check, leading to a buffer overflow (bnc#1154372). - CVE-2019-16232: drivers/net/wireless/marvell/libertas/if_sdio.c did not check the alloc_workqueue return value, leading to a NULL pointer dereference (bnc#1150465). - CVE-2019-16234: drivers/net/wireless/intel/iwlwifi/pcie/trans.c did not check the alloc_workqueue return value, leading to a NULL pointer dereference (bnc#1150452). - CVE-2019-17133: cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c did not reject a long SSID IE, leading to a Buffer Overflow (bnc#1153158). - CVE-2019-17056: llcp_sock_create in net/nfc/llcp_sock.c in the AF_NFC network module did not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-3a359798b176 (bnc#1152788). The following non-security bugs were fixed: - 9p: avoid attaching writeback_fid on mmap with type PRIVATE (bsc#1051510). - ACPI / CPPC: do not require the _PSD method (bsc#1051510). - ACPI: CPPC: Set pcc_data[pcc_ss_id] to NULL in acpi_cppc_processor_exit() (bsc#1051510). - ACPI / processor: do not print errors for processorIDs == 0xff (bsc#1051510). - act_mirred: Fix mirred_init_module error handling (bsc#1051510). - Add kernel module compression support (bsc#1135854) For enabling the kernel module compress, add the item COMPRESS_MODULES="xz" in config.sh, then mkspec will pass it to the spec file. - ALSA: hda - Add laptop imic fixup for ASUS M9V laptop (bsc#1051510). - ALSA: hda: Add support of Zhaoxin controller (bsc#1051510). - ALSA: hda - Apply AMD controller workaround for Raven platform (bsc#1051510). - ALSA: hda - Define a fallback_pin_fixup_tbl for alc269 family (bsc#1051510). - ALSA: hda - Drop unsol event handler for Intel HDMI codecs (bsc#1051510). - ALSA: hda - Expand pin_match function to match upcoming new tbls (bsc#1051510). - ALSA: hda: Flush interrupts on disabling (bsc#1051510). - ALSA: hda/hdmi: remove redundant assignment to variable pcm_idx (bsc#1051510). - ALSA: hda - Inform too slow responses (bsc#1051510). - ALSA: hda/realtek - Blacklist PC beep for Lenovo ThinkCentre M73/93 (bsc#1051510). - ALSA: hda/realtek - Check beep whitelist before assigning in all codecs (bsc#1051510). - ALSA: hda/realtek - Fix alienware headset mic (bsc#1051510). - ALSA: hda/realtek: Reduce the Headphone static noise on XPS 9350/9360 (bsc#1051510). - ALSA: hda: Set fifo_size for both playback and capture streams (bsc#1051510). - ALSA: hda - Show the fatal CORB/RIRB error more clearly (bsc#1051510). - ALSA: hda/sigmatel - remove unused variable 'stac9200_core_init' (bsc#1051510). - ALSA: i2c: ak4xxx-adda: Fix a possible null pointer dereference in build_adc_controls() (bsc#1051510). - ALSA: line6: sizeof (byte) is always 1, use that fact (bsc#1051510). - ALSA: usb-audio: Add Pioneer DDJ-SX3 PCM quirck (bsc#1051510). - ALSA: usb-audio: Disable quirks for BOSS Katana amplifiers (bsc#1051510). - ALSA: usb-audio: Skip bSynchAddress endpoint check if it is invalid (bsc#1051510). - appletalk: enforce CAP_NET_RAW for raw sockets (bsc#1051510). - ASoC: Define a set of DAPM pre/post-up events (bsc#1051510). - ASoC: dmaengine: Make the pcm->name equal to pcm->id if the name is not set (bsc#1051510). - ASoC: Intel: Fix use of potentially uninitialized variable (bsc#1051510). - ASoC: Intel: NHLT: Fix debug print format (bsc#1051510). - ASoC: sgtl5000: Fix charge pump source assignment (bsc#1051510). - auxdisplay: panel: need to delete scan_timer when misc_register fails in panel_attach (bsc#1051510). - ax25: enforce CAP_NET_RAW for raw sockets (bsc#1051510). - blacklist "signal: Correct namespace fixups of si_pid and si_uid" (bsc#1142667) - blk-wbt: abstract out end IO completion handler (bsc#1135873). - blk-wbt: fix has-sleeper queueing check (bsc#1135873). - blk-wbt: improve waking of tasks (bsc#1135873). - blk-wbt: move disable check into get_limit() (bsc#1135873). - blk-wbt: use wq_has_sleeper() for wq active check (bsc#1135873). - block: add io timeout to sysfs (bsc#1148410). - block: do not show io_timeout if driver has no timeout handler (bsc#1148410). - bluetooth: btrtl: Additional Realtek 8822CE Bluetooth devices (bsc#1051510). - bnx2x: Fix VF's VLAN reconfiguration in reload (bsc#1086323 ). - bridge/mdb: remove wrong use of NLM_F_MULTI (networking-stable-19_09_15). - btrfs: bail out gracefully rather than BUG_ON (bsc#1153646). - btrfs: check for the full sync flag while holding the inode lock during fsync (bsc#1153713). - btrfs: Ensure btrfs_init_dev_replace_tgtdev sees up to date values (bsc#1154651). - btrfs: Ensure replaced device does not have pending chunk allocation (bsc#1154607). - btrfs: remove wrong use of volume_mutex from btrfs_dev_replace_start (bsc#1154651). - can: mcp251x: mcp251x_hw_reset(): allow more time after a reset (bsc#1051510). - can: xilinx_can: xcan_probe(): skip error message on deferred probe (bsc#1051510). - cdc_ether: fix rndis support for Mediatek based smartphones (networking-stable-19_09_15). - cdc_ncm: fix divide-by-zero caused by invalid wMaxPacketSize (bsc#1051510). - ceph: fix directories inode i_blkbits initialization (bsc#1153717). - ceph: reconnect connection if session hang in opening state (bsc#1153718). - ceph: update the mtime when truncating up (bsc#1153719). - cfg80211: add and use strongly typed element iteration macros (bsc#1051510). - cfg80211: Purge frame registrations on iftype change (bsc#1051510). - clk: at91: select parent if main oscillator or bypass is enabled (bsc#1051510). - clk: qoriq: Fix -Wunused-const-variable (bsc#1051510). - clk: sirf: Do not reference clk_init_data after registration (bsc#1051510). - clk: zx296718: Do not reference clk_init_data after registration (bsc#1051510). - crypto: talitos - fix missing break in switch statement (bsc#1142635). - cxgb4: fix endianness for vlan value in cxgb4_tc_flower (bsc#1064802 bsc#1066129). - cxgb4: offload VLAN flows regardless of VLAN ethtype (bsc#1064802 bsc#1066129). - cxgb4: reduce kernel stack usage in cudbg_collect_mem_region() (bsc#1073513). - cxgb4: Signedness bug in init_one() (bsc#1097585 bsc#1097586 bsc#1097587 bsc#1097588 bsc#1097583 bsc#1097584). - cxgb4: smt: Add lock for atomic_dec_and_test (bsc#1064802 bsc#1066129). - dasd_fba: Display '00000000' for zero page when dumping sense - /dev/mem: Bail out upon SIGKILL (git-fixes). - drm/amdgpu: Check for valid number of registers to read (bsc#1051510). - drm/amdgpu/si: fix ASIC tests (git-fixes). - drm/amd/powerplay/smu7: enforce minimal VBITimeout (v2) (bsc#1051510). - drm/ast: Fixed reboot test may cause system hanged (bsc#1051510). - drm/bridge: tc358767: Increase AUX transfer length limit (bsc#1051510). - drm: Flush output polling on shutdown (bsc#1051510). - drm/msm/dsi: Implement reset correctly (bsc#1051510). - drm/panel: simple: fix AUO g185han01 horizontal blanking (bsc#1051510). - drm/radeon: Fix EEH during kexec (bsc#1051510). - drm/tilcdc: Register cpufreq notifier after we have initialized crtc (bsc#1051510). - drm/vmwgfx: Fix double free in vmw_recv_msg() (bsc#1051510). - e1000e: add workaround for possible stalled packet (bsc#1051510). - firmware: dmi: Fix unlikely out-of-bounds read in save_mem_devices (git-fixes). - Fix AMD IOMMU kABI (bsc#1154610). - Fix KVM kABI after x86 mmu backports (bsc#1117665). - gpu: drm: radeon: Fix a possible null-pointer dereference in radeon_connector_set_property() (bsc#1051510). - HID: apple: Fix stuck function keys when using FN (bsc#1051510). - HID: hidraw: Fix invalid read in hidraw_ioctl (bsc#1051510). - HID: logitech: Fix general protection fault caused by Logitech driver (bsc#1051510). - HID: prodikeys: Fix general protection fault during probe (bsc#1051510). - HID: sony: Fix memory corruption issue on cleanup (bsc#1051510). - hwmon: (acpi_power_meter) Change log level for 'unsafe software power cap' (bsc#1051510). - hwrng: core - do not wait on add_early_randomness() (git-fixes). - i2c: riic: Clear NACK in tend isr (bsc#1051510). - IB/core, ipoib: Do not overreact to SM LID change event (bsc#1154108) - IB/hfi1: Remove overly conservative VM_EXEC flag check (bsc#1144449). - IB/mlx5: Consolidate use_umr checks into single function (bsc#1093205). - IB/mlx5: Fix MR re-registration flow to use UMR properly (bsc#1093205). - IB/mlx5: Report correctly tag matching rendezvous capability (bsc#1046305). - ieee802154: atusb: fix use-after-free at disconnect (bsc#1051510). - ieee802154: enforce CAP_NET_RAW for raw sockets (bsc#1051510). - iio: adc: ad799x: fix probe error handling (bsc#1051510). - iio: light: opt3001: fix mutex unlock race (bsc#1051510). - ima: always return negative code for error (bsc#1051510). - Input: da9063 - fix capability and drop KEY_SLEEP (bsc#1051510). - iommu/amd: Apply the same IVRS IOAPIC workaround to Acer Aspire A315-41 (bsc#1137799). - iommu/amd: Check PM_LEVEL_SIZE() condition in locked section (bsc#1154608). - iommu/amd: Override wrong IVRS IOAPIC on Raven Ridge systems (bsc#1137799). - iommu/amd: Remove domain->updated (bsc#1154610). - iommu/amd: Wait for completion of IOTLB flush in attach_device (bsc#1154611). - ipmi_si: Only schedule continuously in the thread in maintenance mode (bsc#1051510). - ipv6: Fix the link time qualifier of 'ping_v6_proc_exit_net()' (networking-stable-19_09_15). - ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (bsc#1101674). - ixgbe: sync the first fragment unconditionally (bsc#1133140). - kabi: net: sched: act_sample: fix psample group handling on overwrite (networking-stable-19_09_05). - kabi/severities: Whitelist functions internal to radix mm. To call these functions you have to first detect if you are running in radix mm mode which can't be expected of OOT code. - kABI workaround for snd_hda_pick_pin_fixup() changes (bsc#1051510). - kernel-binary: Drop .kernel-binary.spec.buildenv (boo#1154578). - kernel-binary.spec.in: Fix build of non-modular kernels (boo#1154578). - kernel-subpackage-build: create zero size ghost for uncompressed vmlinux (bsc#1154354). It is not strictly necessary to uncompress it so maybe the ghost file can be 0 size in this case. - kernel/sysctl.c: do not override max_threads provided by userspace (bnc#1150875). - kvm: Convert kvm_lock to a mutex (bsc#1117665). - kvm: MMU: drop vcpu param in gpte_access (bsc#1117665). - kvm: PPC: Book3S HV: use smp_mb() when setting/clearing host_ipi flag (bsc#1061840). - kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (bsc#1117665). - kvm: x86: adjust kvm_mmu_page member to save 8 bytes (bsc#1117665). - kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (bsc#1117665). - kvm: x86: Do not release the page inside mmu_set_spte() (bsc#1117665). - kvm: x86: make FNAME(fetch) and __direct_map more similar (bsc#1117665). - kvm: x86, powerpc: do not allow clearing largepages debugfs entry (bsc#1117665). - kvm: x86: remove now unneeded hugepage gfn adjustment (bsc#1117665). - libertas: Add missing sentinel at end of if_usb.c fw_table (bsc#1051510). - lib/mpi: Fix karactx leak in mpi_powm (bsc#1051510). - mac80211: accept deauth frames in IBSS mode (bsc#1051510). - macsec: drop skb sk before calling gro_cells_receive (bsc#1051510). - media: atmel: atmel-isc: fix asd memory allocation (bsc#1135642). - media: cpia2_usb: fix memory leaks (bsc#1051510). - media: dvb-core: fix a memory leak bug (bsc#1051510). - media: exynos4-is: fix leaked of_node references (bsc#1051510). - media: gspca: zero usb_buf on error (bsc#1051510). - media: hdpvr: Add device num check and handling (bsc#1051510). - media: hdpvr: add terminating 0 at end of string (bsc#1051510). - media: i2c: ov5645: Fix power sequence (bsc#1051510). - media: iguanair: add sanity checks (bsc#1051510). - media: omap3isp: Do not set streaming state on random subdevs (bsc#1051510). - media: omap3isp: Set device on omap3isp subdevs (bsc#1051510). - media: ov9650: add a sanity check (bsc#1051510). - media: radio/si470x: kill urb on error (bsc#1051510). - media: saa7134: fix terminology around saa7134_i2c_eeprom_md7134_gate() (bsc#1051510). - media: saa7146: add cleanup in hexium_attach() (bsc#1051510). - media: sn9c20x: Add MSI MS-1039 laptop to flip_dmi_table (bsc#1051510). - media: stkwebcam: fix runtime PM after driver unbind (bsc#1051510). - media: ttusb-dec: Fix info-leak in ttusb_dec_send_command() (bsc#1051510). - memstick: jmb38x_ms: Fix an error handling path in 'jmb38x_ms_probe()' (bsc#1051510). - mfd: intel-lpss: Remove D3cold delay (bsc#1051510). - mISDN: enforce CAP_NET_RAW for raw sockets (bsc#1051510). - mld: fix memory leak in mld_del_delrec() (networking-stable-19_09_05). - mmc: sdhci: Fix incorrect switch to HS mode (bsc#1051510). - mmc: sdhci: improve ADMA error reporting (bsc#1051510). - mmc: sdhci-of-esdhc: set DMA snooping based on DMA coherence (bsc#1051510). - net: Fix null de-reference of device refcount (networking-stable-19_09_15). - net: fix skb use after free in netpoll (networking-stable-19_09_05). - net: gso: Fix skb_segment splat when splitting gso_size mangled skb having linear-headed frag_list (networking-stable-19_09_15). - net/ibmvnic: Fix EOI when running in XIVE mode (bsc#1089644, ltc#166495, ltc#165544, git-fixes). - net/mlx4_en: fix a memory leak bug (bsc#1046299). - net/mlx5: Add device ID of upcoming BlueField-2 (bsc#1046303 ). - net/mlx5: Fix error handling in mlx5_load() (bsc#1046305 ). - net: sched: act_sample: fix psample group handling on overwrite (networking-stable-19_09_05). - net: stmmac: dwmac-rk: Do not fail if phy regulator is absent (networking-stable-19_09_05). - nfc: fix attrs checks in netlink interface (bsc#1051510). - nfc: fix memory leak in llcp_sock_bind() (bsc#1051510). - nfc: pn533: fix use-after-free and memleaks (bsc#1051510). - objtool: Clobber user CFLAGS variable (bsc#1153236). - PCI: Correct pci=resource_alignment parameter example (bsc#1051510). - PCI: dra7xx: Fix legacy INTD IRQ handling (bsc#1087092). - PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (bsc#1153263). - PCI: PM: Fix pci_power_up() (bsc#1051510). - pinctrl: tegra: Fix write barrier placement in pmx_writel (bsc#1051510). - platform/x86: classmate-laptop: remove unused variable (bsc#1051510). - platform/x86: pmc_atom: Add Siemens SIMATIC IPC277E to critclk_systems DMI table (bsc#1051510). - powerpc/64s/pseries: radix flush translations before MMU is enabled at boot (bsc#1055186). - powerpc/64s/radix: keep kernel ERAT over local process/guest invalidates (bsc#1055186). - powerpc/64s/radix: tidy up TLB flushing code (bsc#1055186). - powerpc/64s: Rename PPC_INVALIDATE_ERAT to PPC_ISA_3_0_INVALIDATE_ERAT (bsc#1055186). - powerpc/mm/book3s64: Move book3s64 code to pgtable-book3s64 (bsc#1055186). - powerpc/mm: mark more tlb functions as __always_inline (bsc#1055186). - powerpc/mm: Properly invalidate when setting process table base (bsc#1055186). - powerpc/mm/radix: mark as __tlbie_pid() and friends as__always_inline (bsc#1055186). - powerpc/mm/radix: mark __radix__flush_tlb_range_psize() as __always_inline (bsc#1055186). - powerpc/pseries/mobility: use cond_resched when updating device tree (bsc#1153112 ltc#181778). - powerpc/pseries: Remove confusing warning message (bsc#1109158). - powerpc/rtas: allow rescheduling while changing cpu states (bsc#1153112 ltc#181778). - power: supply: sysfs: ratelimit property read error message (bsc#1051510). - Pull packaging cleanup from mkubecek. - qed: iWARP - Fix default window size to be based on chip (bsc#1050536 bsc#1050545). - qed: iWARP - Fix tc for MPA ll2 connection (bsc#1050536 bsc#1050545). - qed: iWARP - fix uninitialized callback (bsc#1050536 bsc#1050545). - qed: iWARP - Use READ_ONCE and smp_store_release to access ep->state (bsc#1050536 bsc#1050545). - RDMA/bnxt_re: Fix spelling mistake "missin_resp" -> "missing_resp" (bsc#1050244). - RDMA: Fix goto target to release the allocated memory (bsc#1050244). - rtlwifi: rtl8192cu: Fix value set in descriptor (bsc#1142635). - sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero (networking-stable-19_09_15). - scripts/arch-symbols: add missing link. - scsi: lpfc: Fix null ptr oops updating lpfc_devloss_tmo via sysfs attribute (bsc#1140845). - scsi: lpfc: Fix propagation of devloss_tmo setting to nvme transport (bsc#1140883). - scsi: lpfc: Remove bg debugfs buffers (bsc#1144375). - scsi: qedf: fc_rport_priv reference counting fixes (bsc#1098291). - scsi: qedf: Modify abort and tmf handler to handle edge condition and flush (bsc#1098291). - scsi: storvsc: setup 1:1 mapping between hardware queue and CPU queue (bsc#1140729). - sctp: Fix the link time qualifier of 'sctp_ctrlsock_exit()' (networking-stable-19_09_15). - sctp: use transport pf_retrans in sctp_do_8_2_transport_strike (networking-stable-19_09_15). - Sign non-x86 kernels when possible (boo#1134303) - sock_diag: fix autoloading of the raw_diag module (bsc#1152791). - sock_diag: request _diag module only when the family or proto has been registered (bsc#1152791). - staging: vt6655: Fix memory leak in vt6655_probe (bsc#1051510). - tcp: Do not dequeue SYN/FIN-segments from write-queue (git-gixes). - tcp: fix tcp_ecn_withdraw_cwr() to clear TCP_ECN_QUEUE_CWR (networking-stable-19_09_15). - tcp: inherit timestamp on mtu probe (networking-stable-19_09_05). - tcp: remove empty skb from write queue in error cases (networking-stable-19_09_05). - thermal: Fix use-after-free when unregistering thermal zone device (bsc#1051510). - thermal_hwmon: Sanitize thermal_zone type (bsc#1051510). - tipc: add NULL pointer check before calling kfree_rcu (networking-stable-19_09_15). - tracing: Initialize iter->seq after zeroing in tracing_read_pipe() (bsc#1151508). - tun: fix use-after-free when register netdev failed (networking-stable-19_09_15). - tuntap: correctly set SOCKWQ_ASYNC_NOSPACE (bsc#1145099). - Update patches.suse/NFSv4-Check-the-return-value-of-update_open_stateid.patch (boo#1154189 bsc#1154747). - usb: adutux: fix NULL-derefs on disconnect (bsc#1142635). - usb: adutux: fix use-after-free on disconnect (bsc#1142635). - usb: adutux: fix use-after-free on release (bsc#1051510). - usb: chaoskey: fix use-after-free on release (bsc#1051510). - usb: dummy-hcd: fix power budget for SuperSpeed mode (bsc#1051510). - usb: iowarrior: fix use-after-free after driver unbind (bsc#1051510). - usb: iowarrior: fix use-after-free on disconnect (bsc#1051510). - usb: iowarrior: fix use-after-free on release (bsc#1051510). - usb: legousbtower: fix deadlock on disconnect (bsc#1142635). - usb: legousbtower: fix open after failed reset request (bsc#1142635). - usb: legousbtower: fix potential NULL-deref on disconnect (bsc#1142635). - usb: legousbtower: fix slab info leak at probe (bsc#1142635). - usb: legousbtower: fix use-after-free on release (bsc#1051510). - usb: microtek: fix info-leak at probe (bsc#1142635). - usbnet: ignore endpoints with invalid wMaxPacketSize (bsc#1051510). - usbnet: sanity checking of packet sizes and device mtu (bsc#1051510). - usb: serial: fix runtime PM after driver unbind (bsc#1051510). - usb: serial: ftdi_sio: add device IDs for Sienna and Echelon PL-20 (bsc#1051510). - usb: serial: keyspan: fix NULL-derefs on open() and write() (bsc#1051510). - usb: serial: option: add support for Cinterion CLS8 devices (bsc#1051510). - usb: serial: option: add Telit FN980 compositions (bsc#1051510). - usb: usblcd: fix I/O after disconnect (bsc#1142635). - usb: usblp: fix runtime PM after driver unbind (bsc#1051510). - usb: usb-skeleton: fix NULL-deref on disconnect (bsc#1051510). - usb: usb-skeleton: fix runtime PM after driver unbind (bsc#1051510). - usb: usb-skeleton: fix use-after-free after driver unbind (bsc#1051510). - usb: xhci: wait for CNR controller not ready bit in xhci resume (bsc#1051510). - usb: yurex: Do not retry on unexpected errors (bsc#1051510). - usb: yurex: fix NULL-derefs on disconnect (bsc#1051510). - vfio_pci: Restore original state on release (bsc#1051510). - vhost_net: conditionally enable tx polling (bsc#1145099). - video: of: display_timing: Add of_node_put() in of_get_display_timing() (bsc#1051510). - watchdog: imx2_wdt: fix min() calculation in imx2_wdt_set_timeout (bsc#1051510). - x86/asm: Fix MWAITX C-state hint value (bsc#1114279). - x86/mm: Use WRITE_ONCE() when setting PTEs (bsc#1114279). - xen/netback: fix error path of xenvif_connect_data() (bsc#1065600). - xen/pv: Fix Xen PV guest int3 handling (bsc#1153811). - xhci: Check all endpoints for LPM timeout (bsc#1051510). - xhci: Fix false warning message about wrong bounce buffer write length (bsc#1051510). - xhci: Increase STS_SAVE timeout in xhci_suspend() (bsc#1051510). - xhci: Prevent device initiated U1/U2 link pm if exit latency is too long (bsc#1051510). Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2392=1 Package List: - openSUSE Leap 15.0 (noarch): kernel-devel-4.12.14-lp150.12.79.1 kernel-docs-4.12.14-lp150.12.79.1 kernel-docs-html-4.12.14-lp150.12.79.1 kernel-macros-4.12.14-lp150.12.79.1 kernel-source-4.12.14-lp150.12.79.1 kernel-source-vanilla-4.12.14-lp150.12.79.1 - openSUSE Leap 15.0 (x86_64): kernel-debug-4.12.14-lp150.12.79.1 kernel-debug-base-4.12.14-lp150.12.79.1 kernel-debug-base-debuginfo-4.12.14-lp150.12.79.1 kernel-debug-debuginfo-4.12.14-lp150.12.79.1 kernel-debug-debugsource-4.12.14-lp150.12.79.1 kernel-debug-devel-4.12.14-lp150.12.79.1 kernel-debug-devel-debuginfo-4.12.14-lp150.12.79.1 kernel-default-4.12.14-lp150.12.79.1 kernel-default-base-4.12.14-lp150.12.79.1 kernel-default-base-debuginfo-4.12.14-lp150.12.79.1 kernel-default-debuginfo-4.12.14-lp150.12.79.1 kernel-default-debugsource-4.12.14-lp150.12.79.1 kernel-default-devel-4.12.14-lp150.12.79.1 kernel-default-devel-debuginfo-4.12.14-lp150.12.79.1 kernel-kvmsmall-4.12.14-lp150.12.79.1 kernel-kvmsmall-base-4.12.14-lp150.12.79.1 kernel-kvmsmall-base-debuginfo-4.12.14-lp150.12.79.1 kernel-kvmsmall-debuginfo-4.12.14-lp150.12.79.1 kernel-kvmsmall-debugsource-4.12.14-lp150.12.79.1 kernel-kvmsmall-devel-4.12.14-lp150.12.79.1 kernel-kvmsmall-devel-debuginfo-4.12.14-lp150.12.79.1 kernel-obs-build-4.12.14-lp150.12.79.1 kernel-obs-build-debugsource-4.12.14-lp150.12.79.1 kernel-obs-qa-4.12.14-lp150.12.79.1 kernel-syms-4.12.14-lp150.12.79.1 kernel-vanilla-4.12.14-lp150.12.79.1 kernel-vanilla-base-4.12.14-lp150.12.79.1 kernel-vanilla-base-debuginfo-4.12.14-lp150.12.79.1 kernel-vanilla-debuginfo-4.12.14-lp150.12.79.1 kernel-vanilla-debugsource-4.12.14-lp150.12.79.1 kernel-vanilla-devel-4.12.14-lp150.12.79.1 kernel-vanilla-devel-debuginfo-4.12.14-lp150.12.79.1 References: https://www.suse.com/security/cve/CVE-2019-16232.html https://www.suse.com/security/cve/CVE-2019-16234.html https://www.suse.com/security/cve/CVE-2019-17056.html https://www.suse.com/security/cve/CVE-2019-17133.html https://www.suse.com/security/cve/CVE-2019-17666.html https://bugzilla.suse.com/1046299 https://bugzilla.suse.com/1046303 https://bugzilla.suse.com/1046305 https://bugzilla.suse.com/1050244 https://bugzilla.suse.com/1050536 https://bugzilla.suse.com/1050545 https://bugzilla.suse.com/1051510 https://bugzilla.suse.com/1055186 https://bugzilla.suse.com/1061840 https://bugzilla.suse.com/1064802 https://bugzilla.suse.com/1065600 https://bugzilla.suse.com/1066129 https://bugzilla.suse.com/1073513 https://bugzilla.suse.com/1086323 https://bugzilla.suse.com/1087092 https://bugzilla.suse.com/1089644 https://bugzilla.suse.com/1093205 https://bugzilla.suse.com/1097583 https://bugzilla.suse.com/1097584 https://bugzilla.suse.com/1097585 https://bugzilla.suse.com/1097586 https://bugzilla.suse.com/1097587 https://bugzilla.suse.com/1097588 https://bugzilla.suse.com/1098291 https://bugzilla.suse.com/1101674 https://bugzilla.suse.com/1109158 https://bugzilla.suse.com/1114279 https://bugzilla.suse.com/1117665 https://bugzilla.suse.com/1123080 https://bugzilla.suse.com/1133140 https://bugzilla.suse.com/1134303 https://bugzilla.suse.com/1135642 https://bugzilla.suse.com/1135854 https://bugzilla.suse.com/1135873 https://bugzilla.suse.com/1137799 https://bugzilla.suse.com/1140729 https://bugzilla.suse.com/1140845 https://bugzilla.suse.com/1140883 https://bugzilla.suse.com/1141600 https://bugzilla.suse.com/1142635 https://bugzilla.suse.com/1142667 https://bugzilla.suse.com/1144375 https://bugzilla.suse.com/1144449 https://bugzilla.suse.com/1145099 https://bugzilla.suse.com/1148410 https://bugzilla.suse.com/1150452 https://bugzilla.suse.com/1150465 https://bugzilla.suse.com/1150875 https://bugzilla.suse.com/1151508 https://bugzilla.suse.com/1152788 https://bugzilla.suse.com/1152791 https://bugzilla.suse.com/1153112 https://bugzilla.suse.com/1153158 https://bugzilla.suse.com/1153236 https://bugzilla.suse.com/1153263 https://bugzilla.suse.com/1153646 https://bugzilla.suse.com/1153713 https://bugzilla.suse.com/1153717 https://bugzilla.suse.com/1153718 https://bugzilla.suse.com/1153719 https://bugzilla.suse.com/1153811 https://bugzilla.suse.com/1154108 https://bugzilla.suse.com/1154189 https://bugzilla.suse.com/1154354 https://bugzilla.suse.com/1154372 https://bugzilla.suse.com/1154578 https://bugzilla.suse.com/1154607 https://bugzilla.suse.com/1154608 https://bugzilla.suse.com/1154610 https://bugzilla.suse.com/1154611 https://bugzilla.suse.com/1154651 https://bugzilla.suse.com/1154747 https://bugzilla.suse.com/118461_FIXME https://bugzilla.suse.com/133135_FIXME https://bugzilla.suse.com/135757_FIXME https://bugzilla.suse.com/147830_FIXME https://bugzilla.suse.com/147831_FIXME https://bugzilla.suse.com/158172_FIXME https://bugzilla.suse.com/165544_FIXME https://bugzilla.suse.com/166495_FIXME https://bugzilla.suse.com/172859_FIXME https://bugzilla.suse.com/172860_FIXME https://bugzilla.suse.com/181778_FIXME https://bugzilla.suse.com/229268_FIXME https://bugzilla.suse.com/229269_FIXME https://bugzilla.suse.com/229270_FIXME https://bugzilla.suse.com/229274_FIXME https://bugzilla.suse.com/229277_FIXME https://bugzilla.suse.com/229279_FIXME https://bugzilla.suse.com/229280_FIXME https://bugzilla.suse.com/229281_FIXME https://bugzilla.suse.com/229283_FIXME https://bugzilla.suse.com/229285_FIXME https://bugzilla.suse.com/229286_FIXME https://bugzilla.suse.com/229297_FIXME https://bugzilla.suse.com/296718_FIXME https://bugzilla.suse.com/358767_FIXME https://bugzilla.suse.com/359798_FIXME https://bugzilla.suse.com/802154 https://bugzilla.suse.com/814594 https://bugzilla.suse.com/919448 https://bugzilla.suse.com/987367 https://bugzilla.suse.com/998153

