December 2019 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2019:2700-1: important: Security update for samba
by opensuse-security＠opensuse.org 22 Dec '19

22 Dec '19

openSUSE Security Update: Security update for samba ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2700-1 Rating: important References: #1158108 #1158109 Cross-References: CVE-2019-14861 CVE-2019-14870 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for samba fixes the following issues: - CVE-2019-14861: Fixed a DNSServer RPC server crash, that allowed an authenticated user to crash the DCE/RPC DNS management server by creating records with matching the zone name (bsc#1158108). - CVE-2019-14870: Fixed a DelegationNotAllowed not being enforced (bsc#1158109). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2700=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): ctdb-4.9.5+git.224.86a8e66adea-lp151.2.12.1 ctdb-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 ctdb-pcp-pmda-4.9.5+git.224.86a8e66adea-lp151.2.12.1 ctdb-pcp-pmda-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 ctdb-tests-4.9.5+git.224.86a8e66adea-lp151.2.12.1 ctdb-tests-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libdcerpc-binding0-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libdcerpc-binding0-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libdcerpc-devel-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libdcerpc-samr-devel-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libdcerpc-samr0-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libdcerpc-samr0-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libdcerpc0-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libdcerpc0-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libndr-devel-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libndr-krb5pac-devel-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libndr-krb5pac0-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libndr-krb5pac0-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libndr-nbt-devel-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libndr-nbt0-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libndr-nbt0-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libndr-standard-devel-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libndr-standard0-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libndr-standard0-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libndr0-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libndr0-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libnetapi-devel-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libnetapi0-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libnetapi0-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-credentials-devel-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-credentials0-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-credentials0-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-errors-devel-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-errors0-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-errors0-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-hostconfig-devel-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-hostconfig0-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-hostconfig0-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-passdb-devel-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-passdb0-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-passdb0-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-policy-devel-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-policy-python-devel-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-policy-python3-devel-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-policy0-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-policy0-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-policy0-python3-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-policy0-python3-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-util-devel-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-util0-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-util0-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamdb-devel-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamdb0-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamdb0-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsmbclient-devel-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsmbclient0-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsmbclient0-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsmbconf-devel-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsmbconf0-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsmbconf0-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsmbldap-devel-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsmbldap2-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsmbldap2-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libtevent-util-devel-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libtevent-util0-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libtevent-util0-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libwbclient-devel-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libwbclient0-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libwbclient0-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-ad-dc-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-ad-dc-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-client-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-client-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-core-devel-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-debugsource-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-dsdb-modules-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-dsdb-modules-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-libs-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-libs-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-libs-python-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-libs-python-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-libs-python3-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-libs-python3-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-pidl-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-python-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-python-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-python3-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-python3-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-test-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-test-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-winbind-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-winbind-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 - openSUSE Leap 15.1 (noarch): samba-doc-4.9.5+git.224.86a8e66adea-lp151.2.12.1 - openSUSE Leap 15.1 (x86_64): libdcerpc-binding0-32bit-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libdcerpc-binding0-32bit-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libdcerpc-samr0-32bit-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libdcerpc-samr0-32bit-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libdcerpc0-32bit-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libdcerpc0-32bit-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libndr-krb5pac0-32bit-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libndr-krb5pac0-32bit-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libndr-nbt0-32bit-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libndr-nbt0-32bit-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libndr-standard0-32bit-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libndr-standard0-32bit-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libndr0-32bit-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libndr0-32bit-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libnetapi0-32bit-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libnetapi0-32bit-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-credentials0-32bit-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-credentials0-32bit-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-errors0-32bit-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-errors0-32bit-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-hostconfig0-32bit-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-hostconfig0-32bit-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-passdb0-32bit-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-passdb0-32bit-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-policy0-32bit-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-policy0-32bit-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-policy0-python3-32bit-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-policy0-python3-32bit-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-util0-32bit-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-util0-32bit-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamdb0-32bit-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamdb0-32bit-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsmbclient0-32bit-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsmbclient0-32bit-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsmbconf0-32bit-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsmbconf0-32bit-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsmbldap2-32bit-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsmbldap2-32bit-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libtevent-util0-32bit-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libtevent-util0-32bit-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libwbclient0-32bit-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libwbclient0-32bit-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-ad-dc-32bit-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-ad-dc-32bit-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-ceph-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-ceph-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-client-32bit-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-client-32bit-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-libs-32bit-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-libs-32bit-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-libs-python-32bit-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-libs-python-32bit-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-libs-python3-32bit-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-libs-python3-32bit-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-winbind-32bit-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-winbind-32bit-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 References: https://www.suse.com/security/cve/CVE-2019-14861.html https://www.suse.com/security/cve/CVE-2019-14870.html https://bugzilla.suse.com/1158108 https://bugzilla.suse.com/1158109

