October 2019 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2019:2331-1: moderate: Recommended update for yast2
by maintenance＠opensuse.org 16 Oct '19

16 Oct '19

openSUSE Recommended Update: Recommended update for yast2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2331-1 Rating: moderate References: #1122259 #1149776 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for yast2 provides the following fixes: - Yast completions have to be named after their respective command name. (bsc#1122259) - Fix a problem when long warnings reports in command line. (bsc#1149776) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2331=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): yast2-4.1.74-lp151.2.13.1 yast2-logs-4.1.74-lp151.2.13.1 References: https://bugzilla.suse.com/1122259 https://bugzilla.suse.com/1149776

1 0

openSUSE-RU-2019:2326-1: moderate: Recommended update for python-pyOpenSSL
by maintenance＠opensuse.org 16 Oct '19

16 Oct '19

openSUSE Recommended Update: Recommended update for python-pyOpenSSL ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2326-1 Rating: moderate References: #1149792 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-pyOpenSSL fixes the following issues: - Adds compatibility for openSSL 1.1.1d (bsc#1149792) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2326=1 Package List: - openSUSE Leap 15.0 (noarch): python-pyOpenSSL-doc-17.5.0-lp150.7.1 python2-pyOpenSSL-17.5.0-lp150.7.1 python3-pyOpenSSL-17.5.0-lp150.7.1 References: https://bugzilla.suse.com/1149792

1 0

openSUSE-RU-2019:2322-1: moderate: Recommended update for NetworkManager
by maintenance＠opensuse.org 16 Oct '19

16 Oct '19

openSUSE Recommended Update: Recommended update for NetworkManager ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2322-1 Rating: moderate References: #1074074 #1146935 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for NetworkManager fixes the following issues: - Modify nfs script: Only mount/unmount when the file type is nfs. (bsc#1074074) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2322=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): NetworkManager-1.10.6-lp150.4.12.1 NetworkManager-debuginfo-1.10.6-lp150.4.12.1 NetworkManager-debugsource-1.10.6-lp150.4.12.1 NetworkManager-devel-1.10.6-lp150.4.12.1 libnm-glib-vpn1-1.10.6-lp150.4.12.1 libnm-glib-vpn1-debuginfo-1.10.6-lp150.4.12.1 libnm-glib4-1.10.6-lp150.4.12.1 libnm-glib4-debuginfo-1.10.6-lp150.4.12.1 libnm-util2-1.10.6-lp150.4.12.1 libnm-util2-debuginfo-1.10.6-lp150.4.12.1 libnm0-1.10.6-lp150.4.12.1 libnm0-debuginfo-1.10.6-lp150.4.12.1 typelib-1_0-NM-1_0-1.10.6-lp150.4.12.1 typelib-1_0-NMClient-1_0-1.10.6-lp150.4.12.1 typelib-1_0-NetworkManager-1_0-1.10.6-lp150.4.12.1 - openSUSE Leap 15.0 (noarch): NetworkManager-branding-upstream-1.10.6-lp150.4.12.1 NetworkManager-lang-1.10.6-lp150.4.12.1 - openSUSE Leap 15.0 (x86_64): NetworkManager-devel-32bit-1.10.6-lp150.4.12.1 libnm-glib-vpn1-32bit-1.10.6-lp150.4.12.1 libnm-glib-vpn1-32bit-debuginfo-1.10.6-lp150.4.12.1 libnm-glib4-32bit-1.10.6-lp150.4.12.1 libnm-glib4-32bit-debuginfo-1.10.6-lp150.4.12.1 libnm-util2-32bit-1.10.6-lp150.4.12.1 libnm-util2-32bit-debuginfo-1.10.6-lp150.4.12.1 References: https://bugzilla.suse.com/1074074 https://bugzilla.suse.com/1146935

1 0

openSUSE-RU-2019:2328-1: moderate: Recommended update for ibus-libpinyin
by maintenance＠opensuse.org 16 Oct '19

16 Oct '19

openSUSE Recommended Update: Recommended update for ibus-libpinyin ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2328-1 Rating: moderate References: #1112998 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ibus-libpinyin fixes the following issues: - Fix emoji appears in updateCandidates method. (bsc#1112998) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2328=1 Package List: - openSUSE Leap 15.1 (x86_64): ibus-libpinyin-1.11.1-lp151.2.6.1 ibus-libpinyin-debuginfo-1.11.1-lp151.2.6.1 ibus-libpinyin-debugsource-1.11.1-lp151.2.6.1 References: https://bugzilla.suse.com/1112998

1 0

openSUSE-SU-2019:2321-1: moderate: Security update for GraphicsMagick
by opensuse-security＠opensuse.org 16 Oct '19

