November 2019 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2019:2568-1: moderate: Recommended update for vhostmd
by maintenance＠opensuse.org 25 Nov '19

25 Nov '19

openSUSE Recommended Update: Recommended update for vhostmd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2568-1 Rating: moderate References: #1152803 #1154838 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for vhostmd provides the following fixes: - Relax virtio requirement in config file. (bsc#1152803) - Do not overwrite user modified dtd files in /etc/vhostmd/. (bsc#1154838) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2568=1 Package List: - openSUSE Leap 15.0 (x86_64): libmetrics-devel-1.1-lp150.10.1 libmetrics0-1.1-lp150.10.1 libmetrics0-debuginfo-1.1-lp150.10.1 vhostmd-1.1-lp150.10.1 vhostmd-debuginfo-1.1-lp150.10.1 vhostmd-debugsource-1.1-lp150.10.1 vm-dump-metrics-1.1-lp150.10.1 vm-dump-metrics-debuginfo-1.1-lp150.10.1 References: https://bugzilla.suse.com/1152803 https://bugzilla.suse.com/1154838

1 0

openSUSE-RU-2019:2566-1: moderate: Recommended update for zypper and libsolv
by maintenance＠opensuse.org 25 Nov '19

25 Nov '19

openSUSE Recommended Update: Recommended update for zypper and libsolv ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2566-1 Rating: moderate References: #1145554 #1146415 #1149511 #1153351 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for zypper and libsolv fixes the following issues: Package: zypper - Improved the documentation of $releasever and --releasever usescases (bsc#1149511) - zypper will now ask only once when multiple packages share the same license text (bsc#1145554) - Added a new 'solver.focus' option for /etc/zypp/zypp.conf to define systemwide focus mode when resolving jobs (bsc#1146415) - Fixes an issue where 'zypper lu' didn't list all available package updates (bsc#1153351) - Added a new --repo option to the 'download' command to allow to specify a repository (jsc#SLE-9171) Package: libsolv - Fixes issues when updating too many packages in focusbest mode - Fixes the handling of disabled and installed packages in distupgrade This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2566=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libsolv-debuginfo-0.7.7-lp151.2.7.1 libsolv-debugsource-0.7.7-lp151.2.7.1 libsolv-demo-0.7.7-lp151.2.7.1 libsolv-demo-debuginfo-0.7.7-lp151.2.7.1 libsolv-devel-0.7.7-lp151.2.7.1 libsolv-devel-debuginfo-0.7.7-lp151.2.7.1 libsolv-tools-0.7.7-lp151.2.7.1 libsolv-tools-debuginfo-0.7.7-lp151.2.7.1 libzypp-17.15.0-lp151.2.7.1 libzypp-debuginfo-17.15.0-lp151.2.7.1 libzypp-debugsource-17.15.0-lp151.2.7.1 libzypp-devel-17.15.0-lp151.2.7.1 libzypp-devel-doc-17.15.0-lp151.2.7.1 perl-solv-0.7.7-lp151.2.7.1 perl-solv-debuginfo-0.7.7-lp151.2.7.1 python-solv-0.7.7-lp151.2.7.1 python-solv-debuginfo-0.7.7-lp151.2.7.1 python3-solv-0.7.7-lp151.2.7.1 python3-solv-debuginfo-0.7.7-lp151.2.7.1 ruby-solv-0.7.7-lp151.2.7.1 ruby-solv-debuginfo-0.7.7-lp151.2.7.1 zypper-1.14.32-lp151.2.7.1 zypper-debuginfo-1.14.32-lp151.2.7.1 zypper-debugsource-1.14.32-lp151.2.7.1 - openSUSE Leap 15.1 (noarch): zypper-aptitude-1.14.32-lp151.2.7.1 zypper-log-1.14.32-lp151.2.7.1 zypper-needs-restarting-1.14.32-lp151.2.7.1 References: https://bugzilla.suse.com/1145554 https://bugzilla.suse.com/1146415 https://bugzilla.suse.com/1149511 https://bugzilla.suse.com/1153351

1 0

openSUSE-SU-2019:2565-1: important: Security update for java-11-openjdk
by opensuse-security＠opensuse.org 25 Nov '19

