December 2019 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2019:2631-1: important: Security update for ucode-intel
by opensuse-security＠opensuse.org 03 Dec '19

03 Dec '19

openSUSE Security Update: Security update for ucode-intel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2631-1 Rating: important References: #1157004 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for ucode-intel fixes the following issues: - Updated to 20191115 security release (bsc#1157004) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2631=1 Package List: - openSUSE Leap 15.1 (x86_64): ucode-intel-20191115-lp151.2.15.1 References: https://bugzilla.suse.com/1157004

1 0

openSUSE-RU-2019:2623-1: moderate: Recommended update for cups-filters
by maintenance＠opensuse.org 03 Dec '19

03 Dec '19

openSUSE Recommended Update: Recommended update for cups-filters ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2623-1 Rating: moderate References: #1128167 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for cups-filters fixes the following issues: - Fixed the "No destination host name supplied by cups-browsed" error that occurs if "LocalQueueNamingRemoteCUPS RemoteName" is set in cups-browsed.conf (bsc#1128167) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2623=1 Package List: - openSUSE Leap 15.0 (x86_64): cups-filters-1.20.3-lp150.2.6.1 cups-filters-debuginfo-1.20.3-lp150.2.6.1 cups-filters-debugsource-1.20.3-lp150.2.6.1 cups-filters-devel-1.20.3-lp150.2.6.1 References: https://bugzilla.suse.com/1128167

1 0

openSUSE-RU-2019:2618-1: moderate: Recommended update for suse-xsl-stylesheets
by maintenance＠opensuse.org 03 Dec '19

03 Dec '19

openSUSE Recommended Update: Recommended update for suse-xsl-stylesheets ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2618-1 Rating: moderate References: #1157783 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for suse-xsl-stylesheets fixes the following issues: - Fix old documentation link to add https protocol. (bsc#1157783) - Fix for SUSE XSL stylesheets. (bsc#1157783) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2618=1 Package List: - openSUSE Leap 15.0 (noarch): suse-xsl-stylesheets-2.0.15-lp150.2.6.1 References: https://bugzilla.suse.com/1157783

1 0

openSUSE-SU-2019:2629-1: Security update for libxml2
by opensuse-security＠opensuse.org 03 Dec '19

03 Dec '19

openSUSE Security Update: Security update for libxml2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2629-1 Rating: low References: #1123919 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for libxml2 doesn't fix any additional security issues, but correct its rpm changelog to reflect all CVEs that have been fixed over the past. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2629=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libxml2-2-2.9.7-lp150.2.14.1 libxml2-2-debuginfo-2.9.7-lp150.2.14.1 libxml2-debugsource-2.9.7-lp150.2.14.1 libxml2-devel-2.9.7-lp150.2.14.1 libxml2-tools-2.9.7-lp150.2.14.1 libxml2-tools-debuginfo-2.9.7-lp150.2.14.1 - openSUSE Leap 15.0 (noarch): libxml2-doc-2.9.7-lp150.2.14.1 - openSUSE Leap 15.0 (x86_64): libxml2-2-32bit-2.9.7-lp150.2.14.1 libxml2-2-32bit-debuginfo-2.9.7-lp150.2.14.1 libxml2-devel-32bit-2.9.7-lp150.2.14.1 References: https://bugzilla.suse.com/1123919

1 0

openSUSE-RU-2019:2624-1: moderate: Recommended update for pacemaker
by maintenance＠opensuse.org 03 Dec '19

