November 2019 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2019:2523-1: moderate: Recommended update for kernel-firmware
by maintenance＠opensuse.org 17 Nov '19

17 Nov '19

openSUSE Recommended Update: Recommended update for kernel-firmware ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2523-1 Rating: moderate References: #1155307 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for kernel-firmware fixes the following issues: - Upgrade for SLE15-SP2 / Leap 15.2 (jsc#SLE-8379,bsc#1155307) - Chelsio driver loads firmware configuration file to allow firmware to distribute resources before chip bring up. Chelsio NIC driver, cxgb4 searches for firmware config file at /lib/firmware/cxgb4/ directory. - Add symlinks for Tegra VIC firmware binaries - Update the following firmwares: - amdgpu: update vega20 ucode for 19.30 - amdgpu: update vega12 ucode for 19.30 - amdgpu: update vega10 ucode for 19.30 - amdgpu: update picasso ucode for 19.30 - amdgpu: update raven2 ucode for 19.30 - amdgpu: update raven ucode for 19.30 - amdgpu: add new raven rlc firmware - amdgpu: update vega10 VCE firmware - amdgpu: update picasso vcn firmware - amdgpu: update raven vcn firmware - amdgpu: update tonga to latest 19.20 firmware - amdgpu: update vega12 to latest 19.20 firmware - amdgpu: update polaris12 to latest 19.20 firmware - amdgpu: update raven2 to latest 19.20 firmware - amdgpu: update raven to latest 19.20 firmware - amdgpu: add initial navi14 firmware form 19.30 - amdgpu: add initial navi10 firmware - ath10k: QCA9984 hw1.0: update board-2.bin - ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00046 - ath10k: QCA988X hw2.0: update firmware-5.bin to 10.2.4-1.0-00045 - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00040 - ath10k: QCA9887 hw1.0: update firmware-5.bin to 10.2.4-1.0-00045 - ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00140-QCARMSWPZ-1 - ath10k: QCA4019 hw1.0: update board-2.bin - bnx2x: Add FW 7.13.15.0. - brcm: Add 43455 based AP6255 NVRAM for the Minix Neo Z83-4 Mini PC - brcm: Add 43340 based AP6234 NVRAM for the PoV TAB-P1006W-232 tablet - cxgb4: update firmware to revision 1.24.3.0 - drm/i915/firmware: Add v9.0.0 of HuC for Icelake - drm/i915/firmware: Add v4.0.0 of HuC for Cometlake - drm/i915/firmware: Add v4.0.0 of HuC for Geminilake - drm/i915/firmware: Add v2.0.0 of HuC for Broxton - drm/i915/firmware: Add v4.0.0 of HuC for Kabylake - drm/i915/firmware: Add v2.0.0 of HuC for Skylake - drm/i915/firmware: Add v33 of GuC for CML - drm/i915/firmware: Add v2.04 of DMC for TGL - drm/i915/firmware: Add v1.09 of DMC for ICL - drm/i915/firmware: Add v33 of GuC for ICL - drm/i915/firmware: Add v33 of GuC for KBL - drm/i915/firmware: Add v33 of GuC for SKL - drm/i915/firmware: Add v33 of GuC for GLK - drm/i915/firmware: Add v33 of GuC for BXT - ice: Fix up WHENCE entry and symlink - ice: Add package file for Intel E800 series driver - iwlwifi: add new firmwares for integrated 22000 series - iwlwifi: update FW for 22000 to Core45-96 - iwlwifi: update FWs for 9000 series to Core45-96 - iwlwifi: update Core45 FWs for 22260, 9000 and 9260 - iwlwifi: udpate -36 firmware for 8000 series - iwlwifi: update -48 FWs for Qu and cc - iwlwifi: update FWs for 3168, 7265D, 9000, 9260, 8000, 8265 and cc - iwlwifi: update FWs to core45-152 release - linux-firmware: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Update firmware file for Intel Bluetooth 22161 - linux-firmware: Update firmware file for Intel Bluetooth 9560 - linux-firmware: Update firmware file for Intel Bluetooth 9260 - linux-firmware: Update firmware file for Intel Bluetooth AX200 - linux-firmware: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Update firmware file for Intel Bluetooth 9560 - linux-firmware: Update firmware file for Intel Bluetooth 9260 - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Bluetooth AX200 - linux-firmware: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Update firmware file for Intel Bluetooth 9560 - linux-firmware: Update firmware file for Intel Bluetooth 9260 - linux-firmware: Update NXP Management Complex firmware to version 10.16.2 - linux-firmware: rsi: add firmware image for redpine 9116 chipset - Mellanox: Add new mlxsw_spectrum firmware 13.2000.1886 - Mellanox: Add new mlxsw_spectrum firmware 13.2000.1886 - Mellanox: Add new mlxsw_spectrum2 firmware 29.2000.2308 - Mellanox: Add new mlxsw_spectrum firmware 13.2000.2308 - nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.10.A.38 - nvidia: Add XUSB firmware for Tegra186 - nvidia: add missing entries in WHENCE - nvidia: Update Tegra210 XUSB firmware to v50.24 - nvidia: Add XUSB firmware for Tegra194 - qcom: add firmware files for Adreno a630 - rtl_bt: Update configuration file for BT part of RTL8822CU - rtl_bt: Update RTL8822C BT FW to V0x098A_94A4 - rtl_bt: Update RTL8723D BT FW to 0x828A_96F1 - rtl_nic: add firmware rtl8125a-3 - rtl_nic: add firmware files for RTL8153 - rtlwifi: rtl8821ae: Add firmware for the RTL8812AE variant. - rtw88: add a README file - rtw88: RTL8822C: add WoW firmware v7.3 - rtw88: RTL8822C: update rtw8822c_fw.bin to v7.3 This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2523=1 Package List: - openSUSE Leap 15.0 (noarch): kernel-firmware-20191023-lp150.2.25.1 ucode-amd-20191023-lp150.2.25.1 References: https://bugzilla.suse.com/1155307

1 0

openSUSE-SU-2019:2522-1: moderate: Security update for go1.12
by opensuse-security＠opensuse.org 17 Nov '19

17 Nov '19

openSUSE Security Update: Security update for go1.12 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2522-1 Rating: moderate References: #1141689 #1152082 #1154402 Cross-References: CVE-2019-16276 CVE-2019-17596 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for go1.12 fixes the following issues: Security issues fixed: - CVE-2019-16276: Fixed the handling of invalid HTTP headers, which had allowed request smuggling (bsc#1152082). - CVE-2019-17596: Fixed a panic in dsa.Verify caused by invalid public keys (bsc#1154402). Non-security issue fixed: - Go was updated to version 1.12.12 (bsc#1141689). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2522=1 Package List: - openSUSE Leap 15.1 (x86_64): go1.12-1.12.12-lp151.2.25.1 go1.12-doc-1.12.12-lp151.2.25.1 go1.12-race-1.12.12-lp151.2.25.1 References: https://www.suse.com/security/cve/CVE-2019-16276.html https://www.suse.com/security/cve/CVE-2019-17596.html https://bugzilla.suse.com/1141689 https://bugzilla.suse.com/1152082 https://bugzilla.suse.com/1154402

1 0

openSUSE-RU-2019:2520-1: moderate: Recommended update for python-translation-finder
by maintenance＠opensuse.org 17 Nov '19

17 Nov '19

openSUSE Recommended Update: Recommended update for python-translation-finder ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2520-1 Rating: moderate References: #1142582 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-translation-finder provides the following fixes: - Update from version 1.6 to 1.7. (boo#1142582) * Improved handling of invalid JSON files. * Improved detection of flat JSON files. * Improved compatibility with OSX. * Improved detection of new base with gettext PO files. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2520=1 Package List: - openSUSE Leap 15.1 (noarch): python2-translation-finder-1.7-lp151.2.6.1 python3-translation-finder-1.7-lp151.2.6.1 References: https://bugzilla.suse.com/1142582

1 0

openSUSE-SU-2019:2519-1: moderate: Security update for ImageMagick
by opensuse-security＠opensuse.org 16 Nov '19

16 Nov '19

openSUSE Security Update: Security update for ImageMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2519-1 Rating: moderate References: #1146065 #1146068 #1146211 #1146212 #1146213 #1151781 #1151782 #1151783 #1151784 #1151785 #1151786 Cross-References: CVE-2019-14980 CVE-2019-14981 CVE-2019-15139 CVE-2019-15140 CVE-2019-15141 CVE-2019-16708 CVE-2019-16709 CVE-2019-16710 CVE-2019-16711 CVE-2019-16712 CVE-2019-16713 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes 11 vulnerabilities is now available. Description: This update for ImageMagick fixes the following issues: Security issues fixed: - CVE-2019-15139: Fixed a denial-of-service vulnerability in ReadXWDImage (bsc#1146213). - CVE-2019-15140: Fixed a use-after-free bug in the Matlab image parser (bsc#1146212). - CVE-2019-15141: Fixed a divide-by-zero vulnerability in the MeanShiftImage function (bsc#1146211). - CVE-2019-14980: Fixed an application crash resulting from a heap-based buffer over-read in WriteTIFFImage (bsc#1146068). - CVE-2019-14981: Fixed a use after free in the UnmapBlob function (bsc#1146065). - CVE-2019-16708: Fixed a memory leak in magick/xwindow.c (bsc#1151781). - CVE-2019-16709: Fixed a memory leak in coders/dps.c (bsc#1151782). - CVE-2019-16710: Fixed a memory leak in coders/dot.c (bsc#1151783). - CVE-2019-16711: Fixed a memory leak in Huffman2DEncodeImage in coders/ps2.c (bsc#1151784). - CVE-2019-16712: Fixed a memory leak in Huffman2DEncodeImage in coders/ps3.c (bsc#1151785). - CVE-2019-16713: Fixed a memory leak in coders/dot.c (bsc#1151786). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2519=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): ImageMagick-7.0.7.34-lp150.2.41.1 ImageMagick-config-7-SUSE-7.0.7.34-lp150.2.41.1 ImageMagick-config-7-upstream-7.0.7.34-lp150.2.41.1 ImageMagick-debuginfo-7.0.7.34-lp150.2.41.1 ImageMagick-debugsource-7.0.7.34-lp150.2.41.1 ImageMagick-devel-7.0.7.34-lp150.2.41.1 ImageMagick-extra-7.0.7.34-lp150.2.41.1 ImageMagick-extra-debuginfo-7.0.7.34-lp150.2.41.1 libMagick++-7_Q16HDRI4-7.0.7.34-lp150.2.41.1 libMagick++-7_Q16HDRI4-debuginfo-7.0.7.34-lp150.2.41.1 libMagick++-devel-7.0.7.34-lp150.2.41.1 libMagickCore-7_Q16HDRI6-7.0.7.34-lp150.2.41.1 libMagickCore-7_Q16HDRI6-debuginfo-7.0.7.34-lp150.2.41.1 libMagickWand-7_Q16HDRI6-7.0.7.34-lp150.2.41.1 libMagickWand-7_Q16HDRI6-debuginfo-7.0.7.34-lp150.2.41.1 perl-PerlMagick-7.0.7.34-lp150.2.41.1 perl-PerlMagick-debuginfo-7.0.7.34-lp150.2.41.1 - openSUSE Leap 15.0 (noarch): ImageMagick-doc-7.0.7.34-lp150.2.41.1 - openSUSE Leap 15.0 (x86_64): ImageMagick-devel-32bit-7.0.7.34-lp150.2.41.1 libMagick++-7_Q16HDRI4-32bit-7.0.7.34-lp150.2.41.1 libMagick++-7_Q16HDRI4-32bit-debuginfo-7.0.7.34-lp150.2.41.1 libMagick++-devel-32bit-7.0.7.34-lp150.2.41.1 libMagickCore-7_Q16HDRI6-32bit-7.0.7.34-lp150.2.41.1 libMagickCore-7_Q16HDRI6-32bit-debuginfo-7.0.7.34-lp150.2.41.1 libMagickWand-7_Q16HDRI6-32bit-7.0.7.34-lp150.2.41.1 libMagickWand-7_Q16HDRI6-32bit-debuginfo-7.0.7.34-lp150.2.41.1 References: https://www.suse.com/security/cve/CVE-2019-14980.html https://www.suse.com/security/cve/CVE-2019-14981.html https://www.suse.com/security/cve/CVE-2019-15139.html https://www.suse.com/security/cve/CVE-2019-15140.html https://www.suse.com/security/cve/CVE-2019-15141.html https://www.suse.com/security/cve/CVE-2019-16708.html https://www.suse.com/security/cve/CVE-2019-16709.html https://www.suse.com/security/cve/CVE-2019-16710.html https://www.suse.com/security/cve/CVE-2019-16711.html https://www.suse.com/security/cve/CVE-2019-16712.html https://www.suse.com/security/cve/CVE-2019-16713.html https://bugzilla.suse.com/1146065 https://bugzilla.suse.com/1146068 https://bugzilla.suse.com/1146211 https://bugzilla.suse.com/1146212 https://bugzilla.suse.com/1146213 https://bugzilla.suse.com/1151781 https://bugzilla.suse.com/1151782 https://bugzilla.suse.com/1151783 https://bugzilla.suse.com/1151784 https://bugzilla.suse.com/1151785 https://bugzilla.suse.com/1151786

1 0

openSUSE-RU-2019:2518-1: moderate: Recommended update for trytond
by maintenance＠opensuse.org 15 Nov '19

