October 2019 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2019:2419-1: moderate: Recommended update for python-passlib
by maintenance＠opensuse.org 31 Oct '19

31 Oct '19

openSUSE Recommended Update: Recommended update for python-passlib ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2419-1 Rating: moderate References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for python-passlib fixes the following issues: This update supplies python-passlib 1.7.1 to the SUSE Linux Enterprise 12 PackageHub. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2019-2419=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): python-passlib-1.7.1-2.1 python3-passlib-1.7.1-2.1 References:

1 0

openSUSE-RU-2019:2417-1: moderate: Recommended update for php7
by maintenance＠opensuse.org 31 Oct '19

31 Oct '19

openSUSE Recommended Update: Recommended update for php7 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2417-1 Rating: moderate References: #1119396 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for php7 fixes the following issues: - Provide test results via multibuild :test. (bsc#1119396) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2417=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): apache2-mod_php7-7.2.5-lp151.6.12.1 apache2-mod_php7-debuginfo-7.2.5-lp151.6.12.1 php7-7.2.5-lp151.6.12.1 php7-bcmath-7.2.5-lp151.6.12.1 php7-bcmath-debuginfo-7.2.5-lp151.6.12.1 php7-bz2-7.2.5-lp151.6.12.1 php7-bz2-debuginfo-7.2.5-lp151.6.12.1 php7-calendar-7.2.5-lp151.6.12.1 php7-calendar-debuginfo-7.2.5-lp151.6.12.1 php7-ctype-7.2.5-lp151.6.12.1 php7-ctype-debuginfo-7.2.5-lp151.6.12.1 php7-curl-7.2.5-lp151.6.12.1 php7-curl-debuginfo-7.2.5-lp151.6.12.1 php7-dba-7.2.5-lp151.6.12.1 php7-dba-debuginfo-7.2.5-lp151.6.12.1 php7-debuginfo-7.2.5-lp151.6.12.1 php7-debugsource-7.2.5-lp151.6.12.1 php7-devel-7.2.5-lp151.6.12.1 php7-dom-7.2.5-lp151.6.12.1 php7-dom-debuginfo-7.2.5-lp151.6.12.1 php7-embed-7.2.5-lp151.6.12.1 php7-embed-debuginfo-7.2.5-lp151.6.12.1 php7-enchant-7.2.5-lp151.6.12.1 php7-enchant-debuginfo-7.2.5-lp151.6.12.1 php7-exif-7.2.5-lp151.6.12.1 php7-exif-debuginfo-7.2.5-lp151.6.12.1 php7-fastcgi-7.2.5-lp151.6.12.1 php7-fastcgi-debuginfo-7.2.5-lp151.6.12.1 php7-fileinfo-7.2.5-lp151.6.12.1 php7-fileinfo-debuginfo-7.2.5-lp151.6.12.1 php7-firebird-7.2.5-lp151.6.12.1 php7-firebird-debuginfo-7.2.5-lp151.6.12.1 php7-fpm-7.2.5-lp151.6.12.1 php7-fpm-debuginfo-7.2.5-lp151.6.12.1 php7-ftp-7.2.5-lp151.6.12.1 php7-ftp-debuginfo-7.2.5-lp151.6.12.1 php7-gd-7.2.5-lp151.6.12.1 php7-gd-debuginfo-7.2.5-lp151.6.12.1 php7-gettext-7.2.5-lp151.6.12.1 php7-gettext-debuginfo-7.2.5-lp151.6.12.1 php7-gmp-7.2.5-lp151.6.12.1 php7-gmp-debuginfo-7.2.5-lp151.6.12.1 php7-iconv-7.2.5-lp151.6.12.1 php7-iconv-debuginfo-7.2.5-lp151.6.12.1 php7-intl-7.2.5-lp151.6.12.1 php7-intl-debuginfo-7.2.5-lp151.6.12.1 php7-json-7.2.5-lp151.6.12.1 php7-json-debuginfo-7.2.5-lp151.6.12.1 php7-ldap-7.2.5-lp151.6.12.1 php7-ldap-debuginfo-7.2.5-lp151.6.12.1 php7-mbstring-7.2.5-lp151.6.12.1 php7-mbstring-debuginfo-7.2.5-lp151.6.12.1 php7-mysql-7.2.5-lp151.6.12.1 php7-mysql-debuginfo-7.2.5-lp151.6.12.1 php7-odbc-7.2.5-lp151.6.12.1 php7-odbc-debuginfo-7.2.5-lp151.6.12.1 php7-opcache-7.2.5-lp151.6.12.1 php7-opcache-debuginfo-7.2.5-lp151.6.12.1 php7-openssl-7.2.5-lp151.6.12.1 php7-openssl-debuginfo-7.2.5-lp151.6.12.1 php7-pcntl-7.2.5-lp151.6.12.1 php7-pcntl-debuginfo-7.2.5-lp151.6.12.1 php7-pdo-7.2.5-lp151.6.12.1 php7-pdo-debuginfo-7.2.5-lp151.6.12.1 php7-pgsql-7.2.5-lp151.6.12.1 php7-pgsql-debuginfo-7.2.5-lp151.6.12.1 php7-phar-7.2.5-lp151.6.12.1 php7-phar-debuginfo-7.2.5-lp151.6.12.1 php7-posix-7.2.5-lp151.6.12.1 php7-posix-debuginfo-7.2.5-lp151.6.12.1 php7-readline-7.2.5-lp151.6.12.1 php7-readline-debuginfo-7.2.5-lp151.6.12.1 php7-shmop-7.2.5-lp151.6.12.1 php7-shmop-debuginfo-7.2.5-lp151.6.12.1 php7-snmp-7.2.5-lp151.6.12.1 php7-snmp-debuginfo-7.2.5-lp151.6.12.1 php7-soap-7.2.5-lp151.6.12.1 php7-soap-debuginfo-7.2.5-lp151.6.12.1 php7-sockets-7.2.5-lp151.6.12.1 php7-sockets-debuginfo-7.2.5-lp151.6.12.1 php7-sodium-7.2.5-lp151.6.12.1 php7-sodium-debuginfo-7.2.5-lp151.6.12.1 php7-sqlite-7.2.5-lp151.6.12.1 php7-sqlite-debuginfo-7.2.5-lp151.6.12.1 php7-sysvmsg-7.2.5-lp151.6.12.1 php7-sysvmsg-debuginfo-7.2.5-lp151.6.12.1 php7-sysvsem-7.2.5-lp151.6.12.1 php7-sysvsem-debuginfo-7.2.5-lp151.6.12.1 php7-sysvshm-7.2.5-lp151.6.12.1 php7-sysvshm-debuginfo-7.2.5-lp151.6.12.1 php7-test-7.2.5-lp151.6.12.1 php7-tidy-7.2.5-lp151.6.12.1 php7-tidy-debuginfo-7.2.5-lp151.6.12.1 php7-tokenizer-7.2.5-lp151.6.12.1 php7-tokenizer-debuginfo-7.2.5-lp151.6.12.1 php7-wddx-7.2.5-lp151.6.12.1 php7-wddx-debuginfo-7.2.5-lp151.6.12.1 php7-xmlreader-7.2.5-lp151.6.12.1 php7-xmlreader-debuginfo-7.2.5-lp151.6.12.1 php7-xmlrpc-7.2.5-lp151.6.12.1 php7-xmlrpc-debuginfo-7.2.5-lp151.6.12.1 php7-xmlwriter-7.2.5-lp151.6.12.1 php7-xmlwriter-debuginfo-7.2.5-lp151.6.12.1 php7-xsl-7.2.5-lp151.6.12.1 php7-xsl-debuginfo-7.2.5-lp151.6.12.1 php7-zip-7.2.5-lp151.6.12.1 php7-zip-debuginfo-7.2.5-lp151.6.12.1 php7-zlib-7.2.5-lp151.6.12.1 php7-zlib-debuginfo-7.2.5-lp151.6.12.1 - openSUSE Leap 15.1 (noarch): php7-pear-7.2.5-lp151.6.12.1 php7-pear-Archive_Tar-7.2.5-lp151.6.12.1 References: https://bugzilla.suse.com/1119396

1 0

openSUSE-SU-2019:2418-1: moderate: Security update for docker-runc
by opensuse-security＠opensuse.org 31 Oct '19

31 Oct '19

openSUSE Security Update: Security update for docker-runc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2418-1 Rating: moderate References: #1152308 Cross-References: CVE-2019-16884 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for docker-runc fixes the following issues: - CVE-2019-16884: Fixed an LSM bypass via malicious Docker images that mount over a /proc directory. (bsc#1152308) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2418=1 Package List: - openSUSE Leap 15.0 (x86_64): docker-runc-1.0.0rc8+gitr3826_425e105d5a03-lp150.5.28.1 docker-runc-debuginfo-1.0.0rc8+gitr3826_425e105d5a03-lp150.5.28.1 References: https://www.suse.com/security/cve/CVE-2019-16884.html https://bugzilla.suse.com/1152308

1 0

openSUSE-RU-2019:2416-1: moderate: Recommended update for php7
by maintenance＠opensuse.org 31 Oct '19

31 Oct '19

openSUSE Recommended Update: Recommended update for php7 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2416-1 Rating: moderate References: #1119396 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for php7 fixes the following issues: - Provide test results via multibuild :test. (bsc#1119396) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2416=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): apache2-mod_php7-7.2.5-lp150.2.28.1 apache2-mod_php7-debuginfo-7.2.5-lp150.2.28.1 php7-7.2.5-lp150.2.28.1 php7-bcmath-7.2.5-lp150.2.28.1 php7-bcmath-debuginfo-7.2.5-lp150.2.28.1 php7-bz2-7.2.5-lp150.2.28.1 php7-bz2-debuginfo-7.2.5-lp150.2.28.1 php7-calendar-7.2.5-lp150.2.28.1 php7-calendar-debuginfo-7.2.5-lp150.2.28.1 php7-ctype-7.2.5-lp150.2.28.1 php7-ctype-debuginfo-7.2.5-lp150.2.28.1 php7-curl-7.2.5-lp150.2.28.1 php7-curl-debuginfo-7.2.5-lp150.2.28.1 php7-dba-7.2.5-lp150.2.28.1 php7-dba-debuginfo-7.2.5-lp150.2.28.1 php7-debuginfo-7.2.5-lp150.2.28.1 php7-debugsource-7.2.5-lp150.2.28.1 php7-devel-7.2.5-lp150.2.28.1 php7-dom-7.2.5-lp150.2.28.1 php7-dom-debuginfo-7.2.5-lp150.2.28.1 php7-embed-7.2.5-lp150.2.28.1 php7-embed-debuginfo-7.2.5-lp150.2.28.1 php7-enchant-7.2.5-lp150.2.28.1 php7-enchant-debuginfo-7.2.5-lp150.2.28.1 php7-exif-7.2.5-lp150.2.28.1 php7-exif-debuginfo-7.2.5-lp150.2.28.1 php7-fastcgi-7.2.5-lp150.2.28.1 php7-fastcgi-debuginfo-7.2.5-lp150.2.28.1 php7-fileinfo-7.2.5-lp150.2.28.1 php7-fileinfo-debuginfo-7.2.5-lp150.2.28.1 php7-firebird-7.2.5-lp150.2.28.1 php7-firebird-debuginfo-7.2.5-lp150.2.28.1 php7-fpm-7.2.5-lp150.2.28.1 php7-fpm-debuginfo-7.2.5-lp150.2.28.1 php7-ftp-7.2.5-lp150.2.28.1 php7-ftp-debuginfo-7.2.5-lp150.2.28.1 php7-gd-7.2.5-lp150.2.28.1 php7-gd-debuginfo-7.2.5-lp150.2.28.1 php7-gettext-7.2.5-lp150.2.28.1 php7-gettext-debuginfo-7.2.5-lp150.2.28.1 php7-gmp-7.2.5-lp150.2.28.1 php7-gmp-debuginfo-7.2.5-lp150.2.28.1 php7-iconv-7.2.5-lp150.2.28.1 php7-iconv-debuginfo-7.2.5-lp150.2.28.1 php7-intl-7.2.5-lp150.2.28.1 php7-intl-debuginfo-7.2.5-lp150.2.28.1 php7-json-7.2.5-lp150.2.28.1 php7-json-debuginfo-7.2.5-lp150.2.28.1 php7-ldap-7.2.5-lp150.2.28.1 php7-ldap-debuginfo-7.2.5-lp150.2.28.1 php7-mbstring-7.2.5-lp150.2.28.1 php7-mbstring-debuginfo-7.2.5-lp150.2.28.1 php7-mysql-7.2.5-lp150.2.28.1 php7-mysql-debuginfo-7.2.5-lp150.2.28.1 php7-odbc-7.2.5-lp150.2.28.1 php7-odbc-debuginfo-7.2.5-lp150.2.28.1 php7-opcache-7.2.5-lp150.2.28.1 php7-opcache-debuginfo-7.2.5-lp150.2.28.1 php7-openssl-7.2.5-lp150.2.28.1 php7-openssl-debuginfo-7.2.5-lp150.2.28.1 php7-pcntl-7.2.5-lp150.2.28.1 php7-pcntl-debuginfo-7.2.5-lp150.2.28.1 php7-pdo-7.2.5-lp150.2.28.1 php7-pdo-debuginfo-7.2.5-lp150.2.28.1 php7-pgsql-7.2.5-lp150.2.28.1 php7-pgsql-debuginfo-7.2.5-lp150.2.28.1 php7-phar-7.2.5-lp150.2.28.1 php7-phar-debuginfo-7.2.5-lp150.2.28.1 php7-posix-7.2.5-lp150.2.28.1 php7-posix-debuginfo-7.2.5-lp150.2.28.1 php7-readline-7.2.5-lp150.2.28.1 php7-readline-debuginfo-7.2.5-lp150.2.28.1 php7-shmop-7.2.5-lp150.2.28.1 php7-shmop-debuginfo-7.2.5-lp150.2.28.1 php7-snmp-7.2.5-lp150.2.28.1 php7-snmp-debuginfo-7.2.5-lp150.2.28.1 php7-soap-7.2.5-lp150.2.28.1 php7-soap-debuginfo-7.2.5-lp150.2.28.1 php7-sockets-7.2.5-lp150.2.28.1 php7-sockets-debuginfo-7.2.5-lp150.2.28.1 php7-sodium-7.2.5-lp150.2.28.1 php7-sodium-debuginfo-7.2.5-lp150.2.28.1 php7-sqlite-7.2.5-lp150.2.28.1 php7-sqlite-debuginfo-7.2.5-lp150.2.28.1 php7-sysvmsg-7.2.5-lp150.2.28.1 php7-sysvmsg-debuginfo-7.2.5-lp150.2.28.1 php7-sysvsem-7.2.5-lp150.2.28.1 php7-sysvsem-debuginfo-7.2.5-lp150.2.28.1 php7-sysvshm-7.2.5-lp150.2.28.1 php7-sysvshm-debuginfo-7.2.5-lp150.2.28.1 php7-test-7.2.5-lp150.2.28.1 php7-tidy-7.2.5-lp150.2.28.1 php7-tidy-debuginfo-7.2.5-lp150.2.28.1 php7-tokenizer-7.2.5-lp150.2.28.1 php7-tokenizer-debuginfo-7.2.5-lp150.2.28.1 php7-wddx-7.2.5-lp150.2.28.1 php7-wddx-debuginfo-7.2.5-lp150.2.28.1 php7-xmlreader-7.2.5-lp150.2.28.1 php7-xmlreader-debuginfo-7.2.5-lp150.2.28.1 php7-xmlrpc-7.2.5-lp150.2.28.1 php7-xmlrpc-debuginfo-7.2.5-lp150.2.28.1 php7-xmlwriter-7.2.5-lp150.2.28.1 php7-xmlwriter-debuginfo-7.2.5-lp150.2.28.1 php7-xsl-7.2.5-lp150.2.28.1 php7-xsl-debuginfo-7.2.5-lp150.2.28.1 php7-zip-7.2.5-lp150.2.28.1 php7-zip-debuginfo-7.2.5-lp150.2.28.1 php7-zlib-7.2.5-lp150.2.28.1 php7-zlib-debuginfo-7.2.5-lp150.2.28.1 - openSUSE Leap 15.0 (noarch): php7-pear-7.2.5-lp150.2.28.1 php7-pear-Archive_Tar-7.2.5-lp150.2.28.1 References: https://bugzilla.suse.com/1119396

1 0

openSUSE-SU-2019:2415-1: moderate: Security update for binutils
by opensuse-security＠opensuse.org 30 Oct '19

30 Oct '19

openSUSE Security Update: Security update for binutils ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2415-1 Rating: moderate References: #1109412 #1109413 #1109414 #1111996 #1112534 #1112535 #1113247 #1113252 #1113255 #1116827 #1118644 #1118830 #1118831 #1120640 #1121034 #1121035 #1121056 #1133131 #1133232 #1141913 #1142772 #1152590 #1154016 #1154025 Cross-References: CVE-2018-1000876 CVE-2018-17358 CVE-2018-17359 CVE-2018-17360 CVE-2018-17985 CVE-2018-18309 CVE-2018-18483 CVE-2018-18484 CVE-2018-18605 CVE-2018-18606 CVE-2018-18607 CVE-2018-19931 CVE-2018-19932 CVE-2018-20623 CVE-2018-20651 CVE-2018-20671 CVE-2018-6323 CVE-2018-6543 CVE-2018-6759 CVE-2018-6872 CVE-2018-7208 CVE-2018-7568 CVE-2018-7569 CVE-2018-7570 CVE-2018-7642 CVE-2018-7643 CVE-2018-8945 CVE-2019-1010180 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes 28 vulnerabilities is now available. Description: This update for binutils fixes the following issues: binutils was updated to current 2.32 branch [jsc#ECO-368]. Includes following security fixes: - CVE-2018-17358: Fixed invalid memory access in _bfd_stab_section_find_nearest_line in syms.c (bsc#1109412) - CVE-2018-17359: Fixed invalid memory access exists in bfd_zalloc in opncls.c (bsc#1109413) - CVE-2018-17360: Fixed heap-based buffer over-read in bfd_getl32 in libbfd.c (bsc#1109414) - CVE-2018-17985: Fixed a stack consumption problem caused by the cplus_demangle_type (bsc#1116827) - CVE-2018-18309: Fixed an invalid memory address dereference was discovered in read_reloc in reloc.c (bsc#1111996) - CVE-2018-18483: Fixed get_count function provided by libiberty that allowed attackers to cause a denial of service or other unspecified impact (bsc#1112535) - CVE-2018-18484: Fixed stack exhaustion in the C++ demangling functions provided by libiberty, caused by recursive stack frames (bsc#1112534) - CVE-2018-18605: Fixed a heap-based buffer over-read issue was discovered in the function sec_merge_hash_lookup causing a denial of service (bsc#1113255) - CVE-2018-18606: Fixed a NULL pointer dereference in _bfd_add_merge_section when attempting to merge sections with large alignments, causing denial of service (bsc#1113252) - CVE-2018-18607: Fixed a NULL pointer dereference in elf_link_input_bfd when used for finding STT_TLS symbols without any TLS section, causing denial of service (bsc#1113247) - CVE-2018-19931: Fixed a heap-based buffer overflow in bfd_elf32_swap_phdr_in in elfcode.h (bsc#1118831) - CVE-2018-19932: Fixed an integer overflow and infinite loop caused by the IS_CONTAINED_BY_LMA (bsc#1118830) - CVE-2018-20623: Fixed a use-after-free in the error function in elfcomm.c (bsc#1121035) - CVE-2018-20651: Fixed a denial of service via a NULL pointer dereference in elf_link_add_object_symbols in elflink.c (bsc#1121034) - CVE-2018-20671: Fixed an integer overflow that can trigger a heap-based buffer overflow in load_specific_debug_section in objdump.c (bsc#1121056) - CVE-2018-1000876: Fixed integer overflow in bfd_get_dynamic_reloc_upper_bound,bfd_canonicalize_dynamic_reloc in objdump (bsc#1120640) - CVE-2019-1010180: Fixed an out of bound memory access that could lead to crashes (bsc#1142772) - enable xtensa architecture (Tensilica lc6 and related) - Use -ffat-lto-objects in order to provide assembly for static libs (bsc#1141913). - Fixed some LTO build issues (bsc#1133131 bsc#1133232). - riscv: Don't check ABI flags if no code section - Fixed a segfault in ld when building some versions of pacemaker (bsc#1154025, bsc#1154016). - Add avr, epiphany and rx to target_list so that the common binutils can handle all objects we can create with crosses (bsc#1152590). Update to binutils 2.32: * The binutils now support for the C-SKY processor series. * The x86 assembler now supports a -mvexwig=[0|1] option to control encoding of VEX.W-ignored (WIG) VEX instructions. It also has a new -mx86-used-note=[yes|no] option to generate (or not) x86 GNU property notes. * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2), the Loongson EXTensions (EXT) instructions, the Loongson Content Address Memory (CAM) ASE and the Loongson MultiMedia extensions Instructions (MMI) ASE. * The addr2line, c++filt, nm and objdump tools now have a default limit on the maximum amount of recursion that is allowed whilst demangling strings. This limit can be disabled if necessary. * Objdump's --disassemble option can now take a parameter, specifying the starting symbol for disassembly. Disassembly will continue from this symbol up to the next symbol or the end of the function. * The BFD linker will now report property change in linker map file when merging GNU properties. * The BFD linker's -t option now doesn't report members within archives, unless -t is given twice. This makes it more useful when generating a list of files that should be packaged for a linker bug report. * The GOLD linker has improved warning messages for relocations that refer to discarded sections. - Improve relro support on s390 [fate#326356] - Fix broken debug symbols (bsc#1118644) - Handle ELF compressed header alignment correctly. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2415=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): binutils-2.32-lp150.10.1 binutils-debuginfo-2.32-lp150.10.1 binutils-debugsource-2.32-lp150.10.1 binutils-devel-2.32-lp150.10.1 binutils-gold-2.32-lp150.10.1 binutils-gold-debuginfo-2.32-lp150.10.1 - openSUSE Leap 15.0 (x86_64): binutils-devel-32bit-2.32-lp150.10.1 References: https://www.suse.com/security/cve/CVE-2018-1000876.html https://www.suse.com/security/cve/CVE-2018-17358.html https://www.suse.com/security/cve/CVE-2018-17359.html https://www.suse.com/security/cve/CVE-2018-17360.html https://www.suse.com/security/cve/CVE-2018-17985.html https://www.suse.com/security/cve/CVE-2018-18309.html https://www.suse.com/security/cve/CVE-2018-18483.html https://www.suse.com/security/cve/CVE-2018-18484.html https://www.suse.com/security/cve/CVE-2018-18605.html https://www.suse.com/security/cve/CVE-2018-18606.html https://www.suse.com/security/cve/CVE-2018-18607.html https://www.suse.com/security/cve/CVE-2018-19931.html https://www.suse.com/security/cve/CVE-2018-19932.html https://www.suse.com/security/cve/CVE-2018-20623.html https://www.suse.com/security/cve/CVE-2018-20651.html https://www.suse.com/security/cve/CVE-2018-20671.html https://www.suse.com/security/cve/CVE-2018-6323.html https://www.suse.com/security/cve/CVE-2018-6543.html https://www.suse.com/security/cve/CVE-2018-6759.html https://www.suse.com/security/cve/CVE-2018-6872.html https://www.suse.com/security/cve/CVE-2018-7208.html https://www.suse.com/security/cve/CVE-2018-7568.html https://www.suse.com/security/cve/CVE-2018-7569.html https://www.suse.com/security/cve/CVE-2018-7570.html https://www.suse.com/security/cve/CVE-2018-7642.html https://www.suse.com/security/cve/CVE-2018-7643.html https://www.suse.com/security/cve/CVE-2018-8945.html https://www.suse.com/security/cve/CVE-2019-1010180.html https://bugzilla.suse.com/1109412 https://bugzilla.suse.com/1109413 https://bugzilla.suse.com/1109414 https://bugzilla.suse.com/1111996 https://bugzilla.suse.com/1112534 https://bugzilla.suse.com/1112535 https://bugzilla.suse.com/1113247 https://bugzilla.suse.com/1113252 https://bugzilla.suse.com/1113255 https://bugzilla.suse.com/1116827 https://bugzilla.suse.com/1118644 https://bugzilla.suse.com/1118830 https://bugzilla.suse.com/1118831 https://bugzilla.suse.com/1120640 https://bugzilla.suse.com/1121034 https://bugzilla.suse.com/1121035 https://bugzilla.suse.com/1121056 https://bugzilla.suse.com/1133131 https://bugzilla.suse.com/1133232 https://bugzilla.suse.com/1141913 https://bugzilla.suse.com/1142772 https://bugzilla.suse.com/1152590 https://bugzilla.suse.com/1154016 https://bugzilla.suse.com/1154025

1 0

openSUSE-RU-2019:2410-1: moderate: Recommended update for fipscheck
by maintenance＠opensuse.org 29 Oct '19

29 Oct '19

openSUSE Recommended Update: Recommended update for fipscheck ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2410-1 Rating: moderate References: #1149792 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for fipscheck fixes the following issues: - Remove #include of unused fips.h to fix build with OpenSSL 1.1.1 (bsc#1149792) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2410=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): fipscheck-1.4.1-lp150.2.3.1 fipscheck-debuginfo-1.4.1-lp150.2.3.1 fipscheck-debugsource-1.4.1-lp150.2.3.1 fipscheck-devel-1.4.1-lp150.2.3.1 libfipscheck1-1.4.1-lp150.2.3.1 libfipscheck1-debuginfo-1.4.1-lp150.2.3.1 - openSUSE Leap 15.0 (x86_64): libfipscheck1-32bit-1.4.1-lp150.2.3.1 libfipscheck1-32bit-debuginfo-1.4.1-lp150.2.3.1 References: https://bugzilla.suse.com/1149792

1 0

openSUSE-RU-2019:2409-1: moderate: Recommended update for xrdp
by maintenance＠opensuse.org 29 Oct '19

29 Oct '19

openSUSE Recommended Update: Recommended update for xrdp ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2409-1 Rating: moderate References: #1100453 #1138954 #1144327 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for xrdp provides the following fixes: - Enables systemd to handle the daemons, fix daemon start failures. (bsc#1138954, bsc#1144327). - Fixed an issue with delayed X KeyRelease events. (bsc#1100453) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2409=1 Package List: - openSUSE Leap 15.0 (x86_64): libpainter0-0.9.6-lp150.3.3.1 libpainter0-debuginfo-0.9.6-lp150.3.3.1 librfxencode0-0.9.6-lp150.3.3.1 librfxencode0-debuginfo-0.9.6-lp150.3.3.1 xrdp-0.9.6-lp150.3.3.1 xrdp-debuginfo-0.9.6-lp150.3.3.1 xrdp-debugsource-0.9.6-lp150.3.3.1 xrdp-devel-0.9.6-lp150.3.3.1 References: https://bugzilla.suse.com/1100453 https://bugzilla.suse.com/1138954 https://bugzilla.suse.com/1144327

1 0

openSUSE-SU-2019:2408-1: moderate: Security update for nfs-utils
by opensuse-security＠opensuse.org 29 Oct '19

29 Oct '19

openSUSE Security Update: Security update for nfs-utils ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2408-1 Rating: moderate References: #1150733 Cross-References: CVE-2019-3689 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for nfs-utils fixes the following issues: - CVE-2019-3689: Fixed root-owned files stored in insecure /var/lib/nfs. (bsc#1150733) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2408=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): nfs-client-2.1.1-lp150.4.10.1 nfs-client-debuginfo-2.1.1-lp150.4.10.1 nfs-doc-2.1.1-lp150.4.10.1 nfs-kernel-server-2.1.1-lp150.4.10.1 nfs-kernel-server-debuginfo-2.1.1-lp150.4.10.1 nfs-utils-debuginfo-2.1.1-lp150.4.10.1 nfs-utils-debugsource-2.1.1-lp150.4.10.1 References: https://www.suse.com/security/cve/CVE-2019-3689.html https://bugzilla.suse.com/1150733

1 0

openSUSE-RU-2019:2406-1: moderate: Recommended update for yast2-services-manager
by maintenance＠opensuse.org 29 Oct '19

29 Oct '19

openSUSE Recommended Update: Recommended update for yast2-services-manager ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2406-1 Rating: moderate References: #1140735 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-services-manager fixes the following issues: - Set BaseTargets::GRAPHICAL and Target::GRAPHICAL if package "xdm" will be installed (instead of xorg-x11-server) (bsc#1140735). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2406=1 Package List: - openSUSE Leap 15.0 (noarch): yast2-services-manager-4.0.11-lp150.10.1 References: https://bugzilla.suse.com/1140735

1 0

openSUSE-RU-2019:2407-1: important: Recommended update for xen
by maintenance＠opensuse.org 29 Oct '19

29 Oct '19

openSUSE Recommended Update: Recommended update for xen ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2407-1 Rating: important References: #1027519 #1126140 #1126141 #1126192 #1126195 #1126196 #1126197 #1126198 #1126201 #1127400 #1129642 #1131811 #1133818 #1137717 #1138294 #1138563 #1145240 #1145774 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves 14 vulnerabilities and has four fixes is now available. Description: This update for xen to version 4.10.4 fixes the following issues: - Fixed an issue where libxenlight could not restore domain vsa6535522 on live migration (bsc#1133818). - Fixed an HPS bug which did not allow to install Windows Server 2016 with 2 CPUs setting or above (bsc#1137717). - Fixed an issue where libxenlight could not create new domain (bsc#1131811). - Fixed an issue where Xen could not pre-allocate 1 shadow page (bsc#1145240). - Fixed an issue where attached pci devices were lost after reboot (bsc#1129642). - Fixed a segmentation fault in Libvrtd during live migration to a VM (bsc#1145774). - Xenpvnetboot is now ported correctly to Python 3 (bsc#1138563). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2407=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): xen-debugsource-4.10.4_04-lp150.2.22.1 xen-devel-4.10.4_04-lp150.2.22.1 xen-libs-4.10.4_04-lp150.2.22.1 xen-libs-debuginfo-4.10.4_04-lp150.2.22.1 xen-tools-domU-4.10.4_04-lp150.2.22.1 xen-tools-domU-debuginfo-4.10.4_04-lp150.2.22.1 - openSUSE Leap 15.0 (x86_64): xen-4.10.4_04-lp150.2.22.1 xen-doc-html-4.10.4_04-lp150.2.22.1 xen-libs-32bit-4.10.4_04-lp150.2.22.1 xen-libs-32bit-debuginfo-4.10.4_04-lp150.2.22.1 xen-tools-4.10.4_04-lp150.2.22.1 xen-tools-debuginfo-4.10.4_04-lp150.2.22.1 References: https://www.suse.com/security/cve/CVE-2018-12126.html https://www.suse.com/security/cve/CVE-2018-12127.html https://www.suse.com/security/cve/CVE-2018-12130.html https://www.suse.com/security/cve/CVE-2019-11091.html https://www.suse.com/security/cve/CVE-2019-17340.html https://www.suse.com/security/cve/CVE-2019-17341.html https://www.suse.com/security/cve/CVE-2019-17342.html https://www.suse.com/security/cve/CVE-2019-17343.html https://www.suse.com/security/cve/CVE-2019-17344.html https://www.suse.com/security/cve/CVE-2019-17345.html https://www.suse.com/security/cve/CVE-2019-17346.html https://www.suse.com/security/cve/CVE-2019-17347.html https://www.suse.com/security/cve/CVE-2019-17348.html https://www.suse.com/security/cve/CVE-2019-17349.html https://bugzilla.suse.com/1027519 https://bugzilla.suse.com/1126140 https://bugzilla.suse.com/1126141 https://bugzilla.suse.com/1126192 https://bugzilla.suse.com/1126195 https://bugzilla.suse.com/1126196 https://bugzilla.suse.com/1126197 https://bugzilla.suse.com/1126198 https://bugzilla.suse.com/1126201 https://bugzilla.suse.com/1127400 https://bugzilla.suse.com/1129642 https://bugzilla.suse.com/1131811 https://bugzilla.suse.com/1133818 https://bugzilla.suse.com/1137717 https://bugzilla.suse.com/1138294 https://bugzilla.suse.com/1138563 https://bugzilla.suse.com/1145240 https://bugzilla.suse.com/1145774

1 0

openSUSE-RU-2019:2403-1: moderate: Recommended update for transactional-update
by maintenance＠opensuse.org 29 Oct '19

29 Oct '19

openSUSE Recommended Update: Recommended update for transactional-update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2403-1 Rating: moderate References: #1132438 #1137890 #1138725 #1139015 #1140057 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: This update for transactional-update contains the following fixes: - Update from version 2.14.2 to 2.15: - Move description of interactiveness. (bsc#1132438) - Enable network during update. (bsc#1137890) - Add compatibility with new overlayfs versions. (bsc#1140057) - Allow updates of the bootloader on EFI systems. (bsc#1139015) - Add support for /boot/writable. (bsc#1138725) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2403=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): transactional-update-2.15-lp151.2.3.1 transactional-update-debuginfo-2.15-lp151.2.3.1 transactional-update-debugsource-2.15-lp151.2.3.1 - openSUSE Leap 15.1 (noarch): transactional-update-zypp-config-2.15-lp151.2.3.1 References: https://bugzilla.suse.com/1132438 https://bugzilla.suse.com/1137890 https://bugzilla.suse.com/1138725 https://bugzilla.suse.com/1139015 https://bugzilla.suse.com/1140057

1 0

openSUSE-RU-2019:2404-1: Recommended update for tuned
by maintenance＠opensuse.org 29 Oct '19

29 Oct '19

openSUSE Recommended Update: Recommended update for tuned ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2404-1 Rating: low References: #1153341 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for tuned fixes the following issues: - Removed an unused config file: /etc/tuned/sap-hana-vmware-variables.conf (bsc#1153341) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2404=1 Package List: - openSUSE Leap 15.1 (noarch): tuned-2.10.0-lp151.5.3.1 tuned-gtk-2.10.0-lp151.5.3.1 tuned-profiles-atomic-2.10.0-lp151.5.3.1 tuned-profiles-nfv-2.10.0-lp151.5.3.1 tuned-profiles-oracle-2.10.0-lp151.5.3.1 tuned-profiles-realtime-2.10.0-lp151.5.3.1 tuned-utils-2.10.0-lp151.5.3.1 tuned-utils-systemtap-2.10.0-lp151.5.3.1 References: https://bugzilla.suse.com/1153341

1 0

openSUSE-RU-2019:2402-1: moderate: Recommended update for timezone
by maintenance＠opensuse.org 29 Oct '19

29 Oct '19

openSUSE Recommended Update: Recommended update for timezone ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2402-1 Rating: moderate References: #1150451 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for timezone fixes the following issues: - Fiji observes DST from 2019-11-10 to 2020-01-12. - Norfolk Island starts observing Australian-style DST. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2402=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): timezone-2019c-lp150.67.1 timezone-debuginfo-2019c-lp150.67.1 timezone-debugsource-2019c-lp150.67.1 References: https://bugzilla.suse.com/1150451

1 0

openSUSE-RU-2019:2405-1: important: Recommended update for tcsh
by maintenance＠opensuse.org 29 Oct '19

29 Oct '19

openSUSE Recommended Update: Recommended update for tcsh ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2405-1 Rating: important References: #1153839 #1154877 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for tcsh fixes the following issues: - Avoid breakage in sourcing standard system files (bsc#1153839) - A regression has been fixed where glob expansion would not work properly. (bsc#1154877) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2405=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): tcsh-6.20.00-lp151.3.9.1 tcsh-debuginfo-6.20.00-lp151.3.9.1 tcsh-debugsource-6.20.00-lp151.3.9.1 - openSUSE Leap 15.1 (noarch): tcsh-lang-6.20.00-lp151.3.9.1 References: https://bugzilla.suse.com/1153839 https://bugzilla.suse.com/1154877

1 0

openSUSE-RU-2019:2401-1: moderate: Recommended update for mysql-connector-cpp
by maintenance＠opensuse.org 29 Oct '19

29 Oct '19

openSUSE Recommended Update: Recommended update for mysql-connector-cpp ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2401-1 Rating: moderate References: #1149792 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for mysql-connector-cpp fixes the following issues: - Add missing zlib build dependency, which used to be pulled in by libopenssl-devel. (bsc#1149792) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2401=1 Package List: - openSUSE Leap 15.0 (x86_64): libmysqlcppconn-devel-1.1.9-lp150.3.3.1 libmysqlcppconn7-1.1.9-lp150.3.3.1 libmysqlcppconn7-debuginfo-1.1.9-lp150.3.3.1 mysql-connector-cpp-debugsource-1.1.9-lp150.3.3.1 References: https://bugzilla.suse.com/1149792

1 0

openSUSE-RU-2019:2400-1: important: Recommended update for tcsh
by maintenance＠opensuse.org 29 Oct '19

29 Oct '19

openSUSE Recommended Update: Recommended update for tcsh ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2400-1 Rating: important References: #1153839 #1154877 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for tcsh fixes the following issues: - Avoid breakage in sourcing standard system files (bsc#1153839) - A regression has been fixed where glob expansion would not work properly. (bsc#1154877) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2400=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): tcsh-6.20.00-lp150.2.9.1 tcsh-debuginfo-6.20.00-lp150.2.9.1 tcsh-debugsource-6.20.00-lp150.2.9.1 - openSUSE Leap 15.0 (noarch): tcsh-lang-6.20.00-lp150.2.9.1 References: https://bugzilla.suse.com/1153839 https://bugzilla.suse.com/1154877

1 0

openSUSE-SU-2019:2399-1: moderate: Security update for lz4
by opensuse-security＠opensuse.org 28 Oct '19

28 Oct '19

openSUSE Security Update: Security update for lz4 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2399-1 Rating: moderate References: #1153936 Cross-References: CVE-2019-17543 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for lz4 fixes the following issues: - CVE-2019-17543: Fixed a heap-based buffer overflow in LZ4_write32 (bsc#1153936). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2399=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): liblz4-1-1.8.0-lp151.3.3.1 liblz4-1-debuginfo-1.8.0-lp151.3.3.1 liblz4-devel-1.8.0-lp151.3.3.1 lz4-1.8.0-lp151.3.3.1 lz4-debuginfo-1.8.0-lp151.3.3.1 lz4-debugsource-1.8.0-lp151.3.3.1 - openSUSE Leap 15.1 (x86_64): liblz4-1-32bit-1.8.0-lp151.3.3.1 liblz4-1-32bit-debuginfo-1.8.0-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2019-17543.html https://bugzilla.suse.com/1153936

1 0

openSUSE-SU-2019:2398-1: moderate: Security update for lz4
by opensuse-security＠opensuse.org 28 Oct '19

28 Oct '19

openSUSE Security Update: Security update for lz4 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2398-1 Rating: moderate References: #1153936 Cross-References: CVE-2019-17543 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for lz4 fixes the following issues: - CVE-2019-17543: Fixed a heap-based buffer overflow in LZ4_write32 (bsc#1153936). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2398=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): liblz4-1-1.8.0-lp150.2.3.1 liblz4-1-debuginfo-1.8.0-lp150.2.3.1 liblz4-devel-1.8.0-lp150.2.3.1 lz4-1.8.0-lp150.2.3.1 lz4-debuginfo-1.8.0-lp150.2.3.1 lz4-debugsource-1.8.0-lp150.2.3.1 - openSUSE Leap 15.0 (x86_64): liblz4-1-32bit-1.8.0-lp150.2.3.1 liblz4-1-32bit-debuginfo-1.8.0-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2019-17543.html https://bugzilla.suse.com/1153936

1 0

openSUSE-SU-2019:2397-1: moderate: Security update for sysstat
by opensuse-security＠opensuse.org 28 Oct '19

28 Oct '19

openSUSE Security Update: Security update for sysstat ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2397-1 Rating: moderate References: #1150114 Cross-References: CVE-2019-16167 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for sysstat fixes the following issue: - CVE-2019-16167: Fixed a memory corruption due to an integer overflow. (bsc#1150114) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2397=1 Package List: - openSUSE Leap 15.0 (x86_64): sysstat-12.0.2-lp150.16.1 sysstat-debuginfo-12.0.2-lp150.16.1 sysstat-debugsource-12.0.2-lp150.16.1 sysstat-isag-12.0.2-lp150.16.1 References: https://www.suse.com/security/cve/CVE-2019-16167.html https://bugzilla.suse.com/1150114

1 0

openSUSE-SU-2019:2395-1: moderate: Security update for sysstat
by opensuse-security＠opensuse.org 28 Oct '19

28 Oct '19

openSUSE Security Update: Security update for sysstat ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2395-1 Rating: moderate References: #1150114 Cross-References: CVE-2019-16167 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for sysstat fixes the following issue: - CVE-2019-16167: Fixed a memory corruption due to an integer overflow. (bsc#1150114) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2395=1 Package List: - openSUSE Leap 15.1 (x86_64): sysstat-12.0.2-lp151.3.9.1 sysstat-debuginfo-12.0.2-lp151.3.9.1 sysstat-debugsource-12.0.2-lp151.3.9.1 sysstat-isag-12.0.2-lp151.3.9.1 References: https://www.suse.com/security/cve/CVE-2019-16167.html https://bugzilla.suse.com/1150114

1 0

openSUSE-SU-2019:2394-1: moderate: Security update for zziplib
by opensuse-security＠opensuse.org 28 Oct '19

28 Oct '19

openSUSE Security Update: Security update for zziplib ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2394-1 Rating: moderate References: #1107424 #1129403 Cross-References: CVE-2018-16548 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for zziplib fixes the following issues: Security issue fixed: - CVE-2018-16548: Prevented memory leak from __zzip_parse_root_directory(). Free allocated structure if its address is not passed back. (bsc#1107424) Other issue addressed: - Prevented a division by zero (bsc#1129403). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2394=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libzzip-0-13-0.13.69-lp150.7.1 libzzip-0-13-debuginfo-0.13.69-lp150.7.1 zziplib-debugsource-0.13.69-lp150.7.1 zziplib-devel-0.13.69-lp150.7.1 zziplib-devel-debuginfo-0.13.69-lp150.7.1 - openSUSE Leap 15.0 (x86_64): libzzip-0-13-32bit-0.13.69-lp150.7.1 libzzip-0-13-32bit-debuginfo-0.13.69-lp150.7.1 zziplib-devel-32bit-0.13.69-lp150.7.1 zziplib-devel-32bit-debuginfo-0.13.69-lp150.7.1 References: https://www.suse.com/security/cve/CVE-2018-16548.html https://bugzilla.suse.com/1107424 https://bugzilla.suse.com/1129403

1 0

openSUSE-SU-2019:2396-1: moderate: Security update for zziplib
by opensuse-security＠opensuse.org 28 Oct '19

28 Oct '19

openSUSE Security Update: Security update for zziplib ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2396-1 Rating: moderate References: #1107424 #1129403 Cross-References: CVE-2018-16548 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for zziplib fixes the following issues: Security issue fixed: - CVE-2018-16548: Prevented memory leak from __zzip_parse_root_directory(). Free allocated structure if its address is not passed back. (bsc#1107424) Other issue addressed: - Prevented a division by zero (bsc#1129403). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2396=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libzzip-0-13-0.13.69-lp151.4.3.1 libzzip-0-13-debuginfo-0.13.69-lp151.4.3.1 zziplib-debugsource-0.13.69-lp151.4.3.1 zziplib-devel-0.13.69-lp151.4.3.1 zziplib-devel-debuginfo-0.13.69-lp151.4.3.1 - openSUSE Leap 15.1 (x86_64): libzzip-0-13-32bit-0.13.69-lp151.4.3.1 libzzip-0-13-32bit-debuginfo-0.13.69-lp151.4.3.1 zziplib-devel-32bit-0.13.69-lp151.4.3.1 zziplib-devel-32bit-debuginfo-0.13.69-lp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2018-16548.html https://bugzilla.suse.com/1107424 https://bugzilla.suse.com/1129403

1 0

openSUSE-RU-2019:2391-1: important: Recommended update for libzypp, zypper, libsolv and PackageKit
by maintenance＠opensuse.org 27 Oct '19

27 Oct '19

openSUSE Recommended Update: Recommended update for libzypp, zypper, libsolv and PackageKit ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2391-1 Rating: important References: #1049825 #1116995 #1120629 #1120630 #1120631 #1127155 #1127608 #1130306 #1131113 #1131823 #1134226 #1135749 #1137977 #1139795 #1140039 #1145521 #1146027 #1146415 #1146947 #1153557 #859480 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves three vulnerabilities and has 18 fixes is now available. Description: This update for libzypp, zypper, libsolv and PackageKit fixes the following issues: Security issues fixed in libsolv: - CVE-2018-20532: Fixed NULL pointer dereference at ext/testcase.c (function testcase_read) (bsc#1120629). - CVE-2018-20533: Fixed NULL pointer dereference at ext/testcase.c (function testcase_str2dep_complex) in libsolvext.a (bsc#1120630). - CVE-2018-20534: Fixed illegal address access at src/pool.h (function pool_whatprovides) in libsolv.a (bsc#1120631). Other issues addressed in libsolv: - Fixed an issue where libsolv failed to build against swig 4.0 by updating the version to 0.7.5 (bsc#1135749). - Fixed an issue with the package name (bsc#1131823). - repo_add_rpmdb: do not copy bad solvables from the old solv file - Fixed an issue with cleandeps updates in which all packages were not updated - Experimental DISTTYPE_CONDA and REL_CONDA support - Fixed cleandeps jobs when using patterns (bsc#1137977) - Fixed favorq leaking between solver runs if the solver is reused - Fixed SOLVER_FLAG_FOCUS_BEST updateing packages without reason - Be more correct with multiversion packages that obsolete their own name (bnc#1127155) - Fix repository priority handling for multiversion packages - Make code compatible with swig 4.0, remove obj0 instances - repo2solv: support zchunk compressed data - Remove NO_BRP_STRIP_DEBUG=true as brp-15-strip-debug will not strip debug info for archives Issues fixed in libzypp: - Fix empty metalink downloads if filesize is unknown (bsc#1153557) - Recognize riscv64 as architecture - Fix installation of new header file (fixes #185) - zypp.conf: Introduce `solver.focus` to define the resolvers general attitude when resolving jobs. (bsc#1146415) - New container detection algorithm for zypper ps (bsc#1146947) - Fix leaking filedescriptors in MediaCurl. (bsc#1116995) - Run file conflict check on dry-run. (bsc#1140039) - Do not remove orphan products if the .prod file is owned by a package. (bsc#1139795) - Rephrase file conflict check summary. (bsc#1140039) - Fix bash completions option detection. (bsc#1049825) - Fixes a bug where zypper exited on SIGPIPE when downloading packages (bsc#1145521) - Fixes an issue where zypper exited with a segmentation fault when updating via YaST2 (bsc#1146027) - PublicKey::algoName: supply key algorithm and length Issues fixed in zypper: - Update to version 1.14.30 - Ignore SIGPIPE while STDOUT/STDERR are OK (bsc#1145521) - Dump stacktrace on SIGPIPE (bsc#1145521) - info: The requested info must be shown in QUIET mode (fixes #287) - Fix local/remote url classification. - Rephrase file conflict check summary (bsc#1140039) - Fix bash completions option detection (bsc#1049825) - man: split '--with[out]' like options to ease searching. - Unhided 'ps' command in help - Added option to show more conflict information - Rephrased `zypper ps` hint (bsc#859480) - Fixed repo refresh not returning 106-ZYPPER_EXIT_INF_REPOS_SKIPPED if --root is used (bsc#1134226) - Fixed unknown package handling in zypper install (bsc#1127608) - Re-show progress bar after pressing retry upon install error (bsc#1131113) Issues fixed in PackageKit: - Port the cron configuration variables to the systemd timer script, and add -sendwait parameter to mail in the script(bsc#1130306). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2391=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): PackageKit-1.1.10-lp151.8.6.1 PackageKit-backend-zypp-1.1.10-lp151.8.6.1 PackageKit-backend-zypp-debuginfo-1.1.10-lp151.8.6.1 PackageKit-debuginfo-1.1.10-lp151.8.6.1 PackageKit-debugsource-1.1.10-lp151.8.6.1 PackageKit-devel-1.1.10-lp151.8.6.1 PackageKit-devel-debuginfo-1.1.10-lp151.8.6.1 PackageKit-gstreamer-plugin-1.1.10-lp151.8.6.1 PackageKit-gstreamer-plugin-debuginfo-1.1.10-lp151.8.6.1 PackageKit-gtk3-module-1.1.10-lp151.8.6.1 PackageKit-gtk3-module-debuginfo-1.1.10-lp151.8.6.1 libpackagekit-glib2-18-1.1.10-lp151.8.6.1 libpackagekit-glib2-18-debuginfo-1.1.10-lp151.8.6.1 libpackagekit-glib2-devel-1.1.10-lp151.8.6.1 libsolv-debuginfo-0.7.6-lp151.2.3.2 libsolv-debugsource-0.7.6-lp151.2.3.2 libsolv-demo-0.7.6-lp151.2.3.2 libsolv-demo-debuginfo-0.7.6-lp151.2.3.2 libsolv-devel-0.7.6-lp151.2.3.2 libsolv-devel-debuginfo-0.7.6-lp151.2.3.2 libsolv-tools-0.7.6-lp151.2.3.2 libsolv-tools-debuginfo-0.7.6-lp151.2.3.2 libyui-ncurses-pkg-debugsource-2.48.9-lp151.2.3.1 libyui-ncurses-pkg-devel-2.48.9-lp151.2.3.1 libyui-ncurses-pkg9-2.48.9-lp151.2.3.1 libyui-ncurses-pkg9-debuginfo-2.48.9-lp151.2.3.1 libyui-qt-pkg-debugsource-2.45.27-lp151.2.3.1 libyui-qt-pkg-devel-2.45.27-lp151.2.3.1 libyui-qt-pkg9-2.45.27-lp151.2.3.1 libyui-qt-pkg9-debuginfo-2.45.27-lp151.2.3.1 libzypp-17.15.0-lp151.2.3.2 libzypp-debuginfo-17.15.0-lp151.2.3.2 libzypp-debugsource-17.15.0-lp151.2.3.2 libzypp-devel-17.15.0-lp151.2.3.2 libzypp-devel-doc-17.15.0-lp151.2.3.2 perl-solv-0.7.6-lp151.2.3.2 perl-solv-debuginfo-0.7.6-lp151.2.3.2 python-solv-0.7.6-lp151.2.3.2 python-solv-debuginfo-0.7.6-lp151.2.3.2 python3-solv-0.7.6-lp151.2.3.2 python3-solv-debuginfo-0.7.6-lp151.2.3.2 ruby-solv-0.7.6-lp151.2.3.2 ruby-solv-debuginfo-0.7.6-lp151.2.3.2 typelib-1_0-PackageKitGlib-1_0-1.1.10-lp151.8.6.1 yast2-pkg-bindings-4.1.2-lp151.2.3.1 yast2-pkg-bindings-debuginfo-4.1.2-lp151.2.3.1 yast2-pkg-bindings-debugsource-4.1.2-lp151.2.3.1 zypper-1.14.30-lp151.2.3.1 zypper-debuginfo-1.14.30-lp151.2.3.1 zypper-debugsource-1.14.30-lp151.2.3.1 - openSUSE Leap 15.1 (x86_64): libpackagekit-glib2-18-32bit-1.1.10-lp151.8.6.1 libpackagekit-glib2-18-32bit-debuginfo-1.1.10-lp151.8.6.1 libpackagekit-glib2-devel-32bit-1.1.10-lp151.8.6.1 - openSUSE Leap 15.1 (noarch): PackageKit-branding-upstream-1.1.10-lp151.8.6.1 PackageKit-lang-1.1.10-lp151.8.6.1 libyui-ncurses-pkg-doc-2.48.9-lp151.2.3.1 libyui-qt-pkg-doc-2.45.27-lp151.2.3.1 yast2-pkg-bindings-devel-doc-4.1.2-lp151.2.3.1 zypper-aptitude-1.14.30-lp151.2.3.1 zypper-log-1.14.30-lp151.2.3.1 zypper-needs-restarting-1.14.30-lp151.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-20532.html https://www.suse.com/security/cve/CVE-2018-20533.html https://www.suse.com/security/cve/CVE-2018-20534.html https://bugzilla.suse.com/1049825 https://bugzilla.suse.com/1116995 https://bugzilla.suse.com/1120629 https://bugzilla.suse.com/1120630 https://bugzilla.suse.com/1120631 https://bugzilla.suse.com/1127155 https://bugzilla.suse.com/1127608 https://bugzilla.suse.com/1130306 https://bugzilla.suse.com/1131113 https://bugzilla.suse.com/1131823 https://bugzilla.suse.com/1134226 https://bugzilla.suse.com/1135749 https://bugzilla.suse.com/1137977 https://bugzilla.suse.com/1139795 https://bugzilla.suse.com/1140039 https://bugzilla.suse.com/1145521 https://bugzilla.suse.com/1146027 https://bugzilla.suse.com/1146415 https://bugzilla.suse.com/1146947 https://bugzilla.suse.com/1153557 https://bugzilla.suse.com/859480

1 0

openSUSE-SU-2019:2392-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 27 Oct '19

