November 2019 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2019:2578-1: moderate: Recommended update for lvm2
by maintenance＠opensuse.org 27 Nov '19

27 Nov '19

openSUSE Recommended Update: Recommended update for lvm2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2578-1 Rating: moderate References: #1145231 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for lvm2 fixes the following issues: - Adds a fix to detect MD devices by LVM2 with metadata=1.0/0.9 (bsc#1145231) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2578=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): device-mapper-1.02.149-lp151.4.6.1 device-mapper-debuginfo-1.02.149-lp151.4.6.1 device-mapper-debugsource-1.02.149-lp151.4.6.1 device-mapper-devel-1.02.149-lp151.4.6.1 libdevmapper-event1_03-1.02.149-lp151.4.6.1 libdevmapper-event1_03-debuginfo-1.02.149-lp151.4.6.1 libdevmapper1_03-1.02.149-lp151.4.6.1 libdevmapper1_03-debuginfo-1.02.149-lp151.4.6.1 liblvm2app2_2-2.02.180-lp151.4.6.1 liblvm2app2_2-debuginfo-2.02.180-lp151.4.6.1 liblvm2cmd2_02-2.02.180-lp151.4.6.1 liblvm2cmd2_02-debuginfo-2.02.180-lp151.4.6.1 lvm2-2.02.180-lp151.4.6.1 lvm2-clvm-2.02.180-lp151.4.6.1 lvm2-clvm-debuginfo-2.02.180-lp151.4.6.1 lvm2-clvm-debugsource-2.02.180-lp151.4.6.1 lvm2-cmirrord-2.02.180-lp151.4.6.1 lvm2-cmirrord-debuginfo-2.02.180-lp151.4.6.1 lvm2-debuginfo-2.02.180-lp151.4.6.1 lvm2-debugsource-2.02.180-lp151.4.6.1 lvm2-devel-2.02.180-lp151.4.6.1 lvm2-lockd-2.02.180-lp151.4.6.1 lvm2-lockd-debuginfo-2.02.180-lp151.4.6.1 lvm2-testsuite-2.02.180-lp151.4.6.1 lvm2-testsuite-debuginfo-2.02.180-lp151.4.6.1 - openSUSE Leap 15.1 (x86_64): device-mapper-devel-32bit-1.02.149-lp151.4.6.1 libdevmapper-event1_03-32bit-1.02.149-lp151.4.6.1 libdevmapper-event1_03-32bit-debuginfo-1.02.149-lp151.4.6.1 libdevmapper1_03-32bit-1.02.149-lp151.4.6.1 libdevmapper1_03-32bit-debuginfo-1.02.149-lp151.4.6.1 References: https://bugzilla.suse.com/1145231

1 0

openSUSE-SU-2019:2575-1: important: Security update for cups
by opensuse-security＠opensuse.org 27 Nov '19

27 Nov '19

openSUSE Security Update: Security update for cups ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2575-1 Rating: important References: #1146358 #1146359 Cross-References: CVE-2019-8675 CVE-2019-8696 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for cups fixes the following issues: - CVE-2019-8675: Fixed a stack buffer overflow in libcups's asn1_get_type function(bsc#1146358). - CVE-2019-8696: Fixed a stack buffer overflow in libcups's asn1_get_packed function (bsc#1146359). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2575=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): cups-2.2.7-lp151.6.3.1 cups-client-2.2.7-lp151.6.3.1 cups-client-debuginfo-2.2.7-lp151.6.3.1 cups-config-2.2.7-lp151.6.3.1 cups-ddk-2.2.7-lp151.6.3.1 cups-ddk-debuginfo-2.2.7-lp151.6.3.1 cups-debuginfo-2.2.7-lp151.6.3.1 cups-debugsource-2.2.7-lp151.6.3.1 cups-devel-2.2.7-lp151.6.3.1 libcups2-2.2.7-lp151.6.3.1 libcups2-debuginfo-2.2.7-lp151.6.3.1 libcupscgi1-2.2.7-lp151.6.3.1 libcupscgi1-debuginfo-2.2.7-lp151.6.3.1 libcupsimage2-2.2.7-lp151.6.3.1 libcupsimage2-debuginfo-2.2.7-lp151.6.3.1 libcupsmime1-2.2.7-lp151.6.3.1 libcupsmime1-debuginfo-2.2.7-lp151.6.3.1 libcupsppdc1-2.2.7-lp151.6.3.1 libcupsppdc1-debuginfo-2.2.7-lp151.6.3.1 - openSUSE Leap 15.1 (x86_64): cups-devel-32bit-2.2.7-lp151.6.3.1 libcups2-32bit-2.2.7-lp151.6.3.1 libcups2-32bit-debuginfo-2.2.7-lp151.6.3.1 libcupscgi1-32bit-2.2.7-lp151.6.3.1 libcupscgi1-32bit-debuginfo-2.2.7-lp151.6.3.1 libcupsimage2-32bit-2.2.7-lp151.6.3.1 libcupsimage2-32bit-debuginfo-2.2.7-lp151.6.3.1 libcupsmime1-32bit-2.2.7-lp151.6.3.1 libcupsmime1-32bit-debuginfo-2.2.7-lp151.6.3.1 libcupsppdc1-32bit-2.2.7-lp151.6.3.1 libcupsppdc1-32bit-debuginfo-2.2.7-lp151.6.3.1 References: https://www.suse.com/security/cve/CVE-2019-8675.html https://www.suse.com/security/cve/CVE-2019-8696.html https://bugzilla.suse.com/1146358 https://bugzilla.suse.com/1146359