15 Nov '19

openSUSE Recommended Update: Recommended update for trytond ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2518-1 Rating: moderate References: #1155685 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for trytond fixes the following issues: - fix for wrong home directory (boo#1155685) This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-2518=1 Package List: - openSUSE Backports SLE-15 (noarch): trytond-4.2.22-bp150.2.22.1 References: https://bugzilla.suse.com/1155685

1 0

openSUSE-RU-2019:2517-1: moderate: Recommended update for trytond
by maintenance＠opensuse.org 15 Nov '19

15 Nov '19

openSUSE Recommended Update: Recommended update for trytond ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2517-1 Rating: moderate References: #1155685 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for trytond fixes the following issues: - fix for wrong home directory (boo#1155685) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2517=1 Package List: - openSUSE Leap 15.0 (noarch): trytond-4.2.22-lp150.2.22.1 References: https://bugzilla.suse.com/1155685

1 0

openSUSE-RU-2019:2516-1: Recommended update for fcitx-qt5
by maintenance＠opensuse.org 15 Nov '19

15 Nov '19

openSUSE Recommended Update: Recommended update for fcitx-qt5 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2516-1 Rating: low References: #1152412 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for fcitx-qt5 fixes the following issue: - QOwnNotes always crash at close with fcitx-qt5 installed. (boo#1152412) This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-2516=1 Package List: - openSUSE Backports SLE-15 (ppc64le s390x x86_64): fcitx-qt5-1.2.2-bp150.2.6.1 fcitx-qt5-devel-1.2.2-bp150.2.6.1 References: https://bugzilla.suse.com/1152412

1 0

openSUSE-SU-2019:2514-1: moderate: Security update for libtomcrypt
by opensuse-security＠opensuse.org 15 Nov '19

15 Nov '19

openSUSE Security Update: Security update for libtomcrypt ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2514-1 Rating: moderate References: #1153433 Cross-References: CVE-2019-17362 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libtomcrypt fixes the following issue: CVE-2019-17362: Fixed an improper detection of invalid UTF-8 sequences that could have led to DoS or information disclosure via crafted DER-encoded data (bsc#1153433). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2514=1 Package List: - openSUSE Leap 15.1 (x86_64): libtomcrypt-debugsource-1.17-lp151.3.3.1 libtomcrypt-devel-1.17-lp151.3.3.1 libtomcrypt-examples-1.17-lp151.3.3.1 libtomcrypt0-1.17-lp151.3.3.1 libtomcrypt0-debuginfo-1.17-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2019-17362.html https://bugzilla.suse.com/1153433

1 0

openSUSE-SU-2019:2515-1: moderate: Security update for ImageMagick
by opensuse-security＠opensuse.org 15 Nov '19

15 Nov '19

openSUSE Security Update: Security update for ImageMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2515-1 Rating: moderate References: #1146065 #1146068 #1146211 #1146212 #1146213 #1151781 #1151782 #1151783 #1151784 #1151785 #1151786 Cross-References: CVE-2019-14980 CVE-2019-14981 CVE-2019-15139 CVE-2019-15140 CVE-2019-15141 CVE-2019-16708 CVE-2019-16709 CVE-2019-16710 CVE-2019-16711 CVE-2019-16712 CVE-2019-16713 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 11 vulnerabilities is now available. Description: This update for ImageMagick fixes the following issues: Security issues fixed: - CVE-2019-15139: Fixed a denial-of-service vulnerability in ReadXWDImage (bsc#1146213). - CVE-2019-15140: Fixed a use-after-free bug in the Matlab image parser (bsc#1146212). - CVE-2019-15141: Fixed a divide-by-zero vulnerability in the MeanShiftImage function (bsc#1146211). - CVE-2019-14980: Fixed an application crash resulting from a heap-based buffer over-read in WriteTIFFImage (bsc#1146068). - CVE-2019-14981: Fixed a use after free in the UnmapBlob function (bsc#1146065). - CVE-2019-16708: Fixed a memory leak in magick/xwindow.c (bsc#1151781). - CVE-2019-16709: Fixed a memory leak in coders/dps.c (bsc#1151782). - CVE-2019-16710: Fixed a memory leak in coders/dot.c (bsc#1151783). - CVE-2019-16711: Fixed a memory leak in Huffman2DEncodeImage in coders/ps2.c (bsc#1151784). - CVE-2019-16712: Fixed a memory leak in Huffman2DEncodeImage in coders/ps3.c (bsc#1151785). - CVE-2019-16713: Fixed a memory leak in coders/dot.c (bsc#1151786). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2515=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): ImageMagick-7.0.7.34-lp151.7.12.1 ImageMagick-config-7-SUSE-7.0.7.34-lp151.7.12.1 ImageMagick-config-7-upstream-7.0.7.34-lp151.7.12.1 ImageMagick-debuginfo-7.0.7.34-lp151.7.12.1 ImageMagick-debugsource-7.0.7.34-lp151.7.12.1 ImageMagick-devel-7.0.7.34-lp151.7.12.1 ImageMagick-extra-7.0.7.34-lp151.7.12.1 ImageMagick-extra-debuginfo-7.0.7.34-lp151.7.12.1 libMagick++-7_Q16HDRI4-7.0.7.34-lp151.7.12.1 libMagick++-7_Q16HDRI4-debuginfo-7.0.7.34-lp151.7.12.1 libMagick++-devel-7.0.7.34-lp151.7.12.1 libMagickCore-7_Q16HDRI6-7.0.7.34-lp151.7.12.1 libMagickCore-7_Q16HDRI6-debuginfo-7.0.7.34-lp151.7.12.1 libMagickWand-7_Q16HDRI6-7.0.7.34-lp151.7.12.1 libMagickWand-7_Q16HDRI6-debuginfo-7.0.7.34-lp151.7.12.1 perl-PerlMagick-7.0.7.34-lp151.7.12.1 perl-PerlMagick-debuginfo-7.0.7.34-lp151.7.12.1 - openSUSE Leap 15.1 (noarch): ImageMagick-doc-7.0.7.34-lp151.7.12.1 - openSUSE Leap 15.1 (x86_64): ImageMagick-devel-32bit-7.0.7.34-lp151.7.12.1 libMagick++-7_Q16HDRI4-32bit-7.0.7.34-lp151.7.12.1 libMagick++-7_Q16HDRI4-32bit-debuginfo-7.0.7.34-lp151.7.12.1 libMagick++-devel-32bit-7.0.7.34-lp151.7.12.1 libMagickCore-7_Q16HDRI6-32bit-7.0.7.34-lp151.7.12.1 libMagickCore-7_Q16HDRI6-32bit-debuginfo-7.0.7.34-lp151.7.12.1 libMagickWand-7_Q16HDRI6-32bit-7.0.7.34-lp151.7.12.1 libMagickWand-7_Q16HDRI6-32bit-debuginfo-7.0.7.34-lp151.7.12.1 References: https://www.suse.com/security/cve/CVE-2019-14980.html https://www.suse.com/security/cve/CVE-2019-14981.html https://www.suse.com/security/cve/CVE-2019-15139.html https://www.suse.com/security/cve/CVE-2019-15140.html https://www.suse.com/security/cve/CVE-2019-15141.html https://www.suse.com/security/cve/CVE-2019-16708.html https://www.suse.com/security/cve/CVE-2019-16709.html https://www.suse.com/security/cve/CVE-2019-16710.html https://www.suse.com/security/cve/CVE-2019-16711.html https://www.suse.com/security/cve/CVE-2019-16712.html https://www.suse.com/security/cve/CVE-2019-16713.html https://bugzilla.suse.com/1146065 https://bugzilla.suse.com/1146068 https://bugzilla.suse.com/1146211 https://bugzilla.suse.com/1146212 https://bugzilla.suse.com/1146213 https://bugzilla.suse.com/1151781 https://bugzilla.suse.com/1151782 https://bugzilla.suse.com/1151783 https://bugzilla.suse.com/1151784 https://bugzilla.suse.com/1151785 https://bugzilla.suse.com/1151786

1 0

openSUSE-RU-2019:2513-1: moderate: Recommended update for spec-cleaner
by maintenance＠opensuse.org 14 Nov '19

14 Nov '19

openSUSE Recommended Update: Recommended update for spec-cleaner ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2513-1 Rating: moderate References: #1099674 Affected Products: openSUSE Backports SLE-15-SP1 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for spec-cleaner fixes the following issues: Update to 1.1.6 (boo#1099674): * Do not remove groups by default. Now, groups are kept untouched by default. Introduce a new option '--remove-groups' that removes Group tags from the specfile. Remove '--preserve_groups' option. * Say goodbye to setup.py test usage as it is deprecated * Update the copyring and SUSE header string wrt #264 * Ignore hpc_configure macro from bracketing This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2513=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-2513=1 Package List: - openSUSE Backports SLE-15-SP1 (noarch): spec-cleaner-1.1.6-bp151.3.9.1 spec-cleaner-format_spec_file-1.1.6-bp151.3.9.1 - openSUSE Backports SLE-15 (noarch): spec-cleaner-1.1.6-bp150.70.1 spec-cleaner-format_spec_file-1.1.6-bp150.70.1 References: https://bugzilla.suse.com/1099674

1 0

openSUSE-RU-2019:2512-1: moderate: Recommended update for spec-cleaner
by maintenance＠opensuse.org 14 Nov '19

14 Nov '19

openSUSE Recommended Update: Recommended update for spec-cleaner ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2512-1 Rating: moderate References: #1099674 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for spec-cleaner fixes the following issues: Update to 1.1.6 (boo#1099674): * Do not remove groups by default. Now, groups are kept untouched by default. Introduce a new option '--remove-groups' that removes Group tags from the specfile. Remove '--preserve_groups' option. * Say goodbye to setup.py test usage as it is deprecated * Update the copyring and SUSE header string wrt #264 * Ignore hpc_configure macro from bracketing Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2512=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2512=1 Package List: - openSUSE Leap 15.1 (noarch): spec-cleaner-1.1.6-lp151.2.9.1 spec-cleaner-format_spec_file-1.1.6-lp151.2.9.1 - openSUSE Leap 15.0 (noarch): spec-cleaner-1.1.6-lp150.70.1 spec-cleaner-format_spec_file-1.1.6-lp150.70.1 References: https://bugzilla.suse.com/1099674

1 0

openSUSE-RU-2019:2502-1: moderate: Recommended update for llvm7
by maintenance＠opensuse.org 14 Nov '19

14 Nov '19

openSUSE Recommended Update: Recommended update for llvm7 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2502-1 Rating: moderate References: #1139584 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for llvm7 fixes the following issues: - Enable RTTI (run time type information) by built for LLVM. (bsc#1139584) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2502=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): clang7-7.0.1-lp151.2.6.1 clang7-checker-7.0.1-lp151.2.6.1 clang7-debuginfo-7.0.1-lp151.2.6.1 clang7-devel-7.0.1-lp151.2.6.1 libLLVM7-7.0.1-lp151.2.6.1 libLLVM7-debuginfo-7.0.1-lp151.2.6.1 libLTO7-7.0.1-lp151.2.6.1 libLTO7-debuginfo-7.0.1-lp151.2.6.1 libclang7-7.0.1-lp151.2.6.1 libclang7-debuginfo-7.0.1-lp151.2.6.1 libomp7-devel-7.0.1-lp151.2.6.1 libomp7-devel-debuginfo-7.0.1-lp151.2.6.1 lld7-7.0.1-lp151.2.6.1 lld7-debuginfo-7.0.1-lp151.2.6.1 llvm7-7.0.1-lp151.2.6.1 llvm7-LTO-devel-7.0.1-lp151.2.6.1 llvm7-debuginfo-7.0.1-lp151.2.6.1 llvm7-debugsource-7.0.1-lp151.2.6.1 llvm7-devel-7.0.1-lp151.2.6.1 llvm7-devel-debuginfo-7.0.1-lp151.2.6.1 llvm7-gold-7.0.1-lp151.2.6.1 llvm7-gold-debuginfo-7.0.1-lp151.2.6.1 llvm7-polly-7.0.1-lp151.2.6.1 llvm7-polly-debuginfo-7.0.1-lp151.2.6.1 llvm7-polly-devel-7.0.1-lp151.2.6.1 - openSUSE Leap 15.1 (x86_64): clang7-devel-32bit-7.0.1-lp151.2.6.1 libLLVM7-32bit-7.0.1-lp151.2.6.1 libLLVM7-32bit-debuginfo-7.0.1-lp151.2.6.1 libLTO7-32bit-7.0.1-lp151.2.6.1 libLTO7-32bit-debuginfo-7.0.1-lp151.2.6.1 libc++-devel-7.0.1-lp151.2.6.1 libc++1-7.0.1-lp151.2.6.1 libc++1-debuginfo-7.0.1-lp151.2.6.1 libc++abi-devel-7.0.1-lp151.2.6.1 libc++abi1-7.0.1-lp151.2.6.1 libc++abi1-debuginfo-7.0.1-lp151.2.6.1 libclang7-32bit-7.0.1-lp151.2.6.1 libclang7-32bit-debuginfo-7.0.1-lp151.2.6.1 liblldb7-7.0.1-lp151.2.6.1 liblldb7-debuginfo-7.0.1-lp151.2.6.1 lldb7-7.0.1-lp151.2.6.1 lldb7-debuginfo-7.0.1-lp151.2.6.1 lldb7-devel-7.0.1-lp151.2.6.1 llvm7-LTO-devel-32bit-7.0.1-lp151.2.6.1 llvm7-devel-32bit-7.0.1-lp151.2.6.1 llvm7-devel-32bit-debuginfo-7.0.1-lp151.2.6.1 python3-lldb7-7.0.1-lp151.2.6.1 python3-lldb7-debuginfo-7.0.1-lp151.2.6.1 - openSUSE Leap 15.1 (noarch): llvm7-emacs-plugins-7.0.1-lp151.2.6.1 llvm7-opt-viewer-7.0.1-lp151.2.6.1 llvm7-vim-plugins-7.0.1-lp151.2.6.1 python3-clang-7.0.1-lp151.2.6.1 References: https://bugzilla.suse.com/1139584