27 Oct '19

openSUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2392-1 Rating: important References: #1046299 #1046303 #1046305 #1050244 #1050536 #1050545 #1051510 #1055186 #1061840 #1064802 #1065600 #1066129 #1073513 #1086323 #1087092 #1089644 #1093205 #1097583 #1097584 #1097585 #1097586 #1097587 #1097588 #1098291 #1101674 #1109158 #1114279 #1117665 #1123080 #1133140 #1134303 #1135642 #1135854 #1135873 #1137799 #1140729 #1140845 #1140883 #1141600 #1142635 #1142667 #1144375 #1144449 #1145099 #1148410 #1150452 #1150465 #1150875 #1151508 #1152788 #1152791 #1153112 #1153158 #1153236 #1153263 #1153646 #1153713 #1153717 #1153718 #1153719 #1153811 #1154108 #1154189 #1154354 #1154372 #1154578 #1154607 #1154608 #1154610 #1154611 #1154651 #1154747 #118461_FIXME #133135_FIXME #135757_FIXME #147830_FIXME #147831_FIXME #158172_FIXME #165544_FIXME #166495_FIXME #172859_FIXME #172860_FIXME #181778_FIXME #229268_FIXME #229269_FIXME #229270_FIXME #229274_FIXME #229277_FIXME #229279_FIXME #229280_FIXME #229281_FIXME #229283_FIXME #229285_FIXME #229286_FIXME #229297_FIXME #296718_FIXME #358767_FIXME #359798_FIXME #802154 #814594 #919448 #987367 #998153 Cross-References: CVE-2019-16232 CVE-2019-16234 CVE-2019-17056 CVE-2019-17133 CVE-2019-17666 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves 5 vulnerabilities and has 98 fixes is now available. Description: The openSUSE Leap 15.0 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-17666: rtl_p2p_noa_ie in drivers/net/wireless/realtek/rtlwifi/ps.c lacked a certain upper-bound check, leading to a buffer overflow (bnc#1154372). - CVE-2019-16232: drivers/net/wireless/marvell/libertas/if_sdio.c did not check the alloc_workqueue return value, leading to a NULL pointer dereference (bnc#1150465). - CVE-2019-16234: drivers/net/wireless/intel/iwlwifi/pcie/trans.c did not check the alloc_workqueue return value, leading to a NULL pointer dereference (bnc#1150452). - CVE-2019-17133: cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c did not reject a long SSID IE, leading to a Buffer Overflow (bnc#1153158). - CVE-2019-17056: llcp_sock_create in net/nfc/llcp_sock.c in the AF_NFC network module did not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-3a359798b176 (bnc#1152788). The following non-security bugs were fixed: - 9p: avoid attaching writeback_fid on mmap with type PRIVATE (bsc#1051510). - ACPI / CPPC: do not require the _PSD method (bsc#1051510). - ACPI: CPPC: Set pcc_data[pcc_ss_id] to NULL in acpi_cppc_processor_exit() (bsc#1051510). - ACPI / processor: do not print errors for processorIDs == 0xff (bsc#1051510). - act_mirred: Fix mirred_init_module error handling (bsc#1051510). - Add kernel module compression support (bsc#1135854) For enabling the kernel module compress, add the item COMPRESS_MODULES="xz" in config.sh, then mkspec will pass it to the spec file. - ALSA: hda - Add laptop imic fixup for ASUS M9V laptop (bsc#1051510). - ALSA: hda: Add support of Zhaoxin controller (bsc#1051510). - ALSA: hda - Apply AMD controller workaround for Raven platform (bsc#1051510). - ALSA: hda - Define a fallback_pin_fixup_tbl for alc269 family (bsc#1051510). - ALSA: hda - Drop unsol event handler for Intel HDMI codecs (bsc#1051510). - ALSA: hda - Expand pin_match function to match upcoming new tbls (bsc#1051510). - ALSA: hda: Flush interrupts on disabling (bsc#1051510). - ALSA: hda/hdmi: remove redundant assignment to variable pcm_idx (bsc#1051510). - ALSA: hda - Inform too slow responses (bsc#1051510). - ALSA: hda/realtek - Blacklist PC beep for Lenovo ThinkCentre M73/93 (bsc#1051510). - ALSA: hda/realtek - Check beep whitelist before assigning in all codecs (bsc#1051510). - ALSA: hda/realtek - Fix alienware headset mic (bsc#1051510). - ALSA: hda/realtek: Reduce the Headphone static noise on XPS 9350/9360 (bsc#1051510). - ALSA: hda: Set fifo_size for both playback and capture streams (bsc#1051510). - ALSA: hda - Show the fatal CORB/RIRB error more clearly (bsc#1051510). - ALSA: hda/sigmatel - remove unused variable 'stac9200_core_init' (bsc#1051510). - ALSA: i2c: ak4xxx-adda: Fix a possible null pointer dereference in build_adc_controls() (bsc#1051510). - ALSA: line6: sizeof (byte) is always 1, use that fact (bsc#1051510). - ALSA: usb-audio: Add Pioneer DDJ-SX3 PCM quirck (bsc#1051510). - ALSA: usb-audio: Disable quirks for BOSS Katana amplifiers (bsc#1051510). - ALSA: usb-audio: Skip bSynchAddress endpoint check if it is invalid (bsc#1051510). - appletalk: enforce CAP_NET_RAW for raw sockets (bsc#1051510). - ASoC: Define a set of DAPM pre/post-up events (bsc#1051510). - ASoC: dmaengine: Make the pcm->name equal to pcm->id if the name is not set (bsc#1051510). - ASoC: Intel: Fix use of potentially uninitialized variable (bsc#1051510). - ASoC: Intel: NHLT: Fix debug print format (bsc#1051510). - ASoC: sgtl5000: Fix charge pump source assignment (bsc#1051510). - auxdisplay: panel: need to delete scan_timer when misc_register fails in panel_attach (bsc#1051510). - ax25: enforce CAP_NET_RAW for raw sockets (bsc#1051510). - blacklist "signal: Correct namespace fixups of si_pid and si_uid" (bsc#1142667) - blk-wbt: abstract out end IO completion handler (bsc#1135873). - blk-wbt: fix has-sleeper queueing check (bsc#1135873). - blk-wbt: improve waking of tasks (bsc#1135873). - blk-wbt: move disable check into get_limit() (bsc#1135873). - blk-wbt: use wq_has_sleeper() for wq active check (bsc#1135873). - block: add io timeout to sysfs (bsc#1148410). - block: do not show io_timeout if driver has no timeout handler (bsc#1148410). - bluetooth: btrtl: Additional Realtek 8822CE Bluetooth devices (bsc#1051510). - bnx2x: Fix VF's VLAN reconfiguration in reload (bsc#1086323 ). - bridge/mdb: remove wrong use of NLM_F_MULTI (networking-stable-19_09_15). - btrfs: bail out gracefully rather than BUG_ON (bsc#1153646). - btrfs: check for the full sync flag while holding the inode lock during fsync (bsc#1153713). - btrfs: Ensure btrfs_init_dev_replace_tgtdev sees up to date values (bsc#1154651). - btrfs: Ensure replaced device does not have pending chunk allocation (bsc#1154607). - btrfs: remove wrong use of volume_mutex from btrfs_dev_replace_start (bsc#1154651). - can: mcp251x: mcp251x_hw_reset(): allow more time after a reset (bsc#1051510). - can: xilinx_can: xcan_probe(): skip error message on deferred probe (bsc#1051510). - cdc_ether: fix rndis support for Mediatek based smartphones (networking-stable-19_09_15). - cdc_ncm: fix divide-by-zero caused by invalid wMaxPacketSize (bsc#1051510). - ceph: fix directories inode i_blkbits initialization (bsc#1153717). - ceph: reconnect connection if session hang in opening state (bsc#1153718). - ceph: update the mtime when truncating up (bsc#1153719). - cfg80211: add and use strongly typed element iteration macros (bsc#1051510). - cfg80211: Purge frame registrations on iftype change (bsc#1051510). - clk: at91: select parent if main oscillator or bypass is enabled (bsc#1051510). - clk: qoriq: Fix -Wunused-const-variable (bsc#1051510). - clk: sirf: Do not reference clk_init_data after registration (bsc#1051510). - clk: zx296718: Do not reference clk_init_data after registration (bsc#1051510). - crypto: talitos - fix missing break in switch statement (bsc#1142635). - cxgb4: fix endianness for vlan value in cxgb4_tc_flower (bsc#1064802 bsc#1066129). - cxgb4: offload VLAN flows regardless of VLAN ethtype (bsc#1064802 bsc#1066129). - cxgb4: reduce kernel stack usage in cudbg_collect_mem_region() (bsc#1073513). - cxgb4: Signedness bug in init_one() (bsc#1097585 bsc#1097586 bsc#1097587 bsc#1097588 bsc#1097583 bsc#1097584). - cxgb4: smt: Add lock for atomic_dec_and_test (bsc#1064802 bsc#1066129). - dasd_fba: Display '00000000' for zero page when dumping sense - /dev/mem: Bail out upon SIGKILL (git-fixes). - drm/amdgpu: Check for valid number of registers to read (bsc#1051510). - drm/amdgpu/si: fix ASIC tests (git-fixes). - drm/amd/powerplay/smu7: enforce minimal VBITimeout (v2) (bsc#1051510). - drm/ast: Fixed reboot test may cause system hanged (bsc#1051510). - drm/bridge: tc358767: Increase AUX transfer length limit (bsc#1051510). - drm: Flush output polling on shutdown (bsc#1051510). - drm/msm/dsi: Implement reset correctly (bsc#1051510). - drm/panel: simple: fix AUO g185han01 horizontal blanking (bsc#1051510). - drm/radeon: Fix EEH during kexec (bsc#1051510). - drm/tilcdc: Register cpufreq notifier after we have initialized crtc (bsc#1051510). - drm/vmwgfx: Fix double free in vmw_recv_msg() (bsc#1051510). - e1000e: add workaround for possible stalled packet (bsc#1051510). - firmware: dmi: Fix unlikely out-of-bounds read in save_mem_devices (git-fixes). - Fix AMD IOMMU kABI (bsc#1154610). - Fix KVM kABI after x86 mmu backports (bsc#1117665). - gpu: drm: radeon: Fix a possible null-pointer dereference in radeon_connector_set_property() (bsc#1051510). - HID: apple: Fix stuck function keys when using FN (bsc#1051510). - HID: hidraw: Fix invalid read in hidraw_ioctl (bsc#1051510). - HID: logitech: Fix general protection fault caused by Logitech driver (bsc#1051510). - HID: prodikeys: Fix general protection fault during probe (bsc#1051510). - HID: sony: Fix memory corruption issue on cleanup (bsc#1051510). - hwmon: (acpi_power_meter) Change log level for 'unsafe software power cap' (bsc#1051510). - hwrng: core - do not wait on add_early_randomness() (git-fixes). - i2c: riic: Clear NACK in tend isr (bsc#1051510). - IB/core, ipoib: Do not overreact to SM LID change event (bsc#1154108) - IB/hfi1: Remove overly conservative VM_EXEC flag check (bsc#1144449). - IB/mlx5: Consolidate use_umr checks into single function (bsc#1093205). - IB/mlx5: Fix MR re-registration flow to use UMR properly (bsc#1093205). - IB/mlx5: Report correctly tag matching rendezvous capability (bsc#1046305). - ieee802154: atusb: fix use-after-free at disconnect (bsc#1051510). - ieee802154: enforce CAP_NET_RAW for raw sockets (bsc#1051510). - iio: adc: ad799x: fix probe error handling (bsc#1051510). - iio: light: opt3001: fix mutex unlock race (bsc#1051510). - ima: always return negative code for error (bsc#1051510). - Input: da9063 - fix capability and drop KEY_SLEEP (bsc#1051510). - iommu/amd: Apply the same IVRS IOAPIC workaround to Acer Aspire A315-41 (bsc#1137799). - iommu/amd: Check PM_LEVEL_SIZE() condition in locked section (bsc#1154608). - iommu/amd: Override wrong IVRS IOAPIC on Raven Ridge systems (bsc#1137799). - iommu/amd: Remove domain->updated (bsc#1154610). - iommu/amd: Wait for completion of IOTLB flush in attach_device (bsc#1154611). - ipmi_si: Only schedule continuously in the thread in maintenance mode (bsc#1051510). - ipv6: Fix the link time qualifier of 'ping_v6_proc_exit_net()' (networking-stable-19_09_15). - ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (bsc#1101674). - ixgbe: sync the first fragment unconditionally (bsc#1133140). - kabi: net: sched: act_sample: fix psample group handling on overwrite (networking-stable-19_09_05). - kabi/severities: Whitelist functions internal to radix mm. To call these functions you have to first detect if you are running in radix mm mode which can't be expected of OOT code. - kABI workaround for snd_hda_pick_pin_fixup() changes (bsc#1051510). - kernel-binary: Drop .kernel-binary.spec.buildenv (boo#1154578). - kernel-binary.spec.in: Fix build of non-modular kernels (boo#1154578). - kernel-subpackage-build: create zero size ghost for uncompressed vmlinux (bsc#1154354). It is not strictly necessary to uncompress it so maybe the ghost file can be 0 size in this case. - kernel/sysctl.c: do not override max_threads provided by userspace (bnc#1150875). - kvm: Convert kvm_lock to a mutex (bsc#1117665). - kvm: MMU: drop vcpu param in gpte_access (bsc#1117665). - kvm: PPC: Book3S HV: use smp_mb() when setting/clearing host_ipi flag (bsc#1061840). - kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (bsc#1117665). - kvm: x86: adjust kvm_mmu_page member to save 8 bytes (bsc#1117665). - kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (bsc#1117665). - kvm: x86: Do not release the page inside mmu_set_spte() (bsc#1117665). - kvm: x86: make FNAME(fetch) and __direct_map more similar (bsc#1117665). - kvm: x86, powerpc: do not allow clearing largepages debugfs entry (bsc#1117665). - kvm: x86: remove now unneeded hugepage gfn adjustment (bsc#1117665). - libertas: Add missing sentinel at end of if_usb.c fw_table (bsc#1051510). - lib/mpi: Fix karactx leak in mpi_powm (bsc#1051510). - mac80211: accept deauth frames in IBSS mode (bsc#1051510). - macsec: drop skb sk before calling gro_cells_receive (bsc#1051510). - media: atmel: atmel-isc: fix asd memory allocation (bsc#1135642). - media: cpia2_usb: fix memory leaks (bsc#1051510). - media: dvb-core: fix a memory leak bug (bsc#1051510). - media: exynos4-is: fix leaked of_node references (bsc#1051510). - media: gspca: zero usb_buf on error (bsc#1051510). - media: hdpvr: Add device num check and handling (bsc#1051510). - media: hdpvr: add terminating 0 at end of string (bsc#1051510). - media: i2c: ov5645: Fix power sequence (bsc#1051510). - media: iguanair: add sanity checks (bsc#1051510). - media: omap3isp: Do not set streaming state on random subdevs (bsc#1051510). - media: omap3isp: Set device on omap3isp subdevs (bsc#1051510). - media: ov9650: add a sanity check (bsc#1051510). - media: radio/si470x: kill urb on error (bsc#1051510). - media: saa7134: fix terminology around saa7134_i2c_eeprom_md7134_gate() (bsc#1051510). - media: saa7146: add cleanup in hexium_attach() (bsc#1051510). - media: sn9c20x: Add MSI MS-1039 laptop to flip_dmi_table (bsc#1051510). - media: stkwebcam: fix runtime PM after driver unbind (bsc#1051510). - media: ttusb-dec: Fix info-leak in ttusb_dec_send_command() (bsc#1051510). - memstick: jmb38x_ms: Fix an error handling path in 'jmb38x_ms_probe()' (bsc#1051510). - mfd: intel-lpss: Remove D3cold delay (bsc#1051510). - mISDN: enforce CAP_NET_RAW for raw sockets (bsc#1051510). - mld: fix memory leak in mld_del_delrec() (networking-stable-19_09_05). - mmc: sdhci: Fix incorrect switch to HS mode (bsc#1051510). - mmc: sdhci: improve ADMA error reporting (bsc#1051510). - mmc: sdhci-of-esdhc: set DMA snooping based on DMA coherence (bsc#1051510). - net: Fix null de-reference of device refcount (networking-stable-19_09_15). - net: fix skb use after free in netpoll (networking-stable-19_09_05). - net: gso: Fix skb_segment splat when splitting gso_size mangled skb having linear-headed frag_list (networking-stable-19_09_15). - net/ibmvnic: Fix EOI when running in XIVE mode (bsc#1089644, ltc#166495, ltc#165544, git-fixes). - net/mlx4_en: fix a memory leak bug (bsc#1046299). - net/mlx5: Add device ID of upcoming BlueField-2 (bsc#1046303 ). - net/mlx5: Fix error handling in mlx5_load() (bsc#1046305 ). - net: sched: act_sample: fix psample group handling on overwrite (networking-stable-19_09_05). - net: stmmac: dwmac-rk: Do not fail if phy regulator is absent (networking-stable-19_09_05). - nfc: fix attrs checks in netlink interface (bsc#1051510). - nfc: fix memory leak in llcp_sock_bind() (bsc#1051510). - nfc: pn533: fix use-after-free and memleaks (bsc#1051510). - objtool: Clobber user CFLAGS variable (bsc#1153236). - PCI: Correct pci=resource_alignment parameter example (bsc#1051510). - PCI: dra7xx: Fix legacy INTD IRQ handling (bsc#1087092). - PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (bsc#1153263). - PCI: PM: Fix pci_power_up() (bsc#1051510). - pinctrl: tegra: Fix write barrier placement in pmx_writel (bsc#1051510). - platform/x86: classmate-laptop: remove unused variable (bsc#1051510). - platform/x86: pmc_atom: Add Siemens SIMATIC IPC277E to critclk_systems DMI table (bsc#1051510). - powerpc/64s/pseries: radix flush translations before MMU is enabled at boot (bsc#1055186). - powerpc/64s/radix: keep kernel ERAT over local process/guest invalidates (bsc#1055186). - powerpc/64s/radix: tidy up TLB flushing code (bsc#1055186). - powerpc/64s: Rename PPC_INVALIDATE_ERAT to PPC_ISA_3_0_INVALIDATE_ERAT (bsc#1055186). - powerpc/mm/book3s64: Move book3s64 code to pgtable-book3s64 (bsc#1055186). - powerpc/mm: mark more tlb functions as __always_inline (bsc#1055186). - powerpc/mm: Properly invalidate when setting process table base (bsc#1055186). - powerpc/mm/radix: mark as __tlbie_pid() and friends as__always_inline (bsc#1055186). - powerpc/mm/radix: mark __radix__flush_tlb_range_psize() as __always_inline (bsc#1055186). - powerpc/pseries/mobility: use cond_resched when updating device tree (bsc#1153112 ltc#181778). - powerpc/pseries: Remove confusing warning message (bsc#1109158). - powerpc/rtas: allow rescheduling while changing cpu states (bsc#1153112 ltc#181778). - power: supply: sysfs: ratelimit property read error message (bsc#1051510). - Pull packaging cleanup from mkubecek. - qed: iWARP - Fix default window size to be based on chip (bsc#1050536 bsc#1050545). - qed: iWARP - Fix tc for MPA ll2 connection (bsc#1050536 bsc#1050545). - qed: iWARP - fix uninitialized callback (bsc#1050536 bsc#1050545). - qed: iWARP - Use READ_ONCE and smp_store_release to access ep->state (bsc#1050536 bsc#1050545). - RDMA/bnxt_re: Fix spelling mistake "missin_resp" -> "missing_resp" (bsc#1050244). - RDMA: Fix goto target to release the allocated memory (bsc#1050244). - rtlwifi: rtl8192cu: Fix value set in descriptor (bsc#1142635). - sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero (networking-stable-19_09_15). - scripts/arch-symbols: add missing link. - scsi: lpfc: Fix null ptr oops updating lpfc_devloss_tmo via sysfs attribute (bsc#1140845). - scsi: lpfc: Fix propagation of devloss_tmo setting to nvme transport (bsc#1140883). - scsi: lpfc: Remove bg debugfs buffers (bsc#1144375). - scsi: qedf: fc_rport_priv reference counting fixes (bsc#1098291). - scsi: qedf: Modify abort and tmf handler to handle edge condition and flush (bsc#1098291). - scsi: storvsc: setup 1:1 mapping between hardware queue and CPU queue (bsc#1140729). - sctp: Fix the link time qualifier of 'sctp_ctrlsock_exit()' (networking-stable-19_09_15). - sctp: use transport pf_retrans in sctp_do_8_2_transport_strike (networking-stable-19_09_15). - Sign non-x86 kernels when possible (boo#1134303) - sock_diag: fix autoloading of the raw_diag module (bsc#1152791). - sock_diag: request _diag module only when the family or proto has been registered (bsc#1152791). - staging: vt6655: Fix memory leak in vt6655_probe (bsc#1051510). - tcp: Do not dequeue SYN/FIN-segments from write-queue (git-gixes). - tcp: fix tcp_ecn_withdraw_cwr() to clear TCP_ECN_QUEUE_CWR (networking-stable-19_09_15). - tcp: inherit timestamp on mtu probe (networking-stable-19_09_05). - tcp: remove empty skb from write queue in error cases (networking-stable-19_09_05). - thermal: Fix use-after-free when unregistering thermal zone device (bsc#1051510). - thermal_hwmon: Sanitize thermal_zone type (bsc#1051510). - tipc: add NULL pointer check before calling kfree_rcu (networking-stable-19_09_15). - tracing: Initialize iter->seq after zeroing in tracing_read_pipe() (bsc#1151508). - tun: fix use-after-free when register netdev failed (networking-stable-19_09_15). - tuntap: correctly set SOCKWQ_ASYNC_NOSPACE (bsc#1145099). - Update patches.suse/NFSv4-Check-the-return-value-of-update_open_stateid.patch (boo#1154189 bsc#1154747). - usb: adutux: fix NULL-derefs on disconnect (bsc#1142635). - usb: adutux: fix use-after-free on disconnect (bsc#1142635). - usb: adutux: fix use-after-free on release (bsc#1051510). - usb: chaoskey: fix use-after-free on release (bsc#1051510). - usb: dummy-hcd: fix power budget for SuperSpeed mode (bsc#1051510). - usb: iowarrior: fix use-after-free after driver unbind (bsc#1051510). - usb: iowarrior: fix use-after-free on disconnect (bsc#1051510). - usb: iowarrior: fix use-after-free on release (bsc#1051510). - usb: legousbtower: fix deadlock on disconnect (bsc#1142635). - usb: legousbtower: fix open after failed reset request (bsc#1142635). - usb: legousbtower: fix potential NULL-deref on disconnect (bsc#1142635). - usb: legousbtower: fix slab info leak at probe (bsc#1142635). - usb: legousbtower: fix use-after-free on release (bsc#1051510). - usb: microtek: fix info-leak at probe (bsc#1142635). - usbnet: ignore endpoints with invalid wMaxPacketSize (bsc#1051510). - usbnet: sanity checking of packet sizes and device mtu (bsc#1051510). - usb: serial: fix runtime PM after driver unbind (bsc#1051510). - usb: serial: ftdi_sio: add device IDs for Sienna and Echelon PL-20 (bsc#1051510). - usb: serial: keyspan: fix NULL-derefs on open() and write() (bsc#1051510). - usb: serial: option: add support for Cinterion CLS8 devices (bsc#1051510). - usb: serial: option: add Telit FN980 compositions (bsc#1051510). - usb: usblcd: fix I/O after disconnect (bsc#1142635). - usb: usblp: fix runtime PM after driver unbind (bsc#1051510). - usb: usb-skeleton: fix NULL-deref on disconnect (bsc#1051510). - usb: usb-skeleton: fix runtime PM after driver unbind (bsc#1051510). - usb: usb-skeleton: fix use-after-free after driver unbind (bsc#1051510). - usb: xhci: wait for CNR controller not ready bit in xhci resume (bsc#1051510). - usb: yurex: Do not retry on unexpected errors (bsc#1051510). - usb: yurex: fix NULL-derefs on disconnect (bsc#1051510). - vfio_pci: Restore original state on release (bsc#1051510). - vhost_net: conditionally enable tx polling (bsc#1145099). - video: of: display_timing: Add of_node_put() in of_get_display_timing() (bsc#1051510). - watchdog: imx2_wdt: fix min() calculation in imx2_wdt_set_timeout (bsc#1051510). - x86/asm: Fix MWAITX C-state hint value (bsc#1114279). - x86/mm: Use WRITE_ONCE() when setting PTEs (bsc#1114279). - xen/netback: fix error path of xenvif_connect_data() (bsc#1065600). - xen/pv: Fix Xen PV guest int3 handling (bsc#1153811). - xhci: Check all endpoints for LPM timeout (bsc#1051510). - xhci: Fix false warning message about wrong bounce buffer write length (bsc#1051510). - xhci: Increase STS_SAVE timeout in xhci_suspend() (bsc#1051510). - xhci: Prevent device initiated U1/U2 link pm if exit latency is too long (bsc#1051510). Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2392=1 Package List: - openSUSE Leap 15.0 (noarch): kernel-devel-4.12.14-lp150.12.79.1 kernel-docs-4.12.14-lp150.12.79.1 kernel-docs-html-4.12.14-lp150.12.79.1 kernel-macros-4.12.14-lp150.12.79.1 kernel-source-4.12.14-lp150.12.79.1 kernel-source-vanilla-4.12.14-lp150.12.79.1 - openSUSE Leap 15.0 (x86_64): kernel-debug-4.12.14-lp150.12.79.1 kernel-debug-base-4.12.14-lp150.12.79.1 kernel-debug-base-debuginfo-4.12.14-lp150.12.79.1 kernel-debug-debuginfo-4.12.14-lp150.12.79.1 kernel-debug-debugsource-4.12.14-lp150.12.79.1 kernel-debug-devel-4.12.14-lp150.12.79.1 kernel-debug-devel-debuginfo-4.12.14-lp150.12.79.1 kernel-default-4.12.14-lp150.12.79.1 kernel-default-base-4.12.14-lp150.12.79.1 kernel-default-base-debuginfo-4.12.14-lp150.12.79.1 kernel-default-debuginfo-4.12.14-lp150.12.79.1 kernel-default-debugsource-4.12.14-lp150.12.79.1 kernel-default-devel-4.12.14-lp150.12.79.1 kernel-default-devel-debuginfo-4.12.14-lp150.12.79.1 kernel-kvmsmall-4.12.14-lp150.12.79.1 kernel-kvmsmall-base-4.12.14-lp150.12.79.1 kernel-kvmsmall-base-debuginfo-4.12.14-lp150.12.79.1 kernel-kvmsmall-debuginfo-4.12.14-lp150.12.79.1 kernel-kvmsmall-debugsource-4.12.14-lp150.12.79.1 kernel-kvmsmall-devel-4.12.14-lp150.12.79.1 kernel-kvmsmall-devel-debuginfo-4.12.14-lp150.12.79.1 kernel-obs-build-4.12.14-lp150.12.79.1 kernel-obs-build-debugsource-4.12.14-lp150.12.79.1 kernel-obs-qa-4.12.14-lp150.12.79.1 kernel-syms-4.12.14-lp150.12.79.1 kernel-vanilla-4.12.14-lp150.12.79.1 kernel-vanilla-base-4.12.14-lp150.12.79.1 kernel-vanilla-base-debuginfo-4.12.14-lp150.12.79.1 kernel-vanilla-debuginfo-4.12.14-lp150.12.79.1 kernel-vanilla-debugsource-4.12.14-lp150.12.79.1 kernel-vanilla-devel-4.12.14-lp150.12.79.1 kernel-vanilla-devel-debuginfo-4.12.14-lp150.12.79.1 References: https://www.suse.com/security/cve/CVE-2019-16232.html https://www.suse.com/security/cve/CVE-2019-16234.html https://www.suse.com/security/cve/CVE-2019-17056.html https://www.suse.com/security/cve/CVE-2019-17133.html https://www.suse.com/security/cve/CVE-2019-17666.html https://bugzilla.suse.com/1046299 https://bugzilla.suse.com/1046303 https://bugzilla.suse.com/1046305 https://bugzilla.suse.com/1050244 https://bugzilla.suse.com/1050536 https://bugzilla.suse.com/1050545 https://bugzilla.suse.com/1051510 https://bugzilla.suse.com/1055186 https://bugzilla.suse.com/1061840 https://bugzilla.suse.com/1064802 https://bugzilla.suse.com/1065600 https://bugzilla.suse.com/1066129 https://bugzilla.suse.com/1073513 https://bugzilla.suse.com/1086323 https://bugzilla.suse.com/1087092 https://bugzilla.suse.com/1089644 https://bugzilla.suse.com/1093205 https://bugzilla.suse.com/1097583 https://bugzilla.suse.com/1097584 https://bugzilla.suse.com/1097585 https://bugzilla.suse.com/1097586 https://bugzilla.suse.com/1097587 https://bugzilla.suse.com/1097588 https://bugzilla.suse.com/1098291 https://bugzilla.suse.com/1101674 https://bugzilla.suse.com/1109158 https://bugzilla.suse.com/1114279 https://bugzilla.suse.com/1117665 https://bugzilla.suse.com/1123080 https://bugzilla.suse.com/1133140 https://bugzilla.suse.com/1134303 https://bugzilla.suse.com/1135642 https://bugzilla.suse.com/1135854 https://bugzilla.suse.com/1135873 https://bugzilla.suse.com/1137799 https://bugzilla.suse.com/1140729 https://bugzilla.suse.com/1140845 https://bugzilla.suse.com/1140883 https://bugzilla.suse.com/1141600 https://bugzilla.suse.com/1142635 https://bugzilla.suse.com/1142667 https://bugzilla.suse.com/1144375 https://bugzilla.suse.com/1144449 https://bugzilla.suse.com/1145099 https://bugzilla.suse.com/1148410 https://bugzilla.suse.com/1150452 https://bugzilla.suse.com/1150465 https://bugzilla.suse.com/1150875 https://bugzilla.suse.com/1151508 https://bugzilla.suse.com/1152788 https://bugzilla.suse.com/1152791 https://bugzilla.suse.com/1153112 https://bugzilla.suse.com/1153158 https://bugzilla.suse.com/1153236 https://bugzilla.suse.com/1153263 https://bugzilla.suse.com/1153646 https://bugzilla.suse.com/1153713 https://bugzilla.suse.com/1153717 https://bugzilla.suse.com/1153718 https://bugzilla.suse.com/1153719 https://bugzilla.suse.com/1153811 https://bugzilla.suse.com/1154108 https://bugzilla.suse.com/1154189 https://bugzilla.suse.com/1154354 https://bugzilla.suse.com/1154372 https://bugzilla.suse.com/1154578 https://bugzilla.suse.com/1154607 https://bugzilla.suse.com/1154608 https://bugzilla.suse.com/1154610 https://bugzilla.suse.com/1154611 https://bugzilla.suse.com/1154651 https://bugzilla.suse.com/1154747 https://bugzilla.suse.com/118461_FIXME https://bugzilla.suse.com/133135_FIXME https://bugzilla.suse.com/135757_FIXME https://bugzilla.suse.com/147830_FIXME https://bugzilla.suse.com/147831_FIXME https://bugzilla.suse.com/158172_FIXME https://bugzilla.suse.com/165544_FIXME https://bugzilla.suse.com/166495_FIXME https://bugzilla.suse.com/172859_FIXME https://bugzilla.suse.com/172860_FIXME https://bugzilla.suse.com/181778_FIXME https://bugzilla.suse.com/229268_FIXME https://bugzilla.suse.com/229269_FIXME https://bugzilla.suse.com/229270_FIXME https://bugzilla.suse.com/229274_FIXME https://bugzilla.suse.com/229277_FIXME https://bugzilla.suse.com/229279_FIXME https://bugzilla.suse.com/229280_FIXME https://bugzilla.suse.com/229281_FIXME https://bugzilla.suse.com/229283_FIXME https://bugzilla.suse.com/229285_FIXME https://bugzilla.suse.com/229286_FIXME https://bugzilla.suse.com/229297_FIXME https://bugzilla.suse.com/296718_FIXME https://bugzilla.suse.com/358767_FIXME https://bugzilla.suse.com/359798_FIXME https://bugzilla.suse.com/802154 https://bugzilla.suse.com/814594 https://bugzilla.suse.com/919448 https://bugzilla.suse.com/987367 https://bugzilla.suse.com/998153

1 0

openSUSE-SU-2019:2393-1: moderate: Security update for python
by opensuse-security＠opensuse.org 27 Oct '19

27 Oct '19

openSUSE Security Update: Security update for python ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2393-1 Rating: moderate References: #1130840 #1149955 #1153238 Cross-References: CVE-2019-16056 CVE-2019-16935 CVE-2019-9947 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for python fixes the following issues: Security issues fixed: - CVE-2019-9947: Fixed an insufficient validation of URL paths with embedded whitespace or control characters that could allow HTTP header injections. (bsc#1130840) - CVE-2019-16056: Fixed a parser issue in the email module. (bsc#1149955) - CVE-2019-16935: Fixed a reflected XSS in python/Lib/DocXMLRPCServer.py (bsc#1153238). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2393=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libpython2_7-1_0-2.7.14-lp151.10.10.2 libpython2_7-1_0-debuginfo-2.7.14-lp151.10.10.2 python-2.7.14-lp151.10.10.1 python-base-2.7.14-lp151.10.10.2 python-base-debuginfo-2.7.14-lp151.10.10.2 python-base-debugsource-2.7.14-lp151.10.10.2 python-curses-2.7.14-lp151.10.10.1 python-curses-debuginfo-2.7.14-lp151.10.10.1 python-debuginfo-2.7.14-lp151.10.10.1 python-debugsource-2.7.14-lp151.10.10.1 python-demo-2.7.14-lp151.10.10.1 python-devel-2.7.14-lp151.10.10.2 python-gdbm-2.7.14-lp151.10.10.1 python-gdbm-debuginfo-2.7.14-lp151.10.10.1 python-idle-2.7.14-lp151.10.10.1 python-tk-2.7.14-lp151.10.10.1 python-tk-debuginfo-2.7.14-lp151.10.10.1 python-xml-2.7.14-lp151.10.10.2 python-xml-debuginfo-2.7.14-lp151.10.10.2 - openSUSE Leap 15.1 (x86_64): libpython2_7-1_0-32bit-2.7.14-lp151.10.10.2 libpython2_7-1_0-32bit-debuginfo-2.7.14-lp151.10.10.2 python-32bit-2.7.14-lp151.10.10.1 python-32bit-debuginfo-2.7.14-lp151.10.10.1 python-base-32bit-2.7.14-lp151.10.10.2 python-base-32bit-debuginfo-2.7.14-lp151.10.10.2 - openSUSE Leap 15.1 (noarch): python-doc-2.7.14-lp151.10.10.1 python-doc-pdf-2.7.14-lp151.10.10.1 References: https://www.suse.com/security/cve/CVE-2019-16056.html https://www.suse.com/security/cve/CVE-2019-16935.html https://www.suse.com/security/cve/CVE-2019-9947.html https://bugzilla.suse.com/1130840 https://bugzilla.suse.com/1149955 https://bugzilla.suse.com/1153238

1 0

openSUSE-RU-2019:2390-1: moderate: Recommended update for targetcli-fb
by maintenance＠opensuse.org 27 Oct '19

27 Oct '19

openSUSE Recommended Update: Recommended update for targetcli-fb ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2390-1 Rating: moderate References: #1145685 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for targetcli-fb fixes the following issues: - The /iscsi discovery_uath "enable" variable is a number, not a string, so treat it as such. (bsc#1145685) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2390=1 Package List: - openSUSE Leap 15.1 (noarch): python2-targetcli-fb-2.1.49-lp151.2.6.1 python3-targetcli-fb-2.1.49-lp151.2.6.1 targetcli-fb-common-2.1.49-lp151.2.6.1 References: https://bugzilla.suse.com/1145685

1 0

openSUSE-SU-2019:2389-1: moderate: Security update for python
by opensuse-security＠opensuse.org 27 Oct '19

27 Oct '19

openSUSE Security Update: Security update for python ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2389-1 Rating: moderate References: #1130840 #1149955 #1153238 Cross-References: CVE-2019-16056 CVE-2019-16935 CVE-2019-9947 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for python fixes the following issues: Security issues fixed: - CVE-2019-9947: Fixed an insufficient validation of URL paths with embedded whitespace or control characters that could allow HTTP header injections. (bsc#1130840) - CVE-2019-16056: Fixed a parser issue in the email module. (bsc#1149955) - CVE-2019-16935: Fixed a reflected XSS in python/Lib/DocXMLRPCServer.py (bsc#1153238). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2389=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): python-2.7.14-lp150.6.21.1 python-curses-2.7.14-lp150.6.21.1 python-curses-debuginfo-2.7.14-lp150.6.21.1 python-debuginfo-2.7.14-lp150.6.21.1 python-debugsource-2.7.14-lp150.6.21.1 python-demo-2.7.14-lp150.6.21.1 python-gdbm-2.7.14-lp150.6.21.1 python-gdbm-debuginfo-2.7.14-lp150.6.21.1 python-idle-2.7.14-lp150.6.21.1 python-tk-2.7.14-lp150.6.21.1 python-tk-debuginfo-2.7.14-lp150.6.21.1 - openSUSE Leap 15.0 (x86_64): python-32bit-2.7.14-lp150.6.21.1 python-32bit-debuginfo-2.7.14-lp150.6.21.1 References: https://www.suse.com/security/cve/CVE-2019-16056.html https://www.suse.com/security/cve/CVE-2019-16935.html https://www.suse.com/security/cve/CVE-2019-9947.html https://bugzilla.suse.com/1130840 https://bugzilla.suse.com/1149955 https://bugzilla.suse.com/1153238

1 0

openSUSE-SU-2019:2388-1: moderate: Security update for openconnect
by opensuse-security＠opensuse.org 27 Oct '19

27 Oct '19

openSUSE Security Update: Security update for openconnect ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2388-1 Rating: moderate References: #1151178 Cross-References: CVE-2019-16239 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for openconnect fixes the following issues: - CVE-2019-16239: Fixed a buffer overflow when a malicious server uses HTTP chunked encoding with crafted chunk sizes. (bsc#1151178) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2388=1 Package List: - openSUSE Leap 15.0 (x86_64): openconnect-7.08-lp150.5.3.1 openconnect-debuginfo-7.08-lp150.5.3.1 openconnect-debugsource-7.08-lp150.5.3.1 openconnect-devel-7.08-lp150.5.3.1 openconnect-doc-7.08-lp150.5.3.1 - openSUSE Leap 15.0 (noarch): openconnect-lang-7.08-lp150.5.3.1 References: https://www.suse.com/security/cve/CVE-2019-16239.html https://bugzilla.suse.com/1151178

1 0

openSUSE-RU-2019:2383-1: moderate: Recommended update for postfix
by maintenance＠opensuse.org 27 Oct '19

27 Oct '19

openSUSE Recommended Update: Recommended update for postfix ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2383-1 Rating: moderate References: #1142881 #1149724 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for postfix fixes the following issues: - Fixed build on Linux kernel 5.x by handling LINUX5 define (bsc#1149724) - Switch from md5 to sha256 for mkpostfixcert (bsc#1142881) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2383=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): postfix-3.3.1-lp150.15.1 postfix-debuginfo-3.3.1-lp150.15.1 postfix-debugsource-3.3.1-lp150.15.1 postfix-devel-3.3.1-lp150.15.1 postfix-lmdb-3.3.1-lp150.15.1 postfix-lmdb-debuginfo-3.3.1-lp150.15.1 postfix-mysql-3.3.1-lp150.15.1 postfix-mysql-debuginfo-3.3.1-lp150.15.1 postfix-postgresql-3.3.1-lp150.15.1 postfix-postgresql-debuginfo-3.3.1-lp150.15.1 - openSUSE Leap 15.0 (noarch): postfix-doc-3.3.1-lp150.15.1 References: https://bugzilla.suse.com/1142881 https://bugzilla.suse.com/1149724

1 0

openSUSE-RU-2019:2384-1: moderate: Recommended update for tcsh
by maintenance＠opensuse.org 27 Oct '19

27 Oct '19

openSUSE Recommended Update: Recommended update for tcsh ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2384-1 Rating: moderate References: #1151630 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for tcsh fixes the following issues: - Restore cleanup routines in case of an error (bsc#1151630) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2384=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): tcsh-6.20.00-lp150.2.6.1 tcsh-debuginfo-6.20.00-lp150.2.6.1 tcsh-debugsource-6.20.00-lp150.2.6.1 - openSUSE Leap 15.0 (noarch): tcsh-lang-6.20.00-lp150.2.6.1 References: https://bugzilla.suse.com/1151630

1 0

openSUSE-RU-2019:2387-1: moderate: Recommended update for tcsh
by maintenance＠opensuse.org 27 Oct '19

27 Oct '19

openSUSE Recommended Update: Recommended update for tcsh ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2387-1 Rating: moderate References: #1151630 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for tcsh fixes the following issues: - Restore cleanup routines in case of an error (bsc#1151630) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2387=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): tcsh-6.20.00-lp151.3.6.1 tcsh-debuginfo-6.20.00-lp151.3.6.1 tcsh-debugsource-6.20.00-lp151.3.6.1 - openSUSE Leap 15.1 (noarch): tcsh-lang-6.20.00-lp151.3.6.1 References: https://bugzilla.suse.com/1151630

1 0

openSUSE-RU-2019:2386-1: moderate: Recommended update for postfix
by maintenance＠opensuse.org 27 Oct '19

27 Oct '19

openSUSE Recommended Update: Recommended update for postfix ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2386-1 Rating: moderate References: #1142881 #1149724 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for postfix fixes the following issues: - Fixed build on Linux kernel 5.x by handling LINUX5 define (bsc#1149724) - Switch from md5 to sha256 for mkpostfixcert (bsc#1142881) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2386=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): postfix-3.3.1-lp151.2.9.1 postfix-debuginfo-3.3.1-lp151.2.9.1 postfix-debugsource-3.3.1-lp151.2.9.1 postfix-devel-3.3.1-lp151.2.9.1 postfix-lmdb-3.3.1-lp151.2.9.1 postfix-lmdb-debuginfo-3.3.1-lp151.2.9.1 postfix-mysql-3.3.1-lp151.2.9.1 postfix-mysql-debuginfo-3.3.1-lp151.2.9.1 postfix-postgresql-3.3.1-lp151.2.9.1 postfix-postgresql-debuginfo-3.3.1-lp151.2.9.1 - openSUSE Leap 15.1 (noarch): postfix-doc-3.3.1-lp151.2.9.1 References: https://bugzilla.suse.com/1142881 https://bugzilla.suse.com/1149724

1 0

openSUSE-RU-2019:2382-1: moderate: Recommended update for yast2-security
by maintenance＠opensuse.org 27 Oct '19

27 Oct '19

openSUSE Recommended Update: Recommended update for yast2-security ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2382-1 Rating: moderate References: #1147173 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-security fixes the following issues: - Supporting user defined permission files like "/etc/permissions.ultra". (bsc#1147173) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2382=1 Package List: - openSUSE Leap 15.0 (noarch): yast2-security-4.0.2-lp150.10.1 References: https://bugzilla.suse.com/1147173

1 0

openSUSE-SU-2019:2385-1: moderate: Security update for openconnect
by opensuse-security＠opensuse.org 27 Oct '19

27 Oct '19

openSUSE Security Update: Security update for openconnect ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2385-1 Rating: moderate References: #1151178 Cross-References: CVE-2019-16239 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for openconnect fixes the following issues: - CVE-2019-16239: Fixed a buffer overflow when a malicious server uses HTTP chunked encoding with crafted chunk sizes. (bsc#1151178) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2385=1 Package List: - openSUSE Leap 15.1 (noarch): openconnect-lang-7.08-lp151.6.3.1 - openSUSE Leap 15.1 (x86_64): openconnect-7.08-lp151.6.3.1 openconnect-debuginfo-7.08-lp151.6.3.1 openconnect-debugsource-7.08-lp151.6.3.1 openconnect-devel-7.08-lp151.6.3.1 openconnect-doc-7.08-lp151.6.3.1 References: https://www.suse.com/security/cve/CVE-2019-16239.html https://bugzilla.suse.com/1151178

1 0

openSUSE-RU-2019:2380-1: moderate: Recommended update for pciutils-ids
by maintenance＠opensuse.org 27 Oct '19

27 Oct '19

openSUSE Recommended Update: Recommended update for pciutils-ids ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2380-1 Rating: moderate References: #1127840 #1133581 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This is a version update for pciutils-ids to version 20190830 (bsc#1133581, bsc#1127840) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2380=1 Package List: - openSUSE Leap 15.0 (noarch): pciutils-ids-20190830-lp150.2.3.1 References: https://bugzilla.suse.com/1127840 https://bugzilla.suse.com/1133581

1 0

openSUSE-RU-2019:2381-1: moderate: Recommended update for yast2-security
by maintenance＠opensuse.org 27 Oct '19

27 Oct '19

openSUSE Recommended Update: Recommended update for yast2-security ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2381-1 Rating: moderate References: #1147173 #1150821 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for yast2-security provides the following fixes: - Support user defined permission files like "/etc/permissions.ultra". (bsc#1147173) - Fix a problem that was causing Autoyast to not export security settings. The "console_shutdown" entry was not been evaluated. (bsc#1150821) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2381=1 Package List: - openSUSE Leap 15.1 (noarch): yast2-security-4.1.4-lp151.2.3.1 References: https://bugzilla.suse.com/1147173 https://bugzilla.suse.com/1150821

1 0

openSUSE-SU-2019:2379-1: important: Security update for procps
by opensuse-security＠opensuse.org 26 Oct '19

26 Oct '19

openSUSE Security Update: Security update for procps ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2379-1 Rating: important References: #1092100 #1121753 Cross-References: CVE-2018-1122 CVE-2018-1123 CVE-2018-1124 CVE-2018-1125 CVE-2018-1126 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for procps fixes the following issues: procps was updated to 3.3.15. (bsc#1092100) Following security issues were fixed: - CVE-2018-1122: Prevent local privilege escalation in top. If a user ran top with HOME unset in an attacker-controlled directory, the attacker could have achieved privilege escalation by exploiting one of several vulnerabilities in the config_file() function (bsc#1092100). - CVE-2018-1123: Prevent denial of service in ps via mmap buffer overflow. Inbuilt protection in ps maped a guard page at the end of the overflowed buffer, ensuring that the impact of this flaw is limited to a crash (temporary denial of service) (bsc#1092100). - CVE-2018-1124: Prevent multiple integer overflows leading to a heap corruption in file2strvec function. This allowed a privilege escalation for a local attacker who can create entries in procfs by starting processes, which could result in crashes or arbitrary code execution in proc utilities run by other users (bsc#1092100). - CVE-2018-1125: Prevent stack buffer overflow in pgrep. This vulnerability was mitigated by FORTIFY limiting the impact to a crash (bsc#1092100). - CVE-2018-1126: Ensure correct integer size in proc/alloc.* to prevent truncation/integer overflow issues (bsc#1092100). Also this non-security issue was fixed: - Fix CPU summary showing old data. (bsc#1121753) The update to 3.3.15 contains the following fixes: * library: Increment to 8:0:1 No removals, no new functions Changes: slab and pid structures * library: Just check for SIGLOST and don't delete it * library: Fix integer overflow and LPE in file2strvec CVE-2018-1124 * library: Use size_t for alloc functions CVE-2018-1126 * library: Increase comm size to 64 * pgrep: Fix stack-based buffer overflow CVE-2018-1125 * pgrep: Remove >15 warning as comm can be longer * ps: Fix buffer overflow in output buffer, causing DOS CVE-2018-1123 * ps: Increase command name selection field to 64 * top: Don't use cwd for location of config CVE-2018-1122 * update translations * library: build on non-glibc systems * free: fix scaling on 32-bit systems * Revert "Support running with child namespaces" * library: Increment to 7:0:1 No changes, no removals New fuctions: numa_init, numa_max_node, numa_node_of_cpu, numa_uninit, xalloc_err_handler * doc: Document I idle state in ps.1 and top.1 * free: fix some of the SI multiples * kill: -l space between name parses correctly * library: dont use vm_min_free on non Linux * library: don't strip off wchan prefixes (ps & top) * pgrep: warn about 15+ char name only if -f not used * pgrep/pkill: only match in same namespace by default * pidof: specify separator between pids * pkill: Return 0 only if we can kill process * pmap: fix duplicate output line under '-x' option * ps: avoid eip/esp address truncations * ps: recognizes SCHED_DEADLINE as valid CPU scheduler * ps: display NUMA node under which a thread ran * ps: Add seconds display for cputime and time * ps: Add LUID field * sysctl: Permit empty string for value * sysctl: Don't segv when file not available * sysctl: Read and write large buffers * top: add config file support for XDG specification * top: eliminated minor libnuma memory leak * top: show fewer memory decimal places (configurable) * top: provide command line switch for memory scaling * top: provide command line switch for CPU States * top: provides more accurate cpu usage at startup * top: display NUMA node under which a thread ran * top: fix argument parsing quirk resulting in SEGV * top: delay interval accepts non-locale radix point * top: address a wishlist man page NLS suggestion * top: fix potential distortion in 'Mem' graph display * top: provide proper multi-byte string handling * top: startup defaults are fully customizable * watch: define HOST_NAME_MAX where not defined * vmstat: Fix alignment for disk partition format * watch: Support ANSI 39,49 reset sequences This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2379=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libprocps7-3.3.15-lp150.5.3.1 libprocps7-debuginfo-3.3.15-lp150.5.3.1 procps-3.3.15-lp150.5.3.1 procps-debuginfo-3.3.15-lp150.5.3.1 procps-debugsource-3.3.15-lp150.5.3.1 procps-devel-3.3.15-lp150.5.3.1 References: https://www.suse.com/security/cve/CVE-2018-1122.html https://www.suse.com/security/cve/CVE-2018-1123.html https://www.suse.com/security/cve/CVE-2018-1124.html https://www.suse.com/security/cve/CVE-2018-1125.html https://www.suse.com/security/cve/CVE-2018-1126.html https://bugzilla.suse.com/1092100 https://bugzilla.suse.com/1121753

1 0

openSUSE-RU-2019:2378-1: moderate: Recommended update for cifs-utils
by maintenance＠opensuse.org 26 Oct '19

26 Oct '19

openSUSE Recommended Update: Recommended update for cifs-utils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2378-1 Rating: moderate References: #1130528 #1132087 #1136031 #1149164 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for cifs-utils fixes the following issues: Update cifs-utils 6.9; (bsc#1132087); (bsc#1136031). * follow SMB default version changes in the kernel. * adds fixes for Azure * new smbinfo utility - Fix double-free in mount.cifs; (bsc#1149164). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2378=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): cifs-utils-6.9-lp150.2.6.1 cifs-utils-debuginfo-6.9-lp150.2.6.1 cifs-utils-debugsource-6.9-lp150.2.6.1 cifs-utils-devel-6.9-lp150.2.6.1 pam_cifscreds-6.9-lp150.2.6.1 pam_cifscreds-debuginfo-6.9-lp150.2.6.1 References: https://bugzilla.suse.com/1130528 https://bugzilla.suse.com/1132087 https://bugzilla.suse.com/1136031 https://bugzilla.suse.com/1149164

1 0

openSUSE-RU-2019:2377-1: moderate: Recommended update for yast2-services-manager
by maintenance＠opensuse.org 26 Oct '19

26 Oct '19

openSUSE Recommended Update: Recommended update for yast2-services-manager ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2377-1 Rating: moderate References: #1140735 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-services-manager fixes the following issues: - Set BaseTargets::GRAPHICAL and Target::GRAPHICAL if package "xdm" will be installed (instead of xorg-x11-server). (bsc#1140735) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2377=1 Package List: - openSUSE Leap 15.1 (noarch): yast2-services-manager-4.1.15-lp151.2.3.1 References: https://bugzilla.suse.com/1140735

1 0

openSUSE-SU-2019:2376-1: important: Security update for procps
by opensuse-security＠opensuse.org 26 Oct '19

26 Oct '19

openSUSE Security Update: Security update for procps ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2376-1 Rating: important References: #1092100 #1121753 Cross-References: CVE-2018-1122 CVE-2018-1123 CVE-2018-1124 CVE-2018-1125 CVE-2018-1126 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for procps fixes the following issues: procps was updated to 3.3.15. (bsc#1092100) Following security issues were fixed: - CVE-2018-1122: Prevent local privilege escalation in top. If a user ran top with HOME unset in an attacker-controlled directory, the attacker could have achieved privilege escalation by exploiting one of several vulnerabilities in the config_file() function (bsc#1092100). - CVE-2018-1123: Prevent denial of service in ps via mmap buffer overflow. Inbuilt protection in ps maped a guard page at the end of the overflowed buffer, ensuring that the impact of this flaw is limited to a crash (temporary denial of service) (bsc#1092100). - CVE-2018-1124: Prevent multiple integer overflows leading to a heap corruption in file2strvec function. This allowed a privilege escalation for a local attacker who can create entries in procfs by starting processes, which could result in crashes or arbitrary code execution in proc utilities run by other users (bsc#1092100). - CVE-2018-1125: Prevent stack buffer overflow in pgrep. This vulnerability was mitigated by FORTIFY limiting the impact to a crash (bsc#1092100). - CVE-2018-1126: Ensure correct integer size in proc/alloc.* to prevent truncation/integer overflow issues (bsc#1092100). Also this non-security issue was fixed: - Fix CPU summary showing old data. (bsc#1121753) The update to 3.3.15 contains the following fixes: * library: Increment to 8:0:1 No removals, no new functions Changes: slab and pid structures * library: Just check for SIGLOST and don't delete it * library: Fix integer overflow and LPE in file2strvec CVE-2018-1124 * library: Use size_t for alloc functions CVE-2018-1126 * library: Increase comm size to 64 * pgrep: Fix stack-based buffer overflow CVE-2018-1125 * pgrep: Remove >15 warning as comm can be longer * ps: Fix buffer overflow in output buffer, causing DOS CVE-2018-1123 * ps: Increase command name selection field to 64 * top: Don't use cwd for location of config CVE-2018-1122 * update translations * library: build on non-glibc systems * free: fix scaling on 32-bit systems * Revert "Support running with child namespaces" * library: Increment to 7:0:1 No changes, no removals New fuctions: numa_init, numa_max_node, numa_node_of_cpu, numa_uninit, xalloc_err_handler * doc: Document I idle state in ps.1 and top.1 * free: fix some of the SI multiples * kill: -l space between name parses correctly * library: dont use vm_min_free on non Linux * library: don't strip off wchan prefixes (ps & top) * pgrep: warn about 15+ char name only if -f not used * pgrep/pkill: only match in same namespace by default * pidof: specify separator between pids * pkill: Return 0 only if we can kill process * pmap: fix duplicate output line under '-x' option * ps: avoid eip/esp address truncations * ps: recognizes SCHED_DEADLINE as valid CPU scheduler * ps: display NUMA node under which a thread ran * ps: Add seconds display for cputime and time * ps: Add LUID field * sysctl: Permit empty string for value * sysctl: Don't segv when file not available * sysctl: Read and write large buffers * top: add config file support for XDG specification * top: eliminated minor libnuma memory leak * top: show fewer memory decimal places (configurable) * top: provide command line switch for memory scaling * top: provide command line switch for CPU States * top: provides more accurate cpu usage at startup * top: display NUMA node under which a thread ran * top: fix argument parsing quirk resulting in SEGV * top: delay interval accepts non-locale radix point * top: address a wishlist man page NLS suggestion * top: fix potential distortion in 'Mem' graph display * top: provide proper multi-byte string handling * top: startup defaults are fully customizable * watch: define HOST_NAME_MAX where not defined * vmstat: Fix alignment for disk partition format * watch: Support ANSI 39,49 reset sequences This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2376=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libprocps7-3.3.15-lp151.6.3.1 libprocps7-debuginfo-3.3.15-lp151.6.3.1 procps-3.3.15-lp151.6.3.1 procps-debuginfo-3.3.15-lp151.6.3.1 procps-debugsource-3.3.15-lp151.6.3.1 procps-devel-3.3.15-lp151.6.3.1 References: https://www.suse.com/security/cve/CVE-2018-1122.html https://www.suse.com/security/cve/CVE-2018-1123.html https://www.suse.com/security/cve/CVE-2018-1124.html https://www.suse.com/security/cve/CVE-2018-1125.html https://www.suse.com/security/cve/CVE-2018-1126.html https://bugzilla.suse.com/1092100 https://bugzilla.suse.com/1121753

1 0

openSUSE-RU-2019:2375-1: moderate: Recommended update for pciutils-ids
by maintenance＠opensuse.org 26 Oct '19

26 Oct '19

openSUSE Recommended Update: Recommended update for pciutils-ids ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2375-1 Rating: moderate References: #1127840 #1133581 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This is a version update for pciutils-ids to version 20190830 (bsc#1133581, bsc#1127840) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2375=1 Package List: - openSUSE Leap 15.1 (noarch): pciutils-ids-20190830-lp151.3.3.1 References: https://bugzilla.suse.com/1127840 https://bugzilla.suse.com/1133581

1 0

openSUSE-RU-2019:2372-1: moderate: Recommended update for dracut
by maintenance＠opensuse.org 24 Oct '19

24 Oct '19

openSUSE Recommended Update: Recommended update for dracut ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2372-1 Rating: moderate References: #1121238 #1140872 #1142775 #1150343 #1151552 #1152006 #1152650 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 7 recommended fixes can now be installed. Description: This update for dracut contains the following fixes: - Several fixes for dhcp calls with multiple nics. (bsc#1150343) - Only login to one target at a time. (bsc#1152650) - Only skip waiting for interfaces if netroot is set. (bsc#1152006) - Support xz compressed firmware files. (bsc#1151552) - Only login to one target at a time. (bsc#1121238) - Fix keymaps not getting included sometimes. (bsc#1140872) - Fix merge error for arm/aarch64. (bsc#1142775) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2372=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): dracut-044.2-lp151.2.6.1 dracut-debuginfo-044.2-lp151.2.6.1 dracut-debugsource-044.2-lp151.2.6.1 dracut-fips-044.2-lp151.2.6.1 dracut-ima-044.2-lp151.2.6.1 dracut-tools-044.2-lp151.2.6.1 References: https://bugzilla.suse.com/1121238 https://bugzilla.suse.com/1140872 https://bugzilla.suse.com/1142775 https://bugzilla.suse.com/1150343 https://bugzilla.suse.com/1151552 https://bugzilla.suse.com/1152006 https://bugzilla.suse.com/1152650

1 0

openSUSE-RU-2019:2374-1: moderate: Recommended update for pesign-obs-integration
by maintenance＠opensuse.org 24 Oct '19

24 Oct '19

openSUSE Recommended Update: Recommended update for pesign-obs-integration ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2374-1 Rating: moderate References: #1134303 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for pesign-obs-integration provides the following fixes: - Makes pesign also available on ARM. (bsc#1134303) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2374=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): pesign-obs-integration-10.1-lp151.2.3.1 References: https://bugzilla.suse.com/1134303

1 0

openSUSE-RU-2019:2373-1: moderate: Recommended update for fence-agents
by maintenance＠opensuse.org 24 Oct '19

24 Oct '19

openSUSE Recommended Update: Recommended update for fence-agents ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2373-1 Rating: moderate References: #1150504 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for fence-agents fixes the following issues: - Include the latest fixes upstream on the Alibaba Cloud fence-agent. (bsc#1150504) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2373=1 Package List: - openSUSE Leap 15.1 (x86_64): fence-agents-4.4.0+git.1558595666.5f79f9e9-lp151.2.6.1 fence-agents-amt_ws-4.4.0+git.1558595666.5f79f9e9-lp151.2.6.1 fence-agents-debuginfo-4.4.0+git.1558595666.5f79f9e9-lp151.2.6.1 fence-agents-debugsource-4.4.0+git.1558595666.5f79f9e9-lp151.2.6.1 fence-agents-devel-4.4.0+git.1558595666.5f79f9e9-lp151.2.6.1 References: https://bugzilla.suse.com/1150504

1 0

openSUSE-RU-2019:2371-1: important: Recommended update for xen
by maintenance＠opensuse.org 24 Oct '19

24 Oct '19

openSUSE Recommended Update: Recommended update for xen ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2371-1 Rating: important References: #1027519 #1111331 #1120095 #1133296 #1135799 #1137471 #1137717 #1138294 #1138563 #1143563 #1145240 #1145774 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves 6 vulnerabilities and has 6 fixes is now available. Description: This update for xen to version 4.12.1 fixes the following issues: - Fixed an issue which made Xen crash on AMD ROME based machines (bsc#1135799). - Xenpvnetboot is now ported correctly to Python 3 (bsc#1138563). - Added code to change LIBXL_HOTPLUG_TIMEOUT at runtime (bsc#1120095). The included README has details about the impact of this change - Fixed an issue where the speculative mitigation facilities reported wrong status (bsc#1143563). - Fixed an issue where Xen could not connect socket to /var/run/libvirt/libvirt-sock (bsc#1137471). - Fixed an HPS bug which did not allow to install Windows Server 2016 with 2 CPUs setting or above (bsc#1137717). - Fixed a segmentation fault in Libvrtd during live migration to a VM (bsc#1145774). - LTO is now disabled (bsc#1133296). - Fixed an issue where Xen could not pre-allocate 1 shadow page (bsc#1145240). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2371=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): xen-debugsource-4.12.1_02-lp151.2.3.1 xen-devel-4.12.1_02-lp151.2.3.1 xen-libs-4.12.1_02-lp151.2.3.1 xen-libs-debuginfo-4.12.1_02-lp151.2.3.1 xen-tools-domU-4.12.1_02-lp151.2.3.1 xen-tools-domU-debuginfo-4.12.1_02-lp151.2.3.1 - openSUSE Leap 15.1 (x86_64): xen-4.12.1_02-lp151.2.3.1 xen-doc-html-4.12.1_02-lp151.2.3.1 xen-libs-32bit-4.12.1_02-lp151.2.3.1 xen-libs-32bit-debuginfo-4.12.1_02-lp151.2.3.1 xen-tools-4.12.1_02-lp151.2.3.1 xen-tools-debuginfo-4.12.1_02-lp151.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-12126.html https://www.suse.com/security/cve/CVE-2018-12127.html https://www.suse.com/security/cve/CVE-2018-12130.html https://www.suse.com/security/cve/CVE-2019-11091.html https://www.suse.com/security/cve/CVE-2019-17349.html https://www.suse.com/security/cve/CVE-2019-17350.html https://bugzilla.suse.com/1027519 https://bugzilla.suse.com/1111331 https://bugzilla.suse.com/1120095 https://bugzilla.suse.com/1133296 https://bugzilla.suse.com/1135799 https://bugzilla.suse.com/1137471 https://bugzilla.suse.com/1137717 https://bugzilla.suse.com/1138294 https://bugzilla.suse.com/1138563 https://bugzilla.suse.com/1143563 https://bugzilla.suse.com/1145240 https://bugzilla.suse.com/1145774

1 0

openSUSE-RU-2019:2370-1: moderate: Recommended update for dracut
by maintenance＠opensuse.org 23 Oct '19

23 Oct '19

openSUSE Recommended Update: Recommended update for dracut ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2370-1 Rating: moderate References: #1121238 #1140872 #1142775 #1150343 #1151552 #1152006 #1152650 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has 7 recommended fixes can now be installed. Description: This update for dracut contains the following fixes: - Several fixes for dhcp calls with multiple nics. (bsc#1150343) - Only login to one target at a time. (bsc#1152650) - Only skip waiting for interfaces if netroot is set. (bsc#1152006) - Support xz compressed firmware files. (bsc#1151552) - Only login to one target at a time. (bsc#1121238) - Fix keymaps not getting included sometimes. (bsc#1140872) - Fix merge error for arm/aarch64. (bsc#1142775) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2370=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): dracut-044.2-lp150.14.33.1 dracut-debuginfo-044.2-lp150.14.33.1 dracut-debugsource-044.2-lp150.14.33.1 dracut-fips-044.2-lp150.14.33.1 dracut-ima-044.2-lp150.14.33.1 dracut-tools-044.2-lp150.14.33.1 References: https://bugzilla.suse.com/1121238 https://bugzilla.suse.com/1140872 https://bugzilla.suse.com/1142775 https://bugzilla.suse.com/1150343 https://bugzilla.suse.com/1151552 https://bugzilla.suse.com/1152006 https://bugzilla.suse.com/1152650