1 0

openSUSE-SU-2019:2393-1: moderate: Security update for python
by opensuse-security＠opensuse.org 27 Oct '19

27 Oct '19

openSUSE Security Update: Security update for python ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2393-1 Rating: moderate References: #1130840 #1149955 #1153238 Cross-References: CVE-2019-16056 CVE-2019-16935 CVE-2019-9947 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for python fixes the following issues: Security issues fixed: - CVE-2019-9947: Fixed an insufficient validation of URL paths with embedded whitespace or control characters that could allow HTTP header injections. (bsc#1130840) - CVE-2019-16056: Fixed a parser issue in the email module. (bsc#1149955) - CVE-2019-16935: Fixed a reflected XSS in python/Lib/DocXMLRPCServer.py (bsc#1153238). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2393=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libpython2_7-1_0-2.7.14-lp151.10.10.2 libpython2_7-1_0-debuginfo-2.7.14-lp151.10.10.2 python-2.7.14-lp151.10.10.1 python-base-2.7.14-lp151.10.10.2 python-base-debuginfo-2.7.14-lp151.10.10.2 python-base-debugsource-2.7.14-lp151.10.10.2 python-curses-2.7.14-lp151.10.10.1 python-curses-debuginfo-2.7.14-lp151.10.10.1 python-debuginfo-2.7.14-lp151.10.10.1 python-debugsource-2.7.14-lp151.10.10.1 python-demo-2.7.14-lp151.10.10.1 python-devel-2.7.14-lp151.10.10.2 python-gdbm-2.7.14-lp151.10.10.1 python-gdbm-debuginfo-2.7.14-lp151.10.10.1 python-idle-2.7.14-lp151.10.10.1 python-tk-2.7.14-lp151.10.10.1 python-tk-debuginfo-2.7.14-lp151.10.10.1 python-xml-2.7.14-lp151.10.10.2 python-xml-debuginfo-2.7.14-lp151.10.10.2 - openSUSE Leap 15.1 (x86_64): libpython2_7-1_0-32bit-2.7.14-lp151.10.10.2 libpython2_7-1_0-32bit-debuginfo-2.7.14-lp151.10.10.2 python-32bit-2.7.14-lp151.10.10.1 python-32bit-debuginfo-2.7.14-lp151.10.10.1 python-base-32bit-2.7.14-lp151.10.10.2 python-base-32bit-debuginfo-2.7.14-lp151.10.10.2 - openSUSE Leap 15.1 (noarch): python-doc-2.7.14-lp151.10.10.1 python-doc-pdf-2.7.14-lp151.10.10.1 References: https://www.suse.com/security/cve/CVE-2019-16056.html https://www.suse.com/security/cve/CVE-2019-16935.html https://www.suse.com/security/cve/CVE-2019-9947.html https://bugzilla.suse.com/1130840 https://bugzilla.suse.com/1149955 https://bugzilla.suse.com/1153238

1 0

openSUSE-RU-2019:2390-1: moderate: Recommended update for targetcli-fb
by maintenance＠opensuse.org 27 Oct '19

27 Oct '19

openSUSE Recommended Update: Recommended update for targetcli-fb ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2390-1 Rating: moderate References: #1145685 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for targetcli-fb fixes the following issues: - The /iscsi discovery_uath "enable" variable is a number, not a string, so treat it as such. (bsc#1145685) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2390=1 Package List: - openSUSE Leap 15.1 (noarch): python2-targetcli-fb-2.1.49-lp151.2.6.1 python3-targetcli-fb-2.1.49-lp151.2.6.1 targetcli-fb-common-2.1.49-lp151.2.6.1 References: https://bugzilla.suse.com/1145685

1 0

openSUSE-SU-2019:2389-1: moderate: Security update for python
by opensuse-security＠opensuse.org 27 Oct '19

27 Oct '19

openSUSE Security Update: Security update for python ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2389-1 Rating: moderate References: #1130840 #1149955 #1153238 Cross-References: CVE-2019-16056 CVE-2019-16935 CVE-2019-9947 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for python fixes the following issues: Security issues fixed: - CVE-2019-9947: Fixed an insufficient validation of URL paths with embedded whitespace or control characters that could allow HTTP header injections. (bsc#1130840) - CVE-2019-16056: Fixed a parser issue in the email module. (bsc#1149955) - CVE-2019-16935: Fixed a reflected XSS in python/Lib/DocXMLRPCServer.py (bsc#1153238). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2389=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): python-2.7.14-lp150.6.21.1 python-curses-2.7.14-lp150.6.21.1 python-curses-debuginfo-2.7.14-lp150.6.21.1 python-debuginfo-2.7.14-lp150.6.21.1 python-debugsource-2.7.14-lp150.6.21.1 python-demo-2.7.14-lp150.6.21.1 python-gdbm-2.7.14-lp150.6.21.1 python-gdbm-debuginfo-2.7.14-lp150.6.21.1 python-idle-2.7.14-lp150.6.21.1 python-tk-2.7.14-lp150.6.21.1 python-tk-debuginfo-2.7.14-lp150.6.21.1 - openSUSE Leap 15.0 (x86_64): python-32bit-2.7.14-lp150.6.21.1 python-32bit-debuginfo-2.7.14-lp150.6.21.1 References: https://www.suse.com/security/cve/CVE-2019-16056.html https://www.suse.com/security/cve/CVE-2019-16935.html https://www.suse.com/security/cve/CVE-2019-9947.html https://bugzilla.suse.com/1130840 https://bugzilla.suse.com/1149955 https://bugzilla.suse.com/1153238

1 0

openSUSE-SU-2019:2388-1: moderate: Security update for openconnect
by opensuse-security＠opensuse.org 27 Oct '19

27 Oct '19

openSUSE Security Update: Security update for openconnect ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2388-1 Rating: moderate References: #1151178 Cross-References: CVE-2019-16239 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for openconnect fixes the following issues: - CVE-2019-16239: Fixed a buffer overflow when a malicious server uses HTTP chunked encoding with crafted chunk sizes. (bsc#1151178) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2388=1 Package List: - openSUSE Leap 15.0 (x86_64): openconnect-7.08-lp150.5.3.1 openconnect-debuginfo-7.08-lp150.5.3.1 openconnect-debugsource-7.08-lp150.5.3.1 openconnect-devel-7.08-lp150.5.3.1 openconnect-doc-7.08-lp150.5.3.1 - openSUSE Leap 15.0 (noarch): openconnect-lang-7.08-lp150.5.3.1 References: https://www.suse.com/security/cve/CVE-2019-16239.html https://bugzilla.suse.com/1151178

1 0

openSUSE-RU-2019:2383-1: moderate: Recommended update for postfix
by maintenance＠opensuse.org 27 Oct '19

27 Oct '19

openSUSE Recommended Update: Recommended update for postfix ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2383-1 Rating: moderate References: #1142881 #1149724 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for postfix fixes the following issues: - Fixed build on Linux kernel 5.x by handling LINUX5 define (bsc#1149724) - Switch from md5 to sha256 for mkpostfixcert (bsc#1142881) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2383=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): postfix-3.3.1-lp150.15.1 postfix-debuginfo-3.3.1-lp150.15.1 postfix-debugsource-3.3.1-lp150.15.1 postfix-devel-3.3.1-lp150.15.1 postfix-lmdb-3.3.1-lp150.15.1 postfix-lmdb-debuginfo-3.3.1-lp150.15.1 postfix-mysql-3.3.1-lp150.15.1 postfix-mysql-debuginfo-3.3.1-lp150.15.1 postfix-postgresql-3.3.1-lp150.15.1 postfix-postgresql-debuginfo-3.3.1-lp150.15.1 - openSUSE Leap 15.0 (noarch): postfix-doc-3.3.1-lp150.15.1 References: https://bugzilla.suse.com/1142881 https://bugzilla.suse.com/1149724

1 0

openSUSE-RU-2019:2384-1: moderate: Recommended update for tcsh
by maintenance＠opensuse.org 27 Oct '19

27 Oct '19

openSUSE Recommended Update: Recommended update for tcsh ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2384-1 Rating: moderate References: #1151630 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for tcsh fixes the following issues: - Restore cleanup routines in case of an error (bsc#1151630) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2384=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): tcsh-6.20.00-lp150.2.6.1 tcsh-debuginfo-6.20.00-lp150.2.6.1 tcsh-debugsource-6.20.00-lp150.2.6.1 - openSUSE Leap 15.0 (noarch): tcsh-lang-6.20.00-lp150.2.6.1 References: https://bugzilla.suse.com/1151630

1 0

openSUSE-RU-2019:2387-1: moderate: Recommended update for tcsh
by maintenance＠opensuse.org 27 Oct '19

27 Oct '19

openSUSE Recommended Update: Recommended update for tcsh ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2387-1 Rating: moderate References: #1151630 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for tcsh fixes the following issues: - Restore cleanup routines in case of an error (bsc#1151630) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2387=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): tcsh-6.20.00-lp151.3.6.1 tcsh-debuginfo-6.20.00-lp151.3.6.1 tcsh-debugsource-6.20.00-lp151.3.6.1 - openSUSE Leap 15.1 (noarch): tcsh-lang-6.20.00-lp151.3.6.1 References: https://bugzilla.suse.com/1151630

1 0

openSUSE-RU-2019:2386-1: moderate: Recommended update for postfix
by maintenance＠opensuse.org 27 Oct '19

27 Oct '19

openSUSE Recommended Update: Recommended update for postfix ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2386-1 Rating: moderate References: #1142881 #1149724 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for postfix fixes the following issues: - Fixed build on Linux kernel 5.x by handling LINUX5 define (bsc#1149724) - Switch from md5 to sha256 for mkpostfixcert (bsc#1142881) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2386=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): postfix-3.3.1-lp151.2.9.1 postfix-debuginfo-3.3.1-lp151.2.9.1 postfix-debugsource-3.3.1-lp151.2.9.1 postfix-devel-3.3.1-lp151.2.9.1 postfix-lmdb-3.3.1-lp151.2.9.1 postfix-lmdb-debuginfo-3.3.1-lp151.2.9.1 postfix-mysql-3.3.1-lp151.2.9.1 postfix-mysql-debuginfo-3.3.1-lp151.2.9.1 postfix-postgresql-3.3.1-lp151.2.9.1 postfix-postgresql-debuginfo-3.3.1-lp151.2.9.1 - openSUSE Leap 15.1 (noarch): postfix-doc-3.3.1-lp151.2.9.1 References: https://bugzilla.suse.com/1142881 https://bugzilla.suse.com/1149724

1 0

openSUSE-RU-2019:2382-1: moderate: Recommended update for yast2-security
by maintenance＠opensuse.org 27 Oct '19

27 Oct '19

openSUSE Recommended Update: Recommended update for yast2-security ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2382-1 Rating: moderate References: #1147173 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-security fixes the following issues: - Supporting user defined permission files like "/etc/permissions.ultra". (bsc#1147173) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2382=1 Package List: - openSUSE Leap 15.0 (noarch): yast2-security-4.0.2-lp150.10.1 References: https://bugzilla.suse.com/1147173

1 0

openSUSE-SU-2019:2385-1: moderate: Security update for openconnect
by opensuse-security＠opensuse.org 27 Oct '19

27 Oct '19

openSUSE Security Update: Security update for openconnect ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2385-1 Rating: moderate References: #1151178 Cross-References: CVE-2019-16239 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for openconnect fixes the following issues: - CVE-2019-16239: Fixed a buffer overflow when a malicious server uses HTTP chunked encoding with crafted chunk sizes. (bsc#1151178) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2385=1 Package List: - openSUSE Leap 15.1 (noarch): openconnect-lang-7.08-lp151.6.3.1 - openSUSE Leap 15.1 (x86_64): openconnect-7.08-lp151.6.3.1 openconnect-debuginfo-7.08-lp151.6.3.1 openconnect-debugsource-7.08-lp151.6.3.1 openconnect-devel-7.08-lp151.6.3.1 openconnect-doc-7.08-lp151.6.3.1 References: https://www.suse.com/security/cve/CVE-2019-16239.html https://bugzilla.suse.com/1151178

1 0

openSUSE-RU-2019:2380-1: moderate: Recommended update for pciutils-ids
by maintenance＠opensuse.org 27 Oct '19

27 Oct '19

openSUSE Recommended Update: Recommended update for pciutils-ids ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2380-1 Rating: moderate References: #1127840 #1133581 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This is a version update for pciutils-ids to version 20190830 (bsc#1133581, bsc#1127840) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2380=1 Package List: - openSUSE Leap 15.0 (noarch): pciutils-ids-20190830-lp150.2.3.1 References: https://bugzilla.suse.com/1127840 https://bugzilla.suse.com/1133581

1 0

openSUSE-RU-2019:2381-1: moderate: Recommended update for yast2-security
by maintenance＠opensuse.org 27 Oct '19