03 Dec '19

openSUSE Recommended Update: Recommended update for pacemaker ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2624-1 Rating: moderate References: #1151007 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for pacemaker fixes the following issues: - Fixes and improvements for fencer. (bsc#1151007) - Indicate fencing target in the logs when scheduling and executing fencing command and improved log messages. - Make sure concurrent fencing commands get triggered to execute. - Other commands and actions cannot be blocked by pending on the fencing. - No need to check the length of a non-empty list for pending fencing actions. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2624=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libpacemaker-devel-1.1.18+20180430.b12c320f5-lp150.2.20.1 libpacemaker3-1.1.18+20180430.b12c320f5-lp150.2.20.1 libpacemaker3-debuginfo-1.1.18+20180430.b12c320f5-lp150.2.20.1 pacemaker-1.1.18+20180430.b12c320f5-lp150.2.20.1 pacemaker-cli-1.1.18+20180430.b12c320f5-lp150.2.20.1 pacemaker-cli-debuginfo-1.1.18+20180430.b12c320f5-lp150.2.20.1 pacemaker-debuginfo-1.1.18+20180430.b12c320f5-lp150.2.20.1 pacemaker-debugsource-1.1.18+20180430.b12c320f5-lp150.2.20.1 pacemaker-remote-1.1.18+20180430.b12c320f5-lp150.2.20.1 pacemaker-remote-debuginfo-1.1.18+20180430.b12c320f5-lp150.2.20.1 - openSUSE Leap 15.0 (noarch): pacemaker-cts-1.1.18+20180430.b12c320f5-lp150.2.20.1 References: https://bugzilla.suse.com/1151007

1 0

openSUSE-RU-2019:2627-1: moderate: Recommended update for python
by maintenance＠opensuse.org 03 Dec '19

03 Dec '19

openSUSE Recommended Update: Recommended update for python ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2627-1 Rating: moderate References: #1149792 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python fixes the following issues: - Skipping tests for failing build with OpenSSL 1.1.1c. (bpo#36576, bsc#1149792) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2627=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): python-2.7.14-lp150.6.25.1 python-curses-2.7.14-lp150.6.25.1 python-curses-debuginfo-2.7.14-lp150.6.25.1 python-debuginfo-2.7.14-lp150.6.25.1 python-debugsource-2.7.14-lp150.6.25.1 python-demo-2.7.14-lp150.6.25.1 python-gdbm-2.7.14-lp150.6.25.1 python-gdbm-debuginfo-2.7.14-lp150.6.25.1 python-idle-2.7.14-lp150.6.25.1 python-tk-2.7.14-lp150.6.25.1 python-tk-debuginfo-2.7.14-lp150.6.25.1 - openSUSE Leap 15.0 (x86_64): python-32bit-2.7.14-lp150.6.25.1 python-32bit-debuginfo-2.7.14-lp150.6.25.1 References: https://bugzilla.suse.com/1149792

1 0

openSUSE-RU-2019:2619-1: Recommended update for apr-util
by maintenance＠opensuse.org 03 Dec '19

03 Dec '19

openSUSE Recommended Update: Recommended update for apr-util ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2619-1 Rating: low References: #1149792 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for apr-util provides the following fix: - Fix the package build by adding the missing zlib-devel build dependency. It used to be pulled in by libopenssl-devel but has changed. (bsc#1149792) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2619=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): apr-util-debuginfo-1.6.1-lp150.8.1 apr-util-debugsource-1.6.1-lp150.8.1 apr-util-devel-1.6.1-lp150.8.1 libapr-util1-1.6.1-lp150.8.1 libapr-util1-dbd-mysql-1.6.1-lp150.8.1 libapr-util1-dbd-mysql-debuginfo-1.6.1-lp150.8.1 libapr-util1-dbd-pgsql-1.6.1-lp150.8.1 libapr-util1-dbd-pgsql-debuginfo-1.6.1-lp150.8.1 libapr-util1-dbd-sqlite3-1.6.1-lp150.8.1 libapr-util1-dbd-sqlite3-debuginfo-1.6.1-lp150.8.1 libapr-util1-debuginfo-1.6.1-lp150.8.1 References: https://bugzilla.suse.com/1149792

1 0

openSUSE-SU-2019:2615-1: moderate: Security update for libarchive
by opensuse-security＠opensuse.org 03 Dec '19