25 Nov '19

openSUSE Security Update: Security update for java-11-openjdk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2565-1 Rating: important References: #1152856 #1154212 Cross-References: CVE-2019-2894 CVE-2019-2933 CVE-2019-2945 CVE-2019-2949 CVE-2019-2958 CVE-2019-2962 CVE-2019-2964 CVE-2019-2973 CVE-2019-2975 CVE-2019-2977 CVE-2019-2978 CVE-2019-2981 CVE-2019-2983 CVE-2019-2987 CVE-2019-2988 CVE-2019-2989 CVE-2019-2992 CVE-2019-2999 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 18 vulnerabilities is now available. Description: This update for java-11-openjdk to version jdk-11.0.5-10 fixes the following issues: Security issues fixed (October 2019 CPU bsc#1154212): - CVE-2019-2933: Windows file handling redux - CVE-2019-2945: Better socket support - CVE-2019-2949: Better Kerberos ccache handling - CVE-2019-2958: Build Better Processes - CVE-2019-2964: Better support for patterns - CVE-2019-2962: Better Glyph Images - CVE-2019-2973: Better pattern compilation - CVE-2019-2975: Unexpected exception in jjs - CVE-2019-2978: Improved handling of jar files - CVE-2019-2977: Improve String index handling - CVE-2019-2981: Better Path supports - CVE-2019-2983: Better serial attributes - CVE-2019-2987: Better rendering of native glyphs - CVE-2019-2988: Better Graphics2D drawing - CVE-2019-2989: Improve TLS connection support - CVE-2019-2992: Enhance font glyph mapping - CVE-2019-2999: Commentary on Javadoc comments - CVE-2019-2894: Enhance ECDSA operations (bsc#1152856). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2565=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): java-11-openjdk-11.0.5.0-lp151.3.9.2 java-11-openjdk-accessibility-11.0.5.0-lp151.3.9.2 java-11-openjdk-accessibility-debuginfo-11.0.5.0-lp151.3.9.2 java-11-openjdk-debuginfo-11.0.5.0-lp151.3.9.2 java-11-openjdk-debugsource-11.0.5.0-lp151.3.9.2 java-11-openjdk-demo-11.0.5.0-lp151.3.9.2 java-11-openjdk-devel-11.0.5.0-lp151.3.9.2 java-11-openjdk-headless-11.0.5.0-lp151.3.9.2 java-11-openjdk-jmods-11.0.5.0-lp151.3.9.2 java-11-openjdk-src-11.0.5.0-lp151.3.9.2 - openSUSE Leap 15.1 (noarch): java-11-openjdk-javadoc-11.0.5.0-lp151.3.9.2 References: https://www.suse.com/security/cve/CVE-2019-2894.html https://www.suse.com/security/cve/CVE-2019-2933.html https://www.suse.com/security/cve/CVE-2019-2945.html https://www.suse.com/security/cve/CVE-2019-2949.html https://www.suse.com/security/cve/CVE-2019-2958.html https://www.suse.com/security/cve/CVE-2019-2962.html https://www.suse.com/security/cve/CVE-2019-2964.html https://www.suse.com/security/cve/CVE-2019-2973.html https://www.suse.com/security/cve/CVE-2019-2975.html https://www.suse.com/security/cve/CVE-2019-2977.html https://www.suse.com/security/cve/CVE-2019-2978.html https://www.suse.com/security/cve/CVE-2019-2981.html https://www.suse.com/security/cve/CVE-2019-2983.html https://www.suse.com/security/cve/CVE-2019-2987.html https://www.suse.com/security/cve/CVE-2019-2988.html https://www.suse.com/security/cve/CVE-2019-2989.html https://www.suse.com/security/cve/CVE-2019-2992.html https://www.suse.com/security/cve/CVE-2019-2999.html https://bugzilla.suse.com/1152856 https://bugzilla.suse.com/1154212

1 0

openSUSE-RU-2019:2561-1: moderate: Recommended update for brltty
by maintenance＠opensuse.org 25 Nov '19