27 Oct '19

openSUSE Recommended Update: Recommended update for yast2-security ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2381-1 Rating: moderate References: #1147173 #1150821 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for yast2-security provides the following fixes: - Support user defined permission files like "/etc/permissions.ultra". (bsc#1147173) - Fix a problem that was causing Autoyast to not export security settings. The "console_shutdown" entry was not been evaluated. (bsc#1150821) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2381=1 Package List: - openSUSE Leap 15.1 (noarch): yast2-security-4.1.4-lp151.2.3.1 References: https://bugzilla.suse.com/1147173 https://bugzilla.suse.com/1150821

1 0

openSUSE-SU-2019:2379-1: important: Security update for procps
by opensuse-security＠opensuse.org 26 Oct '19

26 Oct '19

openSUSE Security Update: Security update for procps ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2379-1 Rating: important References: #1092100 #1121753 Cross-References: CVE-2018-1122 CVE-2018-1123 CVE-2018-1124 CVE-2018-1125 CVE-2018-1126 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for procps fixes the following issues: procps was updated to 3.3.15. (bsc#1092100) Following security issues were fixed: - CVE-2018-1122: Prevent local privilege escalation in top. If a user ran top with HOME unset in an attacker-controlled directory, the attacker could have achieved privilege escalation by exploiting one of several vulnerabilities in the config_file() function (bsc#1092100). - CVE-2018-1123: Prevent denial of service in ps via mmap buffer overflow. Inbuilt protection in ps maped a guard page at the end of the overflowed buffer, ensuring that the impact of this flaw is limited to a crash (temporary denial of service) (bsc#1092100). - CVE-2018-1124: Prevent multiple integer overflows leading to a heap corruption in file2strvec function. This allowed a privilege escalation for a local attacker who can create entries in procfs by starting processes, which could result in crashes or arbitrary code execution in proc utilities run by other users (bsc#1092100). - CVE-2018-1125: Prevent stack buffer overflow in pgrep. This vulnerability was mitigated by FORTIFY limiting the impact to a crash (bsc#1092100). - CVE-2018-1126: Ensure correct integer size in proc/alloc.* to prevent truncation/integer overflow issues (bsc#1092100). Also this non-security issue was fixed: - Fix CPU summary showing old data. (bsc#1121753) The update to 3.3.15 contains the following fixes: * library: Increment to 8:0:1 No removals, no new functions Changes: slab and pid structures * library: Just check for SIGLOST and don't delete it * library: Fix integer overflow and LPE in file2strvec CVE-2018-1124 * library: Use size_t for alloc functions CVE-2018-1126 * library: Increase comm size to 64 * pgrep: Fix stack-based buffer overflow CVE-2018-1125 * pgrep: Remove >15 warning as comm can be longer * ps: Fix buffer overflow in output buffer, causing DOS CVE-2018-1123 * ps: Increase command name selection field to 64 * top: Don't use cwd for location of config CVE-2018-1122 * update translations * library: build on non-glibc systems * free: fix scaling on 32-bit systems * Revert "Support running with child namespaces" * library: Increment to 7:0:1 No changes, no removals New fuctions: numa_init, numa_max_node, numa_node_of_cpu, numa_uninit, xalloc_err_handler * doc: Document I idle state in ps.1 and top.1 * free: fix some of the SI multiples * kill: -l space between name parses correctly * library: dont use vm_min_free on non Linux * library: don't strip off wchan prefixes (ps & top) * pgrep: warn about 15+ char name only if -f not used * pgrep/pkill: only match in same namespace by default * pidof: specify separator between pids * pkill: Return 0 only if we can kill process * pmap: fix duplicate output line under '-x' option * ps: avoid eip/esp address truncations * ps: recognizes SCHED_DEADLINE as valid CPU scheduler * ps: display NUMA node under which a thread ran * ps: Add seconds display for cputime and time * ps: Add LUID field * sysctl: Permit empty string for value * sysctl: Don't segv when file not available * sysctl: Read and write large buffers * top: add config file support for XDG specification * top: eliminated minor libnuma memory leak * top: show fewer memory decimal places (configurable) * top: provide command line switch for memory scaling * top: provide command line switch for CPU States * top: provides more accurate cpu usage at startup * top: display NUMA node under which a thread ran * top: fix argument parsing quirk resulting in SEGV * top: delay interval accepts non-locale radix point * top: address a wishlist man page NLS suggestion * top: fix potential distortion in 'Mem' graph display * top: provide proper multi-byte string handling * top: startup defaults are fully customizable * watch: define HOST_NAME_MAX where not defined * vmstat: Fix alignment for disk partition format * watch: Support ANSI 39,49 reset sequences This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2379=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libprocps7-3.3.15-lp150.5.3.1 libprocps7-debuginfo-3.3.15-lp150.5.3.1 procps-3.3.15-lp150.5.3.1 procps-debuginfo-3.3.15-lp150.5.3.1 procps-debugsource-3.3.15-lp150.5.3.1 procps-devel-3.3.15-lp150.5.3.1 References: https://www.suse.com/security/cve/CVE-2018-1122.html https://www.suse.com/security/cve/CVE-2018-1123.html https://www.suse.com/security/cve/CVE-2018-1124.html https://www.suse.com/security/cve/CVE-2018-1125.html https://www.suse.com/security/cve/CVE-2018-1126.html https://bugzilla.suse.com/1092100 https://bugzilla.suse.com/1121753

1 0

openSUSE-RU-2019:2378-1: moderate: Recommended update for cifs-utils
by maintenance＠opensuse.org 26 Oct '19

26 Oct '19

openSUSE Recommended Update: Recommended update for cifs-utils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2378-1 Rating: moderate References: #1130528 #1132087 #1136031 #1149164 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for cifs-utils fixes the following issues: Update cifs-utils 6.9; (bsc#1132087); (bsc#1136031). * follow SMB default version changes in the kernel. * adds fixes for Azure * new smbinfo utility - Fix double-free in mount.cifs; (bsc#1149164). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2378=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): cifs-utils-6.9-lp150.2.6.1 cifs-utils-debuginfo-6.9-lp150.2.6.1 cifs-utils-debugsource-6.9-lp150.2.6.1 cifs-utils-devel-6.9-lp150.2.6.1 pam_cifscreds-6.9-lp150.2.6.1 pam_cifscreds-debuginfo-6.9-lp150.2.6.1 References: https://bugzilla.suse.com/1130528 https://bugzilla.suse.com/1132087 https://bugzilla.suse.com/1136031 https://bugzilla.suse.com/1149164

1 0

openSUSE-RU-2019:2377-1: moderate: Recommended update for yast2-services-manager
by maintenance＠opensuse.org 26 Oct '19

26 Oct '19

openSUSE Recommended Update: Recommended update for yast2-services-manager ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2377-1 Rating: moderate References: #1140735 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-services-manager fixes the following issues: - Set BaseTargets::GRAPHICAL and Target::GRAPHICAL if package "xdm" will be installed (instead of xorg-x11-server). (bsc#1140735) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2377=1 Package List: - openSUSE Leap 15.1 (noarch): yast2-services-manager-4.1.15-lp151.2.3.1 References: https://bugzilla.suse.com/1140735

1 0

openSUSE-SU-2019:2376-1: important: Security update for procps
by opensuse-security＠opensuse.org 26 Oct '19

26 Oct '19

openSUSE Security Update: Security update for procps ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2376-1 Rating: important References: #1092100 #1121753 Cross-References: CVE-2018-1122 CVE-2018-1123 CVE-2018-1124 CVE-2018-1125 CVE-2018-1126 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for procps fixes the following issues: procps was updated to 3.3.15. (bsc#1092100) Following security issues were fixed: - CVE-2018-1122: Prevent local privilege escalation in top. If a user ran top with HOME unset in an attacker-controlled directory, the attacker could have achieved privilege escalation by exploiting one of several vulnerabilities in the config_file() function (bsc#1092100). - CVE-2018-1123: Prevent denial of service in ps via mmap buffer overflow. Inbuilt protection in ps maped a guard page at the end of the overflowed buffer, ensuring that the impact of this flaw is limited to a crash (temporary denial of service) (bsc#1092100). - CVE-2018-1124: Prevent multiple integer overflows leading to a heap corruption in file2strvec function. This allowed a privilege escalation for a local attacker who can create entries in procfs by starting processes, which could result in crashes or arbitrary code execution in proc utilities run by other users (bsc#1092100). - CVE-2018-1125: Prevent stack buffer overflow in pgrep. This vulnerability was mitigated by FORTIFY limiting the impact to a crash (bsc#1092100). - CVE-2018-1126: Ensure correct integer size in proc/alloc.* to prevent truncation/integer overflow issues (bsc#1092100). Also this non-security issue was fixed: - Fix CPU summary showing old data. (bsc#1121753) The update to 3.3.15 contains the following fixes: * library: Increment to 8:0:1 No removals, no new functions Changes: slab and pid structures * library: Just check for SIGLOST and don't delete it * library: Fix integer overflow and LPE in file2strvec CVE-2018-1124 * library: Use size_t for alloc functions CVE-2018-1126 * library: Increase comm size to 64 * pgrep: Fix stack-based buffer overflow CVE-2018-1125 * pgrep: Remove >15 warning as comm can be longer * ps: Fix buffer overflow in output buffer, causing DOS CVE-2018-1123 * ps: Increase command name selection field to 64 * top: Don't use cwd for location of config CVE-2018-1122 * update translations * library: build on non-glibc systems * free: fix scaling on 32-bit systems * Revert "Support running with child namespaces" * library: Increment to 7:0:1 No changes, no removals New fuctions: numa_init, numa_max_node, numa_node_of_cpu, numa_uninit, xalloc_err_handler * doc: Document I idle state in ps.1 and top.1 * free: fix some of the SI multiples * kill: -l space between name parses correctly * library: dont use vm_min_free on non Linux * library: don't strip off wchan prefixes (ps & top) * pgrep: warn about 15+ char name only if -f not used * pgrep/pkill: only match in same namespace by default * pidof: specify separator between pids * pkill: Return 0 only if we can kill process * pmap: fix duplicate output line under '-x' option * ps: avoid eip/esp address truncations * ps: recognizes SCHED_DEADLINE as valid CPU scheduler * ps: display NUMA node under which a thread ran * ps: Add seconds display for cputime and time * ps: Add LUID field * sysctl: Permit empty string for value * sysctl: Don't segv when file not available * sysctl: Read and write large buffers * top: add config file support for XDG specification * top: eliminated minor libnuma memory leak * top: show fewer memory decimal places (configurable) * top: provide command line switch for memory scaling * top: provide command line switch for CPU States * top: provides more accurate cpu usage at startup * top: display NUMA node under which a thread ran * top: fix argument parsing quirk resulting in SEGV * top: delay interval accepts non-locale radix point * top: address a wishlist man page NLS suggestion * top: fix potential distortion in 'Mem' graph display * top: provide proper multi-byte string handling * top: startup defaults are fully customizable * watch: define HOST_NAME_MAX where not defined * vmstat: Fix alignment for disk partition format * watch: Support ANSI 39,49 reset sequences This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2376=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libprocps7-3.3.15-lp151.6.3.1 libprocps7-debuginfo-3.3.15-lp151.6.3.1 procps-3.3.15-lp151.6.3.1 procps-debuginfo-3.3.15-lp151.6.3.1 procps-debugsource-3.3.15-lp151.6.3.1 procps-devel-3.3.15-lp151.6.3.1 References: https://www.suse.com/security/cve/CVE-2018-1122.html https://www.suse.com/security/cve/CVE-2018-1123.html https://www.suse.com/security/cve/CVE-2018-1124.html https://www.suse.com/security/cve/CVE-2018-1125.html https://www.suse.com/security/cve/CVE-2018-1126.html https://bugzilla.suse.com/1092100 https://bugzilla.suse.com/1121753

1 0

openSUSE-RU-2019:2375-1: moderate: Recommended update for pciutils-ids
by maintenance＠opensuse.org 26 Oct '19

26 Oct '19

openSUSE Recommended Update: Recommended update for pciutils-ids ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2375-1 Rating: moderate References: #1127840 #1133581 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This is a version update for pciutils-ids to version 20190830 (bsc#1133581, bsc#1127840) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2375=1 Package List: - openSUSE Leap 15.1 (noarch): pciutils-ids-20190830-lp151.3.3.1 References: https://bugzilla.suse.com/1127840 https://bugzilla.suse.com/1133581

1 0

openSUSE-RU-2019:2372-1: moderate: Recommended update for dracut
by maintenance＠opensuse.org 24 Oct '19

24 Oct '19

openSUSE Recommended Update: Recommended update for dracut ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2372-1 Rating: moderate References: #1121238 #1140872 #1142775 #1150343 #1151552 #1152006 #1152650 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 7 recommended fixes can now be installed. Description: This update for dracut contains the following fixes: - Several fixes for dhcp calls with multiple nics. (bsc#1150343) - Only login to one target at a time. (bsc#1152650) - Only skip waiting for interfaces if netroot is set. (bsc#1152006) - Support xz compressed firmware files. (bsc#1151552) - Only login to one target at a time. (bsc#1121238) - Fix keymaps not getting included sometimes. (bsc#1140872) - Fix merge error for arm/aarch64. (bsc#1142775) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2372=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): dracut-044.2-lp151.2.6.1 dracut-debuginfo-044.2-lp151.2.6.1 dracut-debugsource-044.2-lp151.2.6.1 dracut-fips-044.2-lp151.2.6.1 dracut-ima-044.2-lp151.2.6.1 dracut-tools-044.2-lp151.2.6.1 References: https://bugzilla.suse.com/1121238 https://bugzilla.suse.com/1140872 https://bugzilla.suse.com/1142775 https://bugzilla.suse.com/1150343 https://bugzilla.suse.com/1151552 https://bugzilla.suse.com/1152006 https://bugzilla.suse.com/1152650

1 0

openSUSE-RU-2019:2374-1: moderate: Recommended update for pesign-obs-integration
by maintenance＠opensuse.org 24 Oct '19

24 Oct '19

openSUSE Recommended Update: Recommended update for pesign-obs-integration ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2374-1 Rating: moderate References: #1134303 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for pesign-obs-integration provides the following fixes: - Makes pesign also available on ARM. (bsc#1134303) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2374=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): pesign-obs-integration-10.1-lp151.2.3.1 References: https://bugzilla.suse.com/1134303

1 0

openSUSE-RU-2019:2373-1: moderate: Recommended update for fence-agents
by maintenance＠opensuse.org 24 Oct '19

24 Oct '19

openSUSE Recommended Update: Recommended update for fence-agents ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2373-1 Rating: moderate References: #1150504 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for fence-agents fixes the following issues: - Include the latest fixes upstream on the Alibaba Cloud fence-agent. (bsc#1150504) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2373=1 Package List: - openSUSE Leap 15.1 (x86_64): fence-agents-4.4.0+git.1558595666.5f79f9e9-lp151.2.6.1 fence-agents-amt_ws-4.4.0+git.1558595666.5f79f9e9-lp151.2.6.1 fence-agents-debuginfo-4.4.0+git.1558595666.5f79f9e9-lp151.2.6.1 fence-agents-debugsource-4.4.0+git.1558595666.5f79f9e9-lp151.2.6.1 fence-agents-devel-4.4.0+git.1558595666.5f79f9e9-lp151.2.6.1 References: https://bugzilla.suse.com/1150504

1 0

openSUSE-RU-2019:2371-1: important: Recommended update for xen
by maintenance＠opensuse.org 24 Oct '19

24 Oct '19

openSUSE Recommended Update: Recommended update for xen ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2371-1 Rating: important References: #1027519 #1111331 #1120095 #1133296 #1135799 #1137471 #1137717 #1138294 #1138563 #1143563 #1145240 #1145774 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves 6 vulnerabilities and has 6 fixes is now available. Description: This update for xen to version 4.12.1 fixes the following issues: - Fixed an issue which made Xen crash on AMD ROME based machines (bsc#1135799). - Xenpvnetboot is now ported correctly to Python 3 (bsc#1138563). - Added code to change LIBXL_HOTPLUG_TIMEOUT at runtime (bsc#1120095). The included README has details about the impact of this change - Fixed an issue where the speculative mitigation facilities reported wrong status (bsc#1143563). - Fixed an issue where Xen could not connect socket to /var/run/libvirt/libvirt-sock (bsc#1137471). - Fixed an HPS bug which did not allow to install Windows Server 2016 with 2 CPUs setting or above (bsc#1137717). - Fixed a segmentation fault in Libvrtd during live migration to a VM (bsc#1145774). - LTO is now disabled (bsc#1133296). - Fixed an issue where Xen could not pre-allocate 1 shadow page (bsc#1145240). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2371=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): xen-debugsource-4.12.1_02-lp151.2.3.1 xen-devel-4.12.1_02-lp151.2.3.1 xen-libs-4.12.1_02-lp151.2.3.1 xen-libs-debuginfo-4.12.1_02-lp151.2.3.1 xen-tools-domU-4.12.1_02-lp151.2.3.1 xen-tools-domU-debuginfo-4.12.1_02-lp151.2.3.1 - openSUSE Leap 15.1 (x86_64): xen-4.12.1_02-lp151.2.3.1 xen-doc-html-4.12.1_02-lp151.2.3.1 xen-libs-32bit-4.12.1_02-lp151.2.3.1 xen-libs-32bit-debuginfo-4.12.1_02-lp151.2.3.1 xen-tools-4.12.1_02-lp151.2.3.1 xen-tools-debuginfo-4.12.1_02-lp151.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-12126.html https://www.suse.com/security/cve/CVE-2018-12127.html https://www.suse.com/security/cve/CVE-2018-12130.html https://www.suse.com/security/cve/CVE-2019-11091.html https://www.suse.com/security/cve/CVE-2019-17349.html https://www.suse.com/security/cve/CVE-2019-17350.html https://bugzilla.suse.com/1027519 https://bugzilla.suse.com/1111331 https://bugzilla.suse.com/1120095 https://bugzilla.suse.com/1133296 https://bugzilla.suse.com/1135799 https://bugzilla.suse.com/1137471 https://bugzilla.suse.com/1137717 https://bugzilla.suse.com/1138294 https://bugzilla.suse.com/1138563 https://bugzilla.suse.com/1143563 https://bugzilla.suse.com/1145240 https://bugzilla.suse.com/1145774

1 0

openSUSE-RU-2019:2370-1: moderate: Recommended update for dracut
by maintenance＠opensuse.org 23 Oct '19

23 Oct '19

openSUSE Recommended Update: Recommended update for dracut ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2370-1 Rating: moderate References: #1121238 #1140872 #1142775 #1150343 #1151552 #1152006 #1152650 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has 7 recommended fixes can now be installed. Description: This update for dracut contains the following fixes: - Several fixes for dhcp calls with multiple nics. (bsc#1150343) - Only login to one target at a time. (bsc#1152650) - Only skip waiting for interfaces if netroot is set. (bsc#1152006) - Support xz compressed firmware files. (bsc#1151552) - Only login to one target at a time. (bsc#1121238) - Fix keymaps not getting included sometimes. (bsc#1140872) - Fix merge error for arm/aarch64. (bsc#1142775) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2370=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): dracut-044.2-lp150.14.33.1 dracut-debuginfo-044.2-lp150.14.33.1 dracut-debugsource-044.2-lp150.14.33.1 dracut-fips-044.2-lp150.14.33.1 dracut-ima-044.2-lp150.14.33.1 dracut-tools-044.2-lp150.14.33.1 References: https://bugzilla.suse.com/1121238 https://bugzilla.suse.com/1140872 https://bugzilla.suse.com/1142775 https://bugzilla.suse.com/1150343 https://bugzilla.suse.com/1151552 https://bugzilla.suse.com/1152006 https://bugzilla.suse.com/1152650

1 0

openSUSE-RU-2019:2368-1: moderate: Recommended update for darktable
by maintenance＠opensuse.org 23 Oct '19