1 0

openSUSE-RU-2019:2703-1: Recommended update to python-tornado
by maintenance＠opensuse.org 22 Dec '19

22 Dec '19

openSUSE Recommended Update: Recommended update to python-tornado ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2703-1 Rating: low References: #1149792 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: - Add patch to skip tests failing with OpenSSL 1.1.1 (bsc#1149792) * it happens only when using TLS 1.3, so if user wants to use tornado, they can hand disable the TLS 1.3 and continue This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2703=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): python-tornado-debuginfo-4.5.3-lp151.3.3.1 python-tornado-debugsource-4.5.3-lp151.3.3.1 python2-tornado-4.5.3-lp151.3.3.1 python2-tornado-debuginfo-4.5.3-lp151.3.3.1 python3-tornado-4.5.3-lp151.3.3.1 python3-tornado-debuginfo-4.5.3-lp151.3.3.1 References: https://bugzilla.suse.com/1149792

1 0

openSUSE-RU-2019:2702-1: moderate: Recommended update for irqbalance
by maintenance＠opensuse.org 22 Dec '19

22 Dec '19

openSUSE Recommended Update: Recommended update for irqbalance ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2702-1 Rating: moderate References: #1119461 #1138190 #1154905 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for irqbalance fixes the following issues: - Irqbalanced is supposed to spread the load for NVMe. (bsc#1119461, bsc#1154905, bsc#1138190) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2702=1 Package List: - openSUSE Leap 15.1 (x86_64): irqbalance-1.4.0-lp151.2.3.1 irqbalance-debuginfo-1.4.0-lp151.2.3.1 irqbalance-debugsource-1.4.0-lp151.2.3.1 References: https://bugzilla.suse.com/1119461 https://bugzilla.suse.com/1138190 https://bugzilla.suse.com/1154905

1 0

openSUSE-RU-2019:2701-1: moderate: Recommended update for autoyast2
by maintenance＠opensuse.org 22 Dec '19

22 Dec '19

openSUSE Recommended Update: Recommended update for autoyast2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2701-1 Rating: moderate References: #1154855 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for autoyast2 fixes the following issues: - During firstboot 'ayast_setup' function is not executed. (bsc#1154855) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2701=1 Package List: - openSUSE Leap 15.1 (noarch): autoyast2-4.1.7-lp151.2.3.1 autoyast2-installation-4.1.7-lp151.2.3.1 References: https://bugzilla.suse.com/1154855

1 0

openSUSE-RU-2019:2699-1: moderate: Recommended update for libfabric
by maintenance＠opensuse.org 22 Dec '19

22 Dec '19

openSUSE Recommended Update: Recommended update for libfabric ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2699-1 Rating: moderate References: #1036907 #1089190 #1133235 #1155865 #990184 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: This update for libfabric fixes the following issues: - Support Libfabric 1.8 or later (1.8.1). (bsc#1155865) - Disable LTO to avoid build failure in libfabric. (bsc#1133235). - Fix for OS X 'clock_gettime()' portability issue. (bsc#1036907) - Updated default counter wait object for improved performance. (bsc#1036907) - Fix multi-threaded RMA progress stalls. (bsc#1036907) - Updated default counter wait object for improved performance. (bsc#1036907) - Fix error in fi_cq_sreadfrom aborting before timeout expires. (bsc#1036907) - Fix handling of apps that call fork. Move ibv_fork_init() before calling any other verbs call. (bsc#1036907) - Fix crash in fi_write when connection is not yet established and write data size is below inline threshold. (bsc#1036907) - Fix issues not handling multiple ipoib interfaces. (bsc#1036907) - Including libfabric in Factory. (bsc#990184) - Update to version 1.3.0 for better PSM2 support as suggested. (fate#319253). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2699=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libfabric-1.8.1-lp151.2.3.1 libfabric-debuginfo-1.8.1-lp151.2.3.1 libfabric-debugsource-1.8.1-lp151.2.3.1 libfabric-devel-1.8.1-lp151.2.3.1 libfabric1-1.8.1-lp151.2.3.1 libfabric1-debuginfo-1.8.1-lp151.2.3.1 - openSUSE Leap 15.1 (x86_64): libfabric-devel-32bit-1.8.1-lp151.2.3.1 libfabric1-32bit-1.8.1-lp151.2.3.1 libfabric1-32bit-debuginfo-1.8.1-lp151.2.3.1 References: https://bugzilla.suse.com/1036907 https://bugzilla.suse.com/1089190 https://bugzilla.suse.com/1133235 https://bugzilla.suse.com/1155865 https://bugzilla.suse.com/990184