1 0

openSUSE-SU-2019:2507-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 14 Nov '19

14 Nov '19

openSUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2507-1 Rating: important References: #1048942 #1051510 #1082635 #1090631 #1096254 #1111666 #1117665 #1119461 #1119465 #1123034 #1135966 #1135967 #1138190 #1139073 #1140090 #1143706 #1144903 #1149119 #1150466 #1152665 #1152696 #1152697 #1152782 #1153681 #1154124 #1154526 #1154858 #1154905 #1154956 #1155021 #1155061 #1155671 #1155692 #1155836 #1155982 #1156187 #1156429 Cross-References: CVE-2018-12207 CVE-2019-0154 CVE-2019-0155 CVE-2019-10220 CVE-2019-11135 CVE-2019-16231 CVE-2019-17055 CVE-2019-18805 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves 8 vulnerabilities and has 29 fixes is now available. Description: The openSUSE Leap 15.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-0154: An unprotected read access to i915 registers has been fixed that could have been abused to facilitate a local denial-of-service attack. (bsc#1135966) - CVE-2019-0155: A privilege escalation vulnerability has been fixed in the i915 module that allowed batch buffers from user mode to gain super user privileges. (bsc#1135967) - CVE-2019-16231: drivers/net/fjes/fjes_main.c did not check the alloc_workqueue return value, leading to a NULL pointer dereference (bnc#1150466). - CVE-2019-18805: There was a net/ipv4/tcp_input.c signed integer overflow in tcp_ack_update_rtt() when userspace writes a very large integer to /proc/sys/net/ipv4/tcp_min_rtt_wlen, leading to a denial of service or possibly unspecified other impact, aka CID-19fad20d15a6 (bnc#1156187). - CVE-2019-17055: base_sock_create in drivers/isdn/mISDN/socket.c in the AF_ISDN network module did not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-b91ee4aa2a21 (bnc#1152782). - CVE-2019-11135: Aborting an asynchronous TSX operation on Intel CPUs with Transactional Memory support could be used to facilitate sidechannel information leaks out of microarchitectural buffers, similar to the previously described "Microarchitectural Data Sampling" attack. The Linux kernel was supplemented with the option to disable TSX operation altogether (requiring CPU Microcode updates on older systems) and better flushing of microarchitectural buffers (VERW). The set of options available is described in our TID at https://www.suse.com/support/kb/doc/?id=7024251 - CVE-2018-12207: Untrusted virtual machines on Intel CPUs could exploit a race condition in the Instruction Fetch Unit of the Intel CPU to cause a Machine Exception during Page Size Change, causing the CPU core to be non-functional. The Linux Kernel kvm hypervisor was adjusted to avoid page size changes in executable pages by splitting / merging huge pages into small pages as needed. More information can be found on https://www.suse.com/support/kb/doc/?id=7023735 - CVE-2019-10220: Added sanity checks on the pathnames passed to the user space. (bsc#1144903). The following non-security bugs were fixed: - ALSA: bebob: Fix prototype of helper function to return negative value (bsc#1051510). - ALSA: bebob: fix to detect configured source of sampling clock for Focusrite Saffire Pro i/o series (git-fixes). - ALSA: firewire-motu: add support for MOTU 4pre (bsc#1111666). - ALSA: hda/ca0132 - Fix possible workqueue stall (bsc#1155836). - ALSA: hda/realtek - Add support for ALC623 (bsc#1051510). - ALSA: hda/realtek - Fix 2 front mics of codec 0x623 (bsc#1051510). - ALSA: timer: Fix incorrectly assigned timer instance (git-fixes). - ALSA: timer: Fix mutex deadlock at releasing card (bsc#1051510). - ALSA: usb-audio: Add DSD support for Gustard U16/X26 USB Interface (bsc#1051510). - ALSA: usb-audio: Disable quirks for BOSS Katana amplifiers (bsc#1111666). - ALSA: usb-audio: Fix copy&paste error in the validator (bsc#1111666). - arm64: Add decoding macros for CP15_32 and CP15_64 traps (jsc#ECO-561). - arm64: Add part number for Neoverse N1 (jsc#ECO-561). - arm64: Add silicon-errata.txt entry for ARM erratum 1188873 (jsc#ECO-561). - arm64: Add support for new control bits CTR_EL0.DIC and CTR_EL0.IDC (jsc#ECO-561,jsc#SLE-10671). - arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (jsc#ECO-561). - arm64: arch_timer: Add workaround for ARM erratum 1188873 (jsc#ECO-561). - arm64: arch_timer: avoid unused function warning (jsc#ECO-561). - arm64: compat: Add CNTFRQ trap handler (jsc#ECO-561). - arm64: compat: Add CNTVCT trap handler (jsc#ECO-561). - arm64: compat: Add condition code checks and IT advance (jsc#ECO-561). - arm64: compat: Add cp15_32 and cp15_64 handler arrays (jsc#ECO-561). - arm64: compat: Add separate CP15 trapping hook (jsc#ECO-561). - arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (jsc#ECO-561,jsc#SLE-10671). - arm64: cpu_errata: Remove ARM64_MISMATCHED_CACHE_LINE_SIZE (jsc#ECO-561,jsc#SLE-10671). - arm64/cpufeature: Convert hook_lock to raw_spin_lock_t in cpu_enable_ssbs() (jsc#ECO-561). - arm64: cpufeature: ctr: Fix cpu capability check for late CPUs (jsc#ECO-561,jsc#SLE-10671). - arm64: cpufeature: Detect SSBS and advertise to userspace (jsc#ECO-561). - arm64: cpufeature: Fix handling of CTR_EL0.IDC field (jsc#ECO-561,jsc#SLE-10671). - arm64: cpufeature: Trap CTR_EL0 access only where it is necessary (jsc#ECO-561,jsc#SLE-10671). - arm64: cpu: Move errata and feature enable callbacks closer to callers (jsc#ECO-561). - arm64: entry: Allow handling of undefined instructions from EL1 (jsc#ECO-561). - arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (jsc#ECO-561,jsc#SLE-10671). - arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (jsc#ECO-561,jsc#SLE-10671). - arm64: Fix mismatched cache line size detection (jsc#ECO-561,jsc#SLE-10671). - arm64: Fix silly typo in comment (jsc#ECO-561). - arm64: fix SSBS sanitization (jsc#ECO-561). - arm64: force_signal_inject: WARN if called from kernel context (jsc#ECO-561). - arm64: Force SSBS on context switch (jsc#ECO-561). - arm64: Handle erratum 1418040 as a superset of erratum 1188873 (jsc#ECO-561). - arm64: Introduce sysreg_clear_set() (jsc#ECO-561). - arm64: kill change_cpacr() (jsc#ECO-561). - arm64: kill config_sctlr_el1() (jsc#ECO-561). - arm64: KVM: Add invalidate_icache_range helper (jsc#ECO-561,jsc#SLE-10671). - arm64: KVM: PTE/PMD S2 XN bit definition (jsc#ECO-561,jsc#SLE-10671). - arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (jsc#ECO-561). - arm64: move SCTLR_EL{1,2} assertions to <asm/sysreg.h> (jsc#ECO-561). - arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (jsc#ECO-561). - arm64: ssbd: Add support for PSTATE.SSBS rather than trapping to EL3 (jsc#ECO-561). - arm64: ssbd: Drop #ifdefs for PR_SPEC_STORE_BYPASS (jsc#ECO-561). - arm: KVM: Add optimized PIPT icache flushing (jsc#ECO-561,jsc#SLE-10671). - ath10k: assign 'n_cipher_suites = 11' for WCN3990 to enable WPA3 (bsc#1111666). - brcmfmac: sdio: Disable auto-tuning around commands expected to fail (bsc#1111666). - brcmfmac: sdio: Do not tune while the card is off (bsc#1111666). - can: dev: call netif_carrier_off() in register_candev() (bsc#1051510). - config: arm64: enable erratum 1418040 and 1542419 - dmaengine: bcm2835: Print error in case setting DMA mask fails (bsc#1051510). - dmaengine: imx-sdma: fix size check for sdma script_number (bsc#1051510). - drm/amd/display: fix odm combine pipe reset (bsc#1111666). - drm/amdgpu: fix memory leak (bsc#1111666). - drm/amdgpu/powerplay/vega10: allow undervolting in p7 (bsc#1111666). - drm/i915: Add gen9 BCS cmdparsing (bsc#1135967) - drm/i915: Add gen9 BCS cmdparsing (bsc#1135967) - drm/i915: Add support for mandatory cmdparsing (bsc#1135967) - drm/i915: Add support for mandatory cmdparsing (bsc#1135967) - drm/i915: Allow parsing of unsized batches (bsc#1135967) - drm/i915: Allow parsing of unsized batches (bsc#1135967) - drm/i915/cmdparser: Add support for backward jumps (bsc#1135967) - drm/i915/cmdparser: Add support for backward jumps (bsc#1135967) - drm/i915/cmdparser: Ignore Length operands during (bsc#1135967) - drm/i915/cmdparser: Ignore Length operands during command matching (bsc#1135967) - drm/i915/cmdparser: Use explicit goto for error paths (bsc#1135967) - drm/i915/cmdparser: Use explicit goto for error paths (bsc#1135967) - drm/i915/cml: Add second PCH ID for CMP (bsc#1111666). - drm/i915: Disable Secure Batches for gen6+ - drm/i915: Disable Secure Batches for gen6+ (bsc#1135967) - drm/i915/gen8+: Add RC6 CTX corruption WA (bsc#1135967) - drm/i915/gen8+: Add RC6 CTX corruption WA (bsc#1135967) - drm/i915/gtt: Add read only pages to gen8_pte_encode (bsc#1135967) - drm/i915/gtt: Disable read-only support under GVT (bsc#1135967) - drm/i915/gtt: Read-only pages for insert_entries on bdw (bsc#1135967) - drm/i915/ilk: Fix warning when reading emon_status with no output (bsc#1111666). - drm/i915: Lower RM timeout to avoid DSI hard hangs (bsc#1135967) - drm/i915: Lower RM timeout to avoid DSI hard hangs (bsc#1135967) - drm/i915: Prevent writing into a read-only object via a GGTT mmap (bsc#1135967) - drm/i915: Remove Master tables from cmdparser - drm/i915: Remove Master tables from cmdparser (bsc#1135967) - drm/i915: Rename gen7 cmdparser tables (bsc#1135967) - drm/i915: Rename gen7 cmdparser tables (bsc#1135967) - drm/i915: Support ro ppgtt mapped cmdparser shadow (bsc#1135967) - drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (bsc#1135967) - drm/msm/dpu: handle failures while initializing displays (bsc#1111666). - hyperv: set nvme msi interrupts to unmanaged (jsc#SLE-8953, jsc#SLE-9221, jsc#SLE-4941, bsc#1119461, bsc#1119465, bsc#1138190, bsc#1154905). - IB/core: Add mitigation for Spectre V1 (bsc#1155671) - integrity: prevent deadlock during digsig verification (bsc#1090631). - irqchip/gic-v3-its: Fix command queue pointer comparison bug (jsc#ECO-561). - irqchip/gic-v3-its: Fix LPI release for Multi-MSI devices (jsc#ECO-561). - irqchip/gic-v3-its: Fix misuse of GENMASK macro (jsc#ECO-561). - iwlwifi: do not panic in error path on non-msix systems (bsc#1155692). - iwlwifi: exclude GEO SAR support for 3168 (bsc#1111666). - iwlwifi: exclude GEO SAR support for 3168 (git-fixes). - iwlwifi: fw: do not send GEO_TX_POWER_LIMIT command to FW version 36 (bsc#1111666). - kabi protect enum RDMA_DRIVER_EFA (jsc#SLE-4805) - kABI workaround for drm_vma_offset_node readonly field addition (bsc#1135967) - kABI workaround for mmc_host retune_crc_disable flag addition (bsc#1111666). - KVM: arm64: Set SCTLR_EL2.DSSBS if SSBD is forcefully disabled and !vhe (jsc#ECO-561). - KVM: arm/arm64: Clean dcache to PoC when changing PTE due to CoW (jsc#ECO-561,jsc#SLE-10671). - KVM: arm/arm64: Detangle kvm_mmu.h from kvm_hyp.h (jsc#ECO-561,jsc#SLE-10671). - KVM: arm/arm64: Drop vcpu parameter from guest cache maintenance operartions (jsc#ECO-561,jsc#SLE-10671). - KVM: arm/arm64: Limit icache invalidation to prefetch aborts (jsc#ECO-561,jsc#SLE-10671). - KVM: arm/arm64: Only clean the dcache on translation fault (jsc#ECO-561,jsc#SLE-10671). - KVM: arm/arm64: Preserve Exec permission across R/W permission faults (jsc#ECO-561,jsc#SLE-10671). - KVM: arm/arm64: Split dcache/icache flushing (jsc#ECO-561,jsc#SLE-10671). - KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (bsc#1117665). - md/raid0: avoid RAID0 data corruption due to layout confusion (bsc#1140090). - md/raid0: fix warning message for parameter default_layout (bsc#1140090). - mmc: core: Add sdio_retune_hold_now() and sdio_retune_release() (bsc#1111666). - mmc: core: API to temporarily disable retuning for SDIO CRC errors (bsc#1111666). - Move upstreamed CA0132 fix into sorted section - net: openvswitch: free vport unless register_netdevice() succeeds (git-fixes). - phylink: fix kernel-doc warnings (bsc#1111666). - power: supply: max14656: fix potential use-after-free (bsc#1051510). - RDMA/efa: Add Amazon EFA driver (jsc#SLE-4805) - RDMA/hns: Add reset process for function-clear (bsc#1155061). - RDMA/hns: Remove the some magic number (bsc#1155061). - RDMA/restrack: Track driver QP types in resource tracker (jsc#SLE-4805) - Revert "ALSA: hda: Flush interrupts on disabling" (bsc#1051510). - Revert synaptics-rmi4 patch due to regression (bsc#1155982) Also blacklisting it - rpm/kernel-subpackage-spec: Mention debuginfo in the subpackage description (bsc#1149119). - s390: add support for IBM z15 machines (bsc#1152696 LTC#181731). - s390/cpumsf: Check for CPU Measurement sampling (bsc#1153681 LTC#181855). - s390: fix setting of mio addressing control (bsc#1152665 LTC#181729). - s390/pci: add mio_enabled attribute (bsc#1152665 LTC#181729). - s390/pci: correctly handle MIO opt-out (bsc#1152665 LTC#181729). - s390/pci: deal with devices that have no support for MIO instructions (bsc#1152665 LTC#181729). - s390/pci: fix MSI message data (bsc#1152697 LTC#181730). - sc16is7xx: Fix for "Unexpected interrupt: 8" (bsc#1051510). - sched/fair: Avoid divide by zero when rebalancing domains (bsc#1096254). - scsi: lpfc: Limit xri count for kdump environment (bsc#1154124). - scsi: qla2xxx: Add error handling for PLOGI ELS passthrough (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Capture FW dump on MPI heartbeat stop event (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Check for MB timeout while capturing ISP27/28xx FW dump (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Do command completion on abort timeout (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942). - scsi: qla2xxx: do not use zero for FC4_PRIORITY_NVME (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942). - scsi: qla2xxx: Dual FCP-NVMe target port support (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Fix a dma_pool_free() call (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942). - scsi: qla2xxx: Fix device connect issues in P2P configuration (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942). - scsi: qla2xxx: Fix double scsi_done for abort path (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942). - scsi: qla2xxx: Fix driver unload hang (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942). - scsi: qla2xxx: Fix memory leak when sending I/O fails (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942). - scsi: qla2xxx: Fix N2N link reset (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Fix N2N link up fail (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Fix partial flash write of MBI (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Fix SRB leak on switch command timeout (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942). - scsi: qla2xxx: Fix stale mem access on driver unload (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Fix unbound sleep in fcport delete path (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: fixup incorrect usage of host_byte (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Improve logging for scan thread (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Initialized mailbox to prevent driver load failure (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: initialize fc4_type_priority (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942). - scsi: qla2xxx: Optimize NPIV tear down process (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Remove an include directive (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942). - scsi: qla2xxx: remove redundant assignment to pointer host (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Retry PLOGI on FC-NVMe PRLI failure (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942). - scsi: qla2xxx: Set remove flag for all VP (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Silence fwdump template message (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: stop timer in shutdown path (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Update driver version to 10.01.00.20-k (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Update driver version to 10.01.00.21-k (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942). - scsi: sd: Ignore a failure to sync cache due to lack of authorization (git-fixes). - scsi: storvsc: Add ability to change scsi queue depth (bsc#1155021). - scsi: zfcp: fix reaction on bit error threshold notification (bsc#1154956 LTC#182054). - serial: fix kernel-doc warning in comments (bsc#1051510). - serial: mctrl_gpio: Check for NULL pointer (bsc#1051510). - serial: uartlite: fix exit path null pointer (bsc#1051510). - staging: rtl8188eu: fix null dereference when kzalloc fails (bsc#1051510). - supporte.conf: add efivarfs to kernel-default-base (bsc#1154858). - tracing: Get trace_array reference for available_tracers files (bsc#1156429). - usb: gadget: Reject endpoints with 0 maxpacket value (bsc#1051510). - usb: gadget: udc: atmel: Fix interrupt storm in FIFO mode (bsc#1051510). - usb: handle warm-reset port requests on hub resume (bsc#1051510). - usb: ldusb: fix control-message timeout (bsc#1051510). - usb: ldusb: fix ring-buffer locking (bsc#1051510). - usb: serial: whiteheat: fix line-speed endianness (bsc#1051510). - usb: serial: whiteheat: fix potential slab corruption (bsc#1051510). - usb-storage: Revert commit 747668dbc061 ("usb-storage: Set virt_boundary_mask to avoid SG overflows") (bsc#1051510). - wil6210: fix freeing of rx buffers in EDMA mode (bsc#1111666). Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2507=1 Package List: - openSUSE Leap 15.1 (noarch): kernel-devel-4.12.14-lp151.28.32.1 kernel-docs-4.12.14-lp151.28.32.1 kernel-docs-html-4.12.14-lp151.28.32.1 kernel-macros-4.12.14-lp151.28.32.1 kernel-source-4.12.14-lp151.28.32.1 kernel-source-vanilla-4.12.14-lp151.28.32.1 - openSUSE Leap 15.1 (x86_64): kernel-debug-4.12.14-lp151.28.32.1 kernel-debug-base-4.12.14-lp151.28.32.1 kernel-debug-base-debuginfo-4.12.14-lp151.28.32.1 kernel-debug-debuginfo-4.12.14-lp151.28.32.1 kernel-debug-debugsource-4.12.14-lp151.28.32.1 kernel-debug-devel-4.12.14-lp151.28.32.1 kernel-debug-devel-debuginfo-4.12.14-lp151.28.32.1 kernel-default-4.12.14-lp151.28.32.1 kernel-default-base-4.12.14-lp151.28.32.1 kernel-default-base-debuginfo-4.12.14-lp151.28.32.1 kernel-default-debuginfo-4.12.14-lp151.28.32.1 kernel-default-debugsource-4.12.14-lp151.28.32.1 kernel-default-devel-4.12.14-lp151.28.32.1 kernel-default-devel-debuginfo-4.12.14-lp151.28.32.1 kernel-kvmsmall-4.12.14-lp151.28.32.1 kernel-kvmsmall-base-4.12.14-lp151.28.32.1 kernel-kvmsmall-base-debuginfo-4.12.14-lp151.28.32.1 kernel-kvmsmall-debuginfo-4.12.14-lp151.28.32.1 kernel-kvmsmall-debugsource-4.12.14-lp151.28.32.1 kernel-kvmsmall-devel-4.12.14-lp151.28.32.1 kernel-kvmsmall-devel-debuginfo-4.12.14-lp151.28.32.1 kernel-obs-build-4.12.14-lp151.28.32.1 kernel-obs-build-debugsource-4.12.14-lp151.28.32.1 kernel-obs-qa-4.12.14-lp151.28.32.1 kernel-syms-4.12.14-lp151.28.32.1 kernel-vanilla-4.12.14-lp151.28.32.1 kernel-vanilla-base-4.12.14-lp151.28.32.1 kernel-vanilla-base-debuginfo-4.12.14-lp151.28.32.1 kernel-vanilla-debuginfo-4.12.14-lp151.28.32.1 kernel-vanilla-debugsource-4.12.14-lp151.28.32.1 kernel-vanilla-devel-4.12.14-lp151.28.32.1 kernel-vanilla-devel-debuginfo-4.12.14-lp151.28.32.1 References: https://www.suse.com/security/cve/CVE-2018-12207.html https://www.suse.com/security/cve/CVE-2019-0154.html https://www.suse.com/security/cve/CVE-2019-0155.html https://www.suse.com/security/cve/CVE-2019-10220.html https://www.suse.com/security/cve/CVE-2019-11135.html https://www.suse.com/security/cve/CVE-2019-16231.html https://www.suse.com/security/cve/CVE-2019-17055.html https://www.suse.com/security/cve/CVE-2019-18805.html https://bugzilla.suse.com/1048942 https://bugzilla.suse.com/1051510 https://bugzilla.suse.com/1082635 https://bugzilla.suse.com/1090631 https://bugzilla.suse.com/1096254 https://bugzilla.suse.com/1111666 https://bugzilla.suse.com/1117665 https://bugzilla.suse.com/1119461 https://bugzilla.suse.com/1119465 https://bugzilla.suse.com/1123034 https://bugzilla.suse.com/1135966 https://bugzilla.suse.com/1135967 https://bugzilla.suse.com/1138190 https://bugzilla.suse.com/1139073 https://bugzilla.suse.com/1140090 https://bugzilla.suse.com/1143706 https://bugzilla.suse.com/1144903 https://bugzilla.suse.com/1149119 https://bugzilla.suse.com/1150466 https://bugzilla.suse.com/1152665 https://bugzilla.suse.com/1152696 https://bugzilla.suse.com/1152697 https://bugzilla.suse.com/1152782 https://bugzilla.suse.com/1153681 https://bugzilla.suse.com/1154124 https://bugzilla.suse.com/1154526 https://bugzilla.suse.com/1154858 https://bugzilla.suse.com/1154905 https://bugzilla.suse.com/1154956 https://bugzilla.suse.com/1155021 https://bugzilla.suse.com/1155061 https://bugzilla.suse.com/1155671 https://bugzilla.suse.com/1155692 https://bugzilla.suse.com/1155836 https://bugzilla.suse.com/1155982 https://bugzilla.suse.com/1156187 https://bugzilla.suse.com/1156429