23 Oct '19

openSUSE Recommended Update: Recommended update for darktable ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2368-1 Rating: moderate References: #1154752 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 openSUSE Backports SLE-15-SP1 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for darktable fixes the following issues: - New Features - April 1st game is now disabled by default - Add preference to disable/enable April 1st game - Print module default margin set 17mm - Add support for disabling base-curve by default - Add support for disabling sharpen by default - Bugfixes - Source with OpenMP can be compiled with GCC-9 and clang - Update skin tone preset on color-zones module - Fix file access permissions on macOS Catalina 10.15 - Fix shift+scroll only scrolling in one direction on macOS - Fix picasa, piwigo and facebook SSL support - Fix CSS issue on MacOS - Base Support - Epson R-D1s - Epson R-D1x - Fujifilm FinePix F770EXR - Fujifilm X-T30 (compressed) - Fujifilm XF10 - Kodak EasyShare Z981 - Kodak EasyShare Z990 - Leica C (Typ 112) (4:3) - Leica CL (dng) - Leica Q (Typ 116) (dng) - Leica Q2 (dng) - Leica SL (Typ 601) (dng) - Leica V-LUX (Typ 114) (3:2, 4:3, 16:9, 1:1) - Olympus E-M1X - Olympus TG-6 - Panasonic DC-G90 (4:3) - Panasonic DC-G91 (4:3) - Panasonic DC-G95 (4:3) - Panasonic DC-G99 (4:3) - Panasonic DC-ZS200 (3:2) - Panasonic DMC-TX1 (3:2) - Sony DSC-RX0M2 - Sony ILCE-6400 - Sony ILCE-7RM4 - White Balance Presets - Panasonic DC-LX100M2 - Noise Profiles - Panasonic DC-LX100M2 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2368=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2368=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2368=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-2368=1 Package List: - openSUSE Leap 15.1 (noarch): darktable-doc-2.6.3-lp151.3.3.1 - openSUSE Leap 15.1 (x86_64): darktable-2.6.3-lp151.3.3.1 darktable-debuginfo-2.6.3-lp151.3.3.1 darktable-debugsource-2.6.3-lp151.3.3.1 darktable-tools-basecurve-2.6.3-lp151.3.3.1 darktable-tools-basecurve-debuginfo-2.6.3-lp151.3.3.1 darktable-tools-noise-2.6.3-lp151.3.3.1 darktable-tools-noise-debuginfo-2.6.3-lp151.3.3.1 - openSUSE Leap 15.0 (noarch): darktable-doc-2.6.3-lp150.3.6.2 - openSUSE Leap 15.0 (x86_64): darktable-2.6.3-lp150.3.6.2 darktable-debuginfo-2.6.3-lp150.3.6.2 darktable-debugsource-2.6.3-lp150.3.6.2 darktable-tools-basecurve-2.6.3-lp150.3.6.2 darktable-tools-basecurve-debuginfo-2.6.3-lp150.3.6.2 darktable-tools-noise-2.6.3-lp150.3.6.2 darktable-tools-noise-debuginfo-2.6.3-lp150.3.6.2 - openSUSE Backports SLE-15-SP1 (x86_64): darktable-2.6.3-bp151.4.3.1 darktable-tools-basecurve-2.6.3-bp151.4.3.1 darktable-tools-noise-2.6.3-bp151.4.3.1 - openSUSE Backports SLE-15-SP1 (noarch): darktable-doc-2.6.3-bp151.4.3.1 - openSUSE Backports SLE-15 (x86_64): darktable-2.6.3-bp150.2.6.1 darktable-debuginfo-2.6.3-bp150.2.6.1 darktable-debugsource-2.6.3-bp150.2.6.1 darktable-tools-basecurve-2.6.3-bp150.2.6.1 darktable-tools-basecurve-debuginfo-2.6.3-bp150.2.6.1 darktable-tools-noise-2.6.3-bp150.2.6.1 darktable-tools-noise-debuginfo-2.6.3-bp150.2.6.1 - openSUSE Backports SLE-15 (noarch): darktable-doc-2.6.3-bp150.2.6.1 References: https://bugzilla.suse.com/1154752

1 0

openSUSE-RU-2019:2369-1: moderate: Recommended update for python-bugzilla
by maintenance＠opensuse.org 23 Oct '19

23 Oct '19

openSUSE Recommended Update: Recommended update for python-bugzilla ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2369-1 Rating: moderate References: #1098219 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 openSUSE Backports SLE-15-SP1 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-bugzilla fixes the following issues: - Backport from upstream: HTTP Basic authentication feature (as used by SUSE and openSUSE) (boo#1098219) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2369=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2369=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2369=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-2369=1 Package List: - openSUSE Leap 15.1 (noarch): python2-bugzilla-2.1.0-lp151.3.3.1 python3-bugzilla-2.1.0-lp151.3.3.1 - openSUSE Leap 15.0 (noarch): python2-bugzilla-2.1.0-lp150.2.3.1 python3-bugzilla-2.1.0-lp150.2.3.1 - openSUSE Backports SLE-15-SP1 (noarch): python2-bugzilla-2.1.0-bp151.4.3.1 python3-bugzilla-2.1.0-bp151.4.3.1 - openSUSE Backports SLE-15 (noarch): python2-bugzilla-2.1.0-bp150.3.3.1 python3-bugzilla-2.1.0-bp150.3.3.1 References: https://bugzilla.suse.com/1098219

1 0

openSUSE-RU-2019:2367-1: moderate: Recommended update for shim
by maintenance＠opensuse.org 23 Oct '19

23 Oct '19

openSUSE Recommended Update: Recommended update for shim ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2367-1 Rating: moderate References: #1118363 #1145676 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for shim fixes the following issues: - Update shim-install to specify the target for grub2-install and change the boot efi file name according to the architecture (FATE#325971, bsc#1145676) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2367=1 Package List: - openSUSE Leap 15.0 (x86_64): shim-14-lp150.15.3 shim-debuginfo-14-lp150.15.3 shim-debugsource-14-lp150.15.3 References: https://bugzilla.suse.com/1118363 https://bugzilla.suse.com/1145676

1 0

openSUSE-RU-2019:2366-1: moderate: Recommended update for ndctl
by maintenance＠opensuse.org 23 Oct '19

23 Oct '19

openSUSE Recommended Update: Recommended update for ndctl ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2366-1 Rating: moderate References: #1110425 #1145421 #1145471 #1145573 #1145577 #1145772 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 6 recommended fixes can now be installed. Description: This update for ndctl fixes the following issues: - Handle 'create-namespace' in label-less mode. (bsc#1145471 ltc#179886) - Use the same align value as original namespace on reconfigure. (bsc#1145577 ltc#178224) - Fix duplicate bus detection. (bsc#1145573 ltc#180249) - Introduce region capability objects. (bsc#1145772 ltc#178159) - Ensure mmap of BTT sections work with 64K page-sizes. (bsc#1145421 ltc#176079) - Revert to version 61.2. (bsc#1110425) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2366=1 Package List: - openSUSE Leap 15.1 (x86_64): libndctl-devel-64.1-lp151.2.3.1 libndctl6-64.1-lp151.2.3.1 libndctl6-debuginfo-64.1-lp151.2.3.1 ndctl-64.1-lp151.2.3.1 ndctl-debuginfo-64.1-lp151.2.3.1 ndctl-debugsource-64.1-lp151.2.3.1 References: https://bugzilla.suse.com/1110425 https://bugzilla.suse.com/1145421 https://bugzilla.suse.com/1145471 https://bugzilla.suse.com/1145573 https://bugzilla.suse.com/1145577 https://bugzilla.suse.com/1145772

1 0

openSUSE-SU-2019:2365-1: moderate: Security update for gcc7
by opensuse-security＠opensuse.org 22 Oct '19

22 Oct '19

openSUSE Security Update: Security update for gcc7 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2365-1 Rating: moderate References: #1071995 #1141897 #1142649 #1148517 #1149145 Cross-References: CVE-2019-14250 CVE-2019-15847 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves two vulnerabilities and has three fixes is now available. Description: This update for gcc7 to r275405 fixes the following issues: Security issues fixed: - CVE-2019-14250: Fixed an integer overflow in binutils (bsc#1142649). - CVE-2019-15847: Fixed an optimization in the POWER9 backend of gcc that could reduce the entropy of the random number generator (bsc#1149145). Non-security issue fixed: - Move Live Patching technology stack from kGraft to upstream klp (bsc#1071995, fate#323487). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2365=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): cpp7-7.4.1+r275405-lp150.12.1 cpp7-debuginfo-7.4.1+r275405-lp150.12.1 gcc7-7.4.1+r275405-lp150.12.1 gcc7-ada-7.4.1+r275405-lp150.12.1 gcc7-ada-debuginfo-7.4.1+r275405-lp150.12.1 gcc7-c++-7.4.1+r275405-lp150.12.1 gcc7-c++-debuginfo-7.4.1+r275405-lp150.12.1 gcc7-debuginfo-7.4.1+r275405-lp150.12.1 gcc7-debugsource-7.4.1+r275405-lp150.12.1 gcc7-fortran-7.4.1+r275405-lp150.12.1 gcc7-fortran-debuginfo-7.4.1+r275405-lp150.12.1 gcc7-go-7.4.1+r275405-lp150.12.1 gcc7-go-debuginfo-7.4.1+r275405-lp150.12.1 gcc7-locale-7.4.1+r275405-lp150.12.1 gcc7-obj-c++-7.4.1+r275405-lp150.12.1 gcc7-obj-c++-debuginfo-7.4.1+r275405-lp150.12.1 gcc7-objc-7.4.1+r275405-lp150.12.1 gcc7-objc-debuginfo-7.4.1+r275405-lp150.12.1 libada7-7.4.1+r275405-lp150.12.1 libada7-debuginfo-7.4.1+r275405-lp150.12.1 libasan4-7.4.1+r275405-lp150.12.1 libasan4-debuginfo-7.4.1+r275405-lp150.12.1 libcilkrts5-7.4.1+r275405-lp150.12.1 libcilkrts5-debuginfo-7.4.1+r275405-lp150.12.1 libgfortran4-7.4.1+r275405-lp150.12.1 libgfortran4-debuginfo-7.4.1+r275405-lp150.12.1 libgo11-7.4.1+r275405-lp150.12.1 libgo11-debuginfo-7.4.1+r275405-lp150.12.1 libobjc4-7.4.1+r275405-lp150.12.1 libobjc4-debuginfo-7.4.1+r275405-lp150.12.1 libstdc++6-devel-gcc7-7.4.1+r275405-lp150.12.1 libubsan0-7.4.1+r275405-lp150.12.1 libubsan0-debuginfo-7.4.1+r275405-lp150.12.1 - openSUSE Leap 15.0 (x86_64): gcc7-32bit-7.4.1+r275405-lp150.12.1 gcc7-ada-32bit-7.4.1+r275405-lp150.12.1 gcc7-c++-32bit-7.4.1+r275405-lp150.12.1 gcc7-fortran-32bit-7.4.1+r275405-lp150.12.1 gcc7-go-32bit-7.4.1+r275405-lp150.12.1 gcc7-obj-c++-32bit-7.4.1+r275405-lp150.12.1 gcc7-objc-32bit-7.4.1+r275405-lp150.12.1 libada7-32bit-7.4.1+r275405-lp150.12.1 libada7-32bit-debuginfo-7.4.1+r275405-lp150.12.1 libasan4-32bit-7.4.1+r275405-lp150.12.1 libasan4-32bit-debuginfo-7.4.1+r275405-lp150.12.1 libcilkrts5-32bit-7.4.1+r275405-lp150.12.1 libcilkrts5-32bit-debuginfo-7.4.1+r275405-lp150.12.1 libgfortran4-32bit-7.4.1+r275405-lp150.12.1 libgfortran4-32bit-debuginfo-7.4.1+r275405-lp150.12.1 libgo11-32bit-7.4.1+r275405-lp150.12.1 libgo11-32bit-debuginfo-7.4.1+r275405-lp150.12.1 libobjc4-32bit-7.4.1+r275405-lp150.12.1 libobjc4-32bit-debuginfo-7.4.1+r275405-lp150.12.1 libstdc++6-devel-gcc7-32bit-7.4.1+r275405-lp150.12.1 libubsan0-32bit-7.4.1+r275405-lp150.12.1 libubsan0-32bit-debuginfo-7.4.1+r275405-lp150.12.1 - openSUSE Leap 15.0 (noarch): gcc7-info-7.4.1+r275405-lp150.12.1 References: https://www.suse.com/security/cve/CVE-2019-14250.html https://www.suse.com/security/cve/CVE-2019-15847.html https://bugzilla.suse.com/1071995 https://bugzilla.suse.com/1141897 https://bugzilla.suse.com/1142649 https://bugzilla.suse.com/1148517 https://bugzilla.suse.com/1149145

1 0

openSUSE-SU-2019:2364-1: moderate: Security update for gcc7
by opensuse-security＠opensuse.org 22 Oct '19

22 Oct '19

openSUSE Security Update: Security update for gcc7 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2364-1 Rating: moderate References: #1071995 #1141897 #1142649 #1148517 #1149145 Cross-References: CVE-2019-14250 CVE-2019-15847 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves two vulnerabilities and has three fixes is now available. Description: This update for gcc7 to r275405 fixes the following issues: Security issues fixed: - CVE-2019-14250: Fixed an integer overflow in binutils (bsc#1142649). - CVE-2019-15847: Fixed an optimization in the POWER9 backend of gcc that could reduce the entropy of the random number generator (bsc#1149145). Non-security issue fixed: - Move Live Patching technology stack from kGraft to upstream klp (bsc#1071995, fate#323487). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2364=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): cpp7-7.4.1+r275405-lp151.2.6.1 cpp7-debuginfo-7.4.1+r275405-lp151.2.6.1 gcc7-7.4.1+r275405-lp151.2.6.1 gcc7-ada-7.4.1+r275405-lp151.2.6.1 gcc7-ada-debuginfo-7.4.1+r275405-lp151.2.6.1 gcc7-c++-7.4.1+r275405-lp151.2.6.1 gcc7-c++-debuginfo-7.4.1+r275405-lp151.2.6.1 gcc7-debuginfo-7.4.1+r275405-lp151.2.6.1 gcc7-debugsource-7.4.1+r275405-lp151.2.6.1 gcc7-fortran-7.4.1+r275405-lp151.2.6.1 gcc7-fortran-debuginfo-7.4.1+r275405-lp151.2.6.1 gcc7-go-7.4.1+r275405-lp151.2.6.1 gcc7-go-debuginfo-7.4.1+r275405-lp151.2.6.1 gcc7-locale-7.4.1+r275405-lp151.2.6.1 gcc7-obj-c++-7.4.1+r275405-lp151.2.6.1 gcc7-obj-c++-debuginfo-7.4.1+r275405-lp151.2.6.1 gcc7-objc-7.4.1+r275405-lp151.2.6.1 gcc7-objc-debuginfo-7.4.1+r275405-lp151.2.6.1 libada7-7.4.1+r275405-lp151.2.6.1 libada7-debuginfo-7.4.1+r275405-lp151.2.6.1 libasan4-7.4.1+r275405-lp151.2.6.1 libasan4-debuginfo-7.4.1+r275405-lp151.2.6.1 libcilkrts5-7.4.1+r275405-lp151.2.6.1 libcilkrts5-debuginfo-7.4.1+r275405-lp151.2.6.1 libgfortran4-7.4.1+r275405-lp151.2.6.1 libgfortran4-debuginfo-7.4.1+r275405-lp151.2.6.1 libgo11-7.4.1+r275405-lp151.2.6.1 libgo11-debuginfo-7.4.1+r275405-lp151.2.6.1 libobjc4-7.4.1+r275405-lp151.2.6.1 libobjc4-debuginfo-7.4.1+r275405-lp151.2.6.1 libstdc++6-devel-gcc7-7.4.1+r275405-lp151.2.6.1 libubsan0-7.4.1+r275405-lp151.2.6.1 libubsan0-debuginfo-7.4.1+r275405-lp151.2.6.1 - openSUSE Leap 15.1 (noarch): gcc7-info-7.4.1+r275405-lp151.2.6.1 - openSUSE Leap 15.1 (x86_64): gcc7-32bit-7.4.1+r275405-lp151.2.6.1 gcc7-ada-32bit-7.4.1+r275405-lp151.2.6.1 gcc7-c++-32bit-7.4.1+r275405-lp151.2.6.1 gcc7-fortran-32bit-7.4.1+r275405-lp151.2.6.1 gcc7-go-32bit-7.4.1+r275405-lp151.2.6.1 gcc7-obj-c++-32bit-7.4.1+r275405-lp151.2.6.1 gcc7-objc-32bit-7.4.1+r275405-lp151.2.6.1 libada7-32bit-7.4.1+r275405-lp151.2.6.1 libada7-32bit-debuginfo-7.4.1+r275405-lp151.2.6.1 libasan4-32bit-7.4.1+r275405-lp151.2.6.1 libasan4-32bit-debuginfo-7.4.1+r275405-lp151.2.6.1 libcilkrts5-32bit-7.4.1+r275405-lp151.2.6.1 libcilkrts5-32bit-debuginfo-7.4.1+r275405-lp151.2.6.1 libgfortran4-32bit-7.4.1+r275405-lp151.2.6.1 libgfortran4-32bit-debuginfo-7.4.1+r275405-lp151.2.6.1 libgo11-32bit-7.4.1+r275405-lp151.2.6.1 libgo11-32bit-debuginfo-7.4.1+r275405-lp151.2.6.1 libobjc4-32bit-7.4.1+r275405-lp151.2.6.1 libobjc4-32bit-debuginfo-7.4.1+r275405-lp151.2.6.1 libstdc++6-devel-gcc7-32bit-7.4.1+r275405-lp151.2.6.1 libubsan0-32bit-7.4.1+r275405-lp151.2.6.1 libubsan0-32bit-debuginfo-7.4.1+r275405-lp151.2.6.1 References: https://www.suse.com/security/cve/CVE-2019-14250.html https://www.suse.com/security/cve/CVE-2019-15847.html https://bugzilla.suse.com/1071995 https://bugzilla.suse.com/1141897 https://bugzilla.suse.com/1142649 https://bugzilla.suse.com/1148517 https://bugzilla.suse.com/1149145

1 0

openSUSE-RU-2019:2362-1: moderate: Recommended update for rpcbind
by maintenance＠opensuse.org 22 Oct '19

22 Oct '19

openSUSE Recommended Update: Recommended update for rpcbind ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2362-1 Rating: moderate References: #1142343 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for rpcbind fixes the following issues: - Return correct IP address with multiple ip addresses in the same subnet. (bsc#1142343) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2362=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): rpcbind-0.2.3-lp150.11.1 rpcbind-debuginfo-0.2.3-lp150.11.1 rpcbind-debugsource-0.2.3-lp150.11.1 References: https://bugzilla.suse.com/1142343

1 0

openSUSE-RU-2019:2363-1: moderate: Recommended update for rpcbind
by maintenance＠opensuse.org 22 Oct '19

22 Oct '19

openSUSE Recommended Update: Recommended update for rpcbind ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2363-1 Rating: moderate References: #1142343 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for rpcbind fixes the following issues: - Return correct IP address with multiple ip addresses in the same subnet. (bsc#1142343) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2363=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): rpcbind-0.2.3-lp151.5.6.1 rpcbind-debuginfo-0.2.3-lp151.5.6.1 rpcbind-debugsource-0.2.3-lp151.5.6.1 References: https://bugzilla.suse.com/1142343

1 0

openSUSE-SU-2019:2361-1: moderate: Security update for libreoffice
by opensuse-security＠opensuse.org 22 Oct '19

