November 2019 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2019:2493-1: moderate: Security update for gdb
by opensuse-security＠opensuse.org 13 Nov '19

13 Nov '19

openSUSE Security Update: Security update for gdb ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2493-1 Rating: moderate References: #1115034 #1142772 #1145692 Cross-References: CVE-2019-1010180 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update for gdb fixes the following issues: Update to gdb 8.3.1: (jsc#ECO-368) Security issues fixed: - CVE-2019-1010180: Fixed a potential buffer overflow when loading ELF sections larger than the file. (bsc#1142772) Upgrade libipt from v2.0 to v2.0.1. - Enable librpm for version > librpm.so.3 [bsc#1145692]: * Allow any librpm.so.x * Add %build test to check for "zypper install <rpm-packagename>" message - Copy gdbinit from fedora master @ 25caf28. Add gdbinit.without-python, and use it for --without=python. Rebase to 8.3 release (as in fedora 30 @ 1e222a3). * DWARF index cache: GDB can now automatically save indices of DWARF symbols on disk to speed up further loading of the same binaries. * Ada task switching is now supported on aarch64-elf targets when debugging a program using the Ravenscar Profile. * Terminal styling is now available for the CLI and the TUI. * Removed support for old demangling styles arm, edg, gnu, hp and lucid. * Support for new native configuration RISC-V GNU/Linux (riscv*-*-linux*). - Implemented access to more POWER8 registers. [fate#326120, fate#325178] - Handle most of new s390 arch13 instructions. [fate#327369, jsc#ECO-368] This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2493=1 Package List: - openSUSE Leap 15.0 (x86_64): gdb-8.3.1-lp150.2.10.1 gdb-debuginfo-8.3.1-lp150.2.10.1 gdb-debugsource-8.3.1-lp150.2.10.1 gdb-testresults-8.3.1-lp150.2.10.1 gdbserver-8.3.1-lp150.2.10.1 gdbserver-debuginfo-8.3.1-lp150.2.10.1 References: https://www.suse.com/security/cve/CVE-2019-1010180.html https://bugzilla.suse.com/1115034 https://bugzilla.suse.com/1142772 https://bugzilla.suse.com/1145692

1 0

openSUSE-SU-2019:2494-1: moderate: Security update for gdb
by opensuse-security＠opensuse.org 12 Nov '19

12 Nov '19

openSUSE Security Update: Security update for gdb ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2494-1 Rating: moderate References: #1115034 #1142772 #1145692 Cross-References: CVE-2019-1010180 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update for gdb fixes the following issues: Update to gdb 8.3.1: (jsc#ECO-368) Security issues fixed: - CVE-2019-1010180: Fixed a potential buffer overflow when loading ELF sections larger than the file. (bsc#1142772) Upgrade libipt from v2.0 to v2.0.1. - Enable librpm for version > librpm.so.3 [bsc#1145692]: * Allow any librpm.so.x * Add %build test to check for "zypper install <rpm-packagename>" message - Copy gdbinit from fedora master @ 25caf28. Add gdbinit.without-python, and use it for --without=python. Rebase to 8.3 release (as in fedora 30 @ 1e222a3). * DWARF index cache: GDB can now automatically save indices of DWARF symbols on disk to speed up further loading of the same binaries. * Ada task switching is now supported on aarch64-elf targets when debugging a program using the Ravenscar Profile. * Terminal styling is now available for the CLI and the TUI. * Removed support for old demangling styles arm, edg, gnu, hp and lucid. * Support for new native configuration RISC-V GNU/Linux (riscv*-*-linux*). - Implemented access to more POWER8 registers. [fate#326120, fate#325178] - Handle most of new s390 arch13 instructions. [fate#327369, jsc#ECO-368] This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2494=1 Package List: - openSUSE Leap 15.1 (x86_64): gdb-8.3.1-lp151.4.3.1 gdb-debuginfo-8.3.1-lp151.4.3.1 gdb-debugsource-8.3.1-lp151.4.3.1 gdb-testresults-8.3.1-lp151.4.3.1 gdbserver-8.3.1-lp151.4.3.1 gdbserver-debuginfo-8.3.1-lp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2019-1010180.html https://bugzilla.suse.com/1115034 https://bugzilla.suse.com/1142772 https://bugzilla.suse.com/1145692

1 0

openSUSE-RU-2019:2496-1: moderate: Recommended update for trytond
by maintenance＠opensuse.org 12 Nov '19

12 Nov '19

openSUSE Recommended Update: Recommended update for trytond ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2496-1 Rating: moderate References: #1155685 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for trytond fixes the following issues: trytond was updated to version 4.6.21 - Bugfix Release: home directory of tryton user corrected (boo #1155685) This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2496=1 Package List: - openSUSE Backports SLE-15-SP1 (noarch): trytond-4.6.21-bp151.3.6.1 References: https://bugzilla.suse.com/1155685

1 0

openSUSE-RU-2019:2492-1: moderate: Recommended update for psi+
by maintenance＠opensuse.org 12 Nov '19