1 0

openSUSE-SU-2019:2505-1: important: Security update for qemu
by opensuse-security＠opensuse.org 14 Nov '19

14 Nov '19

openSUSE Security Update: Security update for qemu ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2505-1 Rating: important References: #1119991 #1146873 #1152506 #1155812 Cross-References: CVE-2018-12207 CVE-2018-20126 CVE-2019-11135 CVE-2019-12068 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for qemu fixes the following issues: - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15 - Fix use-after-free in slirp (CVE-2018-20126 bsc#1119991) - Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068 bsc#1146873) - Expose taa-no "feature", indicating CPU does not have the TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506) - Expose pschange-mc-no "feature", indicating CPU does not have the page size change machine check vulnerability (CVE-2018-12207 bsc#1155812) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2505=1 Package List: - openSUSE Leap 15.0 (x86_64): qemu-2.11.2-lp150.7.28.1 qemu-arm-2.11.2-lp150.7.28.1 qemu-arm-debuginfo-2.11.2-lp150.7.28.1 qemu-block-curl-2.11.2-lp150.7.28.1 qemu-block-curl-debuginfo-2.11.2-lp150.7.28.1 qemu-block-dmg-2.11.2-lp150.7.28.1 qemu-block-dmg-debuginfo-2.11.2-lp150.7.28.1 qemu-block-gluster-2.11.2-lp150.7.28.1 qemu-block-gluster-debuginfo-2.11.2-lp150.7.28.1 qemu-block-iscsi-2.11.2-lp150.7.28.1 qemu-block-iscsi-debuginfo-2.11.2-lp150.7.28.1 qemu-block-rbd-2.11.2-lp150.7.28.1 qemu-block-rbd-debuginfo-2.11.2-lp150.7.28.1 qemu-block-ssh-2.11.2-lp150.7.28.1 qemu-block-ssh-debuginfo-2.11.2-lp150.7.28.1 qemu-debuginfo-2.11.2-lp150.7.28.1 qemu-debugsource-2.11.2-lp150.7.28.1 qemu-extra-2.11.2-lp150.7.28.1 qemu-extra-debuginfo-2.11.2-lp150.7.28.1 qemu-guest-agent-2.11.2-lp150.7.28.1 qemu-guest-agent-debuginfo-2.11.2-lp150.7.28.1 qemu-ksm-2.11.2-lp150.7.28.1 qemu-kvm-2.11.2-lp150.7.28.1 qemu-lang-2.11.2-lp150.7.28.1 qemu-ppc-2.11.2-lp150.7.28.1 qemu-ppc-debuginfo-2.11.2-lp150.7.28.1 qemu-s390-2.11.2-lp150.7.28.1 qemu-s390-debuginfo-2.11.2-lp150.7.28.1 qemu-tools-2.11.2-lp150.7.28.1 qemu-tools-debuginfo-2.11.2-lp150.7.28.1 qemu-x86-2.11.2-lp150.7.28.1 qemu-x86-debuginfo-2.11.2-lp150.7.28.1 - openSUSE Leap 15.0 (noarch): qemu-ipxe-1.0.0+-lp150.7.28.1 qemu-seabios-1.11.0-lp150.7.28.1 qemu-sgabios-8-lp150.7.28.1 qemu-vgabios-1.11.0-lp150.7.28.1 References: https://www.suse.com/security/cve/CVE-2018-12207.html https://www.suse.com/security/cve/CVE-2018-20126.html https://www.suse.com/security/cve/CVE-2019-11135.html https://www.suse.com/security/cve/CVE-2019-12068.html https://bugzilla.suse.com/1119991 https://bugzilla.suse.com/1146873 https://bugzilla.suse.com/1152506 https://bugzilla.suse.com/1155812