22 Oct '19

openSUSE Security Update: Security update for libreoffice ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2361-1 Rating: moderate References: #1149943 #1149944 Cross-References: CVE-2019-9854 CVE-2019-9855 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for libreoffice fixes the following issues: Updated to version 6.2.7.1. Security issues fixed: - CVE-2019-9854: Fixed unsafe URL assembly flaw (bsc#1149944). - CVE-2019-9855: Fixed path equivalence handling flaw (bsc#1149943) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2361=1 Package List: - openSUSE Leap 15.0 (noarch): libreoffice-branding-upstream-6.2.7.1-lp150.2.19.1 libreoffice-gdb-pretty-printers-6.2.7.1-lp150.2.19.1 libreoffice-glade-6.2.7.1-lp150.2.19.1 libreoffice-icon-themes-6.2.7.1-lp150.2.19.1 libreoffice-l10n-af-6.2.7.1-lp150.2.19.1 libreoffice-l10n-am-6.2.7.1-lp150.2.19.1 libreoffice-l10n-ar-6.2.7.1-lp150.2.19.1 libreoffice-l10n-as-6.2.7.1-lp150.2.19.1 libreoffice-l10n-ast-6.2.7.1-lp150.2.19.1 libreoffice-l10n-be-6.2.7.1-lp150.2.19.1 libreoffice-l10n-bg-6.2.7.1-lp150.2.19.1 libreoffice-l10n-bn-6.2.7.1-lp150.2.19.1 libreoffice-l10n-bn_IN-6.2.7.1-lp150.2.19.1 libreoffice-l10n-bo-6.2.7.1-lp150.2.19.1 libreoffice-l10n-br-6.2.7.1-lp150.2.19.1 libreoffice-l10n-brx-6.2.7.1-lp150.2.19.1 libreoffice-l10n-bs-6.2.7.1-lp150.2.19.1 libreoffice-l10n-ca-6.2.7.1-lp150.2.19.1 libreoffice-l10n-ca_valencia-6.2.7.1-lp150.2.19.1 libreoffice-l10n-cs-6.2.7.1-lp150.2.19.1 libreoffice-l10n-cy-6.2.7.1-lp150.2.19.1 libreoffice-l10n-da-6.2.7.1-lp150.2.19.1 libreoffice-l10n-de-6.2.7.1-lp150.2.19.1 libreoffice-l10n-dgo-6.2.7.1-lp150.2.19.1 libreoffice-l10n-dsb-6.2.7.1-lp150.2.19.1 libreoffice-l10n-dz-6.2.7.1-lp150.2.19.1 libreoffice-l10n-el-6.2.7.1-lp150.2.19.1 libreoffice-l10n-en-6.2.7.1-lp150.2.19.1 libreoffice-l10n-en_GB-6.2.7.1-lp150.2.19.1 libreoffice-l10n-en_ZA-6.2.7.1-lp150.2.19.1 libreoffice-l10n-eo-6.2.7.1-lp150.2.19.1 libreoffice-l10n-es-6.2.7.1-lp150.2.19.1 libreoffice-l10n-et-6.2.7.1-lp150.2.19.1 libreoffice-l10n-eu-6.2.7.1-lp150.2.19.1 libreoffice-l10n-fa-6.2.7.1-lp150.2.19.1 libreoffice-l10n-fi-6.2.7.1-lp150.2.19.1 libreoffice-l10n-fr-6.2.7.1-lp150.2.19.1 libreoffice-l10n-fy-6.2.7.1-lp150.2.19.1 libreoffice-l10n-ga-6.2.7.1-lp150.2.19.1 libreoffice-l10n-gd-6.2.7.1-lp150.2.19.1 libreoffice-l10n-gl-6.2.7.1-lp150.2.19.1 libreoffice-l10n-gu-6.2.7.1-lp150.2.19.1 libreoffice-l10n-gug-6.2.7.1-lp150.2.19.1 libreoffice-l10n-he-6.2.7.1-lp150.2.19.1 libreoffice-l10n-hi-6.2.7.1-lp150.2.19.1 libreoffice-l10n-hr-6.2.7.1-lp150.2.19.1 libreoffice-l10n-hsb-6.2.7.1-lp150.2.19.1 libreoffice-l10n-hu-6.2.7.1-lp150.2.19.1 libreoffice-l10n-id-6.2.7.1-lp150.2.19.1 libreoffice-l10n-is-6.2.7.1-lp150.2.19.1 libreoffice-l10n-it-6.2.7.1-lp150.2.19.1 libreoffice-l10n-ja-6.2.7.1-lp150.2.19.1 libreoffice-l10n-ka-6.2.7.1-lp150.2.19.1 libreoffice-l10n-kab-6.2.7.1-lp150.2.19.1 libreoffice-l10n-kk-6.2.7.1-lp150.2.19.1 libreoffice-l10n-km-6.2.7.1-lp150.2.19.1 libreoffice-l10n-kmr_Latn-6.2.7.1-lp150.2.19.1 libreoffice-l10n-kn-6.2.7.1-lp150.2.19.1 libreoffice-l10n-ko-6.2.7.1-lp150.2.19.1 libreoffice-l10n-kok-6.2.7.1-lp150.2.19.1 libreoffice-l10n-ks-6.2.7.1-lp150.2.19.1 libreoffice-l10n-lb-6.2.7.1-lp150.2.19.1 libreoffice-l10n-lo-6.2.7.1-lp150.2.19.1 libreoffice-l10n-lt-6.2.7.1-lp150.2.19.1 libreoffice-l10n-lv-6.2.7.1-lp150.2.19.1 libreoffice-l10n-mai-6.2.7.1-lp150.2.19.1 libreoffice-l10n-mk-6.2.7.1-lp150.2.19.1 libreoffice-l10n-ml-6.2.7.1-lp150.2.19.1 libreoffice-l10n-mn-6.2.7.1-lp150.2.19.1 libreoffice-l10n-mni-6.2.7.1-lp150.2.19.1 libreoffice-l10n-mr-6.2.7.1-lp150.2.19.1 libreoffice-l10n-my-6.2.7.1-lp150.2.19.1 libreoffice-l10n-nb-6.2.7.1-lp150.2.19.1 libreoffice-l10n-ne-6.2.7.1-lp150.2.19.1 libreoffice-l10n-nl-6.2.7.1-lp150.2.19.1 libreoffice-l10n-nn-6.2.7.1-lp150.2.19.1 libreoffice-l10n-nr-6.2.7.1-lp150.2.19.1 libreoffice-l10n-nso-6.2.7.1-lp150.2.19.1 libreoffice-l10n-oc-6.2.7.1-lp150.2.19.1 libreoffice-l10n-om-6.2.7.1-lp150.2.19.1 libreoffice-l10n-or-6.2.7.1-lp150.2.19.1 libreoffice-l10n-pa-6.2.7.1-lp150.2.19.1 libreoffice-l10n-pl-6.2.7.1-lp150.2.19.1 libreoffice-l10n-pt_BR-6.2.7.1-lp150.2.19.1 libreoffice-l10n-pt_PT-6.2.7.1-lp150.2.19.1 libreoffice-l10n-ro-6.2.7.1-lp150.2.19.1 libreoffice-l10n-ru-6.2.7.1-lp150.2.19.1 libreoffice-l10n-rw-6.2.7.1-lp150.2.19.1 libreoffice-l10n-sa_IN-6.2.7.1-lp150.2.19.1 libreoffice-l10n-sat-6.2.7.1-lp150.2.19.1 libreoffice-l10n-sd-6.2.7.1-lp150.2.19.1 libreoffice-l10n-si-6.2.7.1-lp150.2.19.1 libreoffice-l10n-sid-6.2.7.1-lp150.2.19.1 libreoffice-l10n-sk-6.2.7.1-lp150.2.19.1 libreoffice-l10n-sl-6.2.7.1-lp150.2.19.1 libreoffice-l10n-sq-6.2.7.1-lp150.2.19.1 libreoffice-l10n-sr-6.2.7.1-lp150.2.19.1 libreoffice-l10n-ss-6.2.7.1-lp150.2.19.1 libreoffice-l10n-st-6.2.7.1-lp150.2.19.1 libreoffice-l10n-sv-6.2.7.1-lp150.2.19.1 libreoffice-l10n-sw_TZ-6.2.7.1-lp150.2.19.1 libreoffice-l10n-ta-6.2.7.1-lp150.2.19.1 libreoffice-l10n-te-6.2.7.1-lp150.2.19.1 libreoffice-l10n-tg-6.2.7.1-lp150.2.19.1 libreoffice-l10n-th-6.2.7.1-lp150.2.19.1 libreoffice-l10n-tn-6.2.7.1-lp150.2.19.1 libreoffice-l10n-tr-6.2.7.1-lp150.2.19.1 libreoffice-l10n-ts-6.2.7.1-lp150.2.19.1 libreoffice-l10n-tt-6.2.7.1-lp150.2.19.1 libreoffice-l10n-ug-6.2.7.1-lp150.2.19.1 libreoffice-l10n-uk-6.2.7.1-lp150.2.19.1 libreoffice-l10n-uz-6.2.7.1-lp150.2.19.1 libreoffice-l10n-ve-6.2.7.1-lp150.2.19.1 libreoffice-l10n-vec-6.2.7.1-lp150.2.19.1 libreoffice-l10n-vi-6.2.7.1-lp150.2.19.1 libreoffice-l10n-xh-6.2.7.1-lp150.2.19.1 libreoffice-l10n-zh_CN-6.2.7.1-lp150.2.19.1 libreoffice-l10n-zh_TW-6.2.7.1-lp150.2.19.1 libreoffice-l10n-zu-6.2.7.1-lp150.2.19.1 - openSUSE Leap 15.0 (x86_64): libreoffice-6.2.7.1-lp150.2.19.1 libreoffice-base-6.2.7.1-lp150.2.19.1 libreoffice-base-debuginfo-6.2.7.1-lp150.2.19.1 libreoffice-base-drivers-firebird-6.2.7.1-lp150.2.19.1 libreoffice-base-drivers-firebird-debuginfo-6.2.7.1-lp150.2.19.1 libreoffice-base-drivers-postgresql-6.2.7.1-lp150.2.19.1 libreoffice-base-drivers-postgresql-debuginfo-6.2.7.1-lp150.2.19.1 libreoffice-calc-6.2.7.1-lp150.2.19.1 libreoffice-calc-debuginfo-6.2.7.1-lp150.2.19.1 libreoffice-calc-extensions-6.2.7.1-lp150.2.19.1 libreoffice-debuginfo-6.2.7.1-lp150.2.19.1 libreoffice-debugsource-6.2.7.1-lp150.2.19.1 libreoffice-draw-6.2.7.1-lp150.2.19.1 libreoffice-draw-debuginfo-6.2.7.1-lp150.2.19.1 libreoffice-filters-optional-6.2.7.1-lp150.2.19.1 libreoffice-gnome-6.2.7.1-lp150.2.19.1 libreoffice-gnome-debuginfo-6.2.7.1-lp150.2.19.1 libreoffice-gtk2-6.2.7.1-lp150.2.19.1 libreoffice-gtk2-debuginfo-6.2.7.1-lp150.2.19.1 libreoffice-gtk3-6.2.7.1-lp150.2.19.1 libreoffice-gtk3-debuginfo-6.2.7.1-lp150.2.19.1 libreoffice-impress-6.2.7.1-lp150.2.19.1 libreoffice-impress-debuginfo-6.2.7.1-lp150.2.19.1 libreoffice-mailmerge-6.2.7.1-lp150.2.19.1 libreoffice-math-6.2.7.1-lp150.2.19.1 libreoffice-math-debuginfo-6.2.7.1-lp150.2.19.1 libreoffice-officebean-6.2.7.1-lp150.2.19.1 libreoffice-officebean-debuginfo-6.2.7.1-lp150.2.19.1 libreoffice-pyuno-6.2.7.1-lp150.2.19.1 libreoffice-pyuno-debuginfo-6.2.7.1-lp150.2.19.1 libreoffice-qt5-6.2.7.1-lp150.2.19.1 libreoffice-qt5-debuginfo-6.2.7.1-lp150.2.19.1 libreoffice-sdk-6.2.7.1-lp150.2.19.1 libreoffice-sdk-debuginfo-6.2.7.1-lp150.2.19.1 libreoffice-sdk-doc-6.2.7.1-lp150.2.19.1 libreoffice-writer-6.2.7.1-lp150.2.19.1 libreoffice-writer-debuginfo-6.2.7.1-lp150.2.19.1 libreoffice-writer-extensions-6.2.7.1-lp150.2.19.1 libreofficekit-6.2.7.1-lp150.2.19.1 libreofficekit-devel-6.2.7.1-lp150.2.19.1 References: https://www.suse.com/security/cve/CVE-2019-9854.html https://www.suse.com/security/cve/CVE-2019-9855.html https://bugzilla.suse.com/1149943 https://bugzilla.suse.com/1149944

1 0

openSUSE-RU-2019:2356-1: moderate: Recommended update for mdadm
by maintenance＠opensuse.org 21 Oct '19

21 Oct '19

openSUSE Recommended Update: Recommended update for mdadm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2356-1 Rating: moderate References: #1139709 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for mdadm fixes the following issues: - Add '--no-devices' option to mdadm to avoid component devices detail information. (bsc#1139709) - Add '--no-devices' option to the udev for calling 'mdadm --detail'. (bsc#1139709) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2356=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): mdadm-4.0-lp150.8.6.1 mdadm-debuginfo-4.0-lp150.8.6.1 mdadm-debugsource-4.0-lp150.8.6.1 References: https://bugzilla.suse.com/1139709

1 0

openSUSE-RU-2019:2355-1: moderate: Recommended update for SUSEConnect
by maintenance＠opensuse.org 21 Oct '19

21 Oct '19

openSUSE Recommended Update: Recommended update for SUSEConnect ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2355-1 Rating: moderate References: #1124318 #1130864 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for SUSEConnect fixes the following issues: - Fixes an error when trying to activate the PackageHub extension the first time (bsc#1124318) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2355=1 Package List: - openSUSE Leap 15.0 (x86_64): SUSEConnect-0.3.22-lp150.2.23.1 References: https://bugzilla.suse.com/1124318 https://bugzilla.suse.com/1130864

1 0

openSUSE-RU-2019:2360-1: moderate: Recommended update for mdadm
by maintenance＠opensuse.org 21 Oct '19

21 Oct '19

openSUSE Recommended Update: Recommended update for mdadm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2360-1 Rating: moderate References: #1139709 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for mdadm fixes the following issues: - Add '--no-devices' option to mdadm to avoid component devices detail information. (bsc#1139709) - Add '--no-devices' option to the udev for calling 'mdadm --detail'. (bsc#1139709) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2360=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): mdadm-4.1-lp151.4.3.1 mdadm-debuginfo-4.1-lp151.4.3.1 mdadm-debugsource-4.1-lp151.4.3.1 References: https://bugzilla.suse.com/1139709

1 0

openSUSE-RU-2019:2359-1: moderate: Recommended update for SUSEConnect
by maintenance＠opensuse.org 21 Oct '19

21 Oct '19

openSUSE Recommended Update: Recommended update for SUSEConnect ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2359-1 Rating: moderate References: #1124318 #1130864 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for SUSEConnect fixes the following issues: - Fixes an error when trying to activate the PackageHub extension the first time (bsc#1124318) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2359=1 Package List: - openSUSE Leap 15.1 (x86_64): SUSEConnect-0.3.22-lp151.2.9.1 References: https://bugzilla.suse.com/1124318 https://bugzilla.suse.com/1130864

1 0

openSUSE-RU-2019:2358-1: moderate: Recommended update for yast2-packager
by maintenance＠opensuse.org 21 Oct '19

21 Oct '19

openSUSE Recommended Update: Recommended update for yast2-packager ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2358-1 Rating: moderate References: #1148536 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-packager provides the following fixes: - Avoid error when generating some warnings. (bsc#1148536) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2358=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): yast2-packager-4.0.74-lp150.2.19.1 References: https://bugzilla.suse.com/1148536

1 0

openSUSE-RU-2019:2357-1: moderate: Recommended update for pesign-obs-integration
by maintenance＠opensuse.org 21 Oct '19

21 Oct '19

openSUSE Recommended Update: Recommended update for pesign-obs-integration ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2357-1 Rating: moderate References: #1134303 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for pesign-obs-integration provides the following fixes: - Makes pesign also available on ARM. (bsc#1134303) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2357=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): pesign-obs-integration-10.0-lp150.11.1 References: https://bugzilla.suse.com/1134303

1 0

openSUSE-RU-2019:2354-1: moderate: Recommended update for polkit-default-privs
by maintenance＠opensuse.org 21 Oct '19

21 Oct '19

openSUSE Recommended Update: Recommended update for polkit-default-privs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2354-1 Rating: moderate References: #1147070 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for polkit-default-privs fixes the following issues: - backport of whitelistings for polkit-untracked-privilege warnings (bsc#1147070). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2354=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): rpmlint-mini-1.10-lp151.5.6.2 rpmlint-mini-debuginfo-1.10-lp151.5.6.2 rpmlint-mini-debugsource-1.10-lp151.5.6.2 - openSUSE Leap 15.1 (noarch): polkit-default-privs-13.2-lp151.16.6.1 References: https://bugzilla.suse.com/1147070

1 0

openSUSE-RU-2019:2353-1: moderate: Recommended update for libdb-4_8
by maintenance＠opensuse.org 21 Oct '19

21 Oct '19

openSUSE Recommended Update: Recommended update for libdb-4_8 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2353-1 Rating: moderate References: #1148244 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libdb-4_8 fixes the following issues: - Add off-page deadlock patch as found and documented by Red Hat. (bsc#1148244) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2353=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): db48-utils-4.8.30-lp151.7.3.1 db48-utils-debuginfo-4.8.30-lp151.7.3.1 libdb-4_8-4.8.30-lp151.7.3.1 libdb-4_8-debuginfo-4.8.30-lp151.7.3.1 libdb-4_8-debugsource-4.8.30-lp151.7.3.1 libdb-4_8-devel-4.8.30-lp151.7.3.1 - openSUSE Leap 15.1 (x86_64): libdb-4_8-32bit-4.8.30-lp151.7.3.1 libdb-4_8-32bit-debuginfo-4.8.30-lp151.7.3.1 libdb-4_8-devel-32bit-4.8.30-lp151.7.3.1 libdb_java-4_8-4.8.30-lp151.7.3.1 libdb_java-4_8-debuginfo-4.8.30-lp151.7.3.1 libdb_java-4_8-debugsource-4.8.30-lp151.7.3.1 libdb_java-4_8-devel-4.8.30-lp151.7.3.1 - openSUSE Leap 15.1 (noarch): db48-doc-4.8.30-lp151.7.3.1 References: https://bugzilla.suse.com/1148244

1 0

openSUSE-RU-2019:2352-1: moderate: Recommended update for e2fsprogs
by maintenance＠opensuse.org 21 Oct '19

21 Oct '19

openSUSE Recommended Update: Recommended update for e2fsprogs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2352-1 Rating: moderate References: #1145716 #1152101 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for e2fsprogs fixes the following issues: Security issue fixed: - CVE-2019-5094: Fixed an arbitrary code execution via specially crafted ext4 file systems. (bsc#1152101) Non-security issue fixed: - libext2fs: Call fsync(2) to clear stale errors for a new a unix I/O channel. (bsc#1145716) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2352=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): e2fsprogs-1.43.8-lp151.5.6.1 e2fsprogs-debuginfo-1.43.8-lp151.5.6.1 e2fsprogs-debugsource-1.43.8-lp151.5.6.1 e2fsprogs-devel-1.43.8-lp151.5.6.1 libcom_err-devel-1.43.8-lp151.5.6.1 libcom_err-devel-static-1.43.8-lp151.5.6.1 libcom_err2-1.43.8-lp151.5.6.1 libcom_err2-debuginfo-1.43.8-lp151.5.6.1 libext2fs-devel-1.43.8-lp151.5.6.1 libext2fs-devel-static-1.43.8-lp151.5.6.1 libext2fs2-1.43.8-lp151.5.6.1 libext2fs2-debuginfo-1.43.8-lp151.5.6.1 - openSUSE Leap 15.1 (x86_64): e2fsprogs-32bit-debuginfo-1.43.8-lp151.5.6.1 libcom_err-devel-32bit-1.43.8-lp151.5.6.1 libcom_err2-32bit-1.43.8-lp151.5.6.1 libcom_err2-32bit-debuginfo-1.43.8-lp151.5.6.1 libext2fs-devel-32bit-1.43.8-lp151.5.6.1 libext2fs2-32bit-1.43.8-lp151.5.6.1 libext2fs2-32bit-debuginfo-1.43.8-lp151.5.6.1 References: https://www.suse.com/security/cve/CVE-2019-5094.html https://bugzilla.suse.com/1145716 https://bugzilla.suse.com/1152101

1 0

openSUSE-RU-2019:2349-1: moderate: Recommended update for e2fsprogs
by maintenance＠opensuse.org 21 Oct '19

21 Oct '19

openSUSE Recommended Update: Recommended update for e2fsprogs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2349-1 Rating: moderate References: #1145716 #1152101 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for e2fsprogs fixes the following issues: Security issue fixed: - CVE-2019-5094: Fixed an arbitrary code execution via specially crafted ext4 file systems. (bsc#1152101) Non-security issue fixed: - libext2fs: Call fsync(2) to clear stale errors for a new a unix I/O channel. (bsc#1145716) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2349=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): e2fsprogs-1.43.8-lp150.11.1 e2fsprogs-debuginfo-1.43.8-lp150.11.1 e2fsprogs-debugsource-1.43.8-lp150.11.1 e2fsprogs-devel-1.43.8-lp150.11.1 libcom_err-devel-1.43.8-lp150.11.1 libcom_err-devel-static-1.43.8-lp150.11.1 libcom_err2-1.43.8-lp150.11.1 libcom_err2-debuginfo-1.43.8-lp150.11.1 libext2fs-devel-1.43.8-lp150.11.1 libext2fs-devel-static-1.43.8-lp150.11.1 libext2fs2-1.43.8-lp150.11.1 libext2fs2-debuginfo-1.43.8-lp150.11.1 - openSUSE Leap 15.0 (x86_64): e2fsprogs-32bit-debuginfo-1.43.8-lp150.11.1 libcom_err-devel-32bit-1.43.8-lp150.11.1 libcom_err2-32bit-1.43.8-lp150.11.1 libcom_err2-32bit-debuginfo-1.43.8-lp150.11.1 libext2fs-devel-32bit-1.43.8-lp150.11.1 libext2fs2-32bit-1.43.8-lp150.11.1 libext2fs2-32bit-debuginfo-1.43.8-lp150.11.1 References: https://www.suse.com/security/cve/CVE-2019-5094.html https://bugzilla.suse.com/1145716 https://bugzilla.suse.com/1152101

1 0

openSUSE-RU-2019:2350-1: moderate: Recommended update for gnu-compilers-hpc
by maintenance＠opensuse.org 21 Oct '19

21 Oct '19

openSUSE Recommended Update: Recommended update for gnu-compilers-hpc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2350-1 Rating: moderate References: #1116458 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gnu-compilers-hpc fixes the following issues: - Add support for gcc v.8 and v.9 for SLE-15 & SLE-15-SP1. (jsc#SLE-7766) - Add links from the generic compiler binary names cc, cpp, c++ and fc to the compiler specific names in the package private binary directory. - Define _hpc_gnu_module (bsc#1116458). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2350=1 Package List: - openSUSE Leap 15.0 (noarch): gnu-compilers-hpc-1.4-lp150.5.3.1 gnu-compilers-hpc-devel-1.4-lp150.5.3.1 gnu-compilers-hpc-macros-devel-1.4-lp150.5.3.1 gnu8-compilers-hpc-1.4-lp150.5.3.1 gnu8-compilers-hpc-devel-1.4-lp150.5.3.1 gnu8-compilers-hpc-macros-devel-1.4-lp150.5.3.1 References: https://bugzilla.suse.com/1116458

1 0

openSUSE-RU-2019:2351-1: moderate: Recommended update for libdb-4_8
by maintenance＠opensuse.org 21 Oct '19

21 Oct '19

openSUSE Recommended Update: Recommended update for libdb-4_8 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2351-1 Rating: moderate References: #1148244 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libdb-4_8 fixes the following issues: - Add off-page deadlock patch as found and documented by Red Hat. (bsc#1148244) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2351=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): db48-utils-4.8.30-lp150.6.3.1 db48-utils-debuginfo-4.8.30-lp150.6.3.1 libdb-4_8-4.8.30-lp150.6.3.1 libdb-4_8-debuginfo-4.8.30-lp150.6.3.1 libdb-4_8-debugsource-4.8.30-lp150.6.3.1 libdb-4_8-devel-4.8.30-lp150.6.3.1 - openSUSE Leap 15.0 (noarch): db48-doc-4.8.30-lp150.6.3.1 - openSUSE Leap 15.0 (x86_64): libdb-4_8-32bit-4.8.30-lp150.6.3.1 libdb-4_8-32bit-debuginfo-4.8.30-lp150.6.3.1 libdb-4_8-devel-32bit-4.8.30-lp150.6.3.1 libdb_java-4_8-4.8.30-lp150.6.3.1 libdb_java-4_8-debuginfo-4.8.30-lp150.6.3.1 libdb_java-4_8-debugsource-4.8.30-lp150.6.3.1 libdb_java-4_8-devel-4.8.30-lp150.6.3.1 References: https://bugzilla.suse.com/1148244

1 0

openSUSE-SU-2019:2347-1: moderate: Security update for lighttpd
by opensuse-security＠opensuse.org 20 Oct '19