1 0

openSUSE-SU-2019:2698-1: moderate: Security update for mariadb
by opensuse-security＠opensuse.org 22 Dec '19

22 Dec '19

openSUSE Security Update: Security update for mariadb ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2698-1 Rating: moderate References: #1156669 Cross-References: CVE-2019-2737 CVE-2019-2739 CVE-2019-2740 CVE-2019-2758 CVE-2019-2805 CVE-2019-2938 CVE-2019-2974 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: This update for mariadb to version 10.2.29 fixes the following issues: MariaDB was updated to 10.2.29 (bsc#1156669) Security issues fixed: - CVE-2019-2737: Fixed an issue where could lead a remote attacker to cause denial of service - CVE-2019-2938: Fixed an issue where could lead a remote attacker to cause denial of service - CVE-2019-2740: Fixed an issue where could lead a local attacker to cause denial of service - CVE-2019-2805: Fixed an issue where could lead a local attacker to cause denial of service - CVE-2019-2974: Fixed an issue where could lead a remote attacker to cause denial of service - CVE-2019-2758: Fixed an issue where could lead a local attacker to cause denial of service or data corruption - CVE-2019-2739: Fixed an issue where could lead a local attacker to cause denial of service or data corruption This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2698=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libmysqld-devel-10.2.29-lp151.2.9.1 libmysqld19-10.2.29-lp151.2.9.1 libmysqld19-debuginfo-10.2.29-lp151.2.9.1 mariadb-10.2.29-lp151.2.9.1 mariadb-bench-10.2.29-lp151.2.9.1 mariadb-bench-debuginfo-10.2.29-lp151.2.9.1 mariadb-client-10.2.29-lp151.2.9.1 mariadb-client-debuginfo-10.2.29-lp151.2.9.1 mariadb-debuginfo-10.2.29-lp151.2.9.1 mariadb-debugsource-10.2.29-lp151.2.9.1 mariadb-galera-10.2.29-lp151.2.9.1 mariadb-test-10.2.29-lp151.2.9.1 mariadb-test-debuginfo-10.2.29-lp151.2.9.1 mariadb-tools-10.2.29-lp151.2.9.1 mariadb-tools-debuginfo-10.2.29-lp151.2.9.1 - openSUSE Leap 15.1 (noarch): mariadb-errormessages-10.2.29-lp151.2.9.1 References: https://www.suse.com/security/cve/CVE-2019-2737.html https://www.suse.com/security/cve/CVE-2019-2739.html https://www.suse.com/security/cve/CVE-2019-2740.html https://www.suse.com/security/cve/CVE-2019-2758.html https://www.suse.com/security/cve/CVE-2019-2805.html https://www.suse.com/security/cve/CVE-2019-2938.html https://www.suse.com/security/cve/CVE-2019-2974.html https://bugzilla.suse.com/1156669

1 0

openSUSE-RU-2019:2696-1: moderate: Recommended update for mariadb-connector-c
by maintenance＠opensuse.org 21 Dec '19