1 0

openSUSE-SU-2019:2506-1: important: Security update for xen
by opensuse-security＠opensuse.org 14 Nov '19

14 Nov '19

openSUSE Security Update: Security update for xen ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2506-1 Rating: important References: #1152497 #1154448 #1154456 #1154458 #1154461 #1155945 Cross-References: CVE-2018-12207 CVE-2019-11135 CVE-2019-18420 CVE-2019-18421 CVE-2019-18424 CVE-2019-18425 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update for xen fixes the following issues: - CVE-2018-12207: Untrusted virtual machines on Intel CPUs could exploit a race condition in the Instruction Fetch Unit of the Intel CPU to cause a Machine Exception during Page Size Change, causing the CPU core to be non-functional. (bsc#1155945) - CVE-2019-11135: Aborting an asynchronous TSX operation on Intel CPUs with Transactional Memory support could be used to facilitate sidechannel information leaks out of microarchitectural buffers, similar to the previously described "Microarchitectural Data Sampling" attack. (bsc#1152497). - CVE-2019-18425: 32-bit PV guest user mode could elevate its privileges to that of the guest kernel. (bsc#1154456). - CVE-2019-18421: A malicious PV guest administrator may have been able to escalate their privilege to that of the host. (bsc#1154458). - CVE-2019-18420: Malicious x86 PV guests may have caused a hypervisor crash, resulting in a Denial of Service (Dos). (bsc#1154448) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2506=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): xen-debugsource-4.10.4_06-lp150.2.25.1 xen-devel-4.10.4_06-lp150.2.25.1 xen-libs-4.10.4_06-lp150.2.25.1 xen-libs-debuginfo-4.10.4_06-lp150.2.25.1 xen-tools-domU-4.10.4_06-lp150.2.25.1 xen-tools-domU-debuginfo-4.10.4_06-lp150.2.25.1 - openSUSE Leap 15.0 (x86_64): xen-4.10.4_06-lp150.2.25.1 xen-doc-html-4.10.4_06-lp150.2.25.1 xen-libs-32bit-4.10.4_06-lp150.2.25.1 xen-libs-32bit-debuginfo-4.10.4_06-lp150.2.25.1 xen-tools-4.10.4_06-lp150.2.25.1 xen-tools-debuginfo-4.10.4_06-lp150.2.25.1 References: https://www.suse.com/security/cve/CVE-2018-12207.html https://www.suse.com/security/cve/CVE-2019-11135.html https://www.suse.com/security/cve/CVE-2019-18420.html https://www.suse.com/security/cve/CVE-2019-18421.html https://www.suse.com/security/cve/CVE-2019-18424.html https://www.suse.com/security/cve/CVE-2019-18425.html https://bugzilla.suse.com/1152497 https://bugzilla.suse.com/1154448 https://bugzilla.suse.com/1154456 https://bugzilla.suse.com/1154458 https://bugzilla.suse.com/1154461 https://bugzilla.suse.com/1155945

1 0

openSUSE-SU-2019:2509-1: important: Security update for ucode-intel
by opensuse-security＠opensuse.org 14 Nov '19

14 Nov '19

openSUSE Security Update: Security update for ucode-intel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2509-1 Rating: important References: #1139073 #1141035 #1155988 Cross-References: CVE-2019-11135 CVE-2019-11139 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for ucode-intel fixes the following issues: - Updated to 20191112 security release (bsc#1155988) - Processor Identifier Version Products - Model Stepping F-MO-S/PI Old->New - ---- new platforms ---------------------------------------- - CML-U62 A0 6-a6-0/80 000000c6 Core Gen10 Mobile - CNL-U D0 6-66-3/80 0000002a Core Gen8 Mobile - SKX-SP B1 6-55-3/97 01000150 Xeon Scalable - ICL U/Y D1 6-7e-5/80 00000046 Core Gen10 Mobile - ---- updated platforms ------------------------------------ - SKL U/Y D0 6-4e-3/c0 000000cc->000000d4 Core Gen6 Mobile - SKL H/S/E3 R0/N0 6-5e-3/36 000000cc->000000d4 Core Gen6 - AML-Y22 H0 6-8e-9/10 000000b4->000000c6 Core Gen8 Mobile - KBL-U/Y H0 6-8e-9/c0 000000b4->000000c6 Core Gen7 Mobile - CFL-U43e D0 6-8e-a/c0 000000b4->000000c6 Core Gen8 Mobile - WHL-U W0 6-8e-b/d0 000000b8->000000c6 Core Gen8 Mobile - AML-Y V0 6-8e-c/94 000000b8->000000c6 Core Gen10 Mobile - CML-U42 V0 6-8e-c/94 000000b8->000000c6 Core Gen10 Mobile - WHL-U V0 6-8e-c/94 000000b8->000000c6 Core Gen8 Mobile - KBL-G/X H0 6-9e-9/2a 000000b4->000000c6 Core Gen7/Gen8 - KBL-H/S/E3 B0 6-9e-9/2a 000000b4->000000c6 Core Gen7; Xeon E3 v6 - CFL-H/S/E3 U0 6-9e-a/22 000000b4->000000c6 Core Gen8 Desktop, Mobile, Xeon E - CFL-S B0 6-9e-b/02 000000b4->000000c6 Core Gen8 - CFL-H R0 6-9e-d/22 000000b8->000000c6 Core Gen9 Mobile - Includes security fixes for: - CVE-2019-11135: Added feature allowing to disable TSX RTM (bsc#1139073) - CVE-2019-11139: A CPU microcode only fix for Voltage modulation issues (bsc#1141035) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2509=1 Package List: - openSUSE Leap 15.1 (x86_64): ucode-intel-20191112-lp151.2.9.1 References: https://www.suse.com/security/cve/CVE-2019-11135.html https://www.suse.com/security/cve/CVE-2019-11139.html https://bugzilla.suse.com/1139073 https://bugzilla.suse.com/1141035 https://bugzilla.suse.com/1155988

1 0

openSUSE-SU-2019:2503-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 14 Nov '19