16 Oct '19

openSUSE Security Update: Security update for GraphicsMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2321-1 Rating: moderate References: #1151782 Cross-References: CVE-2019-16709 Affected Products: openSUSE Backports SLE-15-SP1 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for GraphicsMagick fixes the following issues: - CVE-2019-16709: Fixed a memory leak in coders/dps.c (boo#1151782). This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2321=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-2321=1 Package List: - openSUSE Backports SLE-15-SP1 (x86_64): GraphicsMagick-1.3.29-bp151.5.6.1 GraphicsMagick-debuginfo-1.3.29-bp151.5.6.1 GraphicsMagick-debugsource-1.3.29-bp151.5.6.1 GraphicsMagick-devel-1.3.29-bp151.5.6.1 libGraphicsMagick++-Q16-12-1.3.29-bp151.5.6.1 libGraphicsMagick++-Q16-12-debuginfo-1.3.29-bp151.5.6.1 libGraphicsMagick++-devel-1.3.29-bp151.5.6.1 libGraphicsMagick-Q16-3-1.3.29-bp151.5.6.1 libGraphicsMagick-Q16-3-debuginfo-1.3.29-bp151.5.6.1 libGraphicsMagick3-config-1.3.29-bp151.5.6.1 libGraphicsMagickWand-Q16-2-1.3.29-bp151.5.6.1 libGraphicsMagickWand-Q16-2-debuginfo-1.3.29-bp151.5.6.1 perl-GraphicsMagick-1.3.29-bp151.5.6.1 perl-GraphicsMagick-debuginfo-1.3.29-bp151.5.6.1 - openSUSE Backports SLE-15 (x86_64): GraphicsMagick-1.3.29-bp150.2.30.1 GraphicsMagick-devel-1.3.29-bp150.2.30.1 libGraphicsMagick++-Q16-12-1.3.29-bp150.2.30.1 libGraphicsMagick++-devel-1.3.29-bp150.2.30.1 libGraphicsMagick-Q16-3-1.3.29-bp150.2.30.1 libGraphicsMagick3-config-1.3.29-bp150.2.30.1 libGraphicsMagickWand-Q16-2-1.3.29-bp150.2.30.1 perl-GraphicsMagick-1.3.29-bp150.2.30.1 References: https://www.suse.com/security/cve/CVE-2019-16709.html https://bugzilla.suse.com/1151782

1 0

openSUSE-RU-2019:2320-1: moderate: Recommended update for permissions
by maintenance＠opensuse.org 16 Oct '19

16 Oct '19

openSUSE Recommended Update: Recommended update for permissions ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2320-1 Rating: moderate References: #1110797 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for permissions fixes the following issues: - Updated permissons for amanda. (bsc#1110797) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2320=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): permissions-20181116-lp151.4.6.1 permissions-debuginfo-20181116-lp151.4.6.1 permissions-debugsource-20181116-lp151.4.6.1 - openSUSE Leap 15.1 (noarch): permissions-zypp-plugin-20181116-lp151.4.6.1 References: https://bugzilla.suse.com/1110797

1 0

openSUSE-SU-2019:2317-1: moderate: Security update for GraphicsMagick
by opensuse-security＠opensuse.org 16 Oct '19

16 Oct '19

openSUSE Security Update: Security update for GraphicsMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2317-1 Rating: moderate References: #1151782 Cross-References: CVE-2019-16709 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for GraphicsMagick fixes the following issues: - CVE-2019-16709: Fixed a memory leak in coders/dps.c (boo#1151782). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2317=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2317=1 Package List: - openSUSE Leap 15.1 (x86_64): GraphicsMagick-1.3.29-lp151.4.9.1 GraphicsMagick-debuginfo-1.3.29-lp151.4.9.1 GraphicsMagick-debugsource-1.3.29-lp151.4.9.1 GraphicsMagick-devel-1.3.29-lp151.4.9.1 libGraphicsMagick++-Q16-12-1.3.29-lp151.4.9.1 libGraphicsMagick++-Q16-12-debuginfo-1.3.29-lp151.4.9.1 libGraphicsMagick++-devel-1.3.29-lp151.4.9.1 libGraphicsMagick-Q16-3-1.3.29-lp151.4.9.1 libGraphicsMagick-Q16-3-debuginfo-1.3.29-lp151.4.9.1 libGraphicsMagick3-config-1.3.29-lp151.4.9.1 libGraphicsMagickWand-Q16-2-1.3.29-lp151.4.9.1 libGraphicsMagickWand-Q16-2-debuginfo-1.3.29-lp151.4.9.1 perl-GraphicsMagick-1.3.29-lp151.4.9.1 perl-GraphicsMagick-debuginfo-1.3.29-lp151.4.9.1 - openSUSE Leap 15.0 (x86_64): GraphicsMagick-1.3.29-lp150.3.37.1 GraphicsMagick-debuginfo-1.3.29-lp150.3.37.1 GraphicsMagick-debugsource-1.3.29-lp150.3.37.1 GraphicsMagick-devel-1.3.29-lp150.3.37.1 libGraphicsMagick++-Q16-12-1.3.29-lp150.3.37.1 libGraphicsMagick++-Q16-12-debuginfo-1.3.29-lp150.3.37.1 libGraphicsMagick++-devel-1.3.29-lp150.3.37.1 libGraphicsMagick-Q16-3-1.3.29-lp150.3.37.1 libGraphicsMagick-Q16-3-debuginfo-1.3.29-lp150.3.37.1 libGraphicsMagick3-config-1.3.29-lp150.3.37.1 libGraphicsMagickWand-Q16-2-1.3.29-lp150.3.37.1 libGraphicsMagickWand-Q16-2-debuginfo-1.3.29-lp150.3.37.1 perl-GraphicsMagick-1.3.29-lp150.3.37.1 perl-GraphicsMagick-debuginfo-1.3.29-lp150.3.37.1 References: https://www.suse.com/security/cve/CVE-2019-16709.html https://bugzilla.suse.com/1151782