21 Dec '19

openSUSE Recommended Update: Recommended update for mariadb-connector-c ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2696-1 Rating: moderate References: #1156669 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for mariadb-connector-c fixes the following issues: New upstream version 3.1.5 (bsc#1156669) - Plugin dialog could not be loaded (wrong path) - Fix for unknown/not handled schannel error codes - Use windows crypto libraries on Windows platforms - Fix crash in GnuTLS when key and certificate are in the same file - Fix location of PLUGINDIR if Connector/C is a subproject This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2696=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libmariadb-devel-3.1.5-lp151.3.6.1 libmariadb-devel-debuginfo-3.1.5-lp151.3.6.1 libmariadb3-3.1.5-lp151.3.6.1 libmariadb3-debuginfo-3.1.5-lp151.3.6.1 libmariadb_plugins-3.1.5-lp151.3.6.1 libmariadb_plugins-debuginfo-3.1.5-lp151.3.6.1 libmariadbprivate-3.1.5-lp151.3.6.1 libmariadbprivate-debuginfo-3.1.5-lp151.3.6.1 mariadb-connector-c-debugsource-3.1.5-lp151.3.6.1 - openSUSE Leap 15.1 (x86_64): libmariadb3-32bit-3.1.5-lp151.3.6.1 libmariadb3-32bit-debuginfo-3.1.5-lp151.3.6.1 References: https://bugzilla.suse.com/1156669

1 0

openSUSE-RU-2019:2697-1: moderate: Recommended update for sssd
by maintenance＠opensuse.org 21 Dec '19

21 Dec '19

openSUSE Recommended Update: Recommended update for sssd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2697-1 Rating: moderate References: #1156856 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for sssd fixes the following issues: - Update winbind idmap plugin to support interface version 6. (bsc#1156856, jsc#SLE-9819) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2697=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libipa_hbac-devel-1.16.1-lp151.7.12.1 libipa_hbac0-1.16.1-lp151.7.12.1 libipa_hbac0-debuginfo-1.16.1-lp151.7.12.1 libnfsidmap-sss-1.16.1-lp151.7.12.1 libnfsidmap-sss-debuginfo-1.16.1-lp151.7.12.1 libsss_certmap-devel-1.16.1-lp151.7.12.1 libsss_certmap0-1.16.1-lp151.7.12.1 libsss_certmap0-debuginfo-1.16.1-lp151.7.12.1 libsss_idmap-devel-1.16.1-lp151.7.12.1 libsss_idmap0-1.16.1-lp151.7.12.1 libsss_idmap0-debuginfo-1.16.1-lp151.7.12.1 libsss_nss_idmap-devel-1.16.1-lp151.7.12.1 libsss_nss_idmap0-1.16.1-lp151.7.12.1 libsss_nss_idmap0-debuginfo-1.16.1-lp151.7.12.1 libsss_simpleifp-devel-1.16.1-lp151.7.12.1 libsss_simpleifp0-1.16.1-lp151.7.12.1 libsss_simpleifp0-debuginfo-1.16.1-lp151.7.12.1 python3-ipa_hbac-1.16.1-lp151.7.12.1 python3-ipa_hbac-debuginfo-1.16.1-lp151.7.12.1 python3-sss-murmur-1.16.1-lp151.7.12.1 python3-sss-murmur-debuginfo-1.16.1-lp151.7.12.1 python3-sss_nss_idmap-1.16.1-lp151.7.12.1 python3-sss_nss_idmap-debuginfo-1.16.1-lp151.7.12.1 python3-sssd-config-1.16.1-lp151.7.12.1 python3-sssd-config-debuginfo-1.16.1-lp151.7.12.1 sssd-1.16.1-lp151.7.12.1 sssd-ad-1.16.1-lp151.7.12.1 sssd-ad-debuginfo-1.16.1-lp151.7.12.1 sssd-dbus-1.16.1-lp151.7.12.1 sssd-dbus-debuginfo-1.16.1-lp151.7.12.1 sssd-debuginfo-1.16.1-lp151.7.12.1 sssd-debugsource-1.16.1-lp151.7.12.1 sssd-ipa-1.16.1-lp151.7.12.1 sssd-ipa-debuginfo-1.16.1-lp151.7.12.1 sssd-krb5-1.16.1-lp151.7.12.1 sssd-krb5-common-1.16.1-lp151.7.12.1 sssd-krb5-common-debuginfo-1.16.1-lp151.7.12.1 sssd-krb5-debuginfo-1.16.1-lp151.7.12.1 sssd-ldap-1.16.1-lp151.7.12.1 sssd-ldap-debuginfo-1.16.1-lp151.7.12.1 sssd-proxy-1.16.1-lp151.7.12.1 sssd-proxy-debuginfo-1.16.1-lp151.7.12.1 sssd-tools-1.16.1-lp151.7.12.1 sssd-tools-debuginfo-1.16.1-lp151.7.12.1 sssd-wbclient-1.16.1-lp151.7.12.1 sssd-wbclient-debuginfo-1.16.1-lp151.7.12.1 sssd-wbclient-devel-1.16.1-lp151.7.12.1 sssd-winbind-idmap-1.16.1-lp151.7.12.1 sssd-winbind-idmap-debuginfo-1.16.1-lp151.7.12.1 - openSUSE Leap 15.1 (x86_64): sssd-32bit-1.16.1-lp151.7.12.1 sssd-32bit-debuginfo-1.16.1-lp151.7.12.1 References: https://bugzilla.suse.com/1156856