1 0

openSUSE-SU-2019:2576-1: moderate: Security update for djvulibre
by opensuse-security＠opensuse.org 27 Nov '19

27 Nov '19

openSUSE Security Update: Security update for djvulibre ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2576-1 Rating: moderate References: #1154401 #1156188 Cross-References: CVE-2019-18804 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for djvulibre fixes the following issues: Security issue fixed: - CVE-2019-18804: Fixed a null pointer dereference (bsc#1156188). Other issue addressed: - Fixed a crash when mmx was enabled (bsc#1154401) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2576=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): djvulibre-3.5.27-lp151.3.6.1 djvulibre-debuginfo-3.5.27-lp151.3.6.1 djvulibre-debugsource-3.5.27-lp151.3.6.1 djvulibre-doc-3.5.27-lp151.3.6.1 libdjvulibre-devel-3.5.27-lp151.3.6.1 libdjvulibre21-3.5.27-lp151.3.6.1 libdjvulibre21-debuginfo-3.5.27-lp151.3.6.1 References: https://www.suse.com/security/cve/CVE-2019-18804.html https://bugzilla.suse.com/1154401 https://bugzilla.suse.com/1156188

1 0

openSUSE-SU-2019:2574-1: moderate: Security update for djvulibre
by opensuse-security＠opensuse.org 27 Nov '19

27 Nov '19

openSUSE Security Update: Security update for djvulibre ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2574-1 Rating: moderate References: #1154401 #1156188 Cross-References: CVE-2019-18804 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for djvulibre fixes the following issues: Security issue fixed: - CVE-2019-18804: Fixed a null pointer dereference (bsc#1156188). Other issue addressed: - Fixed a crash when mmx was enabled (bsc#1154401) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2574=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): djvulibre-3.5.27-lp150.2.6.1 djvulibre-debuginfo-3.5.27-lp150.2.6.1 djvulibre-debugsource-3.5.27-lp150.2.6.1 djvulibre-doc-3.5.27-lp150.2.6.1 libdjvulibre-devel-3.5.27-lp150.2.6.1 libdjvulibre21-3.5.27-lp150.2.6.1 libdjvulibre21-debuginfo-3.5.27-lp150.2.6.1 References: https://www.suse.com/security/cve/CVE-2019-18804.html https://bugzilla.suse.com/1154401 https://bugzilla.suse.com/1156188

1 0

openSUSE-SU-2019:2573-1: important: Security update for cups
by opensuse-security＠opensuse.org 27 Nov '19

27 Nov '19

openSUSE Security Update: Security update for cups ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2573-1 Rating: important References: #1146358 #1146359 Cross-References: CVE-2019-8675 CVE-2019-8696 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for cups fixes the following issues: - CVE-2019-8675: Fixed a stack buffer overflow in libcups's asn1_get_type function(bsc#1146358). - CVE-2019-8696: Fixed a stack buffer overflow in libcups's asn1_get_packed function (bsc#1146359). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2573=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): cups-2.2.7-lp150.2.13.1 cups-client-2.2.7-lp150.2.13.1 cups-client-debuginfo-2.2.7-lp150.2.13.1 cups-config-2.2.7-lp150.2.13.1 cups-ddk-2.2.7-lp150.2.13.1 cups-ddk-debuginfo-2.2.7-lp150.2.13.1 cups-debuginfo-2.2.7-lp150.2.13.1 cups-debugsource-2.2.7-lp150.2.13.1 cups-devel-2.2.7-lp150.2.13.1 libcups2-2.2.7-lp150.2.13.1 libcups2-debuginfo-2.2.7-lp150.2.13.1 libcupscgi1-2.2.7-lp150.2.13.1 libcupscgi1-debuginfo-2.2.7-lp150.2.13.1 libcupsimage2-2.2.7-lp150.2.13.1 libcupsimage2-debuginfo-2.2.7-lp150.2.13.1 libcupsmime1-2.2.7-lp150.2.13.1 libcupsmime1-debuginfo-2.2.7-lp150.2.13.1 libcupsppdc1-2.2.7-lp150.2.13.1 libcupsppdc1-debuginfo-2.2.7-lp150.2.13.1 - openSUSE Leap 15.0 (x86_64): cups-devel-32bit-2.2.7-lp150.2.13.1 libcups2-32bit-2.2.7-lp150.2.13.1 libcups2-32bit-debuginfo-2.2.7-lp150.2.13.1 libcupscgi1-32bit-2.2.7-lp150.2.13.1 libcupscgi1-32bit-debuginfo-2.2.7-lp150.2.13.1 libcupsimage2-32bit-2.2.7-lp150.2.13.1 libcupsimage2-32bit-debuginfo-2.2.7-lp150.2.13.1 libcupsmime1-32bit-2.2.7-lp150.2.13.1 libcupsmime1-32bit-debuginfo-2.2.7-lp150.2.13.1 libcupsppdc1-32bit-2.2.7-lp150.2.13.1 libcupsppdc1-32bit-debuginfo-2.2.7-lp150.2.13.1 References: https://www.suse.com/security/cve/CVE-2019-8675.html https://www.suse.com/security/cve/CVE-2019-8696.html https://bugzilla.suse.com/1146358 https://bugzilla.suse.com/1146359