1 0

openSUSE-RU-2019:2368-1: moderate: Recommended update for darktable
by maintenance＠opensuse.org 23 Oct '19

23 Oct '19

openSUSE Recommended Update: Recommended update for darktable ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2368-1 Rating: moderate References: #1154752 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 openSUSE Backports SLE-15-SP1 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for darktable fixes the following issues: - New Features - April 1st game is now disabled by default - Add preference to disable/enable April 1st game - Print module default margin set 17mm - Add support for disabling base-curve by default - Add support for disabling sharpen by default - Bugfixes - Source with OpenMP can be compiled with GCC-9 and clang - Update skin tone preset on color-zones module - Fix file access permissions on macOS Catalina 10.15 - Fix shift+scroll only scrolling in one direction on macOS - Fix picasa, piwigo and facebook SSL support - Fix CSS issue on MacOS - Base Support - Epson R-D1s - Epson R-D1x - Fujifilm FinePix F770EXR - Fujifilm X-T30 (compressed) - Fujifilm XF10 - Kodak EasyShare Z981 - Kodak EasyShare Z990 - Leica C (Typ 112) (4:3) - Leica CL (dng) - Leica Q (Typ 116) (dng) - Leica Q2 (dng) - Leica SL (Typ 601) (dng) - Leica V-LUX (Typ 114) (3:2, 4:3, 16:9, 1:1) - Olympus E-M1X - Olympus TG-6 - Panasonic DC-G90 (4:3) - Panasonic DC-G91 (4:3) - Panasonic DC-G95 (4:3) - Panasonic DC-G99 (4:3) - Panasonic DC-ZS200 (3:2) - Panasonic DMC-TX1 (3:2) - Sony DSC-RX0M2 - Sony ILCE-6400 - Sony ILCE-7RM4 - White Balance Presets - Panasonic DC-LX100M2 - Noise Profiles - Panasonic DC-LX100M2 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2368=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2368=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2368=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-2368=1 Package List: - openSUSE Leap 15.1 (noarch): darktable-doc-2.6.3-lp151.3.3.1 - openSUSE Leap 15.1 (x86_64): darktable-2.6.3-lp151.3.3.1 darktable-debuginfo-2.6.3-lp151.3.3.1 darktable-debugsource-2.6.3-lp151.3.3.1 darktable-tools-basecurve-2.6.3-lp151.3.3.1 darktable-tools-basecurve-debuginfo-2.6.3-lp151.3.3.1 darktable-tools-noise-2.6.3-lp151.3.3.1 darktable-tools-noise-debuginfo-2.6.3-lp151.3.3.1 - openSUSE Leap 15.0 (noarch): darktable-doc-2.6.3-lp150.3.6.2 - openSUSE Leap 15.0 (x86_64): darktable-2.6.3-lp150.3.6.2 darktable-debuginfo-2.6.3-lp150.3.6.2 darktable-debugsource-2.6.3-lp150.3.6.2 darktable-tools-basecurve-2.6.3-lp150.3.6.2 darktable-tools-basecurve-debuginfo-2.6.3-lp150.3.6.2 darktable-tools-noise-2.6.3-lp150.3.6.2 darktable-tools-noise-debuginfo-2.6.3-lp150.3.6.2 - openSUSE Backports SLE-15-SP1 (x86_64): darktable-2.6.3-bp151.4.3.1 darktable-tools-basecurve-2.6.3-bp151.4.3.1 darktable-tools-noise-2.6.3-bp151.4.3.1 - openSUSE Backports SLE-15-SP1 (noarch): darktable-doc-2.6.3-bp151.4.3.1 - openSUSE Backports SLE-15 (x86_64): darktable-2.6.3-bp150.2.6.1 darktable-debuginfo-2.6.3-bp150.2.6.1 darktable-debugsource-2.6.3-bp150.2.6.1 darktable-tools-basecurve-2.6.3-bp150.2.6.1 darktable-tools-basecurve-debuginfo-2.6.3-bp150.2.6.1 darktable-tools-noise-2.6.3-bp150.2.6.1 darktable-tools-noise-debuginfo-2.6.3-bp150.2.6.1 - openSUSE Backports SLE-15 (noarch): darktable-doc-2.6.3-bp150.2.6.1 References: https://bugzilla.suse.com/1154752

1 0

openSUSE-RU-2019:2369-1: moderate: Recommended update for python-bugzilla
by maintenance＠opensuse.org 23 Oct '19

23 Oct '19

openSUSE Recommended Update: Recommended update for python-bugzilla ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2369-1 Rating: moderate References: #1098219 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 openSUSE Backports SLE-15-SP1 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-bugzilla fixes the following issues: - Backport from upstream: HTTP Basic authentication feature (as used by SUSE and openSUSE) (boo#1098219) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2369=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2369=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2369=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-2369=1 Package List: - openSUSE Leap 15.1 (noarch): python2-bugzilla-2.1.0-lp151.3.3.1 python3-bugzilla-2.1.0-lp151.3.3.1 - openSUSE Leap 15.0 (noarch): python2-bugzilla-2.1.0-lp150.2.3.1 python3-bugzilla-2.1.0-lp150.2.3.1 - openSUSE Backports SLE-15-SP1 (noarch): python2-bugzilla-2.1.0-bp151.4.3.1 python3-bugzilla-2.1.0-bp151.4.3.1 - openSUSE Backports SLE-15 (noarch): python2-bugzilla-2.1.0-bp150.3.3.1 python3-bugzilla-2.1.0-bp150.3.3.1 References: https://bugzilla.suse.com/1098219

1 0

openSUSE-RU-2019:2367-1: moderate: Recommended update for shim
by maintenance＠opensuse.org 23 Oct '19

23 Oct '19

openSUSE Recommended Update: Recommended update for shim ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2367-1 Rating: moderate References: #1118363 #1145676 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for shim fixes the following issues: - Update shim-install to specify the target for grub2-install and change the boot efi file name according to the architecture (FATE#325971, bsc#1145676) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2367=1 Package List: - openSUSE Leap 15.0 (x86_64): shim-14-lp150.15.3 shim-debuginfo-14-lp150.15.3 shim-debugsource-14-lp150.15.3 References: https://bugzilla.suse.com/1118363 https://bugzilla.suse.com/1145676

1 0

openSUSE-RU-2019:2366-1: moderate: Recommended update for ndctl
by maintenance＠opensuse.org 23 Oct '19

23 Oct '19

openSUSE Recommended Update: Recommended update for ndctl ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2366-1 Rating: moderate References: #1110425 #1145421 #1145471 #1145573 #1145577 #1145772 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 6 recommended fixes can now be installed. Description: This update for ndctl fixes the following issues: - Handle 'create-namespace' in label-less mode. (bsc#1145471 ltc#179886) - Use the same align value as original namespace on reconfigure. (bsc#1145577 ltc#178224) - Fix duplicate bus detection. (bsc#1145573 ltc#180249) - Introduce region capability objects. (bsc#1145772 ltc#178159) - Ensure mmap of BTT sections work with 64K page-sizes. (bsc#1145421 ltc#176079) - Revert to version 61.2. (bsc#1110425) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2366=1 Package List: - openSUSE Leap 15.1 (x86_64): libndctl-devel-64.1-lp151.2.3.1 libndctl6-64.1-lp151.2.3.1 libndctl6-debuginfo-64.1-lp151.2.3.1 ndctl-64.1-lp151.2.3.1 ndctl-debuginfo-64.1-lp151.2.3.1 ndctl-debugsource-64.1-lp151.2.3.1 References: https://bugzilla.suse.com/1110425 https://bugzilla.suse.com/1145421 https://bugzilla.suse.com/1145471 https://bugzilla.suse.com/1145573 https://bugzilla.suse.com/1145577 https://bugzilla.suse.com/1145772

1 0

openSUSE-SU-2019:2365-1: moderate: Security update for gcc7
by opensuse-security＠opensuse.org 22 Oct '19

22 Oct '19

openSUSE Security Update: Security update for gcc7 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2365-1 Rating: moderate References: #1071995 #1141897 #1142649 #1148517 #1149145 Cross-References: CVE-2019-14250 CVE-2019-15847 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves two vulnerabilities and has three fixes is now available. Description: This update for gcc7 to r275405 fixes the following issues: Security issues fixed: - CVE-2019-14250: Fixed an integer overflow in binutils (bsc#1142649). - CVE-2019-15847: Fixed an optimization in the POWER9 backend of gcc that could reduce the entropy of the random number generator (bsc#1149145). Non-security issue fixed: - Move Live Patching technology stack from kGraft to upstream klp (bsc#1071995, fate#323487). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2365=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): cpp7-7.4.1+r275405-lp150.12.1 cpp7-debuginfo-7.4.1+r275405-lp150.12.1 gcc7-7.4.1+r275405-lp150.12.1 gcc7-ada-7.4.1+r275405-lp150.12.1 gcc7-ada-debuginfo-7.4.1+r275405-lp150.12.1 gcc7-c++-7.4.1+r275405-lp150.12.1 gcc7-c++-debuginfo-7.4.1+r275405-lp150.12.1 gcc7-debuginfo-7.4.1+r275405-lp150.12.1 gcc7-debugsource-7.4.1+r275405-lp150.12.1 gcc7-fortran-7.4.1+r275405-lp150.12.1 gcc7-fortran-debuginfo-7.4.1+r275405-lp150.12.1 gcc7-go-7.4.1+r275405-lp150.12.1 gcc7-go-debuginfo-7.4.1+r275405-lp150.12.1 gcc7-locale-7.4.1+r275405-lp150.12.1 gcc7-obj-c++-7.4.1+r275405-lp150.12.1 gcc7-obj-c++-debuginfo-7.4.1+r275405-lp150.12.1 gcc7-objc-7.4.1+r275405-lp150.12.1 gcc7-objc-debuginfo-7.4.1+r275405-lp150.12.1 libada7-7.4.1+r275405-lp150.12.1 libada7-debuginfo-7.4.1+r275405-lp150.12.1 libasan4-7.4.1+r275405-lp150.12.1 libasan4-debuginfo-7.4.1+r275405-lp150.12.1 libcilkrts5-7.4.1+r275405-lp150.12.1 libcilkrts5-debuginfo-7.4.1+r275405-lp150.12.1 libgfortran4-7.4.1+r275405-lp150.12.1 libgfortran4-debuginfo-7.4.1+r275405-lp150.12.1 libgo11-7.4.1+r275405-lp150.12.1 libgo11-debuginfo-7.4.1+r275405-lp150.12.1 libobjc4-7.4.1+r275405-lp150.12.1 libobjc4-debuginfo-7.4.1+r275405-lp150.12.1 libstdc++6-devel-gcc7-7.4.1+r275405-lp150.12.1 libubsan0-7.4.1+r275405-lp150.12.1 libubsan0-debuginfo-7.4.1+r275405-lp150.12.1 - openSUSE Leap 15.0 (x86_64): gcc7-32bit-7.4.1+r275405-lp150.12.1 gcc7-ada-32bit-7.4.1+r275405-lp150.12.1 gcc7-c++-32bit-7.4.1+r275405-lp150.12.1 gcc7-fortran-32bit-7.4.1+r275405-lp150.12.1 gcc7-go-32bit-7.4.1+r275405-lp150.12.1 gcc7-obj-c++-32bit-7.4.1+r275405-lp150.12.1 gcc7-objc-32bit-7.4.1+r275405-lp150.12.1 libada7-32bit-7.4.1+r275405-lp150.12.1 libada7-32bit-debuginfo-7.4.1+r275405-lp150.12.1 libasan4-32bit-7.4.1+r275405-lp150.12.1 libasan4-32bit-debuginfo-7.4.1+r275405-lp150.12.1 libcilkrts5-32bit-7.4.1+r275405-lp150.12.1 libcilkrts5-32bit-debuginfo-7.4.1+r275405-lp150.12.1 libgfortran4-32bit-7.4.1+r275405-lp150.12.1 libgfortran4-32bit-debuginfo-7.4.1+r275405-lp150.12.1 libgo11-32bit-7.4.1+r275405-lp150.12.1 libgo11-32bit-debuginfo-7.4.1+r275405-lp150.12.1 libobjc4-32bit-7.4.1+r275405-lp150.12.1 libobjc4-32bit-debuginfo-7.4.1+r275405-lp150.12.1 libstdc++6-devel-gcc7-32bit-7.4.1+r275405-lp150.12.1 libubsan0-32bit-7.4.1+r275405-lp150.12.1 libubsan0-32bit-debuginfo-7.4.1+r275405-lp150.12.1 - openSUSE Leap 15.0 (noarch): gcc7-info-7.4.1+r275405-lp150.12.1 References: https://www.suse.com/security/cve/CVE-2019-14250.html https://www.suse.com/security/cve/CVE-2019-15847.html https://bugzilla.suse.com/1071995 https://bugzilla.suse.com/1141897 https://bugzilla.suse.com/1142649 https://bugzilla.suse.com/1148517 https://bugzilla.suse.com/1149145

1 0

openSUSE-SU-2019:2364-1: moderate: Security update for gcc7
by opensuse-security＠opensuse.org 22 Oct '19

22 Oct '19

openSUSE Security Update: Security update for gcc7 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2364-1 Rating: moderate References: #1071995 #1141897 #1142649 #1148517 #1149145 Cross-References: CVE-2019-14250 CVE-2019-15847 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves two vulnerabilities and has three fixes is now available. Description: This update for gcc7 to r275405 fixes the following issues: Security issues fixed: - CVE-2019-14250: Fixed an integer overflow in binutils (bsc#1142649). - CVE-2019-15847: Fixed an optimization in the POWER9 backend of gcc that could reduce the entropy of the random number generator (bsc#1149145). Non-security issue fixed: - Move Live Patching technology stack from kGraft to upstream klp (bsc#1071995, fate#323487). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2364=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): cpp7-7.4.1+r275405-lp151.2.6.1 cpp7-debuginfo-7.4.1+r275405-lp151.2.6.1 gcc7-7.4.1+r275405-lp151.2.6.1 gcc7-ada-7.4.1+r275405-lp151.2.6.1 gcc7-ada-debuginfo-7.4.1+r275405-lp151.2.6.1 gcc7-c++-7.4.1+r275405-lp151.2.6.1 gcc7-c++-debuginfo-7.4.1+r275405-lp151.2.6.1 gcc7-debuginfo-7.4.1+r275405-lp151.2.6.1 gcc7-debugsource-7.4.1+r275405-lp151.2.6.1 gcc7-fortran-7.4.1+r275405-lp151.2.6.1 gcc7-fortran-debuginfo-7.4.1+r275405-lp151.2.6.1 gcc7-go-7.4.1+r275405-lp151.2.6.1 gcc7-go-debuginfo-7.4.1+r275405-lp151.2.6.1 gcc7-locale-7.4.1+r275405-lp151.2.6.1 gcc7-obj-c++-7.4.1+r275405-lp151.2.6.1 gcc7-obj-c++-debuginfo-7.4.1+r275405-lp151.2.6.1 gcc7-objc-7.4.1+r275405-lp151.2.6.1 gcc7-objc-debuginfo-7.4.1+r275405-lp151.2.6.1 libada7-7.4.1+r275405-lp151.2.6.1 libada7-debuginfo-7.4.1+r275405-lp151.2.6.1 libasan4-7.4.1+r275405-lp151.2.6.1 libasan4-debuginfo-7.4.1+r275405-lp151.2.6.1 libcilkrts5-7.4.1+r275405-lp151.2.6.1 libcilkrts5-debuginfo-7.4.1+r275405-lp151.2.6.1 libgfortran4-7.4.1+r275405-lp151.2.6.1 libgfortran4-debuginfo-7.4.1+r275405-lp151.2.6.1 libgo11-7.4.1+r275405-lp151.2.6.1 libgo11-debuginfo-7.4.1+r275405-lp151.2.6.1 libobjc4-7.4.1+r275405-lp151.2.6.1 libobjc4-debuginfo-7.4.1+r275405-lp151.2.6.1 libstdc++6-devel-gcc7-7.4.1+r275405-lp151.2.6.1 libubsan0-7.4.1+r275405-lp151.2.6.1 libubsan0-debuginfo-7.4.1+r275405-lp151.2.6.1 - openSUSE Leap 15.1 (noarch): gcc7-info-7.4.1+r275405-lp151.2.6.1 - openSUSE Leap 15.1 (x86_64): gcc7-32bit-7.4.1+r275405-lp151.2.6.1 gcc7-ada-32bit-7.4.1+r275405-lp151.2.6.1 gcc7-c++-32bit-7.4.1+r275405-lp151.2.6.1 gcc7-fortran-32bit-7.4.1+r275405-lp151.2.6.1 gcc7-go-32bit-7.4.1+r275405-lp151.2.6.1 gcc7-obj-c++-32bit-7.4.1+r275405-lp151.2.6.1 gcc7-objc-32bit-7.4.1+r275405-lp151.2.6.1 libada7-32bit-7.4.1+r275405-lp151.2.6.1 libada7-32bit-debuginfo-7.4.1+r275405-lp151.2.6.1 libasan4-32bit-7.4.1+r275405-lp151.2.6.1 libasan4-32bit-debuginfo-7.4.1+r275405-lp151.2.6.1 libcilkrts5-32bit-7.4.1+r275405-lp151.2.6.1 libcilkrts5-32bit-debuginfo-7.4.1+r275405-lp151.2.6.1 libgfortran4-32bit-7.4.1+r275405-lp151.2.6.1 libgfortran4-32bit-debuginfo-7.4.1+r275405-lp151.2.6.1 libgo11-32bit-7.4.1+r275405-lp151.2.6.1 libgo11-32bit-debuginfo-7.4.1+r275405-lp151.2.6.1 libobjc4-32bit-7.4.1+r275405-lp151.2.6.1 libobjc4-32bit-debuginfo-7.4.1+r275405-lp151.2.6.1 libstdc++6-devel-gcc7-32bit-7.4.1+r275405-lp151.2.6.1 libubsan0-32bit-7.4.1+r275405-lp151.2.6.1 libubsan0-32bit-debuginfo-7.4.1+r275405-lp151.2.6.1 References: https://www.suse.com/security/cve/CVE-2019-14250.html https://www.suse.com/security/cve/CVE-2019-15847.html https://bugzilla.suse.com/1071995 https://bugzilla.suse.com/1141897 https://bugzilla.suse.com/1142649 https://bugzilla.suse.com/1148517 https://bugzilla.suse.com/1149145

1 0

openSUSE-RU-2019:2362-1: moderate: Recommended update for rpcbind
by maintenance＠opensuse.org 22 Oct '19

22 Oct '19

openSUSE Recommended Update: Recommended update for rpcbind ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2362-1 Rating: moderate References: #1142343 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for rpcbind fixes the following issues: - Return correct IP address with multiple ip addresses in the same subnet. (bsc#1142343) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2362=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): rpcbind-0.2.3-lp150.11.1 rpcbind-debuginfo-0.2.3-lp150.11.1 rpcbind-debugsource-0.2.3-lp150.11.1 References: https://bugzilla.suse.com/1142343

1 0

openSUSE-RU-2019:2363-1: moderate: Recommended update for rpcbind
by maintenance＠opensuse.org 22 Oct '19

22 Oct '19

openSUSE Recommended Update: Recommended update for rpcbind ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2363-1 Rating: moderate References: #1142343 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for rpcbind fixes the following issues: - Return correct IP address with multiple ip addresses in the same subnet. (bsc#1142343) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2363=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): rpcbind-0.2.3-lp151.5.6.1 rpcbind-debuginfo-0.2.3-lp151.5.6.1 rpcbind-debugsource-0.2.3-lp151.5.6.1 References: https://bugzilla.suse.com/1142343

1 0

openSUSE-SU-2019:2361-1: moderate: Security update for libreoffice
by opensuse-security＠opensuse.org 22 Oct '19

22 Oct '19

openSUSE Security Update: Security update for libreoffice ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2361-1 Rating: moderate References: #1149943 #1149944 Cross-References: CVE-2019-9854 CVE-2019-9855 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for libreoffice fixes the following issues: Updated to version 6.2.7.1. Security issues fixed: - CVE-2019-9854: Fixed unsafe URL assembly flaw (bsc#1149944). - CVE-2019-9855: Fixed path equivalence handling flaw (bsc#1149943) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2361=1 Package List: - openSUSE Leap 15.0 (noarch): libreoffice-branding-upstream-6.2.7.1-lp150.2.19.1 libreoffice-gdb-pretty-printers-6.2.7.1-lp150.2.19.1 libreoffice-glade-6.2.7.1-lp150.2.19.1 libreoffice-icon-themes-6.2.7.1-lp150.2.19.1 libreoffice-l10n-af-6.2.7.1-lp150.2.19.1 libreoffice-l10n-am-6.2.7.1-lp150.2.19.1 libreoffice-l10n-ar-6.2.7.1-lp150.2.19.1 libreoffice-l10n-as-6.2.7.1-lp150.2.19.1 libreoffice-l10n-ast-6.2.7.1-lp150.2.19.1 libreoffice-l10n-be-6.2.7.1-lp150.2.19.1 libreoffice-l10n-bg-6.2.7.1-lp150.2.19.1 libreoffice-l10n-bn-6.2.7.1-lp150.2.19.1 libreoffice-l10n-bn_IN-6.2.7.1-lp150.2.19.1 libreoffice-l10n-bo-6.2.7.1-lp150.2.19.1 libreoffice-l10n-br-6.2.7.1-lp150.2.19.1 libreoffice-l10n-brx-6.2.7.1-lp150.2.19.1 libreoffice-l10n-bs-6.2.7.1-lp150.2.19.1 libreoffice-l10n-ca-6.2.7.1-lp150.2.19.1 libreoffice-l10n-ca_valencia-6.2.7.1-lp150.2.19.1 libreoffice-l10n-cs-6.2.7.1-lp150.2.19.1 libreoffice-l10n-cy-6.2.7.1-lp150.2.19.1 libreoffice-l10n-da-6.2.7.1-lp150.2.19.1 libreoffice-l10n-de-6.2.7.1-lp150.2.19.1 libreoffice-l10n-dgo-6.2.7.1-lp150.2.19.1 libreoffice-l10n-dsb-6.2.7.1-lp150.2.19.1 libreoffice-l10n-dz-6.2.7.1-lp150.2.19.1 libreoffice-l10n-el-6.2.7.1-lp150.2.19.1 libreoffice-l10n-en-6.2.7.1-lp150.2.19.1 libreoffice-l10n-en_GB-6.2.7.1-lp150.2.19.1 libreoffice-l10n-en_ZA-6.2.7.1-lp150.2.19.1 libreoffice-l10n-eo-6.2.7.1-lp150.2.19.1 libreoffice-l10n-es-6.2.7.1-lp150.2.19.1 libreoffice-l10n-et-6.2.7.1-lp150.2.19.1 libreoffice-l10n-eu-6.2.7.1-lp150.2.19.1 libreoffice-l10n-fa-6.2.7.1-lp150.2.19.1 libreoffice-l10n-fi-6.2.7.1-lp150.2.19.1 libreoffice-l10n-fr-6.2.7.1-lp150.2.19.1 libreoffice-l10n-fy-6.2.7.1-lp150.2.19.1 libreoffice-l10n-ga-6.2.7.1-lp150.2.19.1 libreoffice-l10n-gd-6.2.7.1-lp150.2.19.1 libreoffice-l10n-gl-6.2.7.1-lp150.2.19.1 libreoffice-l10n-gu-6.2.7.1-lp150.2.19.1 libreoffice-l10n-gug-6.2.7.1-lp150.2.19.1 libreoffice-l10n-he-6.2.7.1-lp150.2.19.1 libreoffice-l10n-hi-6.2.7.1-lp150.2.19.1 libreoffice-l10n-hr-6.2.7.1-lp150.2.19.1 libreoffice-l10n-hsb-6.2.7.1-lp150.2.19.1 libreoffice-l10n-hu-6.2.7.1-lp150.2.19.1 libreoffice-l10n-id-6.2.7.1-lp150.2.19.1 libreoffice-l10n-is-6.2.7.1-lp150.2.19.1 libreoffice-l10n-it-6.2.7.1-lp150.2.19.1 libreoffice-l10n-ja-6.2.7.1-lp150.2.19.1 libreoffice-l10n-ka-6.2.7.1-lp150.2.19.1 libreoffice-l10n-kab-6.2.7.1-lp150.2.19.1 libreoffice-l10n-kk-6.2.7.1-lp150.2.19.1 libreoffice-l10n-km-6.2.7.1-lp150.2.19.1 libreoffice-l10n-kmr_Latn-6.2.7.1-lp150.2.19.1 libreoffice-l10n-kn-6.2.7.1-lp150.2.19.1 libreoffice-l10n-ko-6.2.7.1-lp150.2.19.1 libreoffice-l10n-kok-6.2.7.1-lp150.2.19.1 libreoffice-l10n-ks-6.2.7.1-lp150.2.19.1 libreoffice-l10n-lb-6.2.7.1-lp150.2.19.1 libreoffice-l10n-lo-6.2.7.1-lp150.2.19.1 libreoffice-l10n-lt-6.2.7.1-lp150.2.19.1 libreoffice-l10n-lv-6.2.7.1-lp150.2.19.1 libreoffice-l10n-mai-6.2.7.1-lp150.2.19.1 libreoffice-l10n-mk-6.2.7.1-lp150.2.19.1 libreoffice-l10n-ml-6.2.7.1-lp150.2.19.1 libreoffice-l10n-mn-6.2.7.1-lp150.2.19.1 libreoffice-l10n-mni-6.2.7.1-lp150.2.19.1 libreoffice-l10n-mr-6.2.7.1-lp150.2.19.1 libreoffice-l10n-my-6.2.7.1-lp150.2.19.1 libreoffice-l10n-nb-6.2.7.1-lp150.2.19.1 libreoffice-l10n-ne-6.2.7.1-lp150.2.19.1 libreoffice-l10n-nl-6.2.7.1-lp150.2.19.1 libreoffice-l10n-nn-6.2.7.1-lp150.2.19.1 libreoffice-l10n-nr-6.2.7.1-lp150.2.19.1 libreoffice-l10n-nso-6.2.7.1-lp150.2.19.1 libreoffice-l10n-oc-6.2.7.1-lp150.2.19.1 libreoffice-l10n-om-6.2.7.1-lp150.2.19.1 libreoffice-l10n-or-6.2.7.1-lp150.2.19.1 libreoffice-l10n-pa-6.2.7.1-lp150.2.19.1 libreoffice-l10n-pl-6.2.7.1-lp150.2.19.1 libreoffice-l10n-pt_BR-6.2.7.1-lp150.2.19.1 libreoffice-l10n-pt_PT-6.2.7.1-lp150.2.19.1 libreoffice-l10n-ro-6.2.7.1-lp150.2.19.1 libreoffice-l10n-ru-6.2.7.1-lp150.2.19.1 libreoffice-l10n-rw-6.2.7.1-lp150.2.19.1 libreoffice-l10n-sa_IN-6.2.7.1-lp150.2.19.1 libreoffice-l10n-sat-6.2.7.1-lp150.2.19.1 libreoffice-l10n-sd-6.2.7.1-lp150.2.19.1 libreoffice-l10n-si-6.2.7.1-lp150.2.19.1 libreoffice-l10n-sid-6.2.7.1-lp150.2.19.1 libreoffice-l10n-sk-6.2.7.1-lp150.2.19.1 libreoffice-l10n-sl-6.2.7.1-lp150.2.19.1 libreoffice-l10n-sq-6.2.7.1-lp150.2.19.1 libreoffice-l10n-sr-6.2.7.1-lp150.2.19.1 libreoffice-l10n-ss-6.2.7.1-lp150.2.19.1 libreoffice-l10n-st-6.2.7.1-lp150.2.19.1 libreoffice-l10n-sv-6.2.7.1-lp150.2.19.1 libreoffice-l10n-sw_TZ-6.2.7.1-lp150.2.19.1 libreoffice-l10n-ta-6.2.7.1-lp150.2.19.1 libreoffice-l10n-te-6.2.7.1-lp150.2.19.1 libreoffice-l10n-tg-6.2.7.1-lp150.2.19.1 libreoffice-l10n-th-6.2.7.1-lp150.2.19.1 libreoffice-l10n-tn-6.2.7.1-lp150.2.19.1 libreoffice-l10n-tr-6.2.7.1-lp150.2.19.1 libreoffice-l10n-ts-6.2.7.1-lp150.2.19.1 libreoffice-l10n-tt-6.2.7.1-lp150.2.19.1 libreoffice-l10n-ug-6.2.7.1-lp150.2.19.1 libreoffice-l10n-uk-6.2.7.1-lp150.2.19.1 libreoffice-l10n-uz-6.2.7.1-lp150.2.19.1 libreoffice-l10n-ve-6.2.7.1-lp150.2.19.1 libreoffice-l10n-vec-6.2.7.1-lp150.2.19.1 libreoffice-l10n-vi-6.2.7.1-lp150.2.19.1 libreoffice-l10n-xh-6.2.7.1-lp150.2.19.1 libreoffice-l10n-zh_CN-6.2.7.1-lp150.2.19.1 libreoffice-l10n-zh_TW-6.2.7.1-lp150.2.19.1 libreoffice-l10n-zu-6.2.7.1-lp150.2.19.1 - openSUSE Leap 15.0 (x86_64): libreoffice-6.2.7.1-lp150.2.19.1 libreoffice-base-6.2.7.1-lp150.2.19.1 libreoffice-base-debuginfo-6.2.7.1-lp150.2.19.1 libreoffice-base-drivers-firebird-6.2.7.1-lp150.2.19.1 libreoffice-base-drivers-firebird-debuginfo-6.2.7.1-lp150.2.19.1 libreoffice-base-drivers-postgresql-6.2.7.1-lp150.2.19.1 libreoffice-base-drivers-postgresql-debuginfo-6.2.7.1-lp150.2.19.1 libreoffice-calc-6.2.7.1-lp150.2.19.1 libreoffice-calc-debuginfo-6.2.7.1-lp150.2.19.1 libreoffice-calc-extensions-6.2.7.1-lp150.2.19.1 libreoffice-debuginfo-6.2.7.1-lp150.2.19.1 libreoffice-debugsource-6.2.7.1-lp150.2.19.1 libreoffice-draw-6.2.7.1-lp150.2.19.1 libreoffice-draw-debuginfo-6.2.7.1-lp150.2.19.1 libreoffice-filters-optional-6.2.7.1-lp150.2.19.1 libreoffice-gnome-6.2.7.1-lp150.2.19.1 libreoffice-gnome-debuginfo-6.2.7.1-lp150.2.19.1 libreoffice-gtk2-6.2.7.1-lp150.2.19.1 libreoffice-gtk2-debuginfo-6.2.7.1-lp150.2.19.1 libreoffice-gtk3-6.2.7.1-lp150.2.19.1 libreoffice-gtk3-debuginfo-6.2.7.1-lp150.2.19.1 libreoffice-impress-6.2.7.1-lp150.2.19.1 libreoffice-impress-debuginfo-6.2.7.1-lp150.2.19.1 libreoffice-mailmerge-6.2.7.1-lp150.2.19.1 libreoffice-math-6.2.7.1-lp150.2.19.1 libreoffice-math-debuginfo-6.2.7.1-lp150.2.19.1 libreoffice-officebean-6.2.7.1-lp150.2.19.1 libreoffice-officebean-debuginfo-6.2.7.1-lp150.2.19.1 libreoffice-pyuno-6.2.7.1-lp150.2.19.1 libreoffice-pyuno-debuginfo-6.2.7.1-lp150.2.19.1 libreoffice-qt5-6.2.7.1-lp150.2.19.1 libreoffice-qt5-debuginfo-6.2.7.1-lp150.2.19.1 libreoffice-sdk-6.2.7.1-lp150.2.19.1 libreoffice-sdk-debuginfo-6.2.7.1-lp150.2.19.1 libreoffice-sdk-doc-6.2.7.1-lp150.2.19.1 libreoffice-writer-6.2.7.1-lp150.2.19.1 libreoffice-writer-debuginfo-6.2.7.1-lp150.2.19.1 libreoffice-writer-extensions-6.2.7.1-lp150.2.19.1 libreofficekit-6.2.7.1-lp150.2.19.1 libreofficekit-devel-6.2.7.1-lp150.2.19.1 References: https://www.suse.com/security/cve/CVE-2019-9854.html https://www.suse.com/security/cve/CVE-2019-9855.html https://bugzilla.suse.com/1149943 https://bugzilla.suse.com/1149944

1 0

openSUSE-RU-2019:2356-1: moderate: Recommended update for mdadm
by maintenance＠opensuse.org 21 Oct '19

21 Oct '19

openSUSE Recommended Update: Recommended update for mdadm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2356-1 Rating: moderate References: #1139709 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for mdadm fixes the following issues: - Add '--no-devices' option to mdadm to avoid component devices detail information. (bsc#1139709) - Add '--no-devices' option to the udev for calling 'mdadm --detail'. (bsc#1139709) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2356=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): mdadm-4.0-lp150.8.6.1 mdadm-debuginfo-4.0-lp150.8.6.1 mdadm-debugsource-4.0-lp150.8.6.1 References: https://bugzilla.suse.com/1139709

1 0

openSUSE-RU-2019:2355-1: moderate: Recommended update for SUSEConnect
by maintenance＠opensuse.org 21 Oct '19

21 Oct '19

openSUSE Recommended Update: Recommended update for SUSEConnect ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2355-1 Rating: moderate References: #1124318 #1130864 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for SUSEConnect fixes the following issues: - Fixes an error when trying to activate the PackageHub extension the first time (bsc#1124318) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2355=1 Package List: - openSUSE Leap 15.0 (x86_64): SUSEConnect-0.3.22-lp150.2.23.1 References: https://bugzilla.suse.com/1124318 https://bugzilla.suse.com/1130864

1 0

openSUSE-RU-2019:2360-1: moderate: Recommended update for mdadm
by maintenance＠opensuse.org 21 Oct '19

21 Oct '19

openSUSE Recommended Update: Recommended update for mdadm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2360-1 Rating: moderate References: #1139709 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for mdadm fixes the following issues: - Add '--no-devices' option to mdadm to avoid component devices detail information. (bsc#1139709) - Add '--no-devices' option to the udev for calling 'mdadm --detail'. (bsc#1139709) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2360=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): mdadm-4.1-lp151.4.3.1 mdadm-debuginfo-4.1-lp151.4.3.1 mdadm-debugsource-4.1-lp151.4.3.1 References: https://bugzilla.suse.com/1139709

1 0

openSUSE-RU-2019:2359-1: moderate: Recommended update for SUSEConnect
by maintenance＠opensuse.org 21 Oct '19

21 Oct '19

openSUSE Recommended Update: Recommended update for SUSEConnect ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2359-1 Rating: moderate References: #1124318 #1130864 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for SUSEConnect fixes the following issues: - Fixes an error when trying to activate the PackageHub extension the first time (bsc#1124318) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2359=1 Package List: - openSUSE Leap 15.1 (x86_64): SUSEConnect-0.3.22-lp151.2.9.1 References: https://bugzilla.suse.com/1124318 https://bugzilla.suse.com/1130864

1 0

openSUSE-RU-2019:2358-1: moderate: Recommended update for yast2-packager
by maintenance＠opensuse.org 21 Oct '19

21 Oct '19

openSUSE Recommended Update: Recommended update for yast2-packager ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2358-1 Rating: moderate References: #1148536 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-packager provides the following fixes: - Avoid error when generating some warnings. (bsc#1148536) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2358=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): yast2-packager-4.0.74-lp150.2.19.1 References: https://bugzilla.suse.com/1148536

1 0

openSUSE-RU-2019:2357-1: moderate: Recommended update for pesign-obs-integration
by maintenance＠opensuse.org 21 Oct '19

21 Oct '19

openSUSE Recommended Update: Recommended update for pesign-obs-integration ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2357-1 Rating: moderate References: #1134303 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for pesign-obs-integration provides the following fixes: - Makes pesign also available on ARM. (bsc#1134303) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2357=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): pesign-obs-integration-10.0-lp150.11.1 References: https://bugzilla.suse.com/1134303

1 0

openSUSE-RU-2019:2354-1: moderate: Recommended update for polkit-default-privs
by maintenance＠opensuse.org 21 Oct '19

21 Oct '19

openSUSE Recommended Update: Recommended update for polkit-default-privs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2354-1 Rating: moderate References: #1147070 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for polkit-default-privs fixes the following issues: - backport of whitelistings for polkit-untracked-privilege warnings (bsc#1147070). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2354=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): rpmlint-mini-1.10-lp151.5.6.2 rpmlint-mini-debuginfo-1.10-lp151.5.6.2 rpmlint-mini-debugsource-1.10-lp151.5.6.2 - openSUSE Leap 15.1 (noarch): polkit-default-privs-13.2-lp151.16.6.1 References: https://bugzilla.suse.com/1147070

1 0

openSUSE-RU-2019:2353-1: moderate: Recommended update for libdb-4_8
by maintenance＠opensuse.org 21 Oct '19

21 Oct '19

openSUSE Recommended Update: Recommended update for libdb-4_8 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2353-1 Rating: moderate References: #1148244 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libdb-4_8 fixes the following issues: - Add off-page deadlock patch as found and documented by Red Hat. (bsc#1148244) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2353=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): db48-utils-4.8.30-lp151.7.3.1 db48-utils-debuginfo-4.8.30-lp151.7.3.1 libdb-4_8-4.8.30-lp151.7.3.1 libdb-4_8-debuginfo-4.8.30-lp151.7.3.1 libdb-4_8-debugsource-4.8.30-lp151.7.3.1 libdb-4_8-devel-4.8.30-lp151.7.3.1 - openSUSE Leap 15.1 (x86_64): libdb-4_8-32bit-4.8.30-lp151.7.3.1 libdb-4_8-32bit-debuginfo-4.8.30-lp151.7.3.1 libdb-4_8-devel-32bit-4.8.30-lp151.7.3.1 libdb_java-4_8-4.8.30-lp151.7.3.1 libdb_java-4_8-debuginfo-4.8.30-lp151.7.3.1 libdb_java-4_8-debugsource-4.8.30-lp151.7.3.1 libdb_java-4_8-devel-4.8.30-lp151.7.3.1 - openSUSE Leap 15.1 (noarch): db48-doc-4.8.30-lp151.7.3.1 References: https://bugzilla.suse.com/1148244

1 0

openSUSE-RU-2019:2352-1: moderate: Recommended update for e2fsprogs
by maintenance＠opensuse.org 21 Oct '19

21 Oct '19

openSUSE Recommended Update: Recommended update for e2fsprogs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2352-1 Rating: moderate References: #1145716 #1152101 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for e2fsprogs fixes the following issues: Security issue fixed: - CVE-2019-5094: Fixed an arbitrary code execution via specially crafted ext4 file systems. (bsc#1152101) Non-security issue fixed: - libext2fs: Call fsync(2) to clear stale errors for a new a unix I/O channel. (bsc#1145716) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2352=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): e2fsprogs-1.43.8-lp151.5.6.1 e2fsprogs-debuginfo-1.43.8-lp151.5.6.1 e2fsprogs-debugsource-1.43.8-lp151.5.6.1 e2fsprogs-devel-1.43.8-lp151.5.6.1 libcom_err-devel-1.43.8-lp151.5.6.1 libcom_err-devel-static-1.43.8-lp151.5.6.1 libcom_err2-1.43.8-lp151.5.6.1 libcom_err2-debuginfo-1.43.8-lp151.5.6.1 libext2fs-devel-1.43.8-lp151.5.6.1 libext2fs-devel-static-1.43.8-lp151.5.6.1 libext2fs2-1.43.8-lp151.5.6.1 libext2fs2-debuginfo-1.43.8-lp151.5.6.1 - openSUSE Leap 15.1 (x86_64): e2fsprogs-32bit-debuginfo-1.43.8-lp151.5.6.1 libcom_err-devel-32bit-1.43.8-lp151.5.6.1 libcom_err2-32bit-1.43.8-lp151.5.6.1 libcom_err2-32bit-debuginfo-1.43.8-lp151.5.6.1 libext2fs-devel-32bit-1.43.8-lp151.5.6.1 libext2fs2-32bit-1.43.8-lp151.5.6.1 libext2fs2-32bit-debuginfo-1.43.8-lp151.5.6.1 References: https://www.suse.com/security/cve/CVE-2019-5094.html https://bugzilla.suse.com/1145716 https://bugzilla.suse.com/1152101

1 0

openSUSE-RU-2019:2349-1: moderate: Recommended update for e2fsprogs
by maintenance＠opensuse.org 21 Oct '19

21 Oct '19

openSUSE Recommended Update: Recommended update for e2fsprogs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2349-1 Rating: moderate References: #1145716 #1152101 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for e2fsprogs fixes the following issues: Security issue fixed: - CVE-2019-5094: Fixed an arbitrary code execution via specially crafted ext4 file systems. (bsc#1152101) Non-security issue fixed: - libext2fs: Call fsync(2) to clear stale errors for a new a unix I/O channel. (bsc#1145716) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2349=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): e2fsprogs-1.43.8-lp150.11.1 e2fsprogs-debuginfo-1.43.8-lp150.11.1 e2fsprogs-debugsource-1.43.8-lp150.11.1 e2fsprogs-devel-1.43.8-lp150.11.1 libcom_err-devel-1.43.8-lp150.11.1 libcom_err-devel-static-1.43.8-lp150.11.1 libcom_err2-1.43.8-lp150.11.1 libcom_err2-debuginfo-1.43.8-lp150.11.1 libext2fs-devel-1.43.8-lp150.11.1 libext2fs-devel-static-1.43.8-lp150.11.1 libext2fs2-1.43.8-lp150.11.1 libext2fs2-debuginfo-1.43.8-lp150.11.1 - openSUSE Leap 15.0 (x86_64): e2fsprogs-32bit-debuginfo-1.43.8-lp150.11.1 libcom_err-devel-32bit-1.43.8-lp150.11.1 libcom_err2-32bit-1.43.8-lp150.11.1 libcom_err2-32bit-debuginfo-1.43.8-lp150.11.1 libext2fs-devel-32bit-1.43.8-lp150.11.1 libext2fs2-32bit-1.43.8-lp150.11.1 libext2fs2-32bit-debuginfo-1.43.8-lp150.11.1 References: https://www.suse.com/security/cve/CVE-2019-5094.html https://bugzilla.suse.com/1145716 https://bugzilla.suse.com/1152101

1 0

openSUSE-RU-2019:2350-1: moderate: Recommended update for gnu-compilers-hpc
by maintenance＠opensuse.org 21 Oct '19

21 Oct '19

openSUSE Recommended Update: Recommended update for gnu-compilers-hpc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2350-1 Rating: moderate References: #1116458 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gnu-compilers-hpc fixes the following issues: - Add support for gcc v.8 and v.9 for SLE-15 & SLE-15-SP1. (jsc#SLE-7766) - Add links from the generic compiler binary names cc, cpp, c++ and fc to the compiler specific names in the package private binary directory. - Define _hpc_gnu_module (bsc#1116458). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2350=1 Package List: - openSUSE Leap 15.0 (noarch): gnu-compilers-hpc-1.4-lp150.5.3.1 gnu-compilers-hpc-devel-1.4-lp150.5.3.1 gnu-compilers-hpc-macros-devel-1.4-lp150.5.3.1 gnu8-compilers-hpc-1.4-lp150.5.3.1 gnu8-compilers-hpc-devel-1.4-lp150.5.3.1 gnu8-compilers-hpc-macros-devel-1.4-lp150.5.3.1 References: https://bugzilla.suse.com/1116458

1 0

openSUSE-RU-2019:2351-1: moderate: Recommended update for libdb-4_8
by maintenance＠opensuse.org 21 Oct '19

21 Oct '19

openSUSE Recommended Update: Recommended update for libdb-4_8 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2351-1 Rating: moderate References: #1148244 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libdb-4_8 fixes the following issues: - Add off-page deadlock patch as found and documented by Red Hat. (bsc#1148244) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2351=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): db48-utils-4.8.30-lp150.6.3.1 db48-utils-debuginfo-4.8.30-lp150.6.3.1 libdb-4_8-4.8.30-lp150.6.3.1 libdb-4_8-debuginfo-4.8.30-lp150.6.3.1 libdb-4_8-debugsource-4.8.30-lp150.6.3.1 libdb-4_8-devel-4.8.30-lp150.6.3.1 - openSUSE Leap 15.0 (noarch): db48-doc-4.8.30-lp150.6.3.1 - openSUSE Leap 15.0 (x86_64): libdb-4_8-32bit-4.8.30-lp150.6.3.1 libdb-4_8-32bit-debuginfo-4.8.30-lp150.6.3.1 libdb-4_8-devel-32bit-4.8.30-lp150.6.3.1 libdb_java-4_8-4.8.30-lp150.6.3.1 libdb_java-4_8-debuginfo-4.8.30-lp150.6.3.1 libdb_java-4_8-debugsource-4.8.30-lp150.6.3.1 libdb_java-4_8-devel-4.8.30-lp150.6.3.1 References: https://bugzilla.suse.com/1148244

1 0

openSUSE-SU-2019:2347-1: moderate: Security update for lighttpd
by opensuse-security＠opensuse.org 20 Oct '19

20 Oct '19

openSUSE Security Update: Security update for lighttpd ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2347-1 Rating: moderate References: #1087369 #1111733 #1115016 #1153722 Cross-References: CVE-2018-19052 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 openSUSE Backports SLE-15-SP1 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that solves one vulnerability and has three fixes is now available. Description: This update for lighttpd to version 1.4.54 fixes the following issues: Security issues fixed: - CVE-2018-19052: Fixed a path traversal in mod_alias (boo#1115016). - Changed the default TLS configuration of lighttpd for better security out-of-the-box (boo#1087369). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2347=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2347=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2347=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-2347=1 Package List: - openSUSE Leap 15.1 (x86_64): lighttpd-1.4.54-lp151.3.3.1 lighttpd-debuginfo-1.4.54-lp151.3.3.1 lighttpd-debugsource-1.4.54-lp151.3.3.1 lighttpd-mod_authn_gssapi-1.4.54-lp151.3.3.1 lighttpd-mod_authn_gssapi-debuginfo-1.4.54-lp151.3.3.1 lighttpd-mod_authn_ldap-1.4.54-lp151.3.3.1 lighttpd-mod_authn_ldap-debuginfo-1.4.54-lp151.3.3.1 lighttpd-mod_authn_mysql-1.4.54-lp151.3.3.1 lighttpd-mod_authn_mysql-debuginfo-1.4.54-lp151.3.3.1 lighttpd-mod_authn_pam-1.4.54-lp151.3.3.1 lighttpd-mod_authn_pam-debuginfo-1.4.54-lp151.3.3.1 lighttpd-mod_authn_sasl-1.4.54-lp151.3.3.1 lighttpd-mod_authn_sasl-debuginfo-1.4.54-lp151.3.3.1 lighttpd-mod_cml-1.4.54-lp151.3.3.1 lighttpd-mod_cml-debuginfo-1.4.54-lp151.3.3.1 lighttpd-mod_geoip-1.4.54-lp151.3.3.1 lighttpd-mod_geoip-debuginfo-1.4.54-lp151.3.3.1 lighttpd-mod_magnet-1.4.54-lp151.3.3.1 lighttpd-mod_magnet-debuginfo-1.4.54-lp151.3.3.1 lighttpd-mod_maxminddb-1.4.54-lp151.3.3.1 lighttpd-mod_maxminddb-debuginfo-1.4.54-lp151.3.3.1 lighttpd-mod_mysql_vhost-1.4.54-lp151.3.3.1 lighttpd-mod_mysql_vhost-debuginfo-1.4.54-lp151.3.3.1 lighttpd-mod_rrdtool-1.4.54-lp151.3.3.1 lighttpd-mod_rrdtool-debuginfo-1.4.54-lp151.3.3.1 lighttpd-mod_trigger_b4_dl-1.4.54-lp151.3.3.1 lighttpd-mod_trigger_b4_dl-debuginfo-1.4.54-lp151.3.3.1 lighttpd-mod_vhostdb_dbi-1.4.54-lp151.3.3.1 lighttpd-mod_vhostdb_dbi-debuginfo-1.4.54-lp151.3.3.1 lighttpd-mod_vhostdb_ldap-1.4.54-lp151.3.3.1 lighttpd-mod_vhostdb_ldap-debuginfo-1.4.54-lp151.3.3.1 lighttpd-mod_vhostdb_mysql-1.4.54-lp151.3.3.1 lighttpd-mod_vhostdb_mysql-debuginfo-1.4.54-lp151.3.3.1 lighttpd-mod_vhostdb_pgsql-1.4.54-lp151.3.3.1 lighttpd-mod_vhostdb_pgsql-debuginfo-1.4.54-lp151.3.3.1 lighttpd-mod_webdav-1.4.54-lp151.3.3.1 lighttpd-mod_webdav-debuginfo-1.4.54-lp151.3.3.1 - openSUSE Leap 15.0 (x86_64): lighttpd-1.4.54-lp150.2.3.1 lighttpd-debuginfo-1.4.54-lp150.2.3.1 lighttpd-debugsource-1.4.54-lp150.2.3.1 lighttpd-mod_authn_gssapi-1.4.54-lp150.2.3.1 lighttpd-mod_authn_gssapi-debuginfo-1.4.54-lp150.2.3.1 lighttpd-mod_authn_ldap-1.4.54-lp150.2.3.1 lighttpd-mod_authn_ldap-debuginfo-1.4.54-lp150.2.3.1 lighttpd-mod_authn_mysql-1.4.54-lp150.2.3.1 lighttpd-mod_authn_mysql-debuginfo-1.4.54-lp150.2.3.1 lighttpd-mod_authn_pam-1.4.54-lp150.2.3.1 lighttpd-mod_authn_pam-debuginfo-1.4.54-lp150.2.3.1 lighttpd-mod_authn_sasl-1.4.54-lp150.2.3.1 lighttpd-mod_authn_sasl-debuginfo-1.4.54-lp150.2.3.1 lighttpd-mod_cml-1.4.54-lp150.2.3.1 lighttpd-mod_cml-debuginfo-1.4.54-lp150.2.3.1 lighttpd-mod_geoip-1.4.54-lp150.2.3.1 lighttpd-mod_geoip-debuginfo-1.4.54-lp150.2.3.1 lighttpd-mod_magnet-1.4.54-lp150.2.3.1 lighttpd-mod_magnet-debuginfo-1.4.54-lp150.2.3.1 lighttpd-mod_maxminddb-1.4.54-lp150.2.3.1 lighttpd-mod_maxminddb-debuginfo-1.4.54-lp150.2.3.1 lighttpd-mod_mysql_vhost-1.4.54-lp150.2.3.1 lighttpd-mod_mysql_vhost-debuginfo-1.4.54-lp150.2.3.1 lighttpd-mod_rrdtool-1.4.54-lp150.2.3.1 lighttpd-mod_rrdtool-debuginfo-1.4.54-lp150.2.3.1 lighttpd-mod_trigger_b4_dl-1.4.54-lp150.2.3.1 lighttpd-mod_trigger_b4_dl-debuginfo-1.4.54-lp150.2.3.1 lighttpd-mod_vhostdb_dbi-1.4.54-lp150.2.3.1 lighttpd-mod_vhostdb_dbi-debuginfo-1.4.54-lp150.2.3.1 lighttpd-mod_vhostdb_ldap-1.4.54-lp150.2.3.1 lighttpd-mod_vhostdb_ldap-debuginfo-1.4.54-lp150.2.3.1 lighttpd-mod_vhostdb_mysql-1.4.54-lp150.2.3.1 lighttpd-mod_vhostdb_mysql-debuginfo-1.4.54-lp150.2.3.1 lighttpd-mod_vhostdb_pgsql-1.4.54-lp150.2.3.1 lighttpd-mod_vhostdb_pgsql-debuginfo-1.4.54-lp150.2.3.1 lighttpd-mod_webdav-1.4.54-lp150.2.3.1 lighttpd-mod_webdav-debuginfo-1.4.54-lp150.2.3.1 - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): lighttpd-1.4.54-bp151.4.3.1 lighttpd-mod_authn_gssapi-1.4.54-bp151.4.3.1 lighttpd-mod_authn_ldap-1.4.54-bp151.4.3.1 lighttpd-mod_authn_mysql-1.4.54-bp151.4.3.1 lighttpd-mod_authn_pam-1.4.54-bp151.4.3.1 lighttpd-mod_authn_sasl-1.4.54-bp151.4.3.1 lighttpd-mod_cml-1.4.54-bp151.4.3.1 lighttpd-mod_geoip-1.4.54-bp151.4.3.1 lighttpd-mod_magnet-1.4.54-bp151.4.3.1 lighttpd-mod_maxminddb-1.4.54-bp151.4.3.1 lighttpd-mod_mysql_vhost-1.4.54-bp151.4.3.1 lighttpd-mod_rrdtool-1.4.54-bp151.4.3.1 lighttpd-mod_trigger_b4_dl-1.4.54-bp151.4.3.1 lighttpd-mod_vhostdb_dbi-1.4.54-bp151.4.3.1 lighttpd-mod_vhostdb_ldap-1.4.54-bp151.4.3.1 lighttpd-mod_vhostdb_mysql-1.4.54-bp151.4.3.1 lighttpd-mod_vhostdb_pgsql-1.4.54-bp151.4.3.1 lighttpd-mod_webdav-1.4.54-bp151.4.3.1 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): lighttpd-1.4.54-bp150.3.3.1 lighttpd-debuginfo-1.4.54-bp150.3.3.1 lighttpd-debugsource-1.4.54-bp150.3.3.1 lighttpd-mod_authn_gssapi-1.4.54-bp150.3.3.1 lighttpd-mod_authn_gssapi-debuginfo-1.4.54-bp150.3.3.1 lighttpd-mod_authn_ldap-1.4.54-bp150.3.3.1 lighttpd-mod_authn_ldap-debuginfo-1.4.54-bp150.3.3.1 lighttpd-mod_authn_mysql-1.4.54-bp150.3.3.1 lighttpd-mod_authn_mysql-debuginfo-1.4.54-bp150.3.3.1 lighttpd-mod_authn_pam-1.4.54-bp150.3.3.1 lighttpd-mod_authn_pam-debuginfo-1.4.54-bp150.3.3.1 lighttpd-mod_authn_sasl-1.4.54-bp150.3.3.1 lighttpd-mod_authn_sasl-debuginfo-1.4.54-bp150.3.3.1 lighttpd-mod_cml-1.4.54-bp150.3.3.1 lighttpd-mod_cml-debuginfo-1.4.54-bp150.3.3.1 lighttpd-mod_geoip-1.4.54-bp150.3.3.1 lighttpd-mod_geoip-debuginfo-1.4.54-bp150.3.3.1 lighttpd-mod_magnet-1.4.54-bp150.3.3.1 lighttpd-mod_magnet-debuginfo-1.4.54-bp150.3.3.1 lighttpd-mod_maxminddb-1.4.54-bp150.3.3.1 lighttpd-mod_maxminddb-debuginfo-1.4.54-bp150.3.3.1 lighttpd-mod_mysql_vhost-1.4.54-bp150.3.3.1 lighttpd-mod_mysql_vhost-debuginfo-1.4.54-bp150.3.3.1 lighttpd-mod_rrdtool-1.4.54-bp150.3.3.1 lighttpd-mod_rrdtool-debuginfo-1.4.54-bp150.3.3.1 lighttpd-mod_trigger_b4_dl-1.4.54-bp150.3.3.1 lighttpd-mod_trigger_b4_dl-debuginfo-1.4.54-bp150.3.3.1 lighttpd-mod_vhostdb_dbi-1.4.54-bp150.3.3.1 lighttpd-mod_vhostdb_dbi-debuginfo-1.4.54-bp150.3.3.1 lighttpd-mod_vhostdb_ldap-1.4.54-bp150.3.3.1 lighttpd-mod_vhostdb_ldap-debuginfo-1.4.54-bp150.3.3.1 lighttpd-mod_vhostdb_mysql-1.4.54-bp150.3.3.1 lighttpd-mod_vhostdb_mysql-debuginfo-1.4.54-bp150.3.3.1 lighttpd-mod_vhostdb_pgsql-1.4.54-bp150.3.3.1 lighttpd-mod_vhostdb_pgsql-debuginfo-1.4.54-bp150.3.3.1 lighttpd-mod_webdav-1.4.54-bp150.3.3.1 lighttpd-mod_webdav-debuginfo-1.4.54-bp150.3.3.1 References: https://www.suse.com/security/cve/CVE-2018-19052.html https://bugzilla.suse.com/1087369 https://bugzilla.suse.com/1111733 https://bugzilla.suse.com/1115016 https://bugzilla.suse.com/1153722

1 0

openSUSE-SU-2019:2348-1: important: Security update for tcpdump
by opensuse-security＠opensuse.org 20 Oct '19

