October 2019 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2019:2245-1: moderate: Security update for lxc
by opensuse-security＠opensuse.org 03 Oct '19

03 Oct '19

openSUSE Security Update: Security update for lxc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2245-1 Rating: moderate References: #1131762 Cross-References: CVE-2019-5736 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for lxc fixes the following issues: Update to lxc 3.2.1. The changelog can be found at https://discuss.linuxcontainers.org/t/lxc-3-2-1-has-been-released/5322 + seccomp: support syscall forwarding to userspace + add lxc.seccomp.allow_nesting + pidfd: Add initial support for the new pidfd api * Many hardening improvements. * Use /sys/kernel/cgroup/delegate file for cgroup v2. * Fix CVE-2019-5736 equivalent bug. - fix apparmor dropin to be compatible with LXC 3.1.0 (boo#1131762) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2245=1 Package List: - openSUSE Leap 15.1 (noarch): lxc-bash-completion-3.2.1-lp151.4.5.1 - openSUSE Leap 15.1 (x86_64): liblxc-devel-3.2.1-lp151.4.5.1 liblxc1-3.2.1-lp151.4.5.1 liblxc1-debuginfo-3.2.1-lp151.4.5.1 lxc-3.2.1-lp151.4.5.1 lxc-debuginfo-3.2.1-lp151.4.5.1 lxc-debugsource-3.2.1-lp151.4.5.1 pam_cgfs-3.2.1-lp151.4.5.1 pam_cgfs-debuginfo-3.2.1-lp151.4.5.1 References: https://www.suse.com/security/cve/CVE-2019-5736.html https://bugzilla.suse.com/1131762

1 0

openSUSE-SU-2019:2244-1: moderate: Security update for rust
by opensuse-security＠opensuse.org 03 Oct '19

03 Oct '19

openSUSE Security Update: Security update for rust ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2244-1 Rating: moderate References: #1096945 #1100691 #1133283 #1134978 Cross-References: CVE-2018-1000622 CVE-2019-12083 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves two vulnerabilities and has two fixes is now available. Description: This update for rust fixes the following issues: Rust was updated to version 1.36.0. Security issues fixed: - CVE-2019-12083: a standard method can be overridden violating Rust's safety guarantees and causing memory unsafety (bsc#1134978) - CVE-2018-1000622: rustdoc loads plugins from world writable directory allowing for arbitrary code execution (bsc#1100691) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2244=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): cargo-1.36.0-lp151.5.4.2 cargo-debuginfo-1.36.0-lp151.5.4.2 clippy-1.36.0-lp151.5.4.2 clippy-debuginfo-1.36.0-lp151.5.4.2 rls-1.36.0-lp151.5.4.2 rls-debuginfo-1.36.0-lp151.5.4.2 rust-1.36.0-lp151.5.4.2 rust-analysis-1.36.0-lp151.5.4.2 rust-debuginfo-1.36.0-lp151.5.4.2 rust-debugsource-1.36.0-lp151.5.4.2 rust-doc-1.36.0-lp151.5.4.2 rust-gdb-1.36.0-lp151.5.4.2 rust-std-static-1.36.0-lp151.5.4.2 rustfmt-1.36.0-lp151.5.4.2 rustfmt-debuginfo-1.36.0-lp151.5.4.2 - openSUSE Leap 15.1 (noarch): cargo-doc-1.36.0-lp151.5.4.2 rust-src-1.36.0-lp151.5.4.2 References: https://www.suse.com/security/cve/CVE-2018-1000622.html https://www.suse.com/security/cve/CVE-2019-12083.html https://bugzilla.suse.com/1096945 https://bugzilla.suse.com/1100691 https://bugzilla.suse.com/1133283 https://bugzilla.suse.com/1134978

1 0

openSUSE-RU-2019:2242-1: important: Recommended update for google-compute-engine
by maintenance＠opensuse.org 02 Oct '19