12 Nov '19

openSUSE Recommended Update: Recommended update for psi+ ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2492-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP1 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for psi+ fixes the following issues: psi+ was updated to 1.4.877. * Fixed psi autostart on Linux OS * An attempt to fix text drag-n-drop in OS Linux with Qt>=5.11 * fixed drag'n'drop for sharing * PEP options updated. Added possibility to enable/disable tunes from options * Update sound record button on chatedit type switching * Fixed potential crash on audio histogram normalization * Added actions to desktop file * Fixed crash on roster contact search * make histogram working * Jingle over http (#464) * Removed A Tip Of The Day dialog as outdated * Rubbish removed * themeserver removed * Enabled http server on all unix systems * Fixed text label emptiness at start of recording * File sharing for arbitrary mimetype * Voice messaging UI * Deprecate http upload plugin in favor of internal media sharing * Auto accept jingle download requests for shared files * save downloaded share to cache * Handle only audio references for now * Make audio messages working * Work in progress on reference display * Fixed crash on apply of terminated session * Fixed crash on double delete of httpupload * Remove temporary shared files * Send all shared items in one message * Send references in one message * iris relinked * qite relinked This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2492=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-2492=1 Package List: - openSUSE Backports SLE-15-SP1 (x86_64): psi+-1.4.885+0-bp151.4.3.2 psi+-debuginfo-1.4.885+0-bp151.4.3.2 psi+-debugsource-1.4.885+0-bp151.4.3.2 psi+-plugins-attentionplugin-1.4.885+0-bp151.4.3.2 psi+-plugins-attentionplugin-debuginfo-1.4.885+0-bp151.4.3.2 psi+-plugins-autoreplyplugin-1.4.885+0-bp151.4.3.2 psi+-plugins-autoreplyplugin-debuginfo-1.4.885+0-bp151.4.3.2 psi+-plugins-birthdayreminderplugin-1.4.885+0-bp151.4.3.2 psi+-plugins-birthdayreminderplugin-debuginfo-1.4.885+0-bp151.4.3.2 psi+-plugins-chessplugin-1.4.885+0-bp151.4.3.2 psi+-plugins-chessplugin-debuginfo-1.4.885+0-bp151.4.3.2 psi+-plugins-cleanerplugin-1.4.885+0-bp151.4.3.2 psi+-plugins-cleanerplugin-debuginfo-1.4.885+0-bp151.4.3.2 psi+-plugins-clientswitcherplugin-1.4.885+0-bp151.4.3.2 psi+-plugins-clientswitcherplugin-debuginfo-1.4.885+0-bp151.4.3.2 psi+-plugins-conferenceloggerplugin-1.4.885+0-bp151.4.3.2 psi+-plugins-conferenceloggerplugin-debuginfo-1.4.885+0-bp151.4.3.2 psi+-plugins-contentdownloaderplugin-1.4.885+0-bp151.4.3.2 psi+-plugins-contentdownloaderplugin-debuginfo-1.4.885+0-bp151.4.3.2 psi+-plugins-devel-1.4.885+0-bp151.4.3.2 psi+-plugins-enummessagesplugin-1.4.885+0-bp151.4.3.2 psi+-plugins-enummessagesplugin-debuginfo-1.4.885+0-bp151.4.3.2 psi+-plugins-extendedmenuplugin-1.4.885+0-bp151.4.3.2 psi+-plugins-extendedmenuplugin-debuginfo-1.4.885+0-bp151.4.3.2 psi+-plugins-extendedoptionsplugin-1.4.885+0-bp151.4.3.2 psi+-plugins-extendedoptionsplugin-debuginfo-1.4.885+0-bp151.4.3.2 psi+-plugins-gnupgplugin-1.4.885+0-bp151.4.3.2 psi+-plugins-gnupgplugin-debuginfo-1.4.885+0-bp151.4.3.2 psi+-plugins-gomokugameplugin-1.4.885+0-bp151.4.3.2 psi+-plugins-gomokugameplugin-debuginfo-1.4.885+0-bp151.4.3.2 psi+-plugins-historykeeperplugin-1.4.885+0-bp151.4.3.2 psi+-plugins-historykeeperplugin-debuginfo-1.4.885+0-bp151.4.3.2 psi+-plugins-icqdieplugin-1.4.885+0-bp151.4.3.2 psi+-plugins-icqdieplugin-debuginfo-1.4.885+0-bp151.4.3.2 psi+-plugins-imageplugin-1.4.885+0-bp151.4.3.2 psi+-plugins-imageplugin-debuginfo-1.4.885+0-bp151.4.3.2 psi+-plugins-imagepreviewplugin-1.4.885+0-bp151.4.3.2 psi+-plugins-imagepreviewplugin-debuginfo-1.4.885+0-bp151.4.3.2 psi+-plugins-jabberdiskplugin-1.4.885+0-bp151.4.3.2 psi+-plugins-jabberdiskplugin-debuginfo-1.4.885+0-bp151.4.3.2 psi+-plugins-juickplugin-1.4.885+0-bp151.4.3.2 psi+-plugins-juickplugin-debuginfo-1.4.885+0-bp151.4.3.2 psi+-plugins-messagefilterplugin-1.4.885+0-bp151.4.3.2 psi+-plugins-messagefilterplugin-debuginfo-1.4.885+0-bp151.4.3.2 psi+-plugins-omemoplugin-1.4.885+0-bp151.4.3.2 psi+-plugins-omemoplugin-debuginfo-1.4.885+0-bp151.4.3.2 psi+-plugins-otrplugin-1.4.885+0-bp151.4.3.2 psi+-plugins-otrplugin-debuginfo-1.4.885+0-bp151.4.3.2 psi+-plugins-pepchangenotifyplugin-1.4.885+0-bp151.4.3.2 psi+-plugins-pepchangenotifyplugin-debuginfo-1.4.885+0-bp151.4.3.2 psi+-plugins-qipxstatusesplugin-1.4.885+0-bp151.4.3.2 psi+-plugins-qipxstatusesplugin-debuginfo-1.4.885+0-bp151.4.3.2 psi+-plugins-screenshotplugin-1.4.885+0-bp151.4.3.2 psi+-plugins-screenshotplugin-debuginfo-1.4.885+0-bp151.4.3.2 psi+-plugins-skinsplugin-1.4.885+0-bp151.4.3.2 psi+-plugins-skinsplugin-debuginfo-1.4.885+0-bp151.4.3.2 psi+-plugins-stopspamplugin-1.4.885+0-bp151.4.3.2 psi+-plugins-stopspamplugin-debuginfo-1.4.885+0-bp151.4.3.2 psi+-plugins-storagenotesplugin-1.4.885+0-bp151.4.3.2 psi+-plugins-storagenotesplugin-debuginfo-1.4.885+0-bp151.4.3.2 psi+-plugins-translateplugin-1.4.885+0-bp151.4.3.2 psi+-plugins-translateplugin-debuginfo-1.4.885+0-bp151.4.3.2 psi+-plugins-videostatusplugin-1.4.885+0-bp151.4.3.2 psi+-plugins-videostatusplugin-debuginfo-1.4.885+0-bp151.4.3.2 psi+-plugins-watcherplugin-1.4.885+0-bp151.4.3.2 psi+-plugins-watcherplugin-debuginfo-1.4.885+0-bp151.4.3.2 - openSUSE Backports SLE-15-SP1 (noarch): psi+-data-1.4.885+0-bp151.4.3.2 psi+-lang-1.4.877+2-bp151.4.3.2 - openSUSE Backports SLE-15 (x86_64): psi+-1.4.885+0-bp150.3.3.1 psi+-plugins-attentionplugin-1.4.885+0-bp150.3.3.1 psi+-plugins-autoreplyplugin-1.4.885+0-bp150.3.3.1 psi+-plugins-birthdayreminderplugin-1.4.885+0-bp150.3.3.1 psi+-plugins-chessplugin-1.4.885+0-bp150.3.3.1 psi+-plugins-cleanerplugin-1.4.885+0-bp150.3.3.1 psi+-plugins-clientswitcherplugin-1.4.885+0-bp150.3.3.1 psi+-plugins-conferenceloggerplugin-1.4.885+0-bp150.3.3.1 psi+-plugins-contentdownloaderplugin-1.4.885+0-bp150.3.3.1 psi+-plugins-devel-1.4.885+0-bp150.3.3.1 psi+-plugins-enummessagesplugin-1.4.885+0-bp150.3.3.1 psi+-plugins-extendedmenuplugin-1.4.885+0-bp150.3.3.1 psi+-plugins-extendedoptionsplugin-1.4.885+0-bp150.3.3.1 psi+-plugins-gnupgplugin-1.4.885+0-bp150.3.3.1 psi+-plugins-gomokugameplugin-1.4.885+0-bp150.3.3.1 psi+-plugins-historykeeperplugin-1.4.885+0-bp150.3.3.1 psi+-plugins-icqdieplugin-1.4.885+0-bp150.3.3.1 psi+-plugins-imageplugin-1.4.885+0-bp150.3.3.1 psi+-plugins-imagepreviewplugin-1.4.885+0-bp150.3.3.1 psi+-plugins-jabberdiskplugin-1.4.885+0-bp150.3.3.1 psi+-plugins-juickplugin-1.4.885+0-bp150.3.3.1 psi+-plugins-messagefilterplugin-1.4.885+0-bp150.3.3.1 psi+-plugins-omemoplugin-1.4.885+0-bp150.3.3.1 psi+-plugins-otrplugin-1.4.885+0-bp150.3.3.1 psi+-plugins-pepchangenotifyplugin-1.4.885+0-bp150.3.3.1 psi+-plugins-qipxstatusesplugin-1.4.885+0-bp150.3.3.1 psi+-plugins-screenshotplugin-1.4.885+0-bp150.3.3.1 psi+-plugins-skinsplugin-1.4.885+0-bp150.3.3.1 psi+-plugins-stopspamplugin-1.4.885+0-bp150.3.3.1 psi+-plugins-storagenotesplugin-1.4.885+0-bp150.3.3.1 psi+-plugins-translateplugin-1.4.885+0-bp150.3.3.1 psi+-plugins-videostatusplugin-1.4.885+0-bp150.3.3.1 psi+-plugins-watcherplugin-1.4.885+0-bp150.3.3.1 - openSUSE Backports SLE-15 (noarch): psi+-data-1.4.885+0-bp150.3.3.1 psi+-lang-1.4.877+2-bp150.3.3.1 References:

1 0

openSUSE-RU-2019:2495-1: moderate: Recommended update for python-kubernetes
by maintenance＠opensuse.org 12 Nov '19

12 Nov '19

openSUSE Recommended Update: Recommended update for python-kubernetes ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2495-1 Rating: moderate References: #1151481 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-kubernetes fixes the following issues: - python-ipaddress is only required for building on Python2 (on Python3 is part of the standard library) - Backport fix for base64 padding in kubeconfig (bsc#1151481) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2495=1 Package List: - openSUSE Leap 15.1 (noarch): python2-kubernetes-8.0.1-lp151.2.3.1 python3-kubernetes-8.0.1-lp151.2.3.1 References: https://bugzilla.suse.com/1151481

1 0

openSUSE-RU-2019:2491-1: moderate: Recommended update for trytond
by maintenance＠opensuse.org 12 Nov '19

12 Nov '19

openSUSE Recommended Update: Recommended update for trytond ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2491-1 Rating: moderate References: #1155685 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for trytond fixes the following issues: trytond was updated to version 4.6.21 - Bugfix Release: home directory of tryton user corrected (boo #1155685) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2491=1 Package List: - openSUSE Leap 15.1 (noarch): trytond-4.6.21-lp151.3.6.1 References: https://bugzilla.suse.com/1155685

1 0

openSUSE-RU-2019:2487-1: Recommended update for perl-Mail-SPF
by maintenance＠opensuse.org 11 Nov '19

11 Nov '19

openSUSE Recommended Update: Recommended update for perl-Mail-SPF ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2487-1 Rating: low References: #1141089 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for perl-Mail-SPF fixes the following issues: - Sets the executable bit for the /usr/sbin/spfd binary (bsc#1141089) - The license file is now located in the /usr/share/licenses directory of perl-Mail-SPF This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2487=1 Package List: - openSUSE Leap 15.0 (noarch): perl-Mail-SPF-2.9.0-lp150.2.3.1 References: https://bugzilla.suse.com/1141089

1 0

openSUSE-RU-2019:2488-1: Recommended update for perl-Mail-SPF
by maintenance＠opensuse.org 11 Nov '19

11 Nov '19

openSUSE Recommended Update: Recommended update for perl-Mail-SPF ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2488-1 Rating: low References: #1141089 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for perl-Mail-SPF fixes the following issues: - Sets the executable bit for the /usr/sbin/spfd binary (bsc#1141089) - The license file is now located in the /usr/share/licenses directory of perl-Mail-SPF This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2488=1 Package List: - openSUSE Leap 15.1 (noarch): perl-Mail-SPF-2.9.0-lp151.3.3.1 References: https://bugzilla.suse.com/1141089

1 0

openSUSE-RU-2019:2490-1: moderate: Recommended update for yast2-dns-server
by maintenance＠opensuse.org 11 Nov '19

11 Nov '19

openSUSE Recommended Update: Recommended update for yast2-dns-server ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2490-1 Rating: moderate References: #1123985 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-dns-server fixes the following issues: - Permit the user to force a netconfig update if the configuration is unable to be changed. (bsc#1123985) - Do not modify the service when finishing the wizard dialog as the configuration has not been written yet. (bsc#1123985) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2490=1 Package List: - openSUSE Leap 15.1 (noarch): yast2-dns-server-4.1.4-lp151.2.3.1 References: https://bugzilla.suse.com/1123985

1 0

openSUSE-RU-2019:2489-1: moderate: Recommended update for scout
by maintenance＠opensuse.org 11 Nov '19

11 Nov '19

openSUSE Recommended Update: Recommended update for scout ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2489-1 Rating: moderate References: #1135598 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for scout fixes the following issues: - Fix bug where sbin packages would print as bytes strings (bsc#1135598) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2489=1 Package List: - openSUSE Leap 15.1 (noarch): command-not-found-0.2.2+20190613.e6c2668-lp151.2.3.1 scout-0.2.2+20190613.e6c2668-lp151.2.3.1 References: https://bugzilla.suse.com/1135598

1 0

openSUSE-RU-2019:2485-1: important: Recommended update for syslog-ng
by maintenance＠opensuse.org 11 Nov '19

11 Nov '19

openSUSE Recommended Update: Recommended update for syslog-ng ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2485-1 Rating: important References: #1152420 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for syslog-ng fixes the following issues: - fixed timezone package parsing that led to crashes (boo#1152420) This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-2485=1 Package List: - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): libevtlog-3_14-0-3.14.1-bp150.4.3.1 syslog-ng-3.14.1-bp150.4.3.1 syslog-ng-curl-3.14.1-bp150.4.3.1 syslog-ng-devel-3.14.1-bp150.4.3.1 syslog-ng-geoip-3.14.1-bp150.4.3.1 syslog-ng-python-3.14.1-bp150.4.3.1 syslog-ng-redis-3.14.1-bp150.4.3.1 syslog-ng-smtp-3.14.1-bp150.4.3.1 syslog-ng-sql-3.14.1-bp150.4.3.1 References: https://bugzilla.suse.com/1152420

1 0

openSUSE-SU-2019:2483-1: moderate: Security update for libssh2_org
by opensuse-security＠opensuse.org 11 Nov '19

11 Nov '19

openSUSE Security Update: Security update for libssh2_org ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2483-1 Rating: moderate References: #1154862 Cross-References: CVE-2019-17498 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libssh2_org fixes the following issue: - CVE-2019-17498: Fixed an integer overflow in a bounds check that might have led to the disclosure of sensitive information or a denial of service (bsc#1154862). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2483=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libssh2-1-1.8.0-lp151.6.3.1 libssh2-1-debuginfo-1.8.0-lp151.6.3.1 libssh2-devel-1.8.0-lp151.6.3.1 libssh2_org-debugsource-1.8.0-lp151.6.3.1 - openSUSE Leap 15.1 (x86_64): libssh2-1-32bit-1.8.0-lp151.6.3.1 libssh2-1-32bit-debuginfo-1.8.0-lp151.6.3.1 References: https://www.suse.com/security/cve/CVE-2019-17498.html https://bugzilla.suse.com/1154862

1 0

openSUSE-RU-2019:2486-1: important: Recommended update for syslog-ng
by maintenance＠opensuse.org 11 Nov '19