20 Oct '19

openSUSE Security Update: Security update for tcpdump ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2348-1 Rating: important References: #1068716 #1153098 #1153332 Cross-References: CVE-2017-16808 CVE-2018-10103 CVE-2018-10105 CVE-2018-14461 CVE-2018-14462 CVE-2018-14463 CVE-2018-14464 CVE-2018-14465 CVE-2018-14466 CVE-2018-14467 CVE-2018-14468 CVE-2018-14469 CVE-2018-14470 CVE-2018-14879 CVE-2018-14880 CVE-2018-14881 CVE-2018-14882 CVE-2018-16227 CVE-2018-16228 CVE-2018-16229 CVE-2018-16230 CVE-2018-16300 CVE-2018-16301 CVE-2018-16451 CVE-2018-16452 CVE-2019-1010220 CVE-2019-15166 CVE-2019-15167 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 28 vulnerabilities is now available. Description: This update for tcpdump fixes the following issues: - CVE-2017-16808: Fixed a heap-based buffer over-read related to aoe_print and lookup_emem (bsc#1068716 bsc#1153098). - CVE-2018-10103: Fixed a mishandling of the printing of SMB data (bsc#1153098). - CVE-2018-10105: Fixed a mishandling of the printing of SMB data (bsc#1153098). - CVE-2018-14461: Fixed a buffer over-read in print-ldp.c:ldp_tlv_print (bsc#1153098). - CVE-2018-14462: Fixed a buffer over-read in print-icmp.c:icmp_print (bsc#1153098). - CVE-2018-14463: Fixed a buffer over-read in print-vrrp.c:vrrp_print (bsc#1153098). - CVE-2018-14464: Fixed a buffer over-read in print-lmp.c:lmp_print_data_link_subobjs (bsc#1153098). - CVE-2018-14465: Fixed a buffer over-read in print-rsvp.c:rsvp_obj_print (bsc#1153098). - CVE-2018-14466: Fixed a buffer over-read in print-rx.c:rx_cache_find (bsc#1153098). - CVE-2018-14467: Fixed a buffer over-read in print-bgp.c:bgp_capabilities_print (bsc#1153098). - CVE-2018-14468: Fixed a buffer over-read in print-fr.c:mfr_print (bsc#1153098). - CVE-2018-14469: Fixed a buffer over-read in print-isakmp.c:ikev1_n_print (bsc#1153098). - CVE-2018-14470: Fixed a buffer over-read in print-babel.c:babel_print_v2 (bsc#1153098). - CVE-2018-14879: Fixed a buffer overflow in the command-line argument parser (bsc#1153098). - CVE-2018-14880: Fixed a buffer over-read in the OSPFv3 parser (bsc#1153098). - CVE-2018-14881: Fixed a buffer over-read in the BGP parser (bsc#1153098). - CVE-2018-14882: Fixed a buffer over-read in the ICMPv6 parser (bsc#1153098). - CVE-2018-16227: Fixed a buffer over-read in the IEEE 802.11 parser in print-802_11.c for the Mesh Flags subfield (bsc#1153098). - CVE-2018-16228: Fixed a buffer over-read in the HNCP parser (bsc#1153098). - CVE-2018-16229: Fixed a buffer over-read in the DCCP parser (bsc#1153098). - CVE-2018-16230: Fixed a buffer over-read in the BGP parser in print-bgp.c:bgp_attr_print (bsc#1153098). - CVE-2018-16300: Fixed an unlimited recursion in the BGP parser that allowed denial-of-service by stack consumption (bsc#1153098). - CVE-2018-16301: Fixed a buffer overflow (bsc#1153332 bsc#1153098). - CVE-2018-16451: Fixed several buffer over-reads in print-smb.c:print_trans() for \MAILSLOT\BROWSE and \PIPE\LANMAN (bsc#1153098). - CVE-2018-16452: Fixed a stack exhaustion in smbutil.c:smb_fdata (bsc#1153098). - CVE-2019-15166: Fixed a bounds check in lmp_print_data_link_subobjs (bsc#1153098). - CVE-2019-15167: Fixed a vulnerability in VRRP (bsc#1153098). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2348=1 Package List: - openSUSE Leap 15.1 (x86_64): tcpdump-4.9.2-lp151.4.6.1 tcpdump-debuginfo-4.9.2-lp151.4.6.1 tcpdump-debugsource-4.9.2-lp151.4.6.1 References: https://www.suse.com/security/cve/CVE-2017-16808.html https://www.suse.com/security/cve/CVE-2018-10103.html https://www.suse.com/security/cve/CVE-2018-10105.html https://www.suse.com/security/cve/CVE-2018-14461.html https://www.suse.com/security/cve/CVE-2018-14462.html https://www.suse.com/security/cve/CVE-2018-14463.html https://www.suse.com/security/cve/CVE-2018-14464.html https://www.suse.com/security/cve/CVE-2018-14465.html https://www.suse.com/security/cve/CVE-2018-14466.html https://www.suse.com/security/cve/CVE-2018-14467.html https://www.suse.com/security/cve/CVE-2018-14468.html https://www.suse.com/security/cve/CVE-2018-14469.html https://www.suse.com/security/cve/CVE-2018-14470.html https://www.suse.com/security/cve/CVE-2018-14879.html https://www.suse.com/security/cve/CVE-2018-14880.html https://www.suse.com/security/cve/CVE-2018-14881.html https://www.suse.com/security/cve/CVE-2018-14882.html https://www.suse.com/security/cve/CVE-2018-16227.html https://www.suse.com/security/cve/CVE-2018-16228.html https://www.suse.com/security/cve/CVE-2018-16229.html https://www.suse.com/security/cve/CVE-2018-16230.html https://www.suse.com/security/cve/CVE-2018-16300.html https://www.suse.com/security/cve/CVE-2018-16301.html https://www.suse.com/security/cve/CVE-2018-16451.html https://www.suse.com/security/cve/CVE-2018-16452.html https://www.suse.com/security/cve/CVE-2019-1010220.html https://www.suse.com/security/cve/CVE-2019-15166.html https://www.suse.com/security/cve/CVE-2019-15167.html https://bugzilla.suse.com/1068716 https://bugzilla.suse.com/1153098 https://bugzilla.suse.com/1153332

1 0

openSUSE-RU-2019:2346-1: moderate: Recommended update for python-cluster-preflight-check
by maintenance＠opensuse.org 20 Oct '19

20 Oct '19

openSUSE Recommended Update: Recommended update for python-cluster-preflight-check ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2346-1 Rating: moderate References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for python-cluster-preflight-check fixes the following issues: python-cluster-preflight-check was updated to 0.0.33: - Use setup.py to create ha-cluster-preflight-check automatically (#10) - Use underscores in source tarball as provided by GitHub - Language fixes to the description. Version 0.0.29 (jsc#4024): - Rename cluster-test-tool to cluster-preflight-check - Improve scenarios for blocking corosync ports to simulate split brain - Improve for: * fix regrex mismatch/None results * reinforce testcase enter condition * more docstring and comments Version 0.0.28: - Improve logging - Add unittest codes - Add docs for functions - Using shell to wrap python2&3 entry - Make split brain by blocking corosync ports - Check firewall Version 0.0.23: - Add log to record internal operations - Add json output for each test case - Add report for killing test case Version 0.0.20: - Python3 only - Check environment: hostname resolvable - Check environment: time service - Check environment: watchdog - Check cluster: cluster service - Check cluster: stonith configuration - Check cluster: nodes status - Check cluster: resources status - Kill sbd daemon - Kill corosync daemon - Kill pacemakerd daemon - Kill process in loop - Fence specific node Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2019-2346=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): python-cluster-preflight-check-0.0.33-2.1 python3-cluster-preflight-check-0.0.33-2.1 References:

1 0

openSUSE-SU-2019:2343-1: important: Security update for libpcap
by opensuse-security＠opensuse.org 20 Oct '19

20 Oct '19

openSUSE Security Update: Security update for libpcap ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2343-1 Rating: important References: #1153332 Cross-References: CVE-2018-16301 CVE-2019-15165 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for libpcap fixes the following issues: - CVE-2019-15165: Added sanity checks for PHB header length before allocating memory (bsc#1153332). - CVE-2018-16301: Fixed a buffer overflow (bsc#1153332). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2343=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libpcap-debugsource-1.8.1-lp150.3.3.1 libpcap-devel-1.8.1-lp150.3.3.1 libpcap-devel-static-1.8.1-lp150.3.3.1 libpcap1-1.8.1-lp150.3.3.1 libpcap1-debuginfo-1.8.1-lp150.3.3.1 - openSUSE Leap 15.0 (x86_64): libpcap-devel-32bit-1.8.1-lp150.3.3.1 libpcap1-32bit-1.8.1-lp150.3.3.1 libpcap1-32bit-debuginfo-1.8.1-lp150.3.3.1 References: https://www.suse.com/security/cve/CVE-2018-16301.html https://www.suse.com/security/cve/CVE-2019-15165.html https://bugzilla.suse.com/1153332

1 0

openSUSE-SU-2019:2345-1: important: Security update for libpcap
by opensuse-security＠opensuse.org 20 Oct '19

20 Oct '19

openSUSE Security Update: Security update for libpcap ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2345-1 Rating: important References: #1153332 Cross-References: CVE-2018-16301 CVE-2019-15165 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for libpcap fixes the following issues: - CVE-2019-15165: Added sanity checks for PHB header length before allocating memory (bsc#1153332). - CVE-2018-16301: Fixed a buffer overflow (bsc#1153332). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2345=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libpcap-debugsource-1.8.1-lp151.4.3.1 libpcap-devel-1.8.1-lp151.4.3.1 libpcap-devel-static-1.8.1-lp151.4.3.1 libpcap1-1.8.1-lp151.4.3.1 libpcap1-debuginfo-1.8.1-lp151.4.3.1 - openSUSE Leap 15.1 (x86_64): libpcap-devel-32bit-1.8.1-lp151.4.3.1 libpcap1-32bit-1.8.1-lp151.4.3.1 libpcap1-32bit-debuginfo-1.8.1-lp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2018-16301.html https://www.suse.com/security/cve/CVE-2019-15165.html https://bugzilla.suse.com/1153332

1 0

openSUSE-SU-2019:2344-1: important: Security update for tcpdump
by opensuse-security＠opensuse.org 20 Oct '19

20 Oct '19

openSUSE Security Update: Security update for tcpdump ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2344-1 Rating: important References: #1068716 #1153098 #1153332 Cross-References: CVE-2017-16808 CVE-2018-10103 CVE-2018-10105 CVE-2018-14461 CVE-2018-14462 CVE-2018-14463 CVE-2018-14464 CVE-2018-14465 CVE-2018-14466 CVE-2018-14467 CVE-2018-14468 CVE-2018-14469 CVE-2018-14470 CVE-2018-14879 CVE-2018-14880 CVE-2018-14881 CVE-2018-14882 CVE-2018-16227 CVE-2018-16228 CVE-2018-16229 CVE-2018-16230 CVE-2018-16300 CVE-2018-16301 CVE-2018-16451 CVE-2018-16452 CVE-2019-1010220 CVE-2019-15166 CVE-2019-15167 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes 28 vulnerabilities is now available. Description: This update for tcpdump fixes the following issues: - CVE-2017-16808: Fixed a heap-based buffer over-read related to aoe_print and lookup_emem (bsc#1068716 bsc#1153098). - CVE-2018-10103: Fixed a mishandling of the printing of SMB data (bsc#1153098). - CVE-2018-10105: Fixed a mishandling of the printing of SMB data (bsc#1153098). - CVE-2018-14461: Fixed a buffer over-read in print-ldp.c:ldp_tlv_print (bsc#1153098). - CVE-2018-14462: Fixed a buffer over-read in print-icmp.c:icmp_print (bsc#1153098). - CVE-2018-14463: Fixed a buffer over-read in print-vrrp.c:vrrp_print (bsc#1153098). - CVE-2018-14464: Fixed a buffer over-read in print-lmp.c:lmp_print_data_link_subobjs (bsc#1153098). - CVE-2018-14465: Fixed a buffer over-read in print-rsvp.c:rsvp_obj_print (bsc#1153098). - CVE-2018-14466: Fixed a buffer over-read in print-rx.c:rx_cache_find (bsc#1153098). - CVE-2018-14467: Fixed a buffer over-read in print-bgp.c:bgp_capabilities_print (bsc#1153098). - CVE-2018-14468: Fixed a buffer over-read in print-fr.c:mfr_print (bsc#1153098). - CVE-2018-14469: Fixed a buffer over-read in print-isakmp.c:ikev1_n_print (bsc#1153098). - CVE-2018-14470: Fixed a buffer over-read in print-babel.c:babel_print_v2 (bsc#1153098). - CVE-2018-14879: Fixed a buffer overflow in the command-line argument parser (bsc#1153098). - CVE-2018-14880: Fixed a buffer over-read in the OSPFv3 parser (bsc#1153098). - CVE-2018-14881: Fixed a buffer over-read in the BGP parser (bsc#1153098). - CVE-2018-14882: Fixed a buffer over-read in the ICMPv6 parser (bsc#1153098). - CVE-2018-16227: Fixed a buffer over-read in the IEEE 802.11 parser in print-802_11.c for the Mesh Flags subfield (bsc#1153098). - CVE-2018-16228: Fixed a buffer over-read in the HNCP parser (bsc#1153098). - CVE-2018-16229: Fixed a buffer over-read in the DCCP parser (bsc#1153098). - CVE-2018-16230: Fixed a buffer over-read in the BGP parser in print-bgp.c:bgp_attr_print (bsc#1153098). - CVE-2018-16300: Fixed an unlimited recursion in the BGP parser that allowed denial-of-service by stack consumption (bsc#1153098). - CVE-2018-16301: Fixed a buffer overflow (bsc#1153332 bsc#1153098). - CVE-2018-16451: Fixed several buffer over-reads in print-smb.c:print_trans() for \MAILSLOT\BROWSE and \PIPE\LANMAN (bsc#1153098). - CVE-2018-16452: Fixed a stack exhaustion in smbutil.c:smb_fdata (bsc#1153098). - CVE-2019-15166: Fixed a bounds check in lmp_print_data_link_subobjs (bsc#1153098). - CVE-2019-15167: Fixed a vulnerability in VRRP (bsc#1153098). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2344=1 Package List: - openSUSE Leap 15.0 (x86_64): tcpdump-4.9.2-lp150.10.1 tcpdump-debuginfo-4.9.2-lp150.10.1 tcpdump-debugsource-4.9.2-lp150.10.1 References: https://www.suse.com/security/cve/CVE-2017-16808.html https://www.suse.com/security/cve/CVE-2018-10103.html https://www.suse.com/security/cve/CVE-2018-10105.html https://www.suse.com/security/cve/CVE-2018-14461.html https://www.suse.com/security/cve/CVE-2018-14462.html https://www.suse.com/security/cve/CVE-2018-14463.html https://www.suse.com/security/cve/CVE-2018-14464.html https://www.suse.com/security/cve/CVE-2018-14465.html https://www.suse.com/security/cve/CVE-2018-14466.html https://www.suse.com/security/cve/CVE-2018-14467.html https://www.suse.com/security/cve/CVE-2018-14468.html https://www.suse.com/security/cve/CVE-2018-14469.html https://www.suse.com/security/cve/CVE-2018-14470.html https://www.suse.com/security/cve/CVE-2018-14879.html https://www.suse.com/security/cve/CVE-2018-14880.html https://www.suse.com/security/cve/CVE-2018-14881.html https://www.suse.com/security/cve/CVE-2018-14882.html https://www.suse.com/security/cve/CVE-2018-16227.html https://www.suse.com/security/cve/CVE-2018-16228.html https://www.suse.com/security/cve/CVE-2018-16229.html https://www.suse.com/security/cve/CVE-2018-16230.html https://www.suse.com/security/cve/CVE-2018-16300.html https://www.suse.com/security/cve/CVE-2018-16301.html https://www.suse.com/security/cve/CVE-2018-16451.html https://www.suse.com/security/cve/CVE-2018-16452.html https://www.suse.com/security/cve/CVE-2019-1010220.html https://www.suse.com/security/cve/CVE-2019-15166.html https://www.suse.com/security/cve/CVE-2019-15167.html https://bugzilla.suse.com/1068716 https://bugzilla.suse.com/1153098 https://bugzilla.suse.com/1153332

1 0

openSUSE-RU-2019:2342-1: moderate: Recommended update for ntpsec
by maintenance＠opensuse.org 20 Oct '19

20 Oct '19

openSUSE Recommended Update: Recommended update for ntpsec ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2342-1 Rating: moderate References: #1138728 #1153841 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for ntpsec fixes the following issues: Changes in ntpsec: - Update the unit install commands wrt boo#1153841 ntpsec was updated to 1.1.7 boo#1153841: * The numeric literal argument of the 'time1' fudge option on a clock can now have one or more letter suffixes that compensate for era rollover in a GPS device. Each "g" adds the number of seconds in a 1024-week (10-bit) GPS era. Each "G" adds the number of seconds in a 8192-week (13-bit) GPS era. * The neoclock4x driver has been removed, due to the hardware and the vendor having utterly vanished from the face of the earth. * The NTS ALPN negotiation sequence has been modified for improved interoperability with other NTS implementations. * NTS key rotation now happens every 24 hours. It used to rotate every hour to enable testing of recovery from stale cookies. - Actually remove ntp.firewall from sources. - Do not install susefirewall2 service anymore Update to 1.1.6: * Fixes to NTS server list. * Add ALPN for the NTS server, as required by the NTP draft. Update to 1.1.4 should fix boo#1138728: * NTS is now implemented * Lots of fixes and cleanups to PPS * Lots of minor cleanups Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2342=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2342=1 Package List: - openSUSE Leap 15.1 (x86_64): ntpsec-1.1.7-lp151.2.3.1 ntpsec-debuginfo-1.1.7-lp151.2.3.1 ntpsec-debugsource-1.1.7-lp151.2.3.1 ntpsec-doc-1.1.7-lp151.2.3.1 ntpsec-utils-1.1.7-lp151.2.3.1 python3-ntp-1.1.7-lp151.2.3.1 python3-ntp-debuginfo-1.1.7-lp151.2.3.1 - openSUSE Leap 15.0 (x86_64): ntpsec-1.1.7-lp150.7.1 ntpsec-debuginfo-1.1.7-lp150.7.1 ntpsec-debugsource-1.1.7-lp150.7.1 ntpsec-doc-1.1.7-lp150.7.1 ntpsec-utils-1.1.7-lp150.7.1 python3-ntp-1.1.7-lp150.7.1 python3-ntp-debuginfo-1.1.7-lp150.7.1 References: https://bugzilla.suse.com/1138728 https://bugzilla.suse.com/1153841

1 0

openSUSE-SU-2019:2340-1: moderate: Security update for dhcp
by opensuse-security＠opensuse.org 20 Oct '19

20 Oct '19

openSUSE Security Update: Security update for dhcp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2340-1 Rating: moderate References: #1089524 #1134078 #1136572 Cross-References: CVE-2019-6470 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update for dhcp fixes the following issues: Secuirty issue fixed: - CVE-2019-6470: Fixed DHCPv6 server crashes (bsc#1134078). Bug fixes: - Add compile option --enable-secs-byteorder to avoid duplicate lease warnings (bsc#1089524). - Use IPv6 when called as dhclient6, dhcpd6, and dhcrelay6 (bsc#1136572). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2340=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): dhcp-4.3.5-lp150.5.3.1 dhcp-client-4.3.5-lp150.5.3.1 dhcp-client-debuginfo-4.3.5-lp150.5.3.1 dhcp-debuginfo-4.3.5-lp150.5.3.1 dhcp-debugsource-4.3.5-lp150.5.3.1 dhcp-devel-4.3.5-lp150.5.3.1 dhcp-doc-4.3.5-lp150.5.3.1 dhcp-relay-4.3.5-lp150.5.3.1 dhcp-relay-debuginfo-4.3.5-lp150.5.3.1 dhcp-server-4.3.5-lp150.5.3.1 dhcp-server-debuginfo-4.3.5-lp150.5.3.1 References: https://www.suse.com/security/cve/CVE-2019-6470.html https://bugzilla.suse.com/1089524 https://bugzilla.suse.com/1134078 https://bugzilla.suse.com/1136572

1 0

openSUSE-SU-2019:2341-1: moderate: Security update for dhcp
by opensuse-security＠opensuse.org 20 Oct '19

20 Oct '19

openSUSE Security Update: Security update for dhcp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2341-1 Rating: moderate References: #1089524 #1134078 #1136572 Cross-References: CVE-2019-6470 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update for dhcp fixes the following issues: Secuirty issue fixed: - CVE-2019-6470: Fixed DHCPv6 server crashes (bsc#1134078). Bug fixes: - Add compile option --enable-secs-byteorder to avoid duplicate lease warnings (bsc#1089524). - Use IPv6 when called as dhclient6, dhcpd6, and dhcrelay6 (bsc#1136572). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2341=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): dhcp-4.3.5-lp151.6.3.1 dhcp-client-4.3.5-lp151.6.3.1 dhcp-client-debuginfo-4.3.5-lp151.6.3.1 dhcp-debuginfo-4.3.5-lp151.6.3.1 dhcp-debugsource-4.3.5-lp151.6.3.1 dhcp-devel-4.3.5-lp151.6.3.1 dhcp-doc-4.3.5-lp151.6.3.1 dhcp-relay-4.3.5-lp151.6.3.1 dhcp-relay-debuginfo-4.3.5-lp151.6.3.1 dhcp-server-4.3.5-lp151.6.3.1 dhcp-server-debuginfo-4.3.5-lp151.6.3.1 References: https://www.suse.com/security/cve/CVE-2019-6470.html https://bugzilla.suse.com/1089524 https://bugzilla.suse.com/1134078 https://bugzilla.suse.com/1136572

1 0

openSUSE-RU-2019:2339-1: moderate: Recommended update for drbd
by maintenance＠opensuse.org 19 Oct '19

19 Oct '19

openSUSE Recommended Update: Recommended update for drbd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2339-1 Rating: moderate References: #1146117 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for drbd provides the following fixes: - Disallow dual primaries when not configured. (bsc#1146117) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2339=1 Package List: - openSUSE Leap 15.0 (x86_64): drbd-9.0.15+git.c46d2790-lp150.2.9.1 drbd-debugsource-9.0.15+git.c46d2790-lp150.2.9.1 drbd-kmp-default-9.0.15+git.c46d2790_k4.12.14_lp150.12.76-lp150.2.9.1 drbd-kmp-default-debuginfo-9.0.15+git.c46d2790_k4.12.14_lp150.12.76-lp150.2.9.1 References: https://bugzilla.suse.com/1146117

1 0

openSUSE-RU-2019:2338-1: moderate: Recommended update for eigen3
by maintenance＠opensuse.org 19 Oct '19

19 Oct '19

openSUSE Recommended Update: Recommended update for eigen3 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2338-1 Rating: moderate References: #1148642 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for eigen3 fixes the following issues: - Fix double {prefix} as we use INCLUDE_INSTALL_DIR with {_includedir}. (boo#1148642) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2338=1 Package List: - openSUSE Leap 15.1 (noarch): eigen3-devel-3.3.4-lp151.4.3.1 eigen3-doc-3.3.4-lp151.4.3.1 References: https://bugzilla.suse.com/1148642

1 0

openSUSE-RU-2019:2337-1: moderate: Recommended update for libzypp, zypper
by maintenance＠opensuse.org 17 Oct '19

17 Oct '19

openSUSE Recommended Update: Recommended update for libzypp, zypper ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2337-1 Rating: moderate References: #1049825 #1116995 #1139795 #1140039 #1145521 #1146027 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has 6 recommended fixes can now be installed. Description: This update for libzypp, zypper fixes the following issues: - Fix leaking filedescriptors in MediaCurl. (bsc#1116995) - Run file conflict check on dry-run. (bsc#1140039) - Do not remove orphan products if the .prod file is owned by a package. (bsc#1139795) - Rephrase file conflict check summary. (bsc#1140039) - Fix bash completions option detection. (bsc#1049825) - Fixes a bug where zypper exited on SIGPIPE when downloading packages (bsc#1145521) - Fixes an issue where zypper exited with a segmentation fault when updating via YaST2 (bsc#1146027) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2337=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libsolv-debuginfo-0.7.6-lp150.10.1 libsolv-debugsource-0.7.6-lp150.10.1 libsolv-demo-0.7.6-lp150.10.1 libsolv-demo-debuginfo-0.7.6-lp150.10.1 libsolv-devel-0.7.6-lp150.10.1 libsolv-devel-debuginfo-0.7.6-lp150.10.1 libsolv-tools-0.7.6-lp150.10.1 libsolv-tools-debuginfo-0.7.6-lp150.10.1 libzstd-devel-1.4.2-lp150.2.5.1 libzstd-devel-static-1.4.2-lp150.2.5.1 libzstd1-1.4.2-lp150.2.5.1 libzstd1-debuginfo-1.4.2-lp150.2.5.1 libzypp-17.14.1-lp150.2.16.1 libzypp-debuginfo-17.14.1-lp150.2.16.1 libzypp-debugsource-17.14.1-lp150.2.16.1 libzypp-devel-17.14.1-lp150.2.16.1 libzypp-devel-doc-17.14.1-lp150.2.16.1 perl-solv-0.7.6-lp150.10.1 perl-solv-debuginfo-0.7.6-lp150.10.1 python-solv-0.7.6-lp150.10.1 python-solv-debuginfo-0.7.6-lp150.10.1 python3-solv-0.7.6-lp150.10.1 python3-solv-debuginfo-0.7.6-lp150.10.1 ruby-solv-0.7.6-lp150.10.1 ruby-solv-debuginfo-0.7.6-lp150.10.1 zstd-1.4.2-lp150.2.5.1 zstd-debuginfo-1.4.2-lp150.2.5.1 zstd-debugsource-1.4.2-lp150.2.5.1 zypper-1.14.30-lp150.2.16.1 zypper-debuginfo-1.14.30-lp150.2.16.1 zypper-debugsource-1.14.30-lp150.2.16.1 - openSUSE Leap 15.0 (noarch): zypper-aptitude-1.14.30-lp150.2.16.1 zypper-log-1.14.30-lp150.2.16.1 zypper-needs-restarting-1.14.30-lp150.2.16.1 - openSUSE Leap 15.0 (x86_64): libzstd1-32bit-1.4.2-lp150.2.5.1 libzstd1-32bit-debuginfo-1.4.2-lp150.2.5.1 References: https://bugzilla.suse.com/1049825 https://bugzilla.suse.com/1116995 https://bugzilla.suse.com/1139795 https://bugzilla.suse.com/1140039 https://bugzilla.suse.com/1145521 https://bugzilla.suse.com/1146027

1 0

openSUSE-RU-2019:2334-1: moderate: Recommended update for libstorage-ng
by maintenance＠opensuse.org 17 Oct '19

17 Oct '19

openSUSE Recommended Update: Recommended update for libstorage-ng ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2334-1 Rating: moderate References: #1146686 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libstorage-ng provides the following fix: - Fix dectection of surrounding region. (bsc#1146686) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2334=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libstorage-ng-debuginfo-4.1.104-lp151.3.3.1 libstorage-ng-debugsource-4.1.104-lp151.3.3.1 libstorage-ng-devel-4.1.104-lp151.3.3.1 libstorage-ng-integration-tests-4.1.104-lp151.3.3.1 libstorage-ng-python3-4.1.104-lp151.3.3.1 libstorage-ng-python3-debuginfo-4.1.104-lp151.3.3.1 libstorage-ng-ruby-4.1.104-lp151.3.3.1 libstorage-ng-ruby-debuginfo-4.1.104-lp151.3.3.1 libstorage-ng-utils-4.1.104-lp151.3.3.1 libstorage-ng-utils-debuginfo-4.1.104-lp151.3.3.1 libstorage-ng1-4.1.104-lp151.3.3.1 libstorage-ng1-debuginfo-4.1.104-lp151.3.3.1 - openSUSE Leap 15.1 (noarch): libstorage-ng-lang-4.1.104-lp151.3.3.1 References: https://bugzilla.suse.com/1146686

1 0

openSUSE-RU-2019:2335-1: moderate: Recommended update for python-cryptography
by maintenance＠opensuse.org 17 Oct '19

17 Oct '19

openSUSE Recommended Update: Recommended update for python-cryptography ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2335-1 Rating: moderate References: #1149792 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-cryptography fixes the following issues: - Adds compatibility to openSSL 1.1.1d (bsc#1149792) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2335=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): python-cryptography-debuginfo-2.1.4-lp151.5.3.1 python-cryptography-debugsource-2.1.4-lp151.5.3.1 python2-cryptography-2.1.4-lp151.5.3.1 python2-cryptography-debuginfo-2.1.4-lp151.5.3.1 python3-cryptography-2.1.4-lp151.5.3.1 python3-cryptography-debuginfo-2.1.4-lp151.5.3.1 References: https://bugzilla.suse.com/1149792

1 0

openSUSE-RU-2019:2336-1: Recommended update for openSUSE-release
by maintenance＠opensuse.org 17 Oct '19

17 Oct '19

openSUSE Recommended Update: Recommended update for openSUSE-release ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2336-1 Rating: low References: #1137342 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for openSUSE-release removes a superflous space in /etc/os-release. (bsc#1137342) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2336=1 Package List: - openSUSE Leap 15.1 (x86_64): openSUSE-release-15.1-lp151.2.1 openSUSE-release-15.1-lp151.301.1 References: https://bugzilla.suse.com/1137342

1 0

openSUSE-SU-2019:2333-1: important: Security update for sudo
by opensuse-security＠opensuse.org 17 Oct '19

17 Oct '19

openSUSE Security Update: Security update for sudo ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2333-1 Rating: important References: #1153674 Cross-References: CVE-2019-14287 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for sudo fixes the following issue: - CVE-2019-14287: Fixed an issue where a user with sudo privileges that allowed them to run commands with an arbitrary uid, could run commands as root, despite being forbidden to do so in sudoers (bsc#1153674). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2333=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): sudo-1.8.22-lp150.8.1 sudo-debuginfo-1.8.22-lp150.8.1 sudo-debugsource-1.8.22-lp150.8.1 sudo-devel-1.8.22-lp150.8.1 sudo-test-1.8.22-lp150.8.1 References: https://www.suse.com/security/cve/CVE-2019-14287.html https://bugzilla.suse.com/1153674

1 0

openSUSE-RU-2019:2329-1: moderate: Recommended update for multipath-tools
by maintenance＠opensuse.org 16 Oct '19

16 Oct '19

openSUSE Recommended Update: Recommended update for multipath-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2329-1 Rating: moderate References: #1139837 #1149319 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for multipath-tools fixes the following issues: - Fix premature path reinstantiation with san_path_err_XX. (bsc#1149319) - Set default for "enable_foreign" to "NONE". (bsc#1139837) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2329=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): kpartx-0.7.9+167+suse.07c42ab-lp151.2.6.1 kpartx-debuginfo-0.7.9+167+suse.07c42ab-lp151.2.6.1 libdmmp-devel-0.7.9+167+suse.07c42ab-lp151.2.6.1 libdmmp0_2_0-0.7.9+167+suse.07c42ab-lp151.2.6.1 libdmmp0_2_0-debuginfo-0.7.9+167+suse.07c42ab-lp151.2.6.1 multipath-tools-0.7.9+167+suse.07c42ab-lp151.2.6.1 multipath-tools-debuginfo-0.7.9+167+suse.07c42ab-lp151.2.6.1 multipath-tools-debugsource-0.7.9+167+suse.07c42ab-lp151.2.6.1 multipath-tools-devel-0.7.9+167+suse.07c42ab-lp151.2.6.1 References: https://bugzilla.suse.com/1139837 https://bugzilla.suse.com/1149319

1 0

openSUSE-RU-2019:2325-1: moderate: Recommended update for python-cryptography
by maintenance＠opensuse.org 16 Oct '19

16 Oct '19

openSUSE Recommended Update: Recommended update for python-cryptography ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2325-1 Rating: moderate References: #1149792 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-cryptography fixes the following issues: - Adds compatibility to openSSL 1.1.1d (bsc#1149792) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2325=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): python-cryptography-debuginfo-2.1.4-lp150.8.1 python-cryptography-debugsource-2.1.4-lp150.8.1 python2-cryptography-2.1.4-lp150.8.1 python2-cryptography-debuginfo-2.1.4-lp150.8.1 python3-cryptography-2.1.4-lp150.8.1 python3-cryptography-debuginfo-2.1.4-lp150.8.1 References: https://bugzilla.suse.com/1149792

1 0

openSUSE-RU-2019:2323-1: moderate: Recommended update for drbd-utils
by maintenance＠opensuse.org 16 Oct '19

16 Oct '19

openSUSE Recommended Update: Recommended update for drbd-utils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2323-1 Rating: moderate References: #1037109 #1064402 #1115606 #1145296 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for drbd-utils contains the following fixes: - Fix the wrong return code with cib_apply_diff. (bsc#1145296) - Update to new upstream release 9.6.0. (bsc#1115606) * usage-count: also count notty users if possible. * drbd-overview: remove it, we have drbdtop/drbdmon. saves all the Perl deps. * drbdmon: update frequency limiting, debug log for drbdevents, use altbuffer,... * drbdsetup show: on 9 allow json output. mainly used in our CI, don't expect a stable field names yet. * drbdsetup status: on 9 fix json output to not include NaN/Infinity * allow higher resync rates: first customers hit a limit. this requires an updated kernel module as well (e.g., 9.0.16) * init: fix some 8-only leftovers (sh-b-pri), sanitize the retry logic * doc: document various 9 features that got forgotten (e.g., quorum-lost) * build: various small fixes that popped up while playing with meson - Update to 9.5.0 * drbdmon: allow to start in problems view (--problems) * drbdadm,v9: fix always failing stacked handlers from kernel * drbdadm,v9: adjust now hands over the information that a diskfull->diskless change was intentional. * drbdadm,v9: adjust verifies now IPs - Update to 9.4.0 * drbdmeta: don't exit with negative return codes * usage counts: only register if we know driver version * drbdsetup,v9: expose detailed verify/resync statistics * drbdsetup,v9,json: saner types for client/peer-client/quorum on --json * drbdsetup,v9: expose client/peer-client in status if !isatty() - Including fix for SLE12SP3: * Remove hardcoded local5 of logfacility. (bsc#1064402) * drbdmeta does not propagate full bitmap. (bsc#1037109) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2323=1 Package List: - openSUSE Leap 15.0 (x86_64): drbd-utils-9.6.0-lp150.7.1 drbd-utils-debuginfo-9.6.0-lp150.7.1 drbd-utils-debugsource-9.6.0-lp150.7.1 References: https://bugzilla.suse.com/1037109 https://bugzilla.suse.com/1064402 https://bugzilla.suse.com/1115606 https://bugzilla.suse.com/1145296

1 0

openSUSE-RU-2019:2332-1: moderate: Recommended update for yast2-cluster
by maintenance＠opensuse.org 16 Oct '19

16 Oct '19

openSUSE Recommended Update: Recommended update for yast2-cluster ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2332-1 Rating: moderate References: #1151687 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-cluster fixes the following issues: - Update the open ports to support pacemaker-remote, booth and corosync-qnetd. (bsc#1151687) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2332=1 Package List: - openSUSE Leap 15.1 (noarch): yast2-cluster-4.1.3-lp151.2.3.1 References: https://bugzilla.suse.com/1151687

1 0

openSUSE-RU-2019:2330-1: moderate: Recommended update for python-pyOpenSSL
by maintenance＠opensuse.org 16 Oct '19

16 Oct '19

openSUSE Recommended Update: Recommended update for python-pyOpenSSL ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2330-1 Rating: moderate References: #1149792 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-pyOpenSSL fixes the following issues: - Adds compatibility for openSSL 1.1.1d (bsc#1149792) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2330=1 Package List: - openSUSE Leap 15.1 (noarch): python-pyOpenSSL-doc-17.5.0-lp151.4.3.1 python2-pyOpenSSL-17.5.0-lp151.4.3.1 python3-pyOpenSSL-17.5.0-lp151.4.3.1 References: https://bugzilla.suse.com/1149792

1 0

openSUSE-RU-2019:2327-1: moderate: Recommended update for yast2-cluster
by maintenance＠opensuse.org 16 Oct '19

16 Oct '19

openSUSE Recommended Update: Recommended update for yast2-cluster ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2327-1 Rating: moderate References: #1151687 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-cluster fixes the following issues: - Update the open ports to support pacemaker-remote, booth and corosync-qnetd. (bsc#1151687) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2327=1 Package List: - openSUSE Leap 15.0 (noarch): yast2-cluster-4.0.9-lp150.10.1 References: https://bugzilla.suse.com/1151687

1 0

openSUSE-RU-2019:2324-1: moderate: Recommended update for multipath-tools
by maintenance＠opensuse.org 16 Oct '19

16 Oct '19

openSUSE Recommended Update: Recommended update for multipath-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2324-1 Rating: moderate References: #1149313 #1149319 #1151502 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for multipath-tools fixes the following issues: - Fix premature path reinstantiation with san_path_err_XX. (bsc#1149319) - Make lazy tpgs probing work again. (bsc#1149313) - libmultipath: Fix logic in should_multipath (bsc#1151502) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2324=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): kpartx-0.7.3+150+suse.529bc38-lp150.13.1 kpartx-debuginfo-0.7.3+150+suse.529bc38-lp150.13.1 libdmmp-devel-0.7.3+150+suse.529bc38-lp150.13.1 libdmmp0_1_0-0.7.3+150+suse.529bc38-lp150.13.1 libdmmp0_1_0-debuginfo-0.7.3+150+suse.529bc38-lp150.13.1 multipath-tools-0.7.3+150+suse.529bc38-lp150.13.1 multipath-tools-debuginfo-0.7.3+150+suse.529bc38-lp150.13.1 multipath-tools-debugsource-0.7.3+150+suse.529bc38-lp150.13.1 multipath-tools-devel-0.7.3+150+suse.529bc38-lp150.13.1 - openSUSE Leap 15.0 (x86_64): multipath-tools-rbd-0.7.3+150+suse.529bc38-lp150.13.1 multipath-tools-rbd-debuginfo-0.7.3+150+suse.529bc38-lp150.13.1 References: https://bugzilla.suse.com/1149313 https://bugzilla.suse.com/1149319 https://bugzilla.suse.com/1151502

1 0

openSUSE-RU-2019:2331-1: moderate: Recommended update for yast2
by maintenance＠opensuse.org 16 Oct '19

16 Oct '19

openSUSE Recommended Update: Recommended update for yast2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2331-1 Rating: moderate References: #1122259 #1149776 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for yast2 provides the following fixes: - Yast completions have to be named after their respective command name. (bsc#1122259) - Fix a problem when long warnings reports in command line. (bsc#1149776) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2331=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): yast2-4.1.74-lp151.2.13.1 yast2-logs-4.1.74-lp151.2.13.1 References: https://bugzilla.suse.com/1122259 https://bugzilla.suse.com/1149776

1 0

openSUSE-RU-2019:2326-1: moderate: Recommended update for python-pyOpenSSL
by maintenance＠opensuse.org 16 Oct '19

16 Oct '19

openSUSE Recommended Update: Recommended update for python-pyOpenSSL ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2326-1 Rating: moderate References: #1149792 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-pyOpenSSL fixes the following issues: - Adds compatibility for openSSL 1.1.1d (bsc#1149792) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2326=1 Package List: - openSUSE Leap 15.0 (noarch): python-pyOpenSSL-doc-17.5.0-lp150.7.1 python2-pyOpenSSL-17.5.0-lp150.7.1 python3-pyOpenSSL-17.5.0-lp150.7.1 References: https://bugzilla.suse.com/1149792

1 0

openSUSE-RU-2019:2322-1: moderate: Recommended update for NetworkManager
by maintenance＠opensuse.org 16 Oct '19

16 Oct '19

openSUSE Recommended Update: Recommended update for NetworkManager ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2322-1 Rating: moderate References: #1074074 #1146935 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for NetworkManager fixes the following issues: - Modify nfs script: Only mount/unmount when the file type is nfs. (bsc#1074074) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2322=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): NetworkManager-1.10.6-lp150.4.12.1 NetworkManager-debuginfo-1.10.6-lp150.4.12.1 NetworkManager-debugsource-1.10.6-lp150.4.12.1 NetworkManager-devel-1.10.6-lp150.4.12.1 libnm-glib-vpn1-1.10.6-lp150.4.12.1 libnm-glib-vpn1-debuginfo-1.10.6-lp150.4.12.1 libnm-glib4-1.10.6-lp150.4.12.1 libnm-glib4-debuginfo-1.10.6-lp150.4.12.1 libnm-util2-1.10.6-lp150.4.12.1 libnm-util2-debuginfo-1.10.6-lp150.4.12.1 libnm0-1.10.6-lp150.4.12.1 libnm0-debuginfo-1.10.6-lp150.4.12.1 typelib-1_0-NM-1_0-1.10.6-lp150.4.12.1 typelib-1_0-NMClient-1_0-1.10.6-lp150.4.12.1 typelib-1_0-NetworkManager-1_0-1.10.6-lp150.4.12.1 - openSUSE Leap 15.0 (noarch): NetworkManager-branding-upstream-1.10.6-lp150.4.12.1 NetworkManager-lang-1.10.6-lp150.4.12.1 - openSUSE Leap 15.0 (x86_64): NetworkManager-devel-32bit-1.10.6-lp150.4.12.1 libnm-glib-vpn1-32bit-1.10.6-lp150.4.12.1 libnm-glib-vpn1-32bit-debuginfo-1.10.6-lp150.4.12.1 libnm-glib4-32bit-1.10.6-lp150.4.12.1 libnm-glib4-32bit-debuginfo-1.10.6-lp150.4.12.1 libnm-util2-32bit-1.10.6-lp150.4.12.1 libnm-util2-32bit-debuginfo-1.10.6-lp150.4.12.1 References: https://bugzilla.suse.com/1074074 https://bugzilla.suse.com/1146935

1 0

openSUSE-RU-2019:2328-1: moderate: Recommended update for ibus-libpinyin
by maintenance＠opensuse.org 16 Oct '19

16 Oct '19

openSUSE Recommended Update: Recommended update for ibus-libpinyin ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2328-1 Rating: moderate References: #1112998 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ibus-libpinyin fixes the following issues: - Fix emoji appears in updateCandidates method. (bsc#1112998) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2328=1 Package List: - openSUSE Leap 15.1 (x86_64): ibus-libpinyin-1.11.1-lp151.2.6.1 ibus-libpinyin-debuginfo-1.11.1-lp151.2.6.1 ibus-libpinyin-debugsource-1.11.1-lp151.2.6.1 References: https://bugzilla.suse.com/1112998

1 0

openSUSE-SU-2019:2321-1: moderate: Security update for GraphicsMagick
by opensuse-security＠opensuse.org 16 Oct '19

16 Oct '19

openSUSE Security Update: Security update for GraphicsMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2321-1 Rating: moderate References: #1151782 Cross-References: CVE-2019-16709 Affected Products: openSUSE Backports SLE-15-SP1 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for GraphicsMagick fixes the following issues: - CVE-2019-16709: Fixed a memory leak in coders/dps.c (boo#1151782). This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2321=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-2321=1 Package List: - openSUSE Backports SLE-15-SP1 (x86_64): GraphicsMagick-1.3.29-bp151.5.6.1 GraphicsMagick-debuginfo-1.3.29-bp151.5.6.1 GraphicsMagick-debugsource-1.3.29-bp151.5.6.1 GraphicsMagick-devel-1.3.29-bp151.5.6.1 libGraphicsMagick++-Q16-12-1.3.29-bp151.5.6.1 libGraphicsMagick++-Q16-12-debuginfo-1.3.29-bp151.5.6.1 libGraphicsMagick++-devel-1.3.29-bp151.5.6.1 libGraphicsMagick-Q16-3-1.3.29-bp151.5.6.1 libGraphicsMagick-Q16-3-debuginfo-1.3.29-bp151.5.6.1 libGraphicsMagick3-config-1.3.29-bp151.5.6.1 libGraphicsMagickWand-Q16-2-1.3.29-bp151.5.6.1 libGraphicsMagickWand-Q16-2-debuginfo-1.3.29-bp151.5.6.1 perl-GraphicsMagick-1.3.29-bp151.5.6.1 perl-GraphicsMagick-debuginfo-1.3.29-bp151.5.6.1 - openSUSE Backports SLE-15 (x86_64): GraphicsMagick-1.3.29-bp150.2.30.1 GraphicsMagick-devel-1.3.29-bp150.2.30.1 libGraphicsMagick++-Q16-12-1.3.29-bp150.2.30.1 libGraphicsMagick++-devel-1.3.29-bp150.2.30.1 libGraphicsMagick-Q16-3-1.3.29-bp150.2.30.1 libGraphicsMagick3-config-1.3.29-bp150.2.30.1 libGraphicsMagickWand-Q16-2-1.3.29-bp150.2.30.1 perl-GraphicsMagick-1.3.29-bp150.2.30.1 References: https://www.suse.com/security/cve/CVE-2019-16709.html https://bugzilla.suse.com/1151782

1 0

openSUSE-RU-2019:2320-1: moderate: Recommended update for permissions
by maintenance＠opensuse.org 16 Oct '19

16 Oct '19

openSUSE Recommended Update: Recommended update for permissions ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2320-1 Rating: moderate References: #1110797 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for permissions fixes the following issues: - Updated permissons for amanda. (bsc#1110797) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2320=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): permissions-20181116-lp151.4.6.1 permissions-debuginfo-20181116-lp151.4.6.1 permissions-debugsource-20181116-lp151.4.6.1 - openSUSE Leap 15.1 (noarch): permissions-zypp-plugin-20181116-lp151.4.6.1 References: https://bugzilla.suse.com/1110797

1 0

openSUSE-SU-2019:2317-1: moderate: Security update for GraphicsMagick
by opensuse-security＠opensuse.org 16 Oct '19

16 Oct '19

openSUSE Security Update: Security update for GraphicsMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2317-1 Rating: moderate References: #1151782 Cross-References: CVE-2019-16709 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for GraphicsMagick fixes the following issues: - CVE-2019-16709: Fixed a memory leak in coders/dps.c (boo#1151782). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2317=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2317=1 Package List: - openSUSE Leap 15.1 (x86_64): GraphicsMagick-1.3.29-lp151.4.9.1 GraphicsMagick-debuginfo-1.3.29-lp151.4.9.1 GraphicsMagick-debugsource-1.3.29-lp151.4.9.1 GraphicsMagick-devel-1.3.29-lp151.4.9.1 libGraphicsMagick++-Q16-12-1.3.29-lp151.4.9.1 libGraphicsMagick++-Q16-12-debuginfo-1.3.29-lp151.4.9.1 libGraphicsMagick++-devel-1.3.29-lp151.4.9.1 libGraphicsMagick-Q16-3-1.3.29-lp151.4.9.1 libGraphicsMagick-Q16-3-debuginfo-1.3.29-lp151.4.9.1 libGraphicsMagick3-config-1.3.29-lp151.4.9.1 libGraphicsMagickWand-Q16-2-1.3.29-lp151.4.9.1 libGraphicsMagickWand-Q16-2-debuginfo-1.3.29-lp151.4.9.1 perl-GraphicsMagick-1.3.29-lp151.4.9.1 perl-GraphicsMagick-debuginfo-1.3.29-lp151.4.9.1 - openSUSE Leap 15.0 (x86_64): GraphicsMagick-1.3.29-lp150.3.37.1 GraphicsMagick-debuginfo-1.3.29-lp150.3.37.1 GraphicsMagick-debugsource-1.3.29-lp150.3.37.1 GraphicsMagick-devel-1.3.29-lp150.3.37.1 libGraphicsMagick++-Q16-12-1.3.29-lp150.3.37.1 libGraphicsMagick++-Q16-12-debuginfo-1.3.29-lp150.3.37.1 libGraphicsMagick++-devel-1.3.29-lp150.3.37.1 libGraphicsMagick-Q16-3-1.3.29-lp150.3.37.1 libGraphicsMagick-Q16-3-debuginfo-1.3.29-lp150.3.37.1 libGraphicsMagick3-config-1.3.29-lp150.3.37.1 libGraphicsMagickWand-Q16-2-1.3.29-lp150.3.37.1 libGraphicsMagickWand-Q16-2-debuginfo-1.3.29-lp150.3.37.1 perl-GraphicsMagick-1.3.29-lp150.3.37.1 perl-GraphicsMagick-debuginfo-1.3.29-lp150.3.37.1 References: https://www.suse.com/security/cve/CVE-2019-16709.html https://bugzilla.suse.com/1151782

1 0

openSUSE-SU-2019:2319-1: important: Security update for libopenmpt
by opensuse-security＠opensuse.org 16 Oct '19

16 Oct '19

openSUSE Security Update: Security update for libopenmpt ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2319-1 Rating: important References: #1153102 Cross-References: CVE-2019-17113 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libopenmpt to version 0.3.19 fixes the following issues: - CVE-2019-17113: Fixed a buffer overflow in ModPlug_InstrumentName and ModPlug_SampleName (bsc#1153102). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2319=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libmodplug-devel-0.3.19-lp150.10.1 libmodplug1-0.3.19-lp150.10.1 libmodplug1-debuginfo-0.3.19-lp150.10.1 libopenmpt-debugsource-0.3.19-lp150.10.1 libopenmpt-devel-0.3.19-lp150.10.1 libopenmpt0-0.3.19-lp150.10.1 libopenmpt0-debuginfo-0.3.19-lp150.10.1 libopenmpt_modplug1-0.3.19-lp150.10.1 libopenmpt_modplug1-debuginfo-0.3.19-lp150.10.1 openmpt123-0.3.19-lp150.10.1 openmpt123-debuginfo-0.3.19-lp150.10.1 - openSUSE Leap 15.0 (x86_64): libmodplug1-32bit-0.3.19-lp150.10.1 libmodplug1-32bit-debuginfo-0.3.19-lp150.10.1 libopenmpt0-32bit-0.3.19-lp150.10.1 libopenmpt0-32bit-debuginfo-0.3.19-lp150.10.1 libopenmpt_modplug1-32bit-0.3.19-lp150.10.1 libopenmpt_modplug1-32bit-debuginfo-0.3.19-lp150.10.1 References: https://www.suse.com/security/cve/CVE-2019-17113.html https://bugzilla.suse.com/1153102

1 0

openSUSE-SU-2019:2318-1: moderate: Security update for epiphany
by opensuse-security＠opensuse.org 16 Oct '19

16 Oct '19

openSUSE Security Update: Security update for epiphany ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2318-1 Rating: moderate References: #1094464 Cross-References: CVE-2018-11396 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for epiphany fixes the following issues: - CVE-2018-11396: Fixed a JavaScript crash when an invalid URI is opened (boo#1094464). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2318=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2318=1 Package List: - openSUSE Leap 15.1 (x86_64): epiphany-3.28.1.1-lp151.3.3.1 epiphany-debuginfo-3.28.1.1-lp151.3.3.1 epiphany-debugsource-3.28.1.1-lp151.3.3.1 gnome-shell-search-provider-epiphany-3.28.1.1-lp151.3.3.1 gnome-shell-search-provider-epiphany-debuginfo-3.28.1.1-lp151.3.3.1 - openSUSE Leap 15.1 (noarch): epiphany-branding-upstream-3.28.1.1-lp151.3.3.1 epiphany-lang-3.28.1.1-lp151.3.3.1 - openSUSE Leap 15.0 (x86_64): epiphany-3.28.1.1-lp150.2.3.1 epiphany-debuginfo-3.28.1.1-lp150.2.3.1 epiphany-debugsource-3.28.1.1-lp150.2.3.1 gnome-shell-search-provider-epiphany-3.28.1.1-lp150.2.3.1 gnome-shell-search-provider-epiphany-debuginfo-3.28.1.1-lp150.2.3.1 - openSUSE Leap 15.0 (noarch): epiphany-branding-upstream-3.28.1.1-lp150.2.3.1 epiphany-lang-3.28.1.1-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-11396.html https://bugzilla.suse.com/1094464

1 0

openSUSE-SU-2019:2316-1: important: Security update for sudo
by opensuse-security＠opensuse.org 15 Oct '19

15 Oct '19

openSUSE Security Update: Security update for sudo ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2316-1 Rating: important References: #1153674 Cross-References: CVE-2019-14287 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for sudo fixes the following issue: - CVE-2019-14287: Fixed an issue where a user with sudo privileges that allowed them to run commands with an arbitrary uid, could run commands as root, despite being forbidden to do so in sudoers (bsc#1153674). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2316=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): sudo-1.8.22-lp151.5.3.1 sudo-debuginfo-1.8.22-lp151.5.3.1 sudo-debugsource-1.8.22-lp151.5.3.1 sudo-devel-1.8.22-lp151.5.3.1 sudo-test-1.8.22-lp151.5.3.1 References: https://www.suse.com/security/cve/CVE-2019-14287.html https://bugzilla.suse.com/1153674

1 0

openSUSE-RU-2019:2315-1: moderate: Recommended update for python-cluster-preflight-check
by maintenance＠opensuse.org 14 Oct '19

14 Oct '19

openSUSE Recommended Update: Recommended update for python-cluster-preflight-check ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2315-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP1 openSUSE Backports SLE-15 SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for python-cluster-preflight-check fixes the following issues: This update ships python-cluster-preflight-check 0.0.33. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2315=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-2315=1 - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2019-2315=1 Package List: - openSUSE Backports SLE-15-SP1 (noarch): python2-cluster-preflight-check-0.0.33-bp151.2.1 python3-cluster-preflight-check-0.0.33-bp151.2.1 - openSUSE Backports SLE-15 (noarch): python2-cluster-preflight-check-0.0.33-bp150.2.1 python3-cluster-preflight-check-0.0.33-bp150.2.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): python-cluster-preflight-check-0.0.33-2.1 python3-cluster-preflight-check-0.0.33-2.1 References:

1 0

openSUSE-RU-2019:2315-1: moderate: Recommended update for python-cluster-preflight-check
by maintenance＠opensuse.org 14 Oct '19

14 Oct '19

openSUSE Recommended Update: Recommended update for python-cluster-preflight-check ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2315-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP1 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for python-cluster-preflight-check fixes the following issues: This update ships python-cluster-preflight-check 0.0.33. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2315=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-2315=1 Package List: - openSUSE Backports SLE-15-SP1 (noarch): python2-cluster-preflight-check-0.0.33-bp151.2.1 python3-cluster-preflight-check-0.0.33-bp151.2.1 - openSUSE Backports SLE-15 (noarch): python2-cluster-preflight-check-0.0.33-bp150.2.1 python3-cluster-preflight-check-0.0.33-bp150.2.1 References:

1 0

openSUSE-SU-2019:2314-1: important: Security update for chromium
by opensuse-security＠opensuse.org 14 Oct '19

14 Oct '19

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2314-1 Rating: important References: #1146219 #1153660 Cross-References: CVE-2019-13693 CVE-2019-13694 CVE-2019-13695 CVE-2019-13696 CVE-2019-13697 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for chromium fixes the following issues: - Update to 77.0.3865.120 (boo#1153660): - CVE-2019-13693: Fixed a use-after-free in IndexedDB - CVE-2019-13694: Fixed a use-after-free in WebRTC - CVE-2019-13695: Fixed a use-after-free in audio - CVE-2019-13696: Fixed a use-after-free in V8 - CVE-2019-13697: Fixed a cross-origin size leak. - Fixed an issue with the video playback on Intel Kaby Lake and later (boo#1146219). This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2314=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 x86_64): chromedriver-77.0.3865.120-bp151.3.18.1 chromium-77.0.3865.120-bp151.3.18.1 References: https://www.suse.com/security/cve/CVE-2019-13693.html https://www.suse.com/security/cve/CVE-2019-13694.html https://www.suse.com/security/cve/CVE-2019-13695.html https://www.suse.com/security/cve/CVE-2019-13696.html https://www.suse.com/security/cve/CVE-2019-13697.html https://bugzilla.suse.com/1146219 https://bugzilla.suse.com/1153660

1 0

openSUSE-SU-2019:2313-1: important: Security update for chromium
by opensuse-security＠opensuse.org 14 Oct '19

14 Oct '19

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2313-1 Rating: important References: #1146219 #1153660 Cross-References: CVE-2019-13693 CVE-2019-13694 CVE-2019-13695 CVE-2019-13696 CVE-2019-13697 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for chromium fixes the following issues: - Update to 77.0.3865.120 (boo#1153660): - CVE-2019-13693: Fixed a use-after-free in IndexedDB - CVE-2019-13694: Fixed a use-after-free in WebRTC - CVE-2019-13695: Fixed a use-after-free in audio - CVE-2019-13696: Fixed a use-after-free in V8 - CVE-2019-13697: Fixed a cross-origin size leak. - Fixed an issue with the video playback on Intel Kaby Lake and later (boo#1146219). This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-2313=1 Package List: - openSUSE Backports SLE-15 (aarch64 x86_64): chromedriver-77.0.3865.120-bp150.237.1 chromium-77.0.3865.120-bp150.237.1 References: https://www.suse.com/security/cve/CVE-2019-13693.html https://www.suse.com/security/cve/CVE-2019-13694.html https://www.suse.com/security/cve/CVE-2019-13695.html https://www.suse.com/security/cve/CVE-2019-13696.html https://www.suse.com/security/cve/CVE-2019-13697.html https://bugzilla.suse.com/1146219 https://bugzilla.suse.com/1153660

1 0

openSUSE-SU-2019:2311-1: important: Security update for chromium
by opensuse-security＠opensuse.org 12 Oct '19

12 Oct '19

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2311-1 Rating: important References: #1146219 #1153660 Cross-References: CVE-2019-13693 CVE-2019-13694 CVE-2019-13695 CVE-2019-13696 CVE-2019-13697 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for chromium fixes the following issues: - Update to 77.0.3865.120 (boo#1153660): - CVE-2019-13693: Fixed a use-after-free in IndexedDB - CVE-2019-13694: Fixed a use-after-free in WebRTC - CVE-2019-13695: Fixed a use-after-free in audio - CVE-2019-13696: Fixed a use-after-free in V8 - CVE-2019-13697: Fixed a cross-origin size leak. - Fixed an issue with the video playback on Intel Kaby Lake and later (boo#1146219). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2311=1 Package List: - openSUSE Leap 15.0 (x86_64): chromedriver-77.0.3865.120-lp150.245.1 chromedriver-debuginfo-77.0.3865.120-lp150.245.1 chromium-77.0.3865.120-lp150.245.1 chromium-debuginfo-77.0.3865.120-lp150.245.1 chromium-debugsource-77.0.3865.120-lp150.245.1 References: https://www.suse.com/security/cve/CVE-2019-13693.html https://www.suse.com/security/cve/CVE-2019-13694.html https://www.suse.com/security/cve/CVE-2019-13695.html https://www.suse.com/security/cve/CVE-2019-13696.html https://www.suse.com/security/cve/CVE-2019-13697.html https://bugzilla.suse.com/1146219 https://bugzilla.suse.com/1153660

1 0

openSUSE-SU-2019:2312-1: important: Security update for chromium
by opensuse-security＠opensuse.org 12 Oct '19

12 Oct '19

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2312-1 Rating: important References: #1146219 #1153660 Cross-References: CVE-2019-13693 CVE-2019-13694 CVE-2019-13695 CVE-2019-13696 CVE-2019-13697 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for chromium fixes the following issues: - Update to 77.0.3865.120 (boo#1153660): - CVE-2019-13693: Fixed a use-after-free in IndexedDB - CVE-2019-13694: Fixed a use-after-free in WebRTC - CVE-2019-13695: Fixed a use-after-free in audio - CVE-2019-13696: Fixed a use-after-free in V8 - CVE-2019-13697: Fixed a cross-origin size leak. - Fixed an issue with the video playback on Intel Kaby Lake and later (boo#1146219). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2312=1 Package List: - openSUSE Leap 15.1 (x86_64): chromedriver-77.0.3865.120-lp151.2.36.1 chromedriver-debuginfo-77.0.3865.120-lp151.2.36.1 chromium-77.0.3865.120-lp151.2.36.1 chromium-debuginfo-77.0.3865.120-lp151.2.36.1 chromium-debugsource-77.0.3865.120-lp151.2.36.1 References: https://www.suse.com/security/cve/CVE-2019-13693.html https://www.suse.com/security/cve/CVE-2019-13694.html https://www.suse.com/security/cve/CVE-2019-13695.html https://www.suse.com/security/cve/CVE-2019-13696.html https://www.suse.com/security/cve/CVE-2019-13697.html https://bugzilla.suse.com/1146219 https://bugzilla.suse.com/1153660