25 Nov '19

openSUSE Recommended Update: Recommended update for brltty ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2561-1 Rating: moderate References: #1007652 #1093378 #1093455 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for brltty fixes the following issues: - Change udev rule again to also not automatically use the braille driver for USB IDs 10c4:ea60 and 10c4:ea80 as these are generic IDs of generic UART bridges and should not be used for higher level devices. (bsc#1093378, bsc#1093455, bsc#1007652) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2561=1 Package List: - openSUSE Leap 15.0 (x86_64): brlapi-devel-5.5-lp150.4.3.1 brlapi-java-5.5-lp150.4.3.1 brlapi-java-debuginfo-5.5-lp150.4.3.1 brltty-5.5-lp150.4.3.1 brltty-debuginfo-5.5-lp150.4.3.1 brltty-debugsource-5.5-lp150.4.3.1 brltty-driver-at-spi2-5.5-lp150.4.3.1 brltty-driver-at-spi2-debuginfo-5.5-lp150.4.3.1 brltty-driver-brlapi-5.5-lp150.4.3.1 brltty-driver-brlapi-debuginfo-5.5-lp150.4.3.1 brltty-driver-espeak-5.5-lp150.4.3.1 brltty-driver-espeak-debuginfo-5.5-lp150.4.3.1 brltty-driver-libbraille-5.5-lp150.4.3.1 brltty-driver-libbraille-debuginfo-5.5-lp150.4.3.1 brltty-driver-speech-dispatcher-5.5-lp150.4.3.1 brltty-driver-speech-dispatcher-debuginfo-5.5-lp150.4.3.1 brltty-driver-xwindow-5.5-lp150.4.3.1 brltty-driver-xwindow-debuginfo-5.5-lp150.4.3.1 brltty-utils-5.5-lp150.4.3.1 brltty-utils-debuginfo-5.5-lp150.4.3.1 libbrlapi0_6-5.5-lp150.4.3.1 libbrlapi0_6-debuginfo-5.5-lp150.4.3.1 ocaml-brlapi-5.5-lp150.4.3.1 ocaml-brlapi-debuginfo-5.5-lp150.4.3.1 python3-brlapi-5.5-lp150.4.3.1 python3-brlapi-debuginfo-5.5-lp150.4.3.1 tcl-brlapi-5.5-lp150.4.3.1 tcl-brlapi-debuginfo-5.5-lp150.4.3.1 xbrlapi-5.5-lp150.4.3.1 xbrlapi-debuginfo-5.5-lp150.4.3.1 - openSUSE Leap 15.0 (noarch): brltty-lang-5.5-lp150.4.3.1 References: https://bugzilla.suse.com/1007652 https://bugzilla.suse.com/1093378 https://bugzilla.suse.com/1093455

1 0

openSUSE-RU-2019:2563-1: moderate: Recommended update for brltty
by maintenance＠opensuse.org 25 Nov '19

25 Nov '19

openSUSE Recommended Update: Recommended update for brltty ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2563-1 Rating: moderate References: #1007652 #1093378 #1093455 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for brltty fixes the following issues: - Change udev rule again to also not automatically use the braille driver for USB IDs 10c4:ea60 and 10c4:ea80 as these are generic IDs of generic UART bridges and should not be used for higher level devices. (bsc#1093378, bsc#1093455, bsc#1007652) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2563=1 Package List: - openSUSE Leap 15.1 (noarch): brltty-lang-5.5-lp151.5.3.1 - openSUSE Leap 15.1 (x86_64): brlapi-devel-5.5-lp151.5.3.1 brlapi-java-5.5-lp151.5.3.1 brlapi-java-debuginfo-5.5-lp151.5.3.1 brltty-5.5-lp151.5.3.1 brltty-debuginfo-5.5-lp151.5.3.1 brltty-debugsource-5.5-lp151.5.3.1 brltty-driver-at-spi2-5.5-lp151.5.3.1 brltty-driver-at-spi2-debuginfo-5.5-lp151.5.3.1 brltty-driver-brlapi-5.5-lp151.5.3.1 brltty-driver-brlapi-debuginfo-5.5-lp151.5.3.1 brltty-driver-espeak-5.5-lp151.5.3.1 brltty-driver-espeak-debuginfo-5.5-lp151.5.3.1 brltty-driver-libbraille-5.5-lp151.5.3.1 brltty-driver-libbraille-debuginfo-5.5-lp151.5.3.1 brltty-driver-speech-dispatcher-5.5-lp151.5.3.1 brltty-driver-speech-dispatcher-debuginfo-5.5-lp151.5.3.1 brltty-driver-xwindow-5.5-lp151.5.3.1 brltty-driver-xwindow-debuginfo-5.5-lp151.5.3.1 brltty-utils-5.5-lp151.5.3.1 brltty-utils-debuginfo-5.5-lp151.5.3.1 libbrlapi0_6-5.5-lp151.5.3.1 libbrlapi0_6-debuginfo-5.5-lp151.5.3.1 ocaml-brlapi-5.5-lp151.5.3.1 ocaml-brlapi-debuginfo-5.5-lp151.5.3.1 python3-brlapi-5.5-lp151.5.3.1 python3-brlapi-debuginfo-5.5-lp151.5.3.1 tcl-brlapi-5.5-lp151.5.3.1 tcl-brlapi-debuginfo-5.5-lp151.5.3.1 xbrlapi-5.5-lp151.5.3.1 xbrlapi-debuginfo-5.5-lp151.5.3.1 References: https://bugzilla.suse.com/1007652 https://bugzilla.suse.com/1093378 https://bugzilla.suse.com/1093455