1 0

openSUSE-RU-2019:2570-1: moderate: Recommended update for open-iscsi
by maintenance＠opensuse.org 25 Nov '19

25 Nov '19

openSUSE Recommended Update: Recommended update for open-iscsi ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2570-1 Rating: moderate References: #1152774 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for open-iscsi fixes the following issues: - Set timeout value when querying info for a single session. (bsc#1152774) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2570=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): iscsiuio-0.7.8.2-lp150.9.19.1 iscsiuio-debuginfo-0.7.8.2-lp150.9.19.1 libopeniscsiusr0_2_0-2.0.876-lp150.9.19.1 libopeniscsiusr0_2_0-debuginfo-2.0.876-lp150.9.19.1 open-iscsi-2.0.876-lp150.9.19.1 open-iscsi-debuginfo-2.0.876-lp150.9.19.1 open-iscsi-debugsource-2.0.876-lp150.9.19.1 open-iscsi-devel-2.0.876-lp150.9.19.1 References: https://bugzilla.suse.com/1152774

1 0

openSUSE-RU-2019:2572-1: moderate: Recommended update for xkeyboard-config
by maintenance＠opensuse.org 25 Nov '19

25 Nov '19

openSUSE Recommended Update: Recommended update for xkeyboard-config ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2572-1 Rating: moderate References: #1153774 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for xkeyboard-config fixes the following issues: - Fix capslock in Old Hungarian layout (bsc#1153774) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2572=1 Package List: - openSUSE Leap 15.1 (noarch): xkeyboard-config-2.23.1-lp151.4.3.1 xkeyboard-config-lang-2.23.1-lp151.4.3.1 References: https://bugzilla.suse.com/1153774

1 0

openSUSE-RU-2019:2571-1: moderate: Recommended update for open-iscsi
by maintenance＠opensuse.org 25 Nov '19

25 Nov '19

openSUSE Recommended Update: Recommended update for open-iscsi ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2571-1 Rating: moderate References: #1152774 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for open-iscsi fixes the following issues: - Set timeout value when querying info for a single session. (bsc#1152774) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2571=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): iscsiuio-0.7.8.2-lp151.13.6.1 iscsiuio-debuginfo-0.7.8.2-lp151.13.6.1 libopeniscsiusr0_2_0-2.0.876-lp151.13.6.1 libopeniscsiusr0_2_0-debuginfo-2.0.876-lp151.13.6.1 open-iscsi-2.0.876-lp151.13.6.1 open-iscsi-debuginfo-2.0.876-lp151.13.6.1 open-iscsi-debugsource-2.0.876-lp151.13.6.1 open-iscsi-devel-2.0.876-lp151.13.6.1 References: https://bugzilla.suse.com/1152774

1 0

openSUSE-RU-2019:2569-1: moderate: Recommended update for xkeyboard-config
by maintenance＠opensuse.org 25 Nov '19

25 Nov '19

openSUSE Recommended Update: Recommended update for xkeyboard-config ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2569-1 Rating: moderate References: #1153774 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for xkeyboard-config fixes the following issues: - Fix capslock in Old Hungarian layout (bsc#1153774) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2569=1 Package List: - openSUSE Leap 15.0 (noarch): xkeyboard-config-2.23.1-lp150.7.1 xkeyboard-config-lang-2.23.1-lp150.7.1 References: https://bugzilla.suse.com/1153774

1 0

openSUSE-RU-2019:2567-1: Recommended update for resource-agents
by maintenance＠opensuse.org 25 Nov '19

25 Nov '19

openSUSE Recommended Update: Recommended update for resource-agents ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2567-1 Rating: low References: #1150046 #1154465 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for resource-agents fixes the following issues: - Netcat multiple connections causing issues with pacemaker. (bsc#1150046) - Pickup latest changes for aws-vpc-route53. (bsc#1154465) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2567=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): ldirectord-4.3.0184.6ee15eb2-lp150.2.25.1 resource-agents-4.3.0184.6ee15eb2-lp150.2.25.1 resource-agents-debuginfo-4.3.0184.6ee15eb2-lp150.2.25.1 resource-agents-debugsource-4.3.0184.6ee15eb2-lp150.2.25.1 - openSUSE Leap 15.0 (noarch): monitoring-plugins-metadata-4.3.0184.6ee15eb2-lp150.2.25.1 References: https://bugzilla.suse.com/1150046 https://bugzilla.suse.com/1154465

1 0