1 0

openSUSE-RU-2019:2310-1: moderate: Recommended update for umoci
by maintenance＠opensuse.org 11 Oct '19

11 Oct '19

openSUSE Recommended Update: Recommended update for umoci ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2310-1 Rating: moderate References: Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for umoci fixes the following issues: - Enable build for s390x on openSUSE - Update to umoci v0.4.4. * Added full-stack verification of blob hashes and descriptors for all operations (improving our hardening against bad images). * For details, see CHANGELOG.md in the package. - Update to umoci v0.4.3. * Added --no-history to all commands with --history.* flags. Should only be used for umoci-config(1). * Added `umoci insert --tag` to allow non-destructive modifications. * For details, see packaged /usr/share/doc/packages/umoci/CHANGELOG.md. - Update to umoci v0.4.2. * umoci now has an exposed Go API * Added `umoci unpack --keep-dirlinks` * `umoci insert` now supports whiteouts two ways. * For details, see CHANGELOG.md in the package. - Update to umoci v0.4.1. * Support more tags (the valid set of characters in tags has expanded). * Add 'umoci insert' and 'umoci raw unpack'. * 'umoci unpack' correctly handles out-of-order whiteouts now. * 'umoci unpack' and 'umoci repack' make sure of a more optimised gzip implementation now -- in some benchmarks 'umoci repack' can have a speedup of up to 3x. * For details, see CHANGELOG.md in the package. - Update to umoci v0.4.0. Upstream changelog: + `umoci repack` now supports `--refresh-bundle` which will update the OCI bundle's metadata (mtree and umoci-specific manifests) after packing the image tag. This means that the bundle can be used as a base layer for future diffs without needing to unpack the image again. openSUSE/umoci#196 + Added a website, and reworked the documentation to be better structured. You can visit the website at [`umo.ci`][umo.ci]. openSUSE/umoci#188 + Added support for the `user.rootlesscontainers` specification, which allows for persistent on-disk emulation of `chown(2)` inside rootless containers. This implementation is interoperable with [@AkihiroSuda's `PRoot` fork][as-proot-fork] (though we do not test its interoperability at the moment) as both tools use [the same protobuf specification][rootlesscontainers-proto]. openSUSE/umoci#227 + `umoci unpack` now has support for opaque whiteouts (whiteouts which remove all children of a directory in the lower layer), though `umoci repack` does not currently have support for generating them. While this is technically a spec requirement, through testing we've never encountered an actual user of these whiteouts. openSUSE/umoci#224 openSUSE/umoci#229 + `umoci unpack` will now use some rootless tricks inside user namespaces for operations that are known to fail (such as `mknod(2)`) while other operations will be carried out as normal (such as `lchown(2)`). It should be noted that the `/proc/self/uid_map` checking we do can be tricked into not detecting user namespaces, but you would need to be trying to break it on purpose. openSUSE/umoci#171 openSUSE/umoci#230 * Fix a bug in our "parent directory restore" code, which is responsible for ensuring that the mtime and other similar properties of a directory are not modified by extraction inside said directory. The bug would manifest as xattrs not being restored properly in certain edge-cases (which we incidentally hit in a test-case). openSUSE/umoci#161 openSUSE/umoci#162 * `umoci unpack` will now "clean up" the bundle generated if an error occurs during unpacking. Previously this didn't happen, which made cleaning up the responsibility of the caller (which was quite difficult if you were unprivileged). This is a breaking change, but is in the error path so it's not critical. openSUSE/umoci#174 openSUSE/umoci#187 * `umoci gc` now will no longer remove unknown files and directories that aren't `flock(2)`ed, thus ensuring that any possible OCI image-spec extensions or other users of an image being operated on will no longer break. openSUSE/umoci#198 * `umoci unpack --rootless` will now correctly handle regular file unpacking when overwriting a file that `umoci` doesn't have write access to. In addition, the semantics of pre-existing hardlinks to a clobbered file are clarified (the hard-links will not refer to the new layer's inode). openSUSE/umoci#222 openSUSE/umoci#223 [as-proot-fork]: https://github.com/AkihiroSuda/runrootless [rootlesscontainers-proto]: https://rootlesscontaine.rs/proto/rootlesscontainers.proto [umo.ci]: https://umo.ci/ This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2310=1 Package List: - openSUSE Leap 15.1 (x86_64): umoci-0.4.4-lp151.4.3.1 References:

1 0

openSUSE-RU-2019:2309-1: moderate: Recommended update for umoci
by maintenance＠opensuse.org 11 Oct '19

11 Oct '19

openSUSE Recommended Update: Recommended update for umoci ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2309-1 Rating: moderate References: Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for umoci fixes the following issues: - Enable build for s390x on openSUSE - Update to umoci v0.4.4. * Added full-stack verification of blob hashes and descriptors for all operations (improving our hardening against bad images). * For details, see CHANGELOG.md in the package. - Update to umoci v0.4.3. * Added --no-history to all commands with --history.* flags. Should only be used for umoci-config(1). * Added `umoci insert --tag` to allow non-destructive modifications. * For details, see packaged /usr/share/doc/packages/umoci/CHANGELOG.md. - Update to umoci v0.4.2. * umoci now has an exposed Go API * Added `umoci unpack --keep-dirlinks` * `umoci insert` now supports whiteouts two ways. * For details, see CHANGELOG.md in the package. - Update to umoci v0.4.1. * Support more tags (the valid set of characters in tags has expanded). * Add 'umoci insert' and 'umoci raw unpack'. * 'umoci unpack' correctly handles out-of-order whiteouts now. * 'umoci unpack' and 'umoci repack' make sure of a more optimised gzip implementation now -- in some benchmarks 'umoci repack' can have a speedup of up to 3x. * For details, see CHANGELOG.md in the package. - Update to umoci v0.4.0. Upstream changelog: + `umoci repack` now supports `--refresh-bundle` which will update the OCI bundle's metadata (mtree and umoci-specific manifests) after packing the image tag. This means that the bundle can be used as a base layer for future diffs without needing to unpack the image again. openSUSE/umoci#196 + Added a website, and reworked the documentation to be better structured. You can visit the website at [`umo.ci`][umo.ci]. openSUSE/umoci#188 + Added support for the `user.rootlesscontainers` specification, which allows for persistent on-disk emulation of `chown(2)` inside rootless containers. This implementation is interoperable with [@AkihiroSuda's `PRoot` fork][as-proot-fork] (though we do not test its interoperability at the moment) as both tools use [the same protobuf specification][rootlesscontainers-proto]. openSUSE/umoci#227 + `umoci unpack` now has support for opaque whiteouts (whiteouts which remove all children of a directory in the lower layer), though `umoci repack` does not currently have support for generating them. While this is technically a spec requirement, through testing we've never encountered an actual user of these whiteouts. openSUSE/umoci#224 openSUSE/umoci#229 + `umoci unpack` will now use some rootless tricks inside user namespaces for operations that are known to fail (such as `mknod(2)`) while other operations will be carried out as normal (such as `lchown(2)`). It should be noted that the `/proc/self/uid_map` checking we do can be tricked into not detecting user namespaces, but you would need to be trying to break it on purpose. openSUSE/umoci#171 openSUSE/umoci#230 * Fix a bug in our "parent directory restore" code, which is responsible for ensuring that the mtime and other similar properties of a directory are not modified by extraction inside said directory. The bug would manifest as xattrs not being restored properly in certain edge-cases (which we incidentally hit in a test-case). openSUSE/umoci#161 openSUSE/umoci#162 * `umoci unpack` will now "clean up" the bundle generated if an error occurs during unpacking. Previously this didn't happen, which made cleaning up the responsibility of the caller (which was quite difficult if you were unprivileged). This is a breaking change, but is in the error path so it's not critical. openSUSE/umoci#174 openSUSE/umoci#187 * `umoci gc` now will no longer remove unknown files and directories that aren't `flock(2)`ed, thus ensuring that any possible OCI image-spec extensions or other users of an image being operated on will no longer break. openSUSE/umoci#198 * `umoci unpack --rootless` will now correctly handle regular file unpacking when overwriting a file that `umoci` doesn't have write access to. In addition, the semantics of pre-existing hardlinks to a clobbered file are clarified (the hard-links will not refer to the new layer's inode). openSUSE/umoci#222 openSUSE/umoci#223 [as-proot-fork]: https://github.com/AkihiroSuda/runrootless [rootlesscontainers-proto]: https://rootlesscontaine.rs/proto/rootlesscontainers.proto [umo.ci]: https://umo.ci/ This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2309=1 Package List: - openSUSE Leap 15.0 (x86_64): umoci-0.4.4-lp150.3.3.1 References:

1 0

openSUSE-SU-2019:2307-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 10 Oct '19

10 Oct '19

openSUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2307-1 Rating: important References: #1051510 #1054914 #1055117 #1061840 #1065600 #1065729 #1071995 #1082555 #1104967 #1109158 #1113722 #1114279 #1119086 #1123034 #1127988 #1131304 #1137069 #1137865 #1137959 #1140155 #1141013 #1142076 #1142635 #1146042 #1146540 #1146664 #1148133 #1148712 #1148868 #1149313 #1149446 #1149555 #1149651 #1150381 #1150423 #1151350 #1151610 #1151667 #1151680 #1151891 #1151955 #1152024 #1152025 #1152026 #1152161 #1152325 #1152457 #1152460 #1152466 #1152972 #1152974 #1152975 Cross-References: CVE-2017-18595 CVE-2019-14821 CVE-2019-15291 CVE-2019-9506 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves four vulnerabilities and has 48 fixes is now available. Description: The openSUSE Leap 15.0 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-15291: There was a NULL pointer dereference caused by a malicious USB device in the flexcop_usb_probe function in the drivers/media/usb/b2c2/flexcop-usb.c driver (bnc#1146540). - CVE-2019-14821: An out-of-bounds access issue was found in the way Linux kernel's KVM hypervisor implements the Coalesced MMIO write operation. It operates on an MMIO ring buffer 'struct kvm_coalesced_mmio' object, wherein write indices 'ring->first' and 'ring->last' value could be supplied by a host user-space process. An unprivileged host user or process with access to '/dev/kvm' device could have used this flaw to crash the host kernel, resulting in a denial of service or potentially escalating privileges on the system (bnc#1151350). - CVE-2017-18595: A double free might have been caused by the function allocate_trace_buffer in the file kernel/trace/trace.c (bnc#1149555). - CVE-2019-9506: The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and did not prevent an attacker from influencing the key length negotiation. This allowed practical brute-force attacks (aka "KNOB") that can decrypt traffic and inject arbitrary ciphertext without the victim noticing (bnc#1137865 1146042). The following non-security bugs were fixed: - ACPI: custom_method: fix memory leaks (bsc#1051510). - ACPI / PCI: fix acpi_pci_irq_enable() memory leak (bsc#1051510). - ACPI / property: Fix acpi_graph_get_remote_endpoint() name in kerneldoc (bsc#1051510). - alarmtimer: Use EOPNOTSUPP instead of ENOTSUPP (bsc#1151680). - ALSA: aoa: onyx: always initialize register read value (bsc#1051510). - ALSA: firewire-tascam: check intermediate state of clock status and retry (bsc#1051510). - ALSA: firewire-tascam: handle error code when getting current source of clock (bsc#1051510). - ASoC: es8328: Fix copy-paste error in es8328_right_line_controls (bsc#1051510). - ASoC: Intel: Baytrail: Fix implicit fallthrough warning (bsc#1051510). - ASoC: sun4i-i2s: RX and TX counter registers are swapped (bsc#1051510). - ASoC: wm8737: Fix copy-paste error in wm8737_snd_controls (bsc#1051510). - ASoC: wm8988: fix typo in wm8988_right_line_controls (bsc#1051510). - ath9k: dynack: fix possible deadlock in ath_dynack_node_{de}init (bsc#1051510). - atm: iphase: Fix Spectre v1 vulnerability (networking-stable-19_08_08). - bcma: fix incorrect update of BCMA_CORE_PCI_MDIO_DATA (bsc#1051510). - blk-flush: do not run queue for requests bypassing flush (bsc#1137959). - blk-flush: use blk_mq_request_bypass_insert() (bsc#1137959). - blk-mq: do not allocate driver tag upfront for flush rq (bsc#1137959). - blk-mq: Fix memory leak in blk_mq_init_allocated_queue error handling (bsc#1151610). - blk-mq: insert rq with DONTPREP to hctx dispatch list when requeue (bsc#1137959). - blk-mq: kABI fixes for blk-mq.h (bsc#1137959). - blk-mq: move blk_mq_put_driver_tag*() into blk-mq.h (bsc#1137959). - blk-mq: punt failed direct issue to dispatch list (bsc#1137959). - blk-mq: put the driver tag of nxt rq before first one is requeued (bsc#1137959). - blk-mq-sched: decide how to handle flush rq via RQF_FLUSH_SEQ (bsc#1137959). - block: fix timeout changes for legacy request drivers (bsc#1149446). - block: kABI fixes for BLK_EH_DONE renaming (bsc#1142076). - block: rename BLK_EH_NOT_HANDLED to BLK_EH_DONE (bsc#1142076). - bnx2x: Disable multi-cos feature (networking-stable-19_08_08). - bonding/802.3ad: fix link_failure_count tracking (bsc#1137069 bsc#1141013). - bonding/802.3ad: fix slave link initialization transition states (bsc#1137069 bsc#1141013). - bonding: Add vlan tx offload to hw_enc_features (networking-stable-19_08_21). - bonding: set default miimon value for non-arp modes if not set (bsc#1137069 bsc#1141013). - bonding: speed/duplex update at NETDEV_UP event (bsc#1137069 bsc#1141013). - btrfs: fix use-after-free when using the tree modification log (bsc#1151891). - btrfs: qgroup: Fix reserved data space leak if we have multiple reserve calls (bsc#1152975). - btrfs: qgroup: Fix the wrong target io_tree when freeing reserved data space (bsc#1152974). - btrfs: relocation: fix use-after-free on dead relocation roots (bsc#1152972). - ceph: use ceph_evict_inode to cleanup inode's resource (bsc#1148133). - clk: at91: fix update bit maps on CFG_MOR write (bsc#1051510). - clk: sunxi-ng: v3s: add missing clock slices for MMC2 module clocks (bsc#1051510). - clk: sunxi-ng: v3s: add the missing PLL_DDR1 (bsc#1051510). - crypto: caam - fix concurrency issue in givencrypt descriptor (bsc#1051510). - crypto: caam - free resources in case caam_rng registration failed (bsc#1051510). - crypto: cavium/zip - Add missing single_release() (bsc#1051510). - crypto: ccp - Reduce maximum stack usage (bsc#1051510). - crypto: qat - Silence smp_processor_id() warning (bsc#1051510). - crypto: skcipher - Unmap pages after an external error (bsc#1051510). - dmaengine: dw: platform: Switch to acpi_dma_controller_register() (bsc#1051510). - dmaengine: iop-adma.c: fix printk format warning (bsc#1051510). - drivers: thermal: int340x_thermal: Fix sysfs race condition (bsc#1051510). - drm/i915: Fix various tracepoints for gen2 (bsc#1113722) - drm/imx: Drop unused imx-ipuv3-crtc.o build (bsc#1113722) - EDAC/amd64: Decode syndrome before translating address (bsc#1114279). - eeprom: at24: make spd world-readable again (git-fixes). - ext4: fix warning inside ext4_convert_unwritten_extents_endio (bsc#1152025). - ext4: set error return correctly when ext4_htree_store_dirent fails (bsc#1152024). - Fix kabi for: NFSv4: Fix OPEN / CLOSE race (git-fixes). - git-sort: add nfsd maintainers git tree This allows git-sort to handle patches queued for nfsd. - gpio: fix line flag validation in lineevent_create (bsc#1051510). - gpio: fix line flag validation in linehandle_create (bsc#1051510). - gpiolib: acpi: Add gpiolib_acpi_run_edge_events_on_boot option and blacklist (bsc#1051510). - gpiolib: only check line handle flags once (bsc#1051510). - gpio: Move gpiochip_lock/unlock_as_irq to gpio/driver.h (bsc#1051510). - hwmon: (lm75) Fix write operations for negative temperatures (bsc#1051510). - hwmon: (shtc1) fix shtc1 and shtw1 id mask (bsc#1051510). - ife: error out when nla attributes are empty (networking-stable-19_08_08). - iio: dac: ad5380: fix incorrect assignment to val (bsc#1051510). - Input: elan_i2c - remove Lenovo Legion Y7000 PnpID (bsc#1051510). - iommu/dma: Fix for dereferencing before null checking (bsc#1151667). - ip6_tunnel: fix possible use-after-free on xmit (networking-stable-19_08_08). - ipv6/addrconf: allow adding multicast addr if IFA_F_MCAUTOJOIN is set (networking-stable-19_08_28). - isdn/capi: check message length in capi_write() (bsc#1051510). - kABI: media: em28xx: fix handler for vidioc_s_input() (bsc#1051510). fixes kABI - kABI: media: em28xx: stop rewriting device's struct (bsc#1051510). fixes kABI - KVM: PPC: Book3S: Fix incorrect guest-to-user-translation error handling (bsc#1061840). - KVM: PPC: Book3S HV: Check for MMU ready on piggybacked virtual cores (bsc#1061840). - KVM: PPC: Book3S HV: Do not lose pending doorbell request on migration on P9 (bsc#1061840). - KVM: PPC: Book3S HV: Do not push XIVE context when not using XIVE device (bsc#1061840). - KVM: PPC: Book3S HV: Fix lockdep warning when entering the guest (bsc#1061840). - KVM: PPC: Book3S HV: Fix race in re-enabling XIVE escalation interrupts (bsc#1061840). - KVM: PPC: Book3S HV: Handle virtual mode in XIVE VCPU push code (bsc#1061840). - KVM: PPC: Book3S HV: XIVE: Free escalation interrupts before disabling the VP (bsc#1061840). - leds: leds-lp5562 allow firmware files up to the maximum length (bsc#1051510). - leds: trigger: gpio: GPIO 0 is valid (bsc#1051510). - libertas_tf: Use correct channel range in lbtf_geo_init (bsc#1051510). - libiscsi: do not try to bypass SCSI EH (bsc#1142076). - livepatch: Nullify obj->mod in klp_module_coming()'s error path (bsc#1071995). - mac80211: minstrel_ht: fix per-group max throughput rate initialization (bsc#1051510). - md: do not report active array_state until after revalidate_disk() completes (git-fixes). - md: only call set_in_sync() when it is expected to succeed (git-fixes). - md/raid6: Set R5_ReadError when there is read failure on parity disk (git-fixes). - media: atmel: atmel-isi: fix timeout value for stop streaming (bsc#1051510). - media: dib0700: fix link error for dibx000_i2c_set_speed (bsc#1051510). - media: em28xx: fix handler for vidioc_s_input() (bsc#1051510). - media: em28xx: stop rewriting device's struct (bsc#1051510). - media: fdp1: Reduce FCP not found message level to debug (bsc#1051510). - media: marvell-ccic: do not generate EOF on parallel bus (bsc#1051510). - media: mc-device.c: do not memset __user pointer contents (bsc#1051510). - media: ov6650: Fix sensor possibly not detected on probe (bsc#1051510). - media: ov6650: Move v4l2_clk_get() to ov6650_video_probe() helper (bsc#1051510). - media: replace strcpy() by strscpy() (bsc#1051510). - media: Revert "[media] marvell-ccic: reset ccic phy when stop streaming for stability" (bsc#1051510). - media: technisat-usb2: break out of loop at end of buffer (bsc#1051510). - media: tm6000: double free if usb disconnect while streaming (bsc#1051510). - media: vb2: Fix videobuf2 to map correct area (bsc#1051510). - mic: avoid statically declaring a 'struct device' (bsc#1051510). - mmc: sdhci-msm: fix mutex while in spinlock (bsc#1142635). - mmc: sdhci-of-arasan: Do now show error message in case of deffered probe (bsc#1119086). - mtd: spi-nor: Fix Cadence QSPI RCU Schedule Stall (bsc#1051510). - mvpp2: refactor MTU change code (networking-stable-19_08_08). - net: bridge: delete local fdb on device init failure (networking-stable-19_08_08). - net: bridge: mcast: do not delete permanent entries when fast leave is enabled (networking-stable-19_08_08). - net: fix ifindex collision during namespace removal (networking-stable-19_08_08). - net/ibmvnic: prevent more than one thread from running in reset (bsc#1152457 ltc#174432). - net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (bsc#1152457 ltc#174432). - net/mlx5e: Only support tx/rx pause setting for port owner (networking-stable-19_08_21). - net/mlx5e: Prevent encap flow counter update async to user query (networking-stable-19_08_08). - net/mlx5e: Use flow keys dissector to parse packets for ARFS (networking-stable-19_08_21). - net/mlx5: Use reversed order when unregister devices (networking-stable-19_08_08). - net/packet: fix race in tpacket_snd() (networking-stable-19_08_21). - net: sched: Fix a possible null-pointer dereference in dequeue_func() (networking-stable-19_08_08). - net/smc: make sure EPOLLOUT is raised (networking-stable-19_08_28). - NFS4: Fix v4.0 client state corruption when mount (git-fixes). - nfsd: degraded slot-count more gracefully as allocation nears exhaustion (bsc#1150381). - nfsd: Do not release the callback slot unless it was actually held (git-fixes). - nfsd: Fix overflow causing non-working mounts on 1 TB machines (bsc#1150381). - nfsd: fix performance-limiting session calculation (bsc#1150381). - nfsd: give out fewer session slots as limit approaches (bsc#1150381). - nfsd: handle drc over-allocation gracefully (bsc#1150381). - nfsd: increase DRC cache limit (bsc#1150381). - NFS: Do not interrupt file writeout due to fatal errors (git-fixes). - NFS: Do not open code clearing of delegation state (git-fixes). - NFS: Ensure O_DIRECT reports an error if the bytes read/written is 0 (git-fixes). - NFS: Fix regression whereby fscache errors are appearing on 'nofsc' mounts (git-fixes). - NFS: Forbid setting AF_INET6 to "struct sockaddr_in"->sin_family (git-fixes). - NFS: Refactor nfs_lookup_revalidate() (git-fixes). - NFS: Remove redundant semicolon (git-fixes). - NFSv4.1: Again fix a race where CB_NOTIFY_LOCK fails to wake a waiter (git-fixes). - NFSv4.1: Fix open stateid recovery (git-fixes). - NFSv4.1: Only reap expired delegations (git-fixes). - NFSv4: Check the return value of update_open_stateid() (git-fixes). - NFSv4: Fix an Oops in nfs4_do_setattr (git-fixes). - NFSv4: Fix a potential sleep while atomic in nfs4_do_reclaim() (git-fixes). - NFSv4: Fix delegation state recovery (git-fixes). - NFSv4: Fix lookup revalidate of regular files (git-fixes). - NFSv4: Fix OPEN / CLOSE race (git-fixes). - NFSv4: Handle the special Linux file open access mode (git-fixes). - NFSv4: Only pass the delegation to setattr if we're sending a truncate (git-fixes). - NFSv4/pnfs: Fix a page lock leak in nfs_pageio_resend() (git-fixes). - nl80211: Fix possible Spectre-v1 for CQM RSSI thresholds (bsc#1051510). - null_blk: complete requests from ->timeout (bsc#1149446). - null_blk: wire up timeouts (bsc#1149446). - nvme: fix multipath crash when ANA is deactivated (bsc#1149446). - nvmem: Use the same permissions for eeprom as for nvmem (git-fixes). - nvme-rdma: Allow DELETING state change failure in (bsc#1104967,). - nvme-rdma: centralize admin/io queue teardown sequence (bsc#1142076). - nvme-rdma: centralize controller setup sequence (bsc#1142076). - nvme-rdma: fix a NULL deref when an admin connect times out (bsc#1149446). - nvme-rdma: fix timeout handler (bsc#1149446). - nvme-rdma: stop admin queue before freeing it (bsc#1140155). - nvme-rdma: support up to 4 segments of inline data (bsc#1142076). - nvme-rdma: unquiesce queues when deleting the controller (bsc#1142076). - nvme: remove ns sibling before clearing path (bsc#1140155). - nvme: return BLK_EH_DONE from ->timeout (bsc#1142076). - PCI: hv: Detect and fix Hyper-V PCI domain number collision (bsc#1150423). - phy: renesas: rcar-gen3-usb2: Disable clearing VBUS in over-current (bsc#1051510). - platform/x86: pmc_atom: Add Siemens SIMATIC IPC227E to critclk_systems DMI table (bsc#1051510). - PM: sleep: Fix possible overflow in pm_system_cancel_wakeup() (bsc#1051510). - pNFS fallback to MDS if no deviceid found (git-fixes). - pNFS/flexfiles: Fix PTR_ERR() dereferences in ff_layout_track_ds_error (git-fixes). - pNFS/flexfiles: Turn off soft RPC calls (git-fixes). - powerpc/64: Make sys_switch_endian() traceable (bsc#1065729). - powerpc/64s/radix: Fix MADV_[FREE|DONTNEED] TLB flush miss problem with THP (bsc#1152161 ltc#181664). - powerpc/64s/radix: Fix memory hotplug section page table creation (bsc#1065729). - powerpc/64s/radix: Fix memory hot-unplug page table split (bsc#1065729). - powerpc/64s/radix: Implement _tlbie(l)_va_range flush functions (bsc#1152161 ltc#181664). - powerpc/64s/radix: Improve preempt handling in TLB code (bsc#1152161 ltc#181664). - powerpc/64s/radix: Improve TLB flushing for page table freeing (bsc#1152161 ltc#181664). - powerpc/64s/radix: Introduce local single page ceiling for TLB range flush (bsc#1055117 bsc#1152161 ltc#181664). - powerpc/64s/radix: Optimize flush_tlb_range (bsc#1152161 ltc#181664). - powerpc/book3s64/mm: Do not do tlbie fixup for some hardware revisions (bsc#1152161 ltc#181664). - powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (bsc#1152161 ltc#181664). - powerpc: bpf: Fix generation of load/store DW instructions (bsc#1065729). - powerpc/bpf: use unsigned division instruction for 64-bit operations (bsc#1065729). - powerpc: Drop page_is_ram() and walk_system_ram_range() (bsc#1065729). - powerpc/irq: Do not WARN continuously in arch_local_irq_restore() (bsc#1065729). - powerpc/irq: drop arch_early_irq_init() (bsc#1065729). - powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (bsc#1152161 ltc#181664). - powerpc/mm/radix: Drop unneeded NULL check (bsc#1152161 ltc#181664). - powerpc/mm/radix: implement LPID based TLB flushes to be used by KVM (bsc#1152161 ltc#181664). - powerpc/mm: Simplify page_is_ram by using memblock_is_memory (bsc#1065729). - powerpc/mm: Use memblock API for PPC32 page_is_ram (bsc#1065729). - powerpc/module64: Fix comment in R_PPC64_ENTRY handling (bsc#1065729). - powerpc/powernv: Fix compile without CONFIG_TRACEPOINTS (bsc#1065729). - powerpc/powernv/ioda2: Allocate TCE table levels on demand for default DMA window (bsc#1061840). - powerpc/powernv/ioda: Fix race in TCE level allocation (bsc#1061840). - powerpc/powernv: move OPAL call wrapper tracing and interrupt handling to C (bsc#1065729). - powerpc/powernv/npu: Remove obsolete comment about TCE_KILL_INVAL_ALL (bsc#1065729). - powerpc/pseries: Call H_BLOCK_REMOVE when supported (bsc#1109158). - powerpc/pseries: Fix cpu_hotplug_lock acquisition in resize_hpt() (bsc#1065729). - powerpc/pseries/memory-hotplug: Fix return value type of find_aa_index (bsc#1065729). - powerpc/pseries: Read TLB Block Invalidate Characteristics (bsc#1109158). - powerpc/ptrace: Simplify vr_get/set() to avoid GCC warning (bsc#1148868). - powerpc/xive: Fix bogus error code returned by OPAL (bsc#1065729). - powerpc/xive: Implement get_irqchip_state method for XIVE to fix shutdown race (bsc#1065729). - powerpc/xmon: Fix opcode being uninitialized in print_insn_powerpc (bsc#1065729). - power: reset: gpio-restart: Fix typo when gpio reset is not found (bsc#1051510). - power: supply: Init device wakeup after device_add() (bsc#1051510). - ppp: Fix memory leak in ppp_write (git-fixes). - printk: Do not lose last line in kmsg buffer dump (bsc#1152460). - printk: fix printk_time race (bsc#1152466). - printk/panic: Avoid deadlock in printk() after stopping CPUs by NMI (bsc#1148712). - qla2xxx: kABI fixes for v10.01.00.18-k (bsc#1123034 bsc#1131304 bsc#1127988). - qla2xxx: remove SGI SN2 support (bsc#1123034 bsc#1131304 bsc#1127988). - quota: fix wrong condition in is_quota_modification() (bsc#1152026). - r8152: Set memory to all 0xFFs on failed reg reads (bsc#1051510). - regulator: lm363x: Fix off-by-one n_voltages for lm3632 ldo_vpos/ldo_vneg (bsc#1051510). - Revert "mwifiex: fix system hang problem after resume" (bsc#1051510). - scsi: qla2xxx: Add 28xx flash primary/secondary status/image mechanism (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Add Device ID for ISP28XX (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Add error handling for PLOGI ELS passthrough (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Add First Burst support for FC-NVMe devices (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Add fw_attr and port_no SysFS node (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Add new FW dump template entry types (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Add pci function reset support (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Add protection mask module parameters (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Add Serdes support for ISP28XX (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Add support for multiple fwdump templates/segments (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Add support for setting port speed (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Allow NVMe IO to resume with short cable pull (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: allow session delete to finish before create (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Always check the qla2x00_wait_for_hba_online() return value (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Avoid PCI IRQ affinity mapping when multiqueue is not supported (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: avoid printf format warning (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Avoid that Coverity complains about dereferencing a NULL rport pointer (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Avoid that lockdep complains about unsafe locking in tcm_qla2xxx_close_session() (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Avoid that qla2x00_mem_free() crashes if called twice (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Capture FW dump on MPI heartbeat stop event (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Change abort wait_loop from msleep to wait_event_timeout (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Change data_dsd into an array (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Change default ZIO threshold (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Change the return type of qla24xx_read_flash_data() (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Change the return type of qla2x00_update_ms_fdmi_iocb() into void (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Check for FW started flag before aborting (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: check for kstrtol() failure (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Check for MB timeout while capturing ISP27/28xx FW dump (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Check secondary image if reading the primary image fails (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Check the PCI info string output buffer size (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Check the size of firmware data structures at compile time (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Cleanup fcport memory to prevent leak (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Cleanup redundant qla2x00_abort_all_cmds during unload (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Cleanups for NVRAM/Flash read/write path (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: cleanup trace buffer initialization (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Complain if a command is released that is owned by the firmware (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Complain if a mailbox command times out (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Complain if a soft reset fails (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Complain if parsing the version string fails (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Complain if sp->done() is not called from the completion path (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Complain if waiting for pending commands times out (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Complain loudly about reference count underflow (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Correct error handling during initialization failures (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Correction and improvement to fwdt processing (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Correctly report max/min supported speeds (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: deadlock by configfs_depend_item (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Declare fourth qla2x00_set_model_info() argument const (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Declare local symbols static (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Declare qla24xx_build_scsi_crc_2_iocbs() static (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Declare qla2x00_find_new_loop_id() static (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Declare qla_tgt_cmd.cdb const (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Declare the fourth ql_dump_buffer() argument const (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Disable T10-DIF feature with FC-NVMe during probe (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Do not corrupt vha->plogi_ack_list (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Downgrade driver to 10.01.00.19-k There are upstream bug reports against 10.01.00.19-k which haven't been resolved. Also the newer version failed to get a proper review. For time being it's better to got with the older version and do not introduce new bugs. - scsi: qla2xxx: Dual FCP-NVMe target port support (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Enable type checking for the SRB free and done callback functions (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix abort timeout race condition (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix a NULL pointer dereference (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix a qla24xx_enable_msix() error path (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix a race condition between aborting and completing a SCSI command (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix a recently introduced kernel warning (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix a small typo in qla_bsg.c (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix code indentation for qla27xx_fwdt_entry (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix comment alignment in qla_bsg.c (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix comment in MODULE_PARM_DESC in qla2xxx (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix different size DMA Alloc/Unmap (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix DMA error when the DIF sg buffer crosses 4GB boundary (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix DMA unmap leak (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix driver reload for ISP82xx (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix driver unload when FC-NVMe LUNs are connected (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: fix fcport null pointer access (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix flash read for Qlogic ISPs (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix formatting of pointer types (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix fw dump corruption (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix fw options handle eh_bus_reset() (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix gnl.l memory leak on adapter init failure (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix hang in fcport delete path (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix hardirq-unsafe locking (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix hardlockup in abort command during driver remove (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix kernel crash after disconnecting NVMe devices (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix LUN discovery if loop id is not assigned yet by firmware (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix message indicating vectors used by driver (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix N2N link reset (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix N2N link up fail (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix Nport ID display value (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix NULL pointer crash due to stale CPUID (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix NVME cmd and LS cmd timeout race condition (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix NVMe port discovery after a short device port loss (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix panic from use after free in qla2x00_async_tm_cmd (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix possible fcport null-pointer dereferences (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix premature timer expiration (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix qla24xx_process_bidir_cmd() (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix race conditions in the code for aborting SCSI commands (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix read offset in qla24xx_load_risc_flash() (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix Relogin to prevent modifying scan_state flag (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix routine qla27xx_dump_{mpi|ram}() (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix session cleanup hang (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix session lookup in qlt_abort_work() (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: fix spelling mistake "alredy" -> "already" (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: fix spelling mistake "initializatin" -> "initialization" (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix SRB allocation flag to avoid sleeping in IRQ context (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix stale mem access on driver unload (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix stale session (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix stuck login session (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix unbound sleep in fcport delete path (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix unload when NVMe devices are configured (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix use-after-free issues in qla2xxx_qpair_sp_free_dma() (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: flush IO on chip reset or sess delete (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Further limit FLASH region write access from SysFS (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Improve Linux kernel coding style conformance (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Improve logging for scan thread (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Include the <asm/unaligned.h> header file from qla_dsd.h (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Increase the max_sgl_segments to 1024 (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Increase the size of the mailbox arrays from 4 to 8 (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Inline the qla2x00_fcport_event_handler() function (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Insert spaces where required (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Introduce qla2x00_els_dcmd2_free() (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Introduce qla2xxx_get_next_handle() (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Introduce the be_id_t and le_id_t data types for FC src/dst IDs (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Introduce the dsd32 and dsd64 data structures (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Introduce the function qla2xxx_init_sp() (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Leave a blank line after declarations (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Let the compiler check the type of the SCSI command context pointer (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Log the status code if a firmware command fails (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Make it explicit that ELS pass-through IOCBs use little endian (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Make qla24xx_async_abort_cmd() static (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Make qla2x00_abort_srb() again decrease the sp reference count (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Make qla2x00_mem_free() easier to verify (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Make qla2x00_process_response_queue() easier to read (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Make qlt_handle_abts_completion() more robust (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Make sure that aborted commands are freed (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Modify NVMe include directives (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Move debug messages before sending srb preventing panic (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: move IO flush to the front of NVME rport unregistration (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Move marker request behind QPair (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Move qla2x00_clear_loop_id() from qla_inline.h into qla_init.c (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Move qla2x00_is_reserved_id() from qla_inline.h into qla_init.c (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Move qla2x00_set_fcport_state() from a .h into a .c file (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Move qla2x00_set_reserved_loop_ids() definition (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Move the <linux/io-64-nonatomic-lo-hi.h> include directive (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Move the port_state_str definition from a .h to a .c file (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: no need to check return value of debugfs_create functions (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: on session delete, return nvme cmd (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Optimize NPIV tear down process (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Pass little-endian values to the firmware (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Prevent multiple ADISC commands per session (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Prevent SysFS access when chip is down (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: qla2x00_alloc_fw_dump: set ha->eft (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Really fix qla2xxx_eh_abort() (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Reduce the number of casts in GID list code (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Reduce the number of forward declarations (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Reduce the scope of three local variables in qla2xxx_queuecommand() (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Reject EH_{abort|device_reset|target_request} (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Remove a comment that refers to the SCSI host lock (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Remove an include directive from qla_mr.c (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Remove a set-but-not-used variable (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Remove a superfluous forward declaration (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Remove a superfluous pointer check (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Remove dead code (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: remove double assignment in qla2x00_update_fcport (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Remove FW default template (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Remove qla_tgt_cmd.data_work and qla_tgt_cmd.data_work_free (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Remove qla_tgt_cmd.released (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: remove redundant null check on pointer sess (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Remove set but not used variable 'ptr_dma' (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Remove superfluous sts_entry_* casts (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Remove the fcport test from qla_nvme_abort_work() (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Remove two superfluous casts (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Remove two superfluous if-tests (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Remove two superfluous tests (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Remove unnecessary locking from the target code (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Remove unnecessary null check (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Remove unreachable code from qla83xx_idc_lock() (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Remove useless set memory to zero use memset() (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Replace vmalloc + memset with vzalloc (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Report invalid mailbox status codes (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Report the firmware status code if a mailbox command fails (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Reset the FCF_ASYNC_{SENT|ACTIVE} flags (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Restore FAWWPN of Physical Port only for loop down (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Retry fabric Scan on IOCB queue full (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Rework key encoding in qlt_find_host_by_d_id() (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Secure flash update support for ISP28XX (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Set remote port devloss timeout to 0 (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Set remove flag for all VP (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Set the qpair in SRB to NULL when SRB is released (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Set the responder mode if appropriate for ELS pass-through IOCBs (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Set the SCSI command result before calling the command done (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Silence fwdump template message (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Silence Successful ELS IOCB message (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Simplification of register address used in qla_tmpl.c (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Simplify a debug statement (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Simplify conditional check again (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Simplify qla24xx_abort_sp_done() (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Simplify qla24xx_async_abort_cmd() (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Simplify qlt_lport_dump() (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Simplify qlt_send_term_imm_notif() (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Skip FW dump on LOOP initialization error (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Suppress a Coveritiy complaint about integer overflow (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Suppress multiple Coverity complaint about out-of-bounds accesses (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: target: Fix offline port handling and host reset handling (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Uninline qla2x00_init_timer() (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Unregister resources in the opposite order of the registration order (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Update driver version to 10.00.00.13-k (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Update driver version to 10.00.00.14-k (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Update driver version to 10.01.00.15-k (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Update driver version to 10.01.00.16-k (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Update driver version to 10.01.00.18-k (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Update driver version to 10.01.00.19-k (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Update driver version to 10.01.00.20-k (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Update flash read/write routine (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Use an on-stack completion in qla24xx_control_vp() (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Use ARRAY_SIZE() in the definition of QLA_LAST_SPEED (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Use common update-firmware-options routine for ISP27xx+ (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Use complete switch scan for RSCN events (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Use Correct index for Q-Pair array (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Use dma_pool_zalloc() (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Use get/put_unaligned where appropriate (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Use __le64 instead of uint32_t for sending DMA addresses to firmware (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Use memcpy() and strlcpy() instead of strcpy() and strncpy() (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Use mutex protection during qla2x00_sysfs_read_fw_dump() (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Use strlcpy() instead of strncpy() (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Use tabs instead of spaces for indentation (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Use tabs to indent code (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Verify locking assumptions at runtime (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: scsi_dh_rdac: zero cdb in send_mode_select() (bsc#1149313). - scsi: scsi_transport_fc: nvme: display FC-NVMe port roles (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: tcm_qla2xxx: Minimize #include directives (bsc#1123034 bsc#1131304 bsc#1127988). - scsi_transport_fc: complete requests from ->timeout (bsc#1142076). - sctp: fix the transport error_count check (networking-stable-19_08_21). - secure boot lockdown: Fix-up backport of /dev/mem access restriction The upstream-submitted patch set has evolved over time, align our patches (contents and description) to reflect the current status as far as /dev/mem access is concerned. - sky2: Disable MSI on yet another ASUS boards (P6Xxxx) (bsc#1051510). - slip: make slhc_free() silently accept an error pointer (bsc#1051510). - slip: sl_alloc(): remove unused parameter "dev_t line" (bsc#1051510). - SUNRPC fix regression in umount of a secure mount (git-fixes). - SUNRPC: Handle connection breakages correctly in call_status() (git-fixes). - SUNRPC/nfs: Fix return value for nfs4_callback_compound() (git-fixes). - tcp: make sure EPOLLOUT wont be missed (networking-stable-19_08_28). - team: Add vlan tx offload to hw_enc_features (networking-stable-19_08_21). - tpm_tis_core: Set TPM_CHIP_FLAG_IRQ before probing for interrupts (bsc#1082555). - Update patches.suse/ext4-unsupported-features.patch (SLE-8615, bsc#1149651, SLE-9243). - Update patches.suse/powerpc-powernv-Return-for-invalid-IMC-domain.patch (bsc#1054914, git-fixes). - USB: usbcore: Fix slab-out-of-bounds bug during device reset (bsc#1051510). - video: ssd1307fb: Start page range at page_offset (bsc#1113722) - x86/CPU/AMD: Clear RDRAND CPUID bit on AMD family 15h/16h (bsc#1114279). - x86/fpu: Add FPU state copying quirk to handle XRSTOR failure on Intel Skylake CPUs (bsc#1151955). - x86/tls: Fix possible spectre-v1 in do_get_thread_area() (bsc#1114279). - xen/netback: Reset nr_frags before freeing skb (networking-stable-19_08_21). - xen-netfront: do not assume sk_buff_head list is empty in error handling (bsc#1065600). - xen-netfront: do not use ~0U as error return value for xennet_fill_frags() (bsc#1065600). - xen/xenbus: fix self-deadlock after killing user process (bsc#1065600). Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2307=1 Package List: - openSUSE Leap 15.0 (noarch): kernel-devel-4.12.14-lp150.12.76.1 kernel-docs-4.12.14-lp150.12.76.1 kernel-docs-html-4.12.14-lp150.12.76.1 kernel-macros-4.12.14-lp150.12.76.1 kernel-source-4.12.14-lp150.12.76.1 kernel-source-vanilla-4.12.14-lp150.12.76.1 - openSUSE Leap 15.0 (x86_64): kernel-debug-4.12.14-lp150.12.76.1 kernel-debug-base-4.12.14-lp150.12.76.1 kernel-debug-base-debuginfo-4.12.14-lp150.12.76.1 kernel-debug-debuginfo-4.12.14-lp150.12.76.1 kernel-debug-debugsource-4.12.14-lp150.12.76.1 kernel-debug-devel-4.12.14-lp150.12.76.1 kernel-debug-devel-debuginfo-4.12.14-lp150.12.76.1 kernel-default-4.12.14-lp150.12.76.1 kernel-default-base-4.12.14-lp150.12.76.1 kernel-default-base-debuginfo-4.12.14-lp150.12.76.1 kernel-default-debuginfo-4.12.14-lp150.12.76.1 kernel-default-debugsource-4.12.14-lp150.12.76.1 kernel-default-devel-4.12.14-lp150.12.76.1 kernel-default-devel-debuginfo-4.12.14-lp150.12.76.1 kernel-kvmsmall-4.12.14-lp150.12.76.1 kernel-kvmsmall-base-4.12.14-lp150.12.76.1 kernel-kvmsmall-base-debuginfo-4.12.14-lp150.12.76.1 kernel-kvmsmall-debuginfo-4.12.14-lp150.12.76.1 kernel-kvmsmall-debugsource-4.12.14-lp150.12.76.1 kernel-kvmsmall-devel-4.12.14-lp150.12.76.1 kernel-kvmsmall-devel-debuginfo-4.12.14-lp150.12.76.1 kernel-obs-build-4.12.14-lp150.12.76.1 kernel-obs-build-debugsource-4.12.14-lp150.12.76.1 kernel-obs-qa-4.12.14-lp150.12.76.1 kernel-syms-4.12.14-lp150.12.76.1 kernel-vanilla-4.12.14-lp150.12.76.1 kernel-vanilla-base-4.12.14-lp150.12.76.1 kernel-vanilla-base-debuginfo-4.12.14-lp150.12.76.1 kernel-vanilla-debuginfo-4.12.14-lp150.12.76.1 kernel-vanilla-debugsource-4.12.14-lp150.12.76.1 kernel-vanilla-devel-4.12.14-lp150.12.76.1 kernel-vanilla-devel-debuginfo-4.12.14-lp150.12.76.1 References: https://www.suse.com/security/cve/CVE-2017-18595.html https://www.suse.com/security/cve/CVE-2019-14821.html https://www.suse.com/security/cve/CVE-2019-15291.html https://www.suse.com/security/cve/CVE-2019-9506.html https://bugzilla.suse.com/1051510 https://bugzilla.suse.com/1054914 https://bugzilla.suse.com/1055117 https://bugzilla.suse.com/1061840 https://bugzilla.suse.com/1065600 https://bugzilla.suse.com/1065729 https://bugzilla.suse.com/1071995 https://bugzilla.suse.com/1082555 https://bugzilla.suse.com/1104967 https://bugzilla.suse.com/1109158 https://bugzilla.suse.com/1113722 https://bugzilla.suse.com/1114279 https://bugzilla.suse.com/1119086 https://bugzilla.suse.com/1123034 https://bugzilla.suse.com/1127988 https://bugzilla.suse.com/1131304 https://bugzilla.suse.com/1137069 https://bugzilla.suse.com/1137865 https://bugzilla.suse.com/1137959 https://bugzilla.suse.com/1140155 https://bugzilla.suse.com/1141013 https://bugzilla.suse.com/1142076 https://bugzilla.suse.com/1142635 https://bugzilla.suse.com/1146042 https://bugzilla.suse.com/1146540 https://bugzilla.suse.com/1146664 https://bugzilla.suse.com/1148133 https://bugzilla.suse.com/1148712 https://bugzilla.suse.com/1148868 https://bugzilla.suse.com/1149313 https://bugzilla.suse.com/1149446 https://bugzilla.suse.com/1149555 https://bugzilla.suse.com/1149651 https://bugzilla.suse.com/1150381 https://bugzilla.suse.com/1150423 https://bugzilla.suse.com/1151350 https://bugzilla.suse.com/1151610 https://bugzilla.suse.com/1151667 https://bugzilla.suse.com/1151680 https://bugzilla.suse.com/1151891 https://bugzilla.suse.com/1151955 https://bugzilla.suse.com/1152024 https://bugzilla.suse.com/1152025 https://bugzilla.suse.com/1152026 https://bugzilla.suse.com/1152161 https://bugzilla.suse.com/1152325 https://bugzilla.suse.com/1152457 https://bugzilla.suse.com/1152460 https://bugzilla.suse.com/1152466 https://bugzilla.suse.com/1152972 https://bugzilla.suse.com/1152974 https://bugzilla.suse.com/1152975

1 0

openSUSE-SU-2019:2308-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 10 Oct '19