1 0

openSUSE-RU-2019:2564-1: moderate: Recommended update for brp-check-suse
by maintenance＠opensuse.org 25 Nov '19

25 Nov '19

openSUSE Recommended Update: Recommended update for brp-check-suse ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2564-1 Rating: moderate References: #1114695 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for brp-check-suse fixes the following issues: - Deal with libs where file outputs more text after "not stripped". (bsc#1114695) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2564=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): brp-check-suse-84.87+git20181106.224b37d-lp151.3.3.1 References: https://bugzilla.suse.com/1114695

1 0

openSUSE-RU-2019:2562-1: moderate: Recommended update for brp-check-suse
by maintenance＠opensuse.org 25 Nov '19

25 Nov '19

openSUSE Recommended Update: Recommended update for brp-check-suse ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2562-1 Rating: moderate References: #1114695 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for brp-check-suse fixes the following issues: - Deal with libs where file outputs more text after "not stripped". (bsc#1114695) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2562=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): brp-check-suse-84.87+git20181106.224b37d-lp150.2.3.1 References: https://bugzilla.suse.com/1114695

1 0

openSUSE-RU-2019:2560-1: moderate: Recommended update for tftp
by maintenance＠opensuse.org 24 Nov '19

24 Nov '19

openSUSE Recommended Update: Recommended update for tftp ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2560-1 Rating: moderate References: #1153625 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for tftp fixes the following issues: - Add tftp.socket requirement to the service unit section. (bsc#1153625) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2560=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): tftp-5.2-lp150.4.3.1 tftp-debuginfo-5.2-lp150.4.3.1 tftp-debugsource-5.2-lp150.4.3.1 References: https://bugzilla.suse.com/1153625

1 0

openSUSE-RU-2019:2559-1: moderate: Recommended update for fwupdate
by maintenance＠opensuse.org 24 Nov '19

24 Nov '19

openSUSE Recommended Update: Recommended update for fwupdate ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2559-1 Rating: moderate References: #1152928 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for fwupdate fixes the following issues: - Add update to the linker script for AArch64 to match the one in gnu-efi. (bsc#1152928) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2559=1 Package List: - openSUSE Leap 15.1 (x86_64): fwupdate-12-lp151.4.3.1 fwupdate-debuginfo-12-lp151.4.3.1 fwupdate-debugsource-12-lp151.4.3.1 fwupdate-devel-12-lp151.4.3.1 fwupdate-efi-12-lp151.4.3.1 fwupdate-efi-debuginfo-12-lp151.4.3.1 libfwup1-12-lp151.4.3.1 libfwup1-debuginfo-12-lp151.4.3.1 References: https://bugzilla.suse.com/1152928

1 0

openSUSE-SU-2019:2558-1: moderate: Security update for apache2-mod_perl
by opensuse-security＠opensuse.org 24 Nov '19

24 Nov '19

openSUSE Security Update: Security update for apache2-mod_perl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2558-1 Rating: moderate References: #1091625 #1156944 Cross-References: CVE-2011-2767 Affected Products: openSUSE Backports SLE-15-SP1 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for apache2-mod_perl to version 2.0.11 fixes the following issues: Security issue fixed: - CVE-2011-2767: Fixed a vulnerability which could have allowed perl code execution in the context of user account (bsc#1156944). Other issue addressed: - Restore process name after sv_setpv_mg() call. (bsc#1091625) This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2558=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-2558=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): apache2-mod_perl-2.0.11-bp151.4.3.1 apache2-mod_perl-debuginfo-2.0.11-bp151.4.3.1 apache2-mod_perl-debugsource-2.0.11-bp151.4.3.1 apache2-mod_perl-devel-2.0.11-bp151.4.3.1 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): apache2-mod_perl-2.0.11-bp150.3.3.1 apache2-mod_perl-devel-2.0.11-bp150.3.3.1 References: https://www.suse.com/security/cve/CVE-2011-2767.html https://bugzilla.suse.com/1091625 https://bugzilla.suse.com/1156944

1 0