11 Nov '19

openSUSE Recommended Update: Recommended update for syslog-ng ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2486-1 Rating: important References: #1152420 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for syslog-ng fixes the following issues: - fixed timezone package parsing that led to crashes (boo#1152420) This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2486=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): libevtlog-3_19-0-3.19.1-bp151.4.3.1 syslog-ng-3.19.1-bp151.4.3.1 syslog-ng-curl-3.19.1-bp151.4.3.1 syslog-ng-devel-3.19.1-bp151.4.3.1 syslog-ng-geoip-3.19.1-bp151.4.3.1 syslog-ng-java-3.19.1-bp151.4.3.1 syslog-ng-python-3.19.1-bp151.4.3.1 syslog-ng-redis-3.19.1-bp151.4.3.1 syslog-ng-smtp-3.19.1-bp151.4.3.1 syslog-ng-sql-3.19.1-bp151.4.3.1 References: https://bugzilla.suse.com/1152420

1 0

openSUSE-RU-2019:2484-1: Recommended update for fcitx-qt5
by maintenance＠opensuse.org 11 Nov '19

11 Nov '19

openSUSE Recommended Update: Recommended update for fcitx-qt5 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2484-1 Rating: low References: #1152412 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for fcitx-qt5 fixes the following issue: - QOwnNotes always crash at close with fcitx-qt5 installed. (boo#1152412) This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2484=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): fcitx-qt5-1.2.2-bp151.4.6.1 fcitx-qt5-devel-1.2.2-bp151.4.6.1 - openSUSE Backports SLE-15-SP1 (aarch64_ilp32): fcitx-qt5-64bit-1.2.2-bp151.4.6.1 References: https://bugzilla.suse.com/1152412

1 0

openSUSE-RU-2019:2481-1: important: Recommended update for syslog-ng
by maintenance＠opensuse.org 10 Nov '19

10 Nov '19

openSUSE Recommended Update: Recommended update for syslog-ng ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2481-1 Rating: important References: #1152420 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for syslog-ng fixes the following issues: - fixed timezone package parsing that led to crashes (boo#1152420) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2481=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2481=1 Package List: - openSUSE Leap 15.1 (x86_64): libevtlog-3_19-0-3.19.1-lp151.3.3.1 libevtlog-3_19-0-debuginfo-3.19.1-lp151.3.3.1 syslog-ng-3.19.1-lp151.3.3.1 syslog-ng-curl-3.19.1-lp151.3.3.1 syslog-ng-curl-debuginfo-3.19.1-lp151.3.3.1 syslog-ng-debuginfo-3.19.1-lp151.3.3.1 syslog-ng-debugsource-3.19.1-lp151.3.3.1 syslog-ng-devel-3.19.1-lp151.3.3.1 syslog-ng-geoip-3.19.1-lp151.3.3.1 syslog-ng-geoip-debuginfo-3.19.1-lp151.3.3.1 syslog-ng-java-3.19.1-lp151.3.3.1 syslog-ng-java-debuginfo-3.19.1-lp151.3.3.1 syslog-ng-python-3.19.1-lp151.3.3.1 syslog-ng-python-debuginfo-3.19.1-lp151.3.3.1 syslog-ng-redis-3.19.1-lp151.3.3.1 syslog-ng-redis-debuginfo-3.19.1-lp151.3.3.1 syslog-ng-smtp-3.19.1-lp151.3.3.1 syslog-ng-smtp-debuginfo-3.19.1-lp151.3.3.1 syslog-ng-sql-3.19.1-lp151.3.3.1 syslog-ng-sql-debuginfo-3.19.1-lp151.3.3.1 - openSUSE Leap 15.0 (x86_64): libevtlog-3_14-0-3.14.1-lp150.7.1 libevtlog-3_14-0-debuginfo-3.14.1-lp150.7.1 syslog-ng-3.14.1-lp150.7.1 syslog-ng-curl-3.14.1-lp150.7.1 syslog-ng-curl-debuginfo-3.14.1-lp150.7.1 syslog-ng-debuginfo-3.14.1-lp150.7.1 syslog-ng-debugsource-3.14.1-lp150.7.1 syslog-ng-devel-3.14.1-lp150.7.1 syslog-ng-geoip-3.14.1-lp150.7.1 syslog-ng-geoip-debuginfo-3.14.1-lp150.7.1 syslog-ng-python-3.14.1-lp150.7.1 syslog-ng-python-debuginfo-3.14.1-lp150.7.1 syslog-ng-redis-3.14.1-lp150.7.1 syslog-ng-redis-debuginfo-3.14.1-lp150.7.1 syslog-ng-smtp-3.14.1-lp150.7.1 syslog-ng-smtp-debuginfo-3.14.1-lp150.7.1 syslog-ng-sql-3.14.1-lp150.7.1 syslog-ng-sql-debuginfo-3.14.1-lp150.7.1 References: https://bugzilla.suse.com/1152420

1 0

openSUSE-RU-2019:2480-1: moderate: Recommended update for libvirt
by maintenance＠opensuse.org 10 Nov '19