10 Oct '19

openSUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2308-1 Rating: important References: #1051510 #1054914 #1055117 #1061840 #1065600 #1065729 #1071995 #1082555 #1104967 #1109158 #1111666 #1113722 #1114279 #1119086 #1123034 #1127988 #1131304 #1137069 #1137865 #1137959 #1137982 #1140155 #1141013 #1142076 #1142635 #1146042 #1146540 #1146664 #1148133 #1148712 #1148868 #1149313 #1149446 #1149555 #1149651 #1150305 #1150381 #1150423 #1150846 #1151067 #1151192 #1151350 #1151610 #1151661 #1151662 #1151667 #1151680 #1151891 #1151955 #1152024 #1152025 #1152026 #1152161 #1152187 #1152243 #1152325 #1152457 #1152460 #1152466 #1152525 #1152972 #1152974 #1152975 Cross-References: CVE-2017-18595 CVE-2019-14821 CVE-2019-15291 CVE-2019-9506 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves four vulnerabilities and has 59 fixes is now available. Description: The openSUSE Leap 15.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-15291: There was a NULL pointer dereference caused by a malicious USB device in the flexcop_usb_probe function in the drivers/media/usb/b2c2/flexcop-usb.c driver (bnc#1146540). - CVE-2019-14821: An out-of-bounds access issue was found in the way Linux kernel's KVM hypervisor implements the Coalesced MMIO write operation. It operates on an MMIO ring buffer 'struct kvm_coalesced_mmio' object, wherein write indices 'ring->first' and 'ring->last' value could be supplied by a host user-space process. An unprivileged host user or process with access to '/dev/kvm' device could use this flaw to crash the host kernel, resulting in a denial of service or potentially escalating privileges on the system (bnc#1151350). - CVE-2017-18595: A double free may be caused by the function allocate_trace_buffer in the file kernel/trace/trace.c (bnc#1149555). - CVE-2019-9506: The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and did not prevent an attacker from influencing the key length negotiation. This allowed practical brute-force attacks (aka "KNOB") that can decrypt traffic and inject arbitrary ciphertext without the victim noticing (bnc#1137865 bnc#1146042). The following non-security bugs were fixed: - ACPI: custom_method: fix memory leaks (bsc#1051510). - ACPI / PCI: fix acpi_pci_irq_enable() memory leak (bsc#1051510). - ACPI / property: Fix acpi_graph_get_remote_endpoint() name in kerneldoc (bsc#1051510). - alarmtimer: Use EOPNOTSUPP instead of ENOTSUPP (bsc#1151680). - ALSA: aoa: onyx: always initialize register read value (bsc#1051510). - ALSA: firewire-tascam: check intermediate state of clock status and retry (bsc#1051510). - ALSA: firewire-tascam: handle error code when getting current source of clock (bsc#1051510). - ASoC: es8328: Fix copy-paste error in es8328_right_line_controls (bsc#1051510). - ASoC: Intel: Baytrail: Fix implicit fallthrough warning (bsc#1051510). - ASoC: sun4i-i2s: RX and TX counter registers are swapped (bsc#1051510). - ASoC: wm8737: Fix copy-paste error in wm8737_snd_controls (bsc#1051510). - ASoC: wm8988: fix typo in wm8988_right_line_controls (bsc#1051510). - ath10k: adjust skb length in ath10k_sdio_mbox_rx_packet (bsc#1111666). - ath9k: dynack: fix possible deadlock in ath_dynack_node_{de}init (bsc#1051510). - atm: iphase: Fix Spectre v1 vulnerability (networking-stable-19_08_08). - bcma: fix incorrect update of BCMA_CORE_PCI_MDIO_DATA (bsc#1051510). - blk-flush: do not run queue for requests bypassing flush (bsc#1137959). - blk-flush: use blk_mq_request_bypass_insert() (bsc#1137959). - blk-mq: do not allocate driver tag upfront for flush rq (bsc#1137959). - blk-mq: Fix memory leak in blk_mq_init_allocated_queue error handling (bsc#1151610). - blk-mq: insert rq with DONTPREP to hctx dispatch list when requeue (bsc#1137959). - blk-mq: introduce blk_mq_request_completed() (bsc#1149446). - blk-mq: introduce blk_mq_tagset_wait_completed_request() (bsc#1149446). - blk-mq: kABI fixes for blk-mq.h (bsc#1137959). - blk-mq: move blk_mq_put_driver_tag*() into blk-mq.h (bsc#1137959). - blk-mq: punt failed direct issue to dispatch list (bsc#1137959). - blk-mq: put the driver tag of nxt rq before first one is requeued (bsc#1137959). - blk-mq-sched: decide how to handle flush rq via RQF_FLUSH_SEQ (bsc#1137959). - block: fix timeout changes for legacy request drivers (bsc#1149446). - block: kABI fixes for BLK_EH_DONE renaming (bsc#1142076). - block: rename BLK_EH_NOT_HANDLED to BLK_EH_DONE (bsc#1142076). - bnx2x: Disable multi-cos feature (networking-stable-19_08_08). - bonding/802.3ad: fix link_failure_count tracking (bsc#1137069 bsc#1141013). - bonding/802.3ad: fix slave link initialization transition states (bsc#1137069 bsc#1141013). - bonding: Add vlan tx offload to hw_enc_features (networking-stable-19_08_21). - bonding: set default miimon value for non-arp modes if not set (bsc#1137069 bsc#1141013). - bonding: speed/duplex update at NETDEV_UP event (bsc#1137069 bsc#1141013). - btrfs: fix use-after-free when using the tree modification log (bsc#1151891). - btrfs: qgroup: Fix reserved data space leak if we have multiple reserve calls (bsc#1152975). - btrfs: qgroup: Fix the wrong target io_tree when freeing reserved data space (bsc#1152974). - btrfs: relocation: fix use-after-free on dead relocation roots (bsc#1152972). - ceph: use ceph_evict_inode to cleanup inode's resource (bsc#1148133). - clk: at91: fix update bit maps on CFG_MOR write (bsc#1051510). - clk: sunxi-ng: v3s: add missing clock slices for MMC2 module clocks (bsc#1051510). - clk: sunxi-ng: v3s: add the missing PLL_DDR1 (bsc#1051510). - Compile nvme.ko as module (bsc#1150846) - crypto: caam - fix concurrency issue in givencrypt descriptor (bsc#1051510). - crypto: caam - free resources in case caam_rng registration failed (bsc#1051510). - crypto: caam/qi - fix error handling in ERN handler (bsc#1111666). - crypto: cavium/zip - Add missing single_release() (bsc#1051510). - crypto: ccp - Reduce maximum stack usage (bsc#1051510). - crypto: qat - Silence smp_processor_id() warning (bsc#1051510). - crypto: skcipher - Unmap pages after an external error (bsc#1051510). - dma-buf/sw_sync: Synchronize signal vs syncpt free (bsc#1111666). - dmaengine: dw: platform: Switch to acpi_dma_controller_register() (bsc#1051510). - dmaengine: iop-adma.c: fix printk format warning (bsc#1051510). - drivers: thermal: int340x_thermal: Fix sysfs race condition (bsc#1051510). - drm/i915: Fix various tracepoints for gen2 (bsc#1113722) - drm/imx: Drop unused imx-ipuv3-crtc.o build (bsc#1113722) - EDAC/amd64: Decode syndrome before translating address (bsc#1114279). - eeprom: at24: make spd world-readable again (git-fixes). - ext4: fix warning inside ext4_convert_unwritten_extents_endio (bsc#1152025). - ext4: set error return correctly when ext4_htree_store_dirent fails (bsc#1152024). - Fix kabi for: NFSv4: Fix OPEN / CLOSE race (git-fixes). - floppy: fix usercopy direction (bsc#1111666). - git-sort: add nfsd maintainers git tree This allows git-sort to handle patches queued for nfsd. - gpio: fix line flag validation in lineevent_create (bsc#1051510). - gpio: fix line flag validation in linehandle_create (bsc#1051510). - gpiolib: acpi: Add gpiolib_acpi_run_edge_events_on_boot option and blacklist (bsc#1051510). - gpiolib: only check line handle flags once (bsc#1051510). - gpio: Move gpiochip_lock/unlock_as_irq to gpio/driver.h (bsc#1051510). - hwmon: (lm75) Fix write operations for negative temperatures (bsc#1051510). - hwmon: (shtc1) fix shtc1 and shtw1 id mask (bsc#1051510). - i2c: designware: Synchronize IRQs when unregistering slave client (bsc#1111666). - i40e: Add support for X710 device (bsc#1151067). - ife: error out when nla attributes are empty (networking-stable-19_08_08). - iio: dac: ad5380: fix incorrect assignment to val (bsc#1051510). - Input: elan_i2c - remove Lenovo Legion Y7000 PnpID (bsc#1051510). - iommu/dma: Fix for dereferencing before null checking (bsc#1151667). - iommu: Do not use sme_active() in generic code (bsc#1151661). - iommu/iova: Avoid false sharing on fq_timer_on (bsc#1151662). - ip6_tunnel: fix possible use-after-free on xmit (networking-stable-19_08_08). - ipv6/addrconf: allow adding multicast addr if IFA_F_MCAUTOJOIN is set (networking-stable-19_08_28). - isdn/capi: check message length in capi_write() (bsc#1051510). - kABI: media: em28xx: fix handler for vidioc_s_input() (bsc#1051510). fixes kABI - kABI: media: em28xx: stop rewriting device's struct (bsc#1051510). fixes kABI - kABI protect struct vmem_altmap (bsc#1150305). - KVM: PPC: Book3S: Fix incorrect guest-to-user-translation error handling (bsc#1061840). - KVM: PPC: Book3S HV: Check for MMU ready on piggybacked virtual cores (bsc#1061840). - KVM: PPC: Book3S HV: Do not lose pending doorbell request on migration on P9 (bsc#1061840). - KVM: PPC: Book3S HV: Do not push XIVE context when not using XIVE device (bsc#1061840). - KVM: PPC: Book3S HV: Fix lockdep warning when entering the guest (bsc#1061840). - KVM: PPC: Book3S HV: Fix race in re-enabling XIVE escalation interrupts (bsc#1061840). - KVM: PPC: Book3S HV: Handle virtual mode in XIVE VCPU push code (bsc#1061840). - KVM: PPC: Book3S HV: XIVE: Free escalation interrupts before disabling the VP (bsc#1061840). - leds: leds-lp5562 allow firmware files up to the maximum length (bsc#1051510). - leds: trigger: gpio: GPIO 0 is valid (bsc#1051510). - libertas_tf: Use correct channel range in lbtf_geo_init (bsc#1051510). - libiscsi: do not try to bypass SCSI EH (bsc#1142076). - libnvdimm/altmap: Track namespace boundaries in altmap (bsc#1150305). - libnvdimm: prevent nvdimm from requesting key when security is disabled (bsc#1137982). - lightnvm: remove dependencies on BLK_DEV_NVME and PCI (bsc#1150846). - livepatch: Nullify obj->mod in klp_module_coming()'s error path (bsc#1071995). - mac80211: minstrel_ht: fix per-group max throughput rate initialization (bsc#1051510). - md: do not report active array_state until after revalidate_disk() completes (git-fixes). - md: only call set_in_sync() when it is expected to succeed (git-fixes). - md/raid6: Set R5_ReadError when there is read failure on parity disk (git-fixes). - media: atmel: atmel-isi: fix timeout value for stop streaming (bsc#1051510). - media: dib0700: fix link error for dibx000_i2c_set_speed (bsc#1051510). - media: em28xx: fix handler for vidioc_s_input() (bsc#1051510). - media: em28xx: stop rewriting device's struct (bsc#1051510). - media: fdp1: Reduce FCP not found message level to debug (bsc#1051510). - media: marvell-ccic: do not generate EOF on parallel bus (bsc#1051510). - media: mc-device.c: do not memset __user pointer contents (bsc#1051510). - media: ov6650: Fix sensor possibly not detected on probe (bsc#1051510). - media: ov6650: Move v4l2_clk_get() to ov6650_video_probe() helper (bsc#1051510). - media: replace strcpy() by strscpy() (bsc#1051510). - media: Revert "[media] marvell-ccic: reset ccic phy when stop streaming for stability" (bsc#1051510). - media: technisat-usb2: break out of loop at end of buffer (bsc#1051510). - media: tm6000: double free if usb disconnect while streaming (bsc#1051510). - media: vb2: Fix videobuf2 to map correct area (bsc#1051510). - mic: avoid statically declaring a 'struct device' (bsc#1051510). - mmc: sdhci-msm: fix mutex while in spinlock (bsc#1142635). - mmc: sdhci-of-arasan: Do now show error message in case of deffered probe (bsc#1119086). - mtd: spi-nor: Fix Cadence QSPI RCU Schedule Stall (bsc#1051510). - mvpp2: refactor MTU change code (networking-stable-19_08_08). - net: bridge: delete local fdb on device init failure (networking-stable-19_08_08). - net: bridge: mcast: do not delete permanent entries when fast leave is enabled (networking-stable-19_08_08). - net: fix ifindex collision during namespace removal (networking-stable-19_08_08). - net/ibmvnic: prevent more than one thread from running in reset (bsc#1152457 ltc#174432). - net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (bsc#1152457 ltc#174432). - net/mlx5e: Only support tx/rx pause setting for port owner (networking-stable-19_08_21). - net/mlx5e: Prevent encap flow counter update async to user query (networking-stable-19_08_08). - net/mlx5e: Use flow keys dissector to parse packets for ARFS (networking-stable-19_08_21). - net/mlx5: Use reversed order when unregister devices (networking-stable-19_08_08). - net/packet: fix race in tpacket_snd() (networking-stable-19_08_21). - net: sched: Fix a possible null-pointer dereference in dequeue_func() (networking-stable-19_08_08). - net/smc: make sure EPOLLOUT is raised (networking-stable-19_08_28). - NFS4: Fix v4.0 client state corruption when mount (git-fixes). - nfsd: degraded slot-count more gracefully as allocation nears exhaustion (bsc#1150381). - nfsd: Do not release the callback slot unless it was actually held (git-fixes). - nfsd: Fix overflow causing non-working mounts on 1 TB machines (bsc#1150381). - nfsd: fix performance-limiting session calculation (bsc#1150381). - nfsd: give out fewer session slots as limit approaches (bsc#1150381). - nfsd: handle drc over-allocation gracefully (bsc#1150381). - nfsd: increase DRC cache limit (bsc#1150381). - NFS: Do not interrupt file writeout due to fatal errors (git-fixes). - NFS: Do not open code clearing of delegation state (git-fixes). - NFS: Ensure O_DIRECT reports an error if the bytes read/written is 0 (git-fixes). - NFS: Fix regression whereby fscache errors are appearing on 'nofsc' mounts (git-fixes). - NFS: Forbid setting AF_INET6 to "struct sockaddr_in"->sin_family (git-fixes). - NFS: Refactor nfs_lookup_revalidate() (git-fixes). - NFS: Remove redundant semicolon (git-fixes). - NFSv4.1: Again fix a race where CB_NOTIFY_LOCK fails to wake a waiter (git-fixes). - NFSv4.1: Fix open stateid recovery (git-fixes). - NFSv4.1: Only reap expired delegations (git-fixes). - NFSv4: Check the return value of update_open_stateid() (git-fixes). - NFSv4: Fix an Oops in nfs4_do_setattr (git-fixes). - NFSv4: Fix a potential sleep while atomic in nfs4_do_reclaim() (git-fixes). - NFSv4: Fix delegation state recovery (git-fixes). - NFSv4: Fix lookup revalidate of regular files (git-fixes). - NFSv4: Fix OPEN / CLOSE race (git-fixes). - NFSv4: Handle the special Linux file open access mode (git-fixes). - NFSv4: Only pass the delegation to setattr if we're sending a truncate (git-fixes). - NFSv4/pnfs: Fix a page lock leak in nfs_pageio_resend() (git-fixes). - nl80211: Fix possible Spectre-v1 for CQM RSSI thresholds (bsc#1051510). - null_blk: complete requests from ->timeout (bsc#1149446). - null_blk: wire up timeouts (bsc#1149446). - nvme: do not abort completed request in nvme_cancel_request (bsc#1149446). - nvme: fix multipath crash when ANA is deactivated (bsc#1149446). - nvme: fix multipath crash when ANA is deactivated (bsc#1149446). - nvmem: Use the same permissions for eeprom as for nvmem (git-fixes). - nvme-rdma: Allow DELETING state change failure in (bsc#1104967,). - nvme-rdma: centralize admin/io queue teardown sequence (bsc#1142076). - nvme-rdma: centralize controller setup sequence (bsc#1142076). - nvme-rdma: fix a NULL deref when an admin connect times out (bsc#1149446). - nvme-rdma: fix a NULL deref when an admin connect times out (bsc#1149446). - nvme-rdma: fix timeout handler (bsc#1149446). - nvme-rdma: fix timeout handler (bsc#1149446). - nvme-rdma: remove redundant reference between ib_device and tagset (bsc#149446). - nvme-rdma: stop admin queue before freeing it (bsc#1140155). - nvme-rdma: support up to 4 segments of inline data (bsc#1142076). - nvme-rdma: unquiesce queues when deleting the controller (bsc#1142076). - nvme-rdma: use dynamic dma mapping per command (bsc#1149446). - nvme: remove ns sibling before clearing path (bsc#1140155). - nvme: return BLK_EH_DONE from ->timeout (bsc#1142076). - nvme-tcp: fix a NULL deref when an admin connect times out (bsc#1149446). - nvme-tcp: fix timeout handler (bsc#1149446). - nvme: wait until all completed request's complete fn is called (bsc#1149446). - PCI: Add ACS quirk for Amazon Annapurna Labs root ports (bsc#1152187,bsc#1152525). - PCI: Add Amazon's Annapurna Labs vendor ID (bsc#1152187,bsc#1152525). - PCI: Add quirk to disable MSI-X support for Amazon's Annapurna Labs Root Port (bsc#1152187,bsc#1152525). - PCI: hv: Detect and fix Hyper-V PCI domain number collision (bsc#1150423). - PCI/VPD: Prevent VPD access for Amazon's Annapurna Labs Root Port (bsc#1152187,bsc#1152525). - phy: renesas: rcar-gen3-usb2: Disable clearing VBUS in over-current (bsc#1051510). - platform/x86: pmc_atom: Add Siemens SIMATIC IPC227E to critclk_systems DMI table (bsc#1051510). - PM: sleep: Fix possible overflow in pm_system_cancel_wakeup() (bsc#1051510). - PNFS fallback to MDS if no deviceid found (git-fixes). - pnfs/flexfiles: Fix PTR_ERR() dereferences in ff_layout_track_ds_error (git-fixes). - pNFS/flexfiles: Turn off soft RPC calls (git-fixes). - powerpc/64: Make sys_switch_endian() traceable (bsc#1065729). - powerpc/64s/radix: Fix MADV_[FREE|DONTNEED] TLB flush miss problem with THP (bsc#1152161 ltc#181664). - powerpc/64s/radix: Fix memory hotplug section page table creation (bsc#1065729). - powerpc/64s/radix: Fix memory hot-unplug page table split (bsc#1065729). - powerpc/64s/radix: Implement _tlbie(l)_va_range flush functions (bsc#1152161 ltc#181664). - powerpc/64s/radix: Improve preempt handling in TLB code (bsc#1152161 ltc#181664). - powerpc/64s/radix: Improve TLB flushing for page table freeing (bsc#1152161 ltc#181664). - powerpc/64s/radix: Introduce local single page ceiling for TLB range flush (bsc#1055117 bsc#1152161 ltc#181664). - powerpc/64s/radix: Optimize flush_tlb_range (bsc#1152161 ltc#181664). - powerpc/book3s64/mm: Do not do tlbie fixup for some hardware revisions (bsc#1152161 ltc#181664). - powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (bsc#1152161 ltc#181664). - powerpc: bpf: Fix generation of load/store DW instructions (bsc#1065729). - powerpc/bpf: use unsigned division instruction for 64-bit operations (bsc#1065729). - powerpc: Drop page_is_ram() and walk_system_ram_range() (bsc#1065729). - powerpc/irq: Do not WARN continuously in arch_local_irq_restore() (bsc#1065729). - powerpc/irq: drop arch_early_irq_init() (bsc#1065729). - powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (bsc#1152161 ltc#181664). - powerpc/mm/radix: Drop unneeded NULL check (bsc#1152161 ltc#181664). - powerpc/mm/radix: implement LPID based TLB flushes to be used by KVM (bsc#1152161 ltc#181664). - powerpc/mm: Simplify page_is_ram by using memblock_is_memory (bsc#1065729). - powerpc/mm: Use memblock API for PPC32 page_is_ram (bsc#1065729). - powerpc/module64: Fix comment in R_PPC64_ENTRY handling (bsc#1065729). - powerpc/papr_scm: Fix an off-by-one check in papr_scm_meta_{get, set} (bsc#1152243 ltc#181472). - powerpc/powernv: Fix compile without CONFIG_TRACEPOINTS (bsc#1065729). - powerpc/powernv/ioda2: Allocate TCE table levels on demand for default DMA window (bsc#1061840). - powerpc/powernv/ioda: Fix race in TCE level allocation (bsc#1061840). - powerpc/powernv: move OPAL call wrapper tracing and interrupt handling to C (bsc#1065729). - powerpc/powernv/npu: Remove obsolete comment about TCE_KILL_INVAL_ALL (bsc#1065729). - powerpc/pseries: Call H_BLOCK_REMOVE when supported (bsc#1109158). - powerpc/pseries: Fix cpu_hotplug_lock acquisition in resize_hpt() (bsc#1065729). - powerpc/pseries/memory-hotplug: Fix return value type of find_aa_index (bsc#1065729). - powerpc/pseries: Read TLB Block Invalidate Characteristics (bsc#1109158). - powerpc/ptrace: Simplify vr_get/set() to avoid GCC warning (bsc#1148868). - powerpc/xive: Fix bogus error code returned by OPAL (bsc#1065729). - powerpc/xive: Implement get_irqchip_state method for XIVE to fix shutdown race (bsc#1065729). - powerpc/xmon: Fix opcode being uninitialized in print_insn_powerpc (bsc#1065729). - power: reset: gpio-restart: Fix typo when gpio reset is not found (bsc#1051510). - power: supply: Init device wakeup after device_add() (bsc#1051510). - ppp: Fix memory leak in ppp_write (git-fixes). - printk: Do not lose last line in kmsg buffer dump (bsc#1152460). - printk: fix printk_time race (bsc#1152466). - printk/panic: Avoid deadlock in printk() after stopping CPUs by NMI (bsc#1148712). - qla2xxx: kABI fixes for v10.01.00.18-k (bsc#1123034 bsc#1131304 bsc#1127988). - qla2xxx: remove SGI SN2 support (bsc#1123034 bsc#1131304 bsc#1127988). - quota: fix wrong condition in is_quota_modification() (bsc#1152026). - r8152: Set memory to all 0xFFs on failed reg reads (bsc#1051510). - Refresh scsi-qla2xxx-Capture-FW-dump-on-MPI-heartbeat-stop-e.patch 882ffc9f07fb ("scsi: qla2xxx: Capture FW dump on MPI heartbeat stop event (bsc#1123034 bsc#1131304 bsc#1127988).") placed the "vha->hw->fw_dump_mpi = 0" assigment into the __CHECKER__ section. Upstream placed the assigment before this section. - regulator: lm363x: Fix off-by-one n_voltages for lm3632 ldo_vpos/ldo_vneg (bsc#1051510). - Remove patches.kabi/kABI-fixes-for-qla2xxx-Fix-inconsistent-DMA-mem-allo.patch The qla2xxx driver has been whitelisted by 1d5e8aad6de2 ("kabi/severities: ignore qla2xxx as all symbols are internal") - Revert "mwifiex: fix system hang problem after resume" (bsc#1051510). - rtlwifi: Fix file release memory leak (bsc#1111666). - scsi: qla2xxx: Add 28xx flash primary/secondary status/image mechanism (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Add Device ID for ISP28XX (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Add error handling for PLOGI ELS passthrough (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Add First Burst support for FC-NVMe devices (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Add fw_attr and port_no SysFS node (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Add new FW dump template entry types (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Add pci function reset support (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Add protection mask module parameters (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Add Serdes support for ISP28XX (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Add support for multiple fwdump templates/segments (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Add support for setting port speed (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Allow NVMe IO to resume with short cable pull (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: allow session delete to finish before create (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Always check the qla2x00_wait_for_hba_online() return value (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Avoid PCI IRQ affinity mapping when multiqueue is not supported (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: avoid printf format warning (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Avoid that Coverity complains about dereferencing a NULL rport pointer (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Avoid that lockdep complains about unsafe locking in tcm_qla2xxx_close_session() (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Avoid that qla2x00_mem_free() crashes if called twice (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Capture FW dump on MPI heartbeat stop event (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Change abort wait_loop from msleep to wait_event_timeout (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Change data_dsd into an array (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Change default ZIO threshold (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Change the return type of qla24xx_read_flash_data() (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Change the return type of qla2x00_update_ms_fdmi_iocb() into void (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Check for FW started flag before aborting (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: check for kstrtol() failure (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Check for MB timeout while capturing ISP27/28xx FW dump (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Check secondary image if reading the primary image fails (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Check the PCI info string output buffer size (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Check the size of firmware data structures at compile time (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Cleanup fcport memory to prevent leak (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Cleanup redundant qla2x00_abort_all_cmds during unload (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Cleanups for NVRAM/Flash read/write path (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: cleanup trace buffer initialization (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Complain if a command is released that is owned by the firmware (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Complain if a mailbox command times out (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Complain if a soft reset fails (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Complain if parsing the version string fails (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Complain if sp->done() is not called from the completion path (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Complain if waiting for pending commands times out (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Complain loudly about reference count underflow (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Correct error handling during initialization failures (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Correction and improvement to fwdt processing (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Correctly report max/min supported speeds (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: deadlock by configfs_depend_item (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Declare fourth qla2x00_set_model_info() argument const (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Declare local symbols static (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Declare qla24xx_build_scsi_crc_2_iocbs() static (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Declare qla2x00_find_new_loop_id() static (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Declare qla_tgt_cmd.cdb const (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Declare the fourth ql_dump_buffer() argument const (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Disable T10-DIF feature with FC-NVMe during probe (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Do not corrupt vha->plogi_ack_list (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Downgrade driver to 10.01.00.19-k There are upstream bug reports against 10.01.00.19-k which haven't been resolved. Also the newer version failed to get a proper review. For time being it's better to got with the older version and do not introduce new bugs. - scsi: qla2xxx: Dual FCP-NVMe target port support (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Enable type checking for the SRB free and done callback functions (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix abort timeout race condition (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix a NULL pointer dereference (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix a qla24xx_enable_msix() error path (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix a race condition between aborting and completing a SCSI command (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix a recently introduced kernel warning (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix a small typo in qla_bsg.c (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix code indentation for qla27xx_fwdt_entry (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix comment alignment in qla_bsg.c (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix comment in MODULE_PARM_DESC in qla2xxx (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix different size DMA Alloc/Unmap (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix DMA error when the DIF sg buffer crosses 4GB boundary (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix DMA unmap leak (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix driver reload for ISP82xx (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix driver unload when FC-NVMe LUNs are connected (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: fix fcport null pointer access (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix flash read for Qlogic ISPs (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix formatting of pointer types (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix fw dump corruption (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix fw options handle eh_bus_reset() (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix gnl.l memory leak on adapter init failure (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix hang in fcport delete path (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix hardirq-unsafe locking (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix hardlockup in abort command during driver remove (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix kernel crash after disconnecting NVMe devices (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix LUN discovery if loop id is not assigned yet by firmware (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix message indicating vectors used by driver (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix N2N link reset (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix N2N link up fail (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix Nport ID display value (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix NULL pointer crash due to stale CPUID (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix NVME cmd and LS cmd timeout race condition (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix NVMe port discovery after a short device port loss (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix panic from use after free in qla2x00_async_tm_cmd (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix possible fcport null-pointer dereferences (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix premature timer expiration (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix qla24xx_process_bidir_cmd() (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix race conditions in the code for aborting SCSI commands (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix read offset in qla24xx_load_risc_flash() (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix Relogin to prevent modifying scan_state flag (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix routine qla27xx_dump_{mpi|ram}() (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix session cleanup hang (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix session lookup in qlt_abort_work() (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: fix spelling mistake "alredy" -> "already" (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: fix spelling mistake "initializatin" -> "initialization" (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix SRB allocation flag to avoid sleeping in IRQ context (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix stale mem access on driver unload (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix stale session (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix stuck login session (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix unbound sleep in fcport delete path (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix unload when NVMe devices are configured (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Fix use-after-free issues in qla2xxx_qpair_sp_free_dma() (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: flush IO on chip reset or sess delete (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Further limit FLASH region write access from SysFS (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Improve Linux kernel coding style conformance (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Improve logging for scan thread (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Include the <asm/unaligned.h> header file from qla_dsd.h (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Increase the max_sgl_segments to 1024 (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Increase the size of the mailbox arrays from 4 to 8 (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Inline the qla2x00_fcport_event_handler() function (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Insert spaces where required (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Introduce qla2x00_els_dcmd2_free() (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Introduce qla2xxx_get_next_handle() (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Introduce the be_id_t and le_id_t data types for FC src/dst IDs (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Introduce the dsd32 and dsd64 data structures (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Introduce the function qla2xxx_init_sp() (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Leave a blank line after declarations (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Let the compiler check the type of the SCSI command context pointer (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Log the status code if a firmware command fails (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Make it explicit that ELS pass-through IOCBs use little endian (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Make qla24xx_async_abort_cmd() static (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Make qla2x00_abort_srb() again decrease the sp reference count (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Make qla2x00_mem_free() easier to verify (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Make qla2x00_process_response_queue() easier to read (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Make qlt_handle_abts_completion() more robust (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Make sure that aborted commands are freed (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Modify NVMe include directives (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Move debug messages before sending srb preventing panic (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: move IO flush to the front of NVME rport unregistration (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Move marker request behind QPair (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Move qla2x00_clear_loop_id() from qla_inline.h into qla_init.c (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Move qla2x00_is_reserved_id() from qla_inline.h into qla_init.c (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Move qla2x00_set_fcport_state() from a .h into a .c file (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Move qla2x00_set_reserved_loop_ids() definition (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Move the <linux/io-64-nonatomic-lo-hi.h> include directive (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Move the port_state_str definition from a .h to a .c file (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: no need to check return value of debugfs_create functions (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: on session delete, return nvme cmd (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Optimize NPIV tear down process (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Pass little-endian values to the firmware (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Prevent multiple ADISC commands per session (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Prevent SysFS access when chip is down (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: qla2x00_alloc_fw_dump: set ha->eft (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Really fix qla2xxx_eh_abort() (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Reduce the number of casts in GID list code (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Reduce the number of forward declarations (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Reduce the scope of three local variables in qla2xxx_queuecommand() (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Reject EH_{abort|device_reset|target_request} (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Remove a comment that refers to the SCSI host lock (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Remove an include directive from qla_mr.c (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Remove a set-but-not-used variable (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Remove a superfluous forward declaration (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Remove a superfluous pointer check (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Remove dead code (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: remove double assignment in qla2x00_update_fcport (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Remove FW default template (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Remove qla_tgt_cmd.data_work and qla_tgt_cmd.data_work_free (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Remove qla_tgt_cmd.released (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: remove redundant null check on pointer sess (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Remove set but not used variable 'ptr_dma' (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Remove superfluous sts_entry_* casts (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Remove the fcport test from qla_nvme_abort_work() (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Remove two superfluous casts (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Remove two superfluous if-tests (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Remove two superfluous tests (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Remove unnecessary locking from the target code (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Remove unnecessary null check (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Remove unreachable code from qla83xx_idc_lock() (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Remove useless set memory to zero use memset() (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Replace vmalloc + memset with vzalloc (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Report invalid mailbox status codes (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Report the firmware status code if a mailbox command fails (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Reset the FCF_ASYNC_{SENT|ACTIVE} flags (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Restore FAWWPN of Physical Port only for loop down (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Retry fabric Scan on IOCB queue full (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Rework key encoding in qlt_find_host_by_d_id() (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Secure flash update support for ISP28XX (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Set remote port devloss timeout to 0 (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Set remove flag for all VP (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Set the qpair in SRB to NULL when SRB is released (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Set the responder mode if appropriate for ELS pass-through IOCBs (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Set the SCSI command result before calling the command done (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Silence fwdump template message (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Silence Successful ELS IOCB message (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Simplification of register address used in qla_tmpl.c (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Simplify a debug statement (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Simplify conditional check again (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Simplify qla24xx_abort_sp_done() (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Simplify qla24xx_async_abort_cmd() (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Simplify qlt_lport_dump() (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Simplify qlt_send_term_imm_notif() (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Skip FW dump on LOOP initialization error (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Suppress a Coveritiy complaint about integer overflow (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Suppress multiple Coverity complaint about out-of-bounds accesses (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: target: Fix offline port handling and host reset handling (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Uninline qla2x00_init_timer() (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Unregister resources in the opposite order of the registration order (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Update driver version to 10.00.00.13-k (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Update driver version to 10.00.00.14-k (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Update driver version to 10.01.00.15-k (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Update driver version to 10.01.00.16-k (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Update driver version to 10.01.00.18-k (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Update driver version to 10.01.00.19-k (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Update driver version to 10.01.00.20-k (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Update flash read/write routine (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Use an on-stack completion in qla24xx_control_vp() (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Use ARRAY_SIZE() in the definition of QLA_LAST_SPEED (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Use common update-firmware-options routine for ISP27xx+ (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Use complete switch scan for RSCN events (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Use Correct index for Q-Pair array (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Use dma_pool_zalloc() (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Use get/put_unaligned where appropriate (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Use __le64 instead of uint32_t for sending DMA addresses to firmware (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Use memcpy() and strlcpy() instead of strcpy() and strncpy() (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Use mutex protection during qla2x00_sysfs_read_fw_dump() (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Use strlcpy() instead of strncpy() (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Use tabs instead of spaces for indentation (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Use tabs to indent code (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: qla2xxx: Verify locking assumptions at runtime (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: scsi_dh_rdac: zero cdb in send_mode_select() (bsc#1149313). - scsi: scsi_transport_fc: nvme: display FC-NVMe port roles (bsc#1123034 bsc#1131304 bsc#1127988). - scsi: tcm_qla2xxx: Minimize #include directives (bsc#1123034 bsc#1131304 bsc#1127988). - scsi_transport_fc: complete requests from ->timeout (bsc#1142076). - sctp: fix the transport error_count check (networking-stable-19_08_21). - secure boot lockdown: Fix-up backport of /dev/mem access restriction The upstream-submitted patch set has evolved over time, align our patches (contents and description) to reflect the current status as far as /dev/mem access is concerned. - sky2: Disable MSI on yet another ASUS boards (P6Xxxx) (bsc#1051510). - slip: make slhc_free() silently accept an error pointer (bsc#1051510). - slip: sl_alloc(): remove unused parameter "dev_t line" (bsc#1051510). - spi: spi-fsl-dspi: Exit the ISR with IRQ_NONE when it's not ours (bsc#1111666). - SUNRPC fix regression in umount of a secure mount (git-fixes). - SUNRPC: Handle connection breakages correctly in call_status() (git-fixes). - SUNRPC/nfs: Fix return value for nfs4_callback_compound() (git-fixes). - supported.conf: Add vfio_ccw (bsc#1151192 jsc#SLE-6138). - supported.conf: Mark vfio_ccw supported by SUSE, because bugs can be routed to IBM via SUSE support (jsc#SLE-6138, bsc#1151192). - tcp: make sure EPOLLOUT wont be missed (networking-stable-19_08_28). - team: Add vlan tx offload to hw_enc_features (bsc#1051510). - team: Add vlan tx offload to hw_enc_features (networking-stable-19_08_21). - tpm_tis_core: Set TPM_CHIP_FLAG_IRQ before probing for interrupts (bsc#1082555). - tty: serial: fsl_lpuart: Use appropriate lpuart32_* I/O funcs (bsc#1111666). - tun: fix use-after-free when register netdev failed (bsc#1111666). - Update patches.suse/ext4-unsupported-features.patch (SLE-8615, bsc#1149651, SLE-9243). - Update patches.suse/powerpc-powernv-Return-for-invalid-IMC-domain.patch (bsc#1054914, git-fixes). - Update s390 config files (bsc#1151192). - VFIO_CCW=m - S390_CCW_IOMMU=y - USB: usbcore: Fix slab-out-of-bounds bug during device reset (bsc#1051510). - vhost/test: fix build for vhost test (bsc#1111666). - video: ssd1307fb: Start page range at page_offset (bsc#1113722) - wcn36xx: use dynamic allocation for large variables (bsc#1111666). - x86/CPU/AMD: Clear RDRAND CPUID bit on AMD family 15h/16h (bsc#1114279). - x86/fpu: Add FPU state copying quirk to handle XRSTOR failure on Intel Skylake CPUs (bsc#1151955). - x86/tls: Fix possible spectre-v1 in do_get_thread_area() (bsc#1114279). - xen/netback: Reset nr_frags before freeing skb (networking-stable-19_08_21). - xen-netfront: do not assume sk_buff_head list is empty in error handling (bsc#1065600). - xen-netfront: do not use ~0U as error return value for xennet_fill_frags() (bsc#1065600). - xen/xenbus: fix self-deadlock after killing user process (bsc#1065600). - xsk: avoid store-tearing when assigning queues (bsc#1111666). - xsk: avoid store-tearing when assigning umem (bsc#1111666). Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2308=1 Package List: - openSUSE Leap 15.1 (x86_64): kernel-debug-4.12.14-lp151.28.20.1 kernel-debug-base-4.12.14-lp151.28.20.1 kernel-debug-base-debuginfo-4.12.14-lp151.28.20.1 kernel-debug-debuginfo-4.12.14-lp151.28.20.1 kernel-debug-debugsource-4.12.14-lp151.28.20.1 kernel-debug-devel-4.12.14-lp151.28.20.1 kernel-debug-devel-debuginfo-4.12.14-lp151.28.20.1 kernel-default-4.12.14-lp151.28.20.1 kernel-default-base-4.12.14-lp151.28.20.1 kernel-default-base-debuginfo-4.12.14-lp151.28.20.1 kernel-default-debuginfo-4.12.14-lp151.28.20.1 kernel-default-debugsource-4.12.14-lp151.28.20.1 kernel-default-devel-4.12.14-lp151.28.20.1 kernel-default-devel-debuginfo-4.12.14-lp151.28.20.1 kernel-kvmsmall-4.12.14-lp151.28.20.1 kernel-kvmsmall-base-4.12.14-lp151.28.20.1 kernel-kvmsmall-base-debuginfo-4.12.14-lp151.28.20.1 kernel-kvmsmall-debuginfo-4.12.14-lp151.28.20.1 kernel-kvmsmall-debugsource-4.12.14-lp151.28.20.1 kernel-kvmsmall-devel-4.12.14-lp151.28.20.1 kernel-kvmsmall-devel-debuginfo-4.12.14-lp151.28.20.1 kernel-obs-build-4.12.14-lp151.28.20.1 kernel-obs-build-debugsource-4.12.14-lp151.28.20.1 kernel-obs-qa-4.12.14-lp151.28.20.1 kernel-syms-4.12.14-lp151.28.20.1 kernel-vanilla-4.12.14-lp151.28.20.1 kernel-vanilla-base-4.12.14-lp151.28.20.1 kernel-vanilla-base-debuginfo-4.12.14-lp151.28.20.1 kernel-vanilla-debuginfo-4.12.14-lp151.28.20.1 kernel-vanilla-debugsource-4.12.14-lp151.28.20.1 kernel-vanilla-devel-4.12.14-lp151.28.20.1 kernel-vanilla-devel-debuginfo-4.12.14-lp151.28.20.1 - openSUSE Leap 15.1 (noarch): kernel-devel-4.12.14-lp151.28.20.1 kernel-docs-4.12.14-lp151.28.20.1 kernel-docs-html-4.12.14-lp151.28.20.1 kernel-macros-4.12.14-lp151.28.20.1 kernel-source-4.12.14-lp151.28.20.1 kernel-source-vanilla-4.12.14-lp151.28.20.1 References: https://www.suse.com/security/cve/CVE-2017-18595.html https://www.suse.com/security/cve/CVE-2019-14821.html https://www.suse.com/security/cve/CVE-2019-15291.html https://www.suse.com/security/cve/CVE-2019-9506.html https://bugzilla.suse.com/1051510 https://bugzilla.suse.com/1054914 https://bugzilla.suse.com/1055117 https://bugzilla.suse.com/1061840 https://bugzilla.suse.com/1065600 https://bugzilla.suse.com/1065729 https://bugzilla.suse.com/1071995 https://bugzilla.suse.com/1082555 https://bugzilla.suse.com/1104967 https://bugzilla.suse.com/1109158 https://bugzilla.suse.com/1111666 https://bugzilla.suse.com/1113722 https://bugzilla.suse.com/1114279 https://bugzilla.suse.com/1119086 https://bugzilla.suse.com/1123034 https://bugzilla.suse.com/1127988 https://bugzilla.suse.com/1131304 https://bugzilla.suse.com/1137069 https://bugzilla.suse.com/1137865 https://bugzilla.suse.com/1137959 https://bugzilla.suse.com/1137982 https://bugzilla.suse.com/1140155 https://bugzilla.suse.com/1141013 https://bugzilla.suse.com/1142076 https://bugzilla.suse.com/1142635 https://bugzilla.suse.com/1146042 https://bugzilla.suse.com/1146540 https://bugzilla.suse.com/1146664 https://bugzilla.suse.com/1148133 https://bugzilla.suse.com/1148712 https://bugzilla.suse.com/1148868 https://bugzilla.suse.com/1149313 https://bugzilla.suse.com/1149446 https://bugzilla.suse.com/1149555 https://bugzilla.suse.com/1149651 https://bugzilla.suse.com/1150305 https://bugzilla.suse.com/1150381 https://bugzilla.suse.com/1150423 https://bugzilla.suse.com/1150846 https://bugzilla.suse.com/1151067 https://bugzilla.suse.com/1151192 https://bugzilla.suse.com/1151350 https://bugzilla.suse.com/1151610 https://bugzilla.suse.com/1151661 https://bugzilla.suse.com/1151662 https://bugzilla.suse.com/1151667 https://bugzilla.suse.com/1151680 https://bugzilla.suse.com/1151891 https://bugzilla.suse.com/1151955 https://bugzilla.suse.com/1152024 https://bugzilla.suse.com/1152025 https://bugzilla.suse.com/1152026 https://bugzilla.suse.com/1152161 https://bugzilla.suse.com/1152187 https://bugzilla.suse.com/1152243 https://bugzilla.suse.com/1152325 https://bugzilla.suse.com/1152457 https://bugzilla.suse.com/1152460 https://bugzilla.suse.com/1152466 https://bugzilla.suse.com/1152525 https://bugzilla.suse.com/1152972 https://bugzilla.suse.com/1152974 https://bugzilla.suse.com/1152975

1 0

openSUSE-RU-2019:2305-1: moderate: Recommended update for exo, libgarcon, libxfce4ui, libxfce4util, perl-ExtUtils-Depends, perl-ExtUtils-PkgConfig, perl-Glib, thunar, xfce4-dev-tools, xfce4-panel, xfconf
by maintenance＠opensuse.org 10 Oct '19

10 Oct '19

openSUSE Recommended Update: Recommended update for exo, libgarcon, libxfce4ui, libxfce4util, perl-ExtUtils-Depends, perl-ExtUtils-PkgConfig, perl-Glib, thunar, xfce4-dev-tools, xfce4-panel, xfconf ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2305-1 Rating: moderate References: #1011518 #1047218 #1135362 #637694 #687874 #760492 #764310 #767145 #829113 #860479 #952324 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that solves one vulnerability and has 10 fixes is now available. Description: This update ships exo, libgarcon, libxfce4ui, libxfce4util, perl-ExtUtils-Depends, perl-ExtUtils-PkgConfig, perl-Glib, thunar, xfce4-dev-tools, xfce4-panel, xfconf to the SUSE Linux Enterprise 12 SP2 PackageHub repositories. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2019-2305=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): exo-data-0.12.0-2.1 exo-devel-0.12.0-2.1 exo-helpers-0.12.0-2.1 exo-tools-0.12.0-2.1 libexo-1-0-0.12.0-2.1 libexo-2-0-0.12.0-2.1 libgarcon-1-0-0.6.1-2.1 libgarcon-1-0-debuginfo-0.6.1-2.1 libgarcon-debugsource-0.6.1-2.1 libgarcon-devel-0.6.1-2.1 libthunarx-2-0-1.6.14-2.1 libthunarx-2-0-debuginfo-1.6.14-2.1 libxfce4panel-1_0-4-4.12.2-2.1 libxfce4panel-1_0-4-debuginfo-4.12.2-2.1 libxfce4panel-2_0-4-4.12.2-2.1 libxfce4panel-2_0-4-debuginfo-4.12.2-2.1 libxfce4ui-1-0-4.12.1-2.1 libxfce4ui-1-0-debuginfo-4.12.1-2.1 libxfce4ui-2-0-4.12.1-2.1 libxfce4ui-2-0-debuginfo-4.12.1-2.1 libxfce4ui-debugsource-4.12.1-2.1 libxfce4ui-devel-4.12.1-2.1 libxfce4ui-tools-4.12.1-2.1 libxfce4ui-tools-debuginfo-4.12.1-2.1 libxfce4util-debugsource-4.12.1-2.1 libxfce4util-devel-4.12.1-2.1 libxfce4util-tools-4.12.1-2.1 libxfce4util-tools-debuginfo-4.12.1-2.1 libxfce4util7-4.12.1-2.1 libxfce4util7-debuginfo-4.12.1-2.1 libxfconf-0-2-4.12.1-2.1 libxfconf-0-2-debuginfo-4.12.1-2.1 libxfconf-devel-4.12.1-2.1 perl-Glib-1.326-2.1 perl-Glib-debuginfo-1.326-2.1 perl-Glib-debugsource-1.326-2.1 perl-xfconf-4.12.1-2.1 perl-xfconf-debuginfo-4.12.1-2.1 thunar-1.6.14-2.1 thunar-debuginfo-1.6.14-2.1 thunar-debugsource-1.6.14-2.1 thunar-devel-1.6.14-2.1 xfce4-dev-tools-4.12.0-2.1 xfce4-dev-tools-debuginfo-4.12.0-2.1 xfce4-dev-tools-debugsource-4.12.0-2.1 xfce4-panel-4.12.2-2.1 xfce4-panel-debuginfo-4.12.2-2.1 xfce4-panel-debugsource-4.12.2-2.1 xfce4-panel-devel-4.12.2-2.1 xfconf-4.12.1-2.1 xfconf-debuginfo-4.12.1-2.1 xfconf-debugsource-4.12.1-2.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): exo-branding-upstream-0.12.0-2.1 exo-lang-0.12.0-2.1 libgarcon-branding-upstream-0.6.1-2.1 libgarcon-data-0.6.1-2.1 libgarcon-doc-0.6.1-2.1 libgarcon-lang-0.6.1-2.1 libxfce4ui-branding-upstream-4.12.1-2.1 libxfce4ui-doc-4.12.1-2.1 libxfce4ui-lang-4.12.1-2.1 libxfce4util-lang-4.12.1-2.1 perl-ExtUtils-Depends-0.405-2.1 perl-ExtUtils-PkgConfig-1.160000-2.1 thunar-lang-1.6.14-2.1 xfce4-panel-branding-upstream-4.12.2-2.1 xfce4-panel-lang-4.12.2-2.1 xfconf-lang-4.12.1-2.1 References: https://www.suse.com/security/cve/CVE-2011-1588.html https://bugzilla.suse.com/1011518 https://bugzilla.suse.com/1047218 https://bugzilla.suse.com/1135362 https://bugzilla.suse.com/637694 https://bugzilla.suse.com/687874 https://bugzilla.suse.com/760492 https://bugzilla.suse.com/764310 https://bugzilla.suse.com/767145 https://bugzilla.suse.com/829113 https://bugzilla.suse.com/860479 https://bugzilla.suse.com/952324

1 0

openSUSE-SU-2019:2306-1: important: Security update for libopenmpt
by opensuse-security＠opensuse.org 10 Oct '19

10 Oct '19

openSUSE Security Update: Security update for libopenmpt ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2306-1 Rating: important References: #1153102 Cross-References: CVE-2019-17113 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libopenmpt to version 0.3.19 fixes the following issues: - CVE-2019-17113: Fixed a buffer overflow in ModPlug_InstrumentName and ModPlug_SampleName (bsc#1153102). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2306=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libmodplug-devel-0.3.19-lp151.2.6.1 libmodplug1-0.3.19-lp151.2.6.1 libmodplug1-debuginfo-0.3.19-lp151.2.6.1 libopenmpt-debugsource-0.3.19-lp151.2.6.1 libopenmpt-devel-0.3.19-lp151.2.6.1 libopenmpt0-0.3.19-lp151.2.6.1 libopenmpt0-debuginfo-0.3.19-lp151.2.6.1 libopenmpt_modplug1-0.3.19-lp151.2.6.1 libopenmpt_modplug1-debuginfo-0.3.19-lp151.2.6.1 openmpt123-0.3.19-lp151.2.6.1 openmpt123-debuginfo-0.3.19-lp151.2.6.1 - openSUSE Leap 15.1 (x86_64): libmodplug1-32bit-0.3.19-lp151.2.6.1 libmodplug1-32bit-debuginfo-0.3.19-lp151.2.6.1 libopenmpt0-32bit-0.3.19-lp151.2.6.1 libopenmpt0-32bit-debuginfo-0.3.19-lp151.2.6.1 libopenmpt_modplug1-32bit-0.3.19-lp151.2.6.1 libopenmpt_modplug1-32bit-debuginfo-0.3.19-lp151.2.6.1 References: https://www.suse.com/security/cve/CVE-2019-17113.html https://bugzilla.suse.com/1153102

1 0

openSUSE-RU-2019:2303-1: Recommended update for kfilemetadata5
by maintenance＠opensuse.org 10 Oct '19

10 Oct '19

openSUSE Recommended Update: Recommended update for kfilemetadata5 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2303-1 Rating: low References: Affected Products: openSUSE Backports SLE-15-SP1 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for kfilemetadata5 fixes the following issue: kfilemetadata5 is now built with ffmpeg-4 instead of ffmpeg-3. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2303=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-2303=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): kfilemetadata5-5.55.0-bp151.3.2.1 kfilemetadata5-debuginfo-5.55.0-bp151.3.2.1 kfilemetadata5-debugsource-5.55.0-bp151.3.2.1 kfilemetadata5-devel-5.55.0-bp151.3.2.1 - openSUSE Backports SLE-15-SP1 (aarch64_ilp32): kfilemetadata5-64bit-5.55.0-bp151.3.2.1 kfilemetadata5-64bit-debuginfo-5.55.0-bp151.3.2.1 - openSUSE Backports SLE-15-SP1 (noarch): kfilemetadata5-lang-5.55.0-bp151.3.2.1 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): kfilemetadata5-5.45.0-bp150.3.2.1 kfilemetadata5-devel-5.45.0-bp150.3.2.1 - openSUSE Backports SLE-15 (aarch64_ilp32): kfilemetadata5-64bit-5.45.0-bp150.3.2.1 - openSUSE Backports SLE-15 (noarch): kfilemetadata5-lang-5.45.0-bp150.3.2.1 References:

1 0

openSUSE-RU-2019:2302-1: important: Recommended update for cups-filters
by maintenance＠opensuse.org 09 Oct '19

09 Oct '19

openSUSE Recommended Update: Recommended update for cups-filters ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2302-1 Rating: important References: #1152720 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for cups-filters fixes the following issues: - Make cups-filters work with Ghostscript 9.27 and later * foomatic-rip: Changed Ghostscript call to count pages in a PDF file to use "runpdfbegin" and not the undocumented Ghostscript internal "pdfdict" (bsc#1152720) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2302=1 Package List: - openSUSE Leap 15.1 (x86_64): cups-filters-1.20.3-lp151.3.3.1 cups-filters-debuginfo-1.20.3-lp151.3.3.1 cups-filters-debugsource-1.20.3-lp151.3.3.1 cups-filters-devel-1.20.3-lp151.3.3.1 References: https://bugzilla.suse.com/1152720

1 0

openSUSE-RU-2019:2301-1: important: Recommended update for cups-filters
by maintenance＠opensuse.org 09 Oct '19

09 Oct '19

openSUSE Recommended Update: Recommended update for cups-filters ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2301-1 Rating: important References: #1152720 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for cups-filters fixes the following issues: - Make cups-filters work with Ghostscript 9.27 and later * foomatic-rip: Changed Ghostscript call to count pages in a PDF file to use "runpdfbegin" and not the undocumented Ghostscript internal "pdfdict" (bsc#1152720) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2301=1 Package List: - openSUSE Leap 15.0 (x86_64): cups-filters-1.20.3-lp150.2.3.1 cups-filters-debuginfo-1.20.3-lp150.2.3.1 cups-filters-debugsource-1.20.3-lp150.2.3.1 cups-filters-devel-1.20.3-lp150.2.3.1 References: https://bugzilla.suse.com/1152720

1 0

openSUSE-SU-2019:2300-1: moderate: Security update for sqlite3
by opensuse-security＠opensuse.org 08 Oct '19

08 Oct '19

openSUSE Security Update: Security update for sqlite3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2300-1 Rating: moderate References: #1150137 Cross-References: CVE-2019-16168 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for sqlite3 fixes the following issues: Security issue fixed: - CVE-2019-16168: Fixed improper validation of sqlite_stat1 field that could lead to denial of service (bsc#1150137). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2300=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libsqlite3-0-3.28.0-lp151.2.3.1 libsqlite3-0-debuginfo-3.28.0-lp151.2.3.1 sqlite3-3.28.0-lp151.2.3.1 sqlite3-debuginfo-3.28.0-lp151.2.3.1 sqlite3-debugsource-3.28.0-lp151.2.3.1 sqlite3-devel-3.28.0-lp151.2.3.1 - openSUSE Leap 15.1 (x86_64): libsqlite3-0-32bit-3.28.0-lp151.2.3.1 libsqlite3-0-32bit-debuginfo-3.28.0-lp151.2.3.1 - openSUSE Leap 15.1 (noarch): sqlite3-doc-3.28.0-lp151.2.3.1 References: https://www.suse.com/security/cve/CVE-2019-16168.html https://bugzilla.suse.com/1150137

1 0

openSUSE-RU-2019:2299-1: moderate: Recommended update for perf
by maintenance＠opensuse.org 08 Oct '19

08 Oct '19

openSUSE Recommended Update: Recommended update for perf ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2299-1 Rating: moderate References: #1117114 #1147003 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for perf contains the following fixes: - Fix failure of perf c2c report if CPUs are offline. (bsc#1147003) - Fix core dump in perf stat -e on Cavium. (bsc#1117114) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2299=1 Package List: - openSUSE Leap 15.1 (x86_64): perf-4.12.14-lp151.17.9.1 perf-debuginfo-4.12.14-lp151.17.9.1 perf-debugsource-4.12.14-lp151.17.9.1 References: https://bugzilla.suse.com/1117114 https://bugzilla.suse.com/1147003

1 0

openSUSE-RU-2019:2297-1: moderate: Recommended update for Salt
by maintenance＠opensuse.org 08 Oct '19

08 Oct '19

openSUSE Recommended Update: Recommended update for Salt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2297-1 Rating: moderate References: #1140912 #1150447 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update fixes the following issues: salt: - Fix memory leak produced by batch async find_jobs mechanism (bsc#1140912) - Files in salt-formulas folder can now be read and excuted by others (bsc#1150447) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2297=1 Package List: - openSUSE Leap 15.0 (noarch): salt-bash-completion-2019.2.0-lp150.3.36.1 salt-fish-completion-2019.2.0-lp150.3.36.1 salt-zsh-completion-2019.2.0-lp150.3.36.1 - openSUSE Leap 15.0 (x86_64): python2-salt-2019.2.0-lp150.3.36.1 python3-salt-2019.2.0-lp150.3.36.1 salt-2019.2.0-lp150.3.36.1 salt-api-2019.2.0-lp150.3.36.1 salt-cloud-2019.2.0-lp150.3.36.1 salt-doc-2019.2.0-lp150.3.36.1 salt-master-2019.2.0-lp150.3.36.1 salt-minion-2019.2.0-lp150.3.36.1 salt-proxy-2019.2.0-lp150.3.36.1 salt-ssh-2019.2.0-lp150.3.36.1 salt-standalone-formulas-configuration-2019.2.0-lp150.3.36.1 salt-syndic-2019.2.0-lp150.3.36.1 References: https://bugzilla.suse.com/1140912 https://bugzilla.suse.com/1150447

1 0

openSUSE-SU-2019:2298-1: moderate: Security update for sqlite3
by opensuse-security＠opensuse.org 08 Oct '19

08 Oct '19

openSUSE Security Update: Security update for sqlite3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2298-1 Rating: moderate References: #1150137 Cross-References: CVE-2019-16168 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for sqlite3 fixes the following issues: Security issue fixed: - CVE-2019-16168: Fixed improper validation of sqlite_stat1 field that could lead to denial of service (bsc#1150137). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2298=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libsqlite3-0-3.28.0-lp150.2.9.1 libsqlite3-0-debuginfo-3.28.0-lp150.2.9.1 sqlite3-3.28.0-lp150.2.9.1 sqlite3-debuginfo-3.28.0-lp150.2.9.1 sqlite3-debugsource-3.28.0-lp150.2.9.1 sqlite3-devel-3.28.0-lp150.2.9.1 - openSUSE Leap 15.0 (x86_64): libsqlite3-0-32bit-3.28.0-lp150.2.9.1 libsqlite3-0-32bit-debuginfo-3.28.0-lp150.2.9.1 - openSUSE Leap 15.0 (noarch): sqlite3-doc-3.28.0-lp150.2.9.1 References: https://www.suse.com/security/cve/CVE-2019-16168.html https://bugzilla.suse.com/1150137

1 0

openSUSE-RU-2019:2296-1: moderate: Recommended update for ucode-intel
by maintenance＠opensuse.org 08 Oct '19

08 Oct '19

openSUSE Recommended Update: Recommended update for ucode-intel ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2296-1 Rating: moderate References: #1138185 #1151232 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for ucode-intel fixes the following issues: The Intel CPU Microcode was updated to the 20190918 bugfix release (bsc#1151232 bsc#1138185): Processor Identifier Version Products Model Stepping F-MO-S/PI Old->New ---- updated platforms ------------------------------------ BDW-U/Y E0/F0 6-3d-4/c0 0000002d->0000002e Core Gen5 HSX-EX E0 6-3f-4/80 00000014->00000016 Xeon E7 v3 BDW-H/E3 E0/G0 6-47-1/22 00000020->00000021 Core Gen5 BDX-ML B0/M0/R0 6-4f-1/ef 0b000036->0b000038 Xeon E5/E7 v4; Core i7-69xx/68xx BDX-DE V1 6-56-2/10 0000001a->0000001c Xeon D-1520/40 BDX-DE V2/3 6-56-3/10 07000017->07000019 Xeon D-1518/19/21/27/28/31/33/37/41/48, Pentium D1507/08/09/17/19 BDX-DE Y0 6-56-4/10 0f000015->0f000017 Xeon D-1557/59/67/71/77/81/87 BDX-NS A0 6-56-5/10 0e00000d->0e00000f Xeon D-1513N/23/33/43/53 SKX-SP H0/M0/U0 6-55-4/b7 0200005e->00000064 Xeon Scalable SKX-D M1 6-55-4/b7 0200005e->00000064 Xeon D-21xx CLX-SP B1 6-55-7/bf 05000021->0500002b Xeon Scalable Gen2 This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2296=1 Package List: - openSUSE Leap 15.1 (x86_64): ucode-intel-20190918-lp151.2.6.1 References: https://bugzilla.suse.com/1138185 https://bugzilla.suse.com/1151232

1 0

openSUSE-SU-2019:2294-1: moderate: Security update for rust
by opensuse-security＠opensuse.org 08 Oct '19

08 Oct '19

openSUSE Security Update: Security update for rust ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2294-1 Rating: moderate References: #1096945 #1100691 #1133283 #1134978 Cross-References: CVE-2018-1000622 CVE-2019-12083 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves two vulnerabilities and has two fixes is now available. Description: This update for rust fixes the following issues: Rust was updated to version 1.36.0. Security issues fixed: - CVE-2019-12083: a standard method can be overridden violating Rust's safety guarantees and causing memory unsafety (bsc#1134978) - CVE-2018-1000622: rustdoc loads plugins from world writable directory allowing for arbitrary code execution (bsc#1100691) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2294=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): cargo-1.36.0-lp151.5.8.1 cargo-debuginfo-1.36.0-lp151.5.8.1 clippy-1.36.0-lp151.5.8.1 clippy-debuginfo-1.36.0-lp151.5.8.1 rls-1.36.0-lp151.5.8.1 rls-debuginfo-1.36.0-lp151.5.8.1 rust-1.36.0-lp151.5.8.1 rust-analysis-1.36.0-lp151.5.8.1 rust-debuginfo-1.36.0-lp151.5.8.1 rust-debugsource-1.36.0-lp151.5.8.1 rust-doc-1.36.0-lp151.5.8.1 rust-gdb-1.36.0-lp151.5.8.1 rust-std-static-1.36.0-lp151.5.8.1 rustfmt-1.36.0-lp151.5.8.1 rustfmt-debuginfo-1.36.0-lp151.5.8.1 - openSUSE Leap 15.1 (x86_64): rust-cbindgen-0.8.7-lp151.5.2 rust-cbindgen-debuginfo-0.8.7-lp151.5.2 - openSUSE Leap 15.1 (noarch): cargo-doc-1.36.0-lp151.5.8.1 rust-src-1.36.0-lp151.5.8.1 References: https://www.suse.com/security/cve/CVE-2018-1000622.html https://www.suse.com/security/cve/CVE-2019-12083.html https://bugzilla.suse.com/1096945 https://bugzilla.suse.com/1100691 https://bugzilla.suse.com/1133283 https://bugzilla.suse.com/1134978

1 0

openSUSE-RU-2019:2295-1: moderate: Recommended update for php7-APCu
by maintenance＠opensuse.org 08 Oct '19

08 Oct '19

openSUSE Recommended Update: Recommended update for php7-APCu ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2295-1 Rating: moderate References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for php7-APCu fixes the following issues: - Build with php72 on Package Hub Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2019-2295=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): php7-APCu-5.1.15-5.1 References:

1 0

openSUSE-RU-2019:2293-1: moderate: Recommended update for charliecloud
by maintenance＠opensuse.org 08 Oct '19

08 Oct '19

openSUSE Recommended Update: Recommended update for charliecloud ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2293-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for charliecloud fixes the following issues: charliecloud was updated to version 0.11: - ch-run: /etc/resolv.conf on the host is now optional - ch-grow: support ARG instruction - build now does not infinite loop if no Python installed - miscellaneous bug fixes, and documentation and test suite improvements Update to version 0.10: - New builder ch-grow - ch-build includes option --builder - ch-docker2tar renamed to ch-builder2tar - new quashFS wrapper scripts: ch-docker2squash, ch-docker2squash, ch-tar2squash, ch-mount and ch-umount - new namespace tester ch-checkns - Full changelog at https://groups.io/g/charliecloud/message/96 Update to version 0.9.10: - Documentation and examples: misc improvements. - Full changelog at https://groups.io/g/charliecloud/message/88 Update to version 0.9.9: - Bugfixes and documentation improvements. - Full changelog at https://groups.io/g/charliecloud/message/87 This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2293=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): charliecloud-0.11-bp151.2.3.1 - openSUSE Backports SLE-15-SP1 (noarch): charliecloud-doc-0.11-bp151.2.3.1 charliecloud-examples-0.11-bp151.2.3.1 References:

1 0

openSUSE-SU-2019:2292-1: moderate: Security update for putty
by opensuse-security＠opensuse.org 08 Oct '19

08 Oct '19

openSUSE Security Update: Security update for putty ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2292-1 Rating: moderate References: #1152753 Cross-References: CVE-2019-17068 CVE-2019-17069 Affected Products: openSUSE Backports SLE-15-SP1 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for putty to version 0.73 fixes the following issues: Security issues fixed: - CVE-2019-17068: Fixed the insufficient handling of terminal escape sequences, that should delimit the pasted data in bracketed paste mode (boo#1152753). - CVE-2019-17069: Fixed a possible information leak caused by SSH-1 disconnection messages (boo#1152753). This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2292=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-2292=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): putty-0.73-bp151.4.6.1 putty-debuginfo-0.73-bp151.4.6.1 putty-debugsource-0.73-bp151.4.6.1 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): putty-0.73-bp150.4.12.1 References: https://www.suse.com/security/cve/CVE-2019-17068.html https://www.suse.com/security/cve/CVE-2019-17069.html https://bugzilla.suse.com/1152753

1 0

openSUSE-RU-2019:2291-1: moderate: Recommended update for SUSEConnect
by maintenance＠opensuse.org 07 Oct '19

07 Oct '19

openSUSE Recommended Update: Recommended update for SUSEConnect ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2291-1 Rating: moderate References: #1143635 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for SUSEConnect provides the following fix: - Fix getting the list of installed products when zypper plugins are present. (bsc#1143635) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2291=1 Package List: - openSUSE Leap 15.1 (x86_64): SUSEConnect-0.3.20-lp151.2.6.1 References: https://bugzilla.suse.com/1143635

1 0

openSUSE-RU-2019:2290-1: moderate: Recommended update for SUSEConnect
by maintenance＠opensuse.org 07 Oct '19

07 Oct '19

openSUSE Recommended Update: Recommended update for SUSEConnect ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2290-1 Rating: moderate References: #1143635 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for SUSEConnect provides the following fix: - Fix getting the list of installed products when zypper plugins are present. (bsc#1143635) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2290=1 Package List: - openSUSE Leap 15.0 (x86_64): SUSEConnect-0.3.20-lp150.2.20.1 References: https://bugzilla.suse.com/1143635

1 0

openSUSE-RU-2019:2284-1: moderate: Recommended update for crmsh
by maintenance＠opensuse.org 07 Oct '19

07 Oct '19

openSUSE Recommended Update: Recommended update for crmsh ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2284-1 Rating: moderate References: #1129383 #1130715 #1135696 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for crmsh contains the following fixes: hb_report specific issues fixed: - Collect output of "sbd dump" and "sbd list". (bsc#1129383) - Using Tempfile class to manage tempfiles. - Handle UnicodeDecodeError on special position. (bsc#1130715) - Analysis.txt includes warning, error, critical messages. (bsc#1135696) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2284=1 Package List: - openSUSE Leap 15.1 (noarch): crmsh-4.0.0+git.1553262403.5da14df5-lp151.2.3.1 crmsh-scripts-4.0.0+git.1553262403.5da14df5-lp151.2.3.1 crmsh-test-4.0.0+git.1553262403.5da14df5-lp151.2.3.1 References: https://bugzilla.suse.com/1129383 https://bugzilla.suse.com/1130715 https://bugzilla.suse.com/1135696

1 0

openSUSE-RU-2019:2287-1: moderate: Recommended update for lxcfs
by maintenance＠opensuse.org 07 Oct '19

07 Oct '19

openSUSE Recommended Update: Recommended update for lxcfs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2287-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for lxcfs fixes the following issues: lxcfs was updated to version 3.1.2 (released on the 24th of July 2019) New Features: * Add support for per-container cpu usage in /proc/stat * Add support for load average (loadavg) virtualization * Display cpus in /proc/cpuinfo based on cpu quotas * Allow to disable swap in /proc/meminfo output * Virtualize /sys/devices/system/cpu/online * Enable higher precision output in /proc/uptime * Add support for FUSE nonempty option Bugfixes: * bindings: ensure that opts is non NULL * Makefile: Fix typo in file name * remove unused functions * sys dirs do not need to implement 'read' method * lxcfs: coding style update * config: Adds RPM spec file. * config: Adds reload mode to sysvinit and systemd scripts. * bindings: prevent NULL pointer dereference * stat: check for out of bound access to cpuacct usage data * calc_hash(): do not apply modulo LOAD_SIZE * tests: include missing sys/sysmacros.h header * bindings: prevent double free * bindings: better logging for write_string() * meminfo: set ShmemHugePages and ShmemPmdMapped to zero * bindings: fix memory leak in calc_pid() * travis: fix .travis.yml * bindings: fix memory leak in proc_loadavg_read() - Make lxcfs-hooks-lxc supplement liblxc1 instead of lxc, since there are other liblxc1 users (such as LXD). This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2287=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): lxcfs-3.1.2-bp151.3.3.1 - openSUSE Backports SLE-15-SP1 (noarch): lxcfs-hooks-lxc-3.1.2-bp151.3.3.1 References:

1 0

openSUSE-SU-2019:2286-1: moderate: Security update for lxc
by opensuse-security＠opensuse.org 07 Oct '19

07 Oct '19

openSUSE Security Update: Security update for lxc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2286-1 Rating: moderate References: #1131762 Cross-References: CVE-2019-5736 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for lxc fixes the following issues: Update to lxc 3.2.1. The changelog can be found at https://discuss.linuxcontainers.org/t/lxc-3-2-1-has-been-released/5322 + seccomp: support syscall forwarding to userspace + add lxc.seccomp.allow_nesting + pidfd: Add initial support for the new pidfd api * Many hardening improvements. * Use /sys/kernel/cgroup/delegate file for cgroup v2. * Fix CVE-2019-5736 equivalent bug. - fix apparmor dropin to be compatible with LXC 3.1.0 (boo#1131762) This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2286=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): liblxc-devel-3.2.1-bp151.5.3.1 liblxc1-3.2.1-bp151.5.3.1 lxc-3.2.1-bp151.5.3.1 pam_cgfs-3.2.1-bp151.5.3.1 - openSUSE Backports SLE-15-SP1 (noarch): lxc-bash-completion-3.2.1-bp151.5.3.1 References: https://www.suse.com/security/cve/CVE-2019-5736.html https://bugzilla.suse.com/1131762

1 0

openSUSE-SU-2019:2288-1: moderate: Security update for singularity
by opensuse-security＠opensuse.org 07 Oct '19