02 Oct '19

openSUSE Recommended Update: Recommended update for google-compute-engine ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2242-1 Rating: important References: #1150058 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for google-compute-engine fixes the following issues: - Fixes an issue where the implementation of Google Private Access over IPv6 was not complete and thus crashed the application (bsc#1150058) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2242=1 Package List: - openSUSE Leap 15.0 (x86_64): google-compute-engine-debugsource-20190801-lp150.2.29.1 google-compute-engine-oslogin-20190801-lp150.2.29.1 google-compute-engine-oslogin-debuginfo-20190801-lp150.2.29.1 - openSUSE Leap 15.0 (noarch): google-compute-engine-init-20190801-lp150.2.29.1 References: https://bugzilla.suse.com/1150058

1 0

openSUSE-RU-2019:2243-1: important: Recommended update for rmt-server
by maintenance＠opensuse.org 02 Oct '19

02 Oct '19

openSUSE Recommended Update: Recommended update for rmt-server ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2243-1 Rating: important References: #1136168 #1136178 #1138863 #1142641 #1145688 #1146611 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 6 recommended fixes can now be installed. Description: This update for rmt-server fixes the following issues: - Preserve cached metadata timestamps. (bsc#1146611) - Allow to mirror individual products/repositories. (bsc#1138863) - RMT now uses mirror_src to determine whether or not to download source packages. (bsc#1145688) - Fix RMT installer_repo call for empty release_type parameter. (bsc#1136178) - Clean up download queue on metadata download errors. (bsc#1142641) - Removed release stage from names to be consistent with SCC. (bsc#1136168) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2243=1 Package List: - openSUSE Leap 15.1 (x86_64): rmt-server-2.4.1-lp151.2.6.1 rmt-server-config-2.4.1-lp151.2.6.1 rmt-server-debuginfo-2.4.1-lp151.2.6.1 rmt-server-debugsource-2.4.1-lp151.2.6.1 rmt-server-pubcloud-2.4.1-lp151.2.6.1 References: https://bugzilla.suse.com/1136168 https://bugzilla.suse.com/1136178 https://bugzilla.suse.com/1138863 https://bugzilla.suse.com/1142641 https://bugzilla.suse.com/1145688 https://bugzilla.suse.com/1146611

1 0

openSUSE-RU-2019:2241-1: important: Recommended update for google-compute-engine
by maintenance＠opensuse.org 02 Oct '19

02 Oct '19

openSUSE Recommended Update: Recommended update for google-compute-engine ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2241-1 Rating: important References: #1150058 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for google-compute-engine fixes the following issues: - Fixes an issue where the implementation of Google Private Access over IPv6 was not complete and thus crashed the application (bsc#1150058) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2241=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): google-compute-engine-debugsource-20190801-lp151.2.13.1 google-compute-engine-oslogin-20190801-lp151.2.13.1 google-compute-engine-oslogin-debuginfo-20190801-lp151.2.13.1 - openSUSE Leap 15.1 (x86_64): google-compute-engine-oslogin-32bit-20190801-lp151.2.13.1 google-compute-engine-oslogin-32bit-debuginfo-20190801-lp151.2.13.1 - openSUSE Leap 15.1 (noarch): google-compute-engine-init-20190801-lp151.2.13.1 References: https://bugzilla.suse.com/1150058

1 0

openSUSE-RU-2019:2240-1: moderate: Recommended update for lxcfs
by maintenance＠opensuse.org 02 Oct '19