20 Oct '19

openSUSE Security Update: Security update for lighttpd ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2347-1 Rating: moderate References: #1087369 #1111733 #1115016 #1153722 Cross-References: CVE-2018-19052 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 openSUSE Backports SLE-15-SP1 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that solves one vulnerability and has three fixes is now available. Description: This update for lighttpd to version 1.4.54 fixes the following issues: Security issues fixed: - CVE-2018-19052: Fixed a path traversal in mod_alias (boo#1115016). - Changed the default TLS configuration of lighttpd for better security out-of-the-box (boo#1087369). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2347=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2347=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2347=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-2347=1 Package List: - openSUSE Leap 15.1 (x86_64): lighttpd-1.4.54-lp151.3.3.1 lighttpd-debuginfo-1.4.54-lp151.3.3.1 lighttpd-debugsource-1.4.54-lp151.3.3.1 lighttpd-mod_authn_gssapi-1.4.54-lp151.3.3.1 lighttpd-mod_authn_gssapi-debuginfo-1.4.54-lp151.3.3.1 lighttpd-mod_authn_ldap-1.4.54-lp151.3.3.1 lighttpd-mod_authn_ldap-debuginfo-1.4.54-lp151.3.3.1 lighttpd-mod_authn_mysql-1.4.54-lp151.3.3.1 lighttpd-mod_authn_mysql-debuginfo-1.4.54-lp151.3.3.1 lighttpd-mod_authn_pam-1.4.54-lp151.3.3.1 lighttpd-mod_authn_pam-debuginfo-1.4.54-lp151.3.3.1 lighttpd-mod_authn_sasl-1.4.54-lp151.3.3.1 lighttpd-mod_authn_sasl-debuginfo-1.4.54-lp151.3.3.1 lighttpd-mod_cml-1.4.54-lp151.3.3.1 lighttpd-mod_cml-debuginfo-1.4.54-lp151.3.3.1 lighttpd-mod_geoip-1.4.54-lp151.3.3.1 lighttpd-mod_geoip-debuginfo-1.4.54-lp151.3.3.1 lighttpd-mod_magnet-1.4.54-lp151.3.3.1 lighttpd-mod_magnet-debuginfo-1.4.54-lp151.3.3.1 lighttpd-mod_maxminddb-1.4.54-lp151.3.3.1 lighttpd-mod_maxminddb-debuginfo-1.4.54-lp151.3.3.1 lighttpd-mod_mysql_vhost-1.4.54-lp151.3.3.1 lighttpd-mod_mysql_vhost-debuginfo-1.4.54-lp151.3.3.1 lighttpd-mod_rrdtool-1.4.54-lp151.3.3.1 lighttpd-mod_rrdtool-debuginfo-1.4.54-lp151.3.3.1 lighttpd-mod_trigger_b4_dl-1.4.54-lp151.3.3.1 lighttpd-mod_trigger_b4_dl-debuginfo-1.4.54-lp151.3.3.1 lighttpd-mod_vhostdb_dbi-1.4.54-lp151.3.3.1 lighttpd-mod_vhostdb_dbi-debuginfo-1.4.54-lp151.3.3.1 lighttpd-mod_vhostdb_ldap-1.4.54-lp151.3.3.1 lighttpd-mod_vhostdb_ldap-debuginfo-1.4.54-lp151.3.3.1 lighttpd-mod_vhostdb_mysql-1.4.54-lp151.3.3.1 lighttpd-mod_vhostdb_mysql-debuginfo-1.4.54-lp151.3.3.1 lighttpd-mod_vhostdb_pgsql-1.4.54-lp151.3.3.1 lighttpd-mod_vhostdb_pgsql-debuginfo-1.4.54-lp151.3.3.1 lighttpd-mod_webdav-1.4.54-lp151.3.3.1 lighttpd-mod_webdav-debuginfo-1.4.54-lp151.3.3.1 - openSUSE Leap 15.0 (x86_64): lighttpd-1.4.54-lp150.2.3.1 lighttpd-debuginfo-1.4.54-lp150.2.3.1 lighttpd-debugsource-1.4.54-lp150.2.3.1 lighttpd-mod_authn_gssapi-1.4.54-lp150.2.3.1 lighttpd-mod_authn_gssapi-debuginfo-1.4.54-lp150.2.3.1 lighttpd-mod_authn_ldap-1.4.54-lp150.2.3.1 lighttpd-mod_authn_ldap-debuginfo-1.4.54-lp150.2.3.1 lighttpd-mod_authn_mysql-1.4.54-lp150.2.3.1 lighttpd-mod_authn_mysql-debuginfo-1.4.54-lp150.2.3.1 lighttpd-mod_authn_pam-1.4.54-lp150.2.3.1 lighttpd-mod_authn_pam-debuginfo-1.4.54-lp150.2.3.1 lighttpd-mod_authn_sasl-1.4.54-lp150.2.3.1 lighttpd-mod_authn_sasl-debuginfo-1.4.54-lp150.2.3.1 lighttpd-mod_cml-1.4.54-lp150.2.3.1 lighttpd-mod_cml-debuginfo-1.4.54-lp150.2.3.1 lighttpd-mod_geoip-1.4.54-lp150.2.3.1 lighttpd-mod_geoip-debuginfo-1.4.54-lp150.2.3.1 lighttpd-mod_magnet-1.4.54-lp150.2.3.1 lighttpd-mod_magnet-debuginfo-1.4.54-lp150.2.3.1 lighttpd-mod_maxminddb-1.4.54-lp150.2.3.1 lighttpd-mod_maxminddb-debuginfo-1.4.54-lp150.2.3.1 lighttpd-mod_mysql_vhost-1.4.54-lp150.2.3.1 lighttpd-mod_mysql_vhost-debuginfo-1.4.54-lp150.2.3.1 lighttpd-mod_rrdtool-1.4.54-lp150.2.3.1 lighttpd-mod_rrdtool-debuginfo-1.4.54-lp150.2.3.1 lighttpd-mod_trigger_b4_dl-1.4.54-lp150.2.3.1 lighttpd-mod_trigger_b4_dl-debuginfo-1.4.54-lp150.2.3.1 lighttpd-mod_vhostdb_dbi-1.4.54-lp150.2.3.1 lighttpd-mod_vhostdb_dbi-debuginfo-1.4.54-lp150.2.3.1 lighttpd-mod_vhostdb_ldap-1.4.54-lp150.2.3.1 lighttpd-mod_vhostdb_ldap-debuginfo-1.4.54-lp150.2.3.1 lighttpd-mod_vhostdb_mysql-1.4.54-lp150.2.3.1 lighttpd-mod_vhostdb_mysql-debuginfo-1.4.54-lp150.2.3.1 lighttpd-mod_vhostdb_pgsql-1.4.54-lp150.2.3.1 lighttpd-mod_vhostdb_pgsql-debuginfo-1.4.54-lp150.2.3.1 lighttpd-mod_webdav-1.4.54-lp150.2.3.1 lighttpd-mod_webdav-debuginfo-1.4.54-lp150.2.3.1 - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): lighttpd-1.4.54-bp151.4.3.1 lighttpd-mod_authn_gssapi-1.4.54-bp151.4.3.1 lighttpd-mod_authn_ldap-1.4.54-bp151.4.3.1 lighttpd-mod_authn_mysql-1.4.54-bp151.4.3.1 lighttpd-mod_authn_pam-1.4.54-bp151.4.3.1 lighttpd-mod_authn_sasl-1.4.54-bp151.4.3.1 lighttpd-mod_cml-1.4.54-bp151.4.3.1 lighttpd-mod_geoip-1.4.54-bp151.4.3.1 lighttpd-mod_magnet-1.4.54-bp151.4.3.1 lighttpd-mod_maxminddb-1.4.54-bp151.4.3.1 lighttpd-mod_mysql_vhost-1.4.54-bp151.4.3.1 lighttpd-mod_rrdtool-1.4.54-bp151.4.3.1 lighttpd-mod_trigger_b4_dl-1.4.54-bp151.4.3.1 lighttpd-mod_vhostdb_dbi-1.4.54-bp151.4.3.1 lighttpd-mod_vhostdb_ldap-1.4.54-bp151.4.3.1 lighttpd-mod_vhostdb_mysql-1.4.54-bp151.4.3.1 lighttpd-mod_vhostdb_pgsql-1.4.54-bp151.4.3.1 lighttpd-mod_webdav-1.4.54-bp151.4.3.1 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): lighttpd-1.4.54-bp150.3.3.1 lighttpd-debuginfo-1.4.54-bp150.3.3.1 lighttpd-debugsource-1.4.54-bp150.3.3.1 lighttpd-mod_authn_gssapi-1.4.54-bp150.3.3.1 lighttpd-mod_authn_gssapi-debuginfo-1.4.54-bp150.3.3.1 lighttpd-mod_authn_ldap-1.4.54-bp150.3.3.1 lighttpd-mod_authn_ldap-debuginfo-1.4.54-bp150.3.3.1 lighttpd-mod_authn_mysql-1.4.54-bp150.3.3.1 lighttpd-mod_authn_mysql-debuginfo-1.4.54-bp150.3.3.1 lighttpd-mod_authn_pam-1.4.54-bp150.3.3.1 lighttpd-mod_authn_pam-debuginfo-1.4.54-bp150.3.3.1 lighttpd-mod_authn_sasl-1.4.54-bp150.3.3.1 lighttpd-mod_authn_sasl-debuginfo-1.4.54-bp150.3.3.1 lighttpd-mod_cml-1.4.54-bp150.3.3.1 lighttpd-mod_cml-debuginfo-1.4.54-bp150.3.3.1 lighttpd-mod_geoip-1.4.54-bp150.3.3.1 lighttpd-mod_geoip-debuginfo-1.4.54-bp150.3.3.1 lighttpd-mod_magnet-1.4.54-bp150.3.3.1 lighttpd-mod_magnet-debuginfo-1.4.54-bp150.3.3.1 lighttpd-mod_maxminddb-1.4.54-bp150.3.3.1 lighttpd-mod_maxminddb-debuginfo-1.4.54-bp150.3.3.1 lighttpd-mod_mysql_vhost-1.4.54-bp150.3.3.1 lighttpd-mod_mysql_vhost-debuginfo-1.4.54-bp150.3.3.1 lighttpd-mod_rrdtool-1.4.54-bp150.3.3.1 lighttpd-mod_rrdtool-debuginfo-1.4.54-bp150.3.3.1 lighttpd-mod_trigger_b4_dl-1.4.54-bp150.3.3.1 lighttpd-mod_trigger_b4_dl-debuginfo-1.4.54-bp150.3.3.1 lighttpd-mod_vhostdb_dbi-1.4.54-bp150.3.3.1 lighttpd-mod_vhostdb_dbi-debuginfo-1.4.54-bp150.3.3.1 lighttpd-mod_vhostdb_ldap-1.4.54-bp150.3.3.1 lighttpd-mod_vhostdb_ldap-debuginfo-1.4.54-bp150.3.3.1 lighttpd-mod_vhostdb_mysql-1.4.54-bp150.3.3.1 lighttpd-mod_vhostdb_mysql-debuginfo-1.4.54-bp150.3.3.1 lighttpd-mod_vhostdb_pgsql-1.4.54-bp150.3.3.1 lighttpd-mod_vhostdb_pgsql-debuginfo-1.4.54-bp150.3.3.1 lighttpd-mod_webdav-1.4.54-bp150.3.3.1 lighttpd-mod_webdav-debuginfo-1.4.54-bp150.3.3.1 References: https://www.suse.com/security/cve/CVE-2018-19052.html https://bugzilla.suse.com/1087369 https://bugzilla.suse.com/1111733 https://bugzilla.suse.com/1115016 https://bugzilla.suse.com/1153722

1 0

openSUSE-SU-2019:2348-1: important: Security update for tcpdump
by opensuse-security＠opensuse.org 20 Oct '19

20 Oct '19

openSUSE Security Update: Security update for tcpdump ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2348-1 Rating: important References: #1068716 #1153098 #1153332 Cross-References: CVE-2017-16808 CVE-2018-10103 CVE-2018-10105 CVE-2018-14461 CVE-2018-14462 CVE-2018-14463 CVE-2018-14464 CVE-2018-14465 CVE-2018-14466 CVE-2018-14467 CVE-2018-14468 CVE-2018-14469 CVE-2018-14470 CVE-2018-14879 CVE-2018-14880 CVE-2018-14881 CVE-2018-14882 CVE-2018-16227 CVE-2018-16228 CVE-2018-16229 CVE-2018-16230 CVE-2018-16300 CVE-2018-16301 CVE-2018-16451 CVE-2018-16452 CVE-2019-1010220 CVE-2019-15166 CVE-2019-15167 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 28 vulnerabilities is now available. Description: This update for tcpdump fixes the following issues: - CVE-2017-16808: Fixed a heap-based buffer over-read related to aoe_print and lookup_emem (bsc#1068716 bsc#1153098). - CVE-2018-10103: Fixed a mishandling of the printing of SMB data (bsc#1153098). - CVE-2018-10105: Fixed a mishandling of the printing of SMB data (bsc#1153098). - CVE-2018-14461: Fixed a buffer over-read in print-ldp.c:ldp_tlv_print (bsc#1153098). - CVE-2018-14462: Fixed a buffer over-read in print-icmp.c:icmp_print (bsc#1153098). - CVE-2018-14463: Fixed a buffer over-read in print-vrrp.c:vrrp_print (bsc#1153098). - CVE-2018-14464: Fixed a buffer over-read in print-lmp.c:lmp_print_data_link_subobjs (bsc#1153098). - CVE-2018-14465: Fixed a buffer over-read in print-rsvp.c:rsvp_obj_print (bsc#1153098). - CVE-2018-14466: Fixed a buffer over-read in print-rx.c:rx_cache_find (bsc#1153098). - CVE-2018-14467: Fixed a buffer over-read in print-bgp.c:bgp_capabilities_print (bsc#1153098). - CVE-2018-14468: Fixed a buffer over-read in print-fr.c:mfr_print (bsc#1153098). - CVE-2018-14469: Fixed a buffer over-read in print-isakmp.c:ikev1_n_print (bsc#1153098). - CVE-2018-14470: Fixed a buffer over-read in print-babel.c:babel_print_v2 (bsc#1153098). - CVE-2018-14879: Fixed a buffer overflow in the command-line argument parser (bsc#1153098). - CVE-2018-14880: Fixed a buffer over-read in the OSPFv3 parser (bsc#1153098). - CVE-2018-14881: Fixed a buffer over-read in the BGP parser (bsc#1153098). - CVE-2018-14882: Fixed a buffer over-read in the ICMPv6 parser (bsc#1153098). - CVE-2018-16227: Fixed a buffer over-read in the IEEE 802.11 parser in print-802_11.c for the Mesh Flags subfield (bsc#1153098). - CVE-2018-16228: Fixed a buffer over-read in the HNCP parser (bsc#1153098). - CVE-2018-16229: Fixed a buffer over-read in the DCCP parser (bsc#1153098). - CVE-2018-16230: Fixed a buffer over-read in the BGP parser in print-bgp.c:bgp_attr_print (bsc#1153098). - CVE-2018-16300: Fixed an unlimited recursion in the BGP parser that allowed denial-of-service by stack consumption (bsc#1153098). - CVE-2018-16301: Fixed a buffer overflow (bsc#1153332 bsc#1153098). - CVE-2018-16451: Fixed several buffer over-reads in print-smb.c:print_trans() for \MAILSLOT\BROWSE and \PIPE\LANMAN (bsc#1153098). - CVE-2018-16452: Fixed a stack exhaustion in smbutil.c:smb_fdata (bsc#1153098). - CVE-2019-15166: Fixed a bounds check in lmp_print_data_link_subobjs (bsc#1153098). - CVE-2019-15167: Fixed a vulnerability in VRRP (bsc#1153098). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2348=1 Package List: - openSUSE Leap 15.1 (x86_64): tcpdump-4.9.2-lp151.4.6.1 tcpdump-debuginfo-4.9.2-lp151.4.6.1 tcpdump-debugsource-4.9.2-lp151.4.6.1 References: https://www.suse.com/security/cve/CVE-2017-16808.html https://www.suse.com/security/cve/CVE-2018-10103.html https://www.suse.com/security/cve/CVE-2018-10105.html https://www.suse.com/security/cve/CVE-2018-14461.html https://www.suse.com/security/cve/CVE-2018-14462.html https://www.suse.com/security/cve/CVE-2018-14463.html https://www.suse.com/security/cve/CVE-2018-14464.html https://www.suse.com/security/cve/CVE-2018-14465.html https://www.suse.com/security/cve/CVE-2018-14466.html https://www.suse.com/security/cve/CVE-2018-14467.html https://www.suse.com/security/cve/CVE-2018-14468.html https://www.suse.com/security/cve/CVE-2018-14469.html https://www.suse.com/security/cve/CVE-2018-14470.html https://www.suse.com/security/cve/CVE-2018-14879.html https://www.suse.com/security/cve/CVE-2018-14880.html https://www.suse.com/security/cve/CVE-2018-14881.html https://www.suse.com/security/cve/CVE-2018-14882.html https://www.suse.com/security/cve/CVE-2018-16227.html https://www.suse.com/security/cve/CVE-2018-16228.html https://www.suse.com/security/cve/CVE-2018-16229.html https://www.suse.com/security/cve/CVE-2018-16230.html https://www.suse.com/security/cve/CVE-2018-16300.html https://www.suse.com/security/cve/CVE-2018-16301.html https://www.suse.com/security/cve/CVE-2018-16451.html https://www.suse.com/security/cve/CVE-2018-16452.html https://www.suse.com/security/cve/CVE-2019-1010220.html https://www.suse.com/security/cve/CVE-2019-15166.html https://www.suse.com/security/cve/CVE-2019-15167.html https://bugzilla.suse.com/1068716 https://bugzilla.suse.com/1153098 https://bugzilla.suse.com/1153332

1 0

openSUSE-RU-2019:2346-1: moderate: Recommended update for python-cluster-preflight-check
by maintenance＠opensuse.org 20 Oct '19

20 Oct '19

openSUSE Recommended Update: Recommended update for python-cluster-preflight-check ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2346-1 Rating: moderate References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for python-cluster-preflight-check fixes the following issues: python-cluster-preflight-check was updated to 0.0.33: - Use setup.py to create ha-cluster-preflight-check automatically (#10) - Use underscores in source tarball as provided by GitHub - Language fixes to the description. Version 0.0.29 (jsc#4024): - Rename cluster-test-tool to cluster-preflight-check - Improve scenarios for blocking corosync ports to simulate split brain - Improve for: * fix regrex mismatch/None results * reinforce testcase enter condition * more docstring and comments Version 0.0.28: - Improve logging - Add unittest codes - Add docs for functions - Using shell to wrap python2&3 entry - Make split brain by blocking corosync ports - Check firewall Version 0.0.23: - Add log to record internal operations - Add json output for each test case - Add report for killing test case Version 0.0.20: - Python3 only - Check environment: hostname resolvable - Check environment: time service - Check environment: watchdog - Check cluster: cluster service - Check cluster: stonith configuration - Check cluster: nodes status - Check cluster: resources status - Kill sbd daemon - Kill corosync daemon - Kill pacemakerd daemon - Kill process in loop - Fence specific node Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2019-2346=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): python-cluster-preflight-check-0.0.33-2.1 python3-cluster-preflight-check-0.0.33-2.1 References:

1 0

openSUSE-SU-2019:2343-1: important: Security update for libpcap
by opensuse-security＠opensuse.org 20 Oct '19

20 Oct '19

openSUSE Security Update: Security update for libpcap ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2343-1 Rating: important References: #1153332 Cross-References: CVE-2018-16301 CVE-2019-15165 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for libpcap fixes the following issues: - CVE-2019-15165: Added sanity checks for PHB header length before allocating memory (bsc#1153332). - CVE-2018-16301: Fixed a buffer overflow (bsc#1153332). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2343=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libpcap-debugsource-1.8.1-lp150.3.3.1 libpcap-devel-1.8.1-lp150.3.3.1 libpcap-devel-static-1.8.1-lp150.3.3.1 libpcap1-1.8.1-lp150.3.3.1 libpcap1-debuginfo-1.8.1-lp150.3.3.1 - openSUSE Leap 15.0 (x86_64): libpcap-devel-32bit-1.8.1-lp150.3.3.1 libpcap1-32bit-1.8.1-lp150.3.3.1 libpcap1-32bit-debuginfo-1.8.1-lp150.3.3.1 References: https://www.suse.com/security/cve/CVE-2018-16301.html https://www.suse.com/security/cve/CVE-2019-15165.html https://bugzilla.suse.com/1153332

1 0

openSUSE-SU-2019:2345-1: important: Security update for libpcap
by opensuse-security＠opensuse.org 20 Oct '19

20 Oct '19

openSUSE Security Update: Security update for libpcap ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2345-1 Rating: important References: #1153332 Cross-References: CVE-2018-16301 CVE-2019-15165 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for libpcap fixes the following issues: - CVE-2019-15165: Added sanity checks for PHB header length before allocating memory (bsc#1153332). - CVE-2018-16301: Fixed a buffer overflow (bsc#1153332). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2345=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libpcap-debugsource-1.8.1-lp151.4.3.1 libpcap-devel-1.8.1-lp151.4.3.1 libpcap-devel-static-1.8.1-lp151.4.3.1 libpcap1-1.8.1-lp151.4.3.1 libpcap1-debuginfo-1.8.1-lp151.4.3.1 - openSUSE Leap 15.1 (x86_64): libpcap-devel-32bit-1.8.1-lp151.4.3.1 libpcap1-32bit-1.8.1-lp151.4.3.1 libpcap1-32bit-debuginfo-1.8.1-lp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2018-16301.html https://www.suse.com/security/cve/CVE-2019-15165.html https://bugzilla.suse.com/1153332