07 Oct '19

openSUSE Security Update: Security update for singularity ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2288-1 Rating: moderate References: #1125369 #1128598 Cross-References: CVE-2019-11328 Affected Products: openSUSE Backports SLE-15-SP1 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for singularity fixes the following issues: singularity was updated to version 3.4.1: This point release addresses the following issues: - Fixes an issue where a PID namespace was always being used - Fixes compilation on non 64-bit architectures - Allows fakeroot builds for zypper, pacstrap, and debootstrap - Correctly detects seccomp on OpenSUSE - Honors GO_MODFLAGS properly in the mconfig generated makefile - Passes the Mac hostname to the VM in MacOS Singularity builds - Handles temporary EAGAIN failures when setting up loop devices on recent kernels. New version 3.4.0. Many changes since 3.2.1, for the full changelog please read CHANGELOG.md Update to version 3.2.1: This point release fixes the following bugs: - Allows users to join instances with non-suid workflow - Removes false warning when seccomp is disabled on the host - Fixes an issue in the terminal when piping output to commands - Binds NVIDIA persistenced socket when `--nv` is invoked Improve integration with SUSE Products: add support to create Singularity images with SLE. * Newer SUSE versions use a different path for the RPM database. * When the installation succeeds by an installation scriptlet fails zypper returns error code 107. Don't treat this as an error. * In order to specify a repository GPG key, add support for multi line variables. * In order to specify a list of additional repos, add support to 'indexed' variables. * Improve handling of SUSE repositires: - For SLE, use SUSEConnect to get all product repos. - Allow to specify a repository GPG key. - Allow to specify additional installation repositories. - Add group 'singularity', fix ownerships. Updated to singularity v3.2.0 * CVE-2019-11328: Instance files are now stored in user's home directory for privacy and many checks have been added to ensure that a user can't manipulate files to change `starter-suid` behavior when instances are joined (many thanks to Matthias Gerstner from the SUSE security team for finding and securely reporting this vulnerability) (boo#1128598) * New features / functionalities - Introduced a new basic framework for creating and managing plugins - Added the ability to create containers through multi-stage builds - Created the concept of a Sylabs Cloud "remote" endpoint and added the ability for users and admins to set them through CLI and conf files - Added caching for images from Singularity Hub - Made it possible to compile Singularity outside of `$GOPATH` - Added a json partition to SIF files for OCI configuration when building from an OCI source - Full integration with Singularity desktop for MacOS code base * New Commands - Introduced the `plugin` command group for creating and managing plugins. * Introduced the `remote` command group to support management of Singularity endpoints. * Added to the `key` command group to improve PGP key management. * Added the `Stage: <name>` keyword to the definition file header and the `from <stage name>` option/argument pair to the `%files` section to support multistage builds * Deprecated / removed commands - The `--token/-t` option has been deprecated in favor of the `singularity remote` command group * Changed defaults / behaviors - Ask to confirm password on a newly generated PGP key - Prompt to push a key to the KeyStore when generated - Refuse to push an unsigned container unless overridden with `--allow-unauthenticated/-U` option - Warn and prompt when pulling an unsigned container without the `--allow-unauthenticated/-U` option For more information check: https://github.com/sylabs/singularity/blob/release-3.2/CHANGELOG.md Updated to singularity v3.1.1: * New Commands - New hidden `buildcfg` command to display compile-time parameters - Added support for `LDFLAGS`, `CFLAGS`, `CGO_` variables in build system - Added `--nocolor` flag to Singularity client to disable color in logging * Removed Commands - `singularity capability <add/drop> --desc` has been removed - `singularity capability list <--all/--group/--user>` flags have all been removed * New features / functionalities - The `--builder` flag to the `build` command implicitly sets `--remote` - Repeated binds no longer cause Singularity to exit and fail, just warn instead - Corrected typos and improved docstrings throughout - Removed warning when CWD does not exist on the host system - Added support to spec file for RPM building on SLES 11 Update to singularity 3.1.0 what is reimplementaion in go so this is a complete new build and just reusing the changelog entries, following build differences were made to the upstream spec file * build position independent executable * build stripped executable - Change from /var/singularity to /var/lib/singularity - Fix warning on bash-completion file about non-executible script. - Add bash completions directory to file list for suse_version < 1500 to keep the build checker happy. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2288=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-2288=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): singularity-3.4.1-bp151.3.3.1 singularity-debuginfo-3.4.1-bp151.3.3.1 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): singularity-3.4.1-bp150.2.10.1 References: https://www.suse.com/security/cve/CVE-2019-11328.html https://bugzilla.suse.com/1125369 https://bugzilla.suse.com/1128598

1 0

openSUSE-RU-2019:2289-1: moderate: Recommended update for charliecloud
by maintenance＠opensuse.org 07 Oct '19

07 Oct '19

openSUSE Recommended Update: Recommended update for charliecloud ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2289-1 Rating: moderate References: Affected Products: openSUSE Leap 15.1 openSUSE Backports SLE-15 SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for charliecloud fixes the following issues: charliecloud was updated to version 0.11: - ch-run: /etc/resolv.conf on the host is now optional - ch-grow: support ARG instruction - build now does not infinite loop if no Python installed - miscellaneous bug fixes, and documentation and test suite improvements Update to version 0.10: - New builder ch-grow - ch-build includes option --builder - ch-docker2tar renamed to ch-builder2tar - new quashFS wrapper scripts: ch-docker2squash, ch-docker2squash, ch-tar2squash, ch-mount and ch-umount - new namespace tester ch-checkns - Full changelog at https://groups.io/g/charliecloud/message/96 Update to version 0.9.10: - Documentation and examples: misc improvements. - Full changelog at https://groups.io/g/charliecloud/message/88 Update to version 0.9.9: - Bugfixes and documentation improvements. - Full changelog at https://groups.io/g/charliecloud/message/87 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2289=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-2289=1 - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2019-2289=1 Package List: - openSUSE Leap 15.1 (x86_64): charliecloud-0.11-lp151.2.3.1 charliecloud-debuginfo-0.11-lp151.2.3.1 charliecloud-debugsource-0.11-lp151.2.3.1 - openSUSE Leap 15.1 (noarch): charliecloud-doc-0.11-lp151.2.3.1 charliecloud-examples-0.11-lp151.2.3.1 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): charliecloud-0.11-bp150.5.1 charliecloud-debuginfo-0.11-bp150.5.1 charliecloud-debugsource-0.11-bp150.5.1 - openSUSE Backports SLE-15 (noarch): charliecloud-doc-0.11-bp150.5.1 charliecloud-examples-0.11-bp150.5.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): charliecloud-0.11-7.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (ppc64le): charliecloud-debuginfo-0.11-7.1 charliecloud-debugsource-0.11-7.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): charliecloud-examples-0.11-7.1 References:

1 0

openSUSE-SU-2019:2280-1: moderate: Security update for libseccomp
by opensuse-security＠opensuse.org 07 Oct '19

07 Oct '19

openSUSE Security Update: Security update for libseccomp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2280-1 Rating: moderate References: #1082318 #1128828 #1142614 Cross-References: CVE-2019-9893 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update for libseccomp fixes the following issues: Security issues fixed: - CVE-2019-9893: An incorrect generation of syscall filters in libseccomp was fixed (bsc#1128828) libseccomp was updated to new upstream release 2.4.1: - Fix a BPF generation bug where the optimizer mistakenly identified duplicate BPF code blocks. libseccomp was updated to 2.4.0 (bsc#1128828 CVE-2019-9893): - Update the syscall table for Linux v5.0-rc5 - Added support for the SCMP_ACT_KILL_PROCESS action - Added support for the SCMP_ACT_LOG action and SCMP_FLTATR_CTL_LOG attribute - Added explicit 32-bit (SCMP_AX_32(...)) and 64-bit (SCMP_AX_64(...)) argument comparison macros to help protect against unexpected sign extension - Added support for the parisc and parisc64 architectures - Added the ability to query and set the libseccomp API level via seccomp_api_get(3) and seccomp_api_set(3) - Return -EDOM on an endian mismatch when adding an architecture to a filter - Renumber the pseudo syscall number for subpage_prot() so it no longer conflicts with spu_run() - Fix PFC generation when a syscall is prioritized, but no rule exists - Numerous fixes to the seccomp-bpf filter generation code - Switch our internal hashing function to jhash/Lookup3 to MurmurHash3 - Numerous tests added to the included test suite, coverage now at ~92% - Update our Travis CI configuration to use Ubuntu 16.04 - Numerous documentation fixes and updates libseccomp was updated to release 2.3.3: - Updated the syscall table for Linux v4.15-rc7 This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2280=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libseccomp-debugsource-2.4.1-lp150.2.3.1 libseccomp-devel-2.4.1-lp150.2.3.1 libseccomp-tools-2.4.1-lp150.2.3.1 libseccomp-tools-debuginfo-2.4.1-lp150.2.3.1 libseccomp2-2.4.1-lp150.2.3.1 libseccomp2-debuginfo-2.4.1-lp150.2.3.1 - openSUSE Leap 15.0 (x86_64): libseccomp2-32bit-2.4.1-lp150.2.3.1 libseccomp2-32bit-debuginfo-2.4.1-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2019-9893.html https://bugzilla.suse.com/1082318 https://bugzilla.suse.com/1128828 https://bugzilla.suse.com/1142614

1 0

openSUSE-SU-2019:2281-1: important: Security update for dovecot23
by opensuse-security＠opensuse.org 07 Oct '19

07 Oct '19

openSUSE Security Update: Security update for dovecot23 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2281-1 Rating: important References: #1133624 #1133625 #1145559 Cross-References: CVE-2019-11494 CVE-2019-11499 CVE-2019-11500 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for dovecot23 fixes the following issues: - CVE-2019-11500: Fixed the NUL byte handling in IMAP and ManageSieve protocol parsers. (bsc#1145559) - CVE-2019-11499: Fixed a vulnerability where the submission-login would crash over a TLS secured channel (bsc#1133625). - CVE-2019-11494: Fixed a denial of service if the authentication is aborted by disconnecting (bsc#1133624). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2281=1 Package List: - openSUSE Leap 15.1 (x86_64): dovecot23-2.3.3-lp151.2.6.1 dovecot23-backend-mysql-2.3.3-lp151.2.6.1 dovecot23-backend-mysql-debuginfo-2.3.3-lp151.2.6.1 dovecot23-backend-pgsql-2.3.3-lp151.2.6.1 dovecot23-backend-pgsql-debuginfo-2.3.3-lp151.2.6.1 dovecot23-backend-sqlite-2.3.3-lp151.2.6.1 dovecot23-backend-sqlite-debuginfo-2.3.3-lp151.2.6.1 dovecot23-debuginfo-2.3.3-lp151.2.6.1 dovecot23-debugsource-2.3.3-lp151.2.6.1 dovecot23-devel-2.3.3-lp151.2.6.1 dovecot23-fts-2.3.3-lp151.2.6.1 dovecot23-fts-debuginfo-2.3.3-lp151.2.6.1 dovecot23-fts-lucene-2.3.3-lp151.2.6.1 dovecot23-fts-lucene-debuginfo-2.3.3-lp151.2.6.1 dovecot23-fts-solr-2.3.3-lp151.2.6.1 dovecot23-fts-solr-debuginfo-2.3.3-lp151.2.6.1 dovecot23-fts-squat-2.3.3-lp151.2.6.1 dovecot23-fts-squat-debuginfo-2.3.3-lp151.2.6.1 References: https://www.suse.com/security/cve/CVE-2019-11494.html https://www.suse.com/security/cve/CVE-2019-11499.html https://www.suse.com/security/cve/CVE-2019-11500.html https://bugzilla.suse.com/1133624 https://bugzilla.suse.com/1133625 https://bugzilla.suse.com/1145559

1 0

openSUSE-SU-2019:2279-1: moderate: Security update for jasper
by opensuse-security＠opensuse.org 07 Oct '19

07 Oct '19

openSUSE Security Update: Security update for jasper ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2279-1 Rating: moderate References: #1117507 #1117508 Cross-References: CVE-2018-19540 CVE-2018-19541 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for jasper fixes the following issues: Security issues fixed: - CVE-2018-19540: Fixed a heap based overflow in jas_icctxtdesc_input (bsc#1117508). - CVE-2018-19541: Fix heap based overread in jas_image_depalettize (bsc#1117507). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2279=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): jasper-2.0.14-lp150.2.6.1 jasper-debuginfo-2.0.14-lp150.2.6.1 jasper-debugsource-2.0.14-lp150.2.6.1 libjasper-devel-2.0.14-lp150.2.6.1 libjasper4-2.0.14-lp150.2.6.1 libjasper4-debuginfo-2.0.14-lp150.2.6.1 - openSUSE Leap 15.0 (x86_64): libjasper4-32bit-2.0.14-lp150.2.6.1 libjasper4-32bit-debuginfo-2.0.14-lp150.2.6.1 References: https://www.suse.com/security/cve/CVE-2018-19540.html https://www.suse.com/security/cve/CVE-2018-19541.html https://bugzilla.suse.com/1117507 https://bugzilla.suse.com/1117508

1 0

openSUSE-SU-2019:2278-1: important: Security update for dovecot23
by opensuse-security＠opensuse.org 07 Oct '19

07 Oct '19

openSUSE Security Update: Security update for dovecot23 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2278-1 Rating: important References: #1133624 #1133625 #1145559 Cross-References: CVE-2019-11494 CVE-2019-11499 CVE-2019-11500 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for dovecot23 fixes the following issue: - CVE-2019-11500: Fixed the NUL byte handling in IMAP and ManageSieve protocol parsers. (bsc#1145559) - CVE-2019-11499: Fixed a vulnerability where the submission-login would crash over a TLS secured channel (bsc#1133625). - CVE-2019-11494: Fixed a denial of service if the authentication is aborted by disconnecting (bsc#1133624). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2278=1 Package List: - openSUSE Leap 15.0 (x86_64): dovecot23-2.3.3-lp150.14.1 dovecot23-backend-mysql-2.3.3-lp150.14.1 dovecot23-backend-mysql-debuginfo-2.3.3-lp150.14.1 dovecot23-backend-pgsql-2.3.3-lp150.14.1 dovecot23-backend-pgsql-debuginfo-2.3.3-lp150.14.1 dovecot23-backend-sqlite-2.3.3-lp150.14.1 dovecot23-backend-sqlite-debuginfo-2.3.3-lp150.14.1 dovecot23-debuginfo-2.3.3-lp150.14.1 dovecot23-debugsource-2.3.3-lp150.14.1 dovecot23-devel-2.3.3-lp150.14.1 dovecot23-fts-2.3.3-lp150.14.1 dovecot23-fts-debuginfo-2.3.3-lp150.14.1 dovecot23-fts-lucene-2.3.3-lp150.14.1 dovecot23-fts-lucene-debuginfo-2.3.3-lp150.14.1 dovecot23-fts-solr-2.3.3-lp150.14.1 dovecot23-fts-solr-debuginfo-2.3.3-lp150.14.1 dovecot23-fts-squat-2.3.3-lp150.14.1 dovecot23-fts-squat-debuginfo-2.3.3-lp150.14.1 References: https://www.suse.com/security/cve/CVE-2019-11494.html https://www.suse.com/security/cve/CVE-2019-11499.html https://www.suse.com/security/cve/CVE-2019-11500.html https://bugzilla.suse.com/1133624 https://bugzilla.suse.com/1133625 https://bugzilla.suse.com/1145559

1 0

openSUSE-RU-2019:2289-1: moderate: Recommended update for charliecloud
by maintenance＠opensuse.org 07 Oct '19

07 Oct '19

openSUSE Recommended Update: Recommended update for charliecloud ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2289-1 Rating: moderate References: Affected Products: openSUSE Leap 15.1 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for charliecloud fixes the following issues: charliecloud was updated to version 0.11: - ch-run: /etc/resolv.conf on the host is now optional - ch-grow: support ARG instruction - build now does not infinite loop if no Python installed - miscellaneous bug fixes, and documentation and test suite improvements Update to version 0.10: - New builder ch-grow - ch-build includes option --builder - ch-docker2tar renamed to ch-builder2tar - new quashFS wrapper scripts: ch-docker2squash, ch-docker2squash, ch-tar2squash, ch-mount and ch-umount - new namespace tester ch-checkns - Full changelog at https://groups.io/g/charliecloud/message/96 Update to version 0.9.10: - Documentation and examples: misc improvements. - Full changelog at https://groups.io/g/charliecloud/message/88 Update to version 0.9.9: - Bugfixes and documentation improvements. - Full changelog at https://groups.io/g/charliecloud/message/87 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2289=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-2289=1 Package List: - openSUSE Leap 15.1 (x86_64): charliecloud-0.11-lp151.2.3.1 charliecloud-debuginfo-0.11-lp151.2.3.1 charliecloud-debugsource-0.11-lp151.2.3.1 - openSUSE Leap 15.1 (noarch): charliecloud-doc-0.11-lp151.2.3.1 charliecloud-examples-0.11-lp151.2.3.1 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): charliecloud-0.11-bp150.5.1 charliecloud-debuginfo-0.11-bp150.5.1 charliecloud-debugsource-0.11-bp150.5.1 - openSUSE Backports SLE-15 (noarch): charliecloud-doc-0.11-bp150.5.1 charliecloud-examples-0.11-bp150.5.1 References:

1 0

openSUSE-RU-2019:2285-1: moderate: Recommended update for python-python-daemon
by maintenance＠opensuse.org 07 Oct '19

07 Oct '19

openSUSE Recommended Update: Recommended update for python-python-daemon ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2285-1 Rating: moderate References: #1150145 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-python-daemon fixes the following issues: - Do not pull in docutils on runtime, bsc#1150145 This update was imported from the SUSE:SLE-15:Update update project. This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-2285=1 Package List: - openSUSE Backports SLE-15 (noarch): python2-python-daemon-2.1.2-bp150.2.3.1 python3-python-daemon-2.1.2-bp150.2.3.1 References: https://bugzilla.suse.com/1150145

1 0

openSUSE-SU-2019:2282-1: moderate: Security update for jasper
by opensuse-security＠opensuse.org 07 Oct '19

07 Oct '19

openSUSE Security Update: Security update for jasper ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2282-1 Rating: moderate References: #1117507 #1117508 Cross-References: CVE-2018-19540 CVE-2018-19541 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for jasper fixes the following issues: Security issues fixed: - CVE-2018-19540: Fixed a heap based overflow in jas_icctxtdesc_input (bsc#1117508). - CVE-2018-19541: Fix heap based overread in jas_image_depalettize (bsc#1117507). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2282=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): jasper-2.0.14-lp151.4.3.1 jasper-debuginfo-2.0.14-lp151.4.3.1 jasper-debugsource-2.0.14-lp151.4.3.1 libjasper-devel-2.0.14-lp151.4.3.1 libjasper4-2.0.14-lp151.4.3.1 libjasper4-debuginfo-2.0.14-lp151.4.3.1 - openSUSE Leap 15.1 (x86_64): libjasper4-32bit-2.0.14-lp151.4.3.1 libjasper4-32bit-debuginfo-2.0.14-lp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2018-19540.html https://www.suse.com/security/cve/CVE-2018-19541.html https://bugzilla.suse.com/1117507 https://bugzilla.suse.com/1117508

1 0

openSUSE-SU-2019:2283-1: moderate: Security update for libseccomp
by opensuse-security＠opensuse.org 07 Oct '19

07 Oct '19

openSUSE Security Update: Security update for libseccomp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2283-1 Rating: moderate References: #1082318 #1128828 #1142614 Cross-References: CVE-2019-9893 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update for libseccomp fixes the following issues: Security issues fixed: - CVE-2019-9893: An incorrect generation of syscall filters in libseccomp was fixed (bsc#1128828) libseccomp was updated to new upstream release 2.4.1: - Fix a BPF generation bug where the optimizer mistakenly identified duplicate BPF code blocks. libseccomp was updated to 2.4.0 (bsc#1128828 CVE-2019-9893): - Update the syscall table for Linux v5.0-rc5 - Added support for the SCMP_ACT_KILL_PROCESS action - Added support for the SCMP_ACT_LOG action and SCMP_FLTATR_CTL_LOG attribute - Added explicit 32-bit (SCMP_AX_32(...)) and 64-bit (SCMP_AX_64(...)) argument comparison macros to help protect against unexpected sign extension - Added support for the parisc and parisc64 architectures - Added the ability to query and set the libseccomp API level via seccomp_api_get(3) and seccomp_api_set(3) - Return -EDOM on an endian mismatch when adding an architecture to a filter - Renumber the pseudo syscall number for subpage_prot() so it no longer conflicts with spu_run() - Fix PFC generation when a syscall is prioritized, but no rule exists - Numerous fixes to the seccomp-bpf filter generation code - Switch our internal hashing function to jhash/Lookup3 to MurmurHash3 - Numerous tests added to the included test suite, coverage now at ~92% - Update our Travis CI configuration to use Ubuntu 16.04 - Numerous documentation fixes and updates libseccomp was updated to release 2.3.3: - Updated the syscall table for Linux v4.15-rc7 This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2283=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libseccomp-debugsource-2.4.1-lp151.3.3.1 libseccomp-devel-2.4.1-lp151.3.3.1 libseccomp-tools-2.4.1-lp151.3.3.1 libseccomp-tools-debuginfo-2.4.1-lp151.3.3.1 libseccomp2-2.4.1-lp151.3.3.1 libseccomp2-debuginfo-2.4.1-lp151.3.3.1 - openSUSE Leap 15.1 (x86_64): libseccomp2-32bit-2.4.1-lp151.3.3.1 libseccomp2-32bit-debuginfo-2.4.1-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2019-9893.html https://bugzilla.suse.com/1082318 https://bugzilla.suse.com/1128828 https://bugzilla.suse.com/1142614

1 0

openSUSE-SU-2019:2276-1: moderate: Security update for putty
by opensuse-security＠opensuse.org 07 Oct '19

07 Oct '19

openSUSE Security Update: Security update for putty ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2276-1 Rating: moderate References: #1152753 Cross-References: CVE-2019-17068 CVE-2019-17069 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for putty to version 0.73 fixes the following issues: Security issues fixed: - CVE-2019-17068: Fixed the insufficient handling of terminal escape sequences, that should delimit the pasted data in bracketed paste mode (boo#1152753). - CVE-2019-17069: Fixed a possible information leak caused by SSH-1 disconnection messages (boo#1152753). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2276=1 Package List: - openSUSE Leap 15.0 (x86_64): putty-0.73-lp150.18.1 putty-debuginfo-0.73-lp150.18.1 putty-debugsource-0.73-lp150.18.1 References: https://www.suse.com/security/cve/CVE-2019-17068.html https://www.suse.com/security/cve/CVE-2019-17069.html https://bugzilla.suse.com/1152753

1 0

openSUSE-SU-2019:2277-1: moderate: Security update for putty
by opensuse-security＠opensuse.org 07 Oct '19

07 Oct '19

openSUSE Security Update: Security update for putty ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2277-1 Rating: moderate References: #1152753 Cross-References: CVE-2019-17068 CVE-2019-17069 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for putty to version 0.73 fixes the following issues: - CVE-2019-17068: Fixed the insufficient handling of terminal escape sequences, that should delimit the pasted data in bracketed paste mode (boo#1152753). - CVE-2019-17069: Fixed a possible information leak caused by SSH-1 disconnection messages (boo#1152753). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2277=1 Package List: - openSUSE Leap 15.1 (x86_64): putty-0.73-lp151.3.6.1 putty-debuginfo-0.73-lp151.3.6.1 putty-debugsource-0.73-lp151.3.6.1 References: https://www.suse.com/security/cve/CVE-2019-17068.html https://www.suse.com/security/cve/CVE-2019-17069.html https://bugzilla.suse.com/1152753

1 0

openSUSE-RU-2019:2273-1: moderate: Recommended update for spec-cleaner
by maintenance＠opensuse.org 07 Oct '19

07 Oct '19

openSUSE Recommended Update: Recommended update for spec-cleaner ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2273-1 Rating: moderate References: #1099674 Affected Products: openSUSE Backports SLE-15-SP1 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for spec-cleaner fixes the following issues: Version update to 1.1.5 (boo#1099674): * Use https in URL in spec-cleaner.spec test * Remove duplicated backslash in regexp * Parallelize test run * Add jupyter_move_config to excludes from bracketing * Do not fail if URL is ftp:// or other protocol * Make xdist enabled by default on all test runs and add xdist to deps * By default remove groups from packages This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2273=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-2273=1 Package List: - openSUSE Backports SLE-15-SP1 (noarch): spec-cleaner-1.1.5-bp151.3.6.1 spec-cleaner-format_spec_file-1.1.5-bp151.3.6.1 - openSUSE Backports SLE-15 (noarch): spec-cleaner-1.1.5-bp150.67.1 spec-cleaner-format_spec_file-1.1.5-bp150.67.1 References: https://bugzilla.suse.com/1099674

1 0

openSUSE-RU-2019:2275-1: moderate: Recommended update for python-python-daemon
by maintenance＠opensuse.org 07 Oct '19

07 Oct '19

openSUSE Recommended Update: Recommended update for python-python-daemon ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2275-1 Rating: moderate References: #1150145 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-python-daemon fixes the following issues: - Do not pull in docutils on runtime, bsc#1150145 This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2275=1 Package List: - openSUSE Leap 15.1 (noarch): python2-python-daemon-2.1.2-lp151.3.3.1 python3-python-daemon-2.1.2-lp151.3.3.1 References: https://bugzilla.suse.com/1150145

1 0

openSUSE-RU-2019:2274-1: moderate: Recommended update for python-python-daemon
by maintenance＠opensuse.org 07 Oct '19

07 Oct '19

openSUSE Recommended Update: Recommended update for python-python-daemon ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2274-1 Rating: moderate References: #1150145 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-python-daemon fixes the following issues: - Do not pull in docutils on runtime, bsc#1150145 This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2274=1 Package List: - openSUSE Leap 15.0 (noarch): python2-python-daemon-2.1.2-lp150.2.3.1 python3-python-daemon-2.1.2-lp150.2.3.1 References: https://bugzilla.suse.com/1150145

1 0

openSUSE-SU-2019:2271-1: important: Security update for php7
by opensuse-security＠opensuse.org 07 Oct '19

07 Oct '19

openSUSE Security Update: Security update for php7 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2271-1 Rating: important References: #1145095 #1146360 #1151793 Cross-References: CVE-2019-11041 CVE-2019-11042 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for php7 fixes the following issues: Security issues fixed: - CVE-2019-11041: Fixed heap buffer over-read in exif_scan_thumbnail() (bsc#1146360). - CVE-2019-11042: Fixed heap buffer over-read in exif_process_user_comment() (bsc#1145095). Non-security issue fixed: - Drop -n from php invocation from pecl (bsc#1151793). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2271=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): apache2-mod_php7-7.2.5-lp150.2.25.1 apache2-mod_php7-debuginfo-7.2.5-lp150.2.25.1 php7-7.2.5-lp150.2.25.1 php7-bcmath-7.2.5-lp150.2.25.1 php7-bcmath-debuginfo-7.2.5-lp150.2.25.1 php7-bz2-7.2.5-lp150.2.25.1 php7-bz2-debuginfo-7.2.5-lp150.2.25.1 php7-calendar-7.2.5-lp150.2.25.1 php7-calendar-debuginfo-7.2.5-lp150.2.25.1 php7-ctype-7.2.5-lp150.2.25.1 php7-ctype-debuginfo-7.2.5-lp150.2.25.1 php7-curl-7.2.5-lp150.2.25.1 php7-curl-debuginfo-7.2.5-lp150.2.25.1 php7-dba-7.2.5-lp150.2.25.1 php7-dba-debuginfo-7.2.5-lp150.2.25.1 php7-debuginfo-7.2.5-lp150.2.25.1 php7-debugsource-7.2.5-lp150.2.25.1 php7-devel-7.2.5-lp150.2.25.1 php7-dom-7.2.5-lp150.2.25.1 php7-dom-debuginfo-7.2.5-lp150.2.25.1 php7-embed-7.2.5-lp150.2.25.1 php7-embed-debuginfo-7.2.5-lp150.2.25.1 php7-enchant-7.2.5-lp150.2.25.1 php7-enchant-debuginfo-7.2.5-lp150.2.25.1 php7-exif-7.2.5-lp150.2.25.1 php7-exif-debuginfo-7.2.5-lp150.2.25.1 php7-fastcgi-7.2.5-lp150.2.25.1 php7-fastcgi-debuginfo-7.2.5-lp150.2.25.1 php7-fileinfo-7.2.5-lp150.2.25.1 php7-fileinfo-debuginfo-7.2.5-lp150.2.25.1 php7-firebird-7.2.5-lp150.2.25.1 php7-firebird-debuginfo-7.2.5-lp150.2.25.1 php7-fpm-7.2.5-lp150.2.25.1 php7-fpm-debuginfo-7.2.5-lp150.2.25.1 php7-ftp-7.2.5-lp150.2.25.1 php7-ftp-debuginfo-7.2.5-lp150.2.25.1 php7-gd-7.2.5-lp150.2.25.1 php7-gd-debuginfo-7.2.5-lp150.2.25.1 php7-gettext-7.2.5-lp150.2.25.1 php7-gettext-debuginfo-7.2.5-lp150.2.25.1 php7-gmp-7.2.5-lp150.2.25.1 php7-gmp-debuginfo-7.2.5-lp150.2.25.1 php7-iconv-7.2.5-lp150.2.25.1 php7-iconv-debuginfo-7.2.5-lp150.2.25.1 php7-intl-7.2.5-lp150.2.25.1 php7-intl-debuginfo-7.2.5-lp150.2.25.1 php7-json-7.2.5-lp150.2.25.1 php7-json-debuginfo-7.2.5-lp150.2.25.1 php7-ldap-7.2.5-lp150.2.25.1 php7-ldap-debuginfo-7.2.5-lp150.2.25.1 php7-mbstring-7.2.5-lp150.2.25.1 php7-mbstring-debuginfo-7.2.5-lp150.2.25.1 php7-mysql-7.2.5-lp150.2.25.1 php7-mysql-debuginfo-7.2.5-lp150.2.25.1 php7-odbc-7.2.5-lp150.2.25.1 php7-odbc-debuginfo-7.2.5-lp150.2.25.1 php7-opcache-7.2.5-lp150.2.25.1 php7-opcache-debuginfo-7.2.5-lp150.2.25.1 php7-openssl-7.2.5-lp150.2.25.1 php7-openssl-debuginfo-7.2.5-lp150.2.25.1 php7-pcntl-7.2.5-lp150.2.25.1 php7-pcntl-debuginfo-7.2.5-lp150.2.25.1 php7-pdo-7.2.5-lp150.2.25.1 php7-pdo-debuginfo-7.2.5-lp150.2.25.1 php7-pgsql-7.2.5-lp150.2.25.1 php7-pgsql-debuginfo-7.2.5-lp150.2.25.1 php7-phar-7.2.5-lp150.2.25.1 php7-phar-debuginfo-7.2.5-lp150.2.25.1 php7-posix-7.2.5-lp150.2.25.1 php7-posix-debuginfo-7.2.5-lp150.2.25.1 php7-readline-7.2.5-lp150.2.25.1 php7-readline-debuginfo-7.2.5-lp150.2.25.1 php7-shmop-7.2.5-lp150.2.25.1 php7-shmop-debuginfo-7.2.5-lp150.2.25.1 php7-snmp-7.2.5-lp150.2.25.1 php7-snmp-debuginfo-7.2.5-lp150.2.25.1 php7-soap-7.2.5-lp150.2.25.1 php7-soap-debuginfo-7.2.5-lp150.2.25.1 php7-sockets-7.2.5-lp150.2.25.1 php7-sockets-debuginfo-7.2.5-lp150.2.25.1 php7-sodium-7.2.5-lp150.2.25.1 php7-sodium-debuginfo-7.2.5-lp150.2.25.1 php7-sqlite-7.2.5-lp150.2.25.1 php7-sqlite-debuginfo-7.2.5-lp150.2.25.1 php7-sysvmsg-7.2.5-lp150.2.25.1 php7-sysvmsg-debuginfo-7.2.5-lp150.2.25.1 php7-sysvsem-7.2.5-lp150.2.25.1 php7-sysvsem-debuginfo-7.2.5-lp150.2.25.1 php7-sysvshm-7.2.5-lp150.2.25.1 php7-sysvshm-debuginfo-7.2.5-lp150.2.25.1 php7-tidy-7.2.5-lp150.2.25.1 php7-tidy-debuginfo-7.2.5-lp150.2.25.1 php7-tokenizer-7.2.5-lp150.2.25.1 php7-tokenizer-debuginfo-7.2.5-lp150.2.25.1 php7-wddx-7.2.5-lp150.2.25.1 php7-wddx-debuginfo-7.2.5-lp150.2.25.1 php7-xmlreader-7.2.5-lp150.2.25.1 php7-xmlreader-debuginfo-7.2.5-lp150.2.25.1 php7-xmlrpc-7.2.5-lp150.2.25.1 php7-xmlrpc-debuginfo-7.2.5-lp150.2.25.1 php7-xmlwriter-7.2.5-lp150.2.25.1 php7-xmlwriter-debuginfo-7.2.5-lp150.2.25.1 php7-xsl-7.2.5-lp150.2.25.1 php7-xsl-debuginfo-7.2.5-lp150.2.25.1 php7-zip-7.2.5-lp150.2.25.1 php7-zip-debuginfo-7.2.5-lp150.2.25.1 php7-zlib-7.2.5-lp150.2.25.1 php7-zlib-debuginfo-7.2.5-lp150.2.25.1 - openSUSE Leap 15.0 (noarch): php7-pear-7.2.5-lp150.2.25.1 php7-pear-Archive_Tar-7.2.5-lp150.2.25.1 References: https://www.suse.com/security/cve/CVE-2019-11041.html https://www.suse.com/security/cve/CVE-2019-11042.html https://bugzilla.suse.com/1145095 https://bugzilla.suse.com/1146360 https://bugzilla.suse.com/1151793

1 0

openSUSE-RU-2019:2270-1: moderate: Recommended update for aws-cli, python-boto3, python-botocore, python-s3transfer
by maintenance＠opensuse.org 06 Oct '19

06 Oct '19

openSUSE Recommended Update: Recommended update for aws-cli, python-boto3, python-botocore, python-s3transfer ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2270-1 Rating: moderate References: #1136184 #1146853 #1146854 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for aws-cli, python-boto3, python-botocore, python-s3transfer fixes the following issues: aws-cli was updated to version 1.16.223: For detailed changes see the changes entries: https://github.com/aws/aws-cli/blob/1.16.223/CHANGELOG.rst https://github.com/aws/aws-cli/blob/1.16.189/CHANGELOG.rst https://github.com/aws/aws-cli/blob/1.16.182/CHANGELOG.rst https://github.com/aws/aws-cli/blob/1.16.176/CHANGELOG.rst https://github.com/aws/aws-cli/blob/1.16.103/CHANGELOG.rst https://github.com/aws/aws-cli/blob/1.16.94/CHANGELOG.rst https://github.com/aws/aws-cli/blob/1.16.84/CHANGELOG.rst python-boto3 was updated to 1.9.213, python-botocore was updated to 1.9.188, and python-s3transfer was updated to 1.12.74, fixing lots of bugs and adding features (bsc#1146853, bsc#1146854) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2270=1 Package List: - openSUSE Leap 15.0 (noarch): aws-cli-1.16.223-lp150.8.1 python2-boto3-1.9.213-lp150.7.1 python2-botocore-1.12.213-lp150.7.1 python2-s3transfer-0.2.1-lp150.7.1 python3-boto3-1.9.213-lp150.7.1 python3-botocore-1.12.213-lp150.7.1 python3-s3transfer-0.2.1-lp150.7.1 References: https://bugzilla.suse.com/1136184 https://bugzilla.suse.com/1146853 https://bugzilla.suse.com/1146854

1 0

openSUSE-SU-2019:2263-1: important: Security update for bind
by opensuse-security＠opensuse.org 06 Oct '19

06 Oct '19

openSUSE Security Update: Security update for bind ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2263-1 Rating: important References: #1118367 #1118368 #1138687 Cross-References: CVE-2019-6471 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update for bind fixes the following issues: Security issue fixed: - CVE-2019-6471: Fixed a reachable assert in dispatch.c. (bsc#1138687) Non-security issue fixed: - bind will no longer rely on /etc/insserv.conf (bsc#1118367, bsc#1118368) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2263=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): bind-9.11.2-lp150.8.16.1 bind-chrootenv-9.11.2-lp150.8.16.1 bind-debuginfo-9.11.2-lp150.8.16.1 bind-debugsource-9.11.2-lp150.8.16.1 bind-devel-9.11.2-lp150.8.16.1 bind-lwresd-9.11.2-lp150.8.16.1 bind-lwresd-debuginfo-9.11.2-lp150.8.16.1 bind-utils-9.11.2-lp150.8.16.1 bind-utils-debuginfo-9.11.2-lp150.8.16.1 libbind9-160-9.11.2-lp150.8.16.1 libbind9-160-debuginfo-9.11.2-lp150.8.16.1 libdns169-9.11.2-lp150.8.16.1 libdns169-debuginfo-9.11.2-lp150.8.16.1 libirs-devel-9.11.2-lp150.8.16.1 libirs160-9.11.2-lp150.8.16.1 libirs160-debuginfo-9.11.2-lp150.8.16.1 libisc166-9.11.2-lp150.8.16.1 libisc166-debuginfo-9.11.2-lp150.8.16.1 libisccc160-9.11.2-lp150.8.16.1 libisccc160-debuginfo-9.11.2-lp150.8.16.1 libisccfg160-9.11.2-lp150.8.16.1 libisccfg160-debuginfo-9.11.2-lp150.8.16.1 liblwres160-9.11.2-lp150.8.16.1 liblwres160-debuginfo-9.11.2-lp150.8.16.1 - openSUSE Leap 15.0 (noarch): bind-doc-9.11.2-lp150.8.16.1 python3-bind-9.11.2-lp150.8.16.1 - openSUSE Leap 15.0 (x86_64): bind-devel-32bit-9.11.2-lp150.8.16.1 libbind9-160-32bit-9.11.2-lp150.8.16.1 libbind9-160-32bit-debuginfo-9.11.2-lp150.8.16.1 libdns169-32bit-9.11.2-lp150.8.16.1 libdns169-32bit-debuginfo-9.11.2-lp150.8.16.1 libirs160-32bit-9.11.2-lp150.8.16.1 libirs160-32bit-debuginfo-9.11.2-lp150.8.16.1 libisc166-32bit-9.11.2-lp150.8.16.1 libisc166-32bit-debuginfo-9.11.2-lp150.8.16.1 libisccc160-32bit-9.11.2-lp150.8.16.1 libisccc160-32bit-debuginfo-9.11.2-lp150.8.16.1 libisccfg160-32bit-9.11.2-lp150.8.16.1 libisccfg160-32bit-debuginfo-9.11.2-lp150.8.16.1 liblwres160-32bit-9.11.2-lp150.8.16.1 liblwres160-32bit-debuginfo-9.11.2-lp150.8.16.1 References: https://www.suse.com/security/cve/CVE-2019-6471.html https://bugzilla.suse.com/1118367 https://bugzilla.suse.com/1118368 https://bugzilla.suse.com/1138687

1 0

openSUSE-SU-2019:2260-1: important: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 06 Oct '19

06 Oct '19

openSUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2260-1 Rating: important References: #1109465 #1117473 #1123482 #1124525 #1133810 #1138688 #1140868 #1141322 #1145665 #1149292 #1149293 #1149294 #1149295 #1149296 #1149297 #1149298 #1149299 #1149302 #1149303 #1149304 #1149323 Cross-References: CVE-2019-11710 CVE-2019-11714 CVE-2019-11716 CVE-2019-11718 CVE-2019-11720 CVE-2019-11721 CVE-2019-11723 CVE-2019-11724 CVE-2019-11725 CVE-2019-11727 CVE-2019-11728 CVE-2019-11733 CVE-2019-11735 CVE-2019-11736 CVE-2019-11738 CVE-2019-11740 CVE-2019-11742 CVE-2019-11743 CVE-2019-11744 CVE-2019-11746 CVE-2019-11747 CVE-2019-11748 CVE-2019-11749 CVE-2019-11750 CVE-2019-11751 CVE-2019-11752 CVE-2019-11753 CVE-2019-9811 CVE-2019-9812 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes 29 vulnerabilities is now available. Description: This update for MozillaFirefox to 68.1 fixes the following issues: Security issues fixed: - CVE-2019-9811: Fixed a sandbox escape via installation of malicious language pack. (bsc#1140868) - CVE-2019-9812: Fixed a sandbox escape through Firefox Sync. (bsc#1149294) - CVE-2019-11710: Fixed several memory safety bugs. (bsc#1140868) - CVE-2019-11714: Fixed a potentially exploitable crash in Necko. (bsc#1140868) - CVE-2019-11716: Fixed a sandbox bypass. (bsc#1140868) - CVE-2019-11718: Fixed inadequate sanitation in the Activity Stream component. (bsc#1140868) - CVE-2019-11720: Fixed a character encoding XSS vulnerability. (bsc#1140868) - CVE-2019-11721: Fixed a homograph domain spoofing issue through unicode latin 'kra' character. (bsc#1140868) - CVE-2019-11723: Fixed a cookie leakage during add-on fetching across private browsing boundaries. (bsc#1140868) - CVE-2019-11724: Fixed an outdated permission, granting access to retired site input.mozilla.org. (bsc#1140868) - CVE-2019-11725: Fixed a Safebrowsing bypass involving WebSockets. (bsc#1140868) - CVE-2019-11727: Fixed a vulnerability where it possible to force NSS to sign CertificateVerify with PKCS#1 v1.5 signatures when those are the only ones advertised by server in CertificateRequest in TLS 1.3. (bsc#1141322) - CVE-2019-11728: Fixed an improper handling of the Alt-Svc header that allowed remote port scans. (bsc#1140868) - CVE-2019-11733: Fixed an insufficient protection of stored passwords in 'Saved Logins'. (bnc#1145665) - CVE-2019-11735: Fixed several memory safety bugs. (bnc#1149293) - CVE-2019-11736: Fixed a file manipulation and privilege escalation in Mozilla Maintenance Service. (bnc#1149292) - CVE-2019-11738: Fixed a content security policy bypass through hash-based sources in directives. (bnc#1149302) - CVE-2019-11740: Fixed several memory safety bugs. (bsc#1149299) - CVE-2019-11742: Fixed a same-origin policy violation involving SVG filters and canvas to steal cross-origin images. (bsc#1149303) - CVE-2019-11743: Fixed a timing side-channel attack on cross-origin information, utilizing unload event attributes. (bsc#1149298) - CVE-2019-11744: Fixed an XSS caused by breaking out of title and textarea elements using innerHTML. (bsc#1149304) - CVE-2019-11746: Fixed a use-after-free while manipulating video. (bsc#1149297) - CVE-2019-11752: Fixed a use-after-free while extracting a key value in IndexedDB. (bsc#1149296) - CVE-2019-11753: Fixed a privilege escalation with Mozilla Maintenance Service in custom Firefox installation location. (bsc#1149295) Non-security issues fixed: - Latest update now also released for s390x. (bsc#1109465) - Fixed a segmentation fault on s390vsl082. (bsc#1117473) - Fixed a crash on SLES15 s390x. (bsc#1124525) - Fixed a segmentation fault. (bsc#1133810) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2260=1 Package List: - openSUSE Leap 15.0 (x86_64): MozillaFirefox-68.1.0-lp150.3.66.1 MozillaFirefox-branding-upstream-68.1.0-lp150.3.66.1 MozillaFirefox-buildsymbols-68.1.0-lp150.3.66.1 MozillaFirefox-debuginfo-68.1.0-lp150.3.66.1 MozillaFirefox-debugsource-68.1.0-lp150.3.66.1 MozillaFirefox-devel-68.1.0-lp150.3.66.1 MozillaFirefox-translations-common-68.1.0-lp150.3.66.1 MozillaFirefox-translations-other-68.1.0-lp150.3.66.1 References: https://www.suse.com/security/cve/CVE-2019-11710.html https://www.suse.com/security/cve/CVE-2019-11714.html https://www.suse.com/security/cve/CVE-2019-11716.html https://www.suse.com/security/cve/CVE-2019-11718.html https://www.suse.com/security/cve/CVE-2019-11720.html https://www.suse.com/security/cve/CVE-2019-11721.html https://www.suse.com/security/cve/CVE-2019-11723.html https://www.suse.com/security/cve/CVE-2019-11724.html https://www.suse.com/security/cve/CVE-2019-11725.html https://www.suse.com/security/cve/CVE-2019-11727.html https://www.suse.com/security/cve/CVE-2019-11728.html https://www.suse.com/security/cve/CVE-2019-11733.html https://www.suse.com/security/cve/CVE-2019-11735.html https://www.suse.com/security/cve/CVE-2019-11736.html https://www.suse.com/security/cve/CVE-2019-11738.html https://www.suse.com/security/cve/CVE-2019-11740.html https://www.suse.com/security/cve/CVE-2019-11742.html https://www.suse.com/security/cve/CVE-2019-11743.html https://www.suse.com/security/cve/CVE-2019-11744.html https://www.suse.com/security/cve/CVE-2019-11746.html https://www.suse.com/security/cve/CVE-2019-11747.html https://www.suse.com/security/cve/CVE-2019-11748.html https://www.suse.com/security/cve/CVE-2019-11749.html https://www.suse.com/security/cve/CVE-2019-11750.html https://www.suse.com/security/cve/CVE-2019-11751.html https://www.suse.com/security/cve/CVE-2019-11752.html https://www.suse.com/security/cve/CVE-2019-11753.html https://www.suse.com/security/cve/CVE-2019-9811.html https://www.suse.com/security/cve/CVE-2019-9812.html https://bugzilla.suse.com/1109465 https://bugzilla.suse.com/1117473 https://bugzilla.suse.com/1123482 https://bugzilla.suse.com/1124525 https://bugzilla.suse.com/1133810 https://bugzilla.suse.com/1138688 https://bugzilla.suse.com/1140868 https://bugzilla.suse.com/1141322 https://bugzilla.suse.com/1145665 https://bugzilla.suse.com/1149292 https://bugzilla.suse.com/1149293 https://bugzilla.suse.com/1149294 https://bugzilla.suse.com/1149295 https://bugzilla.suse.com/1149296 https://bugzilla.suse.com/1149297 https://bugzilla.suse.com/1149298 https://bugzilla.suse.com/1149299 https://bugzilla.suse.com/1149302 https://bugzilla.suse.com/1149303 https://bugzilla.suse.com/1149304 https://bugzilla.suse.com/1149323

1 0

openSUSE-SU-2019:2269-1: moderate: Security update for openssl-1_0_0
by opensuse-security＠opensuse.org 06 Oct '19

06 Oct '19

openSUSE Security Update: Security update for openssl-1_0_0 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2269-1 Rating: moderate References: #1131291 #1150003 #1150250 Cross-References: CVE-2019-1547 CVE-2019-1563 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for openssl-1_0_0 fixes the following issues: OpenSSL Security Advisory [10 September 2019] * CVE-2019-1547: Added EC_GROUP_set_generator side channel attack avoidance. (bsc#1150003) * CVE-2019-1563: Fixed Bleichenbacher attack against cms/pkcs7 encryption transported key (bsc#1150250) In addition fixed invalid curve attacks by validating that an EC point lies on the curve (bsc#1131291). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2269=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libopenssl-1_0_0-devel-1.0.2p-lp151.5.10.1 libopenssl1_0_0-1.0.2p-lp151.5.10.1 libopenssl1_0_0-debuginfo-1.0.2p-lp151.5.10.1 libopenssl1_0_0-hmac-1.0.2p-lp151.5.10.1 libopenssl1_0_0-steam-1.0.2p-lp151.5.10.1 libopenssl1_0_0-steam-debuginfo-1.0.2p-lp151.5.10.1 openssl-1_0_0-1.0.2p-lp151.5.10.1 openssl-1_0_0-cavs-1.0.2p-lp151.5.10.1 openssl-1_0_0-cavs-debuginfo-1.0.2p-lp151.5.10.1 openssl-1_0_0-debuginfo-1.0.2p-lp151.5.10.1 openssl-1_0_0-debugsource-1.0.2p-lp151.5.10.1 - openSUSE Leap 15.1 (x86_64): libopenssl-1_0_0-devel-32bit-1.0.2p-lp151.5.10.1 libopenssl1_0_0-32bit-1.0.2p-lp151.5.10.1 libopenssl1_0_0-32bit-debuginfo-1.0.2p-lp151.5.10.1 libopenssl1_0_0-hmac-32bit-1.0.2p-lp151.5.10.1 libopenssl1_0_0-steam-32bit-1.0.2p-lp151.5.10.1 libopenssl1_0_0-steam-32bit-debuginfo-1.0.2p-lp151.5.10.1 - openSUSE Leap 15.1 (noarch): openssl-1_0_0-doc-1.0.2p-lp151.5.10.1 References: https://www.suse.com/security/cve/CVE-2019-1547.html https://www.suse.com/security/cve/CVE-2019-1563.html https://bugzilla.suse.com/1131291 https://bugzilla.suse.com/1150003 https://bugzilla.suse.com/1150250

1 0

openSUSE-SU-2019:2259-1: moderate: Security update for python-numpy
by opensuse-security＠opensuse.org 06 Oct '19

06 Oct '19

openSUSE Security Update: Security update for python-numpy ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2259-1 Rating: moderate References: #1149203 Cross-References: CVE-2019-6446 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-numpy fixes the following issues: Non-security issues fixed: - Updated to upstream version 1.16.1. (bsc#1149203) (jsc#SLE-8532) This update was imported from the SUSE:SLE-15:Update update project. This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2259=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): python2-numpy_1_16_1-gnu-hpc-1.16.1-bp151.2.3.1 python2-numpy_1_16_1-gnu-hpc-devel-1.16.1-bp151.2.3.1 python3-numpy_1_16_1-gnu-hpc-1.16.1-bp151.2.3.1 python3-numpy_1_16_1-gnu-hpc-devel-1.16.1-bp151.2.3.1 - openSUSE Backports SLE-15-SP1 (ppc64le s390x): python2-numpy-gnu-hpc-1.16.1-bp151.2.3.1 python2-numpy-gnu-hpc-devel-1.16.1-bp151.2.3.1 python3-numpy-gnu-hpc-1.16.1-bp151.2.3.1 python3-numpy-gnu-hpc-devel-1.16.1-bp151.2.3.1 References: https://www.suse.com/security/cve/CVE-2019-6446.html https://bugzilla.suse.com/1149203

1 0

openSUSE-SU-2019:2264-1: moderate: Security update for nginx
by opensuse-security＠opensuse.org 06 Oct '19

06 Oct '19

openSUSE Security Update: Security update for nginx ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2264-1 Rating: moderate References: #1145579 #1145580 #1145582 Cross-References: CVE-2019-9511 CVE-2019-9513 CVE-2019-9516 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for nginx fixes the following issues: Security issues fixed: - CVE-2019-9511: Fixed a denial of service by manipulating the window size and stream prioritization (bsc#1145579). - CVE-2019-9513: Fixed a denial of service caused by resource loops (bsc#1145580). - CVE-2019-9516: Fixed a denial of service caused by header leaks (bsc#1145582). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2264=1 Package List: - openSUSE Leap 15.0 (x86_64): nginx-1.14.2-lp150.2.11.1 nginx-debuginfo-1.14.2-lp150.2.11.1 nginx-debugsource-1.14.2-lp150.2.11.1 - openSUSE Leap 15.0 (noarch): vim-plugin-nginx-1.14.2-lp150.2.11.1 References: https://www.suse.com/security/cve/CVE-2019-9511.html https://www.suse.com/security/cve/CVE-2019-9513.html https://www.suse.com/security/cve/CVE-2019-9516.html https://bugzilla.suse.com/1145579 https://bugzilla.suse.com/1145580 https://bugzilla.suse.com/1145582

1 0

openSUSE-SU-2019:2265-1: important: Security update for bind
by opensuse-security＠opensuse.org 06 Oct '19

06 Oct '19

openSUSE Security Update: Security update for bind ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2265-1 Rating: important References: #1118367 #1118368 #1138687 Cross-References: CVE-2019-6471 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update for bind fixes the following issues: Security issue fixed: - CVE-2019-6471: Fixed a reachable assert in dispatch.c. (bsc#1138687) Non-security issue fixed: - bind will no longer rely on /etc/insserv.conf (bsc#1118367, bsc#1118368) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2265=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): bind-9.11.2-lp151.11.6.1 bind-chrootenv-9.11.2-lp151.11.6.1 bind-debuginfo-9.11.2-lp151.11.6.1 bind-debugsource-9.11.2-lp151.11.6.1 bind-devel-9.11.2-lp151.11.6.1 bind-lwresd-9.11.2-lp151.11.6.1 bind-lwresd-debuginfo-9.11.2-lp151.11.6.1 bind-utils-9.11.2-lp151.11.6.1 bind-utils-debuginfo-9.11.2-lp151.11.6.1 libbind9-160-9.11.2-lp151.11.6.1 libbind9-160-debuginfo-9.11.2-lp151.11.6.1 libdns169-9.11.2-lp151.11.6.1 libdns169-debuginfo-9.11.2-lp151.11.6.1 libirs-devel-9.11.2-lp151.11.6.1 libirs160-9.11.2-lp151.11.6.1 libirs160-debuginfo-9.11.2-lp151.11.6.1 libisc166-9.11.2-lp151.11.6.1 libisc166-debuginfo-9.11.2-lp151.11.6.1 libisccc160-9.11.2-lp151.11.6.1 libisccc160-debuginfo-9.11.2-lp151.11.6.1 libisccfg160-9.11.2-lp151.11.6.1 libisccfg160-debuginfo-9.11.2-lp151.11.6.1 liblwres160-9.11.2-lp151.11.6.1 liblwres160-debuginfo-9.11.2-lp151.11.6.1 - openSUSE Leap 15.1 (x86_64): bind-devel-32bit-9.11.2-lp151.11.6.1 libbind9-160-32bit-9.11.2-lp151.11.6.1 libbind9-160-32bit-debuginfo-9.11.2-lp151.11.6.1 libdns169-32bit-9.11.2-lp151.11.6.1 libdns169-32bit-debuginfo-9.11.2-lp151.11.6.1 libirs160-32bit-9.11.2-lp151.11.6.1 libirs160-32bit-debuginfo-9.11.2-lp151.11.6.1 libisc166-32bit-9.11.2-lp151.11.6.1 libisc166-32bit-debuginfo-9.11.2-lp151.11.6.1 libisccc160-32bit-9.11.2-lp151.11.6.1 libisccc160-32bit-debuginfo-9.11.2-lp151.11.6.1 libisccfg160-32bit-9.11.2-lp151.11.6.1 libisccfg160-32bit-debuginfo-9.11.2-lp151.11.6.1 liblwres160-32bit-9.11.2-lp151.11.6.1 liblwres160-32bit-debuginfo-9.11.2-lp151.11.6.1 - openSUSE Leap 15.1 (noarch): bind-doc-9.11.2-lp151.11.6.1 python3-bind-9.11.2-lp151.11.6.1 References: https://www.suse.com/security/cve/CVE-2019-6471.html https://bugzilla.suse.com/1118367 https://bugzilla.suse.com/1118368 https://bugzilla.suse.com/1138687

1 0

openSUSE-RU-2019:2266-1: moderate: Recommended update for drbd
by maintenance＠opensuse.org 06 Oct '19

06 Oct '19

openSUSE Recommended Update: Recommended update for drbd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2266-1 Rating: moderate References: #1146117 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for drbd contains the following fixes: - Disallow dual primaries when not configured. (bsc#1146117) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2266=1 Package List: - openSUSE Leap 15.1 (x86_64): drbd-9.0.16+git.ab9777df-lp151.5.3.1 drbd-debugsource-9.0.16+git.ab9777df-lp151.5.3.1 drbd-kmp-default-9.0.16+git.ab9777df_k4.12.14_lp151.28.16-lp151.5.3.1 drbd-kmp-default-debuginfo-9.0.16+git.ab9777df_k4.12.14_lp151.28.16-lp151.5.3.1 References: https://bugzilla.suse.com/1146117

1 0

openSUSE-RU-2019:2262-1: moderate: Recommended update for suse-prime
by maintenance＠opensuse.org 06 Oct '19

06 Oct '19

openSUSE Recommended Update: Recommended update for suse-prime ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2262-1 Rating: moderate References: #1152911 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for suse-prime fixes the following issues: * get rid of unsettling update-alternatives error message; latest G05 drivers no longer need update-alternatives for libglx Xserver module (boo#1152911) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2262=1 Package List: - openSUSE Leap 15.1 (noarch): suse-prime-0.5-lp151.3.3.1 References: https://bugzilla.suse.com/1152911

1 0

openSUSE-RU-2019:2267-1: moderate: Recommended update for drbd-utils
by maintenance＠opensuse.org 06 Oct '19

06 Oct '19

openSUSE Recommended Update: Recommended update for drbd-utils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2267-1 Rating: moderate References: #1145296 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for drbd-utils contains the following fixes: - Fix the wrong return code with cib_apply_diff. (bsc#1145296) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2267=1 Package List: - openSUSE Leap 15.1 (x86_64): drbd-utils-9.6.0-lp151.2.3.1 drbd-utils-debuginfo-9.6.0-lp151.2.3.1 drbd-utils-debugsource-9.6.0-lp151.2.3.1 References: https://bugzilla.suse.com/1145296

1 0

openSUSE-RU-2019:2261-1: moderate: Recommended update for lxd
by maintenance＠opensuse.org 06 Oct '19

06 Oct '19

openSUSE Recommended Update: Recommended update for lxd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2261-1 Rating: moderate References: #1152846 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for lxd fixes the following issues: Update to LXD 3.18. The full upstream changelog is available from (boo#1152846): https://discuss.linuxcontainers.org/t/lxd-3-18-has-been-released/5869 + New /1.0/instances endpoint + Support for storing VM images + Extended disk resources information + Modification of image expiry date + Clustering roles + IPv4 configuration when in Fan mode Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2261=1 Package List: - openSUSE Leap 15.1 (noarch): lxd-bash-completion-3.18-lp151.11.1 - openSUSE Leap 15.1 (x86_64): lxd-3.18-lp151.11.1 References: https://bugzilla.suse.com/1152846

1 0

openSUSE-SU-2019:2268-1: moderate: Security update for openssl-1_0_0
by opensuse-security＠opensuse.org 06 Oct '19