14 Nov '19

openSUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2503-1 Rating: important References: #1048942 #1051510 #1082635 #1083647 #1090631 #1096254 #1117665 #1119461 #1119465 #1123034 #1135966 #1135967 #1137040 #1138190 #1139073 #1140090 #1143706 #1144338 #1144903 #1146612 #1149119 #1150457 #1150466 #1152624 #1152685 #1152782 #1153476 #1153509 #1153681 #1153969 #1154124 #1154526 #1154737 #1154848 #1154858 #1154905 #1154956 #1155021 #1155178 #1155179 #1155184 #1155186 #1155671 #1155692 #1155836 #1155982 #1156187 #1156429 Cross-References: CVE-2018-12207 CVE-2019-0154 CVE-2019-0155 CVE-2019-10220 CVE-2019-11135 CVE-2019-16231 CVE-2019-16233 CVE-2019-16995 CVE-2019-17055 CVE-2019-18805 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves 10 vulnerabilities and has 38 fixes is now available. Description: The openSUSE Leap 15.0 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-0154: An unprotected read access to i915 registers has been fixed that could have been abused to facilitate a local denial-of-service attack. (bsc#1135966) - CVE-2019-0155: A privilege escalation vulnerability has been fixed in the i915 module that allowed batch buffers from user mode to gain super user privileges. (bsc#1135967) - CVE-2019-16231: drivers/net/fjes/fjes_main.c did not check the alloc_workqueue return value, leading to a NULL pointer dereference (bnc#1150466). - CVE-2019-18805: There was a net/ipv4/tcp_input.c signed integer overflow in tcp_ack_update_rtt() when userspace writes a very large integer to /proc/sys/net/ipv4/tcp_min_rtt_wlen, leading to a denial of service or possibly unspecified other impact, aka CID-19fad20d15a6 (bnc#1156187). - CVE-2019-17055: base_sock_create in drivers/isdn/mISDN/socket.c in the AF_ISDN network module did not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-b91ee4aa2a21 (bnc#1152782). - CVE-2019-16995: A memory leak exits in hsr_dev_finalize() in net/hsr/hsr_device.c, if hsr_add_port fails to add a port, which may cause denial of service, aka CID-6caabe7f197d (bnc#1152685). - CVE-2019-11135: Aborting an asynchronous TSX operation on Intel CPUs with Transactional Memory support could be used to facilitate sidechannel information leaks out of microarchitectural buffers, similar to the previously described "Microarchitectural Data Sampling" attack. The Linux kernel was supplemented with the option to disable TSX operation altogether (requiring CPU Microcode updates on older systems) and better flushing of microarchitectural buffers (VERW). The set of options available is described in our TID at https://www.suse.com/support/kb/doc/?id=7024251 - CVE-2019-16233: drivers/scsi/qla2xxx/qla_os.c did not check the alloc_workqueue return value, leading to a NULL pointer dereference (bnc#1150457). - CVE-2018-12207: Untrusted virtual machines on Intel CPUs could exploit a race condition in the Instruction Fetch Unit of the Intel CPU to cause a Machine Exception during Page Size Change, causing the CPU core to be non-functional. The Linux Kernel kvm hypervisor was adjusted to avoid page size changes in executable pages by splitting / merging huge pages into small pages as needed. More information can be found on https://www.suse.com/support/kb/doc/?id=7023735 - CVE-2019-10220: Added sanity checks on the pathnames passed to the user space. (bsc#1144903). The following non-security bugs were fixed: - ALSA: bebob: Fix prototype of helper function to return negative value (bsc#1051510). - ALSA: bebob: fix to detect configured source of sampling clock for Focusrite Saffire Pro i/o series (git-fixes). - ALSA: hda: Add Elkhart Lake PCI ID (bsc#1051510). - ALSA: hda: Add Tigerlake/Jasperlake PCI ID (bsc#1051510). - ALSA: hda/ca0132 - Fix possible workqueue stall (bsc#1155836). - ALSA: hda/realtek - Add support for ALC623 (bsc#1051510). - ALSA: hda/realtek - Add support for ALC711 (bsc#1051510). - ALSA: hda/realtek - Fix 2 front mics of codec 0x623 (bsc#1051510). - ALSA: timer: Fix incorrectly assigned timer instance (git-fixes). - ALSA: timer: Fix mutex deadlock at releasing card (bsc#1051510). - arcnet: provide a buffer big enough to actually receive packets (networking-stable-19_09_30). - ASoc: rockchip: i2s: Fix RPM imbalance (bsc#1051510). - ASoC: rsnd: Reinitialize bit clock inversion flag for every format setting (bsc#1051510). - bpf: fix use after free in prog symbol exposure (bsc#1083647). - btrfs: block-group: Fix a memory leak due to missing btrfs_put_block_group() (bsc#1155178). - btrfs: qgroup: Always free PREALLOC META reserve in btrfs_delalloc_release_extents() (bsc#1155179). - btrfs: tracepoints: Fix bad entry members of qgroup events (bsc#1155186). - btrfs: tracepoints: Fix wrong parameter order for qgroup events (bsc#1155184). - can: dev: call netif_carrier_off() in register_candev() (bsc#1051510). - crypto: af_alg - consolidation of duplicate code (bsc#1154737). - crypto: af_alg - fix race accessing cipher request (bsc#1154737). - crypto: af_alg - Fix race around ctx->rcvused by making it atomic_t (bsc#1154737). - crypto: af_alg - Initialize sg_num_bytes in error code path (bsc#1051510). - crypto: af_alg - remove locking in async callback (bsc#1154737). - crypto: af_alg - update correct dst SGL entry (bsc#1051510). - crypto: af_alg - wait for data at beginning of recvmsg (bsc#1154737). - crypto: algif_aead - copy AAD from src to dst (bsc#1154737). - crypto: algif_aead - fix reference counting of null skcipher (bsc#1154737). - crypto: algif_aead - overhaul memory management (bsc#1154737). - crypto: algif_aead - skip SGL entries with NULL page (bsc#1154737). - crypto: algif - return error code when no data was processed (bsc#1154737). - crypto: algif_skcipher - overhaul memory management (bsc#1154737). - cxgb4:Fix out-of-bounds MSI-X info array access (networking-stable-19_10_05). - dmaengine: bcm2835: Print error in case setting DMA mask fails (bsc#1051510). - dmaengine: imx-sdma: fix size check for sdma script_number (bsc#1051510). - drm/edid: Add 6 bpc quirk for SDC panel in Lenovo G50 (bsc#1051510). - drm/i915: Add gen9 BCS cmdparsing (bsc#1135967) - drm/i915: Add support for mandatory cmdparsing (bsc#1135967) - drm/i915: Allow parsing of unsized batches (bsc#1135967) - drm/i915/cmdparser: Add support for backward jumps (bsc#1135967) - drm/i915/cmdparser: Ignore Length operands during command matching (bsc#1135967) - drm/i915/cmdparser: Use explicit goto for error paths (bsc#1135967) - drm/i915: Disable Secure Batches for gen6+ - drm/i915/gen8+: Add RC6 CTX corruption WA (bsc#1135967) - drm/i915/gtt: Add read only pages to gen8_pte_encode (bsc#1135967) - drm/i915/gtt: Disable read-only support under GVT (bsc#1135967) - drm/i915/gtt: Read-only pages for insert_entries on bdw (bsc#1135967) - drm/i915: Lower RM timeout to avoid DSI hard hangs (bsc#1135967) - drm/i915: Prevent writing into a read-only object via a GGTT mmap (bsc#1135967) - drm/i915: Remove Master tables from cmdparser - drm/i915: Rename gen7 cmdparser tables (bsc#1135967) - drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (bsc#1135967) - efi: cper: print AER info of PCIe fatal error (bsc#1051510). - efi/memattr: Do not bail on zero VA if it equals the region's PA (bsc#1051510). - efivar/ssdt: Do not iterate over EFI vars if no SSDT override was specified (bsc#1051510). - HID: fix error message in hid_open_report() (bsc#1051510). - HID: logitech-hidpp: do all FF cleanup in hidpp_ff_destroy() (bsc#1051510). - hso: fix NULL-deref on tty open (bsc#1051510). - hyperv: set nvme msi interrupts to unmanaged (jsc#SLE-8953, jsc#SLE-9221, jsc#SLE-4941, bsc#1119461, bsc#1119465, bsc#1138190, bsc#1154905). - IB/core: Add mitigation for Spectre V1 (bsc#1155671) - ieee802154: ca8210: prevent memory leak (bsc#1051510). - input: synaptics-rmi4 - avoid processing unknown IRQs (bsc#1051510). - integrity: prevent deadlock during digsig verification (bsc#1090631). - ipv6: drop incoming packets having a v4mapped source address (networking-stable-19_10_05). - ipv6: Handle missing host route in __ipv6_ifa_notify (networking-stable-19_10_05). - iwlwifi: do not panic in error path on non-msix systems (bsc#1155692). - iwlwifi: exclude GEO SAR support for 3168 (git-fixes). - kABI workaround for crypto/af_alg changes (bsc#1154737). - kABI workaround for drm_vma_offset_node readonly field addition (bsc#1135967) - ksm: cleanup stable_node chain collapse case (bnc#1144338). - ksm: fix use after free with merge_across_nodes = 0 (bnc#1144338). - ksm: introduce ksm_max_page_sharing per page deduplication limit (bnc#1144338). - ksm: optimize refile of stable_node_dup at the head of the chain (bnc#1144338). - ksm: swap the two output parameters of chain/chain_prune (bnc#1144338). - KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (bsc#1117665). - mac80211: fix txq null pointer dereference (bsc#1051510). - mac80211: Reject malformed SSID elements (bsc#1051510). - md/raid0: avoid RAID0 data corruption due to layout confusion (bsc#1140090). - md/raid0: fix warning message for parameter default_layout (bsc#1140090). - Move upstreamed CA0132 fix into sorted section - netfilter: nf_nat: do not bug when mapping already exists (bsc#1146612). - net: openvswitch: free vport unless register_netdevice() succeeds (git-fixes). - net/phy: fix DP83865 10 Mbps HDX loopback disable function (networking-stable-19_09_30). - net: qlogic: Fix memory leak in ql_alloc_large_buffers (networking-stable-19_10_05). - net: qrtr: Stop rx_worker before freeing node (networking-stable-19_09_30). - net/rds: Fix error handling in rds_ib_add_one() (networking-stable-19_10_05). - net/rds: fix warn in rds_message_alloc_sgs (bsc#1154848). - net/rds: remove user triggered WARN_ON in rds_sendmsg (bsc#1154848). - net: Replace NF_CT_ASSERT() with WARN_ON() (bsc#1146612). - net/sched: act_sample: do not push mac header on ip6gre ingress (networking-stable-19_09_30). - net_sched: add policy validation for action attributes (networking-stable-19_09_30). - net_sched: fix backward compatibility for TCA_ACT_KIND (git-fixes). - net: Unpublish sk from sk_reuseport_cb before call_rcu (networking-stable-19_10_05). - NFSv4.1 - backchannel request should hold ref on xprt (bsc#1152624). - nl80211: fix null pointer dereference (bsc#1051510). - openvswitch: change type of UPCALL_PID attribute to NLA_UNSPEC (networking-stable-19_09_30). - power: supply: max14656: fix potential use-after-free (bsc#1051510). - qmi_wwan: add support for Cinterion CLS8 devices (networking-stable-19_10_05). - r8152: Set macpassthru in reset_resume callback (bsc#1051510). - rds: Fix warning (bsc#1154848). - Revert "ALSA: hda: Flush interrupts on disabling" (bsc#1051510). - Revert "drm/radeon: Fix EEH during kexec" (bsc#1051510). - Revert synaptics-rmi4 patch due to regression (bsc#1155982) Also blacklisting it - rpm/kernel-subpackage-spec: Mention debuginfo in the subpackage description (bsc#1149119). - s390/cmf: set_schib_wait add timeout (bsc#1153509, bsc#1153476). - s390/cpumsf: Check for CPU Measurement sampling (bsc#1153681 LTC#181855). - sc16is7xx: Fix for "Unexpected interrupt: 8" (bsc#1051510). - sch_cbq: validate TCA_CBQ_WRROPT to avoid crash (networking-stable-19_10_05). - sch_dsmark: fix potential NULL deref in dsmark_init() (networking-stable-19_10_05). - sched/fair: Avoid divide by zero when rebalancing domains (bsc#1096254). - sch_netem: fix a divide by zero in tabledist() (networking-stable-19_09_30). - scsi: lpfc: Fix devices that do not return after devloss followed by rediscovery (bsc#1137040). - scsi: lpfc: Limit xri count for kdump environment (bsc#1154124). - scsi: qla2xxx: Add error handling for PLOGI ELS passthrough (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Capture FW dump on MPI heartbeat stop event (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Check for MB timeout while capturing ISP27/28xx FW dump (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Do command completion on abort timeout (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942). - scsi: qla2xxx: do not use zero for FC4_PRIORITY_NVME (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942). - scsi: qla2xxx: Dual FCP-NVMe target port support (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Fix a dma_pool_free() call (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942). - scsi: qla2xxx: Fix device connect issues in P2P configuration (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942). - scsi: qla2xxx: Fix double scsi_done for abort path (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942). - scsi: qla2xxx: Fix driver unload hang (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942). - scsi: qla2xxx: Fix memory leak when sending I/O fails (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942). - scsi: qla2xxx: Fix N2N link reset (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Fix N2N link up fail (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Fix partial flash write of MBI (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Fix SRB leak on switch command timeout (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942). - scsi: qla2xxx: Fix stale mem access on driver unload (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Fix unbound sleep in fcport delete path (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: fixup incorrect usage of host_byte (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Fix wait condition in loop (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Improve logging for scan thread (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Initialized mailbox to prevent driver load failure (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: initialize fc4_type_priority (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942). - scsi: qla2xxx: Optimize NPIV tear down process (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Remove an include directive (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942). - scsi: qla2xxx: remove redundant assignment to pointer host (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Retry PLOGI on FC-NVMe PRLI failure (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942). - scsi: qla2xxx: Set remove flag for all VP (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Silence fwdump template message (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: stop timer in shutdown path (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Update driver version to 10.01.00.20-k (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Update driver version to 10.01.00.21-k (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942). - scsi: sd: Ignore a failure to sync cache due to lack of authorization (git-fixes). - scsi: storvsc: Add ability to change scsi queue depth (bsc#1155021). - scsi: zfcp: fix reaction on bit error threshold notification (bsc#1154956 LTC#182054). - serial: fix kernel-doc warning in comments (bsc#1051510). - serial: mctrl_gpio: Check for NULL pointer (bsc#1051510). - serial: uartlite: fix exit path null pointer (bsc#1051510). - skge: fix checksum byte order (networking-stable-19_09_30). - staging: rtl8188eu: fix null dereference when kzalloc fails (bsc#1051510). - staging: wlan-ng: fix exit return when sme->key_idx >= NUM_WEPKEYS (bsc#1051510). - supporte.conf: add efivarfs to kernel-default-base (bsc#1154858). - tipc: fix unlimited bundling of small messages (networking-stable-19_10_05). - tracing: Get trace_array reference for available_tracers files (bsc#1156429). - usb: gadget: Reject endpoints with 0 maxpacket value (bsc#1051510). - usb: gadget: udc: atmel: Fix interrupt storm in FIFO mode (bsc#1051510). - usb: handle warm-reset port requests on hub resume (bsc#1051510). - usb: ldusb: fix control-message timeout (bsc#1051510). - usb: ldusb: fix memleak on disconnect (bsc#1051510). - usb: ldusb: fix NULL-derefs on driver unbind (bsc#1051510). - usb: ldusb: fix read info leaks (bsc#1051510). - usb: ldusb: fix ring-buffer locking (bsc#1051510). - usb: legousbtower: fix a signedness bug in tower_probe() (bsc#1051510). - usb: legousbtower: fix memleak on disconnect (bsc#1051510). - usb: serial: ti_usb_3410_5052: fix port-close races (bsc#1051510). - usb: serial: whiteheat: fix line-speed endianness (bsc#1051510). - usb: serial: whiteheat: fix potential slab corruption (bsc#1051510). - usb-storage: Revert commit 747668dbc061 ("usb-storage: Set virt_boundary_mask to avoid SG overflows") (bsc#1051510). - usb: udc: lpc32xx: fix bad bit shift operation (bsc#1051510). - usb: usblp: fix use-after-free on disconnect (bsc#1051510). - vsock: Fix a lockdep warning in __vsock_release() (networking-stable-19_10_05). - x86/boot/64: Make level2_kernel_pgt pages invalid outside kernel area (bnc#1153969). - x86/boot/64: Round memory hole size up to next PMD page (bnc#1153969). Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2503=1 Package List: - openSUSE Leap 15.0 (noarch): kernel-devel-4.12.14-lp150.12.82.1 kernel-docs-4.12.14-lp150.12.82.1 kernel-docs-html-4.12.14-lp150.12.82.1 kernel-macros-4.12.14-lp150.12.82.1 kernel-source-4.12.14-lp150.12.82.1 kernel-source-vanilla-4.12.14-lp150.12.82.1 - openSUSE Leap 15.0 (x86_64): kernel-debug-4.12.14-lp150.12.82.1 kernel-debug-base-4.12.14-lp150.12.82.1 kernel-debug-base-debuginfo-4.12.14-lp150.12.82.1 kernel-debug-debuginfo-4.12.14-lp150.12.82.1 kernel-debug-debugsource-4.12.14-lp150.12.82.1 kernel-debug-devel-4.12.14-lp150.12.82.1 kernel-debug-devel-debuginfo-4.12.14-lp150.12.82.1 kernel-default-4.12.14-lp150.12.82.1 kernel-default-base-4.12.14-lp150.12.82.1 kernel-default-base-debuginfo-4.12.14-lp150.12.82.1 kernel-default-debuginfo-4.12.14-lp150.12.82.1 kernel-default-debugsource-4.12.14-lp150.12.82.1 kernel-default-devel-4.12.14-lp150.12.82.1 kernel-default-devel-debuginfo-4.12.14-lp150.12.82.1 kernel-kvmsmall-4.12.14-lp150.12.82.1 kernel-kvmsmall-base-4.12.14-lp150.12.82.1 kernel-kvmsmall-base-debuginfo-4.12.14-lp150.12.82.1 kernel-kvmsmall-debuginfo-4.12.14-lp150.12.82.1 kernel-kvmsmall-debugsource-4.12.14-lp150.12.82.1 kernel-kvmsmall-devel-4.12.14-lp150.12.82.1 kernel-kvmsmall-devel-debuginfo-4.12.14-lp150.12.82.1 kernel-obs-build-4.12.14-lp150.12.82.1 kernel-obs-build-debugsource-4.12.14-lp150.12.82.1 kernel-obs-qa-4.12.14-lp150.12.82.1 kernel-syms-4.12.14-lp150.12.82.1 kernel-vanilla-4.12.14-lp150.12.82.1 kernel-vanilla-base-4.12.14-lp150.12.82.1 kernel-vanilla-base-debuginfo-4.12.14-lp150.12.82.1 kernel-vanilla-debuginfo-4.12.14-lp150.12.82.1 kernel-vanilla-debugsource-4.12.14-lp150.12.82.1 kernel-vanilla-devel-4.12.14-lp150.12.82.1 kernel-vanilla-devel-debuginfo-4.12.14-lp150.12.82.1 References: https://www.suse.com/security/cve/CVE-2018-12207.html https://www.suse.com/security/cve/CVE-2019-0154.html https://www.suse.com/security/cve/CVE-2019-0155.html https://www.suse.com/security/cve/CVE-2019-10220.html https://www.suse.com/security/cve/CVE-2019-11135.html https://www.suse.com/security/cve/CVE-2019-16231.html https://www.suse.com/security/cve/CVE-2019-16233.html https://www.suse.com/security/cve/CVE-2019-16995.html https://www.suse.com/security/cve/CVE-2019-17055.html https://www.suse.com/security/cve/CVE-2019-18805.html https://bugzilla.suse.com/1048942 https://bugzilla.suse.com/1051510 https://bugzilla.suse.com/1082635 https://bugzilla.suse.com/1083647 https://bugzilla.suse.com/1090631 https://bugzilla.suse.com/1096254 https://bugzilla.suse.com/1117665 https://bugzilla.suse.com/1119461 https://bugzilla.suse.com/1119465 https://bugzilla.suse.com/1123034 https://bugzilla.suse.com/1135966 https://bugzilla.suse.com/1135967 https://bugzilla.suse.com/1137040 https://bugzilla.suse.com/1138190 https://bugzilla.suse.com/1139073 https://bugzilla.suse.com/1140090 https://bugzilla.suse.com/1143706 https://bugzilla.suse.com/1144338 https://bugzilla.suse.com/1144903 https://bugzilla.suse.com/1146612 https://bugzilla.suse.com/1149119 https://bugzilla.suse.com/1150457 https://bugzilla.suse.com/1150466 https://bugzilla.suse.com/1152624 https://bugzilla.suse.com/1152685 https://bugzilla.suse.com/1152782 https://bugzilla.suse.com/1153476 https://bugzilla.suse.com/1153509 https://bugzilla.suse.com/1153681 https://bugzilla.suse.com/1153969 https://bugzilla.suse.com/1154124 https://bugzilla.suse.com/1154526 https://bugzilla.suse.com/1154737 https://bugzilla.suse.com/1154848 https://bugzilla.suse.com/1154858 https://bugzilla.suse.com/1154905 https://bugzilla.suse.com/1154956 https://bugzilla.suse.com/1155021 https://bugzilla.suse.com/1155178 https://bugzilla.suse.com/1155179 https://bugzilla.suse.com/1155184 https://bugzilla.suse.com/1155186 https://bugzilla.suse.com/1155671 https://bugzilla.suse.com/1155692 https://bugzilla.suse.com/1155836 https://bugzilla.suse.com/1155982 https://bugzilla.suse.com/1156187 https://bugzilla.suse.com/1156429