1 0

openSUSE-SU-2019:2344-1: important: Security update for tcpdump
by opensuse-security＠opensuse.org 20 Oct '19

20 Oct '19

openSUSE Security Update: Security update for tcpdump ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2344-1 Rating: important References: #1068716 #1153098 #1153332 Cross-References: CVE-2017-16808 CVE-2018-10103 CVE-2018-10105 CVE-2018-14461 CVE-2018-14462 CVE-2018-14463 CVE-2018-14464 CVE-2018-14465 CVE-2018-14466 CVE-2018-14467 CVE-2018-14468 CVE-2018-14469 CVE-2018-14470 CVE-2018-14879 CVE-2018-14880 CVE-2018-14881 CVE-2018-14882 CVE-2018-16227 CVE-2018-16228 CVE-2018-16229 CVE-2018-16230 CVE-2018-16300 CVE-2018-16301 CVE-2018-16451 CVE-2018-16452 CVE-2019-1010220 CVE-2019-15166 CVE-2019-15167 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes 28 vulnerabilities is now available. Description: This update for tcpdump fixes the following issues: - CVE-2017-16808: Fixed a heap-based buffer over-read related to aoe_print and lookup_emem (bsc#1068716 bsc#1153098). - CVE-2018-10103: Fixed a mishandling of the printing of SMB data (bsc#1153098). - CVE-2018-10105: Fixed a mishandling of the printing of SMB data (bsc#1153098). - CVE-2018-14461: Fixed a buffer over-read in print-ldp.c:ldp_tlv_print (bsc#1153098). - CVE-2018-14462: Fixed a buffer over-read in print-icmp.c:icmp_print (bsc#1153098). - CVE-2018-14463: Fixed a buffer over-read in print-vrrp.c:vrrp_print (bsc#1153098). - CVE-2018-14464: Fixed a buffer over-read in print-lmp.c:lmp_print_data_link_subobjs (bsc#1153098). - CVE-2018-14465: Fixed a buffer over-read in print-rsvp.c:rsvp_obj_print (bsc#1153098). - CVE-2018-14466: Fixed a buffer over-read in print-rx.c:rx_cache_find (bsc#1153098). - CVE-2018-14467: Fixed a buffer over-read in print-bgp.c:bgp_capabilities_print (bsc#1153098). - CVE-2018-14468: Fixed a buffer over-read in print-fr.c:mfr_print (bsc#1153098). - CVE-2018-14469: Fixed a buffer over-read in print-isakmp.c:ikev1_n_print (bsc#1153098). - CVE-2018-14470: Fixed a buffer over-read in print-babel.c:babel_print_v2 (bsc#1153098). - CVE-2018-14879: Fixed a buffer overflow in the command-line argument parser (bsc#1153098). - CVE-2018-14880: Fixed a buffer over-read in the OSPFv3 parser (bsc#1153098). - CVE-2018-14881: Fixed a buffer over-read in the BGP parser (bsc#1153098). - CVE-2018-14882: Fixed a buffer over-read in the ICMPv6 parser (bsc#1153098). - CVE-2018-16227: Fixed a buffer over-read in the IEEE 802.11 parser in print-802_11.c for the Mesh Flags subfield (bsc#1153098). - CVE-2018-16228: Fixed a buffer over-read in the HNCP parser (bsc#1153098). - CVE-2018-16229: Fixed a buffer over-read in the DCCP parser (bsc#1153098). - CVE-2018-16230: Fixed a buffer over-read in the BGP parser in print-bgp.c:bgp_attr_print (bsc#1153098). - CVE-2018-16300: Fixed an unlimited recursion in the BGP parser that allowed denial-of-service by stack consumption (bsc#1153098). - CVE-2018-16301: Fixed a buffer overflow (bsc#1153332 bsc#1153098). - CVE-2018-16451: Fixed several buffer over-reads in print-smb.c:print_trans() for \MAILSLOT\BROWSE and \PIPE\LANMAN (bsc#1153098). - CVE-2018-16452: Fixed a stack exhaustion in smbutil.c:smb_fdata (bsc#1153098). - CVE-2019-15166: Fixed a bounds check in lmp_print_data_link_subobjs (bsc#1153098). - CVE-2019-15167: Fixed a vulnerability in VRRP (bsc#1153098). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2344=1 Package List: - openSUSE Leap 15.0 (x86_64): tcpdump-4.9.2-lp150.10.1 tcpdump-debuginfo-4.9.2-lp150.10.1 tcpdump-debugsource-4.9.2-lp150.10.1 References: https://www.suse.com/security/cve/CVE-2017-16808.html https://www.suse.com/security/cve/CVE-2018-10103.html https://www.suse.com/security/cve/CVE-2018-10105.html https://www.suse.com/security/cve/CVE-2018-14461.html https://www.suse.com/security/cve/CVE-2018-14462.html https://www.suse.com/security/cve/CVE-2018-14463.html https://www.suse.com/security/cve/CVE-2018-14464.html https://www.suse.com/security/cve/CVE-2018-14465.html https://www.suse.com/security/cve/CVE-2018-14466.html https://www.suse.com/security/cve/CVE-2018-14467.html https://www.suse.com/security/cve/CVE-2018-14468.html https://www.suse.com/security/cve/CVE-2018-14469.html https://www.suse.com/security/cve/CVE-2018-14470.html https://www.suse.com/security/cve/CVE-2018-14879.html https://www.suse.com/security/cve/CVE-2018-14880.html https://www.suse.com/security/cve/CVE-2018-14881.html https://www.suse.com/security/cve/CVE-2018-14882.html https://www.suse.com/security/cve/CVE-2018-16227.html https://www.suse.com/security/cve/CVE-2018-16228.html https://www.suse.com/security/cve/CVE-2018-16229.html https://www.suse.com/security/cve/CVE-2018-16230.html https://www.suse.com/security/cve/CVE-2018-16300.html https://www.suse.com/security/cve/CVE-2018-16301.html https://www.suse.com/security/cve/CVE-2018-16451.html https://www.suse.com/security/cve/CVE-2018-16452.html https://www.suse.com/security/cve/CVE-2019-1010220.html https://www.suse.com/security/cve/CVE-2019-15166.html https://www.suse.com/security/cve/CVE-2019-15167.html https://bugzilla.suse.com/1068716 https://bugzilla.suse.com/1153098 https://bugzilla.suse.com/1153332

1 0

openSUSE-RU-2019:2342-1: moderate: Recommended update for ntpsec
by maintenance＠opensuse.org 20 Oct '19

20 Oct '19

openSUSE Recommended Update: Recommended update for ntpsec ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2342-1 Rating: moderate References: #1138728 #1153841 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for ntpsec fixes the following issues: Changes in ntpsec: - Update the unit install commands wrt boo#1153841 ntpsec was updated to 1.1.7 boo#1153841: * The numeric literal argument of the 'time1' fudge option on a clock can now have one or more letter suffixes that compensate for era rollover in a GPS device. Each "g" adds the number of seconds in a 1024-week (10-bit) GPS era. Each "G" adds the number of seconds in a 8192-week (13-bit) GPS era. * The neoclock4x driver has been removed, due to the hardware and the vendor having utterly vanished from the face of the earth. * The NTS ALPN negotiation sequence has been modified for improved interoperability with other NTS implementations. * NTS key rotation now happens every 24 hours. It used to rotate every hour to enable testing of recovery from stale cookies. - Actually remove ntp.firewall from sources. - Do not install susefirewall2 service anymore Update to 1.1.6: * Fixes to NTS server list. * Add ALPN for the NTS server, as required by the NTP draft. Update to 1.1.4 should fix boo#1138728: * NTS is now implemented * Lots of fixes and cleanups to PPS * Lots of minor cleanups Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2342=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2342=1 Package List: - openSUSE Leap 15.1 (x86_64): ntpsec-1.1.7-lp151.2.3.1 ntpsec-debuginfo-1.1.7-lp151.2.3.1 ntpsec-debugsource-1.1.7-lp151.2.3.1 ntpsec-doc-1.1.7-lp151.2.3.1 ntpsec-utils-1.1.7-lp151.2.3.1 python3-ntp-1.1.7-lp151.2.3.1 python3-ntp-debuginfo-1.1.7-lp151.2.3.1 - openSUSE Leap 15.0 (x86_64): ntpsec-1.1.7-lp150.7.1 ntpsec-debuginfo-1.1.7-lp150.7.1 ntpsec-debugsource-1.1.7-lp150.7.1 ntpsec-doc-1.1.7-lp150.7.1 ntpsec-utils-1.1.7-lp150.7.1 python3-ntp-1.1.7-lp150.7.1 python3-ntp-debuginfo-1.1.7-lp150.7.1 References: https://bugzilla.suse.com/1138728 https://bugzilla.suse.com/1153841

1 0

openSUSE-SU-2019:2340-1: moderate: Security update for dhcp
by opensuse-security＠opensuse.org 20 Oct '19

20 Oct '19

openSUSE Security Update: Security update for dhcp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2340-1 Rating: moderate References: #1089524 #1134078 #1136572 Cross-References: CVE-2019-6470 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update for dhcp fixes the following issues: Secuirty issue fixed: - CVE-2019-6470: Fixed DHCPv6 server crashes (bsc#1134078). Bug fixes: - Add compile option --enable-secs-byteorder to avoid duplicate lease warnings (bsc#1089524). - Use IPv6 when called as dhclient6, dhcpd6, and dhcrelay6 (bsc#1136572). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2340=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): dhcp-4.3.5-lp150.5.3.1 dhcp-client-4.3.5-lp150.5.3.1 dhcp-client-debuginfo-4.3.5-lp150.5.3.1 dhcp-debuginfo-4.3.5-lp150.5.3.1 dhcp-debugsource-4.3.5-lp150.5.3.1 dhcp-devel-4.3.5-lp150.5.3.1 dhcp-doc-4.3.5-lp150.5.3.1 dhcp-relay-4.3.5-lp150.5.3.1 dhcp-relay-debuginfo-4.3.5-lp150.5.3.1 dhcp-server-4.3.5-lp150.5.3.1 dhcp-server-debuginfo-4.3.5-lp150.5.3.1 References: https://www.suse.com/security/cve/CVE-2019-6470.html https://bugzilla.suse.com/1089524 https://bugzilla.suse.com/1134078 https://bugzilla.suse.com/1136572

1 0

openSUSE-SU-2019:2341-1: moderate: Security update for dhcp
by opensuse-security＠opensuse.org 20 Oct '19

20 Oct '19

openSUSE Security Update: Security update for dhcp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2341-1 Rating: moderate References: #1089524 #1134078 #1136572 Cross-References: CVE-2019-6470 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update for dhcp fixes the following issues: Secuirty issue fixed: - CVE-2019-6470: Fixed DHCPv6 server crashes (bsc#1134078). Bug fixes: - Add compile option --enable-secs-byteorder to avoid duplicate lease warnings (bsc#1089524). - Use IPv6 when called as dhclient6, dhcpd6, and dhcrelay6 (bsc#1136572). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2341=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): dhcp-4.3.5-lp151.6.3.1 dhcp-client-4.3.5-lp151.6.3.1 dhcp-client-debuginfo-4.3.5-lp151.6.3.1 dhcp-debuginfo-4.3.5-lp151.6.3.1 dhcp-debugsource-4.3.5-lp151.6.3.1 dhcp-devel-4.3.5-lp151.6.3.1 dhcp-doc-4.3.5-lp151.6.3.1 dhcp-relay-4.3.5-lp151.6.3.1 dhcp-relay-debuginfo-4.3.5-lp151.6.3.1 dhcp-server-4.3.5-lp151.6.3.1 dhcp-server-debuginfo-4.3.5-lp151.6.3.1 References: https://www.suse.com/security/cve/CVE-2019-6470.html https://bugzilla.suse.com/1089524 https://bugzilla.suse.com/1134078 https://bugzilla.suse.com/1136572

1 0

openSUSE-RU-2019:2339-1: moderate: Recommended update for drbd
by maintenance＠opensuse.org 19 Oct '19

19 Oct '19

openSUSE Recommended Update: Recommended update for drbd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2339-1 Rating: moderate References: #1146117 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for drbd provides the following fixes: - Disallow dual primaries when not configured. (bsc#1146117) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2339=1 Package List: - openSUSE Leap 15.0 (x86_64): drbd-9.0.15+git.c46d2790-lp150.2.9.1 drbd-debugsource-9.0.15+git.c46d2790-lp150.2.9.1 drbd-kmp-default-9.0.15+git.c46d2790_k4.12.14_lp150.12.76-lp150.2.9.1 drbd-kmp-default-debuginfo-9.0.15+git.c46d2790_k4.12.14_lp150.12.76-lp150.2.9.1 References: https://bugzilla.suse.com/1146117

1 0

openSUSE-RU-2019:2338-1: moderate: Recommended update for eigen3
by maintenance＠opensuse.org 19 Oct '19

19 Oct '19

openSUSE Recommended Update: Recommended update for eigen3 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2338-1 Rating: moderate References: #1148642 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for eigen3 fixes the following issues: - Fix double {prefix} as we use INCLUDE_INSTALL_DIR with {_includedir}. (boo#1148642) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2338=1 Package List: - openSUSE Leap 15.1 (noarch): eigen3-devel-3.3.4-lp151.4.3.1 eigen3-doc-3.3.4-lp151.4.3.1 References: https://bugzilla.suse.com/1148642

1 0

openSUSE-RU-2019:2337-1: moderate: Recommended update for libzypp, zypper
by maintenance＠opensuse.org 17 Oct '19

17 Oct '19

openSUSE Recommended Update: Recommended update for libzypp, zypper ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2337-1 Rating: moderate References: #1049825 #1116995 #1139795 #1140039 #1145521 #1146027 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has 6 recommended fixes can now be installed. Description: This update for libzypp, zypper fixes the following issues: - Fix leaking filedescriptors in MediaCurl. (bsc#1116995) - Run file conflict check on dry-run. (bsc#1140039) - Do not remove orphan products if the .prod file is owned by a package. (bsc#1139795) - Rephrase file conflict check summary. (bsc#1140039) - Fix bash completions option detection. (bsc#1049825) - Fixes a bug where zypper exited on SIGPIPE when downloading packages (bsc#1145521) - Fixes an issue where zypper exited with a segmentation fault when updating via YaST2 (bsc#1146027) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2337=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libsolv-debuginfo-0.7.6-lp150.10.1 libsolv-debugsource-0.7.6-lp150.10.1 libsolv-demo-0.7.6-lp150.10.1 libsolv-demo-debuginfo-0.7.6-lp150.10.1 libsolv-devel-0.7.6-lp150.10.1 libsolv-devel-debuginfo-0.7.6-lp150.10.1 libsolv-tools-0.7.6-lp150.10.1 libsolv-tools-debuginfo-0.7.6-lp150.10.1 libzstd-devel-1.4.2-lp150.2.5.1 libzstd-devel-static-1.4.2-lp150.2.5.1 libzstd1-1.4.2-lp150.2.5.1 libzstd1-debuginfo-1.4.2-lp150.2.5.1 libzypp-17.14.1-lp150.2.16.1 libzypp-debuginfo-17.14.1-lp150.2.16.1 libzypp-debugsource-17.14.1-lp150.2.16.1 libzypp-devel-17.14.1-lp150.2.16.1 libzypp-devel-doc-17.14.1-lp150.2.16.1 perl-solv-0.7.6-lp150.10.1 perl-solv-debuginfo-0.7.6-lp150.10.1 python-solv-0.7.6-lp150.10.1 python-solv-debuginfo-0.7.6-lp150.10.1 python3-solv-0.7.6-lp150.10.1 python3-solv-debuginfo-0.7.6-lp150.10.1 ruby-solv-0.7.6-lp150.10.1 ruby-solv-debuginfo-0.7.6-lp150.10.1 zstd-1.4.2-lp150.2.5.1 zstd-debuginfo-1.4.2-lp150.2.5.1 zstd-debugsource-1.4.2-lp150.2.5.1 zypper-1.14.30-lp150.2.16.1 zypper-debuginfo-1.14.30-lp150.2.16.1 zypper-debugsource-1.14.30-lp150.2.16.1 - openSUSE Leap 15.0 (noarch): zypper-aptitude-1.14.30-lp150.2.16.1 zypper-log-1.14.30-lp150.2.16.1 zypper-needs-restarting-1.14.30-lp150.2.16.1 - openSUSE Leap 15.0 (x86_64): libzstd1-32bit-1.4.2-lp150.2.5.1 libzstd1-32bit-debuginfo-1.4.2-lp150.2.5.1 References: https://bugzilla.suse.com/1049825 https://bugzilla.suse.com/1116995 https://bugzilla.suse.com/1139795 https://bugzilla.suse.com/1140039 https://bugzilla.suse.com/1145521 https://bugzilla.suse.com/1146027

1 0

openSUSE-RU-2019:2334-1: moderate: Recommended update for libstorage-ng
by maintenance＠opensuse.org 17 Oct '19

17 Oct '19

openSUSE Recommended Update: Recommended update for libstorage-ng ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2334-1 Rating: moderate References: #1146686 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libstorage-ng provides the following fix: - Fix dectection of surrounding region. (bsc#1146686) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2334=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libstorage-ng-debuginfo-4.1.104-lp151.3.3.1 libstorage-ng-debugsource-4.1.104-lp151.3.3.1 libstorage-ng-devel-4.1.104-lp151.3.3.1 libstorage-ng-integration-tests-4.1.104-lp151.3.3.1 libstorage-ng-python3-4.1.104-lp151.3.3.1 libstorage-ng-python3-debuginfo-4.1.104-lp151.3.3.1 libstorage-ng-ruby-4.1.104-lp151.3.3.1 libstorage-ng-ruby-debuginfo-4.1.104-lp151.3.3.1 libstorage-ng-utils-4.1.104-lp151.3.3.1 libstorage-ng-utils-debuginfo-4.1.104-lp151.3.3.1 libstorage-ng1-4.1.104-lp151.3.3.1 libstorage-ng1-debuginfo-4.1.104-lp151.3.3.1 - openSUSE Leap 15.1 (noarch): libstorage-ng-lang-4.1.104-lp151.3.3.1 References: https://bugzilla.suse.com/1146686

1 0

openSUSE-RU-2019:2335-1: moderate: Recommended update for python-cryptography
by maintenance＠opensuse.org 17 Oct '19

17 Oct '19

openSUSE Recommended Update: Recommended update for python-cryptography ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2335-1 Rating: moderate References: #1149792 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-cryptography fixes the following issues: - Adds compatibility to openSSL 1.1.1d (bsc#1149792) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2335=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): python-cryptography-debuginfo-2.1.4-lp151.5.3.1 python-cryptography-debugsource-2.1.4-lp151.5.3.1 python2-cryptography-2.1.4-lp151.5.3.1 python2-cryptography-debuginfo-2.1.4-lp151.5.3.1 python3-cryptography-2.1.4-lp151.5.3.1 python3-cryptography-debuginfo-2.1.4-lp151.5.3.1 References: https://bugzilla.suse.com/1149792

1 0

openSUSE-RU-2019:2336-1: Recommended update for openSUSE-release
by maintenance＠opensuse.org 17 Oct '19

17 Oct '19

openSUSE Recommended Update: Recommended update for openSUSE-release ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2336-1 Rating: low References: #1137342 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for openSUSE-release removes a superflous space in /etc/os-release. (bsc#1137342) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2336=1 Package List: - openSUSE Leap 15.1 (x86_64): openSUSE-release-15.1-lp151.2.1 openSUSE-release-15.1-lp151.301.1 References: https://bugzilla.suse.com/1137342

1 0

openSUSE-SU-2019:2333-1: important: Security update for sudo
by opensuse-security＠opensuse.org 17 Oct '19

17 Oct '19

openSUSE Security Update: Security update for sudo ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2333-1 Rating: important References: #1153674 Cross-References: CVE-2019-14287 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for sudo fixes the following issue: - CVE-2019-14287: Fixed an issue where a user with sudo privileges that allowed them to run commands with an arbitrary uid, could run commands as root, despite being forbidden to do so in sudoers (bsc#1153674). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2333=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): sudo-1.8.22-lp150.8.1 sudo-debuginfo-1.8.22-lp150.8.1 sudo-debugsource-1.8.22-lp150.8.1 sudo-devel-1.8.22-lp150.8.1 sudo-test-1.8.22-lp150.8.1 References: https://www.suse.com/security/cve/CVE-2019-14287.html https://bugzilla.suse.com/1153674

1 0

openSUSE-RU-2019:2329-1: moderate: Recommended update for multipath-tools
by maintenance＠opensuse.org 16 Oct '19

16 Oct '19

openSUSE Recommended Update: Recommended update for multipath-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2329-1 Rating: moderate References: #1139837 #1149319 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for multipath-tools fixes the following issues: - Fix premature path reinstantiation with san_path_err_XX. (bsc#1149319) - Set default for "enable_foreign" to "NONE". (bsc#1139837) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2329=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): kpartx-0.7.9+167+suse.07c42ab-lp151.2.6.1 kpartx-debuginfo-0.7.9+167+suse.07c42ab-lp151.2.6.1 libdmmp-devel-0.7.9+167+suse.07c42ab-lp151.2.6.1 libdmmp0_2_0-0.7.9+167+suse.07c42ab-lp151.2.6.1 libdmmp0_2_0-debuginfo-0.7.9+167+suse.07c42ab-lp151.2.6.1 multipath-tools-0.7.9+167+suse.07c42ab-lp151.2.6.1 multipath-tools-debuginfo-0.7.9+167+suse.07c42ab-lp151.2.6.1 multipath-tools-debugsource-0.7.9+167+suse.07c42ab-lp151.2.6.1 multipath-tools-devel-0.7.9+167+suse.07c42ab-lp151.2.6.1 References: https://bugzilla.suse.com/1139837 https://bugzilla.suse.com/1149319