02 Oct '19

openSUSE Recommended Update: Recommended update for lxcfs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2240-1 Rating: moderate References: Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for lxcfs fixes the following issues: lxcfs was updated to version 3.1.2 (released on the 24th of July 2019) New Features: * Add support for per-container cpu usage in /proc/stat * Add support for load average (loadavg) virtualization * Display cpus in /proc/cpuinfo based on cpu quotas * Allow to disable swap in /proc/meminfo output * Virtualize /sys/devices/system/cpu/online * Enable higher precision output in /proc/uptime * Add support for FUSE nonempty option Bugfixes: * bindings: ensure that opts is non NULL * Makefile: Fix typo in file name * remove unused functions * sys dirs do not need to implement 'read' method * lxcfs: coding style update * config: Adds RPM spec file. * config: Adds reload mode to sysvinit and systemd scripts. * bindings: prevent NULL pointer dereference * stat: check for out of bound access to cpuacct usage data * calc_hash(): do not apply modulo LOAD_SIZE * tests: include missing sys/sysmacros.h header * bindings: prevent double free * bindings: better logging for write_string() * meminfo: set ShmemHugePages and ShmemPmdMapped to zero * bindings: fix memory leak in calc_pid() * travis: fix .travis.yml * bindings: fix memory leak in proc_loadavg_read() - Make lxcfs-hooks-lxc supplement liblxc1 instead of lxc, since there are other liblxc1 users (such as LXD). Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2240=1 Package List: - openSUSE Leap 15.1 (x86_64): lxcfs-3.1.2-lp151.2.3.1 lxcfs-debuginfo-3.1.2-lp151.2.3.1 lxcfs-debugsource-3.1.2-lp151.2.3.1 - openSUSE Leap 15.1 (noarch): lxcfs-hooks-lxc-3.1.2-lp151.2.3.1 References:

1 0

openSUSE-RU-2019:2239-1: moderate: Recommended update for lxd
by maintenance＠opensuse.org 02 Oct '19

02 Oct '19

openSUSE Recommended Update: Recommended update for lxd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2239-1 Rating: moderate References: #1151874 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for lxd fixes the following issues: Update to LXD 3.17. The full upstream changelog is available from: https://discuss.linuxcontainers.org/t/lxd-3-17-has-been-released/5679 boo#1151874 + Storage pool backed image tarballs and backups + Container configuration as YAML on lxc init and lxc launch * Ported to final Dqlite 1.0 * Database rework * Container devices rework * Storage rework Update to LXD 3.15. The full upstream changelog is available from: https://discuss.linuxcontainers.org/t/lxd-3-15-has-been-released/5218 + Switch to dqlite 1.0. * Reworked DHCP lease handling * Reworked cluster heartbeat handling * Better syscall interception framework * More reliable unix socket proxying + Hardware VLAN and MAC filtering on SR-IOV + New storage-size option for lxd-p2c + IPv4 and IPv6 filtering (spoof protection) * Reworked resources API (host hardware) + Control over uid, gid and cwd during command execution + Quota support for custom storage volumes on dir backend * Lots of bug fixes... Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2239=1 Package List: - openSUSE Leap 15.1 (noarch): lxd-bash-completion-3.17-lp151.8.1 - openSUSE Leap 15.1 (x86_64): lxd-3.17-lp151.8.1 References: https://bugzilla.suse.com/1151874

1 0

openSUSE-RU-2019:2238-1: moderate: Recommended update for spec-cleaner
by maintenance＠opensuse.org 01 Oct '19

01 Oct '19

openSUSE Recommended Update: Recommended update for spec-cleaner ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2238-1 Rating: moderate References: #1099674 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for spec-cleaner fixes the following issues: Version update to 1.1.5 (boo#1099674): * Use https in URL in spec-cleaner.spec test * Remove duplicated backslash in regexp * Parallelize test run * Add jupyter_move_config to excludes from bracketing * Do not fail if URL is ftp:// or other protocol * Make xdist enabled by default on all test runs and add xdist to deps * By default remove groups from packages Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2238=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2238=1 Package List: - openSUSE Leap 15.1 (noarch): spec-cleaner-1.1.5-lp151.2.6.1 spec-cleaner-format_spec_file-1.1.5-lp151.2.6.1 - openSUSE Leap 15.0 (noarch): spec-cleaner-1.1.5-lp150.67.1 spec-cleaner-format_spec_file-1.1.5-lp150.67.1 References: https://bugzilla.suse.com/1099674

1 0

openSUSE-SU-2019:2234-1: moderate: Security update for nghttp2
by opensuse-security＠opensuse.org 01 Oct '19