06 Oct '19

openSUSE Security Update: Security update for openssl-1_0_0 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2268-1 Rating: moderate References: #1131291 #1150003 #1150250 Cross-References: CVE-2019-1547 CVE-2019-1563 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for openssl-1_0_0 fixes the following issues: OpenSSL Security Advisory [10 September 2019] * CVE-2019-1547: Added EC_GROUP_set_generator side channel attack avoidance. (bsc#1150003) * CVE-2019-1563: Fixed Bleichenbacher attack against cms/pkcs7 encryption transported key (bsc#1150250) In addition fixed invalid curve attacks by validating that an EC point lies on the curve (bsc#1131291). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2268=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libopenssl-1_0_0-devel-1.0.2p-lp150.2.19.1 libopenssl1_0_0-1.0.2p-lp150.2.19.1 libopenssl1_0_0-debuginfo-1.0.2p-lp150.2.19.1 libopenssl1_0_0-hmac-1.0.2p-lp150.2.19.1 libopenssl1_0_0-steam-1.0.2p-lp150.2.19.1 libopenssl1_0_0-steam-debuginfo-1.0.2p-lp150.2.19.1 openssl-1_0_0-1.0.2p-lp150.2.19.1 openssl-1_0_0-cavs-1.0.2p-lp150.2.19.1 openssl-1_0_0-cavs-debuginfo-1.0.2p-lp150.2.19.1 openssl-1_0_0-debuginfo-1.0.2p-lp150.2.19.1 openssl-1_0_0-debugsource-1.0.2p-lp150.2.19.1 - openSUSE Leap 15.0 (x86_64): libopenssl-1_0_0-devel-32bit-1.0.2p-lp150.2.19.1 libopenssl1_0_0-32bit-1.0.2p-lp150.2.19.1 libopenssl1_0_0-32bit-debuginfo-1.0.2p-lp150.2.19.1 libopenssl1_0_0-hmac-32bit-1.0.2p-lp150.2.19.1 libopenssl1_0_0-steam-32bit-1.0.2p-lp150.2.19.1 libopenssl1_0_0-steam-32bit-debuginfo-1.0.2p-lp150.2.19.1 - openSUSE Leap 15.0 (noarch): openssl-1_0_0-doc-1.0.2p-lp150.2.19.1 References: https://www.suse.com/security/cve/CVE-2019-1547.html https://www.suse.com/security/cve/CVE-2019-1563.html https://bugzilla.suse.com/1131291 https://bugzilla.suse.com/1150003 https://bugzilla.suse.com/1150250

1 0

openSUSE-OU-2019:2257-1: Optional update for yast2-rdp
by maintenance＠opensuse.org 06 Oct '19

06 Oct '19

openSUSE Optional Update: Optional update for yast2-rdp ______________________________________________________________________________ Announcement ID: openSUSE-OU-2019:2257-1 Rating: low References: #1142282 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update for yast2-rdp doesn't fix any user relevant issues. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Optional Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2257=1 Package List: - openSUSE Leap 15.0 (noarch): yast2-rdp-4.0.2.1-lp150.7.1 References: https://bugzilla.suse.com/1142282

1 0

openSUSE-OU-2019:2258-1: Optional update for yast2-rdp
by maintenance＠opensuse.org 06 Oct '19

06 Oct '19

openSUSE Optional Update: Optional update for yast2-rdp ______________________________________________________________________________ Announcement ID: openSUSE-OU-2019:2258-1 Rating: low References: #1142282 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update for yast2-rdp doesn't fix any user relevant issues. This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Optional Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2258=1 Package List: - openSUSE Leap 15.1 (noarch): yast2-rdp-4.1.1-lp151.2.3.1 References: https://bugzilla.suse.com/1142282

1 0

openSUSE-RU-2019:2253-1: important: Recommended update for cloud-init
by maintenance＠opensuse.org 05 Oct '19

05 Oct '19

openSUSE Recommended Update: Recommended update for cloud-init ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2253-1 Rating: important References: #1144363 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for cloud-init fixes the following issues: - Fixes a regression which was introduced by fixing a different bug in the last maintenance update for cloud-init (bsc#1144363) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2253=1 Package List: - openSUSE Leap 15.0 (x86_64): cloud-init-19.1-lp150.2.19.1 cloud-init-config-suse-19.1-lp150.2.19.1 cloud-init-doc-19.1-lp150.2.19.1 References: https://bugzilla.suse.com/1144363

1 0

openSUSE-RU-2019:2254-1: moderate: Recommended update for firewalld-rpcbind-helper
by maintenance＠opensuse.org 05 Oct '19

05 Oct '19

openSUSE Recommended Update: Recommended update for firewalld-rpcbind-helper ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2254-1 Rating: moderate References: #1146188 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for firewalld-rpcbind-helper fixes the following issues: - Fixes an error when running in python3 context and a port in `rpcinfo -p` is running neither as tcp nor in udp protocol (bsc#1146188) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2254=1 Package List: - openSUSE Leap 15.0 (noarch): firewalld-rpcbind-helper-0.1-lp150.8.1 References: https://bugzilla.suse.com/1146188

1 0

openSUSE-RU-2019:2255-1: important: Recommended update for cloud-init
by maintenance＠opensuse.org 05 Oct '19

05 Oct '19

openSUSE Recommended Update: Recommended update for cloud-init ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2255-1 Rating: important References: #1141969 #1144363 #1144881 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for cloud-init provides the following fixes: - Properly handle static routes. The EphemeralDHCP context manager did not parse or handle rfc3442 classless static routes which prevented reading datasource metadata in some clouds. (bsc#1141969) - The __str__ implementation no longer delivers the name of the interface, use the "name" attribute instead to form a proper path in the sysfs tree. (bsc#1144363) - If no routes are set for a subnet but the subnet has a gateway specified, set the gateway as the default route for the interface. (bsc#1144881) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2255=1 Package List: - openSUSE Leap 15.1 (x86_64): cloud-init-19.1-lp151.2.6.1 cloud-init-config-suse-19.1-lp151.2.6.1 cloud-init-doc-19.1-lp151.2.6.1 References: https://bugzilla.suse.com/1141969 https://bugzilla.suse.com/1144363 https://bugzilla.suse.com/1144881

1 0

openSUSE-RU-2019:2256-1: moderate: Recommended update for firewalld-rpcbind-helper
by maintenance＠opensuse.org 05 Oct '19

05 Oct '19

openSUSE Recommended Update: Recommended update for firewalld-rpcbind-helper ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2256-1 Rating: moderate References: #1146188 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for firewalld-rpcbind-helper fixes the following issues: - Fixes an error when running in python3 context and a port in `rpcinfo -p` is running neither as tcp nor in udp protocol (bsc#1146188) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2256=1 Package List: - openSUSE Leap 15.1 (noarch): firewalld-rpcbind-helper-0.1-lp151.5.3.1 References: https://bugzilla.suse.com/1146188

1 0

openSUSE-RU-2019:2252-1: moderate: Recommended update for python-scipy
by maintenance＠opensuse.org 05 Oct '19

05 Oct '19

openSUSE Recommended Update: Recommended update for python-scipy ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2252-1 Rating: moderate References: #1149203 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update brings python-scipy to version 1.2.2 (jsc#SLE-8532, bsc#1149203). All relevant changes are availalbe online in the following places: - https://docs.scipy.org/doc/scipy/reference/release.1.1.0.html - https://docs.scipy.org/doc/scipy/reference/release.1.2.0.html This update was imported from the SUSE:SLE-15:Update update project. This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-2252=1 Package List: - openSUSE Backports SLE-15 (x86_64): python2-scipy-1.2.2-bp150.3.3.1 python3-scipy-1.2.2-bp150.3.3.1 References: https://bugzilla.suse.com/1149203

1 0

openSUSE-SU-2019:2251-1: important: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 05 Oct '19

05 Oct '19

openSUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2251-1 Rating: important References: #1109465 #1117473 #1123482 #1124525 #1133810 #1138688 #1140868 #1141322 #1145665 #1149292 #1149293 #1149294 #1149295 #1149296 #1149297 #1149298 #1149299 #1149302 #1149303 #1149304 #1149323 Cross-References: CVE-2019-11710 CVE-2019-11714 CVE-2019-11716 CVE-2019-11718 CVE-2019-11720 CVE-2019-11721 CVE-2019-11723 CVE-2019-11724 CVE-2019-11725 CVE-2019-11727 CVE-2019-11728 CVE-2019-11733 CVE-2019-11735 CVE-2019-11736 CVE-2019-11738 CVE-2019-11740 CVE-2019-11742 CVE-2019-11743 CVE-2019-11744 CVE-2019-11746 CVE-2019-11747 CVE-2019-11748 CVE-2019-11749 CVE-2019-11750 CVE-2019-11751 CVE-2019-11752 CVE-2019-11753 CVE-2019-9811 CVE-2019-9812 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 29 vulnerabilities is now available. Description: This update for MozillaFirefox to 68.1 fixes the following issues: Security issues fixed: - CVE-2019-9811: Fixed a sandbox escape via installation of malicious language pack. (bsc#1140868) - CVE-2019-9812: Fixed a sandbox escape through Firefox Sync. (bsc#1149294) - CVE-2019-11710: Fixed several memory safety bugs. (bsc#1140868) - CVE-2019-11714: Fixed a potentially exploitable crash in Necko. (bsc#1140868) - CVE-2019-11716: Fixed a sandbox bypass. (bsc#1140868) - CVE-2019-11718: Fixed inadequate sanitation in the Activity Stream component. (bsc#1140868) - CVE-2019-11720: Fixed a character encoding XSS vulnerability. (bsc#1140868) - CVE-2019-11721: Fixed a homograph domain spoofing issue through unicode latin 'kra' character. (bsc#1140868) - CVE-2019-11723: Fixed a cookie leakage during add-on fetching across private browsing boundaries. (bsc#1140868) - CVE-2019-11724: Fixed an outdated permission, granting access to retired site input.mozilla.org. (bsc#1140868) - CVE-2019-11725: Fixed a Safebrowsing bypass involving WebSockets. (bsc#1140868) - CVE-2019-11727: Fixed a vulnerability where it possible to force NSS to sign CertificateVerify with PKCS#1 v1.5 signatures when those are the only ones advertised by server in CertificateRequest in TLS 1.3. (bsc#1141322) - CVE-2019-11728: Fixed an improper handling of the Alt-Svc header that allowed remote port scans. (bsc#1140868) - CVE-2019-11733: Fixed an insufficient protection of stored passwords in 'Saved Logins'. (bnc#1145665) - CVE-2019-11735: Fixed several memory safety bugs. (bnc#1149293) - CVE-2019-11736: Fixed a file manipulation and privilege escalation in Mozilla Maintenance Service. (bnc#1149292) - CVE-2019-11738: Fixed a content security policy bypass through hash-based sources in directives. (bnc#1149302) - CVE-2019-11740: Fixed several memory safety bugs. (bsc#1149299) - CVE-2019-11742: Fixed a same-origin policy violation involving SVG filters and canvas to steal cross-origin images. (bsc#1149303) - CVE-2019-11743: Fixed a timing side-channel attack on cross-origin information, utilizing unload event attributes. (bsc#1149298) - CVE-2019-11744: Fixed an XSS caused by breaking out of title and textarea elements using innerHTML. (bsc#1149304) - CVE-2019-11746: Fixed a use-after-free while manipulating video. (bsc#1149297) - CVE-2019-11752: Fixed a use-after-free while extracting a key value in IndexedDB. (bsc#1149296) - CVE-2019-11753: Fixed a privilege escalation with Mozilla Maintenance Service in custom Firefox installation location. (bsc#1149295) Non-security issues fixed: - Latest update now also released for s390x. (bsc#1109465) - Fixed a segmentation fault on s390vsl082. (bsc#1117473) - Fixed a crash on SLES15 s390x. (bsc#1124525) - Fixed a segmentation fault. (bsc#1133810) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2251=1 Package List: - openSUSE Leap 15.1 (x86_64): MozillaFirefox-68.1.0-lp151.2.14.1 MozillaFirefox-branding-upstream-68.1.0-lp151.2.14.1 MozillaFirefox-buildsymbols-68.1.0-lp151.2.14.1 MozillaFirefox-debuginfo-68.1.0-lp151.2.14.1 MozillaFirefox-debugsource-68.1.0-lp151.2.14.1 MozillaFirefox-devel-68.1.0-lp151.2.14.1 MozillaFirefox-translations-common-68.1.0-lp151.2.14.1 MozillaFirefox-translations-other-68.1.0-lp151.2.14.1 References: https://www.suse.com/security/cve/CVE-2019-11710.html https://www.suse.com/security/cve/CVE-2019-11714.html https://www.suse.com/security/cve/CVE-2019-11716.html https://www.suse.com/security/cve/CVE-2019-11718.html https://www.suse.com/security/cve/CVE-2019-11720.html https://www.suse.com/security/cve/CVE-2019-11721.html https://www.suse.com/security/cve/CVE-2019-11723.html https://www.suse.com/security/cve/CVE-2019-11724.html https://www.suse.com/security/cve/CVE-2019-11725.html https://www.suse.com/security/cve/CVE-2019-11727.html https://www.suse.com/security/cve/CVE-2019-11728.html https://www.suse.com/security/cve/CVE-2019-11733.html https://www.suse.com/security/cve/CVE-2019-11735.html https://www.suse.com/security/cve/CVE-2019-11736.html https://www.suse.com/security/cve/CVE-2019-11738.html https://www.suse.com/security/cve/CVE-2019-11740.html https://www.suse.com/security/cve/CVE-2019-11742.html https://www.suse.com/security/cve/CVE-2019-11743.html https://www.suse.com/security/cve/CVE-2019-11744.html https://www.suse.com/security/cve/CVE-2019-11746.html https://www.suse.com/security/cve/CVE-2019-11747.html https://www.suse.com/security/cve/CVE-2019-11748.html https://www.suse.com/security/cve/CVE-2019-11749.html https://www.suse.com/security/cve/CVE-2019-11750.html https://www.suse.com/security/cve/CVE-2019-11751.html https://www.suse.com/security/cve/CVE-2019-11752.html https://www.suse.com/security/cve/CVE-2019-11753.html https://www.suse.com/security/cve/CVE-2019-9811.html https://www.suse.com/security/cve/CVE-2019-9812.html https://bugzilla.suse.com/1109465 https://bugzilla.suse.com/1117473 https://bugzilla.suse.com/1123482 https://bugzilla.suse.com/1124525 https://bugzilla.suse.com/1133810 https://bugzilla.suse.com/1138688 https://bugzilla.suse.com/1140868 https://bugzilla.suse.com/1141322 https://bugzilla.suse.com/1145665 https://bugzilla.suse.com/1149292 https://bugzilla.suse.com/1149293 https://bugzilla.suse.com/1149294 https://bugzilla.suse.com/1149295 https://bugzilla.suse.com/1149296 https://bugzilla.suse.com/1149297 https://bugzilla.suse.com/1149298 https://bugzilla.suse.com/1149299 https://bugzilla.suse.com/1149302 https://bugzilla.suse.com/1149303 https://bugzilla.suse.com/1149304 https://bugzilla.suse.com/1149323

1 0

openSUSE-RU-2019:2250-1: important: Recommended update for pacemaker
by maintenance＠opensuse.org 04 Oct '19

04 Oct '19

openSUSE Recommended Update: Recommended update for pacemaker ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2250-1 Rating: important References: #1140519 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for pacemaker fixes the following issues: - Run main loop for crm_resource clean-up with resource. (bsc#1140519) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2250=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libpacemaker-devel-1.1.18+20180430.b12c320f5-lp150.2.16.1 libpacemaker3-1.1.18+20180430.b12c320f5-lp150.2.16.1 libpacemaker3-debuginfo-1.1.18+20180430.b12c320f5-lp150.2.16.1 pacemaker-1.1.18+20180430.b12c320f5-lp150.2.16.1 pacemaker-cli-1.1.18+20180430.b12c320f5-lp150.2.16.1 pacemaker-cli-debuginfo-1.1.18+20180430.b12c320f5-lp150.2.16.1 pacemaker-debuginfo-1.1.18+20180430.b12c320f5-lp150.2.16.1 pacemaker-debugsource-1.1.18+20180430.b12c320f5-lp150.2.16.1 pacemaker-remote-1.1.18+20180430.b12c320f5-lp150.2.16.1 pacemaker-remote-debuginfo-1.1.18+20180430.b12c320f5-lp150.2.16.1 - openSUSE Leap 15.0 (noarch): pacemaker-cts-1.1.18+20180430.b12c320f5-lp150.2.16.1 References: https://bugzilla.suse.com/1140519

1 0

openSUSE-SU-2019:2248-1: important: Security update for MozillaThunderbird
by opensuse-security＠opensuse.org 04 Oct '19

04 Oct '19

openSUSE Security Update: Security update for MozillaThunderbird ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2248-1 Rating: important References: #1140868 #1141322 #1149296 #1149297 #1149298 #1149299 #1149303 #1149304 #1150939 #1152375 Cross-References: CVE-2019-11709 CVE-2019-11710 CVE-2019-11711 CVE-2019-11712 CVE-2019-11713 CVE-2019-11714 CVE-2019-11715 CVE-2019-11716 CVE-2019-11717 CVE-2019-11719 CVE-2019-11720 CVE-2019-11721 CVE-2019-11723 CVE-2019-11724 CVE-2019-11725 CVE-2019-11727 CVE-2019-11728 CVE-2019-11729 CVE-2019-11730 CVE-2019-11739 CVE-2019-11740 CVE-2019-11742 CVE-2019-11743 CVE-2019-11744 CVE-2019-11746 CVE-2019-11752 CVE-2019-11755 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes 27 vulnerabilities is now available. Description: This update for MozillaThunderbird to version 68.1.1 fixes the following issues: - CVE-2019-11709: Fixed several memory safety bugs. (bsc#1140868) - CVE-2019-11710: Fixed several memory safety bugs. (bsc#1140868) - CVE-2019-11711: Fixed a script injection within domain through inner window reuse. (bsc#1140868) - CVE-2019-11712: Fixed an insufficient validation of cross-origin POST requests within NPAPI plugins. (bsc#1140868) - CVE-2019-11713: Fixed a use-after-free with HTTP/2 cached stream. (bsc#1140868) - CVE-2019-11714: Fixed a crash in NeckoChild. (bsc#1140868) - CVE-2019-11715: Fixed an HTML parsing error that can contribute to content XSS. (bsc#1140868) - CVE-2019-11716: Fixed an enumeration issue in globalThis. (bsc#1140868) - CVE-2019-11717: Fixed an improper escaping of the caret character in origins. (bsc#1140868) - CVE-2019-11719: Fixed an out-of-bounds read when importing curve25519 private key. (bsc#1140868) - CVE-2019-11720: Fixed a character encoding XSS vulnerability. (bsc#1140868) - CVE-2019-11721: Fixed domain spoofing through unicode latin 'kra' character. (bsc#1140868) - CVE-2019-11723: Fixed a cookie leakage during add-on fetching across private browsing boundaries. (bsc#1140868) - CVE-2019-11724: Fixed a permissions issue with the retired site input.mozilla.org. (bsc#1140868) - CVE-2019-11725: Fixed a SafeBrowsing bypass through WebSockets. (bsc#1140868) - CVE-2019-11727: Fixed an insufficient validation for PKCS#1 v1.5 signatures being used with TLS 1.3. (bsc#1140868) - CVE-2019-11728: Fixed port scanning through Alt-Svc header. (bsc#1140868) - CVE-2019-11729: Fixed a segmentation fault due to empty or malformed p256-ECDH public keys. (bsc#1140868) - CVE-2019-11730: Fixed an insufficient enforcement of the same-origin policy that treats all files in a directory as having the same-origin. (bsc#1140868) - CVE-2019-11739: Fixed a Covert Content Attack on S/MIME encryption using a crafted multipart/alternative message. (bsc#1150939) - CVE-2019-11740: Fixed several memory safety bugs. (bsc#1149299) - CVE-2019-11742: Fixed a same-origin policy violation with SVG filters and canvas that enabled theft of cross-origin images. (bsc#1149303) - CVE-2019-11743: Fixed a cross-origin access issue. (bsc#1149298) - CVE-2019-11744: Fixed a XSS involving breaking out of title and textarea elements using innerHTML. (bsc#1149304) - CVE-2019-11746: Fixed a use-after-free while manipulating video. (bsc#1149297) - CVE-2019-11752: Fixed a use-after-free while extracting a key value in IndexedDB. (bsc#1149296) - CVE-2019-11755: Fixed an insufficient validation of S/MIME messages that allowed the author to be spoofed. (bsc#1152375) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2248=1 Package List: - openSUSE Leap 15.0 (x86_64): MozillaThunderbird-68.1.1-lp150.3.51.1 MozillaThunderbird-buildsymbols-68.1.1-lp150.3.51.1 MozillaThunderbird-debuginfo-68.1.1-lp150.3.51.1 MozillaThunderbird-debugsource-68.1.1-lp150.3.51.1 MozillaThunderbird-translations-common-68.1.1-lp150.3.51.1 MozillaThunderbird-translations-other-68.1.1-lp150.3.51.1 enigmail-2.1.2-lp150.34.1 References: https://www.suse.com/security/cve/CVE-2019-11709.html https://www.suse.com/security/cve/CVE-2019-11710.html https://www.suse.com/security/cve/CVE-2019-11711.html https://www.suse.com/security/cve/CVE-2019-11712.html https://www.suse.com/security/cve/CVE-2019-11713.html https://www.suse.com/security/cve/CVE-2019-11714.html https://www.suse.com/security/cve/CVE-2019-11715.html https://www.suse.com/security/cve/CVE-2019-11716.html https://www.suse.com/security/cve/CVE-2019-11717.html https://www.suse.com/security/cve/CVE-2019-11719.html https://www.suse.com/security/cve/CVE-2019-11720.html https://www.suse.com/security/cve/CVE-2019-11721.html https://www.suse.com/security/cve/CVE-2019-11723.html https://www.suse.com/security/cve/CVE-2019-11724.html https://www.suse.com/security/cve/CVE-2019-11725.html https://www.suse.com/security/cve/CVE-2019-11727.html https://www.suse.com/security/cve/CVE-2019-11728.html https://www.suse.com/security/cve/CVE-2019-11729.html https://www.suse.com/security/cve/CVE-2019-11730.html https://www.suse.com/security/cve/CVE-2019-11739.html https://www.suse.com/security/cve/CVE-2019-11740.html https://www.suse.com/security/cve/CVE-2019-11742.html https://www.suse.com/security/cve/CVE-2019-11743.html https://www.suse.com/security/cve/CVE-2019-11744.html https://www.suse.com/security/cve/CVE-2019-11746.html https://www.suse.com/security/cve/CVE-2019-11752.html https://www.suse.com/security/cve/CVE-2019-11755.html https://bugzilla.suse.com/1140868 https://bugzilla.suse.com/1141322 https://bugzilla.suse.com/1149296 https://bugzilla.suse.com/1149297 https://bugzilla.suse.com/1149298 https://bugzilla.suse.com/1149299 https://bugzilla.suse.com/1149303 https://bugzilla.suse.com/1149304 https://bugzilla.suse.com/1150939 https://bugzilla.suse.com/1152375

1 0

openSUSE-SU-2019:2249-1: important: Security update for MozillaThunderbird
by opensuse-security＠opensuse.org 04 Oct '19

04 Oct '19

openSUSE Security Update: Security update for MozillaThunderbird ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2249-1 Rating: important References: #1140868 #1141322 #1149296 #1149297 #1149298 #1149299 #1149303 #1149304 #1150939 #1152375 Cross-References: CVE-2019-11709 CVE-2019-11710 CVE-2019-11711 CVE-2019-11712 CVE-2019-11713 CVE-2019-11714 CVE-2019-11715 CVE-2019-11716 CVE-2019-11717 CVE-2019-11719 CVE-2019-11720 CVE-2019-11721 CVE-2019-11723 CVE-2019-11724 CVE-2019-11725 CVE-2019-11727 CVE-2019-11728 CVE-2019-11729 CVE-2019-11730 CVE-2019-11739 CVE-2019-11740 CVE-2019-11742 CVE-2019-11743 CVE-2019-11744 CVE-2019-11746 CVE-2019-11752 CVE-2019-11755 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 27 vulnerabilities is now available. Description: This update for MozillaThunderbird to version 68.1.1 fixes the following issues: - CVE-2019-11709: Fixed several memory safety bugs. (bsc#1140868) - CVE-2019-11710: Fixed several memory safety bugs. (bsc#1140868) - CVE-2019-11711: Fixed a script injection within domain through inner window reuse. (bsc#1140868) - CVE-2019-11712: Fixed an insufficient validation of cross-origin POST requests within NPAPI plugins. (bsc#1140868) - CVE-2019-11713: Fixed a use-after-free with HTTP/2 cached stream. (bsc#1140868) - CVE-2019-11714: Fixed a crash in NeckoChild. (bsc#1140868) - CVE-2019-11715: Fixed an HTML parsing error that can contribute to content XSS. (bsc#1140868) - CVE-2019-11716: Fixed an enumeration issue in globalThis. (bsc#1140868) - CVE-2019-11717: Fixed an improper escaping of the caret character in origins. (bsc#1140868) - CVE-2019-11719: Fixed an out-of-bounds read when importing curve25519 private key. (bsc#1140868) - CVE-2019-11720: Fixed a character encoding XSS vulnerability. (bsc#1140868) - CVE-2019-11721: Fixed domain spoofing through unicode latin 'kra' character. (bsc#1140868) - CVE-2019-11723: Fixed a cookie leakage during add-on fetching across private browsing boundaries. (bsc#1140868) - CVE-2019-11724: Fixed a permissions issue with the retired site input.mozilla.org. (bsc#1140868) - CVE-2019-11725: Fixed a SafeBrowsing bypass through WebSockets. (bsc#1140868) - CVE-2019-11727: Fixed an insufficient validation for PKCS#1 v1.5 signatures being used with TLS 1.3. (bsc#1140868) - CVE-2019-11728: Fixed port scanning through Alt-Svc header. (bsc#1140868) - CVE-2019-11729: Fixed a segmentation fault due to empty or malformed p256-ECDH public keys. (bsc#1140868) - CVE-2019-11730: Fixed an insufficient enforcement of the same-origin policy that treats all files in a directory as having the same-origin. (bsc#1140868) - CVE-2019-11739: Fixed a Covert Content Attack on S/MIME encryption using a crafted multipart/alternative message. (bsc#1150939) - CVE-2019-11740: Fixed several memory safety bugs. (bsc#1149299) - CVE-2019-11742: Fixed a same-origin policy violation with SVG filters and canvas that enabled theft of cross-origin images. (bsc#1149303) - CVE-2019-11743: Fixed a cross-origin access issue. (bsc#1149298) - CVE-2019-11744: Fixed a XSS involving breaking out of title and textarea elements using innerHTML. (bsc#1149304) - CVE-2019-11746: Fixed a use-after-free while manipulating video. (bsc#1149297) - CVE-2019-11752: Fixed a use-after-free while extracting a key value in IndexedDB. (bsc#1149296) - CVE-2019-11755: Fixed an insufficient validation of S/MIME messages that allowed the author to be spoofed. (bsc#1152375) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2249=1 Package List: - openSUSE Leap 15.1 (x86_64): MozillaThunderbird-68.1.1-lp151.2.13.1 MozillaThunderbird-buildsymbols-68.1.1-lp151.2.13.1 MozillaThunderbird-debuginfo-68.1.1-lp151.2.13.1 MozillaThunderbird-debugsource-68.1.1-lp151.2.13.1 MozillaThunderbird-translations-common-68.1.1-lp151.2.13.1 MozillaThunderbird-translations-other-68.1.1-lp151.2.13.1 enigmail-2.1.2-lp151.2.6.1 References: https://www.suse.com/security/cve/CVE-2019-11709.html https://www.suse.com/security/cve/CVE-2019-11710.html https://www.suse.com/security/cve/CVE-2019-11711.html https://www.suse.com/security/cve/CVE-2019-11712.html https://www.suse.com/security/cve/CVE-2019-11713.html https://www.suse.com/security/cve/CVE-2019-11714.html https://www.suse.com/security/cve/CVE-2019-11715.html https://www.suse.com/security/cve/CVE-2019-11716.html https://www.suse.com/security/cve/CVE-2019-11717.html https://www.suse.com/security/cve/CVE-2019-11719.html https://www.suse.com/security/cve/CVE-2019-11720.html https://www.suse.com/security/cve/CVE-2019-11721.html https://www.suse.com/security/cve/CVE-2019-11723.html https://www.suse.com/security/cve/CVE-2019-11724.html https://www.suse.com/security/cve/CVE-2019-11725.html https://www.suse.com/security/cve/CVE-2019-11727.html https://www.suse.com/security/cve/CVE-2019-11728.html https://www.suse.com/security/cve/CVE-2019-11729.html https://www.suse.com/security/cve/CVE-2019-11730.html https://www.suse.com/security/cve/CVE-2019-11739.html https://www.suse.com/security/cve/CVE-2019-11740.html https://www.suse.com/security/cve/CVE-2019-11742.html https://www.suse.com/security/cve/CVE-2019-11743.html https://www.suse.com/security/cve/CVE-2019-11744.html https://www.suse.com/security/cve/CVE-2019-11746.html https://www.suse.com/security/cve/CVE-2019-11752.html https://www.suse.com/security/cve/CVE-2019-11755.html https://bugzilla.suse.com/1140868 https://bugzilla.suse.com/1141322 https://bugzilla.suse.com/1149296 https://bugzilla.suse.com/1149297 https://bugzilla.suse.com/1149298 https://bugzilla.suse.com/1149299 https://bugzilla.suse.com/1149303 https://bugzilla.suse.com/1149304 https://bugzilla.suse.com/1150939 https://bugzilla.suse.com/1152375

1 0

openSUSE-SU-2019:2247-1: moderate: Security update for mosquitto
by opensuse-security＠opensuse.org 03 Oct '19

03 Oct '19

openSUSE Security Update: Security update for mosquitto ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2247-1 Rating: moderate References: #1151494 Cross-References: CVE-2019-11779 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for mosquitto fixes the following issues: - CVE-2019-11779: Fixed insufficient parsing of SUBSCRIBE packets that could lead to a stack overflow (bsc#1151494). This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2247=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): libmosquitto1-1.5.7-bp151.3.3.1 libmosquittopp1-1.5.7-bp151.3.3.1 mosquitto-1.5.7-bp151.3.3.1 mosquitto-clients-1.5.7-bp151.3.3.1 mosquitto-devel-1.5.7-bp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2019-11779.html https://bugzilla.suse.com/1151494

1 0

openSUSE-RU-2019:2246-1: moderate: Recommended update for ucode-intel
by maintenance＠opensuse.org 03 Oct '19

03 Oct '19

openSUSE Recommended Update: Recommended update for ucode-intel ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2246-1 Rating: moderate References: #1138185 #1151232 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for ucode-intel fixes the following issues: The Intel CPU Microcode was updated to the 20190918 bugfix release (bsc#1151232 bsc#1138185): Processor Identifier Version Products Model Stepping F-MO-S/PI Old->New ---- updated platforms ------------------------------------ BDW-U/Y E0/F0 6-3d-4/c0 0000002d->0000002e Core Gen5 HSX-EX E0 6-3f-4/80 00000014->00000016 Xeon E7 v3 BDW-H/E3 E0/G0 6-47-1/22 00000020->00000021 Core Gen5 BDX-ML B0/M0/R0 6-4f-1/ef 0b000036->0b000038 Xeon E5/E7 v4; Core i7-69xx/68xx BDX-DE V1 6-56-2/10 0000001a->0000001c Xeon D-1520/40 BDX-DE V2/3 6-56-3/10 07000017->07000019 Xeon D-1518/19/21/27/28/31/33/37/41/48, Pentium D1507/08/09/17/19 BDX-DE Y0 6-56-4/10 0f000015->0f000017 Xeon D-1557/59/67/71/77/81/87 BDX-NS A0 6-56-5/10 0e00000d->0e00000f Xeon D-1513N/23/33/43/53 SKX-SP H0/M0/U0 6-55-4/b7 0200005e->00000064 Xeon Scalable SKX-D M1 6-55-4/b7 0200005e->00000064 Xeon D-21xx CLX-SP B1 6-55-7/bf 05000021->0500002b Xeon Scalable Gen2 This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2246=1 Package List: - openSUSE Leap 15.0 (x86_64): ucode-intel-20190918-lp150.2.27.1 References: https://bugzilla.suse.com/1138185 https://bugzilla.suse.com/1151232

1 0

openSUSE-SU-2019:2245-1: moderate: Security update for lxc
by opensuse-security＠opensuse.org 03 Oct '19

03 Oct '19

openSUSE Security Update: Security update for lxc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2245-1 Rating: moderate References: #1131762 Cross-References: CVE-2019-5736 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for lxc fixes the following issues: Update to lxc 3.2.1. The changelog can be found at https://discuss.linuxcontainers.org/t/lxc-3-2-1-has-been-released/5322 + seccomp: support syscall forwarding to userspace + add lxc.seccomp.allow_nesting + pidfd: Add initial support for the new pidfd api * Many hardening improvements. * Use /sys/kernel/cgroup/delegate file for cgroup v2. * Fix CVE-2019-5736 equivalent bug. - fix apparmor dropin to be compatible with LXC 3.1.0 (boo#1131762) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2245=1 Package List: - openSUSE Leap 15.1 (noarch): lxc-bash-completion-3.2.1-lp151.4.5.1 - openSUSE Leap 15.1 (x86_64): liblxc-devel-3.2.1-lp151.4.5.1 liblxc1-3.2.1-lp151.4.5.1 liblxc1-debuginfo-3.2.1-lp151.4.5.1 lxc-3.2.1-lp151.4.5.1 lxc-debuginfo-3.2.1-lp151.4.5.1 lxc-debugsource-3.2.1-lp151.4.5.1 pam_cgfs-3.2.1-lp151.4.5.1 pam_cgfs-debuginfo-3.2.1-lp151.4.5.1 References: https://www.suse.com/security/cve/CVE-2019-5736.html https://bugzilla.suse.com/1131762

1 0

openSUSE-SU-2019:2244-1: moderate: Security update for rust
by opensuse-security＠opensuse.org 03 Oct '19

03 Oct '19

openSUSE Security Update: Security update for rust ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2244-1 Rating: moderate References: #1096945 #1100691 #1133283 #1134978 Cross-References: CVE-2018-1000622 CVE-2019-12083 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves two vulnerabilities and has two fixes is now available. Description: This update for rust fixes the following issues: Rust was updated to version 1.36.0. Security issues fixed: - CVE-2019-12083: a standard method can be overridden violating Rust's safety guarantees and causing memory unsafety (bsc#1134978) - CVE-2018-1000622: rustdoc loads plugins from world writable directory allowing for arbitrary code execution (bsc#1100691) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2244=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): cargo-1.36.0-lp151.5.4.2 cargo-debuginfo-1.36.0-lp151.5.4.2 clippy-1.36.0-lp151.5.4.2 clippy-debuginfo-1.36.0-lp151.5.4.2 rls-1.36.0-lp151.5.4.2 rls-debuginfo-1.36.0-lp151.5.4.2 rust-1.36.0-lp151.5.4.2 rust-analysis-1.36.0-lp151.5.4.2 rust-debuginfo-1.36.0-lp151.5.4.2 rust-debugsource-1.36.0-lp151.5.4.2 rust-doc-1.36.0-lp151.5.4.2 rust-gdb-1.36.0-lp151.5.4.2 rust-std-static-1.36.0-lp151.5.4.2 rustfmt-1.36.0-lp151.5.4.2 rustfmt-debuginfo-1.36.0-lp151.5.4.2 - openSUSE Leap 15.1 (noarch): cargo-doc-1.36.0-lp151.5.4.2 rust-src-1.36.0-lp151.5.4.2 References: https://www.suse.com/security/cve/CVE-2018-1000622.html https://www.suse.com/security/cve/CVE-2019-12083.html https://bugzilla.suse.com/1096945 https://bugzilla.suse.com/1100691 https://bugzilla.suse.com/1133283 https://bugzilla.suse.com/1134978

1 0

openSUSE-RU-2019:2242-1: important: Recommended update for google-compute-engine
by maintenance＠opensuse.org 02 Oct '19

02 Oct '19

openSUSE Recommended Update: Recommended update for google-compute-engine ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2242-1 Rating: important References: #1150058 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for google-compute-engine fixes the following issues: - Fixes an issue where the implementation of Google Private Access over IPv6 was not complete and thus crashed the application (bsc#1150058) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2242=1 Package List: - openSUSE Leap 15.0 (x86_64): google-compute-engine-debugsource-20190801-lp150.2.29.1 google-compute-engine-oslogin-20190801-lp150.2.29.1 google-compute-engine-oslogin-debuginfo-20190801-lp150.2.29.1 - openSUSE Leap 15.0 (noarch): google-compute-engine-init-20190801-lp150.2.29.1 References: https://bugzilla.suse.com/1150058

1 0

openSUSE-RU-2019:2243-1: important: Recommended update for rmt-server
by maintenance＠opensuse.org 02 Oct '19

02 Oct '19

openSUSE Recommended Update: Recommended update for rmt-server ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2243-1 Rating: important References: #1136168 #1136178 #1138863 #1142641 #1145688 #1146611 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 6 recommended fixes can now be installed. Description: This update for rmt-server fixes the following issues: - Preserve cached metadata timestamps. (bsc#1146611) - Allow to mirror individual products/repositories. (bsc#1138863) - RMT now uses mirror_src to determine whether or not to download source packages. (bsc#1145688) - Fix RMT installer_repo call for empty release_type parameter. (bsc#1136178) - Clean up download queue on metadata download errors. (bsc#1142641) - Removed release stage from names to be consistent with SCC. (bsc#1136168) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2243=1 Package List: - openSUSE Leap 15.1 (x86_64): rmt-server-2.4.1-lp151.2.6.1 rmt-server-config-2.4.1-lp151.2.6.1 rmt-server-debuginfo-2.4.1-lp151.2.6.1 rmt-server-debugsource-2.4.1-lp151.2.6.1 rmt-server-pubcloud-2.4.1-lp151.2.6.1 References: https://bugzilla.suse.com/1136168 https://bugzilla.suse.com/1136178 https://bugzilla.suse.com/1138863 https://bugzilla.suse.com/1142641 https://bugzilla.suse.com/1145688 https://bugzilla.suse.com/1146611

1 0

openSUSE-RU-2019:2241-1: important: Recommended update for google-compute-engine
by maintenance＠opensuse.org 02 Oct '19

02 Oct '19

openSUSE Recommended Update: Recommended update for google-compute-engine ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2241-1 Rating: important References: #1150058 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for google-compute-engine fixes the following issues: - Fixes an issue where the implementation of Google Private Access over IPv6 was not complete and thus crashed the application (bsc#1150058) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2241=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): google-compute-engine-debugsource-20190801-lp151.2.13.1 google-compute-engine-oslogin-20190801-lp151.2.13.1 google-compute-engine-oslogin-debuginfo-20190801-lp151.2.13.1 - openSUSE Leap 15.1 (x86_64): google-compute-engine-oslogin-32bit-20190801-lp151.2.13.1 google-compute-engine-oslogin-32bit-debuginfo-20190801-lp151.2.13.1 - openSUSE Leap 15.1 (noarch): google-compute-engine-init-20190801-lp151.2.13.1 References: https://bugzilla.suse.com/1150058

1 0

openSUSE-RU-2019:2240-1: moderate: Recommended update for lxcfs
by maintenance＠opensuse.org 02 Oct '19

02 Oct '19

openSUSE Recommended Update: Recommended update for lxcfs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2240-1 Rating: moderate References: Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for lxcfs fixes the following issues: lxcfs was updated to version 3.1.2 (released on the 24th of July 2019) New Features: * Add support for per-container cpu usage in /proc/stat * Add support for load average (loadavg) virtualization * Display cpus in /proc/cpuinfo based on cpu quotas * Allow to disable swap in /proc/meminfo output * Virtualize /sys/devices/system/cpu/online * Enable higher precision output in /proc/uptime * Add support for FUSE nonempty option Bugfixes: * bindings: ensure that opts is non NULL * Makefile: Fix typo in file name * remove unused functions * sys dirs do not need to implement 'read' method * lxcfs: coding style update * config: Adds RPM spec file. * config: Adds reload mode to sysvinit and systemd scripts. * bindings: prevent NULL pointer dereference * stat: check for out of bound access to cpuacct usage data * calc_hash(): do not apply modulo LOAD_SIZE * tests: include missing sys/sysmacros.h header * bindings: prevent double free * bindings: better logging for write_string() * meminfo: set ShmemHugePages and ShmemPmdMapped to zero * bindings: fix memory leak in calc_pid() * travis: fix .travis.yml * bindings: fix memory leak in proc_loadavg_read() - Make lxcfs-hooks-lxc supplement liblxc1 instead of lxc, since there are other liblxc1 users (such as LXD). Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2240=1 Package List: - openSUSE Leap 15.1 (x86_64): lxcfs-3.1.2-lp151.2.3.1 lxcfs-debuginfo-3.1.2-lp151.2.3.1 lxcfs-debugsource-3.1.2-lp151.2.3.1 - openSUSE Leap 15.1 (noarch): lxcfs-hooks-lxc-3.1.2-lp151.2.3.1 References:

1 0

openSUSE-RU-2019:2239-1: moderate: Recommended update for lxd
by maintenance＠opensuse.org 02 Oct '19

02 Oct '19

openSUSE Recommended Update: Recommended update for lxd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2239-1 Rating: moderate References: #1151874 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for lxd fixes the following issues: Update to LXD 3.17. The full upstream changelog is available from: https://discuss.linuxcontainers.org/t/lxd-3-17-has-been-released/5679 boo#1151874 + Storage pool backed image tarballs and backups + Container configuration as YAML on lxc init and lxc launch * Ported to final Dqlite 1.0 * Database rework * Container devices rework * Storage rework Update to LXD 3.15. The full upstream changelog is available from: https://discuss.linuxcontainers.org/t/lxd-3-15-has-been-released/5218 + Switch to dqlite 1.0. * Reworked DHCP lease handling * Reworked cluster heartbeat handling * Better syscall interception framework * More reliable unix socket proxying + Hardware VLAN and MAC filtering on SR-IOV + New storage-size option for lxd-p2c + IPv4 and IPv6 filtering (spoof protection) * Reworked resources API (host hardware) + Control over uid, gid and cwd during command execution + Quota support for custom storage volumes on dir backend * Lots of bug fixes... Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2239=1 Package List: - openSUSE Leap 15.1 (noarch): lxd-bash-completion-3.17-lp151.8.1 - openSUSE Leap 15.1 (x86_64): lxd-3.17-lp151.8.1 References: https://bugzilla.suse.com/1151874

1 0

openSUSE-RU-2019:2238-1: moderate: Recommended update for spec-cleaner
by maintenance＠opensuse.org 01 Oct '19

01 Oct '19

openSUSE Recommended Update: Recommended update for spec-cleaner ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2238-1 Rating: moderate References: #1099674 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for spec-cleaner fixes the following issues: Version update to 1.1.5 (boo#1099674): * Use https in URL in spec-cleaner.spec test * Remove duplicated backslash in regexp * Parallelize test run * Add jupyter_move_config to excludes from bracketing * Do not fail if URL is ftp:// or other protocol * Make xdist enabled by default on all test runs and add xdist to deps * By default remove groups from packages Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2238=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2238=1 Package List: - openSUSE Leap 15.1 (noarch): spec-cleaner-1.1.5-lp151.2.6.1 spec-cleaner-format_spec_file-1.1.5-lp151.2.6.1 - openSUSE Leap 15.0 (noarch): spec-cleaner-1.1.5-lp150.67.1 spec-cleaner-format_spec_file-1.1.5-lp150.67.1 References: https://bugzilla.suse.com/1099674

1 0

openSUSE-SU-2019:2234-1: moderate: Security update for nghttp2
by opensuse-security＠opensuse.org 01 Oct '19

01 Oct '19

openSUSE Security Update: Security update for nghttp2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2234-1 Rating: moderate References: #1112438 #1125689 #1134616 #1146182 #1146184 Cross-References: CVE-2019-9511 CVE-2019-9513 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves two vulnerabilities and has three fixes is now available. Description: This update for nghttp2 fixes the following issues: Security issues fixed: - CVE-2019-9513: Fixed HTTP/2 implementation that is vulnerable to resource loops, potentially leading to a denial of service (bsc#1146184). - CVE-2019-9511: Fixed HTTP/2 implementations that are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service (bsc#11461). Bug fixes and enhancements: - Fixed mistake in spec file (bsc#1125689) - Fixed build issue with boost 1.70.0 (bsc#1134616) - Feature: Add W&S module (FATE#326776, bsc#1112438) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2234=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libnghttp2-14-1.39.2-lp150.2.3.1 libnghttp2-14-debuginfo-1.39.2-lp150.2.3.1 libnghttp2-devel-1.39.2-lp150.2.3.1 libnghttp2_asio-devel-1.39.2-lp150.2.3.1 libnghttp2_asio1-1.39.2-lp150.2.3.1 libnghttp2_asio1-debuginfo-1.39.2-lp150.2.3.1 nghttp2-1.39.2-lp150.2.3.1 nghttp2-debuginfo-1.39.2-lp150.2.3.1 nghttp2-debugsource-1.39.2-lp150.2.3.1 nghttp2-python-debugsource-1.39.2-lp150.2.3.1 python3-nghttp2-1.39.2-lp150.2.3.1 python3-nghttp2-debuginfo-1.39.2-lp150.2.3.1 - openSUSE Leap 15.0 (x86_64): libnghttp2-14-32bit-1.39.2-lp150.2.3.1 libnghttp2-14-32bit-debuginfo-1.39.2-lp150.2.3.1 libnghttp2_asio1-32bit-1.39.2-lp150.2.3.1 libnghttp2_asio1-32bit-debuginfo-1.39.2-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2019-9511.html https://www.suse.com/security/cve/CVE-2019-9513.html https://bugzilla.suse.com/1112438 https://bugzilla.suse.com/1125689 https://bugzilla.suse.com/1134616 https://bugzilla.suse.com/1146182 https://bugzilla.suse.com/1146184

1 0

openSUSE-RU-2019:2236-1: moderate: Recommended update for openwsman
by maintenance＠opensuse.org 01 Oct '19

01 Oct '19

openSUSE Recommended Update: Recommended update for openwsman ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2236-1 Rating: moderate References: #1105331 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for openwsman fixes the following issues: - Adds CIM_NAMESPACE if it's not already present (bsc#1105331) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2236=1 Package List: - openSUSE Leap 15.1 (x86_64): libwsman-devel-2.6.7-lp151.4.3.1 libwsman3-2.6.7-lp151.4.3.1 libwsman3-debuginfo-2.6.7-lp151.4.3.1 libwsman_clientpp-devel-2.6.7-lp151.4.3.1 libwsman_clientpp1-2.6.7-lp151.4.3.1 libwsman_clientpp1-debuginfo-2.6.7-lp151.4.3.1 openwsman-debuginfo-2.6.7-lp151.4.3.1 openwsman-debugsource-2.6.7-lp151.4.3.1 openwsman-java-2.6.7-lp151.4.3.1 openwsman-perl-2.6.7-lp151.4.3.1 openwsman-perl-debuginfo-2.6.7-lp151.4.3.1 openwsman-ruby-2.6.7-lp151.4.3.1 openwsman-ruby-debuginfo-2.6.7-lp151.4.3.1 openwsman-ruby-docs-2.6.7-lp151.4.3.1 openwsman-server-2.6.7-lp151.4.3.1 openwsman-server-debuginfo-2.6.7-lp151.4.3.1 openwsman-server-plugin-ruby-2.6.7-lp151.4.3.1 openwsman-server-plugin-ruby-debuginfo-2.6.7-lp151.4.3.1 python3-openwsman-2.6.7-lp151.4.3.1 python3-openwsman-debuginfo-2.6.7-lp151.4.3.1 winrs-2.6.7-lp151.4.3.1 References: https://bugzilla.suse.com/1105331

1 0

openSUSE-SU-2019:2235-1: moderate: Security update for u-boot
by opensuse-security＠opensuse.org 01 Oct '19

01 Oct '19

openSUSE Security Update: Security update for u-boot ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2235-1 Rating: moderate References: #1144656 #1144675 Cross-References: CVE-2019-13104 CVE-2019-13106 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for u-boot fixes the following issues: Security issues fixed: - CVE-2019-13106: Fixed stack buffer overflow via a crafted ext4 filesystem that may lead to code execution (bsc#1144656). - CVE-2019-13104: Fixed an underflow that could cause memcpy() to overwrite a very large amount of data via a crafted ext4 filesystem (bsc#1144675). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2235=1 Package List: - openSUSE Leap 15.0 (x86_64): u-boot-tools-2018.03-lp150.4.3.1 u-boot-tools-debuginfo-2018.03-lp150.4.3.1 References: https://www.suse.com/security/cve/CVE-2019-13104.html https://www.suse.com/security/cve/CVE-2019-13106.html https://bugzilla.suse.com/1144656 https://bugzilla.suse.com/1144675

1 0

openSUSE-RU-2019:2237-1: moderate: Recommended update for openwsman
by maintenance＠opensuse.org 01 Oct '19

01 Oct '19

openSUSE Recommended Update: Recommended update for openwsman ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2237-1 Rating: moderate References: #1105331 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for openwsman fixes the following issues: - Adds CIM_NAMESPACE if it's not already present (bsc#1105331) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2237=1 Package List: - openSUSE Leap 15.0 (x86_64): libwsman-devel-2.6.7-lp150.2.6.1 libwsman3-2.6.7-lp150.2.6.1 libwsman3-debuginfo-2.6.7-lp150.2.6.1 libwsman_clientpp-devel-2.6.7-lp150.2.6.1 libwsman_clientpp1-2.6.7-lp150.2.6.1 libwsman_clientpp1-debuginfo-2.6.7-lp150.2.6.1 openwsman-debuginfo-2.6.7-lp150.2.6.1 openwsman-debugsource-2.6.7-lp150.2.6.1 openwsman-java-2.6.7-lp150.2.6.1 openwsman-perl-2.6.7-lp150.2.6.1 openwsman-perl-debuginfo-2.6.7-lp150.2.6.1 openwsman-ruby-2.6.7-lp150.2.6.1 openwsman-ruby-debuginfo-2.6.7-lp150.2.6.1 openwsman-ruby-docs-2.6.7-lp150.2.6.1 openwsman-server-2.6.7-lp150.2.6.1 openwsman-server-debuginfo-2.6.7-lp150.2.6.1 openwsman-server-plugin-ruby-2.6.7-lp150.2.6.1 openwsman-server-plugin-ruby-debuginfo-2.6.7-lp150.2.6.1 python3-openwsman-2.6.7-lp150.2.6.1 python3-openwsman-debuginfo-2.6.7-lp150.2.6.1 winrs-2.6.7-lp150.2.6.1 References: https://bugzilla.suse.com/1105331

1 0

openSUSE-SU-2019:2232-1: moderate: Security update for nghttp2
by opensuse-security＠opensuse.org 01 Oct '19

01 Oct '19

openSUSE Security Update: Security update for nghttp2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2232-1 Rating: moderate References: #1112438 #1125689 #1134616 #1146182 #1146184 Cross-References: CVE-2019-9511 CVE-2019-9513 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves two vulnerabilities and has three fixes is now available. Description: This update for nghttp2 fixes the following issues: Security issues fixed: - CVE-2019-9513: Fixed HTTP/2 implementation that is vulnerable to resource loops, potentially leading to a denial of service (bsc#1146184). - CVE-2019-9511: Fixed HTTP/2 implementations that are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service (bsc#11461). Bug fixes and enhancements: - Fixed mistake in spec file (bsc#1125689) - Fixed build issue with boost 1.70.0 (bsc#1134616) - Feature: Add W&S module (FATE#326776, bsc#1112438) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2232=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libnghttp2-14-1.39.2-lp151.3.3.1 libnghttp2-14-debuginfo-1.39.2-lp151.3.3.1 libnghttp2-devel-1.39.2-lp151.3.3.1 libnghttp2_asio-devel-1.39.2-lp151.3.3.1 libnghttp2_asio1-1.39.2-lp151.3.3.1 libnghttp2_asio1-debuginfo-1.39.2-lp151.3.3.1 nghttp2-1.39.2-lp151.3.3.1 nghttp2-debuginfo-1.39.2-lp151.3.3.1 nghttp2-debugsource-1.39.2-lp151.3.3.1 nghttp2-python-debugsource-1.39.2-lp151.3.3.1 python3-nghttp2-1.39.2-lp151.3.3.1 python3-nghttp2-debuginfo-1.39.2-lp151.3.3.1 - openSUSE Leap 15.1 (x86_64): libnghttp2-14-32bit-1.39.2-lp151.3.3.1 libnghttp2-14-32bit-debuginfo-1.39.2-lp151.3.3.1 libnghttp2_asio1-32bit-1.39.2-lp151.3.3.1 libnghttp2_asio1-32bit-debuginfo-1.39.2-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2019-9511.html https://www.suse.com/security/cve/CVE-2019-9513.html https://bugzilla.suse.com/1112438 https://bugzilla.suse.com/1125689 https://bugzilla.suse.com/1134616 https://bugzilla.suse.com/1146182 https://bugzilla.suse.com/1146184

1 0

openSUSE-SU-2019:2233-1: moderate: Security update for u-boot
by opensuse-security＠opensuse.org 01 Oct '19

01 Oct '19

openSUSE Security Update: Security update for u-boot ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2233-1 Rating: moderate References: #1144656 #1144675 Cross-References: CVE-2019-13104 CVE-2019-13106 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for u-boot fixes the following issues: Security issues fixed: - CVE-2019-13106: Fixed stack buffer overflow via a crafted ext4 filesystem that may lead to code execution (bsc#1144656). - CVE-2019-13104: Fixed an underflow that could cause memcpy() to overwrite a very large amount of data via a crafted ext4 filesystem (bsc#1144675). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2233=1 Package List: - openSUSE Leap 15.1 (x86_64): u-boot-tools-2019.01-lp151.6.3.1 u-boot-tools-debuginfo-2019.01-lp151.6.3.1 References: https://www.suse.com/security/cve/CVE-2019-13104.html https://www.suse.com/security/cve/CVE-2019-13106.html https://bugzilla.suse.com/1144656 https://bugzilla.suse.com/1144675

1 0

openSUSE-RU-2019:2231-1: important: Recommended update for rmt-server
by maintenance＠opensuse.org 01 Oct '19

01 Oct '19

openSUSE Recommended Update: Recommended update for rmt-server ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2231-1 Rating: important References: #1136168 #1136178 #1138863 #1142641 #1145688 #1146611 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has 6 recommended fixes can now be installed. Description: This update for rmt-server fixes the following issues: - Preserve cached metadata timestamps. (bsc#1146611) - Allow to mirror individual products/repositories. (bsc#1138863) - RMT now uses mirror_src to determine whether or not to download source packages. (bsc#1145688) - Fix RMT installer_repo call for empty release_type parameter. (bsc#1136178) - Clean up download queue on metadata download errors. (bsc#1142641) - Removed release stage from names to be consistent with SCC. (bsc#1136168) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2231=1 Package List: - openSUSE Leap 15.0 (x86_64): rmt-server-2.4.1-lp150.2.22.1 rmt-server-config-2.4.1-lp150.2.22.1 rmt-server-debuginfo-2.4.1-lp150.2.22.1 rmt-server-debugsource-2.4.1-lp150.2.22.1 rmt-server-pubcloud-2.4.1-lp150.2.22.1 References: https://bugzilla.suse.com/1136168 https://bugzilla.suse.com/1136178 https://bugzilla.suse.com/1138863 https://bugzilla.suse.com/1142641 https://bugzilla.suse.com/1145688 https://bugzilla.suse.com/1146611

1 0

openSUSE-SU-2019:2228-1: important: Security update for chromium
by opensuse-security＠opensuse.org 01 Oct '19

01 Oct '19

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2228-1 Rating: important References: #1151229 Cross-References: CVE-2019-13685 CVE-2019-13686 CVE-2019-13687 CVE-2019-13688 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for chromium to version 77.0.3865.90 fixes the following issues: - CVE-2019-13685: Fixed a use-after-free in UI. (boo#1151229) - CVE-2019-13688: Fixed a use-after-free in media. (boo#1151229) - CVE-2019-13687: Fixed a use-after-free in media. (boo#1151229) - CVE-2019-13686: Fixed a use-after-free in offline pages. (boo#1151229) This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-2228=1 Package List: - openSUSE Backports SLE-15 (aarch64 x86_64): chromedriver-77.0.3865.90-bp150.234.1 chromium-77.0.3865.90-bp150.234.1 References: https://www.suse.com/security/cve/CVE-2019-13685.html https://www.suse.com/security/cve/CVE-2019-13686.html https://www.suse.com/security/cve/CVE-2019-13687.html https://www.suse.com/security/cve/CVE-2019-13688.html https://bugzilla.suse.com/1151229

1 0

openSUSE-RU-2019:2230-1: moderate: Recommended update for perf
by maintenance＠opensuse.org 01 Oct '19

01 Oct '19

openSUSE Recommended Update: Recommended update for perf ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2230-1 Rating: moderate References: #1117114 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for perf provides the following fixes: - Correctly list implementation defined events on Cavium. (bsc#1117114) - Fix core dump in `perf stat -e` on Cavium. (bsc#1117114) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2230=1 Package List: - openSUSE Leap 15.1 (x86_64): perf-4.12.14-lp151.17.6.1 perf-debuginfo-4.12.14-lp151.17.6.1 perf-debugsource-4.12.14-lp151.17.6.1 References: https://bugzilla.suse.com/1117114

1 0

openSUSE-SU-2019:2229-1: important: Security update for chromium
by opensuse-security＠opensuse.org 01 Oct '19

01 Oct '19

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2229-1 Rating: important References: #1151229 Cross-References: CVE-2019-13685 CVE-2019-13686 CVE-2019-13687 CVE-2019-13688 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for chromium to version 77.0.3865.90 fixes the following issues: - CVE-2019-13685: Fixed a use-after-free in UI. (boo#1151229) - CVE-2019-13688: Fixed a use-after-free in media. (boo#1151229) - CVE-2019-13687: Fixed a use-after-free in media. (boo#1151229) - CVE-2019-13686: Fixed a use-after-free in offline pages. (boo#1151229) This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2229=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 x86_64): chromedriver-77.0.3865.90-bp151.3.15.1 chromium-77.0.3865.90-bp151.3.15.1 References: https://www.suse.com/security/cve/CVE-2019-13685.html https://www.suse.com/security/cve/CVE-2019-13686.html https://www.suse.com/security/cve/CVE-2019-13687.html https://www.suse.com/security/cve/CVE-2019-13688.html https://bugzilla.suse.com/1151229

1 0