10 Nov '19

openSUSE Recommended Update: Recommended update for libvirt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2480-1 Rating: moderate References: #1133719 #1137137 #1138734 #1141251 #1142992 #1143497 #1143871 #1145440 #1145586 #1149100 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 10 recommended fixes can now be installed. Description: This update for libvirt provides the following fixes: - Add apparmor-abstractions as a required package for daemon. (bsc#1142992) - apparmor: Avoid copying empty profile name. (bsc#1149100) - cpu_map: Add Cascadelake-Server CPU model. (bsc#1141251) - libxl: Fix domain state following successful suspend operation. (bsc#1145440) - logging: Ensure virtlogd rollover takes priority over logrotate. (bsc#1137137) - qemu: add support for overriding max threads per process limit. (bsc#1133719) - qemu: Change owner of temp directories under /var/lib/libvirt/qemu. (bsc#1143497) - qemu: Fix default value of security_default_confined. (bsc#1143871) - util: Fix copying bitmap to larger data buffer. (bsc#1138734) - virsh: Support for setting precopy bandwidth in migrate. (bsc#1145586) - virsh: Use upstream name for migration precopy bandwidth parameter. (bsc#1145586) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2480=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libvirt-5.1.0-lp151.7.6.1 libvirt-admin-5.1.0-lp151.7.6.1 libvirt-admin-debuginfo-5.1.0-lp151.7.6.1 libvirt-client-5.1.0-lp151.7.6.1 libvirt-client-debuginfo-5.1.0-lp151.7.6.1 libvirt-daemon-5.1.0-lp151.7.6.1 libvirt-daemon-config-network-5.1.0-lp151.7.6.1 libvirt-daemon-config-nwfilter-5.1.0-lp151.7.6.1 libvirt-daemon-debuginfo-5.1.0-lp151.7.6.1 libvirt-daemon-driver-interface-5.1.0-lp151.7.6.1 libvirt-daemon-driver-interface-debuginfo-5.1.0-lp151.7.6.1 libvirt-daemon-driver-lxc-5.1.0-lp151.7.6.1 libvirt-daemon-driver-lxc-debuginfo-5.1.0-lp151.7.6.1 libvirt-daemon-driver-network-5.1.0-lp151.7.6.1 libvirt-daemon-driver-network-debuginfo-5.1.0-lp151.7.6.1 libvirt-daemon-driver-nodedev-5.1.0-lp151.7.6.1 libvirt-daemon-driver-nodedev-debuginfo-5.1.0-lp151.7.6.1 libvirt-daemon-driver-nwfilter-5.1.0-lp151.7.6.1 libvirt-daemon-driver-nwfilter-debuginfo-5.1.0-lp151.7.6.1 libvirt-daemon-driver-qemu-5.1.0-lp151.7.6.1 libvirt-daemon-driver-qemu-debuginfo-5.1.0-lp151.7.6.1 libvirt-daemon-driver-secret-5.1.0-lp151.7.6.1 libvirt-daemon-driver-secret-debuginfo-5.1.0-lp151.7.6.1 libvirt-daemon-driver-storage-5.1.0-lp151.7.6.1 libvirt-daemon-driver-storage-core-5.1.0-lp151.7.6.1 libvirt-daemon-driver-storage-core-debuginfo-5.1.0-lp151.7.6.1 libvirt-daemon-driver-storage-disk-5.1.0-lp151.7.6.1 libvirt-daemon-driver-storage-disk-debuginfo-5.1.0-lp151.7.6.1 libvirt-daemon-driver-storage-gluster-5.1.0-lp151.7.6.1 libvirt-daemon-driver-storage-gluster-debuginfo-5.1.0-lp151.7.6.1 libvirt-daemon-driver-storage-iscsi-5.1.0-lp151.7.6.1 libvirt-daemon-driver-storage-iscsi-debuginfo-5.1.0-lp151.7.6.1 libvirt-daemon-driver-storage-logical-5.1.0-lp151.7.6.1 libvirt-daemon-driver-storage-logical-debuginfo-5.1.0-lp151.7.6.1 libvirt-daemon-driver-storage-mpath-5.1.0-lp151.7.6.1 libvirt-daemon-driver-storage-mpath-debuginfo-5.1.0-lp151.7.6.1 libvirt-daemon-driver-storage-scsi-5.1.0-lp151.7.6.1 libvirt-daemon-driver-storage-scsi-debuginfo-5.1.0-lp151.7.6.1 libvirt-daemon-hooks-5.1.0-lp151.7.6.1 libvirt-daemon-lxc-5.1.0-lp151.7.6.1 libvirt-daemon-qemu-5.1.0-lp151.7.6.1 libvirt-debugsource-5.1.0-lp151.7.6.1 libvirt-devel-5.1.0-lp151.7.6.1 libvirt-libs-5.1.0-lp151.7.6.1 libvirt-libs-debuginfo-5.1.0-lp151.7.6.1 libvirt-lock-sanlock-5.1.0-lp151.7.6.1 libvirt-lock-sanlock-debuginfo-5.1.0-lp151.7.6.1 libvirt-nss-5.1.0-lp151.7.6.1 libvirt-nss-debuginfo-5.1.0-lp151.7.6.1 wireshark-plugin-libvirt-5.1.0-lp151.7.6.1 wireshark-plugin-libvirt-debuginfo-5.1.0-lp151.7.6.1 - openSUSE Leap 15.1 (x86_64): libvirt-client-32bit-debuginfo-5.1.0-lp151.7.6.1 libvirt-daemon-driver-libxl-5.1.0-lp151.7.6.1 libvirt-daemon-driver-libxl-debuginfo-5.1.0-lp151.7.6.1 libvirt-daemon-driver-storage-rbd-5.1.0-lp151.7.6.1 libvirt-daemon-driver-storage-rbd-debuginfo-5.1.0-lp151.7.6.1 libvirt-daemon-xen-5.1.0-lp151.7.6.1 libvirt-devel-32bit-5.1.0-lp151.7.6.1 - openSUSE Leap 15.1 (noarch): libvirt-bash-completion-5.1.0-lp151.7.6.1 libvirt-doc-5.1.0-lp151.7.6.1 References: https://bugzilla.suse.com/1133719 https://bugzilla.suse.com/1137137 https://bugzilla.suse.com/1138734 https://bugzilla.suse.com/1141251 https://bugzilla.suse.com/1142992 https://bugzilla.suse.com/1143497 https://bugzilla.suse.com/1143871 https://bugzilla.suse.com/1145440 https://bugzilla.suse.com/1145586 https://bugzilla.suse.com/1149100

1 0

openSUSE-RU-2019:2479-1: important: Security update for chromium
by maintenance＠opensuse.org 10 Nov '19

10 Nov '19

openSUSE Recommended Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2479-1 Rating: important References: #1156172 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 openSUSE Backports SLE-15-SP1 openSUSE Backports SLE-15 SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for chromium to version 78.0.3904.97 fixes the following issues: Chromium was updated to 78.0.3904.97 (boo#1156172): * Various security fixes from internal audits, fuzzing and other initiatives Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2479=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2479=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2479=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-2479=1 - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2019-2479=1 Package List: - openSUSE Leap 15.1 (x86_64): chromedriver-78.0.3904.97-lp151.2.45.1 chromedriver-debuginfo-78.0.3904.97-lp151.2.45.1 chromium-78.0.3904.97-lp151.2.45.1 chromium-debuginfo-78.0.3904.97-lp151.2.45.1 chromium-debugsource-78.0.3904.97-lp151.2.45.1 - openSUSE Leap 15.0 (x86_64): chromedriver-78.0.3904.97-lp150.254.1 chromedriver-debuginfo-78.0.3904.97-lp150.254.1 chromium-78.0.3904.97-lp150.254.1 chromium-debuginfo-78.0.3904.97-lp150.254.1 chromium-debugsource-78.0.3904.97-lp150.254.1 - openSUSE Backports SLE-15-SP1 (aarch64 x86_64): chromedriver-78.0.3904.97-bp151.3.28.1 chromedriver-debuginfo-78.0.3904.97-bp151.3.28.1 chromium-78.0.3904.97-bp151.3.28.1 chromium-debuginfo-78.0.3904.97-bp151.3.28.1 chromium-debugsource-78.0.3904.97-bp151.3.28.1 - openSUSE Backports SLE-15 (aarch64 x86_64): chromedriver-78.0.3904.97-bp150.246.1 chromedriver-debuginfo-78.0.3904.97-bp150.246.1 chromium-78.0.3904.97-bp150.246.1 chromium-debuginfo-78.0.3904.97-bp150.246.1 chromium-debugsource-78.0.3904.97-bp150.246.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 x86_64): chromedriver-78.0.3904.97-13.1 chromium-78.0.3904.97-13.1 References: https://bugzilla.suse.com/1156172

1 0

openSUSE-RU-2019:2476-1: moderate: Recommended update for arp-scan
by maintenance＠opensuse.org 10 Nov '19