03 Dec '19

openSUSE Security Update: Security update for libarchive ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2615-1 Rating: moderate References: #1120653 #1120654 #1124341 #1124342 #1155079 Cross-References: CVE-2018-1000877 CVE-2018-1000878 CVE-2019-1000019 CVE-2019-1000020 CVE-2019-18408 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for libarchive fixes the following issues: Security issues fixed: - CVE-2018-1000877: Fixed a double free vulnerability in RAR decoder (bsc#1120653). - CVE-2018-1000878: Fixed a Use-After-Free vulnerability in RAR decoder (bsc#1120654). - CVE-2019-1000019: Fixed an Out-Of-Bounds Read vulnerability in 7zip decompression (bsc#1124341). - CVE-2019-1000020: Fixed an Infinite Loop vulnerability in ISO9660 parser (bsc#1124342). - CVE-2019-18408: Fixed a use-after-free in RAR format support (bsc#1155079). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2615=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): bsdtar-3.3.2-lp150.10.1 bsdtar-debuginfo-3.3.2-lp150.10.1 libarchive-debugsource-3.3.2-lp150.10.1 libarchive-devel-3.3.2-lp150.10.1 libarchive13-3.3.2-lp150.10.1 libarchive13-debuginfo-3.3.2-lp150.10.1 - openSUSE Leap 15.0 (x86_64): libarchive13-32bit-3.3.2-lp150.10.1 libarchive13-32bit-debuginfo-3.3.2-lp150.10.1 References: https://www.suse.com/security/cve/CVE-2018-1000877.html https://www.suse.com/security/cve/CVE-2018-1000878.html https://www.suse.com/security/cve/CVE-2019-1000019.html https://www.suse.com/security/cve/CVE-2019-1000020.html https://www.suse.com/security/cve/CVE-2019-18408.html https://bugzilla.suse.com/1120653 https://bugzilla.suse.com/1120654 https://bugzilla.suse.com/1124341 https://bugzilla.suse.com/1124342 https://bugzilla.suse.com/1155079

1 0

openSUSE-SU-2019:2620-1: important: Security update for ucode-intel
by opensuse-security＠opensuse.org 03 Dec '19

03 Dec '19

openSUSE Security Update: Security update for ucode-intel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2620-1 Rating: important References: #1157004 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for ucode-intel fixes the following issues: - Updated to 20191115 official security release (bsc#1157004) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2620=1 Package List: - openSUSE Leap 15.0 (x86_64): ucode-intel-20191115-lp150.2.36.1 References: https://bugzilla.suse.com/1157004

1 0

openSUSE-SU-2019:2612-1: Security update for libxml2
by opensuse-security＠opensuse.org 03 Dec '19

03 Dec '19

openSUSE Security Update: Security update for libxml2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2612-1 Rating: low References: #1123919 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for libxml2 doesn't fix any additional security issues, but correct its rpm changelog to reflect all CVEs that have been fixed over the past. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2612=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libxml2-2-2.9.7-lp151.5.6.1 libxml2-2-debuginfo-2.9.7-lp151.5.6.1 libxml2-debugsource-2.9.7-lp151.5.6.1 libxml2-devel-2.9.7-lp151.5.6.1 libxml2-tools-2.9.7-lp151.5.6.1 libxml2-tools-debuginfo-2.9.7-lp151.5.6.1 python-libxml2-python-debugsource-2.9.7-lp151.5.6.1 python2-libxml2-python-2.9.7-lp151.5.6.1 python2-libxml2-python-debuginfo-2.9.7-lp151.5.6.1 python3-libxml2-python-2.9.7-lp151.5.6.1 python3-libxml2-python-debuginfo-2.9.7-lp151.5.6.1 - openSUSE Leap 15.1 (x86_64): libxml2-2-32bit-2.9.7-lp151.5.6.1 libxml2-2-32bit-debuginfo-2.9.7-lp151.5.6.1 libxml2-devel-32bit-2.9.7-lp151.5.6.1 - openSUSE Leap 15.1 (noarch): libxml2-doc-2.9.7-lp151.5.6.1 References: https://bugzilla.suse.com/1123919

1 0