1 0

openSUSE-SU-2019:2510-1: important: Security update for qemu
by opensuse-security＠opensuse.org 14 Nov '19

14 Nov '19

openSUSE Security Update: Security update for qemu ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2510-1 Rating: important References: #1079730 #1098403 #1111025 #1117665 #1119991 #1143794 #1144087 #1145379 #1145427 #1145436 #1145774 #1146873 #1149811 #1152506 Cross-References: CVE-2018-12207 CVE-2018-20126 CVE-2019-11135 CVE-2019-12068 CVE-2019-14378 CVE-2019-15890 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves 6 vulnerabilities and has 8 fixes is now available. Description: This update for qemu fixes the following issues: qemu was updated to v3.1.1.1, a stable, bug-fix-only release, which includes 2 fixes we already carry, as well as one additional use- after-free fix in slirp. (CVE-2018-20126 bsc#1119991, CVE-2019-14378 bsc#1143794, and CVE-2019-15890 bsc#1149811 respectively) Security issues fixed: - CVE-2019-12068: Fixed potential DOS in lsi scsi controller emulation (bsc#1146873) - CVE-2019-11135: Expose taa-no "feature", indicating CPU does not have the TSX Async Abort vulnerability. (bsc#1152506) - CVE-2018-12207: Expose pschange-mc-no "feature", indicating CPU does not have the page size change machine check vulnerability (bsc#1117665) Other issues fixed: - Change how this bug gets fixed (bsc#1144087) - Disable file locking in the Xen PV disk backend to avoid locking issues with PV domUs during migration. The issues triggered by the locking can not be properly handled in libxl. The locking introduced in qemu-2.10 was removed again in qemu-4.0. (bsc#1079730, bsc#1098403, bsc#1111025, bsc#1145427, bsc#1145774) - Feature support for vfio-ccw dasd ipl (bsc#1145379 jira-SLE-6132) - Additional hardware instruction support for s390, also update qemu linux headers to 5.2-rc1 (bsc#1145436 jira-SLE-6237) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2510=1 Package List: - openSUSE Leap 15.1 (x86_64): qemu-3.1.1.1-lp151.7.6.1 qemu-arm-3.1.1.1-lp151.7.6.1 qemu-arm-debuginfo-3.1.1.1-lp151.7.6.1 qemu-audio-alsa-3.1.1.1-lp151.7.6.1 qemu-audio-alsa-debuginfo-3.1.1.1-lp151.7.6.1 qemu-audio-oss-3.1.1.1-lp151.7.6.1 qemu-audio-oss-debuginfo-3.1.1.1-lp151.7.6.1 qemu-audio-pa-3.1.1.1-lp151.7.6.1 qemu-audio-pa-debuginfo-3.1.1.1-lp151.7.6.1 qemu-audio-sdl-3.1.1.1-lp151.7.6.1 qemu-audio-sdl-debuginfo-3.1.1.1-lp151.7.6.1 qemu-block-curl-3.1.1.1-lp151.7.6.1 qemu-block-curl-debuginfo-3.1.1.1-lp151.7.6.1 qemu-block-dmg-3.1.1.1-lp151.7.6.1 qemu-block-dmg-debuginfo-3.1.1.1-lp151.7.6.1 qemu-block-gluster-3.1.1.1-lp151.7.6.1 qemu-block-gluster-debuginfo-3.1.1.1-lp151.7.6.1 qemu-block-iscsi-3.1.1.1-lp151.7.6.1 qemu-block-iscsi-debuginfo-3.1.1.1-lp151.7.6.1 qemu-block-nfs-3.1.1.1-lp151.7.6.1 qemu-block-nfs-debuginfo-3.1.1.1-lp151.7.6.1 qemu-block-rbd-3.1.1.1-lp151.7.6.1 qemu-block-rbd-debuginfo-3.1.1.1-lp151.7.6.1 qemu-block-ssh-3.1.1.1-lp151.7.6.1 qemu-block-ssh-debuginfo-3.1.1.1-lp151.7.6.1 qemu-debuginfo-3.1.1.1-lp151.7.6.1 qemu-debugsource-3.1.1.1-lp151.7.6.1 qemu-extra-3.1.1.1-lp151.7.6.1 qemu-extra-debuginfo-3.1.1.1-lp151.7.6.1 qemu-guest-agent-3.1.1.1-lp151.7.6.1 qemu-guest-agent-debuginfo-3.1.1.1-lp151.7.6.1 qemu-ksm-3.1.1.1-lp151.7.6.1 qemu-kvm-3.1.1.1-lp151.7.6.1 qemu-lang-3.1.1.1-lp151.7.6.1 qemu-linux-user-3.1.1.1-lp151.7.6.1 qemu-linux-user-debuginfo-3.1.1.1-lp151.7.6.1 qemu-linux-user-debugsource-3.1.1.1-lp151.7.6.1 qemu-ppc-3.1.1.1-lp151.7.6.1 qemu-ppc-debuginfo-3.1.1.1-lp151.7.6.1 qemu-s390-3.1.1.1-lp151.7.6.1 qemu-s390-debuginfo-3.1.1.1-lp151.7.6.1 qemu-tools-3.1.1.1-lp151.7.6.1 qemu-tools-debuginfo-3.1.1.1-lp151.7.6.1 qemu-ui-curses-3.1.1.1-lp151.7.6.1 qemu-ui-curses-debuginfo-3.1.1.1-lp151.7.6.1 qemu-ui-gtk-3.1.1.1-lp151.7.6.1 qemu-ui-gtk-debuginfo-3.1.1.1-lp151.7.6.1 qemu-ui-sdl-3.1.1.1-lp151.7.6.1 qemu-ui-sdl-debuginfo-3.1.1.1-lp151.7.6.1 qemu-x86-3.1.1.1-lp151.7.6.1 qemu-x86-debuginfo-3.1.1.1-lp151.7.6.1 - openSUSE Leap 15.1 (noarch): qemu-ipxe-1.0.0+-lp151.7.6.1 qemu-seabios-1.12.0-lp151.7.6.1 qemu-sgabios-8-lp151.7.6.1 qemu-vgabios-1.12.0-lp151.7.6.1 References: https://www.suse.com/security/cve/CVE-2018-12207.html https://www.suse.com/security/cve/CVE-2018-20126.html https://www.suse.com/security/cve/CVE-2019-11135.html https://www.suse.com/security/cve/CVE-2019-12068.html https://www.suse.com/security/cve/CVE-2019-14378.html https://www.suse.com/security/cve/CVE-2019-15890.html https://bugzilla.suse.com/1079730 https://bugzilla.suse.com/1098403 https://bugzilla.suse.com/1111025 https://bugzilla.suse.com/1117665 https://bugzilla.suse.com/1119991 https://bugzilla.suse.com/1143794 https://bugzilla.suse.com/1144087 https://bugzilla.suse.com/1145379 https://bugzilla.suse.com/1145427 https://bugzilla.suse.com/1145436 https://bugzilla.suse.com/1145774 https://bugzilla.suse.com/1146873 https://bugzilla.suse.com/1149811 https://bugzilla.suse.com/1152506

1 0

openSUSE-RU-2019:2511-1: moderate: Recommended update for zypper, libzypp, and libsolv
by maintenance＠opensuse.org 14 Nov '19

14 Nov '19

openSUSE Recommended Update: Recommended update for zypper, libzypp, and libsolv ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2511-1 Rating: moderate References: #1145554 #1146415 #1146947 #1149511 #1153351 #1153557 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has 6 recommended fixes can now be installed. Description: This update for zypper, libzypp, and libsolv fixes the following issues: Package: zypper - Fixes an issue where 'zypper lu' didn't list all available package updates (bsc#1153351) - Added a new --repo option to the 'download' command to allow to specify a repository (jsc#SLE-9171) - Improved the documentation of $releasever and --releasever usescases (bsc#1149511) - zypper will now ask only once when multiple packages share the same license text (bsc#1145554) Package: libzypp - Added a new 'solver.focus' option for /etc/zypp/zypp.conf to define systemwide focus mode when resolving jobs (bsc#1146415) - Fixed an issue where YaST2 was not able to find base products via libzypp (bsc#1153557) - Added a new 'solver.focus' option for /etc/zypp/zypp.conf to define systemwide focus mode when resolving jobs (bsc#1146415) - Improved the way how containers are detected when running 'zypper ps' (bsc#1146947) Package: libsolv - Fixes issues when updating too many packages in focusbest mode - Fixes the handling of disabled and installed packages in distupgrade This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2511=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libsolv-debuginfo-0.7.7-lp150.13.1 libsolv-debugsource-0.7.7-lp150.13.1 libsolv-demo-0.7.7-lp150.13.1 libsolv-demo-debuginfo-0.7.7-lp150.13.1 libsolv-devel-0.7.7-lp150.13.1 libsolv-devel-debuginfo-0.7.7-lp150.13.1 libsolv-tools-0.7.7-lp150.13.1 libsolv-tools-debuginfo-0.7.7-lp150.13.1 libzypp-17.15.0-lp150.2.19.1 libzypp-debuginfo-17.15.0-lp150.2.19.1 libzypp-debugsource-17.15.0-lp150.2.19.1 libzypp-devel-17.15.0-lp150.2.19.1 libzypp-devel-doc-17.15.0-lp150.2.19.1 perl-solv-0.7.7-lp150.13.1 perl-solv-debuginfo-0.7.7-lp150.13.1 python-solv-0.7.7-lp150.13.1 python-solv-debuginfo-0.7.7-lp150.13.1 python3-solv-0.7.7-lp150.13.1 python3-solv-debuginfo-0.7.7-lp150.13.1 ruby-solv-0.7.7-lp150.13.1 ruby-solv-debuginfo-0.7.7-lp150.13.1 zypper-1.14.32-lp150.2.19.1 zypper-debuginfo-1.14.32-lp150.2.19.1 zypper-debugsource-1.14.32-lp150.2.19.1 - openSUSE Leap 15.0 (noarch): zypper-aptitude-1.14.32-lp150.2.19.1 zypper-log-1.14.32-lp150.2.19.1 zypper-needs-restarting-1.14.32-lp150.2.19.1 References: https://bugzilla.suse.com/1145554 https://bugzilla.suse.com/1146415 https://bugzilla.suse.com/1146947 https://bugzilla.suse.com/1149511 https://bugzilla.suse.com/1153351 https://bugzilla.suse.com/1153557

1 0

openSUSE-SU-2019:2504-1: important: Security update for ucode-intel
by opensuse-security＠opensuse.org 14 Nov '19

14 Nov '19

openSUSE Security Update: Security update for ucode-intel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2504-1 Rating: important References: #1139073 #1141035 #1155988 Cross-References: CVE-2019-11135 CVE-2019-11139 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for ucode-intel fixes the following issues: - Updated to 20191112 security release (bsc#1155988) - Processor Identifier Version Products - Model Stepping F-MO-S/PI Old->New - ---- new platforms ---------------------------------------- - CML-U62 A0 6-a6-0/80 000000c6 Core Gen10 Mobile - CNL-U D0 6-66-3/80 0000002a Core Gen8 Mobile - SKX-SP B1 6-55-3/97 01000150 Xeon Scalable - ICL U/Y D1 6-7e-5/80 00000046 Core Gen10 Mobile - ---- updated platforms ------------------------------------ - SKL U/Y D0 6-4e-3/c0 000000cc->000000d4 Core Gen6 Mobile - SKL H/S/E3 R0/N0 6-5e-3/36 000000cc->000000d4 Core Gen6 - AML-Y22 H0 6-8e-9/10 000000b4->000000c6 Core Gen8 Mobile - KBL-U/Y H0 6-8e-9/c0 000000b4->000000c6 Core Gen7 Mobile - CFL-U43e D0 6-8e-a/c0 000000b4->000000c6 Core Gen8 Mobile - WHL-U W0 6-8e-b/d0 000000b8->000000c6 Core Gen8 Mobile - AML-Y V0 6-8e-c/94 000000b8->000000c6 Core Gen10 Mobile - CML-U42 V0 6-8e-c/94 000000b8->000000c6 Core Gen10 Mobile - WHL-U V0 6-8e-c/94 000000b8->000000c6 Core Gen8 Mobile - KBL-G/X H0 6-9e-9/2a 000000b4->000000c6 Core Gen7/Gen8 - KBL-H/S/E3 B0 6-9e-9/2a 000000b4->000000c6 Core Gen7; Xeon E3 v6 - CFL-H/S/E3 U0 6-9e-a/22 000000b4->000000c6 Core Gen8 Desktop, Mobile, Xeon E - CFL-S B0 6-9e-b/02 000000b4->000000c6 Core Gen8 - CFL-H R0 6-9e-d/22 000000b8->000000c6 Core Gen9 Mobile - Includes security fixes for: - CVE-2019-11135: Added feature allowing to disable TSX RTM (bsc#1139073) - CVE-2019-11139: A CPU microcode only fix for Voltage modulation issues (bsc#1141035) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2504=1 Package List: - openSUSE Leap 15.0 (x86_64): ucode-intel-20191112-lp150.2.30.1 References: https://www.suse.com/security/cve/CVE-2019-11135.html https://www.suse.com/security/cve/CVE-2019-11139.html https://bugzilla.suse.com/1139073 https://bugzilla.suse.com/1141035 https://bugzilla.suse.com/1155988