1 0

openSUSE-SU-2019:2319-1: important: Security update for libopenmpt
by opensuse-security＠opensuse.org 16 Oct '19

16 Oct '19

openSUSE Security Update: Security update for libopenmpt ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2319-1 Rating: important References: #1153102 Cross-References: CVE-2019-17113 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libopenmpt to version 0.3.19 fixes the following issues: - CVE-2019-17113: Fixed a buffer overflow in ModPlug_InstrumentName and ModPlug_SampleName (bsc#1153102). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2319=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libmodplug-devel-0.3.19-lp150.10.1 libmodplug1-0.3.19-lp150.10.1 libmodplug1-debuginfo-0.3.19-lp150.10.1 libopenmpt-debugsource-0.3.19-lp150.10.1 libopenmpt-devel-0.3.19-lp150.10.1 libopenmpt0-0.3.19-lp150.10.1 libopenmpt0-debuginfo-0.3.19-lp150.10.1 libopenmpt_modplug1-0.3.19-lp150.10.1 libopenmpt_modplug1-debuginfo-0.3.19-lp150.10.1 openmpt123-0.3.19-lp150.10.1 openmpt123-debuginfo-0.3.19-lp150.10.1 - openSUSE Leap 15.0 (x86_64): libmodplug1-32bit-0.3.19-lp150.10.1 libmodplug1-32bit-debuginfo-0.3.19-lp150.10.1 libopenmpt0-32bit-0.3.19-lp150.10.1 libopenmpt0-32bit-debuginfo-0.3.19-lp150.10.1 libopenmpt_modplug1-32bit-0.3.19-lp150.10.1 libopenmpt_modplug1-32bit-debuginfo-0.3.19-lp150.10.1 References: https://www.suse.com/security/cve/CVE-2019-17113.html https://bugzilla.suse.com/1153102

1 0

openSUSE-SU-2019:2318-1: moderate: Security update for epiphany
by opensuse-security＠opensuse.org 16 Oct '19

16 Oct '19

openSUSE Security Update: Security update for epiphany ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2318-1 Rating: moderate References: #1094464 Cross-References: CVE-2018-11396 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for epiphany fixes the following issues: - CVE-2018-11396: Fixed a JavaScript crash when an invalid URI is opened (boo#1094464). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2318=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2318=1 Package List: - openSUSE Leap 15.1 (x86_64): epiphany-3.28.1.1-lp151.3.3.1 epiphany-debuginfo-3.28.1.1-lp151.3.3.1 epiphany-debugsource-3.28.1.1-lp151.3.3.1 gnome-shell-search-provider-epiphany-3.28.1.1-lp151.3.3.1 gnome-shell-search-provider-epiphany-debuginfo-3.28.1.1-lp151.3.3.1 - openSUSE Leap 15.1 (noarch): epiphany-branding-upstream-3.28.1.1-lp151.3.3.1 epiphany-lang-3.28.1.1-lp151.3.3.1 - openSUSE Leap 15.0 (x86_64): epiphany-3.28.1.1-lp150.2.3.1 epiphany-debuginfo-3.28.1.1-lp150.2.3.1 epiphany-debugsource-3.28.1.1-lp150.2.3.1 gnome-shell-search-provider-epiphany-3.28.1.1-lp150.2.3.1 gnome-shell-search-provider-epiphany-debuginfo-3.28.1.1-lp150.2.3.1 - openSUSE Leap 15.0 (noarch): epiphany-branding-upstream-3.28.1.1-lp150.2.3.1 epiphany-lang-3.28.1.1-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-11396.html https://bugzilla.suse.com/1094464

1 0

openSUSE-SU-2019:2316-1: important: Security update for sudo
by opensuse-security＠opensuse.org 15 Oct '19

15 Oct '19

openSUSE Security Update: Security update for sudo ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2316-1 Rating: important References: #1153674 Cross-References: CVE-2019-14287 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for sudo fixes the following issue: - CVE-2019-14287: Fixed an issue where a user with sudo privileges that allowed them to run commands with an arbitrary uid, could run commands as root, despite being forbidden to do so in sudoers (bsc#1153674). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2316=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): sudo-1.8.22-lp151.5.3.1 sudo-debuginfo-1.8.22-lp151.5.3.1 sudo-debugsource-1.8.22-lp151.5.3.1 sudo-devel-1.8.22-lp151.5.3.1 sudo-test-1.8.22-lp151.5.3.1 References: https://www.suse.com/security/cve/CVE-2019-14287.html https://bugzilla.suse.com/1153674

1 0