10 Nov '19

openSUSE Recommended Update: Recommended update for arp-scan ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2476-1 Rating: moderate References: #1154552 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 openSUSE Backports SLE-15-SP1 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for arp-scan to version 1.9.6 fixes the following issues: - Update to version 1.9.6 (boo#1154552): * Use libpcap function pcap_set_immediate_mode() instead of ioctl calls to ensure packets are delivered immediately. This means that arp-scan now requires libpcap 1.5.0 or later and will not work with earlier libpcap versions - Update to version 1.9.5: * Updated IEEE OUI and IAB MAC/Vendor files. * Added new --plain (-x) option to surpress printing of header and footer text, and only display one output line for each responding host. * Use LWP::UserAgent instead of LWP::Simple in get-oui and get-iab to enable the raw content to be obtained, which avoids Unicode/UTF-8 issues. * Added arp-fingerprint patterns for WIZnet W5100 and Cisco IOS 15.0. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2476=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2476=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2476=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-2476=1 Package List: - openSUSE Leap 15.1 (x86_64): arp-scan-1.9.6-lp151.3.3.1 arp-scan-debuginfo-1.9.6-lp151.3.3.1 arp-scan-debugsource-1.9.6-lp151.3.3.1 - openSUSE Leap 15.0 (x86_64): arp-scan-1.9.6-lp150.2.3.1 arp-scan-debuginfo-1.9.6-lp150.2.3.1 arp-scan-debugsource-1.9.6-lp150.2.3.1 - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): arp-scan-1.9.6-bp151.4.3.1 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): arp-scan-1.9.6-bp150.3.3.1 arp-scan-debuginfo-1.9.6-bp150.3.3.1 arp-scan-debugsource-1.9.6-bp150.3.3.1 References: https://bugzilla.suse.com/1154552

1 0

openSUSE-RU-2019:2479-1: important: Security update for chromium
by maintenance＠opensuse.org 10 Nov '19

10 Nov '19

openSUSE Recommended Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2479-1 Rating: important References: #1156172 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for chromium to version 78.0.3904.97 fixes the following issues: Chromium was updated to 78.0.3904.97 (boo#1156172): * Various security fixes from internal audits, fuzzing and other initiatives Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2019-2479=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 x86_64): chromedriver-78.0.3904.97-13.1 chromium-78.0.3904.97-13.1 References: https://bugzilla.suse.com/1156172

1 0

openSUSE-SU-2019:2477-1: moderate: Recommended update for bcm20702a1-firmware
by opensuse-security＠opensuse.org 10 Nov '19

10 Nov '19

openSUSE Security Update: Recommended update for bcm20702a1-firmware ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2477-1 Rating: moderate References: #1087996 #1154083 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for bcm20702a1-firmware fixes the following issues: Changes in bcm20702a1-firmware: - Use https to fetch the archive to avoid person-in-the-middle attacks (boo#1154083) - Fetch & install another variant firmware (0a5c:21e8) (boo#1087996) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2477=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2477=1 Package List: - openSUSE Leap 15.1 (noarch): bcm20702a1-firmware-1201650-lp151.3.3.1 - openSUSE Leap 15.0 (noarch): bcm20702a1-firmware-1201650-lp150.2.3.1 References: https://bugzilla.suse.com/1087996 https://bugzilla.suse.com/1154083

1 0

openSUSE-RU-2019:2475-1: Recommended update for fcitx-qt5
by maintenance＠opensuse.org 10 Nov '19

10 Nov '19

openSUSE Recommended Update: Recommended update for fcitx-qt5 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2475-1 Rating: low References: #1152412 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 openSUSE Backports SLE-15-SP1 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for fcitx-qt5 fixes the following issue: - QOwnNotes always crash at close with fcitx-qt5 installed. (boo#1152412) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2475=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2475=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2475=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-2475=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): fcitx-qt5-1.2.2-lp151.4.3.1 fcitx-qt5-debuginfo-1.2.2-lp151.4.3.1 fcitx-qt5-debugsource-1.2.2-lp151.4.3.1 fcitx-qt5-devel-1.2.2-lp151.4.3.1 - openSUSE Leap 15.1 (x86_64): fcitx-qt5-32bit-1.2.2-lp151.4.3.1 fcitx-qt5-32bit-debuginfo-1.2.2-lp151.4.3.1 - openSUSE Leap 15.0 (i586 x86_64): fcitx-qt5-1.2.2-lp150.3.3.1 fcitx-qt5-debuginfo-1.2.2-lp150.3.3.1 fcitx-qt5-debugsource-1.2.2-lp150.3.3.1 fcitx-qt5-devel-1.2.2-lp150.3.3.1 - openSUSE Leap 15.0 (x86_64): fcitx-qt5-32bit-1.2.2-lp150.3.3.1 fcitx-qt5-32bit-debuginfo-1.2.2-lp150.3.3.1 - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): fcitx-qt5-1.2.2-bp151.4.3.3 fcitx-qt5-devel-1.2.2-bp151.4.3.3 - openSUSE Backports SLE-15-SP1 (aarch64_ilp32): fcitx-qt5-64bit-1.2.2-bp151.4.3.3 - openSUSE Backports SLE-15 (ppc64le s390x x86_64): fcitx-qt5-1.2.2-bp150.2.3.1 fcitx-qt5-debuginfo-1.2.2-bp150.2.3.1 fcitx-qt5-debugsource-1.2.2-bp150.2.3.1 fcitx-qt5-devel-1.2.2-bp150.2.3.1 References: https://bugzilla.suse.com/1152412

1 0

openSUSE-RU-2019:2478-1: moderate: Recommended update for psi+
by maintenance＠opensuse.org 10 Nov '19