1 0

openSUSE-SU-2019:2501-1: moderate: Security update for rsyslog
by opensuse-security＠opensuse.org 14 Nov '19

14 Nov '19

openSUSE Security Update: Security update for rsyslog ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2501-1 Rating: moderate References: #1141063 #1153451 #1153459 Cross-References: CVE-2019-17041 CVE-2019-17042 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for rsyslog fixes the following issues: Security issues fixed: - CVE-2019-17041: Fixed a heap overflow in the parser for AIX log messages (bsc#1153451). - CVE-2019-17042: Fixed a heap overflow in the parser for Cisco log messages (bsc#1153459). Other issue addressed: - Fixed an issue where rsyslog was SEGFAULT due to a mutex double-unlock (bsc#1141063). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2501=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): rsyslog-8.33.1-lp151.6.10.1 rsyslog-debuginfo-8.33.1-lp151.6.10.1 rsyslog-debugsource-8.33.1-lp151.6.10.1 rsyslog-diag-tools-8.33.1-lp151.6.10.1 rsyslog-diag-tools-debuginfo-8.33.1-lp151.6.10.1 rsyslog-doc-8.33.1-lp151.6.10.1 rsyslog-module-dbi-8.33.1-lp151.6.10.1 rsyslog-module-dbi-debuginfo-8.33.1-lp151.6.10.1 rsyslog-module-elasticsearch-8.33.1-lp151.6.10.1 rsyslog-module-elasticsearch-debuginfo-8.33.1-lp151.6.10.1 rsyslog-module-gcrypt-8.33.1-lp151.6.10.1 rsyslog-module-gcrypt-debuginfo-8.33.1-lp151.6.10.1 rsyslog-module-gssapi-8.33.1-lp151.6.10.1 rsyslog-module-gssapi-debuginfo-8.33.1-lp151.6.10.1 rsyslog-module-gtls-8.33.1-lp151.6.10.1 rsyslog-module-gtls-debuginfo-8.33.1-lp151.6.10.1 rsyslog-module-mmnormalize-8.33.1-lp151.6.10.1 rsyslog-module-mmnormalize-debuginfo-8.33.1-lp151.6.10.1 rsyslog-module-mysql-8.33.1-lp151.6.10.1 rsyslog-module-mysql-debuginfo-8.33.1-lp151.6.10.1 rsyslog-module-omamqp1-8.33.1-lp151.6.10.1 rsyslog-module-omamqp1-debuginfo-8.33.1-lp151.6.10.1 rsyslog-module-omhttpfs-8.33.1-lp151.6.10.1 rsyslog-module-omhttpfs-debuginfo-8.33.1-lp151.6.10.1 rsyslog-module-omtcl-8.33.1-lp151.6.10.1 rsyslog-module-omtcl-debuginfo-8.33.1-lp151.6.10.1 rsyslog-module-pgsql-8.33.1-lp151.6.10.1 rsyslog-module-pgsql-debuginfo-8.33.1-lp151.6.10.1 rsyslog-module-relp-8.33.1-lp151.6.10.1 rsyslog-module-relp-debuginfo-8.33.1-lp151.6.10.1 rsyslog-module-snmp-8.33.1-lp151.6.10.1 rsyslog-module-snmp-debuginfo-8.33.1-lp151.6.10.1 rsyslog-module-udpspoof-8.33.1-lp151.6.10.1 rsyslog-module-udpspoof-debuginfo-8.33.1-lp151.6.10.1 References: https://www.suse.com/security/cve/CVE-2019-17041.html https://www.suse.com/security/cve/CVE-2019-17042.html https://bugzilla.suse.com/1141063 https://bugzilla.suse.com/1153451 https://bugzilla.suse.com/1153459

1 0

openSUSE-SU-2019:2500-1: moderate: Security update for rsyslog
by opensuse-security＠opensuse.org 13 Nov '19

13 Nov '19

openSUSE Security Update: Security update for rsyslog ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2500-1 Rating: moderate References: #1141063 #1153451 #1153459 Cross-References: CVE-2019-17041 CVE-2019-17042 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for rsyslog fixes the following issues: Security issues fixed: - CVE-2019-17041: Fixed a heap overflow in the parser for AIX log messages (bsc#1153451). - CVE-2019-17042: Fixed a heap overflow in the parser for Cisco log messages (bsc#1153459). Other issue addressed: - Fixed an issue where rsyslog was SEGFAULT due to a mutex double-unlock (bsc#1141063). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2500=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): rsyslog-8.33.1-lp150.2.19.1 rsyslog-debuginfo-8.33.1-lp150.2.19.1 rsyslog-debugsource-8.33.1-lp150.2.19.1 rsyslog-diag-tools-8.33.1-lp150.2.19.1 rsyslog-diag-tools-debuginfo-8.33.1-lp150.2.19.1 rsyslog-doc-8.33.1-lp150.2.19.1 rsyslog-module-dbi-8.33.1-lp150.2.19.1 rsyslog-module-dbi-debuginfo-8.33.1-lp150.2.19.1 rsyslog-module-elasticsearch-8.33.1-lp150.2.19.1 rsyslog-module-elasticsearch-debuginfo-8.33.1-lp150.2.19.1 rsyslog-module-gcrypt-8.33.1-lp150.2.19.1 rsyslog-module-gcrypt-debuginfo-8.33.1-lp150.2.19.1 rsyslog-module-gssapi-8.33.1-lp150.2.19.1 rsyslog-module-gssapi-debuginfo-8.33.1-lp150.2.19.1 rsyslog-module-gtls-8.33.1-lp150.2.19.1 rsyslog-module-gtls-debuginfo-8.33.1-lp150.2.19.1 rsyslog-module-mmnormalize-8.33.1-lp150.2.19.1 rsyslog-module-mmnormalize-debuginfo-8.33.1-lp150.2.19.1 rsyslog-module-mysql-8.33.1-lp150.2.19.1 rsyslog-module-mysql-debuginfo-8.33.1-lp150.2.19.1 rsyslog-module-omamqp1-8.33.1-lp150.2.19.1 rsyslog-module-omamqp1-debuginfo-8.33.1-lp150.2.19.1 rsyslog-module-omhttpfs-8.33.1-lp150.2.19.1 rsyslog-module-omhttpfs-debuginfo-8.33.1-lp150.2.19.1 rsyslog-module-omtcl-8.33.1-lp150.2.19.1 rsyslog-module-omtcl-debuginfo-8.33.1-lp150.2.19.1 rsyslog-module-pgsql-8.33.1-lp150.2.19.1 rsyslog-module-pgsql-debuginfo-8.33.1-lp150.2.19.1 rsyslog-module-relp-8.33.1-lp150.2.19.1 rsyslog-module-relp-debuginfo-8.33.1-lp150.2.19.1 rsyslog-module-snmp-8.33.1-lp150.2.19.1 rsyslog-module-snmp-debuginfo-8.33.1-lp150.2.19.1 rsyslog-module-udpspoof-8.33.1-lp150.2.19.1 rsyslog-module-udpspoof-debuginfo-8.33.1-lp150.2.19.1 References: https://www.suse.com/security/cve/CVE-2019-17041.html https://www.suse.com/security/cve/CVE-2019-17042.html https://bugzilla.suse.com/1141063 https://bugzilla.suse.com/1153451 https://bugzilla.suse.com/1153459

1 0

openSUSE-SU-2019:2499-1: important: Security update for apache2-mod_auth_openidc
by opensuse-security＠opensuse.org 13 Nov '19

13 Nov '19

openSUSE Security Update: Security update for apache2-mod_auth_openidc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2499-1 Rating: important References: #1153666 Cross-References: CVE-2019-14857 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for apache2-mod_auth_openidc fixes the following issues: - CVE-2019-14857: Fixed an open redirect issue that exists in URLs with trailing slashes (bsc#1153666). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2499=1 Package List: - openSUSE Leap 15.1 (x86_64): apache2-mod_auth_openidc-2.3.8-lp151.2.3.1 apache2-mod_auth_openidc-debuginfo-2.3.8-lp151.2.3.1 apache2-mod_auth_openidc-debugsource-2.3.8-lp151.2.3.1 References: https://www.suse.com/security/cve/CVE-2019-14857.html https://bugzilla.suse.com/1153666

1 0

openSUSE-RU-2019:2498-1: moderate: Recommended update for python-kubernetes
by maintenance＠opensuse.org 13 Nov '19

13 Nov '19

openSUSE Recommended Update: Recommended update for python-kubernetes ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2498-1 Rating: moderate References: #1151481 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-kubernetes fixes the following issues: - python-ipaddress is only required for building on Python2 (on Python3 is part of the standard library) - Backport fix for base64 padding in kubeconfig (bsc#1151481) This update was imported from the SUSE:SLE-15-SP1:Update update project. This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2498=1 Package List: - openSUSE Backports SLE-15-SP1 (noarch): python2-kubernetes-8.0.1-bp151.2.3.1 python3-kubernetes-8.0.1-bp151.2.3.1 References: https://bugzilla.suse.com/1151481

1 0

openSUSE-RU-2019:2497-1: moderate: Recommended update for Salt
by maintenance＠opensuse.org 13 Nov '19

13 Nov '19

openSUSE Recommended Update: Recommended update for Salt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2497-1 Rating: moderate References: #1101780 #1130588 #1134860 #1135567 #1135732 #1137642 #1140912 #1143301 #1146192 #1146382 #1151650 #1151947 #1152366 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has 13 recommended fixes can now be installed. Description: This update fixes the following issues: salt: - Add missing 'fun' on events coming from salt-ssh wfunc executions (bsc#1151947) - Fix failing unit tests for batch async - Fix memory consumption problem on BatchAsync (bsc#1137642) - Fix dependencies for RHEL 8 - Prevent systemd-run description issue when running aptpkg (bsc#1152366) - Take checksums arg into account for postgres.datadir_init (bsc#1151650) - Improve batch_async to release consumed memory (bsc#1140912) - Require shadow instead of old pwdutils (bsc#1130588) - Conflict with tornado >= 5; for now we can only cope with Tornado 4.x (bsc#1101780). - Fix virt.full_info (bsc#1146382) - Virt.volume_infos: silence libvirt error message - Virt.volume_infos needs to ignore inactive pools - Fix for various bugs in virt network and pool states - Implement network.fqdns module function (bsc#1134860) - Strip trailing "/" from repo.uri when comparing repos in apktpkg.mod_repo (bsc#1146192) - Make python3 default for RHEL8 - Use python3 to build package Salt for RHEL8 - Fix aptpkg systemd call (bsc#1143301) - Move server_id deprecation warning to reduce log spamming (bsc#1135567) (bsc#1135732) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2497=1 Package List: - openSUSE Leap 15.0 (x86_64): python2-salt-2019.2.0-lp150.3.39.1 python3-salt-2019.2.0-lp150.3.39.1 salt-2019.2.0-lp150.3.39.1 salt-api-2019.2.0-lp150.3.39.1 salt-cloud-2019.2.0-lp150.3.39.1 salt-doc-2019.2.0-lp150.3.39.1 salt-master-2019.2.0-lp150.3.39.1 salt-minion-2019.2.0-lp150.3.39.1 salt-proxy-2019.2.0-lp150.3.39.1 salt-ssh-2019.2.0-lp150.3.39.1 salt-standalone-formulas-configuration-2019.2.0-lp150.3.39.1 salt-syndic-2019.2.0-lp150.3.39.1 - openSUSE Leap 15.0 (noarch): salt-bash-completion-2019.2.0-lp150.3.39.1 salt-fish-completion-2019.2.0-lp150.3.39.1 salt-zsh-completion-2019.2.0-lp150.3.39.1 References: https://bugzilla.suse.com/1101780 https://bugzilla.suse.com/1130588 https://bugzilla.suse.com/1134860 https://bugzilla.suse.com/1135567 https://bugzilla.suse.com/1135732 https://bugzilla.suse.com/1137642 https://bugzilla.suse.com/1140912 https://bugzilla.suse.com/1143301 https://bugzilla.suse.com/1146192 https://bugzilla.suse.com/1146382 https://bugzilla.suse.com/1151650 https://bugzilla.suse.com/1151947 https://bugzilla.suse.com/1152366

1 0