01 Oct '19

openSUSE Security Update: Security update for nghttp2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2234-1 Rating: moderate References: #1112438 #1125689 #1134616 #1146182 #1146184 Cross-References: CVE-2019-9511 CVE-2019-9513 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves two vulnerabilities and has three fixes is now available. Description: This update for nghttp2 fixes the following issues: Security issues fixed: - CVE-2019-9513: Fixed HTTP/2 implementation that is vulnerable to resource loops, potentially leading to a denial of service (bsc#1146184). - CVE-2019-9511: Fixed HTTP/2 implementations that are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service (bsc#11461). Bug fixes and enhancements: - Fixed mistake in spec file (bsc#1125689) - Fixed build issue with boost 1.70.0 (bsc#1134616) - Feature: Add W&S module (FATE#326776, bsc#1112438) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2234=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libnghttp2-14-1.39.2-lp150.2.3.1 libnghttp2-14-debuginfo-1.39.2-lp150.2.3.1 libnghttp2-devel-1.39.2-lp150.2.3.1 libnghttp2_asio-devel-1.39.2-lp150.2.3.1 libnghttp2_asio1-1.39.2-lp150.2.3.1 libnghttp2_asio1-debuginfo-1.39.2-lp150.2.3.1 nghttp2-1.39.2-lp150.2.3.1 nghttp2-debuginfo-1.39.2-lp150.2.3.1 nghttp2-debugsource-1.39.2-lp150.2.3.1 nghttp2-python-debugsource-1.39.2-lp150.2.3.1 python3-nghttp2-1.39.2-lp150.2.3.1 python3-nghttp2-debuginfo-1.39.2-lp150.2.3.1 - openSUSE Leap 15.0 (x86_64): libnghttp2-14-32bit-1.39.2-lp150.2.3.1 libnghttp2-14-32bit-debuginfo-1.39.2-lp150.2.3.1 libnghttp2_asio1-32bit-1.39.2-lp150.2.3.1 libnghttp2_asio1-32bit-debuginfo-1.39.2-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2019-9511.html https://www.suse.com/security/cve/CVE-2019-9513.html https://bugzilla.suse.com/1112438 https://bugzilla.suse.com/1125689 https://bugzilla.suse.com/1134616 https://bugzilla.suse.com/1146182 https://bugzilla.suse.com/1146184

1 0

openSUSE-RU-2019:2236-1: moderate: Recommended update for openwsman
by maintenance＠opensuse.org 01 Oct '19

01 Oct '19

openSUSE Recommended Update: Recommended update for openwsman ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2236-1 Rating: moderate References: #1105331 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for openwsman fixes the following issues: - Adds CIM_NAMESPACE if it's not already present (bsc#1105331) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2236=1 Package List: - openSUSE Leap 15.1 (x86_64): libwsman-devel-2.6.7-lp151.4.3.1 libwsman3-2.6.7-lp151.4.3.1 libwsman3-debuginfo-2.6.7-lp151.4.3.1 libwsman_clientpp-devel-2.6.7-lp151.4.3.1 libwsman_clientpp1-2.6.7-lp151.4.3.1 libwsman_clientpp1-debuginfo-2.6.7-lp151.4.3.1 openwsman-debuginfo-2.6.7-lp151.4.3.1 openwsman-debugsource-2.6.7-lp151.4.3.1 openwsman-java-2.6.7-lp151.4.3.1 openwsman-perl-2.6.7-lp151.4.3.1 openwsman-perl-debuginfo-2.6.7-lp151.4.3.1 openwsman-ruby-2.6.7-lp151.4.3.1 openwsman-ruby-debuginfo-2.6.7-lp151.4.3.1 openwsman-ruby-docs-2.6.7-lp151.4.3.1 openwsman-server-2.6.7-lp151.4.3.1 openwsman-server-debuginfo-2.6.7-lp151.4.3.1 openwsman-server-plugin-ruby-2.6.7-lp151.4.3.1 openwsman-server-plugin-ruby-debuginfo-2.6.7-lp151.4.3.1 python3-openwsman-2.6.7-lp151.4.3.1 python3-openwsman-debuginfo-2.6.7-lp151.4.3.1 winrs-2.6.7-lp151.4.3.1 References: https://bugzilla.suse.com/1105331

1 0