10 Nov '19

openSUSE Recommended Update: Recommended update for psi+ ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2478-1 Rating: moderate References: Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for psi+ fixes the following issues: psi+ was updated to 1.4.877. * Fixed psi autostart on Linux OS * An attempt to fix text drag-n-drop in OS Linux with Qt>=5.11 * fixed drag'n'drop for sharing * PEP options updated. Added possibility to enable/disable tunes from options * Update sound record button on chatedit type switching * Fixed potential crash on audio histogram normalization * Added actions to desktop file * Fixed crash on roster contact search * make histogram working * Jingle over http (#464) * Removed A Tip Of The Day dialog as outdated * Rubbish removed * themeserver removed * Enabled http server on all unix systems * Fixed text label emptiness at start of recording * File sharing for arbitrary mimetype * Voice messaging UI * Deprecate http upload plugin in favor of internal media sharing * Auto accept jingle download requests for shared files * save downloaded share to cache * Handle only audio references for now * Make audio messages working * Work in progress on reference display * Fixed crash on apply of terminated session * Fixed crash on double delete of httpupload * Remove temporary shared files * Send all shared items in one message * Send references in one message * iris relinked * qite relinked Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2478=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2478=1 Package List: - openSUSE Leap 15.1 (x86_64): psi+-1.4.885+0-lp151.3.3.2 psi+-debuginfo-1.4.885+0-lp151.3.3.2 psi+-debugsource-1.4.885+0-lp151.3.3.2 psi+-plugins-attentionplugin-1.4.885+0-lp151.3.3.2 psi+-plugins-attentionplugin-debuginfo-1.4.885+0-lp151.3.3.2 psi+-plugins-autoreplyplugin-1.4.885+0-lp151.3.3.2 psi+-plugins-autoreplyplugin-debuginfo-1.4.885+0-lp151.3.3.2 psi+-plugins-birthdayreminderplugin-1.4.885+0-lp151.3.3.2 psi+-plugins-birthdayreminderplugin-debuginfo-1.4.885+0-lp151.3.3.2 psi+-plugins-chessplugin-1.4.885+0-lp151.3.3.2 psi+-plugins-chessplugin-debuginfo-1.4.885+0-lp151.3.3.2 psi+-plugins-cleanerplugin-1.4.885+0-lp151.3.3.2 psi+-plugins-cleanerplugin-debuginfo-1.4.885+0-lp151.3.3.2 psi+-plugins-clientswitcherplugin-1.4.885+0-lp151.3.3.2 psi+-plugins-clientswitcherplugin-debuginfo-1.4.885+0-lp151.3.3.2 psi+-plugins-conferenceloggerplugin-1.4.885+0-lp151.3.3.2 psi+-plugins-conferenceloggerplugin-debuginfo-1.4.885+0-lp151.3.3.2 psi+-plugins-contentdownloaderplugin-1.4.885+0-lp151.3.3.2 psi+-plugins-contentdownloaderplugin-debuginfo-1.4.885+0-lp151.3.3.2 psi+-plugins-devel-1.4.885+0-lp151.3.3.2 psi+-plugins-enummessagesplugin-1.4.885+0-lp151.3.3.2 psi+-plugins-enummessagesplugin-debuginfo-1.4.885+0-lp151.3.3.2 psi+-plugins-extendedmenuplugin-1.4.885+0-lp151.3.3.2 psi+-plugins-extendedmenuplugin-debuginfo-1.4.885+0-lp151.3.3.2 psi+-plugins-extendedoptionsplugin-1.4.885+0-lp151.3.3.2 psi+-plugins-extendedoptionsplugin-debuginfo-1.4.885+0-lp151.3.3.2 psi+-plugins-gnupgplugin-1.4.885+0-lp151.3.3.2 psi+-plugins-gnupgplugin-debuginfo-1.4.885+0-lp151.3.3.2 psi+-plugins-gomokugameplugin-1.4.885+0-lp151.3.3.2 psi+-plugins-gomokugameplugin-debuginfo-1.4.885+0-lp151.3.3.2 psi+-plugins-historykeeperplugin-1.4.885+0-lp151.3.3.2 psi+-plugins-historykeeperplugin-debuginfo-1.4.885+0-lp151.3.3.2 psi+-plugins-icqdieplugin-1.4.885+0-lp151.3.3.2 psi+-plugins-icqdieplugin-debuginfo-1.4.885+0-lp151.3.3.2 psi+-plugins-imageplugin-1.4.885+0-lp151.3.3.2 psi+-plugins-imageplugin-debuginfo-1.4.885+0-lp151.3.3.2 psi+-plugins-imagepreviewplugin-1.4.885+0-lp151.3.3.2 psi+-plugins-imagepreviewplugin-debuginfo-1.4.885+0-lp151.3.3.2 psi+-plugins-jabberdiskplugin-1.4.885+0-lp151.3.3.2 psi+-plugins-jabberdiskplugin-debuginfo-1.4.885+0-lp151.3.3.2 psi+-plugins-juickplugin-1.4.885+0-lp151.3.3.2 psi+-plugins-juickplugin-debuginfo-1.4.885+0-lp151.3.3.2 psi+-plugins-messagefilterplugin-1.4.885+0-lp151.3.3.2 psi+-plugins-messagefilterplugin-debuginfo-1.4.885+0-lp151.3.3.2 psi+-plugins-omemoplugin-1.4.885+0-lp151.3.3.2 psi+-plugins-omemoplugin-debuginfo-1.4.885+0-lp151.3.3.2 psi+-plugins-otrplugin-1.4.885+0-lp151.3.3.2 psi+-plugins-otrplugin-debuginfo-1.4.885+0-lp151.3.3.2 psi+-plugins-pepchangenotifyplugin-1.4.885+0-lp151.3.3.2 psi+-plugins-pepchangenotifyplugin-debuginfo-1.4.885+0-lp151.3.3.2 psi+-plugins-qipxstatusesplugin-1.4.885+0-lp151.3.3.2 psi+-plugins-qipxstatusesplugin-debuginfo-1.4.885+0-lp151.3.3.2 psi+-plugins-screenshotplugin-1.4.885+0-lp151.3.3.2 psi+-plugins-screenshotplugin-debuginfo-1.4.885+0-lp151.3.3.2 psi+-plugins-skinsplugin-1.4.885+0-lp151.3.3.2 psi+-plugins-skinsplugin-debuginfo-1.4.885+0-lp151.3.3.2 psi+-plugins-stopspamplugin-1.4.885+0-lp151.3.3.2 psi+-plugins-stopspamplugin-debuginfo-1.4.885+0-lp151.3.3.2 psi+-plugins-storagenotesplugin-1.4.885+0-lp151.3.3.2 psi+-plugins-storagenotesplugin-debuginfo-1.4.885+0-lp151.3.3.2 psi+-plugins-translateplugin-1.4.885+0-lp151.3.3.2 psi+-plugins-translateplugin-debuginfo-1.4.885+0-lp151.3.3.2 psi+-plugins-videostatusplugin-1.4.885+0-lp151.3.3.2 psi+-plugins-videostatusplugin-debuginfo-1.4.885+0-lp151.3.3.2 psi+-plugins-watcherplugin-1.4.885+0-lp151.3.3.2 psi+-plugins-watcherplugin-debuginfo-1.4.885+0-lp151.3.3.2 - openSUSE Leap 15.1 (noarch): psi+-data-1.4.885+0-lp151.3.3.2 psi+-lang-1.4.877+2-lp151.3.3.1 - openSUSE Leap 15.0 (x86_64): psi+-1.4.885+0-lp150.2.3.1 psi+-debuginfo-1.4.885+0-lp150.2.3.1 psi+-debugsource-1.4.885+0-lp150.2.3.1 psi+-plugins-attentionplugin-1.4.885+0-lp150.2.3.1 psi+-plugins-attentionplugin-debuginfo-1.4.885+0-lp150.2.3.1 psi+-plugins-autoreplyplugin-1.4.885+0-lp150.2.3.1 psi+-plugins-autoreplyplugin-debuginfo-1.4.885+0-lp150.2.3.1 psi+-plugins-birthdayreminderplugin-1.4.885+0-lp150.2.3.1 psi+-plugins-birthdayreminderplugin-debuginfo-1.4.885+0-lp150.2.3.1 psi+-plugins-chessplugin-1.4.885+0-lp150.2.3.1 psi+-plugins-chessplugin-debuginfo-1.4.885+0-lp150.2.3.1 psi+-plugins-cleanerplugin-1.4.885+0-lp150.2.3.1 psi+-plugins-cleanerplugin-debuginfo-1.4.885+0-lp150.2.3.1 psi+-plugins-clientswitcherplugin-1.4.885+0-lp150.2.3.1 psi+-plugins-clientswitcherplugin-debuginfo-1.4.885+0-lp150.2.3.1 psi+-plugins-conferenceloggerplugin-1.4.885+0-lp150.2.3.1 psi+-plugins-conferenceloggerplugin-debuginfo-1.4.885+0-lp150.2.3.1 psi+-plugins-contentdownloaderplugin-1.4.885+0-lp150.2.3.1 psi+-plugins-contentdownloaderplugin-debuginfo-1.4.885+0-lp150.2.3.1 psi+-plugins-devel-1.4.885+0-lp150.2.3.1 psi+-plugins-enummessagesplugin-1.4.885+0-lp150.2.3.1 psi+-plugins-enummessagesplugin-debuginfo-1.4.885+0-lp150.2.3.1 psi+-plugins-extendedmenuplugin-1.4.885+0-lp150.2.3.1 psi+-plugins-extendedmenuplugin-debuginfo-1.4.885+0-lp150.2.3.1 psi+-plugins-extendedoptionsplugin-1.4.885+0-lp150.2.3.1 psi+-plugins-extendedoptionsplugin-debuginfo-1.4.885+0-lp150.2.3.1 psi+-plugins-gnupgplugin-1.4.885+0-lp150.2.3.1 psi+-plugins-gnupgplugin-debuginfo-1.4.885+0-lp150.2.3.1 psi+-plugins-gomokugameplugin-1.4.885+0-lp150.2.3.1 psi+-plugins-gomokugameplugin-debuginfo-1.4.885+0-lp150.2.3.1 psi+-plugins-historykeeperplugin-1.4.885+0-lp150.2.3.1 psi+-plugins-historykeeperplugin-debuginfo-1.4.885+0-lp150.2.3.1 psi+-plugins-icqdieplugin-1.4.885+0-lp150.2.3.1 psi+-plugins-icqdieplugin-debuginfo-1.4.885+0-lp150.2.3.1 psi+-plugins-imageplugin-1.4.885+0-lp150.2.3.1 psi+-plugins-imageplugin-debuginfo-1.4.885+0-lp150.2.3.1 psi+-plugins-imagepreviewplugin-1.4.885+0-lp150.2.3.1 psi+-plugins-imagepreviewplugin-debuginfo-1.4.885+0-lp150.2.3.1 psi+-plugins-jabberdiskplugin-1.4.885+0-lp150.2.3.1 psi+-plugins-jabberdiskplugin-debuginfo-1.4.885+0-lp150.2.3.1 psi+-plugins-juickplugin-1.4.885+0-lp150.2.3.1 psi+-plugins-juickplugin-debuginfo-1.4.885+0-lp150.2.3.1 psi+-plugins-messagefilterplugin-1.4.885+0-lp150.2.3.1 psi+-plugins-messagefilterplugin-debuginfo-1.4.885+0-lp150.2.3.1 psi+-plugins-omemoplugin-1.4.885+0-lp150.2.3.1 psi+-plugins-omemoplugin-debuginfo-1.4.885+0-lp150.2.3.1 psi+-plugins-otrplugin-1.4.885+0-lp150.2.3.1 psi+-plugins-otrplugin-debuginfo-1.4.885+0-lp150.2.3.1 psi+-plugins-pepchangenotifyplugin-1.4.885+0-lp150.2.3.1 psi+-plugins-pepchangenotifyplugin-debuginfo-1.4.885+0-lp150.2.3.1 psi+-plugins-qipxstatusesplugin-1.4.885+0-lp150.2.3.1 psi+-plugins-qipxstatusesplugin-debuginfo-1.4.885+0-lp150.2.3.1 psi+-plugins-screenshotplugin-1.4.885+0-lp150.2.3.1 psi+-plugins-screenshotplugin-debuginfo-1.4.885+0-lp150.2.3.1 psi+-plugins-skinsplugin-1.4.885+0-lp150.2.3.1 psi+-plugins-skinsplugin-debuginfo-1.4.885+0-lp150.2.3.1 psi+-plugins-stopspamplugin-1.4.885+0-lp150.2.3.1 psi+-plugins-stopspamplugin-debuginfo-1.4.885+0-lp150.2.3.1 psi+-plugins-storagenotesplugin-1.4.885+0-lp150.2.3.1 psi+-plugins-storagenotesplugin-debuginfo-1.4.885+0-lp150.2.3.1 psi+-plugins-translateplugin-1.4.885+0-lp150.2.3.1 psi+-plugins-translateplugin-debuginfo-1.4.885+0-lp150.2.3.1 psi+-plugins-videostatusplugin-1.4.885+0-lp150.2.3.1 psi+-plugins-videostatusplugin-debuginfo-1.4.885+0-lp150.2.3.1 psi+-plugins-watcherplugin-1.4.885+0-lp150.2.3.1 psi+-plugins-watcherplugin-debuginfo-1.4.885+0-lp150.2.3.1 - openSUSE Leap 15.0 (noarch): psi+-data-1.4.885+0-lp150.2.3.1 psi+-lang-1.4.877+2-lp150.2.3.1 References:

1 0

openSUSE-RU-2019:2473-1: moderate: Recommended update for gdm
by maintenance＠opensuse.org 10 Nov '19

10 Nov '19

openSUSE Recommended Update: Recommended update for gdm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2473-1 Rating: moderate References: #1120307 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gdm fixes the following issues: - Switch tty to tty1 after plymouth terminates. (bsc#1120307) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2473=1 Package List: - openSUSE Leap 15.1 (x86_64): gdm-3.26.2.1-lp151.16.6.1 gdm-debuginfo-3.26.2.1-lp151.16.6.1 gdm-debugsource-3.26.2.1-lp151.16.6.1 gdm-devel-3.26.2.1-lp151.16.6.1 libgdm1-3.26.2.1-lp151.16.6.1 libgdm1-debuginfo-3.26.2.1-lp151.16.6.1 typelib-1_0-Gdm-1_0-3.26.2.1-lp151.16.6.1 - openSUSE Leap 15.1 (noarch): gdm-branding-upstream-3.26.2.1-lp151.16.6.1 gdm-lang-3.26.2.1-lp151.16.6.1 gdmflexiserver-3.26.2.1-lp151.16.6.1 References: https://bugzilla.suse.com/1120307

1 0

openSUSE-SU-2019:2472-1: moderate: Security update for python-ecdsa
by opensuse-security＠opensuse.org 10 Nov '19

10 Nov '19

openSUSE Security Update: Security update for python-ecdsa ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2472-1 Rating: moderate References: #1153165 #1154217 Cross-References: CVE-2019-14853 CVE-2019-14859 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for python-ecdsa to version 0.13.3 fixes the following issues: Security issues fixed: - CVE-2019-14853: Fixed unexpected exceptions during signature decoding (bsc#1153165). - CVE-2019-14859: Fixed a signature malleability caused by insufficient checks of DER encoding (bsc#1154217). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2472=1 Package List: - openSUSE Leap 15.0 (noarch): python2-ecdsa-0.13.3-lp150.2.3.1 python3-ecdsa-0.13.3-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2019-14853.html https://www.suse.com/security/cve/CVE-2019-14859.html https://bugzilla.suse.com/1153165 https://bugzilla.suse.com/1154217

1 0

openSUSE-SU-2019:2474-1: moderate: Security update for python-ecdsa
by opensuse-security＠opensuse.org 10 Nov '19

10 Nov '19

openSUSE Security Update: Security update for python-ecdsa ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2474-1 Rating: moderate References: #1153165 #1154217 Cross-References: CVE-2019-14853 CVE-2019-14859 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for python-ecdsa to version 0.13.3 fixes the following issues: Security issues fixed: - CVE-2019-14853: Fixed unexpected exceptions during signature decoding (bsc#1153165). - CVE-2019-14859: Fixed a signature malleability caused by insufficient checks of DER encoding (bsc#1154217). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2474=1 Package List: - openSUSE Leap 15.1 (noarch): python2-ecdsa-0.13.3-lp151.3.3.1 python3-ecdsa-0.13.3-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2019-14853.html https://www.suse.com/security/cve/CVE-2019-14859.html https://bugzilla.suse.com/1153165 https://bugzilla.suse.com/1154217

1 0