1 0

openSUSE-RU-2019:2695-1: moderate: Recommended update for gnu-compilers-hpc
by maintenance＠opensuse.org 19 Dec '19

19 Dec '19

openSUSE Recommended Update: Recommended update for gnu-compilers-hpc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2695-1 Rating: moderate References: #1149414 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gnu-compilers-hpc fixes the following issues: - Add support for gcc7 and gcc8 variants of gnu-compilers-hpc (jsc#SLE-7766) - For the base compiler add a 'Provides' for the versioned form. This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2695=1 Package List: - openSUSE Leap 15.1 (noarch): gnu-compilers-hpc-1.4-lp151.2.3.1 gnu-compilers-hpc-devel-1.4-lp151.2.3.1 gnu-compilers-hpc-macros-devel-1.4-lp151.2.3.1 gnu8-compilers-hpc-1.4-lp151.2.3.1 gnu8-compilers-hpc-devel-1.4-lp151.2.3.1 gnu8-compilers-hpc-macros-devel-1.4-lp151.2.3.1 References: https://bugzilla.suse.com/1149414

1 0

openSUSE-SU-2019:2694-1: important: Security update for chromium
by opensuse-security＠opensuse.org 18 Dec '19

18 Dec '19

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2694-1 Rating: important References: #1158982 Cross-References: CVE-2019-13725 CVE-2019-13726 CVE-2019-13727 CVE-2019-13728 CVE-2019-13729 CVE-2019-13730 CVE-2019-13732 CVE-2019-13734 CVE-2019-13735 CVE-2019-13736 CVE-2019-13737 CVE-2019-13738 CVE-2019-13739 CVE-2019-13740 CVE-2019-13741 CVE-2019-13742 CVE-2019-13743 CVE-2019-13744 CVE-2019-13745 CVE-2019-13746 CVE-2019-13747 CVE-2019-13748 CVE-2019-13749 CVE-2019-13750 CVE-2019-13751 CVE-2019-13752 CVE-2019-13753 CVE-2019-13754 CVE-2019-13755 CVE-2019-13756 CVE-2019-13757 CVE-2019-13758 CVE-2019-13759 CVE-2019-13761 CVE-2019-13762 CVE-2019-13763 CVE-2019-13764 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes 37 vulnerabilities is now available. Description: This update for chromium fixes the following issues: Chromium was updated to 79.0.3945.79 (boo#1158982) - CVE-2019-13725: Fixed a use after free in Bluetooth - CVE-2019-13726: Fixed a heap buffer overflow in password manager - CVE-2019-13727: Fixed an insufficient policy enforcement in WebSockets - CVE-2019-13728: Fixed an out of bounds write in V8 - CVE-2019-13729: Fixed a use after free in WebSockets - CVE-2019-13730: Fixed a type Confusion in V8 - CVE-2019-13732: Fixed a use after free in WebAudio - CVE-2019-13734: Fixed an out of bounds write in SQLite - CVE-2019-13735: Fixed an out of bounds write in V8 - CVE-2019-13764: Fixed a type Confusion in V8 - CVE-2019-13736: Fixed an integer overflow in PDFium - CVE-2019-13737: Fixed an insufficient policy enforcement in autocomplete - CVE-2019-13738: Fixed an insufficient policy enforcement in navigation - CVE-2019-13739: Fixed an incorrect security UI in Omnibox - CVE-2019-13740: Fixed an incorrect security UI in sharing - CVE-2019-13741: Fixed an insufficient validation of untrusted input in Blink - CVE-2019-13742: Fixed an incorrect security UI in Omnibox - CVE-2019-13743: Fixed an incorrect security UI in external protocol handling - CVE-2019-13744: Fixed an insufficient policy enforcement in cookies - CVE-2019-13745: Fixed an insufficient policy enforcement in audio - CVE-2019-13746: Fixed an insufficient policy enforcement in Omnibox - CVE-2019-13747: Fixed an uninitialized Use in rendering - CVE-2019-13748: Fixed an insufficient policy enforcement in developer tools - CVE-2019-13749: Fixed an incorrect security UI in Omnibox - CVE-2019-13750: Fixed an insufficient data validation in SQLite - CVE-2019-13751: Fixed an uninitialized Use in SQLite - CVE-2019-13752: Fixed an out of bounds read in SQLite - CVE-2019-13753: Fixed an out of bounds read in SQLite - CVE-2019-13754: Fixed an insufficient policy enforcement in extensions - CVE-2019-13755: Fixed an insufficient policy enforcement in extensions - CVE-2019-13756: Fixed an incorrect security UI in printing - CVE-2019-13757: Fixed an incorrect security UI in Omnibox - CVE-2019-13758: Fixed an insufficient policy enforcement in navigation - CVE-2019-13759: Fixed an incorrect security UI in interstitials - CVE-2019-13761: Fixed an incorrect security UI in Omnibox - CVE-2019-13762: Fixed an insufficient policy enforcement in downloads - CVE-2019-13763: Fixed an insufficient policy enforcement in payments This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2694=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 x86_64): chromedriver-79.0.3945.79-bp151.3.35.1 chromium-79.0.3945.79-bp151.3.35.1 References: https://www.suse.com/security/cve/CVE-2019-13725.html https://www.suse.com/security/cve/CVE-2019-13726.html https://www.suse.com/security/cve/CVE-2019-13727.html https://www.suse.com/security/cve/CVE-2019-13728.html https://www.suse.com/security/cve/CVE-2019-13729.html https://www.suse.com/security/cve/CVE-2019-13730.html https://www.suse.com/security/cve/CVE-2019-13732.html https://www.suse.com/security/cve/CVE-2019-13734.html https://www.suse.com/security/cve/CVE-2019-13735.html https://www.suse.com/security/cve/CVE-2019-13736.html https://www.suse.com/security/cve/CVE-2019-13737.html https://www.suse.com/security/cve/CVE-2019-13738.html https://www.suse.com/security/cve/CVE-2019-13739.html https://www.suse.com/security/cve/CVE-2019-13740.html https://www.suse.com/security/cve/CVE-2019-13741.html https://www.suse.com/security/cve/CVE-2019-13742.html https://www.suse.com/security/cve/CVE-2019-13743.html https://www.suse.com/security/cve/CVE-2019-13744.html https://www.suse.com/security/cve/CVE-2019-13745.html https://www.suse.com/security/cve/CVE-2019-13746.html https://www.suse.com/security/cve/CVE-2019-13747.html https://www.suse.com/security/cve/CVE-2019-13748.html https://www.suse.com/security/cve/CVE-2019-13749.html https://www.suse.com/security/cve/CVE-2019-13750.html https://www.suse.com/security/cve/CVE-2019-13751.html https://www.suse.com/security/cve/CVE-2019-13752.html https://www.suse.com/security/cve/CVE-2019-13753.html https://www.suse.com/security/cve/CVE-2019-13754.html https://www.suse.com/security/cve/CVE-2019-13755.html https://www.suse.com/security/cve/CVE-2019-13756.html https://www.suse.com/security/cve/CVE-2019-13757.html https://www.suse.com/security/cve/CVE-2019-13758.html https://www.suse.com/security/cve/CVE-2019-13759.html https://www.suse.com/security/cve/CVE-2019-13761.html https://www.suse.com/security/cve/CVE-2019-13762.html https://www.suse.com/security/cve/CVE-2019-13763.html https://www.suse.com/security/cve/CVE-2019-13764.html https://bugzilla.suse.com/1158982

1 0