1 0

openSUSE-RU-2019:2325-1: moderate: Recommended update for python-cryptography
by maintenance＠opensuse.org 16 Oct '19

16 Oct '19

openSUSE Recommended Update: Recommended update for python-cryptography ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2325-1 Rating: moderate References: #1149792 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-cryptography fixes the following issues: - Adds compatibility to openSSL 1.1.1d (bsc#1149792) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2325=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): python-cryptography-debuginfo-2.1.4-lp150.8.1 python-cryptography-debugsource-2.1.4-lp150.8.1 python2-cryptography-2.1.4-lp150.8.1 python2-cryptography-debuginfo-2.1.4-lp150.8.1 python3-cryptography-2.1.4-lp150.8.1 python3-cryptography-debuginfo-2.1.4-lp150.8.1 References: https://bugzilla.suse.com/1149792

1 0

openSUSE-RU-2019:2323-1: moderate: Recommended update for drbd-utils
by maintenance＠opensuse.org 16 Oct '19

16 Oct '19

openSUSE Recommended Update: Recommended update for drbd-utils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2323-1 Rating: moderate References: #1037109 #1064402 #1115606 #1145296 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for drbd-utils contains the following fixes: - Fix the wrong return code with cib_apply_diff. (bsc#1145296) - Update to new upstream release 9.6.0. (bsc#1115606) * usage-count: also count notty users if possible. * drbd-overview: remove it, we have drbdtop/drbdmon. saves all the Perl deps. * drbdmon: update frequency limiting, debug log for drbdevents, use altbuffer,... * drbdsetup show: on 9 allow json output. mainly used in our CI, don't expect a stable field names yet. * drbdsetup status: on 9 fix json output to not include NaN/Infinity * allow higher resync rates: first customers hit a limit. this requires an updated kernel module as well (e.g., 9.0.16) * init: fix some 8-only leftovers (sh-b-pri), sanitize the retry logic * doc: document various 9 features that got forgotten (e.g., quorum-lost) * build: various small fixes that popped up while playing with meson - Update to 9.5.0 * drbdmon: allow to start in problems view (--problems) * drbdadm,v9: fix always failing stacked handlers from kernel * drbdadm,v9: adjust now hands over the information that a diskfull->diskless change was intentional. * drbdadm,v9: adjust verifies now IPs - Update to 9.4.0 * drbdmeta: don't exit with negative return codes * usage counts: only register if we know driver version * drbdsetup,v9: expose detailed verify/resync statistics * drbdsetup,v9,json: saner types for client/peer-client/quorum on --json * drbdsetup,v9: expose client/peer-client in status if !isatty() - Including fix for SLE12SP3: * Remove hardcoded local5 of logfacility. (bsc#1064402) * drbdmeta does not propagate full bitmap. (bsc#1037109) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2323=1 Package List: - openSUSE Leap 15.0 (x86_64): drbd-utils-9.6.0-lp150.7.1 drbd-utils-debuginfo-9.6.0-lp150.7.1 drbd-utils-debugsource-9.6.0-lp150.7.1 References: https://bugzilla.suse.com/1037109 https://bugzilla.suse.com/1064402 https://bugzilla.suse.com/1115606 https://bugzilla.suse.com/1145296

1 0

openSUSE-RU-2019:2332-1: moderate: Recommended update for yast2-cluster
by maintenance＠opensuse.org 16 Oct '19

16 Oct '19

openSUSE Recommended Update: Recommended update for yast2-cluster ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2332-1 Rating: moderate References: #1151687 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-cluster fixes the following issues: - Update the open ports to support pacemaker-remote, booth and corosync-qnetd. (bsc#1151687) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2332=1 Package List: - openSUSE Leap 15.1 (noarch): yast2-cluster-4.1.3-lp151.2.3.1 References: https://bugzilla.suse.com/1151687

1 0

openSUSE-RU-2019:2330-1: moderate: Recommended update for python-pyOpenSSL
by maintenance＠opensuse.org 16 Oct '19

16 Oct '19

openSUSE Recommended Update: Recommended update for python-pyOpenSSL ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2330-1 Rating: moderate References: #1149792 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-pyOpenSSL fixes the following issues: - Adds compatibility for openSSL 1.1.1d (bsc#1149792) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2330=1 Package List: - openSUSE Leap 15.1 (noarch): python-pyOpenSSL-doc-17.5.0-lp151.4.3.1 python2-pyOpenSSL-17.5.0-lp151.4.3.1 python3-pyOpenSSL-17.5.0-lp151.4.3.1 References: https://bugzilla.suse.com/1149792

1 0

openSUSE-RU-2019:2327-1: moderate: Recommended update for yast2-cluster
by maintenance＠opensuse.org 16 Oct '19

16 Oct '19

openSUSE Recommended Update: Recommended update for yast2-cluster ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2327-1 Rating: moderate References: #1151687 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-cluster fixes the following issues: - Update the open ports to support pacemaker-remote, booth and corosync-qnetd. (bsc#1151687) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2327=1 Package List: - openSUSE Leap 15.0 (noarch): yast2-cluster-4.0.9-lp150.10.1 References: https://bugzilla.suse.com/1151687

1 0

openSUSE-RU-2019:2324-1: moderate: Recommended update for multipath-tools
by maintenance＠opensuse.org 16 Oct '19

16 Oct '19

openSUSE Recommended Update: Recommended update for multipath-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2324-1 Rating: moderate References: #1149313 #1149319 #1151502 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for multipath-tools fixes the following issues: - Fix premature path reinstantiation with san_path_err_XX. (bsc#1149319) - Make lazy tpgs probing work again. (bsc#1149313) - libmultipath: Fix logic in should_multipath (bsc#1151502) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2324=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): kpartx-0.7.3+150+suse.529bc38-lp150.13.1 kpartx-debuginfo-0.7.3+150+suse.529bc38-lp150.13.1 libdmmp-devel-0.7.3+150+suse.529bc38-lp150.13.1 libdmmp0_1_0-0.7.3+150+suse.529bc38-lp150.13.1 libdmmp0_1_0-debuginfo-0.7.3+150+suse.529bc38-lp150.13.1 multipath-tools-0.7.3+150+suse.529bc38-lp150.13.1 multipath-tools-debuginfo-0.7.3+150+suse.529bc38-lp150.13.1 multipath-tools-debugsource-0.7.3+150+suse.529bc38-lp150.13.1 multipath-tools-devel-0.7.3+150+suse.529bc38-lp150.13.1 - openSUSE Leap 15.0 (x86_64): multipath-tools-rbd-0.7.3+150+suse.529bc38-lp150.13.1 multipath-tools-rbd-debuginfo-0.7.3+150+suse.529bc38-lp150.13.1 References: https://bugzilla.suse.com/1149313 https://bugzilla.suse.com/1149319 https://bugzilla.suse.com/1151502

1 0

openSUSE-RU-2019:2331-1: moderate: Recommended update for yast2
by maintenance＠opensuse.org 16 Oct '19

16 Oct '19

openSUSE Recommended Update: Recommended update for yast2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2331-1 Rating: moderate References: #1122259 #1149776 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for yast2 provides the following fixes: - Yast completions have to be named after their respective command name. (bsc#1122259) - Fix a problem when long warnings reports in command line. (bsc#1149776) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2331=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): yast2-4.1.74-lp151.2.13.1 yast2-logs-4.1.74-lp151.2.13.1 References: https://bugzilla.suse.com/1122259 https://bugzilla.suse.com/1149776

1 0

openSUSE-RU-2019:2326-1: moderate: Recommended update for python-pyOpenSSL
by maintenance＠opensuse.org 16 Oct '19

16 Oct '19

openSUSE Recommended Update: Recommended update for python-pyOpenSSL ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2326-1 Rating: moderate References: #1149792 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-pyOpenSSL fixes the following issues: - Adds compatibility for openSSL 1.1.1d (bsc#1149792) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2326=1 Package List: - openSUSE Leap 15.0 (noarch): python-pyOpenSSL-doc-17.5.0-lp150.7.1 python2-pyOpenSSL-17.5.0-lp150.7.1 python3-pyOpenSSL-17.5.0-lp150.7.1 References: https://bugzilla.suse.com/1149792

1 0

openSUSE-RU-2019:2322-1: moderate: Recommended update for NetworkManager
by maintenance＠opensuse.org 16 Oct '19

16 Oct '19

openSUSE Recommended Update: Recommended update for NetworkManager ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2322-1 Rating: moderate References: #1074074 #1146935 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for NetworkManager fixes the following issues: - Modify nfs script: Only mount/unmount when the file type is nfs. (bsc#1074074) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2322=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): NetworkManager-1.10.6-lp150.4.12.1 NetworkManager-debuginfo-1.10.6-lp150.4.12.1 NetworkManager-debugsource-1.10.6-lp150.4.12.1 NetworkManager-devel-1.10.6-lp150.4.12.1 libnm-glib-vpn1-1.10.6-lp150.4.12.1 libnm-glib-vpn1-debuginfo-1.10.6-lp150.4.12.1 libnm-glib4-1.10.6-lp150.4.12.1 libnm-glib4-debuginfo-1.10.6-lp150.4.12.1 libnm-util2-1.10.6-lp150.4.12.1 libnm-util2-debuginfo-1.10.6-lp150.4.12.1 libnm0-1.10.6-lp150.4.12.1 libnm0-debuginfo-1.10.6-lp150.4.12.1 typelib-1_0-NM-1_0-1.10.6-lp150.4.12.1 typelib-1_0-NMClient-1_0-1.10.6-lp150.4.12.1 typelib-1_0-NetworkManager-1_0-1.10.6-lp150.4.12.1 - openSUSE Leap 15.0 (noarch): NetworkManager-branding-upstream-1.10.6-lp150.4.12.1 NetworkManager-lang-1.10.6-lp150.4.12.1 - openSUSE Leap 15.0 (x86_64): NetworkManager-devel-32bit-1.10.6-lp150.4.12.1 libnm-glib-vpn1-32bit-1.10.6-lp150.4.12.1 libnm-glib-vpn1-32bit-debuginfo-1.10.6-lp150.4.12.1 libnm-glib4-32bit-1.10.6-lp150.4.12.1 libnm-glib4-32bit-debuginfo-1.10.6-lp150.4.12.1 libnm-util2-32bit-1.10.6-lp150.4.12.1 libnm-util2-32bit-debuginfo-1.10.6-lp150.4.12.1 References: https://bugzilla.suse.com/1074074 https://bugzilla.suse.com/1146935

1 0

openSUSE-RU-2019:2328-1: moderate: Recommended update for ibus-libpinyin
by maintenance＠opensuse.org 16 Oct '19

16 Oct '19

openSUSE Recommended Update: Recommended update for ibus-libpinyin ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2328-1 Rating: moderate References: #1112998 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ibus-libpinyin fixes the following issues: - Fix emoji appears in updateCandidates method. (bsc#1112998) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2328=1 Package List: - openSUSE Leap 15.1 (x86_64): ibus-libpinyin-1.11.1-lp151.2.6.1 ibus-libpinyin-debuginfo-1.11.1-lp151.2.6.1 ibus-libpinyin-debugsource-1.11.1-lp151.2.6.1 References: https://bugzilla.suse.com/1112998

1 0

openSUSE-SU-2019:2321-1: moderate: Security update for GraphicsMagick
by opensuse-security＠opensuse.org 16 Oct '19

16 Oct '19

openSUSE Security Update: Security update for GraphicsMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2321-1 Rating: moderate References: #1151782 Cross-References: CVE-2019-16709 Affected Products: openSUSE Backports SLE-15-SP1 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for GraphicsMagick fixes the following issues: - CVE-2019-16709: Fixed a memory leak in coders/dps.c (boo#1151782). This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2321=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-2321=1 Package List: - openSUSE Backports SLE-15-SP1 (x86_64): GraphicsMagick-1.3.29-bp151.5.6.1 GraphicsMagick-debuginfo-1.3.29-bp151.5.6.1 GraphicsMagick-debugsource-1.3.29-bp151.5.6.1 GraphicsMagick-devel-1.3.29-bp151.5.6.1 libGraphicsMagick++-Q16-12-1.3.29-bp151.5.6.1 libGraphicsMagick++-Q16-12-debuginfo-1.3.29-bp151.5.6.1 libGraphicsMagick++-devel-1.3.29-bp151.5.6.1 libGraphicsMagick-Q16-3-1.3.29-bp151.5.6.1 libGraphicsMagick-Q16-3-debuginfo-1.3.29-bp151.5.6.1 libGraphicsMagick3-config-1.3.29-bp151.5.6.1 libGraphicsMagickWand-Q16-2-1.3.29-bp151.5.6.1 libGraphicsMagickWand-Q16-2-debuginfo-1.3.29-bp151.5.6.1 perl-GraphicsMagick-1.3.29-bp151.5.6.1 perl-GraphicsMagick-debuginfo-1.3.29-bp151.5.6.1 - openSUSE Backports SLE-15 (x86_64): GraphicsMagick-1.3.29-bp150.2.30.1 GraphicsMagick-devel-1.3.29-bp150.2.30.1 libGraphicsMagick++-Q16-12-1.3.29-bp150.2.30.1 libGraphicsMagick++-devel-1.3.29-bp150.2.30.1 libGraphicsMagick-Q16-3-1.3.29-bp150.2.30.1 libGraphicsMagick3-config-1.3.29-bp150.2.30.1 libGraphicsMagickWand-Q16-2-1.3.29-bp150.2.30.1 perl-GraphicsMagick-1.3.29-bp150.2.30.1 References: https://www.suse.com/security/cve/CVE-2019-16709.html https://bugzilla.suse.com/1151782

1 0

openSUSE-RU-2019:2320-1: moderate: Recommended update for permissions
by maintenance＠opensuse.org 16 Oct '19

16 Oct '19

openSUSE Recommended Update: Recommended update for permissions ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2320-1 Rating: moderate References: #1110797 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for permissions fixes the following issues: - Updated permissons for amanda. (bsc#1110797) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2320=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): permissions-20181116-lp151.4.6.1 permissions-debuginfo-20181116-lp151.4.6.1 permissions-debugsource-20181116-lp151.4.6.1 - openSUSE Leap 15.1 (noarch): permissions-zypp-plugin-20181116-lp151.4.6.1 References: https://bugzilla.suse.com/1110797

1 0

openSUSE-SU-2019:2317-1: moderate: Security update for GraphicsMagick
by opensuse-security＠opensuse.org 16 Oct '19

16 Oct '19

openSUSE Security Update: Security update for GraphicsMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2317-1 Rating: moderate References: #1151782 Cross-References: CVE-2019-16709 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for GraphicsMagick fixes the following issues: - CVE-2019-16709: Fixed a memory leak in coders/dps.c (boo#1151782). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2317=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2317=1 Package List: - openSUSE Leap 15.1 (x86_64): GraphicsMagick-1.3.29-lp151.4.9.1 GraphicsMagick-debuginfo-1.3.29-lp151.4.9.1 GraphicsMagick-debugsource-1.3.29-lp151.4.9.1 GraphicsMagick-devel-1.3.29-lp151.4.9.1 libGraphicsMagick++-Q16-12-1.3.29-lp151.4.9.1 libGraphicsMagick++-Q16-12-debuginfo-1.3.29-lp151.4.9.1 libGraphicsMagick++-devel-1.3.29-lp151.4.9.1 libGraphicsMagick-Q16-3-1.3.29-lp151.4.9.1 libGraphicsMagick-Q16-3-debuginfo-1.3.29-lp151.4.9.1 libGraphicsMagick3-config-1.3.29-lp151.4.9.1 libGraphicsMagickWand-Q16-2-1.3.29-lp151.4.9.1 libGraphicsMagickWand-Q16-2-debuginfo-1.3.29-lp151.4.9.1 perl-GraphicsMagick-1.3.29-lp151.4.9.1 perl-GraphicsMagick-debuginfo-1.3.29-lp151.4.9.1 - openSUSE Leap 15.0 (x86_64): GraphicsMagick-1.3.29-lp150.3.37.1 GraphicsMagick-debuginfo-1.3.29-lp150.3.37.1 GraphicsMagick-debugsource-1.3.29-lp150.3.37.1 GraphicsMagick-devel-1.3.29-lp150.3.37.1 libGraphicsMagick++-Q16-12-1.3.29-lp150.3.37.1 libGraphicsMagick++-Q16-12-debuginfo-1.3.29-lp150.3.37.1 libGraphicsMagick++-devel-1.3.29-lp150.3.37.1 libGraphicsMagick-Q16-3-1.3.29-lp150.3.37.1 libGraphicsMagick-Q16-3-debuginfo-1.3.29-lp150.3.37.1 libGraphicsMagick3-config-1.3.29-lp150.3.37.1 libGraphicsMagickWand-Q16-2-1.3.29-lp150.3.37.1 libGraphicsMagickWand-Q16-2-debuginfo-1.3.29-lp150.3.37.1 perl-GraphicsMagick-1.3.29-lp150.3.37.1 perl-GraphicsMagick-debuginfo-1.3.29-lp150.3.37.1 References: https://www.suse.com/security/cve/CVE-2019-16709.html https://bugzilla.suse.com/1151782

1 0

openSUSE-SU-2019:2319-1: important: Security update for libopenmpt
by opensuse-security＠opensuse.org 16 Oct '19

16 Oct '19

openSUSE Security Update: Security update for libopenmpt ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2319-1 Rating: important References: #1153102 Cross-References: CVE-2019-17113 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libopenmpt to version 0.3.19 fixes the following issues: - CVE-2019-17113: Fixed a buffer overflow in ModPlug_InstrumentName and ModPlug_SampleName (bsc#1153102). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2319=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libmodplug-devel-0.3.19-lp150.10.1 libmodplug1-0.3.19-lp150.10.1 libmodplug1-debuginfo-0.3.19-lp150.10.1 libopenmpt-debugsource-0.3.19-lp150.10.1 libopenmpt-devel-0.3.19-lp150.10.1 libopenmpt0-0.3.19-lp150.10.1 libopenmpt0-debuginfo-0.3.19-lp150.10.1 libopenmpt_modplug1-0.3.19-lp150.10.1 libopenmpt_modplug1-debuginfo-0.3.19-lp150.10.1 openmpt123-0.3.19-lp150.10.1 openmpt123-debuginfo-0.3.19-lp150.10.1 - openSUSE Leap 15.0 (x86_64): libmodplug1-32bit-0.3.19-lp150.10.1 libmodplug1-32bit-debuginfo-0.3.19-lp150.10.1 libopenmpt0-32bit-0.3.19-lp150.10.1 libopenmpt0-32bit-debuginfo-0.3.19-lp150.10.1 libopenmpt_modplug1-32bit-0.3.19-lp150.10.1 libopenmpt_modplug1-32bit-debuginfo-0.3.19-lp150.10.1 References: https://www.suse.com/security/cve/CVE-2019-17113.html https://bugzilla.suse.com/1153102

1 0

openSUSE-SU-2019:2318-1: moderate: Security update for epiphany
by opensuse-security＠opensuse.org 16 Oct '19

16 Oct '19

openSUSE Security Update: Security update for epiphany ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2318-1 Rating: moderate References: #1094464 Cross-References: CVE-2018-11396 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for epiphany fixes the following issues: - CVE-2018-11396: Fixed a JavaScript crash when an invalid URI is opened (boo#1094464). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2318=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2318=1 Package List: - openSUSE Leap 15.1 (x86_64): epiphany-3.28.1.1-lp151.3.3.1 epiphany-debuginfo-3.28.1.1-lp151.3.3.1 epiphany-debugsource-3.28.1.1-lp151.3.3.1 gnome-shell-search-provider-epiphany-3.28.1.1-lp151.3.3.1 gnome-shell-search-provider-epiphany-debuginfo-3.28.1.1-lp151.3.3.1 - openSUSE Leap 15.1 (noarch): epiphany-branding-upstream-3.28.1.1-lp151.3.3.1 epiphany-lang-3.28.1.1-lp151.3.3.1 - openSUSE Leap 15.0 (x86_64): epiphany-3.28.1.1-lp150.2.3.1 epiphany-debuginfo-3.28.1.1-lp150.2.3.1 epiphany-debugsource-3.28.1.1-lp150.2.3.1 gnome-shell-search-provider-epiphany-3.28.1.1-lp150.2.3.1 gnome-shell-search-provider-epiphany-debuginfo-3.28.1.1-lp150.2.3.1 - openSUSE Leap 15.0 (noarch): epiphany-branding-upstream-3.28.1.1-lp150.2.3.1 epiphany-lang-3.28.1.1-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-11396.html https://bugzilla.suse.com/1094464

1 0

openSUSE-SU-2019:2316-1: important: Security update for sudo
by opensuse-security＠opensuse.org 15 Oct '19

15 Oct '19

openSUSE Security Update: Security update for sudo ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2316-1 Rating: important References: #1153674 Cross-References: CVE-2019-14287 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for sudo fixes the following issue: - CVE-2019-14287: Fixed an issue where a user with sudo privileges that allowed them to run commands with an arbitrary uid, could run commands as root, despite being forbidden to do so in sudoers (bsc#1153674). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2316=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): sudo-1.8.22-lp151.5.3.1 sudo-debuginfo-1.8.22-lp151.5.3.1 sudo-debugsource-1.8.22-lp151.5.3.1 sudo-devel-1.8.22-lp151.5.3.1 sudo-test-1.8.22-lp151.5.3.1 References: https://www.suse.com/security/cve/CVE-2019-14287.html https://bugzilla.suse.com/1153674

1 0